last executing test programs: 4.398683632s ago: executing program 3 (id=1442): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="8fff2ab899ec", 0x0, 0xee2, 0x10013, 0x0, 0x0}) 4.177587885s ago: executing program 3 (id=1443): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x800, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000040)={0x1, 0x1, 0x4000, 0x1, &(0x7f0000000180)="1a", 0x0, 0x0, 0x0}) 3.445376578s ago: executing program 3 (id=1448): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000)=r1, 0x62) 3.215616482s ago: executing program 3 (id=1450): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r0, 0xee01, 0x0) 2.525630472s ago: executing program 3 (id=1455): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000500)={[{@bsdgroups}, {@uqnoenforce}, {@uqnoenforce}, {@gquota}, {@grpquota}, {@nogrpid}, {@gquota}], [{@flag='nomand'}]}, 0x4, 0x9655, &(0x7f000001c300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2900, 0x0) getdents64(r0, 0x0, 0x0) 2.088230177s ago: executing program 1 (id=1462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r0, &(0x7f0000000500), &(0x7f0000000540)=""/25}, 0x20) 1.997049932s ago: executing program 1 (id=1463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r1, 0xc74, 0x5ed32}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) 1.87030657s ago: executing program 1 (id=1465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8, 0x1, 0x1, 0x0, 0x300}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) 1.651030303s ago: executing program 2 (id=1467): r0 = socket$inet(0x2, 0x3, 0x9) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.650159073s ago: executing program 1 (id=1475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) select(0xff42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x77359400}) 1.444805585s ago: executing program 1 (id=1469): r0 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000100)=0x10005, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @private1, 0xf}, 0x1c) 1.317183832s ago: executing program 2 (id=1470): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) 1.18714803s ago: executing program 1 (id=1472): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) 1.007323901s ago: executing program 2 (id=1482): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) close(r0) 769.260905ms ago: executing program 0 (id=1474): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00003b2000/0x1000)=nil, 0x1000, 0x0, 0x800, 0x8000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 656.453671ms ago: executing program 3 (id=1476): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f000000a040)="$eJwUk1Mc34UDRZe37JZtnmzbtm375H5fG8u23VbLtm3XsrH4//wf7ut9OPfcOwc4coCjBnjXAO8e4OgB3jPAewd43wDvH+ADA3xwgA8N8OEBPjLARwf42AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+AbA3xzgG8N8O0BvjPAdwf43gDfH+AHA/xwgB8N8OMBfjLATwf42QA/H+AXAxwzwC8H+NUAvx7gNwP8doDfDfD7Af4wwB8H+NMAfx7gLwP8dYC/DfD3Af4xwLED/HOAfw3w7wH+M8B/B/jfAIcEOE6A4wY4XoDjBzhBgBMGOFGAQwMcFuDEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4PAAZwxwpgBnDnCWAGcNcLYAZw9wjgDnDHCuAOcOcJ4A5w1wvgDnD3CBABcMcKEAFw5wkQAXDXCxABcPcIkACXDJAJcKcOkAlwlw2QCXC3D5AFcIcMUAVwpw5QBXCXDVAFcLcPUA1whwzQDXCnDtANcJcN0A1wtw/QA3CHDDADcKcOMANwlw0wA3C3DzALcIcMsAtwpw6wC3CXDbALcLcPsAdwhwxwB3CnDnAHcJcNcAdwtw9wD3CHDPAPcKcO8A9wlw3wD3C3D/AA8I8MAADwrw4AAPCfDQAA8L8PAAjwjwyACPCvDoAI8J8NgAjwvw+ABPCPDEAA3wpABPDvCUAE8N8LQATw/wjADPDHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/giADPCvDsAM8J8NwAzwvw/AAvCPDCAC8K8OIALwnw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAG8J8NYAbwvw9gDvCPDOAEcGOCrAuwK8O8DRAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHgmAC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8Axwb4Z4B/Bfh3gP8E+G+A/wU4JMRxQhw3xPFCHD/ECUKcMMSJQhwa4rAQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhCHhzhjiDOFOHOIs4Q4a4izhTh7iHOEOGeIc4U4d4jzhDhviPOFOH+IC4S4YIgLhbhwiIuEuGiIi4W4eIhLhEiIS4a4VIhLh7hMiMuGuFyIy4e4QogrhrhSiCuHuEqIq4a4Woirh7hGiGuGuFaIa4e4TojrhrheiOuHuEGIG4a4UYgbh7hJiJuGuFmIm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh4Z4WIiHh3hEiEeGeFSIR4d4TIjHhnhciMeHeEKIJ4ZoiCeFeHKIp4R4aoinhXh6iGeEeGaIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EEeEeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiLeHeEeId4Y4MsRRId4V4t0hjg7xnhDvDfG+EO8P8YEQHwzxoRAfDvGREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrRDfDvGdEN8N8b0Q3w/xgxA/DPGjED8O8ZMQPw3xsxA/D/GLEMeE+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hDg2xD9D/CvEv0P8J8R/Q/wvxCERjhPhuBGOF+H4EU4Q4YQRThTh0AiHRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEODzCGSOcKcKZI5wlwlkjnC3C2SOcI8I5I5wrwrkjnCfCeSOcL8L5I1wgwgUjXCjChSNcJMJFI1wswsUjXCJCIlwywqUiXDrCZSJcNsLlIlw+whUiXDHClSJcOcJVIlw1wtUiXD3CNSJcM8K1Ilw7wnUiXDfC9SJcP8INItwwwo0i3DjCTSLcNMLNItw8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDbC4yI8PsITIjwxQiM8KcKTIzwlwlMjPC3C0yM8I8IzIxxEGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4IsKzIjw7wnMiPDfC8yI8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJrIrw2wusivD7CGyK8McKbIrw5wlsivDXC2yK8PcI7IrwzwpERjorwrgjvjnB0hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0Q4JsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCsRH+GeFfEf4d4T8R/hvhfxEOiXGcGMeNcbwYx49xghgnjHGiGIfGOCzGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcbhMc4Y40wxzhzjLDHOGuNsMc4e4xwxzhnjXDHOHeM8Mc4b43wxzh/jAjEuGONCMS4c4yIxLhrjYjEuHuMSMRLjkjEuFePSMS4T47IxLhfj8jGuEOOKMa4U48oxrhLjqjGuFuPqMa4R45oxrhXj2jGuE+O6Ma4X4/oxbhDjhjFuFOPGMW4S46Yxbhbj5jFuEeOWMW4V49YxbhPjtjFuN/6QIf/nu0OMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxmiMJ8V4coynxHhqjKfFeHqMZ8R4ZoyDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYR8R4Voxnx3hOjOfGeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xjgyxlEx3hXj3TGOjvGeGO+N8b4Y74/xgRgfjPGhGB+O8ZEYH43xsRgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYx8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/EODbGP2P8K8a/Y/wnxn9j/C/GIQmOk+C4CY6X4PgJTpDghAlOlODQBIclOHGCkyQ4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4PMEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIkESXDLBpRJcOsFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDFBEzwpwZMTPCXBUxM8LcHTEzwjwTMTHCQYJBgmGCUYJ5gkmCaYJZgnWCRYJlglWCfYJNgm2CXYJzgiwbMSPDvBcxI8N8HzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrErw6wWsSvDbB6xK8PsEbErwxwZsSvDnBWxK8NcHbErw9wTsSvDPBkQmOSvCuBO9OcHSC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJDgmwS8T/CrBrxP8JsFvE/wuwe8T/CHBHxP8KcGfE/wlwV8T/C3B3xP8I8GxCf6Z4F8J/p3gPwn+m+B/CQ5JcZwUx01xvBTHT3GCFCdMcaIUh6Y4LMWJU5wkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxeEpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpziIikumuJiKS6e4hIpkuKSKS6V4tIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkeleLRKR6T4rEpHpfi8SmekOKJKZriSSmenOIpKZ6a4mkpnp7iGSmemeIgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FESmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLNKd6S4q0p3pbi7SnekeKdKY5McVSKd6V4d4qjU7wnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JiV5NsXnUnw+xRdSfDHFl1J8OcVXUnw1xddSfD3FN1J8M8W3Unw7xXdSfDfF91J8P8UPUvwwxY9S/DjFT1L8NMXPUvw8xS9SHJPilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4tgU/0zxrxT/TvGfFP9N8b8Uh2Q4TobjZjhehuNnOEGGE2Y4UYZDMxyW4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDh8AxnzHCmDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIEMF8xwoQwXznCRDBfNcLEMF89wiQzJcMkMl8pw6QyXyXDZDJfLcPkMV8hwxQxXynDlDFfJcNUMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/McJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+GIDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4MR2Y4KsO7Mrw7w9EZ3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGT6W4eMZPpHhkxk+leHTGT6T4bMZPpfh8xm+kOGLGb6U4csZvpLhqxm+luHrGb6R4ZsZvpXh2xm+k+G7Gb6X4fsZfpDhhxl+lOHHGX6S4acZfpbh5xl+keGYDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwzHZvhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx4lyHJrjsBwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHIfnOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOaw4dMuT/LNbOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxqxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoBwPzvGQHA/N8bAcD8/xiByPzPGoHI/O8Zgcj83xuByPz/GEHE/M0RxPyvHkHE/J8dQcT8vx9BzPyPHMHAc5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jmOyPGsHM/O8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GO/+81ZsTYkTmO+r/LQ4YM+X9G5zhkyJAh9+Z4X4735/hAjg/+3/0hQ4Y8nOMjOT6a42M5Pp7jEzk+meNTOT6d4zM5Ppvjczk+n+MLOb6Y40s5vpzjKzm+muNrOb6e4xs5vpnjWzm+neM7Ob6b43s5vp/jBzl+mONHOX6c4yc5fprjZzl+nuMXOY7J8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yHFsjn/m+FeOf+f4T47/5vjf/5kUOE6B4xY4XoHjFzhBgRMWOFGBQwscVuDEBU5S4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4PACZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy5wkQIXLXCxAhcvcIkCKXDJApcqcOkCNxjejF22wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Clz//30FbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnligBZ5U4MkFnlLgqQWeVuDpBZ5R4JkFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCxxR4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngyAJHFXhXgXcXOLrAewq8t8D7Cry/wAcKfLDAhwp8uMBHCny0wMcKfLzAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvChxT4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeDYAv8s8K8C/y7wnwL/LfC/AoeUOE6J45Y4XonjlzhBiROWOFGJQ0scVuLEJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4vASZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSKXHJEpcqcekSlylx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEi3xpBJPLvGUEk8t8bQSTy/xjBLPLHFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iiBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEkeWOKrEu0q8u8TRJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHimBK/LPGrEr8u8ZsSvy3xuxK/L/GHEn8s8acSfy7xlxJ/LfG3En8v8Y8Sx5b4Z4l/lfh3if+U+G+J/5U4pMJxKhy3wvEqHL/CCSqcsMKJKhxa4bAKJ65wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgqHVzhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVEiFS1a4VIVLV7hMhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1ZohSdVeHKFp1R4aoWnVXh6hWdUeGaFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7CkdUeFaFZ1d4ToXnVnhehedXeEGFF1Z4UYUXV3hJhZdWeFmFl1d4RYVXVnhVhVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Y4ssJRFd5V4d0Vjq7wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCsdU+GWFX1X4dYXfVPhthd9V+H2FP1T4Y4U/Vfhzhb9U+GuFv1X4e4V/VDi2wj8r/KvCvyv8p8J/K/yvwiE1jlPjuDWOV+P4NU5Q44Q1TlTj0BqH1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOLzGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKJGalyyxqVqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxRms8qcaTazylxlNrPK3G02s8o8YzaxzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nc4osazajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxpE1jqrxrhrvrnF0jffUeG+N99V4f40P1PhgjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9Q4psYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGsTX+WeNfNf5d4z81/lvjfzUOaXCcBsdtcLwGx29wggYnbHCiBoc2OKzBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocHhDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDdLgkg0u1eDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ3a4EkNntzgKQ2e2uBpDZ7e4BkNntngoMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wRENntXg2Q2e0+C5DZ7X4PkNXtDghQ1e1ODFDV7S4KUNXtbg5Q1e0eCVDV7V4NUNXtPgtQ1e1+D1Dd7Q4I0N3tTgzQ3e0uCtDd7W4O0N3tHgnQ2ObHBUg3c1eHeDoxu8p8F7G7yvwfsbfKDBBxt8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwTENftngVw1+3eA3DX7b4HcNft/gDw3+2OBPDf7c4C8N/trgbw3+3uAfDY5t8M8G/2rw7wb/afDfBv9rcEiL47Q4bovjtTh+ixO0OGGLE7U4tMVhLU7c4iQtTtriZC1O3uIULU7Z4lQtTt3iNC1O2+J0LU7f4gwtDm9xxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2iRFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s0RZPavHkFk9p8dQWT2vx9BbPaPHMFgctBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i2OaPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9scWSLo1q8q8W7Wxzd4j0t3tvifS3e3+IDLT7Y4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtw/7/mxdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9aHNPily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4tgW/2zxrxb/bvGfFv9t8b8Wh3Q4Tofjdjheh+N3OEGHE3Y4UYdDOxzW4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDh8A5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftcLEOF+9wiQ7pcMkOl+pw6Q6X6XDZDpfrcPmOYUOGDHHFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA7t8KQOT+7wlA5P7fC0Dk/v8IwOz+xw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4YgOz+rw7A7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6PDKDq/q8OoOr+nw2g6v6/D6Dm/o8MYOb+rw5g5v6fDWDm/r8PYO7+jwzg5Hdjiqw7s6vLvD0R3e0+G9Hd7X4f0dPtDhgx0+1OHDHT7S4aMdPtbh4x0+0eGTHT7V4dMdPtPhsx0+1+HzHb7Q4YsdvtThyx2+0uGrHb7W4esdvtHhmx2+1eHbHb7T4bsdvtfh+x1+0OGHHX7U4ccdftLhpx1+1uHnHX7R4ZgOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDsd2+GeHf3X4d4f/dPhvh/91OKTHcXoct8fxehy/xwl6nLDHiXoc2uOwHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeh/c4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiPS/RIj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/a4VY9b97hNj9v2uF2P2/e4Q4879rhTjzv3uEuPu/a4W4+797hHj3v2uFePe/e4T4/79rhfj/v3eECPB/Z4UI8H93hIj4f2eFiPh/d4RI9H9nhUj0f3eEyPx/Z4XI/H93hCjyf2aI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj4Megx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x5H9HhWj2f3eE6P5/Z4Xo/n93hBjxf2eFGPF/d4SY+X9nhZj5f3eEWPV/Z4VY9X93hNj9f2eF2P1/d4Q4839nhTjzf3eEuPt/Z4W4+393hHj3f2OLLHUT3e1ePdPY7u8Z6e/7FID0x4HgwCRVO3qW3bvbVt27btWyO138dGbSupbdu2He3szPcXzhyHD3DEAB8a4MMDfGSAjw7wsQE+PsAnBvjkAJ8a4NMDfGaAzw7wuQE+P8AXBvjiAF8a4MsDfGWArw7wtQG+PsA3BvjmAN8a4NsDfGeA7w7wvQG+P8APBvjhAD8a4McD/GSAnw7wswF+PsAvBvjlAL8a4NcD/GaA3w7wuwF+P8AfBvjjAH8a4M8D/GWAvw7wtwH+PsA/BvjnAP8a4N8D/GeA/w7wvwGOHOCoAY4e4JgBjh3gkADHCXDcAMcLcPwAJwhwwgAnCnDiACcJcGiAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIAEuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7BbhzgLsEuGuAuwW4e4B7BLhngHsFuHeA+wS4b4D7Bbh/gAcEeGCABwV4cICHBHhogIcFeHiARwR4ZIBHBXh0gMcEeGyAxwV4fIAnBHhigCcFeHKABnhKgKcGeFqApwd4RoBnBnhWgGcHeE6A5wY4LMDzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrAhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4dYDXBHhtgNcFeH2ANwR4Y4A3BXhzgLcEeGuAtwV4e4B3BHhngHcFeHeA9wR4b4D3BXh/gA8E+GCAwwMcEeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH+G+B/AY4McFSAowMcE+DYAIeEOE6I44Y4XojjhzhBiBOGOFGIE4c4SYhDQ5w0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyxKVCJMSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xGEhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXiIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xKtDvCbEa0O8LsTrQ7whxBtDvCnEm0O8JcRbQ7wtxNtDvCPEO0O8K8S7Q7wnxHtDvC/E+0N8IMQHQxwe4ogQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8Q/wtxZIijQhwd4pgQx4Y4JMJxIhw3wvEiHD/CCSKcMMKJIpw4wkkiHBrhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEuGiES4W4eIRLhHhkhEuFSERLh3hMhEuG+FyES4f4QoRrhjhShGuHOEqEa4a4WoRrh7hGhGuGeFaEa4d4ToRrhvhehGuH+EGEW4Y4UYRbhzhJhFuGuFmEW4e4RYRbhnhVhFuHeE2EW4b4XYRbh/hDhHuGOFOEe4c4S4R7hrhbhHuHuEeEe4Z4V4R7h3hPhHuG+F+Ee4f4QERHhjhQREeHOEhER4a4WERHh7hEREeGeFRER4d4TERHhvhcREeH+EJEZ4Y4UkRnhyhEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuREOi/C8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hFeHeE1EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjh8AhHRPhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH9G+FeEf0f4T4T/RvhfhCMjHBXh6AjHRDg2wiExjhPjuDGOF+P4MU4Q44QxThTjxDFOEuPQGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGJeMcakYiXHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDeJcdMYN4tx8xi3iHHLGLeKcesYt4lx2xi3i3H7GHeIcccYd4px5xh3iXHXGHeLcfcY94hxzxj3inHvGPeJcd8Y94tx/xgPiPHAGA+K8eAYD4nx0BgPi/HwGI+I8cgYj4rx6BiPifHYGI+L8fgYT4jxxBhPivHkGI3xlBhPjfG0GE+P8YwYz4zxrBjPjvGcGM+NcViM58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8U4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8eoYr4nx2hivi/H6GG+I8cYYb4rx5hhvifHWGG+L8fYY74jxzhjvivHuGO+J8d4Y74vx/hgfiPHBGIfHOCLGh2J8OMZHYnw0xsdifDzGJ2J8MsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYvwyxq9i/DrGb2L8NsbvYvw+xh9i/DHGn2L8OcZfYvw1xt9i/D3GP2L8M8a/Yvw7xn9i/DfG/2IcGeOoGEfHOCbGsTEOSXCcBMdNcLwEx09wggQnTHCiBCdOcJIEhyY4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4Y4IzJThzgrMkOGuCsyU4e4JzJDhngnMlOHeC8yQ4b4LzJTh/ggskuGCCCyW4cIKLJLhogosluHiCSyS4ZIJLJUiCSye4TILLJrhcgssnuEKCKya4UoIrJ7hKgqsmuFqCqye4RoJrJrhWgmsnuE6C6ya4XoLrJ7hBghsmuFGCGye4SYKbJrhZgpsnuEWCWya4VYJbJ7hNgtsmuF2C2ye4Q4I7JrhTgjsnuEuCuya4W4K7J7hHgnsmuFeCeye4T4L7JrhfgvsneECCByZ4UIIHJ3hIgocmeFiChyd4RIJHJnhUgkcneEyCxyZ4XILHJ3hCgicmeFKCJydogqckeGqCpyV4eoJnJHhmgmcleHaC5yR4boLDEjwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJXJ3hNgtcmeF2C1yd4Q4I3JnhTgjcneEuCtyZ4W4K3J3hHgncmeFeCdyd4T4L3Jnhfgvcn+ECCDyY4PMERCT6U4MMJPpLgowk+luDjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCX6T4LcJfpfg9wn+kOCPCf6U4M8J/pLgrwn+luDvCf6R4J8J/pXg3wn+k+C/Cf6X4MgERyU4OsExCY5NcEiK46Q4borjpTh+ihOkOGGKE6U4cYqTpDg0xUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCpFUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5RVM8JcVTUzwtxdNTPCPFM1M8K8WzUzwnxXNTHJbieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTvDrFa1K8NsXrUrw+xRtSvDHFm1K8OcVbUrw1xdtSvD3FO1K8M8W7Urw7xXtSvDfF+1K8P8UHUnwwxeEpjkjxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/03xvxRHpjgqxdEpjklxbIpDMhwnw3EzHC/D8TOcIMMJM5wow4kznCTDoRlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOH7GS6a4WIZLp7hEhkumeFSGZLh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZbpThxhlukuGmGW6W4eYZbpHhlhluleHWGW6T4bYZbpfh9hnukOGOGe6U4c4Z7pLhrhnuluHuGe6R4Z4Z7pXh3hnuk+G+Ge6X4f4ZHpDhgRkelOHBGR6S4aEZHpbh4RkekeGRGR6V4dEZHpPhsRkel+HxGZ6Q4YkZnpThyRma4SkZnprhaRmenuEZGZ6Z4VkZnp3hORmem+GwDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/KcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+HVGV6T4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9Gd6X4f0ZPpDhgxkOz3BEhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobv/e/wBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvhfxmOzHBUhqMzHJPh2AyH5DhOjuPmOF6O4+c4QY4T5jhRjhPnOEmOQ3OcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHJXJcMselciTHpXNcJsdlc1wux+VzXCHHFXNcKceVc1wlx1VzXC3H1XNcI8c1c1wrx7VzXCfHdXNcL8f1c9wgxw1z3CjHjXPcJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHXXPcLcfdc9wjxz1z3CvHvXPcJ8d9c9wvx/1zPCDHA3M8KMeDczwkx0NzPCzHw3M8Iscjczwqx6NzPCbHY3M8LsfjczwhxxNzPCnHk3M0x1NyPDXH03I8Pcczcjwzx7NyPDvHc3I8N8dhOZ6X4/k5XpDjhTlelOPFOV6S46U5Xpbj5TlekeOVOV6V4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3McnuOIHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHP/LcWSOo3IcneOYHMfmOKTAcQoct8DxChy/wAkKnLDAiQqcuMBJChxa4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4IwFzlTgzAXOUuCsBc5W4OwFzlHgnAXOVeDcBc5T4LwFzlfg/AUuUOCCBS5U4MIFLlLgogUuVuDiBS5R4JIFLlUgBS5d4DIFLlvgcgUuX+AKBa5Y4EoFrlzgKgWuWuBqBa5e4BoFrlngWgWuXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuX+ABBR5Y4EEFHlzgIQUeWuBhBR5e4BEFHlngUQUeXeAxBR5b4HEFHl/gCQWeWOBJBZ5coAWeUuCpBZ5W4OkFnlHgmQWeVeDZBZ5T4LkFDivwvALPL/CCAi8s8KICLy7wkgIvLfCyAi8v8IoCryzwqgIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQXeWeBdBd5d4D0F3lvgfQXeX+ADBT5Y4PACRxT4UIEPF/hIgY8W+FiBjxf4RIFPFvhUgU8X+EyBzxb4XIHPF/hCgS8W+FKBLxf4SoGvFvhaga8X+EaBbxb4VoFvF/hOge8W+F6B7xf4QYEfFvhRgR8X+EmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4x//7DMW/Cvy7wH8K/LfA/wocWeCoAkcXOKbAsQUOKXGcEsctcbwSxy9xghInLHGiEicucZISh5Y4aYmTlTh5iVOUOGWJU5U4dYnTlDhtidOVOH2JM5Q4Y4kzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nzlTh/iQuUuGCJC5W4cImLlLhoiYuVuHiJS5S4ZIlLlUiJS5e4TInLlrhcicuXuEKJK5a4Uokrl7hKiauWuFqJq5e4RolrlrhWiWuXuE6J65a4Xonrl7hBiRuWuFGJG5e4SYmblrhZiZuXuEWJW5a4VYlbl7hNiduWuF2J25e4Q4k7lrhTiTuXuEuJu5a4W4m7l7hHiXuWuFeJe5e4T4n7lrhfifuXeECJB5Z4UIkHl3hIiYeWeFiJh5d4RIlHlnhUiUeXeEyJx5Z4XInHl3hCiSeWeFKJJ5doiaeUeGqJp5V4eolnlHhmiWeVeHaJ55R4bonDSjyvxPNLvKDEC0u8qMSLS7ykxEtLvKzEy0u8osQrS7yqxEGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5Y4vMQRJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/Jf5X4sgSR5U4usQxJY4tcUiF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDi0wkkrnKzCySucosIpK5yqwqkrnKbCaSucrsLpK5yhwhkrnKnCmSucpcJZK5ytwtkrnKPCOSucq8K5K5ynwnkrnK/C+StcoMIFK1yowoUrXKTCRStcrMLFK1yiwiUrXKpCKly6wmUqXLbC5SpcvsIVKlyxwpUqXLnCVSpctcLVKly9wjUqXLPCtSpcu8J1Kly3wvUqXL/CDSrcsMKNKty4wk0q3LTCzSrcvMItKtyywq0q3LrCbSrctsLtKty+wh0q3LHCnSrcucJdKty1wt0q3L3CPSrcs8K9Kty7wn0q3LfC/Srcv8IDKjywwoMqPLjCQyo8tMLDKjy8wiMqPLLCoyo8usJjKjy2wuMqPL7CEyo8scKTKjy5Qis8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrHFbheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRUOKgwqDCuMKowrTCpMK8wqzCssKiwrrCqsK2wqbCvsKuwrvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7Kry7wnsqvLfC+yq8v8IHKnywwuEVjqjwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8K/63wvwpHVjiqwtEVjqlwbIVDahynxnFrHK/G8WucoMYJa5yoxolrnKTGoTVOWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNVLj0jUuU+OyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTVa4yk1nlrjaTWeXuMZNZ5Z41k1nl3jOTWeW+OwGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+qcVBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX+PVNV5T47U1Xlfj9TXeUOONNd5U48013lLjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzUOr3FEjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/U+GeNf9X4d43/1Phvjf/VOLLGUTWOrnFMjWNrHNLgOA2O2+B4DY7f4AQNTtjgRA1O3OAkDQ5tcNIGJ2tw8ganaHDKBqdqcOoGp2lw2gana3D6BmdocMYGZ2pw5gZnaXDWBmdrcPYG52hwzgbnanDuBudpcN4G52tw/gYXaHDBBhdqcOEGF2lw0QYXa3DxBpdocMkGl2qQBpducJkGl21wuQaXb3CFBldscKUGV25wlQZXbXC1BldvcI0G12xwrQbXbnCdBtdtcL0G129wgwY3bHCjBjducJMGN21wswY3b3CLBrdscKsGt25wmwa3bXC7BrdvcIcGd2xwpwZ3bnCXBndtcLcGd29wjwb3bHCvBvducJ8G921wvwb3b/CABg9s8KAGD27wkAYPbfCwBg9v8IgGj2zwqAaPbvCYBo9t8LgGj2/whAZPbPCkBk9u0AZPafDUBk9r8PQGz2jwzAbPavDsBs9p8NwGhzV4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYODBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wa7BvsGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbPCuBu9u8J4G723wvgbvb/CBBh9scHiDIxp8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxv8r8GRDY5qcHSDYxoc2+CQFsdpcdwWx2tx/BYnaHHCFidqceIWJ2lxaIuTtjhZi5O3OEWLU7Y4VYtTtzhNi9O2OF2L07c4Q4sztjhTizO3OEuLs7Y4W4uztzhHi3O2OFeLc7c4T4vztjhfi/O3uECLC7a4UIsLt7hIi4u2uFiLi7e4RItLtrhUi7S4dIvLtLhsi8u1uHyLK7S4Yosrtbhyi6u0uGqLq7W4eotrtLhmi2u1uHaL67S4bovrtbh+ixu0uGGLG7W4cYubtLhpi5u1uHmLW7S4ZYtbtbh1i9u0uG2L27W4fYs7tLhjizu1uHOLu7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtHhki0e1eHSLx7R4bIvHtXh8iye0eGKLJ7V4cou2eEqLp7Z4Wount3hGi2e2eFaLZ7d4TovntjisxfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxataHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3h1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIvDWxzR4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4n8tjmxxVIujWxzT4tgWh3Q4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh0M7nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8wyU6XLLDpTqkw6U7XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTOzypw5M7tMNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfDYR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7HN7hiA4f6vDhDh/p8NEOH+vw8Q6f6PDJDp/q8OkOn+nw2Q6f6/D5Dl/o8MUOX+rw5Q5f6fDVDl/r8PUO3+jwzQ7f6vDtDt/p8N0O3+vw/Q4/6PDDDj/q8OMOP+nw0w4/6/DzDr/o8MsOv+rw6w6/6fDbDr/r8PsOf+jwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDv8aNsS/O/ynw387/K/DkR2O6nB0h2M6HNvhkB7H6XHcHsfrcfweJ+hxwh4n6nHiHifpcWiPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI/0uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKP9nhKj6f2eFqPp/d4Ro9n9nhWj2f3eE6P5/Y4rMfzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/jw/0+GCPw3sc0eP/kVyOTXwfjBZMmSa1bbtb27Zt295aqW3j/7NRt1Ft27btO8/c8w3OzuyLHTnAUQMcPcAxAxw7wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHC/A8QOcIMAJAxwa4EQBDgtweIATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgCMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4Z4B3BXh3gPcEeG+A9wV4f4APBPhggCMDHBXg6ADHBDg2wIcCfDjARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP+C8RwS4jghjhvieCGOH+IEIU4Y4tAQJwpxWIjDQ5w4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCHBHiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQ7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDHBniqBBHhzgmxLEhPhTiwyE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8h/hfikAjHiXDcCMeLcPwIJ4hwwgiHRjhRhMMiHB7hxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+GICM+N8LwIz4/wgggvjPCiCC+O8JIIL43wsggvj/CKCK+M8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOHICEdFODrCMRGOjfChCB+O8JEIH43wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jfC/CIfEOE6M48Y4XozjxzhBjBPGODTGiWIcFuPwGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYNxl3yJD/cdssxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2IcEeO5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2McGeOoGEfHOCbGsTE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBIcmOFGCwxIcnuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgySOGe0qCpyZ4WoKnJ3hGgmcmeFaCZyd4ToIjEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneGeCdyV4d4L3JHhvgvcleH+CDyT4YIIjExyV4OgExyQ4NsGHEnw4wUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4tAUJ0pxWIrDU5w4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSJMUlU1wqxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxQdTHJniqBRHpzgmxbEpPpTiwyk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXDcDMfLcPwMJ8hwwgyHZjhRhsMyHJ7hxBlOkuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukSEZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+2f8CA/fLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/M8KwMz87wnAxHZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2Q4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8M4M78rw7gzvyfDeDO/L8P4MH8jwwQxHZjgqw9EZjslwbIYPZfhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx6E5TpTjsByH5zhxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkOCLHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY535nhXjnfneE+O9+Z4X4735/hAjg/mODLHUTmOznFMjmNzfCjHh3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQWOU+C4BY5X4PgFTlDghAUOLXCiAocVOLzAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8ARBZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQUOCgwKDAuMCowLTApMC8wKzAssCiwLhg4ZMsS6wKbAtsCuwL7AOwu8q8C7C7ynwHsLvK/A+wt8oMAHCxxZ4KgCRxc4psCxBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/Bf5X4JASxylx3BLHK3H8EicoccISh5Y4UYnDShxe4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiiBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4SByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiyBJHlTi6xDElji3xoRIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8fNuT/V+JbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ6pcJwKx61wvArHr3CCCiescGiFE1U4rMLhFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVUuGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFVrhSRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVjqjw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+ocFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+GdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVjqxwVIWjKxxT4dgKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twSI3j1DhujePVOH6NE9Q4YY1Da5yoxmE1Dq9x4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqXFEjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R42DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsa76zxrhrvrvGeGu+t8b4a76/xgRofrHFkjaNqHF3jmBrH1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbHNrgRA0Oa3B4gxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDNLhkg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6DIxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hng3c1eHeD9zR4b4P3NXh/gw80+GCDIxsc1eDoBsc0OLbBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OLQFidqcViLw1ucuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWqTFJVtcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWhzR4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxzZ4qgWR7c4psWxLT7U4sMtPtLioy0+1uLjLT7R4pMtPtX+vy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//970+H43Q4bofjdTh+hxN0OGGHQzucqMNhHQ7vcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+iQDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s0A5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+lwRIfndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/s8K4O7+7wng7v7fC+Du/v8IEOH+xwZIejOhzd4ZgOx3b4UIcPd/hIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehynx3F7HK/H8XucoMcJexza40Q9DutxeI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo/2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOjyN6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4Z4939Xh3j/f0eG+P9/V4f48P9PhgjyN7HNXj6B7H9Di25/9YtOc2vgtAgeJbtWrZtl0n27Zt2z7Ztm17v6+NbBvLNlat7T73ufe8h/Pfx26A/QCfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8McOQAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wFED/HuA/wzw3wGOHuB/AxwzwLEDHBLg0ADHCXDcAMcLcFiA4wc4QYATBjg8wIkCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQIkwCUDXCrApQNcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDNMCTAjw5wFMCPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAnw4wEcCfDTAxwJ8PMAnAhwR4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTAkQF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8Bjgrw7wD/CfDfAEcH+F+AYwIcG+CQEIeGOE6I44Y4XojDQhw/xAlCnDDE4SFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4RIiEuGeJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGKIhnhTiySGeEuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPivSHeF+L9IT4Q4oMhPhTiwyE+EuKjIT4W4uMhPhHiiBAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIY4M8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CnFUiH+H+E+I/4Y4OsT/QhwT4tgQh0Q4NMJxIhw3wvEiHBbh+BFOEOGEEQ6PcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiJcMkIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I1xn2/2YjwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM0wpMiPDnCUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wiciHBHhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wicjfCrCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN8L8L3I/wgwg8j/CjCjyP8JMKREX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/hnhXxGOivDvCP+J8N8IR0f4X4RjIhwb4ZAYh8Y4TozjxjhejMNiHD9m1Nj/y+ExThTjxDFOEuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuESMxLhnjUjEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYTEeHuMRMR4Z41ExHh3jMTEeG+NxMR4f4wkxnhijMZ4U48kxnhLjqTGeFuPpMZ4R45kxnhXj2TGeE+O5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOODMT4U48MxPhLjozE+FuPjMT4R44gYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MT4Z41MxPh3jMzE+G+NzMT4f4wsxvhjjSzG+HOMrMb4a42sxvh7jGzG+GeNbMb4d4zsxvhvjezG+H+MHMX4Y40cxfhzjJzGOjPHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4pxVIx/x/hPjP/GODrG/2IcE+PYGIckODTBcRIcN8HxEhyW4PgJTpDghAkOT3CiBCdOcJIEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF05wkQQXTXCxBBdPcIkESXDJBJdKcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE3wpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEb03wtgRvT/COBO9M8K4E707wngTvTfC+BO9P8IEEH0zwoQQfTvCRBB9N8LEEH0/wiQRHJDhIMEgwTDBKME4wSTBNMEswT7BIsEywSrBOsEmwTbBLsE/wyQSfSvDpBJ9J8NkEn0vw+QRfSPDFBF9K8OUEX0nw1QRfS/D1BN9I8M0E30rw7QTfSfDdBN9L8P0EP0jwwwQ/SvDjBD9JcGSCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgqMS/DvBfxL8N8HRCf6X4JgExyY4JMWhKY6T4rgpjpfisBTHT3GCFCdMcXiKE6U4cYqTpDhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inOkOGeKc6U4d4rzpDhvivOlOH+KC6S4YIoLpbhwioukuGiKi6W4eIpLpEiKS6a4VIpLp7hMisumuFyKy6e4QoorprhSiiunuEqKq6a4Woqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6a4UYobp7hJipumuFmKm6e4RYpbprhVilunuE2K26a4XYrbp7hDijumuFOKO6e4S4q7prhbirunuEeKe6a4V4p7p7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciseneEKKJ6ZoiieleHKKp6R4aoqnpXh6imekeGaKZ6V4dornpHhuiueleH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWK16R4bYrXpXh9ijekeGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+kOCLFQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpvhWim+n+E6K76b4Xorvp/hBih+m+FGKH6f4SYojU/w0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXfUvw9xT9S/DPFv1IcleLfKf6T4r8pjk7xvxTHpDg2xSEZDs1wnAzHzXC8DIdlOH6GE2Q4YYbDM5wow4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCJDMlwyw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxQzM8KcOTMzwlw1MzPC3D0zM8I8MzMzwrw7MzPCfDczM8L8PzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrM7wmw2szvC7D6zO8IcMbM7wpw5szvCXDWzO8LcPbM7wjwzszvCvDuzO8J8N7M7wvw/szfCDDBzN8KMOHM3wkw0czfCzDxzN8IsMRGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8MsOnMnw6w2cyfDbD5zJ8PsMXMnwxw5cyfDnDVzJ8NcPXMnw9wzcyfDPDtzJ8O8N3Mnw3w/cyfD/DDzL8MMOPMvw4w08yHJnhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4agM/87wnwz/zXB0hv9lOCbDsRkOyXFojuPkOG6O4+U4LMfxc5wgxwlzHJ7jRDlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOZLjkjkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rpXj2jmuk+O6Oa6X4/o5bpDjhjlulOPGOW6S46Y5bpbj5jlukeOWOW6V49Y5bpPjtjlul+P2Oe6Q44457pTjzjnukuOuOe6W4+457pHjnjnulePeOe6T47457pfj/jkekOOBOR6U48E5HpLjoTkeluPhOR6R45E5HpXj0Tkek+OxOR6X4/E5npDjiTma40k5npzjKTmemuNpOZ6e4xk5npnjWTmeneM5OZ6b43k5np/jBTlemONFOV6c4yU5XprjZTlenuMVOV6Z41U5Xp3jNTlem+N1OV6f4w053pjjTTnenOMtOd6a42053p7jHTnemeNdOd6d4z053pvjfTnen+MDOT6Y40M5PpzjIzk+muNjOT6e4xM5jshxkGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2M/fMiQ/33iqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHEfm+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z45/5Tgqx79z/CfHf3McneN/OY7JcWyOQwocWuA4BY5b4HgFDitw/AInKHDCAocXOFGBExc4SYGTFjhZgZMXOEWBUxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjhfgfMXuECBCxa4UIELF7hIgYsWuFiBixe4RIEUuGSBSxW4dIHLFLhsgcsVuHyBKxS4YoErFbhygasUuGqBqxW4eoFrFLhmgWsVuHaB6xS4boHrFbh+gRsUuGGBGxW4cYGbFLhpgZsVuHmBWxS4ZYFbFbh1gdsUuG2B2xW4fYE7FLhjgTsVuHOBuxS4a4G7Fbh7gXsUuGeBexW4d4H7FLhvgfsVuH+BBxR4YIEHFXhwgYcUeGiBhxV4eIFHFHhkgUcVeHSBxxR4bIHHFXh8gScUeGKBFnhSgScXeEqBpxZ4WoGnF3hGgWcWeFaBZxd4ToHnFnhegecXeEGBFxZ4UYEXF3hJgZcWeFmBlxd4RYFXFnhVgVcXeE2B1xZ4XYHXF3hDgTcWeFOBNxd4S4G3FnhbgbcXeEeBdxZ4V4F3F3hPgfcWeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgSMKHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBbxT4ZoFvFfh2ge8U+G6B7xX4foEfFPhhgR8V+HGBnxQ4ssBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8L/KvAUQX+XeA/Bf5b4OgC/ytwTIFjCxxS4tASxylx3BLHK3FYieOXOEGJE5Y4vMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqcv8QFSlywxIVKXLjERUpctMTFSly8xCVKpMQlS1yqxKVLXKbEZUtcrsTlS1yhxBVLXKnElUtcpcRVS1ytxNVLXKPENUtcq8S1S1ynxHVLXK/E9UvcoMQNS9yoxI1L3KTETUvcrMTNS9yixC1L3KrErUvcpsRtS9yuxO1L3KHEHUvcqcSdS9ylxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxANLPKjEg0s8pMRDSzysxMNLPKLEI0s8qsSjSzymxGNLPK7E40s8ocQTS7TEk0o8ucRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0ocUeKgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7EJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxJElflriZyV+XuIXJX5Z4lclfl3iNyV+W+J3JX5f4g8l/ljiTyX+XOIvJf5a4m8l/l7iHyX+WeJfJY4q8e8S/ynx3xJHl/hfiWNKHFvikAqHVjhOheNWOF6Fwyocv8IJKpywwuEVTlThxBVOUuGkFU5W4eQVTlHhlBVOVeHUFU5T4bQVTlfh9BXOUOGMFc5U4cwVzlLhrBXOVuHsFc5R4ZwVzlXh3BXOU+G8Fc5X4fwVLlDhghUuVOHCFS5S4aIVLlbh4hUuUSEVLlnhUhUuXeEyFS5b4XIVLl/hChWuWOFKFa5c4SoVrlrhahWuXuEaFa5Z4VoVrl3hOhWuW+F6Fa5f4QYVbljhRhVuXOEmFW5a4WYVbl7hFhVuWeFWFW5d4TYVblvhdhVuX+EOFe5Y4U4V7lzhLhXuWuFuFe5e4R4V7lnhXhXuXeE+Fe5b4X4V7l/hARUeWOFBFR5c4SEVHlrhYRUeXuERFR5Z4VEVI0cMGeIxFR5b4XEVHl/hCRWeWKEVnlThyRWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhiAoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFY6s8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qnBUhX9X+E+F/1Y4usL/KhxT4dgKh9Q4tMZxahy3xvFqHFbj+DVOUOOENQ6vcaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF69xiRqpcckal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6px4xo3qXHTGjercfMat6hxyxq3qnHrGrepcdsat6tx+xp3qHHHGneqcecad6lx1xp3q3H3Gveocc8a96px7xr3qXHfGvercf8aD6jxwBoPqvHgGg+p8dAaD6vx8BqPqPHIGo+q8egaj6nx2BqPq/H4Gk+o8cQarfGkGk+u8ZQaT63xtBpPr/GMGs+s8awaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGkfUOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6lxZI2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNo2r8u8Z/avy3xtE1/lfjmBrH1jikwaENjtPguA2O1+CwBsdvcIIGJ2xweIMTNThxg5M0OGmDkzU4eYNTNDhlg1M1OHWD0zQ4bYPTNTh9gzM0OGODMzU4c4OzNDhrg7M1OHuDczQ4Z4NzNTh3g/M0OG+D8zU4f4MLNLhggws1uHCDizS4aIOLNbh4g0s0SINLNrhUg0s3uEyDyza4XIPLN7hCgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoNrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYPbNrhdg9s3uEODOza4U4M7N7hLg7s2uFuDuze4R4N7NrhXg3s3uE+D+za4X4P7N3hAgwc2eFCDBzd4SIOHNnhYg4c3eESDRzZ4VINHN3hMg8c2eFyDxzd4QoMnNmiDJzV4coOnNHhqg6c1eHqDZzR4ZoNnNXh2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDDzX4cIOPNPhog481+HiDTzQ4osFBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJgyMb/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/GhzV4N8N/tPgvw2ObvC/Bsc0OLbBIS0ObXGcFsdtcbwWh7U4fosTtDhhi8NbnKjFiVucpMVJW5ysxclbnKLFKVucqsWpW5ymxWlbnK7F6VucocUZW5ypxZlbnKXFWVucrcXZW5yjxTlbnKvFuVucp8V5W5yvxflbXKDFBVtcqMWFW1ykxUVbXKzFxVtcokVaXLLFpUYPdekWl2lx2RaXa3H5FldoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqce8W92lx3xb3a3H/Fg9o8cAWD2rx4BYPafHQFg9r8fAWj2jxyBaPavHoFo9p8dgWj2vx+BZPaPHEFm3xpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbvGRFh9t8bEWH2/xiRZHtDhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xyRafavHpFp9p8dkWn2vx+RZfaPHFFl9q8eUWX2nx1RZfa/H1Ft9o8c0W32rx7RbfafHdFt9r8f0WP2jxwxY/avHjFj9pcWSLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi6Na/LvFf1r8t8XRLf7X4pgWx7Y4pMOhHY7T4bgdjtfhsA7H73CCDifscHiHE3U4cYeTdDhph5N1OHmHU3Q4ZYdTdTh1h9N0OG2H03U4fYczdDhjhzN1OHOHs3Q4a4ezdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0uGiHi3W4eIdLdEiHS3a4VIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch8d3eEKHJ3Zohyd1eHKHp3R4aoendXh6h2d0eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090OKLDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h092+FSHT3f4TIfPdvhch893+EKHL3b4Uocvd/hKh692+FqHr3f4RodvdvhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYcjO/y0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzoc1eHfHf7T4b8dju7wvw7HdDi2wyE9Du1xnB7H7XG8Hof1OH6PE/Q4YY/De5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqceZe5ylx1l7nK3H2Xuco8c5e5yrx7l7nKfHeXucr8f5e1ygxwV7XKjHhXtcpMdFe1ysx8V7XKJHelyyx6V6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxR3s8qceTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHW3u8rcfbe7yjxzt7vKvHu3u8p8d7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3t8oscRPQ56/J8AAAD//8P52+I=") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 655.199191ms ago: executing program 2 (id=1485): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) 574.144866ms ago: executing program 0 (id=1477): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x8, 0xfff9}, {0xd}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, 0x0}) 539.854988ms ago: executing program 2 (id=1478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 475.140892ms ago: executing program 0 (id=1479): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r1}) 365.185299ms ago: executing program 0 (id=1480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x4c, r1, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}]}, 0x4c}}, 0x0) 216.728817ms ago: executing program 0 (id=1481): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 198.996448ms ago: executing program 2 (id=1491): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = memfd_secret(0x0) fchmod(r0, 0x168) 0s ago: executing program 0 (id=1483): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0xfffffffc, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) kernel console output (not intermixed with test programs): z.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a899acb9 code=0x7ffc0000 [ 170.412899][ T788] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.444307][ T28] audit: type=1326 audit(1769017424.184:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a899acb9 code=0x7ffc0000 [ 170.660427][ T788] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 170.680100][ T788] usb 4-1: config 0 has no interface number 0 [ 170.686720][ T788] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 170.722715][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.764547][ T788] usb 4-1: config 0 descriptor?? [ 170.997331][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.022375][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.059354][ T788] usb 4-1: string descriptor 0 read error: -71 [ 171.095804][ T788] usb-storage 4-1:0.168: USB Mass Storage device detected [ 171.123113][ T788] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 171.233199][ T788] usb 4-1: USB disconnect, device number 9 [ 171.406808][ T7684] loop1: detected capacity change from 0 to 32768 [ 171.424464][ T7684] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.657 (7684) [ 171.448435][ T7696] netlink: 'syz.2.662': attribute type 1 has an invalid length. [ 171.452593][ T7684] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.456921][ T7686] loop0: detected capacity change from 0 to 40427 [ 171.498816][ T7684] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 171.500772][ T7686] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 171.540902][ T7684] BTRFS info (device loop1): enabling auto defrag [ 171.549903][ T7684] BTRFS info (device loop1): use no compression [ 171.561131][ T7686] F2FS-fs (loop0): invalid crc value [ 171.593443][ T7684] BTRFS info (device loop1): force clearing of disk cache [ 171.610249][ T7684] BTRFS info (device loop1): max_inline at 4096 [ 171.627459][ T7684] BTRFS info (device loop1): disabling free space tree [ 171.633369][ T7686] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.765447][ T7686] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.835652][ T7684] BTRFS info (device loop1): enabling ssd optimizations [ 171.856269][ T7684] BTRFS info (device loop1): auto enabling async discard [ 171.928936][ T7684] BTRFS info (device loop1): rebuilding free space tree [ 172.019374][ T7684] BTRFS info (device loop1): disabling free space tree [ 172.059800][ T7684] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.112253][ T7684] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.174276][ T7724] loop3: detected capacity change from 0 to 256 [ 172.263268][ T7724] exfat: Deprecated parameter 'utf8' [ 172.388592][ T7721] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 172.409666][ T7724] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 172.468477][ T5777] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.503211][ T7721] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 172.538696][ T7721] REISERFS (device loop2): using ordered data mode [ 172.569131][ T7721] reiserfs: using flush barriers [ 172.647407][ T7721] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.715222][ T7721] REISERFS (device loop2): checking transaction log (loop2) [ 172.954518][ T7734] set_capacity_and_notify: 1 callbacks suppressed [ 172.954536][ T7734] loop1: detected capacity change from 0 to 256 [ 173.048613][ T7734] exfat: Deprecated parameter 'utf8' [ 173.074622][ T7734] exfat: Bad value for 'gid' [ 173.112086][ T7721] REISERFS (device loop2): Using tea hash to sort names [ 173.131883][ T7739] loop0: detected capacity change from 0 to 256 [ 173.139320][ T7721] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 173.177786][ T7739] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.332115][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.550420][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.590727][ T27] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 173.624465][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.652755][ T7748] loop2: detected capacity change from 0 to 764 [ 173.654110][ T27] usb 4-1: config 0 descriptor?? [ 173.764777][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 173.813399][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 173.854942][ T7753] netlink: 'syz.0.679': attribute type 15 has an invalid length. [ 174.156469][ T27] hid_mf 0003:0079:1846.000A: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 174.200547][ T27] hid_mf 0003:0079:1846.000A: Invalid report, this should never happen! [ 174.234239][ T27] hid_mf 0003:0079:1846.000A: Force feedback init failed. [ 174.257185][ T7765] netlink: 'syz.1.685': attribute type 3 has an invalid length. [ 174.288427][ T7765] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 174.310021][ T7765] netlink: 212 bytes leftover after parsing attributes in process `syz.1.685'. [ 174.363400][ T27] usb 4-1: USB disconnect, device number 10 [ 174.389388][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.485305][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 174.485323][ T28] audit: type=1326 audit(1769017428.031:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 174.541828][ T28] audit: type=1326 audit(1769017428.031:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 174.597638][ T28] audit: type=1326 audit(1769017428.031:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 174.634805][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.645907][ T28] audit: type=1326 audit(1769017428.031:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 174.658194][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.709494][ T8] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 174.719274][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.735706][ T8] usb 3-1: config 0 descriptor?? [ 174.890046][ T7768] loop0: detected capacity change from 0 to 40427 [ 174.920972][ T7768] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff [ 174.938224][ T7768] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 174.948550][ T7768] F2FS-fs (loop0): Image doesn't support compression [ 174.961597][ T7768] F2FS-fs (loop0): invalid crc value [ 174.971930][ T7768] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.079933][ T7768] F2FS-fs (loop0): Start checkpoint disabled! [ 175.095045][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 175.103998][ T7768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 175.183777][ T8] hid (null): unknown global tag 0xd [ 175.205502][ T8] razer 0003:1532:010E.000B: unknown global tag 0xd [ 175.226812][ T8] razer 0003:1532:010E.000B: item 0 0 1 13 parsing failed [ 175.254147][ T8] razer: probe of 0003:1532:010E.000B failed with error -22 [ 175.407164][ T11] kworker/u4:0: attempt to access beyond end of device [ 175.407164][ T11] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 175.417781][ T8] usb 3-1: USB disconnect, device number 8 [ 175.424565][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 175.439741][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 175.574160][ T7785] loop3: detected capacity change from 0 to 64 [ 175.603981][ T7785] hfs: unable to locate alternate MDB [ 175.628302][ T7785] hfs: continuing without an alternate MDB [ 176.362987][ T7808] tipc: Started in network mode [ 176.378171][ T7808] tipc: Node identity ac141441, cluster identity 4711 [ 176.399253][ T7808] tipc: Enabled bearer , priority 10 [ 176.488058][ T7813] loop1: detected capacity change from 0 to 256 [ 176.511130][ T7813] exfat: Deprecated parameter 'utf8' [ 176.516600][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 176.538462][ T7813] exfat: Deprecated parameter 'utf8' [ 176.543975][ T7813] exfat: Deprecated parameter 'utf8' [ 176.627247][ T7813] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 176.712126][ T7813] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:184 len:8) [ 176.727749][ T7813] exFAT-fs (loop1): Filesystem has been set read-only [ 176.860595][ T7824] loop1: detected capacity change from 0 to 128 [ 176.905957][ T7824] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.912940][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.998001][ T7824] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.081127][ T7824] EXT4-fs warning (device loop1): ext4_group_extend:1892: will only finish group (8193 blocks, 8129 new) [ 177.088494][ T7833] loop3: detected capacity change from 0 to 256 [ 177.093939][ T7824] EXT4-fs warning (device loop1): ext4_group_extend:1897: can't read last block, resize aborted [ 177.125761][ T7833] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 177.145313][ T7833] exFAT-fs (loop3): failed to load alloc-bitmap [ 177.146468][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.156870][ T27] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.169270][ T7833] exFAT-fs (loop3): failed to recognize exfat type [ 177.174171][ T27] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.203097][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.210795][ T27] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 177.231157][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.277755][ T27] usb 3-1: config 0 descriptor?? [ 177.341449][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.354232][ T7835] loop1: detected capacity change from 0 to 4096 [ 177.400690][ T7835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.426569][ T7839] loop3: detected capacity change from 0 to 64 [ 177.451307][ T6897] tipc: Node number set to 2886997057 [ 177.511429][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.601918][ T23] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 177.631394][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.658967][ T7841] team0: Device gtp0 is of different type [ 177.660740][ T23] usb 1-1: Product: syz [ 177.680304][ T23] usb 1-1: Manufacturer: syz [ 177.686380][ T23] usb 1-1: SerialNumber: syz [ 177.708793][ T23] usb 1-1: config 0 descriptor?? [ 177.735317][ T23] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 177.765187][ T27] hid-u2fzero 0003:20A0:4287.000C: item fetching failed at offset 4/5 [ 177.789812][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.808619][ T27] hid-u2fzero: probe of 0003:20A0:4287.000C failed with error -22 [ 177.827946][ T23] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 177.852388][ T23] usb 1-1: media controller created [ 177.914326][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.955807][ T7831] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 178.009212][ T27] usb 3-1: USB disconnect, device number 9 [ 178.052484][ T7850] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.143023][ T23] DVB: Unable to find symbol mt352_attach() [ 178.238974][ T7856] netlink: 'syz.3.725': attribute type 29 has an invalid length. [ 178.247114][ T23] DVB: Unable to find symbol nxt6000_attach() [ 178.278519][ T23] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 178.291971][ T8] IPVS: starting estimator thread 0... [ 178.301713][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 178.346643][ T23] dvb-usb: schedule remote query interval to 1000 msecs. [ 178.353759][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 178.387083][ T7861] loop1: detected capacity change from 0 to 512 [ 178.397512][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 178.398718][ T7859] IPVS: using max 19 ests per chain, 45600 per kthread [ 178.408985][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 178.442031][ T23] usb 1-1: USB disconnect, device number 8 [ 178.449198][ T7861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.487496][ T7861] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.724328][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.771772][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 179.160715][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 179.188711][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 179.206947][ T7882] nbd: socks must be embedded in a SOCK_ITEM attr [ 179.528367][ T7888] tipc: Started in network mode [ 179.535922][ T7888] tipc: Node identity 000000003a0000000000000000000001, cluster identity 4711 [ 179.559082][ T7888] tipc: Enabling of bearer rejected, failed to enable media [ 179.578075][ T7890] loop1: detected capacity change from 0 to 764 [ 179.653993][ T7890] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 179.726116][ T7874] loop2: detected capacity change from 0 to 32768 [ 179.771482][ T7872] loop3: detected capacity change from 0 to 32768 [ 179.785539][ T7874] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 179.868641][ T7872] jfs: Unrecognized mount option "errops=remount-ro" or missing value [ 179.911814][ T7874] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 180.302024][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 180.365677][ T7907] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 180.372191][ T7907] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 180.430982][ T7907] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 180.464193][ T7907] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 180.480155][ T7911] loop2: detected capacity change from 0 to 256 [ 180.497601][ T7907] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 180.525915][ T7907] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 180.545983][ T7907] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 180.574383][ T7907] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 180.603121][ T7911] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 180.616078][ T7907] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 180.635085][ T7907] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 180.810851][ T7917] Bluetooth: MGMT ver 1.22 [ 181.567140][ T7947] ucma_write: process 376 (syz.0.766) changed security contexts after opening file descriptor, this is not allowed. [ 181.613466][ T7950] loop1: detected capacity change from 0 to 164 [ 182.006750][ T7958] loop0: detected capacity change from 0 to 1024 [ 182.105557][ T7958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.349656][ T7968] loop1: detected capacity change from 0 to 256 [ 182.390082][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.477560][ T7949] loop3: detected capacity change from 0 to 40427 [ 182.557654][ T7949] F2FS-fs (loop3): invalid crc value [ 182.661793][ T7949] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.884442][ T7949] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 182.918922][ T7986] loop0: detected capacity change from 0 to 128 [ 182.946566][ T7986] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 183.000386][ T7986] hpfs: filesystem error: improperly stopped [ 183.038238][ T7986] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 183.055228][ T7986] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 183.080493][ T7986] hpfs: You really don't want any checks? You are crazy... [ 183.088543][ T5770] syz-executor: attempt to access beyond end of device [ 183.088543][ T5770] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.090700][ T7986] hpfs: hpfs_map_sector(): read error [ 183.109383][ T7986] hpfs: code page support is disabled [ 183.126837][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 183.155237][ T7986] hpfs: hpfs_map_4sectors(): unaligned read [ 183.161829][ T7986] hpfs: hpfs_map_4sectors(): unaligned read [ 183.167932][ T7986] hpfs: filesystem error: unable to find root dir [ 183.503932][ T7993] hfsplus: request for non-existent node 211 in B*Tree [ 183.527005][ T7993] hfsplus: request for non-existent node 211 in B*Tree [ 184.011322][ T8003] set_capacity_and_notify: 2 callbacks suppressed [ 184.011355][ T8003] loop1: detected capacity change from 0 to 512 [ 184.100930][ T8003] EXT4-fs (loop1): orphan cleanup on readonly fs [ 184.111804][ T8003] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.789: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 184.241514][ T8003] EXT4-fs error (device loop1): ext4_quota_enable:7143: comm syz.1.789: Bad quota inode: 4, type: 1 [ 184.294489][ T8012] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 184.321654][ T8003] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.361186][ T8003] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 184.376007][ T8003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.555772][ T7995] loop0: detected capacity change from 0 to 32768 [ 184.591353][ T7995] (syz.0.784,7995,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.605734][ T8003] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 184.627907][ T7995] (syz.0.784,7995,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.653892][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.693635][ T7995] JBD2: Ignoring recovery information on journal [ 184.709791][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.750084][ T7999] loop2: detected capacity change from 0 to 40427 [ 184.831820][ T7995] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 184.852479][ T7999] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.867657][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 184.898701][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.949466][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.973009][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.004429][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.029151][ T7999] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 185.041076][ T7995] (syz.0.784,7995,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 185.055923][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.069902][ T7995] (syz.0.784,7995,0):update_backups:188 ERROR: status = -12 [ 185.098945][ T23] usb 4-1: config 0 descriptor?? [ 185.104326][ T7995] ocfs2: Failed to update super blocks on 7,0 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 185.254672][ T5767] ocfs2: Unmounting device (7,0) on (node local) [ 185.625000][ T23] microsoft 0003:045E:07DA.000D: collection stack underflow [ 185.625033][ T23] microsoft 0003:045E:07DA.000D: item 0 4 0 12 parsing failed [ 185.631549][ T23] microsoft 0003:045E:07DA.000D: parse failed [ 185.631649][ T23] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 185.779942][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 185.844769][ T23] usb 4-1: USB disconnect, device number 11 [ 185.953656][ T8035] netlink: 'syz.0.800': attribute type 32 has an invalid length. [ 185.953747][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 185.953934][ T8035] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 185.978513][ T8035] Zero length message leads to an empty skb [ 186.967586][ T8045] loop2: detected capacity change from 0 to 32768 [ 186.993546][ T8045] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.025773][ T788] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 187.087578][ T8045] XFS (loop2): Ending clean mount [ 187.108810][ T8045] XFS (loop2): Quotacheck needed: Please wait. [ 187.183118][ T8045] XFS (loop2): Quotacheck: Done. [ 187.223501][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.223536][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.223577][ T788] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 187.223602][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.226284][ T788] usb 4-1: config 0 descriptor?? [ 187.337602][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.732002][ T788] uclogic 0003:2179:0077.000E: interface is invalid, ignoring [ 187.933296][ T788] usb 4-1: USB disconnect, device number 12 [ 187.948863][ T8069] loop2: detected capacity change from 0 to 8192 [ 187.969577][ T8069] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.984045][ T8069] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 187.994454][ T8069] REISERFS (device loop2): using writeback data mode [ 188.003885][ T8069] reiserfs: using flush barriers [ 188.020943][ T8069] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.038521][ T8069] REISERFS (device loop2): checking transaction log (loop2) [ 188.060237][ T8069] REISERFS (device loop2): Using r5 hash to sort names [ 188.077991][ T8069] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 188.088248][ T8069] REISERFS warning (device loop2): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 188.098902][ T8069] REISERFS error (device loop2): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 188.112260][ T8069] REISERFS (device loop2): Remounting filesystem read-only [ 188.127262][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 188.128803][ T8076] loop1: detected capacity change from 0 to 256 [ 188.222478][ T28] audit: type=1800 audit(1769017440.883:40): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.815" name="file1" dev="loop1" ino=1048649 res=0 errno=0 [ 188.333995][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 188.350018][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 188.387387][ T27] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 188.412961][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.445648][ T27] usb 1-1: config 0 descriptor?? [ 188.911794][ T27] sony 0003:054C:024B.000F: unknown main item tag 0x0 [ 188.925130][ T27] sony 0003:054C:024B.000F: item fetching failed at offset 3/5 [ 188.938641][ T8091] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 188.949080][ T27] sony 0003:054C:024B.000F: parse failed [ 188.955975][ T27] sony: probe of 0003:054C:024B.000F failed with error -22 [ 188.963936][ T8091] NCSI netlink: No device for ifindex 0 [ 189.129792][ T27] usb 1-1: USB disconnect, device number 9 [ 189.192536][ T8096] loop2: detected capacity change from 0 to 2048 [ 189.296317][ T8096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.310760][ T8080] loop1: detected capacity change from 0 to 32768 [ 189.365462][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.848851][ T8113] ip6tnl2: entered allmulticast mode [ 189.985395][ T8121] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 190.492571][ T8133] loop1: detected capacity change from 0 to 1024 [ 190.505146][ T8135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.842'. [ 190.531165][ T8133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.854471][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.046180][ T8151] netlink: 'syz.3.850': attribute type 29 has an invalid length. [ 191.055278][ T8151] netlink: 'syz.3.850': attribute type 29 has an invalid length. [ 191.074168][ T8149] loop0: detected capacity change from 0 to 4096 [ 191.106616][ T8151] netlink: 'syz.3.850': attribute type 29 has an invalid length. [ 191.115064][ T8149] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 191.234961][ T8149] ntfs3: loop0: Failed to load $Extend (-22). [ 191.256239][ T8149] ntfs3: loop0: Failed to initialize $Extend. [ 191.665491][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 191.872847][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 191.910942][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.922506][ T23] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 191.961480][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.981235][ T23] usb 4-1: config 0 descriptor?? [ 192.039635][ T788] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 192.245853][ T788] usb 3-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 192.264433][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.284669][ T788] usb 3-1: config 0 descriptor?? [ 192.460683][ T23] sunplus 0003:04FC:05D8.0010: unknown main item tag 0x0 [ 192.488635][ T23] sunplus 0003:04FC:05D8.0010: unknown main item tag 0x0 [ 192.542926][ T23] sunplus 0003:04FC:05D8.0010: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0 [ 192.699000][ T23] usb 4-1: USB disconnect, device number 13 [ 192.733378][ T8177] fido_id[8177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 192.790144][ T788] asus 0003:0B05:1807.0011: hidraw0: USB HID v1.01 Device [HID 0b05:1807] on usb-dummy_hcd.2-1/input0 [ 192.823319][ T788] asus 0003:0B05:1807.0011: Asus input not registered [ 192.853709][ T788] asus: probe of 0003:0B05:1807.0011 failed with error -12 [ 192.983998][ T788] usb 3-1: USB disconnect, device number 10 [ 193.041300][ T8185] loop0: detected capacity change from 0 to 2048 [ 193.080453][ T8186] fido_id[8186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 193.119273][ T8185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.196376][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.257149][ T8192] loop1: detected capacity change from 0 to 1024 [ 193.345161][ T8192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.392820][ T8192] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.867: inode #174: comm syz.1.867: iget: illegal inode # [ 193.428490][ T8196] loop0: detected capacity change from 0 to 64 [ 193.525782][ T8192] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.867: error while reading EA inode 174 err=-117 [ 193.712609][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.112998][ T8198] loop3: detected capacity change from 0 to 32768 [ 194.139130][ T8198] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 194.139130][ T8198] [ 194.151248][ T8198] ERROR: (device loop3): remounting filesystem as read-only [ 194.395784][ T8220] netlink: 320 bytes leftover after parsing attributes in process `syz.1.879'. [ 194.631169][ T8226] loop1: detected capacity change from 0 to 2048 [ 194.697879][ T8229] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.778369][ T28] audit: type=1800 audit(1769017447.020:41): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.882" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 194.835364][ T8226] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 194.870075][ T8226] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 194.932581][ T8226] Remounting filesystem read-only [ 195.002053][ T8235] loop3: detected capacity change from 0 to 1024 [ 195.009975][ T8235] EXT4-fs: inline encryption not supported [ 195.028913][ T8235] EXT4-fs: Ignoring removed i_version option [ 195.047641][ T5777] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 195.070617][ T5777] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 195.071474][ T8235] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.089269][ T5777] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 195.096725][ T5777] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.117697][ T5777] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.144463][ T5777] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.159010][ T8235] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.885: lblock 2 mapped to illegal pblock 2 (length 1) [ 195.174054][ T5777] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 195.181136][ T5777] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 195.181158][ T5777] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.181175][ T5777] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.181191][ T5777] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.183233][ T5777] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 195.206449][ T8235] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 195.207814][ T5777] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 195.234833][ T8235] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.885: lblock 0 mapped to illegal pblock 48 (length 1) [ 195.240297][ T5777] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.263323][ T5777] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.263352][ T5777] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.360647][ T8235] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 195.360796][ T8235] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.885: Failed to acquire dquot type 0 [ 195.361138][ T8235] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 195.361380][ T8235] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.885: mark_inode_dirty error [ 195.361572][ T8235] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 195.361648][ T8235] EXT4-fs (loop3): 1 orphan inode deleted [ 195.362997][ T8235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.375360][ T135] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.381962][ T135] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 195.383011][ T135] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:5: Failed to release dquot type 0 [ 195.477818][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.478089][ T135] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.478590][ T135] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 195.478629][ T135] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:5: Failed to release dquot type 0 [ 195.479002][ T5770] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 195.479269][ T5770] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 195.479465][ T5770] EXT4-fs error (device loop3): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 195.585855][ T8242] loop1: detected capacity change from 0 to 8192 [ 195.624241][ T8242] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 195.624271][ T8242] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 195.624407][ T8242] REISERFS (device loop1): using ordered data mode [ 195.624419][ T8242] reiserfs: using flush barriers [ 195.632508][ T8242] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.633086][ T8242] REISERFS (device loop1): checking transaction log (loop1) [ 195.653317][ T8242] REISERFS (device loop1): Using r5 hash to sort names [ 195.653775][ T8242] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 196.312328][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.312445][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.565427][ T28] audit: type=1326 audit(1769017448.694:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.2.902" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1b459acb9 code=0x0 [ 196.587023][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.192596][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 197.209670][ T8297] netlink: 'syz.0.914': attribute type 322 has an invalid length. [ 197.395629][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 197.414429][ T23] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 197.435247][ T23] usb 2-1: config 0 has no interface number 0 [ 197.462656][ T23] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 197.479362][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.491811][ T23] usb 2-1: Product: syz [ 197.496300][ T23] usb 2-1: Manufacturer: syz [ 197.524536][ T23] usb 2-1: SerialNumber: syz [ 197.545625][ T23] usb 2-1: config 0 descriptor?? [ 197.560893][ T23] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 197.576043][ T8307] loop2: detected capacity change from 0 to 512 [ 197.587490][ T23] pctv452e: pctv452e_power_ctrl: 1 [ 197.587490][ T23] [ 197.595886][ T23] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 197.595886][ T23] [ 197.607872][ T8307] EXT4-fs: Ignoring removed i_version option [ 197.630100][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 197.645644][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.656817][ T23] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 197.686063][ T8307] EXT4-fs (loop2): 1 truncate cleaned up [ 197.704046][ T23] usb 2-1: media controller created [ 197.711502][ T8307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.726726][ T23] dvb-usb: bulk message failed: -22 (8/0) [ 197.764310][ T23] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 197.800781][ T8286] pctv452e: I2C error -22; AA 02 00 00 F5 -> 00 00 00 00 00 00 00 [ 197.813625][ T23] dvb-usb: MAC address reading failed. [ 197.831982][ T8301] loop0: detected capacity change from 0 to 32768 [ 197.878397][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.908247][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.919635][ T8301] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.033161][ T23] DVB: Unable to find symbol stb0899_attach() [ 198.048377][ T23] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 198.107396][ T8322] loop2: detected capacity change from 0 to 128 [ 198.152635][ T8301] XFS (loop0): Ending clean mount [ 198.168798][ T8301] XFS (loop0): Quotacheck needed: Please wait. [ 198.182334][ T8322] syz.2.920: attempt to access beyond end of device [ 198.182334][ T8322] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 198.205639][ T23] rc_core: IR keymap rc-tt-1500 not found [ 198.211754][ T23] Registered IR keymap rc-empty [ 198.222731][ T8301] XFS (loop0): Quotacheck: Done. [ 198.224356][ T23] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 198.232443][ T8322] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 198.240897][ T23] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input10 [ 198.278672][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 198.300130][ T23] pctv452e: pctv452e_power_ctrl: 0 [ 198.300130][ T23] [ 198.322107][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 198.357251][ T23] usb 2-1: USB disconnect, device number 7 [ 198.380519][ T5767] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.408062][ T5771] sysv_free_block: flc_count > flc_size [ 198.445342][ T5771] sysv_free_block: flc_count > flc_size [ 198.450961][ T5771] sysv_free_block: flc_count > flc_size [ 198.486060][ T5771] sysv_free_block: flc_count > flc_size [ 198.506201][ T5771] sysv_free_block: flc_count > flc_size [ 198.517026][ T5771] sysv_free_block: flc_count > flc_size [ 198.536154][ T5771] sysv_free_block: flc_count > flc_size [ 198.544886][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 198.574798][ T5771] sysv_free_block: flc_count > flc_size [ 198.599490][ T5771] sysv_free_block: flc_count > flc_size [ 198.618692][ T5771] sysv_free_block: flc_count > flc_size [ 198.633376][ T5771] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 198.844288][ T8329] loop3: detected capacity change from 0 to 65 [ 198.900773][ T8329] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 199.240545][ T8341] loop3: detected capacity change from 0 to 128 [ 199.290539][ T8341] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 199.306741][ T8341] hpfs: filesystem error: improperly stopped [ 199.314397][ T788] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.323191][ T8341] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 199.344842][ T8341] hpfs: You really don't want any checks? You are crazy... [ 199.354535][ T8341] hpfs: hpfs_map_sector(): read error [ 199.359981][ T8341] hpfs: code page support is disabled [ 199.373078][ T8341] hpfs: hpfs_map_4sectors(): unaligned read [ 199.386432][ T8341] hpfs: hpfs_map_4sectors(): unaligned read [ 199.413724][ T8341] hpfs: filesystem error: unable to find root dir [ 199.540085][ T8350] loop2: detected capacity change from 0 to 256 [ 199.543850][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.576467][ T788] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.590504][ T8350] FAT-fs (loop2): Directory bread(block 64) failed [ 199.622803][ T788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.637451][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.643665][ T8350] FAT-fs (loop2): Directory bread(block 65) failed [ 199.659059][ T8350] FAT-fs (loop2): Directory bread(block 66) failed [ 199.676547][ T788] usb 1-1: Product: syz [ 199.680803][ T788] usb 1-1: Manufacturer: syz [ 199.689694][ T788] usb 1-1: SerialNumber: syz [ 199.694877][ T8350] FAT-fs (loop2): Directory bread(block 67) failed [ 199.701598][ T8350] FAT-fs (loop2): Directory bread(block 68) failed [ 199.721413][ T8350] FAT-fs (loop2): Directory bread(block 69) failed [ 199.731865][ T8350] FAT-fs (loop2): Directory bread(block 70) failed [ 199.740157][ T788] cdc_ncm 1-1:1.0: skipping garbage [ 199.743366][ T8350] FAT-fs (loop2): Directory bread(block 71) failed [ 199.753435][ T8350] FAT-fs (loop2): Directory bread(block 72) failed [ 199.765534][ T8350] FAT-fs (loop2): Directory bread(block 73) failed [ 199.771862][ T788] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 199.786952][ T788] cdc_ncm 1-1:1.0: bind() failure [ 199.819721][ T788] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 199.843052][ T788] cdc_ncm 1-1:1.1: bind() failure [ 199.967199][ T788] usb 1-1: USB disconnect, device number 10 [ 199.979809][ T8358] loop1: detected capacity change from 0 to 256 [ 200.145499][ T8363] macsec1: entered promiscuous mode [ 200.150792][ T8363] team0: entered promiscuous mode [ 200.187585][ T8363] team_slave_0: entered promiscuous mode [ 200.193773][ T8363] team_slave_1: entered promiscuous mode [ 200.205712][ T8363] team0: Device macsec1 is already an upper device of the team interface [ 200.222222][ T8363] team0: left promiscuous mode [ 200.227450][ T8363] team_slave_0: left promiscuous mode [ 200.238466][ T8363] team_slave_1: left promiscuous mode [ 200.657361][ T8371] loop3: detected capacity change from 0 to 8192 [ 200.675768][ T8371] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 200.700791][ T8371] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 200.711579][ T8371] REISERFS (device loop3): using ordered data mode [ 200.718322][ T8371] reiserfs: using flush barriers [ 200.733816][ T8371] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.750600][ T8371] REISERFS (device loop3): checking transaction log (loop3) [ 200.766595][ T8371] REISERFS (device loop3): Using r5 hash to sort names [ 200.777035][ T8371] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 200.805940][ T8371] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 200.950801][ T8387] loop0: detected capacity change from 0 to 128 [ 200.980390][ T8389] loop1: detected capacity change from 0 to 16 [ 200.992662][ T8387] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 201.031554][ T8389] erofs: (device loop1): mounted with root inode @ nid 36. [ 201.091925][ T28] audit: type=1800 audit(1769017452.913:43): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.949" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 201.883447][ T8410] devtmpfs: Too few inodes for current use [ 202.168692][ T8391] JBD2: Ignoring recovery information on journal [ 202.316531][ T8391] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 202.432997][ T8391] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 202.493486][ T8418] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 202.505762][ T8391] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 202.538280][ T8391] OCFS2: File system is now read-only. [ 202.544013][ T8391] (syz.2.952,8391,1):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 202.568617][ T8418] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 202.622920][ T8418] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 202.662085][ T8418] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 202.702780][ T8418] ntfs: volume version 3.1. [ 202.783968][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 202.885469][ T8427] trusted_key: encrypted_key: key user:syz not found [ 202.924364][ T5777] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 202.980479][ T8411] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 203.267051][ T5770] (syz-executor,5770,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 203.413473][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 203.553450][ T6897] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.752750][ T6897] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 203.767604][ T6897] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 203.809128][ T6897] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 203.829780][ T6897] usb 2-1: config 220 has no interface number 2 [ 203.838004][ T6897] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 203.852354][ T6897] usb 2-1: config 220 interface 0 has no altsetting 0 [ 203.860575][ T6897] usb 2-1: config 220 interface 76 has no altsetting 0 [ 203.868940][ T6897] usb 2-1: config 220 interface 1 has no altsetting 0 [ 203.887550][ T6897] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 203.898516][ T6897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.910208][ T6897] usb 2-1: Product: syz [ 203.914435][ T6897] usb 2-1: Manufacturer: syz [ 203.919837][ T6897] usb 2-1: SerialNumber: syz [ 204.108788][ T8439] set_capacity_and_notify: 3 callbacks suppressed [ 204.108806][ T8439] loop2: detected capacity change from 0 to 32768 [ 204.164726][ T6897] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 204.175720][ T6897] usb 2-1: No valid video chain found. [ 204.188323][ T6897] usb 2-1: selecting invalid altsetting 0 [ 204.228293][ T6897] usb 2-1: selecting invalid altsetting 0 [ 204.234758][ T8439] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 204.237533][ T8459] loop0: detected capacity change from 0 to 512 [ 204.284521][ T6897] usbtest: probe of 2-1:220.1 failed with error -22 [ 204.309211][ T6897] usb 2-1: USB disconnect, device number 8 [ 204.434544][ T8439] XFS (loop2): Ending clean mount [ 204.557833][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 205.313571][ T8467] loop3: detected capacity change from 0 to 32768 [ 205.326778][ T8467] (syz.3.981,8467,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.374761][ T8467] (syz.3.981,8467,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.376384][ T8485] loop1: detected capacity change from 0 to 512 [ 205.419550][ T8467] (syz.3.981,8467,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 205.458139][ T8467] JBD2: Ignoring recovery information on journal [ 205.471552][ T8485] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.990: invalid indirect mapped block 10 (level 1) [ 205.501306][ T8485] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.990: invalid indirect mapped block 8 (level 1) [ 205.502380][ T8485] EXT4-fs (loop1): 1 truncate cleaned up [ 205.503756][ T8485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.584867][ T8467] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 205.645490][ T8490] loop0: detected capacity change from 0 to 4096 [ 205.669005][ T8467] (syz.3.981,8467,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 205.669205][ T8467] (syz.3.981,8467,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 205.669236][ T8467] (syz.3.981,8467,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 205.669377][ T8467] (syz.3.981,8467,1):ocfs2_quota_read:201 ERROR: status = -5 [ 205.669402][ T8467] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 205.669577][ T8467] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 205.669603][ T8467] (syz.3.981,8467,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 205.670592][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.694017][ T8490] NILFS (loop0): invalid segment: Checksum error in segment payload [ 205.694047][ T8490] NILFS (loop0): trying rollback from an earlier position [ 205.711140][ T8492] (syz.3.981,8492,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 205.711298][ T8492] (syz.3.981,8492,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 205.711328][ T8492] (syz.3.981,8492,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 205.711403][ T8492] (syz.3.981,8492,1):ocfs2_quota_read:201 ERROR: status = -5 [ 205.711426][ T8492] Quota error (device loop3): find_next_id: Can't read quota tree block 5 [ 205.711631][ T8492] (syz.3.981,8492,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 205.733608][ T8467] (syz.3.981,8467,1):ocfs2_mknod:314 ERROR: status = -5 [ 205.895140][ T8490] NILFS (loop0): recovery complete [ 205.896212][ T8495] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.955858][ T8467] (syz.3.981,8467,1):ocfs2_mknod:502 ERROR: status = -5 [ 205.955985][ T8467] (syz.3.981,8467,1):ocfs2_create:676 ERROR: status = -5 [ 206.112604][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 206.551876][ T8509] loop0: detected capacity change from 0 to 1024 [ 206.619643][ T8509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 206.619769][ T8509] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.653429][ T8509] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.998: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.658973][ T8509] EXT4-fs (loop0): Remounting filesystem read-only [ 206.701504][ T8513] loop3: detected capacity change from 0 to 2048 [ 206.732309][ T8513] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 206.735343][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 206.756931][ T8513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.898272][ T8515] loop0: detected capacity change from 0 to 2048 [ 206.950762][ T8515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.994642][ T8515] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.1000: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 207.015082][ T8515] EXT4-fs (loop0): Remounting filesystem read-only [ 207.151553][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.031491][ T8519] loop3: detected capacity change from 0 to 32768 [ 208.131626][ T8519] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.523758][ T8519] XFS (loop3): Ending clean mount [ 208.543610][ T8519] XFS (loop3): Quotacheck needed: Please wait. [ 208.727869][ T8519] XFS (loop3): Quotacheck: Done. [ 208.883466][ T5770] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.066598][ T8537] loop1: detected capacity change from 0 to 32768 [ 209.187549][ T8537] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 209.369092][ T8537] XFS (loop1): Ending clean mount [ 209.393727][ T8537] XFS (loop1): Quotacheck needed: Please wait. [ 209.408008][ T5772] kernel write not supported for file /input/mice (pid: 5772 comm: kworker/0:3) [ 209.453153][ T8554] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 209.490716][ T8554] F2FS-fs (loop2): Image doesn't support compression [ 209.521639][ T8554] F2FS-fs (loop2): Image doesn't support compression [ 209.555069][ T8537] XFS (loop1): Quotacheck: Done. [ 209.570953][ T8554] F2FS-fs (loop2): invalid crc value [ 209.648023][ T8554] F2FS-fs (loop2): Found nat_bits in checkpoint [ 209.697380][ T8573] set_capacity_and_notify: 1 callbacks suppressed [ 209.697397][ T8573] loop0: detected capacity change from 0 to 256 [ 209.733848][ T8573] exfat: Deprecated parameter 'namecase' [ 209.787655][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 209.803681][ T8573] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 209.860551][ T8554] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 209.944290][ T28] audit: type=1800 audit(1769017461.200:44): pid=8554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1014" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 210.013465][ T8554] F2FS-fs (loop2): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0 [ 210.067754][ T8554] syz.2.1014: attempt to access beyond end of device [ 210.067754][ T8554] loop2: rw=2049, sector=77824, nr_sectors = 160 limit=40427 [ 210.326138][ T5771] syz-executor: attempt to access beyond end of device [ 210.326138][ T5771] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.373377][ T28] audit: type=1326 audit(1769017461.603:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 210.404006][ T5771] F2FS-fs (loop2): Remounting filesystem read-only [ 210.429100][ T28] audit: type=1326 audit(1769017461.603:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 210.501603][ T28] audit: type=1326 audit(1769017461.612:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f281055b58e code=0x7ffc0000 [ 210.525031][ T28] audit: type=1326 audit(1769017461.612:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f281055b58e code=0x7ffc0000 [ 210.548806][ T28] audit: type=1326 audit(1769017461.612:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 210.572228][ T28] audit: type=1326 audit(1769017461.612:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 210.600991][ T28] audit: type=1326 audit(1769017461.621:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 210.624221][ T28] audit: type=1326 audit(1769017461.621:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 210.943140][ T8581] loop3: detected capacity change from 0 to 32768 [ 211.106075][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1026'. [ 211.135756][ T8588] loop0: detected capacity change from 0 to 4096 [ 211.174298][ T8593] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.358786][ T23] kernel write not supported for file /input/mice (pid: 23 comm: kworker/1:0) [ 211.691036][ T8605] tipc: Enabling of bearer rejected, already enabled [ 211.816937][ T28] audit: type=1326 audit(1769017462.940:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a899acb9 code=0x7ffc0000 [ 212.182619][ T8617] loop3: detected capacity change from 0 to 4096 [ 212.252584][ T8623] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.869243][ T8615] loop0: detected capacity change from 0 to 40427 [ 212.903579][ T8615] F2FS-fs (loop0): invalid crc value [ 212.925434][ T8615] F2FS-fs (loop0): Found nat_bits in checkpoint [ 212.989737][ T8626] loop2: detected capacity change from 0 to 32768 [ 213.019159][ T8626] JBD2: Ignoring recovery information on journal [ 213.031050][ T8615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 213.088541][ T8626] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 213.213786][ T5767] syz-executor: attempt to access beyond end of device [ 213.213786][ T5767] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.243840][ T5767] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 213.286368][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 213.481986][ T8642] loop3: detected capacity change from 0 to 512 [ 213.620993][ T8647] loop2: detected capacity change from 0 to 512 [ 213.658377][ T8642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.753513][ T8642] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.808502][ T8647] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.1051: corrupted in-inode xattr: bad e_name length [ 213.871108][ T8652] tipc: Enabling of bearer rejected, failed to enable media [ 213.950214][ T8647] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1051: couldn't read orphan inode 15 (err -117) [ 213.970910][ T8647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.003086][ T8647] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1051: dx entry: limit 0 != root limit 125 [ 214.055557][ T8647] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1051: Corrupt directory, running e2fsck is recommended [ 214.084065][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.086362][ T8647] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.1051: path /262/file7: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 214.290893][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.357203][ T8658] loop3: detected capacity change from 0 to 512 [ 214.402396][ T8658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.451015][ T8658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 214.509303][ T8658] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.559198][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1057'. [ 214.729727][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 215.017761][ T8678] loop2: detected capacity change from 0 to 4096 [ 215.130279][ T8688] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.559085][ T5772] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 215.775149][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.794461][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.809558][ T5772] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 215.826200][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.845407][ T8684] loop3: detected capacity change from 0 to 32768 [ 215.855781][ T5772] usb 1-1: config 0 descriptor?? [ 215.913201][ T8684] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.012374][ T8684] XFS (loop3): Ending clean mount [ 216.311118][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.356405][ T5772] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 216.418049][ T8705] loop1: detected capacity change from 0 to 32768 [ 216.425288][ T5772] arvo 0003:1E7D:30D4.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 216.455607][ T8705] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.520141][ T8705] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 216.573387][ T5772] arvo 0003:1E7D:30D4.0012: couldn't init struct arvo_device [ 216.584161][ T8705] BTRFS info (device loop1): enabling ssd optimizations [ 216.597127][ T5772] arvo 0003:1E7D:30D4.0012: couldn't install keyboard [ 216.604505][ T8705] BTRFS info (device loop1): using spread ssd allocation scheme [ 216.616052][ T5772] arvo: probe of 0003:1E7D:30D4.0012 failed with error -71 [ 216.632268][ T8705] BTRFS info (device loop1): not using ssd optimizations [ 216.645565][ T8705] BTRFS info (device loop1): not using spread ssd allocation scheme [ 216.673339][ T5772] usb 1-1: USB disconnect, device number 11 [ 216.680099][ T8705] BTRFS info (device loop1): using free space tree [ 216.878969][ T8705] BTRFS info (device loop1): auto enabling async discard [ 217.308366][ T1141] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 217.433033][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.496045][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1077'. [ 218.115581][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 218.320353][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.343119][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.363123][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 218.382060][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.409903][ T8] usb 3-1: config 0 descriptor?? [ 218.675727][ T8757] loop0: detected capacity change from 0 to 32768 [ 218.707545][ T8757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1086 (8757) [ 218.733484][ T8757] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.748931][ T8757] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 218.762472][ T8757] BTRFS info (device loop0): enabling ssd optimizations [ 218.773045][ T8757] BTRFS info (device loop0): using spread ssd allocation scheme [ 218.783927][ T8757] BTRFS info (device loop0): not using ssd optimizations [ 218.794036][ T8757] BTRFS info (device loop0): not using spread ssd allocation scheme [ 218.808606][ T8757] BTRFS info (device loop0): using free space tree [ 218.881089][ T8757] BTRFS info (device loop0): auto enabling async discard [ 218.888315][ T8] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 218.898056][ T8] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 219.101515][ T8] arvo 0003:1E7D:30D4.0013: couldn't init struct arvo_device [ 219.129912][ T8] arvo 0003:1E7D:30D4.0013: couldn't install keyboard [ 219.162362][ T8] arvo: probe of 0003:1E7D:30D4.0013 failed with error -71 [ 219.183720][ T8] usb 3-1: USB disconnect, device number 11 [ 219.219850][ T11] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 219.350567][ T5767] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.652236][ T5996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop0 scanned by udevd (5996) [ 219.691573][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1091'. [ 220.289012][ T8799] 9pnet_fd: Insufficient options for proto=fd [ 220.420393][ T8802] loop3: detected capacity change from 0 to 4096 [ 220.494579][ T8805] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.756506][ T8807] loop0: detected capacity change from 0 to 4096 [ 220.858533][ T8814] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.973305][ T8816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1102'. [ 221.430458][ T8813] loop3: detected capacity change from 0 to 32768 [ 221.455730][ T8813] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 221.504686][ T8811] loop1: detected capacity change from 0 to 32768 [ 221.556791][ T8811] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 221.572287][ T5996] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 221.646367][ T8811] XFS (loop1): Ending clean mount [ 221.791065][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.129101][ T8836] loop2: detected capacity change from 0 to 512 [ 222.157454][ T8836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.233800][ T8836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 222.251516][ T8836] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.527677][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 222.857190][ T8828] loop0: detected capacity change from 0 to 32768 [ 222.884326][ T8853] loop1: detected capacity change from 0 to 4096 [ 222.909342][ T8828] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.924095][ T8828] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 222.942502][ T8828] BTRFS info (device loop0): enabling ssd optimizations [ 222.950555][ T8828] BTRFS info (device loop0): using spread ssd allocation scheme [ 222.960697][ T8828] BTRFS info (device loop0): not using ssd optimizations [ 222.968579][ T8828] BTRFS info (device loop0): not using spread ssd allocation scheme [ 222.976717][ T8828] BTRFS info (device loop0): using free space tree [ 222.983490][ T8854] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.100987][ T8828] BTRFS info (device loop0): auto enabling async discard [ 223.414437][ T59] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 223.492505][ T5767] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.871000][ T8851] loop2: detected capacity change from 0 to 32768 [ 223.937601][ T8851] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.083209][ T8894] loop3: detected capacity change from 0 to 512 [ 224.089197][ T8851] XFS (loop2): Ending clean mount [ 224.124402][ T8894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.169278][ T8894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 224.169404][ T8894] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.366635][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 224.367085][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 225.969606][ T8893] loop0: detected capacity change from 0 to 65536 [ 226.032983][ T8893] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 226.142191][ T8893] XFS (loop0): Ending clean mount [ 226.160953][ T8893] XFS (loop0): Quotacheck needed: Please wait. [ 226.268970][ T8893] XFS (loop0): Quotacheck: Done. [ 226.349448][ T8913] loop1: detected capacity change from 0 to 32768 [ 226.356138][ T8893] XFS (loop0): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 226.373447][ T8913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1130 (8913) [ 226.413780][ T8913] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.434143][ T8913] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 226.444935][ T8913] BTRFS info (device loop1): enabling ssd optimizations [ 226.463994][ T8913] BTRFS info (device loop1): using spread ssd allocation scheme [ 226.478116][ T8913] BTRFS info (device loop1): not using ssd optimizations [ 226.488567][ T5767] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 226.503288][ T8913] BTRFS info (device loop1): not using spread ssd allocation scheme [ 226.544962][ T8913] BTRFS info (device loop1): using free space tree [ 226.856233][ T8913] BTRFS info (device loop1): auto enabling async discard [ 227.168730][ T59] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 227.314096][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.459129][ T8980] loop0: detected capacity change from 0 to 32768 [ 228.481693][ T8980] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.530863][ T8980] XFS (loop0): Ending clean mount [ 228.661546][ T5767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.859083][ T9010] loop2: detected capacity change from 0 to 32768 [ 230.918113][ T9010] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 230.939622][ T9010] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 231.027784][ T9010] XFS (loop2): Ending clean mount [ 231.052681][ T9010] XFS (loop2): Quotacheck needed: Please wait. [ 231.152320][ T9010] XFS (loop2): Quotacheck: Done. [ 231.359670][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 231.572059][ T9009] loop1: detected capacity change from 0 to 65536 [ 231.658794][ T9009] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 231.741777][ T9009] XFS (loop1): Ending clean mount [ 231.750380][ T9009] XFS (loop1): Quotacheck needed: Please wait. [ 231.827343][ T9009] XFS (loop1): Quotacheck: Done. [ 231.892106][ T9022] loop3: detected capacity change from 0 to 32768 [ 231.892279][ T9009] XFS (loop1): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 231.935940][ T9022] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 231.977901][ T5777] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 232.031468][ T9022] XFS (loop3): Ending clean mount [ 232.331786][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 233.106090][ T9061] loop3: detected capacity change from 0 to 256 [ 233.136861][ T9061] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.173650][ T9061] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 233.195320][ T9061] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 233.683432][ T9052] loop2: detected capacity change from 0 to 65536 [ 233.717186][ T9052] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 233.770539][ T9052] XFS (loop2): Ending clean mount [ 233.785584][ T9052] XFS (loop2): Quotacheck needed: Please wait. [ 233.846599][ T9052] XFS (loop2): Quotacheck: Done. [ 233.888368][ T9052] XFS (loop2): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 233.978952][ T5771] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 234.078279][ T9084] loop0: detected capacity change from 0 to 256 [ 234.119751][ T9084] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.142082][ T9084] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 234.189252][ T9084] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 234.735043][ T9094] loop0: detected capacity change from 0 to 64 [ 234.912023][ T9092] loop1: detected capacity change from 0 to 8192 [ 234.931190][ T9092] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.931219][ T9092] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 234.932073][ T9092] REISERFS (device loop1): using journaled data mode [ 234.932090][ T9092] reiserfs: using flush barriers [ 234.962767][ T9092] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.963177][ T9092] REISERFS (device loop1): checking transaction log (loop1) [ 234.994013][ T9092] REISERFS (device loop1): Using r5 hash to sort names [ 234.995322][ T9092] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 234.995386][ T9092] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 235.028927][ T9083] loop3: detected capacity change from 0 to 32768 [ 235.066787][ T9083] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 235.074775][ T9083] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.190653][ T9083] XFS (loop3): Ending clean mount [ 235.207936][ T9083] XFS (loop3): Quotacheck needed: Please wait. [ 235.316438][ T9083] XFS (loop3): Quotacheck: Done. [ 235.597036][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.584977][ T9111] loop1: detected capacity change from 0 to 32768 [ 236.654924][ T9128] loop2: detected capacity change from 0 to 256 [ 236.667659][ T9111] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 236.701653][ T9128] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.701674][ T9128] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 236.705463][ T9111] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.780216][ T9111] XFS (loop1): Ending clean mount [ 236.794689][ T9111] XFS (loop1): Quotacheck needed: Please wait. [ 236.801893][ T9128] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 236.840909][ T9111] XFS (loop1): Quotacheck: Done. [ 237.036853][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.193757][ T9136] loop2: detected capacity change from 0 to 64 [ 237.760224][ T9140] loop1: detected capacity change from 0 to 256 [ 237.798106][ T9140] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.798129][ T9140] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 237.843035][ T9140] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 238.034780][ T9142] loop2: detected capacity change from 0 to 8192 [ 238.084250][ T9142] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 238.084277][ T9142] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 238.085021][ T9142] REISERFS (device loop2): using journaled data mode [ 238.105378][ T9118] loop3: detected capacity change from 0 to 65536 [ 238.120488][ T9142] reiserfs: using flush barriers [ 238.167345][ T9142] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.167940][ T9142] REISERFS (device loop2): checking transaction log (loop2) [ 238.178440][ T9142] REISERFS (device loop2): Using r5 hash to sort names [ 238.178853][ T9142] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 238.178887][ T9142] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 238.315509][ T9118] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 238.465001][ T9118] XFS (loop3): Ending clean mount [ 238.517396][ T9118] XFS (loop3): Quotacheck needed: Please wait. [ 238.600336][ T9118] XFS (loop3): Quotacheck: Done. [ 238.666154][ T9118] XFS (loop3): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 238.677165][ T9155] binder: 9154:9155 ioctl c00c620f 200000000500 returned -22 [ 238.866250][ T5770] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 238.908599][ T9162] binder: 9159:9162 ioctl c00c620f 200000000500 returned -22 [ 239.477284][ T9171] loop1: detected capacity change from 0 to 64 [ 239.762113][ T9165] loop0: detected capacity change from 0 to 32768 [ 239.809886][ T9165] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 239.819171][ T9165] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 239.873997][ T9175] loop3: detected capacity change from 0 to 8192 [ 239.891796][ T9165] XFS (loop0): Ending clean mount [ 239.898507][ T9175] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 239.916290][ T9175] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 239.928024][ T9175] REISERFS (device loop3): using journaled data mode [ 239.935814][ T9175] reiserfs: using flush barriers [ 239.947936][ T9165] XFS (loop0): Quotacheck needed: Please wait. [ 239.974791][ T9175] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 239.994649][ T9175] REISERFS (device loop3): checking transaction log (loop3) [ 240.004094][ T9175] REISERFS (device loop3): Using r5 hash to sort names [ 240.012034][ T9175] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 240.042177][ T9175] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 240.088770][ T9165] XFS (loop0): Quotacheck: Done. [ 240.293772][ T9187] loop1: detected capacity change from 0 to 512 [ 240.345942][ T9187] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.394399][ T5767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.412602][ T9187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 240.518216][ T9187] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.1201: Invalid block bitmap block 0 in block_group 0 [ 240.578884][ T9187] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 240.591119][ T9187] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1201: attempt to clear invalid blocks 983261 len 1 [ 240.629792][ T9187] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.1201: Invalid inode table block 0 in block_group 0 [ 240.680143][ T9187] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 240.691690][ T9187] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 240.704180][ T9195] binder: 9194:9195 ioctl c00c620f 200000000500 returned -22 [ 240.707236][ T9187] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.1201: Invalid inode table block 0 in block_group 0 [ 240.747821][ T9187] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 240.772685][ T9187] EXT4-fs error (device loop1): ext4_truncate:4294: inode #11: comm syz.1.1201: mark_inode_dirty error [ 240.789287][ T9187] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 240.817976][ T9187] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.1201: Invalid inode table block 0 in block_group 0 [ 240.831782][ T9187] EXT4-fs (loop1): 1 truncate cleaned up [ 240.844951][ T9187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.100777][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.523023][ T9220] loop0: detected capacity change from 0 to 512 [ 241.543433][ T9223] loop3: detected capacity change from 0 to 64 [ 241.584384][ T9220] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.628340][ T9220] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 241.723426][ T9215] loop1: detected capacity change from 0 to 8192 [ 241.740661][ T9220] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.1218: Invalid block bitmap block 0 in block_group 0 [ 241.785639][ T9215] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 241.832695][ T9215] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 241.861651][ T9220] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 241.876694][ T9215] REISERFS (device loop1): using ordered data mode [ 241.892123][ T9215] reiserfs: using flush barriers [ 241.895962][ T9220] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.1218: attempt to clear invalid blocks 983261 len 1 [ 241.905420][ T9215] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.928219][ T9220] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.1218: Invalid inode table block 0 in block_group 0 [ 241.947028][ T9220] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 241.958454][ T9220] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 241.968254][ T9215] REISERFS (device loop1): checking transaction log (loop1) [ 241.973494][ T9220] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.1218: Invalid inode table block 0 in block_group 0 [ 241.994189][ T9220] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 242.006348][ T9215] REISERFS (device loop1): Using rupasov hash to sort names [ 242.006494][ T9220] EXT4-fs error (device loop0): ext4_truncate:4294: inode #11: comm syz.0.1218: mark_inode_dirty error [ 242.031468][ T9215] REISERFS (device loop1): using 3.5.x disk format [ 242.032669][ T9220] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 242.053773][ T9220] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.1218: Invalid inode table block 0 in block_group 0 [ 242.055387][ T9215] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 242.080565][ T9215] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 242.092288][ T9215] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 242.096888][ T9220] EXT4-fs (loop0): 1 truncate cleaned up [ 242.104449][ T9215] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 242.124297][ T9215] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 242.126579][ T9220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.194810][ T9215] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 242.246927][ T9215] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 242.300154][ T9215] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 242.519924][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.607703][ T9241] binder: 9240:9241 ioctl c00c620f 200000000500 returned -22 [ 243.101633][ T9247] loop0: detected capacity change from 0 to 8192 [ 243.168815][ T9247] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 243.249374][ T9247] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 243.316818][ T9247] REISERFS (device loop0): using journaled data mode [ 243.344379][ T9247] reiserfs: using flush barriers [ 243.417732][ T9272] loop2: detected capacity change from 0 to 512 [ 243.440051][ T9247] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 243.462649][ T9272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 243.510222][ T9272] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 243.540424][ T9247] REISERFS (device loop0): checking transaction log (loop0) [ 243.556201][ T9272] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.1224: Invalid block bitmap block 0 in block_group 0 [ 243.578265][ T9272] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 243.588223][ T9272] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1224: attempt to clear invalid blocks 983261 len 1 [ 243.610287][ T9272] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.1224: Invalid inode table block 0 in block_group 0 [ 243.625608][ T9247] REISERFS (device loop0): Using r5 hash to sort names [ 243.628264][ T9272] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 243.647938][ T9272] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 243.658822][ T9247] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 243.679817][ T9272] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.1224: Invalid inode table block 0 in block_group 0 [ 243.720181][ T9272] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 243.739748][ T9247] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 243.744640][ T9272] EXT4-fs error (device loop2): ext4_truncate:4294: inode #11: comm syz.2.1224: mark_inode_dirty error [ 243.777409][ T9272] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 243.787866][ T9272] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.1224: Invalid inode table block 0 in block_group 0 [ 243.832586][ T9270] loop3: detected capacity change from 0 to 8192 [ 243.836292][ T9272] EXT4-fs (loop2): 1 truncate cleaned up [ 243.874631][ T9272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.895469][ T9270] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 243.966147][ T9270] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 243.975858][ T9270] REISERFS (device loop3): using ordered data mode [ 243.982498][ T9270] reiserfs: using flush barriers [ 243.997845][ T9270] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.061813][ T9270] REISERFS (device loop3): checking transaction log (loop3) [ 244.095650][ T9270] REISERFS (device loop3): Using rupasov hash to sort names [ 244.113916][ T9270] REISERFS (device loop3): using 3.5.x disk format [ 244.145403][ T9270] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 244.243622][ T9270] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 244.247881][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.297684][ T9270] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 244.372204][ T9270] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 244.402947][ T9270] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 244.520376][ T9270] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 244.562705][ T9270] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 244.606995][ T9270] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 245.047610][ T9276] loop1: detected capacity change from 0 to 40427 [ 245.085972][ T9276] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 245.130627][ T9276] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 245.181866][ T9276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.325871][ T9276] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 245.351644][ T9276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 245.535656][ T9316] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 245.537601][ T9276] syz.1.1225: attempt to access beyond end of device [ 245.537601][ T9276] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 245.542177][ T9316] comedi comedi3: 8255: I/O port conflict (0xffffffffffffff00,4) [ 245.567628][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.608761][ T9316] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 245.638334][ T9316] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 245.679644][ T9316] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 245.695854][ T9316] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 245.705877][ T5777] syz-executor: attempt to access beyond end of device [ 245.705877][ T5777] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 245.725186][ T9316] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 245.747771][ T9316] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 245.757186][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 245.776986][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 245.813365][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 245.820349][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 246.503042][ T9336] loop2: detected capacity change from 0 to 4096 [ 246.526188][ T9336] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 246.587160][ T9336] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 246.619060][ T9323] loop0: detected capacity change from 0 to 32768 [ 246.653909][ T9323] (syz.0.1237,9323,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.715390][ T9323] (syz.0.1237,9323,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.788495][ T9323] JBD2: Ignoring recovery information on journal [ 246.914797][ T9323] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 247.220719][ T5767] ocfs2: Unmounting device (7,0) on (node local) [ 247.240105][ T9355] loop1: detected capacity change from 0 to 256 [ 247.430025][ T9355] FAT-fs (loop1): Directory bread(block 64) failed [ 247.436739][ T9355] FAT-fs (loop1): Directory bread(block 65) failed [ 247.473811][ T9355] FAT-fs (loop1): Directory bread(block 66) failed [ 247.506206][ T9355] FAT-fs (loop1): Directory bread(block 67) failed [ 247.514345][ T9355] FAT-fs (loop1): Directory bread(block 68) failed [ 247.521016][ T9355] FAT-fs (loop1): Directory bread(block 69) failed [ 247.582636][ T9355] FAT-fs (loop1): Directory bread(block 70) failed [ 247.609871][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 247.618727][ T9355] FAT-fs (loop1): Directory bread(block 71) failed [ 247.652339][ T9355] FAT-fs (loop1): Directory bread(block 72) failed [ 247.673700][ T9355] FAT-fs (loop1): Directory bread(block 73) failed [ 247.826845][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.838396][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 247.898464][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.929349][ T8] usb 3-1: config 0 descriptor?? [ 248.043673][ T9371] loop1: detected capacity change from 0 to 1024 [ 248.093369][ T9371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.399271][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.400078][ T9360] loop3: detected capacity change from 0 to 32768 [ 248.451995][ T9360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1248 (9360) [ 248.485611][ T8] logitech-djreceiver 0003:046D:C71F.0014: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 248.552094][ T9360] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.595653][ T9360] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 248.646734][ T9360] BTRFS info (device loop3): using free space tree [ 248.705285][ T8] usb 3-1: USB disconnect, device number 12 [ 248.782329][ T9383] fido_id[9383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 248.868895][ T9360] BTRFS info (device loop3): enabling ssd optimizations [ 248.882092][ T9360] BTRFS info (device loop3): auto enabling async discard [ 248.948858][ T9360] BTRFS warning (device loop3): can't set the default_subvol,compress_zstd feature bits while mounted [ 249.001129][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.124865][ T9369] loop0: detected capacity change from 0 to 32768 [ 250.472194][ T9443] loop3: detected capacity change from 0 to 512 [ 250.495489][ T9443] EXT4-fs: Ignoring removed bh option [ 250.536375][ T9443] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 250.618189][ T9443] EXT4-fs (loop3): 1 truncate cleaned up [ 250.653587][ T9443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.844428][ T9453] netlink: 'syz.0.1272': attribute type 1 has an invalid length. [ 250.863340][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.180160][ T9449] loop2: detected capacity change from 0 to 32768 [ 251.329860][ T5826] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 251.404925][ T6897] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 251.544781][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 251.556156][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.575614][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.613026][ T5826] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.628762][ T5826] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.648745][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.648929][ T6897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.678779][ T5826] usb 4-1: config 0 descriptor?? [ 251.686020][ T6897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.729780][ T6897] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 251.752462][ T6897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.810434][ T6897] usb 1-1: config 0 descriptor?? [ 252.201652][ T5826] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0015/input/input13 [ 252.289589][ T5826] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 252.376786][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'. [ 252.440504][ T27] usb 4-1: USB disconnect, device number 14 [ 252.488170][ T6897] hid-led: probe of 0003:1D34:000A.0016 failed with error -71 [ 252.543040][ T6897] usb 1-1: USB disconnect, device number 12 [ 252.582302][ T5826] hid-generic 0002:0001:0D97.0017: item fetching failed at offset 0/2 [ 252.593755][ T5826] hid-generic: probe of 0002:0001:0D97.0017 failed with error -22 [ 252.761403][ T9498] xt_l2tp: unknown flags: 10 [ 253.263920][ T9516] loop2: detected capacity change from 0 to 256 [ 253.313020][ T9516] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 253.344538][ T9516] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 253.598414][ T9526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1306'. [ 253.611075][ T9526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1306'. [ 253.643044][ T9524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1306'. [ 253.823697][ T9535] ceph: Unexpected value for 'acl' [ 254.371162][ T9552] loop3: detected capacity change from 0 to 1024 [ 254.707410][ T9530] loop0: detected capacity change from 0 to 32768 [ 254.730304][ T9558] loop3: detected capacity change from 0 to 512 [ 254.741913][ T9530] gfs2: fsid=localflocks: Trying to join cluster "lock_nolock", "localflocks" [ 254.744540][ T9558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.761860][ T9530] gfs2: fsid=localflocks: Now mounting FS (format 1801)... [ 254.771328][ T9558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 254.794043][ T9558] System zones: 1-2, 4-12, 8-8 [ 254.808439][ T9558] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.1321: iget: bad i_size value: 38620345925642 [ 254.831401][ T9558] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.1321: couldn't read orphan inode 15 (err -117) [ 254.836756][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.848376][ T9558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.866143][ T9530] gfs2: fsid=localflocks.s: journal 0 mapped with 5 extents in 0ms [ 254.985250][ T9530] gfs2: fsid=localflocks.s: first mount done, others may mount [ 254.993628][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 254.993644][ T28] audit: type=1800 audit(1769017503.331:60): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1321" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 255.036515][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.060226][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 255.080237][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.092277][ T8] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 255.104339][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.117167][ T8] usb 2-1: config 0 descriptor?? [ 255.510475][ T5834] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 255.592989][ T8] gt683r_led 0003:1770:FF00.0018: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 255.709696][ T9572] loop0: detected capacity change from 0 to 512 [ 255.718419][ T5834] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.740951][ T5834] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.748461][ T9572] EXT4-fs (loop0): #blocks per group too big: 466944 [ 255.761449][ T9574] loop2: detected capacity change from 0 to 256 [ 255.773377][ T5834] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.782314][ T9574] exfat: Deprecated parameter 'namecase' [ 255.792734][ T9574] exfat: Deprecated parameter 'namecase' [ 255.811965][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.844699][ T9563] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 255.880949][ T5834] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 255.913542][ T9574] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 255.955402][ T27] usb 2-1: USB disconnect, device number 9 [ 255.983580][ T6897] gt683r_led 0003:1770:FF00.0018: failed to send set report request: -19 [ 256.022695][ T6897] gt683r_led 0003:1770:FF00.0018: failed to send set report request: -19 [ 256.065024][ T9576] loop0: detected capacity change from 0 to 2048 [ 256.115080][ T9576] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 256.157245][ T9576] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 100: 0x6a != 0x00 [ 256.219670][ T9576] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.336821][ T5772] usb 4-1: USB disconnect, device number 15 [ 256.364927][ T28] audit: type=1800 audit(1769017504.622:61): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1328" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 256.699552][ T9578] loop2: detected capacity change from 0 to 32768 [ 256.720009][ T9578] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1329 (9578) [ 256.764400][ T9578] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.777141][ T9578] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 256.802903][ T9578] BTRFS info (device loop2): setting nodatacow, compression disabled [ 256.822099][ T9578] BTRFS info (device loop2): force clearing of disk cache [ 256.835477][ T9578] BTRFS info (device loop2): enabling ssd optimizations [ 256.835509][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 256.858277][ T9578] BTRFS info (device loop2): using spread ssd allocation scheme [ 256.866092][ T9578] BTRFS info (device loop2): turning off barriers [ 256.881751][ T9578] BTRFS info (device loop2): disabling free space tree [ 256.889918][ T9578] BTRFS info (device loop2): not using ssd optimizations [ 256.897135][ T9578] BTRFS info (device loop2): not using spread ssd allocation scheme [ 256.946962][ T9578] BTRFS info (device loop2): rebuilding free space tree [ 256.976957][ T9578] BTRFS info (device loop2): disabling free space tree [ 257.000728][ T9578] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 257.020366][ T9578] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 257.083079][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.103247][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.115890][ T27] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 257.131258][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.152955][ T27] usb 1-1: config 0 descriptor?? [ 257.166917][ T5826] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 257.216542][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 257.385667][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 257.418503][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.430454][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.441861][ T5826] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 257.451572][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.466987][ T5826] usb 2-1: config 0 descriptor?? [ 257.647448][ T9610] tmpfs: Bad value for 'gid' [ 257.899564][ T27] usb 1-1: string descriptor 0 read error: -71 [ 257.932006][ T27] uclogic 0003:5543:0045.0019: failed retrieving string descriptor #200: -71 [ 257.951939][ T5826] logitech 0003:046D:C20E.001A: rdesc size test failed for formula gp [ 257.966238][ T27] uclogic 0003:5543:0045.0019: failed retrieving pen parameters: -71 [ 258.001529][ T5826] logitech 0003:046D:C20E.001A: unbalanced collection at end of report description [ 258.011659][ T27] uclogic 0003:5543:0045.0019: failed probing pen v2 parameters: -71 [ 258.019908][ T27] uclogic 0003:5543:0045.0019: failed probing parameters: -71 [ 258.033660][ T5826] logitech 0003:046D:C20E.001A: parse failed [ 258.039989][ T5826] logitech: probe of 0003:046D:C20E.001A failed with error -22 [ 258.064889][ T27] uclogic: probe of 0003:5543:0045.0019 failed with error -71 [ 258.103004][ T27] usb 1-1: USB disconnect, device number 13 [ 258.256745][ T5826] usb 2-1: USB disconnect, device number 10 [ 258.447019][ T9624] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 258.457628][ T9624] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1344'. [ 258.481353][ T9624] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1344'. [ 258.820038][ T9636] loop0: detected capacity change from 0 to 4096 [ 258.844608][ T9638] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.922150][ T9641] sp0: Synchronizing with TNC [ 259.288897][ T9645] loop1: detected capacity change from 0 to 2048 [ 259.406167][ T9645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.516668][ T9645] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.753308][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.899045][ T9639] loop2: detected capacity change from 0 to 32768 [ 259.948198][ T9639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1349 (9639) [ 260.018626][ T9639] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.060727][ T9639] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 260.091026][ T9639] BTRFS info (device loop2): turning off barriers [ 260.113460][ T9673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1364'. [ 260.141955][ T9639] BTRFS info (device loop2): setting nodatasum [ 260.148303][ T9639] BTRFS info (device loop2): turning on barriers [ 260.160532][ T9673] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1364'. [ 260.169561][ T9673] netlink: 'syz.0.1364': attribute type 5 has an invalid length. [ 260.184133][ T9673] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1364'. [ 260.197822][ T9639] BTRFS info (device loop2): using free space tree [ 260.355807][ T9689] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 260.381703][ T9689] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 260.400006][ T9689] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 260.427830][ T9689] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 260.434518][ T9689] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 260.491603][ T9689] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 260.498224][ T9689] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 260.515668][ T9689] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 260.522185][ T9689] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 260.533640][ T9689] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 260.540604][ T9689] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 260.554844][ T9689] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 260.561802][ T9689] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 260.596109][ T9697] loop0: detected capacity change from 0 to 16 [ 260.601874][ T9689] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 260.620152][ T5771] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.620259][ T9697] erofs: (device loop0): mounted with root inode @ nid 36. [ 260.807783][ T5996] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5996) [ 260.995027][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 261.664675][ T9722] pim6reg: entered allmulticast mode [ 261.702592][ T9722] pim6reg: left allmulticast mode [ 261.937173][ T28] audit: type=1326 audit(1769017509.841:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 261.940751][ T28] audit: type=1326 audit(1769017509.841:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 261.963716][ T28] audit: type=1326 audit(1769017509.860:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 261.963777][ T28] audit: type=1326 audit(1769017509.860:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 261.963820][ T28] audit: type=1326 audit(1769017509.860:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 261.963864][ T28] audit: type=1326 audit(1769017509.860:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 261.963908][ T28] audit: type=1326 audit(1769017509.860:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281059acb9 code=0x7ffc0000 [ 262.023806][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.023871][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.034953][ T9728] loop3: detected capacity change from 0 to 136 [ 262.229872][ T9728] Attempt to read inode for relocated directory [ 262.255005][ T9714] loop0: detected capacity change from 0 to 32768 [ 262.338892][ T9714] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 262.462261][ T9714] XFS (loop0): Ending clean mount [ 262.466167][ T9714] XFS (loop0): Quotacheck needed: Please wait. [ 262.559213][ T9714] XFS (loop0): Quotacheck: Done. [ 262.648705][ T5767] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 263.376104][ T9755] loop3: detected capacity change from 0 to 4096 [ 263.462645][ T9763] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.540718][ T9789] mkiss: ax0: crc mode is auto. [ 264.758447][ T9796] loop2: detected capacity change from 0 to 512 [ 264.833336][ T9796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.856957][ T9802] loop3: detected capacity change from 0 to 2048 [ 264.898746][ T9796] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.999327][ T9808] loop1: detected capacity change from 0 to 1024 [ 265.018294][ T9802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.095090][ T9808] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.097156][ T9802] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.257828][ T9815] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 265.261828][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.306962][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.359600][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 265.869169][ T9836] netlink: 'syz.3.1428': attribute type 3 has an invalid length. [ 265.877070][ T9836] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 265.896549][ T9836] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1428'. [ 266.573809][ T9829] loop0: detected capacity change from 0 to 32768 [ 266.584559][ T9829] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1425 (9829) [ 266.609679][ T9829] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 266.628025][ T9829] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 266.647886][ T9829] BTRFS info (device loop0): setting nodatacow, compression disabled [ 266.669423][ T9829] BTRFS info (device loop0): force clearing of disk cache [ 266.688717][ T9829] BTRFS info (device loop0): enabling ssd optimizations [ 266.707688][ T9829] BTRFS info (device loop0): using spread ssd allocation scheme [ 266.725153][ T5826] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 266.728567][ T9829] BTRFS info (device loop0): turning off barriers [ 266.751000][ T9829] BTRFS info (device loop0): disabling free space tree [ 266.769996][ T9829] BTRFS info (device loop0): not using ssd optimizations [ 266.793586][ T9829] BTRFS info (device loop0): not using spread ssd allocation scheme [ 266.802393][ T28] audit: type=1326 audit(1769017514.378:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13759acb9 code=0x7ffc0000 [ 266.846657][ T28] audit: type=1326 audit(1769017514.396:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fb13759acb9 code=0x7ffc0000 [ 266.937307][ T28] audit: type=1326 audit(1769017514.406:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13759acb9 code=0x7ffc0000 [ 266.966976][ T5826] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 266.980826][ T5826] usb 3-1: config 0 has no interface number 0 [ 266.987315][ T5826] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 266.992827][ T9829] BTRFS info (device loop0): rebuilding free space tree [ 266.997181][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.036475][ T5826] usb 3-1: config 0 descriptor?? [ 267.056143][ T9829] BTRFS info (device loop0): disabling free space tree [ 267.074206][ T9829] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 267.087021][ T9829] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 267.199615][ T9846] loop1: detected capacity change from 0 to 40427 [ 267.216902][ T9846] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 267.269971][ T9846] F2FS-fs (loop1): invalid crc value [ 267.297154][ T9849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.322695][ T9846] F2FS-fs (loop1): Found nat_bits in checkpoint [ 267.336154][ T9849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.414216][ T5826] usb 3-1: string descriptor 0 read error: -71 [ 267.421790][ T5767] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 267.446792][ T5826] usb-storage 3-1:0.168: USB Mass Storage device detected [ 267.495556][ T5826] usb-storage 3-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 267.561528][ T9846] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 267.601055][ T5826] usb 3-1: USB disconnect, device number 13 [ 267.814913][ T9882] netlink: 'syz.0.1438': attribute type 3 has an invalid length. [ 268.424301][ T9888] loop3: detected capacity change from 0 to 4096 [ 268.499547][ T9888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.647859][ T9899] loop0: detected capacity change from 0 to 2048 [ 268.683979][ T9888] fs-verity (loop3, inode 15): Unsupported log_blocksize: 14 [ 268.708517][ T9900] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.800019][ T9899] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..' [ 268.823406][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.832803][ T9899] Remounting filesystem read-only [ 268.907354][ T5834] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 268.923527][ T5767] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 268.935836][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 268.969194][ T5767] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 268.976590][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.007324][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.016749][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.071480][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 269.079657][ T5767] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 269.088684][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.103225][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.112863][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.114771][ T5834] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 269.123319][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 269.138628][ T5767] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 269.146230][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.150857][ T5767] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 269.157316][ T5834] usb 3-1: config 0 descriptor?? [ 269.177002][ T5767] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 269.179196][ T5834] cp210x 3-1:0.0: cp210x converter detected [ 269.192438][ T5767] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 269.200763][ T5767] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 269.212993][ T5767] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 269.221184][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.236911][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.247422][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.265051][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 269.266790][ T9908] loop3: detected capacity change from 0 to 8192 [ 269.271897][ T5767] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 269.271922][ T5767] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 269.271938][ T5767] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 269.271954][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.271982][ T5767] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 269.271999][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.272016][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.272033][ T5767] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 269.272049][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.384283][ T9908] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 269.425815][ T9908] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 269.441663][ T9908] REISERFS (device loop3): using ordered data mode [ 269.448634][ T9908] reiserfs: using flush barriers [ 269.497936][ T9908] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.518283][ T9908] REISERFS (device loop3): checking transaction log (loop3) [ 269.529056][ T9908] REISERFS (device loop3): Using r5 hash to sort names [ 269.537274][ T9908] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 269.557013][ T9908] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 269.626769][ T9908] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 269.641507][ T5834] usb 3-1: cp210x converter now attached to ttyUSB0 [ 269.651504][ T9908] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 269.950266][ T5834] usb 3-1: USB disconnect, device number 14 [ 269.966272][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 269.994523][ T5834] cp210x 3-1:0.0: device disconnected [ 270.415805][ T9934] loop0: detected capacity change from 0 to 64 [ 270.848065][ T9922] loop3: detected capacity change from 0 to 32768 [ 270.952866][ T9922] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 271.210090][ T9922] XFS (loop3): Ending clean mount [ 271.257837][ T9922] XFS (loop3): Quotacheck needed: Please wait. [ 271.416605][ T9922] XFS (loop3): Quotacheck: Done. [ 271.604830][ T5770] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.128544][ T9960] loop1: detected capacity change from 0 to 32768 [ 272.238943][ T9960] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 272.332222][ T9984] loop3: detected capacity change from 0 to 128 [ 272.363871][ T9984] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 272.389905][ T9984] hpfs: filesystem error: improperly stopped [ 272.396380][ T9984] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 272.409684][ T9960] [ 272.412077][ T9960] ====================================================== [ 272.418040][ T9984] hpfs: You really don't want any checks? You are crazy... [ 272.419104][ T9960] WARNING: possible circular locking dependency detected [ 272.419113][ T9960] syzkaller #0 Not tainted [ 272.433617][ T9984] hpfs: hpfs_map_sector(): read error [ 272.433778][ T9960] ------------------------------------------------------ [ 272.433787][ T9960] syz.1.1472/9960 is trying to acquire lock: [ 272.438291][ T9984] hpfs: code page support is disabled [ 272.438407][ T9984] hpfs: hpfs_map_4sectors(): unaligned read [ 272.443661][ T9960] ffff88805d1289d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 272.443733][ T9960] [ 272.443733][ T9960] but task is already holding lock: [ 272.443739][ T9960] ffff88805d28eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 272.443781][ T9960] [ 272.443781][ T9960] which lock already depends on the new lock. [ 272.443781][ T9960] [ 272.443786][ T9960] [ 272.443786][ T9960] the existing dependency chain (in reverse order) is: [ 272.443792][ T9960] [ 272.443792][ T9960] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 272.443817][ T9960] down_read+0x46/0x2e0 [ 272.443841][ T9960] ocfs2_init_acl+0x30a/0x770 [ 272.443863][ T9960] ocfs2_mknod+0x140f/0x2300 [ 272.443881][ T9960] ocfs2_create+0x196/0x430 [ 272.443898][ T9960] path_openat+0x12a0/0x3230 [ 272.443914][ T9960] do_filp_open+0x1f5/0x430 [ 272.443929][ T9960] do_sys_openat2+0x134/0x1d0 [ 272.443949][ T9960] __x64_sys_openat+0x139/0x160 [ 272.443967][ T9960] do_syscall_64+0x55/0xa0 [ 272.443990][ T9960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.444006][ T9960] [ 272.444006][ T9960] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 272.444032][ T9960] down_read+0x46/0x2e0 [ 272.468460][ T9984] hpfs: hpfs_map_4sectors(): unaligned read [ 272.468781][ T9960] ocfs2_start_trans+0x3a8/0x6f0 [ 272.482258][ T9984] hpfs: filesystem error: unable to find root dir [ 272.489623][ T9960] ocfs2_mknod+0xf1d/0x2300 [ 272.489655][ T9960] ocfs2_create+0x196/0x430 [ 272.489671][ T9960] path_openat+0x12a0/0x3230 [ 272.489686][ T9960] do_filp_open+0x1f5/0x430 [ 272.489700][ T9960] do_sys_openat2+0x134/0x1d0 [ 272.489722][ T9960] __x64_sys_openat+0x139/0x160 [ 272.489742][ T9960] do_syscall_64+0x55/0xa0 [ 272.489767][ T9960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.489786][ T9960] [ 272.489786][ T9960] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 272.489822][ T9960] ocfs2_start_trans+0x2a9/0x6f0 [ 272.489838][ T9960] ocfs2_mknod+0xf1d/0x2300 [ 272.489857][ T9960] ocfs2_create+0x196/0x430 [ 272.489876][ T9960] path_openat+0x12a0/0x3230 [ 272.489891][ T9960] do_filp_open+0x1f5/0x430 [ 272.489906][ T9960] do_sys_openat2+0x134/0x1d0 [ 272.489926][ T9960] __x64_sys_openat+0x139/0x160 [ 272.489944][ T9960] do_syscall_64+0x55/0xa0 [ 272.489966][ T9960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.499921][ T9984] [ 272.509909][ T9960] [ 272.509909][ T9960] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 272.509956][ T9960] down_write+0x97/0x200 [ 272.509988][ T9960] ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 272.510009][ T9960] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 272.510034][ T9960] ocfs2_mknod+0xebb/0x2300 [ 272.510051][ T9960] ocfs2_create+0x196/0x430 [ 272.510070][ T9960] path_openat+0x12a0/0x3230 [ 272.510087][ T9960] do_filp_open+0x1f5/0x430 [ 272.510102][ T9960] do_sys_openat2+0x134/0x1d0 [ 272.510124][ T9960] __x64_sys_openat+0x139/0x160 [ 272.510144][ T9960] do_syscall_64+0x55/0xa0 [ 272.510166][ T9960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.564177][ T9984] hpfs: hpfs_map_4sectors(): unaligned read [ 272.568887][ T9960] [ 272.568887][ T9960] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 272.568935][ T9960] __lock_acquire+0x2df1/0x7d40 [ 272.806191][ T9960] lock_acquire+0x19e/0x420 [ 272.811318][ T9960] down_write+0x97/0x200 [ 272.816297][ T9960] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 272.822972][ T9960] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 272.829824][ T9960] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 272.836096][ T9960] ocfs2_xattr_set+0xc3f/0x13e0 [ 272.841556][ T9960] __vfs_setxattr+0x431/0x470 [ 272.846754][ T9960] __vfs_setxattr_noperm+0x12d/0x5e0 [ 272.852583][ T9960] vfs_setxattr+0x16b/0x2f0 [ 272.857784][ T9960] path_setxattr+0x3f3/0x5d0 [ 272.862920][ T9960] __x64_sys_lsetxattr+0xb8/0xd0 [ 272.868410][ T9960] do_syscall_64+0x55/0xa0 [ 272.873454][ T9960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.879963][ T9960] [ 272.879963][ T9960] other info that might help us debug this: [ 272.879963][ T9960] [ 272.890495][ T9960] Chain exists of: [ 272.890495][ T9960] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 272.890495][ T9960] [ 272.907731][ T9960] Possible unsafe locking scenario: [ 272.907731][ T9960] [ 272.915540][ T9960] CPU0 CPU1 [ 272.920918][ T9960] ---- ---- [ 272.926404][ T9960] lock(&oi->ip_xattr_sem); [ 272.931099][ T9960] lock(&journal->j_trans_barrier); [ 272.939072][ T9960] lock(&oi->ip_xattr_sem); [ 272.946325][ T9960] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 272.953926][ T9960] [ 272.953926][ T9960] *** DEADLOCK *** [ 272.953926][ T9960] [ 272.962105][ T9960] 3 locks held by syz.1.1472/9960: [ 272.967334][ T9960] #0: ffff88805ae76418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 272.976837][ T9960] #1: ffff88805d28ed98 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 272.987542][ T9960] #2: ffff88805d28eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 272.997619][ T9960] [ 272.997619][ T9960] stack backtrace: [ 273.003626][ T9960] CPU: 1 PID: 9960 Comm: syz.1.1472 Not tainted syzkaller #0 [ 273.011042][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.021488][ T9960] Call Trace: [ 273.024818][ T9960] [ 273.027877][ T9960] dump_stack_lvl+0x18c/0x250 [ 273.032702][ T9960] ? load_image+0x400/0x400 [ 273.037250][ T9960] ? show_regs_print_info+0x20/0x20 [ 273.042588][ T9960] ? print_circular_bug+0x12b/0x1a0 [ 273.047920][ T9960] check_noncircular+0x2fc/0x400 [ 273.052912][ T9960] ? print_deadlock_bug+0x5d0/0x5d0 [ 273.058234][ T9960] ? lockdep_lock+0x195/0x230 [ 273.062921][ T9960] ? _find_first_zero_bit+0xd3/0x100 [ 273.068231][ T9960] __lock_acquire+0x2df1/0x7d40 [ 273.073111][ T9960] ? __lock_acquire+0x7d40/0x7d40 [ 273.078157][ T9960] ? verify_lock_unused+0x140/0x140 [ 273.083356][ T9960] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 273.089095][ T9960] ? do_raw_spin_lock+0x11f/0x2c0 [ 273.094312][ T9960] ? mutex_unlock+0x10/0x10 [ 273.098923][ T9960] lock_acquire+0x19e/0x420 [ 273.103537][ T9960] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 273.109987][ T9960] ? ocfs2_get_system_file_inode+0x202/0x850 [ 273.116167][ T9960] ? __might_sleep+0xe0/0xe0 [ 273.120871][ T9960] ? read_lock_is_recursive+0x20/0x20 [ 273.126331][ T9960] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 273.132498][ T9960] ? check_noncircular+0x18a/0x400 [ 273.137879][ T9960] ? verify_lock_unused+0x140/0x140 [ 273.143201][ T9960] down_write+0x97/0x200 [ 273.147463][ T9960] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 273.153630][ T9960] ? down_read_killable+0x340/0x340 [ 273.159035][ T9960] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 273.165031][ T9960] ? mark_lock+0x94/0x320 [ 273.169422][ T9960] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 273.175420][ T9960] ? lock_chain_count+0x20/0x20 [ 273.180383][ T9960] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 273.186277][ T9960] ? lockdep_hardirqs_on+0x98/0x150 [ 273.191627][ T9960] ? ocfs2_block_group_search+0x470/0x470 [ 273.197462][ T9960] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 273.203455][ T9960] ? _raw_spin_unlock+0x40/0x40 [ 273.208317][ T9960] ? stack_trace_save+0xaa/0x100 [ 273.213286][ T9960] ? stack_trace_snprint+0xf0/0xf0 [ 273.218621][ T9960] ? __stack_depot_save+0x560/0x630 [ 273.224103][ T9960] ? kasan_set_track+0x5f/0x70 [ 273.228987][ T9960] ? kasan_set_track+0x4e/0x70 [ 273.233944][ T9960] ? __kasan_kmalloc+0x8f/0xa0 [ 273.238913][ T9960] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 273.245439][ T9960] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 273.251249][ T9960] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 273.256761][ T9960] ? __vfs_setxattr+0x431/0x470 [ 273.261627][ T9960] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 273.267197][ T9960] ? vfs_setxattr+0x16b/0x2f0 [ 273.272061][ T9960] ? path_setxattr+0x3f3/0x5d0 [ 273.277257][ T9960] ? __x64_sys_lsetxattr+0xb8/0xd0 [ 273.282423][ T9960] ? do_syscall_64+0x55/0xa0 [ 273.287228][ T9960] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.293490][ T9960] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 273.299846][ T9960] ? ocfs2_init_steal_slots+0x160/0x160 [ 273.305467][ T9960] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 273.311137][ T9960] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 273.316865][ T9960] ? ocfs2_xattr_set+0xc05/0x13e0 [ 273.321897][ T9960] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 273.327986][ T9960] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 273.334470][ T9960] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 273.340467][ T9960] ? down_write+0x16e/0x200 [ 273.345087][ T9960] ? down_read_killable+0x340/0x340 [ 273.350375][ T9960] ? up_write+0x1c3/0x410 [ 273.354712][ T9960] ocfs2_xattr_set+0xc3f/0x13e0 [ 273.359659][ T9960] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 273.365380][ T9960] ? __lock_acquire+0x1347/0x7d40 [ 273.370450][ T9960] ? verify_lock_unused+0x140/0x140 [ 273.375753][ T9960] ? ____kasan_slab_free+0x126/0x1e0 [ 273.381316][ T9960] ? evm_protected_xattr_common+0x170/0x190 [ 273.387510][ T9960] ? ocfs2_xattr_security_get+0x40/0x40 [ 273.393167][ T9960] __vfs_setxattr+0x431/0x470 [ 273.397892][ T9960] __vfs_setxattr_noperm+0x12d/0x5e0 [ 273.403554][ T9960] vfs_setxattr+0x16b/0x2f0 [ 273.408079][ T9960] ? xattr_permission+0x470/0x470 [ 273.413366][ T9960] ? __mnt_want_write+0x223/0x2a0 [ 273.418493][ T9960] ? path_setxattr+0x3a1/0x5d0 [ 273.423430][ T9960] path_setxattr+0x3f3/0x5d0 [ 273.428050][ T9960] ? simple_xattrs_free+0x150/0x150 [ 273.433370][ T9960] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 273.439551][ T9960] ? lock_chain_count+0x20/0x20 [ 273.444516][ T9960] __x64_sys_lsetxattr+0xb8/0xd0 [ 273.449479][ T9960] do_syscall_64+0x55/0xa0 [ 273.453923][ T9960] ? clear_bhb_loop+0x40/0x90 [ 273.458712][ T9960] ? clear_bhb_loop+0x40/0x90 [ 273.463500][ T9960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.469489][ T9960] RIP: 0033:0x7f281059acb9 [ 273.473975][ T9960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.493944][ T9960] RSP: 002b:00007f281141a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 273.502526][ T9960] RAX: ffffffffffffffda RBX: 00007f2810815fa0 RCX: 00007f281059acb9 [ 273.510594][ T9960] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000240 [ 273.518698][ T9960] RBP: 00007f2810608bf7 R08: 0000000000000001 R09: 0000000000000000 [ 273.527035][ T9960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.535095][ T9960] R13: 00007f2810816038 R14: 00007f2810815fa0 R15: 00007fffdff78dd8 [ 273.543071][ T9960] [ 273.624060][ T5777] ocfs2: Unmounting device (7,1) on (node local)