last executing test programs: 3.966842008s ago: executing program 3 (id=702): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xa1e}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.891958225s ago: executing program 3 (id=703): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f000000a040)="$eJwUk1Mc34UDRZe37JZtnmzbtm375H5fG8u23VbLtm3XsrH4//wf7ut9OPfcOwc4coCjBnjXAO8e4OgB3jPAewd43wDvH+ADA3xwgA8N8OEBPjLARwf42AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+AbA3xzgG8N8O0BvjPAdwf43gDfH+AHA/xwgB8N8OMBfjLATwf42QA/H+AXAxwzwC8H+NUAvx7gNwP8doDfDfD7Af4wwB8H+NMAfx7gLwP8dYC/DfD3Af4xwLED/HOAfw3w7wH+M8B/B/jfAIcEOE6A4wY4XoDjBzhBgBMGOFGAQwMcFuDEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4PAAZwxwpgBnDnCWAGcNcLYAZw9wjgDnDHCuAOcOcJ4A5w1wvgDnD3CBABcMcKEAFw5wkQAXDXCxABcPcIkACXDJAJcKcOkAlwlw2QCXC3D5AFcIcMUAVwpw5QBXCXDVAFcLcPUA1whwzQDXCnDtANcJcN0A1wtw/QA3CHDDADcKcOMANwlw0wA3C3DzALcIcMsAtwpw6wC3CXDbALcLcPsAdwhwxwB3CnDnAHcJcNcAdwtw9wD3CHDPAPcKcO8A9wlw3wD3C3D/AA8I8MAADwrw4AAPCfDQAA8L8PAAjwjwyACPCvDoAI8J8NgAjwvw+ABPCPDEAA3wpABPDvCUAE8N8LQATw/wjADPDHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/giADPCvDsAM8J8NwAzwvw/AAvCPDCAC8K8OIALwnw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAG8J8NYAbwvw9gDvCPDOAEcGOCrAuwK8O8DRAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHgmAC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8Axwb4Z4B/Bfh3gP8E+G+A/wU4JMRxQhw3xPFCHD/ECUKcMMSJQhwa4rAQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhCHhzhjiDOFOHOIs4Q4a4izhTh7iHOEOGeIc4U4d4jzhDhviPOFOH+IC4S4YIgLhbhwiIuEuGiIi4W4eIhLhEiIS4a4VIhLh7hMiMuGuFyIy4e4QogrhrhSiCuHuEqIq4a4Woirh7hGiGuGuFaIa4e4TojrhrheiOuHuEGIG4a4UYgbh7hJiJuGuFmIm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh4Z4WIiHh3hEiEeGeFSIR4d4TIjHhnhciMeHeEKIJ4ZoiCeFeHKIp4R4aoinhXh6iGeEeGaIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EEeEeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiLeHeEeId4Y4MsRRId4V4t0hjg7xnhDvDfG+EO8P8YEQHwzxoRAfDvGREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrRDfDvGdEN8N8b0Q3w/xgxA/DPGjED8O8ZMQPw3xsxA/D/GLEMeE+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hDg2xD9D/CvEv0P8J8R/Q/wvxCERjhPhuBGOF+H4EU4Q4YQRThTh0AiHRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEODzCGSOcKcKZI5wlwlkjnC3C2SOcI8I5I5wrwrkjnCfCeSOcL8L5I1wgwgUjXCjChSNcJMJFI1wswsUjXCJCIlwywqUiXDrCZSJcNsLlIlw+whUiXDHClSJcOcJVIlw1wtUiXD3CNSJcM8K1Ilw7wnUiXDfC9SJcP8INItwwwo0i3DjCTSLcNMLNItw8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDbC4yI8PsITIjwxQiM8KcKTIzwlwlMjPC3C0yM8I8IzIxxEGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4IsKzIjw7wnMiPDfC8yI8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJrIrw2wusivD7CGyK8McKbIrw5wlsivDXC2yK8PcI7IrwzwpERjorwrgjvjnB0hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0Q4JsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCsRH+GeFfEf4d4T8R/hvhfxEOiXGcGMeNcbwYx49xghgnjHGiGIfGOCzGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcbhMc4Y40wxzhzjLDHOGuNsMc4e4xwxzhnjXDHOHeM8Mc4b43wxzh/jAjEuGONCMS4c4yIxLhrjYjEuHuMSMRLjkjEuFePSMS4T47IxLhfj8jGuEOOKMa4U48oxrhLjqjGuFuPqMa4R45oxrhXj2jGuE+O6Ma4X4/oxbhDjhjFuFOPGMW4S46Yxbhbj5jFuEeOWMW4V49YxbhPjtjFuN/6QIf/nu0OMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxmiMJ8V4coynxHhqjKfFeHqMZ8R4ZoyDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYR8R4Voxnx3hOjOfGeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xjgyxlEx3hXj3TGOjvGeGO+N8b4Y74/xgRgfjPGhGB+O8ZEYH43xsRgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYx8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/EODbGP2P8K8a/Y/wnxn9j/C/GIQmOk+C4CY6X4PgJTpDghAlOlODQBIclOHGCkyQ4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4PMEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIkESXDLBpRJcOsFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDFBEzwpwZMTPCXBUxM8LcHTEzwjwTMTHCQYJBgmGCUYJ5gkmCaYJZgnWCRYJlglWCfYJNgm2CXYJzgiwbMSPDvBcxI8N8HzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrErw6wWsSvDbB6xK8PsEbErwxwZsSvDnBWxK8NcHbErw9wTsSvDPBkQmOSvCuBO9OcHSC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJDgmwS8T/CrBrxP8JsFvE/wuwe8T/CHBHxP8KcGfE/wlwV8T/C3B3xP8I8GxCf6Z4F8J/p3gPwn+m+B/CQ5JcZwUx01xvBTHT3GCFCdMcaIUh6Y4LMWJU5wkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxeEpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpziIikumuJiKS6e4hIpkuKSKS6V4tIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkeleLRKR6T4rEpHpfi8SmekOKJKZriSSmenOIpKZ6a4mkpnp7iGSmemeIgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FESmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLNKd6S4q0p3pbi7SnekeKdKY5McVSKd6V4d4qjU7wnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JiV5NsXnUnw+xRdSfDHFl1J8OcVXUnw1xddSfD3FN1J8M8W3Unw7xXdSfDfF91J8P8UPUvwwxY9S/DjFT1L8NMXPUvw8xS9SHJPilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4tgU/0zxrxT/TvGfFP9N8b8Uh2Q4TobjZjhehuNnOEGGE2Y4UYZDMxyW4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDh8AxnzHCmDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIEMF8xwoQwXznCRDBfNcLEMF89wiQzJcMkMl8pw6QyXyXDZDJfLcPkMV8hwxQxXynDlDFfJcNUMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/McJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+GIDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4MR2Y4KsO7Mrw7w9EZ3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGT6W4eMZPpHhkxk+leHTGT6T4bMZPpfh8xm+kOGLGb6U4csZvpLhqxm+luHrGb6R4ZsZvpXh2xm+k+G7Gb6X4fsZfpDhhxl+lOHHGX6S4acZfpbh5xl+keGYDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwzHZvhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx4lyHJrjsBwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHIfnOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOaw4dMuT/LNbOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxqxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoBwPzvGQHA/N8bAcD8/xiByPzPGoHI/O8Zgcj83xuByPz/GEHE/M0RxPyvHkHE/J8dQcT8vx9BzPyPHMHAc5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jmOyPGsHM/O8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GO/+81ZsTYkTmO+r/LQ4YM+X9G5zhkyJAh9+Z4X4735/hAjg/+3/0hQ4Y8nOMjOT6a42M5Pp7jEzk+meNTOT6d4zM5Ppvjczk+n+MLOb6Y40s5vpzjKzm+muNrOb6e4xs5vpnjWzm+neM7Ob6b43s5vp/jBzl+mONHOX6c4yc5fprjZzl+nuMXOY7J8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yHFsjn/m+FeOf+f4T47/5vjf/5kUOE6B4xY4XoHjFzhBgRMWOFGBQwscVuDEBU5S4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4PACZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy5wkQIXLXCxAhcvcIkCKXDJApcqcOkCNxjejF22wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Clz//30FbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnligBZ5U4MkFnlLgqQWeVuDpBZ5R4JkFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCxxR4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngyAJHFXhXgXcXOLrAewq8t8D7Cry/wAcKfLDAhwp8uMBHCny0wMcKfLzAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvChxT4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeDYAv8s8K8C/y7wnwL/LfC/AoeUOE6J45Y4XonjlzhBiROWOFGJQ0scVuLEJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4vASZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSKXHJEpcqcekSlylx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEi3xpBJPLvGUEk8t8bQSTy/xjBLPLHFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iiBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEkeWOKrEu0q8u8TRJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHimBK/LPGrEr8u8ZsSvy3xuxK/L/GHEn8s8acSfy7xlxJ/LfG3En8v8Y8Sx5b4Z4l/lfh3if+U+G+J/5U4pMJxKhy3wvEqHL/CCSqcsMKJKhxa4bAKJ65wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgqHVzhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVEiFS1a4VIVLV7hMhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1ZohSdVeHKFp1R4aoWnVXh6hWdUeGaFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7CkdUeFaFZ1d4ToXnVnhehedXeEGFF1Z4UYUXV3hJhZdWeFmFl1d4RYVXVnhVhVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Y4ssJRFd5V4d0Vjq7wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCsdU+GWFX1X4dYXfVPhthd9V+H2FP1T4Y4U/Vfhzhb9U+GuFv1X4e4V/VDi2wj8r/KvCvyv8p8J/K/yvwiE1jlPjuDWOV+P4NU5Q44Q1TlTj0BqH1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOLzGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKJGalyyxqVqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxRms8qcaTazylxlNrPK3G02s8o8YzaxzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nc4osazajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxpE1jqrxrhrvrnF0jffUeG+N99V4f40P1PhgjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9Q4psYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGsTX+WeNfNf5d4z81/lvjfzUOaXCcBsdtcLwGx29wggYnbHCiBoc2OKzBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocHhDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDdLgkg0u1eDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ3a4EkNntzgKQ2e2uBpDZ7e4BkNntngoMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wRENntXg2Q2e0+C5DZ7X4PkNXtDghQ1e1ODFDV7S4KUNXtbg5Q1e0eCVDV7V4NUNXtPgtQ1e1+D1Dd7Q4I0N3tTgzQ3e0uCtDd7W4O0N3tHgnQ2ObHBUg3c1eHeDoxu8p8F7G7yvwfsbfKDBBxt8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwTENftngVw1+3eA3DX7b4HcNft/gDw3+2OBPDf7c4C8N/trgbw3+3uAfDY5t8M8G/2rw7wb/afDfBv9rcEiL47Q4bovjtTh+ixO0OGGLE7U4tMVhLU7c4iQtTtriZC1O3uIULU7Z4lQtTt3iNC1O2+J0LU7f4gwtDm9xxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2iRFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s0RZPavHkFk9p8dQWT2vx9BbPaPHMFgctBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i2OaPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9scWSLo1q8q8W7Wxzd4j0t3tvifS3e3+IDLT7Y4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtw/7/mxdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9aHNPily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4tgW/2zxrxb/bvGfFv9t8b8Wh3Q4Tofjdjheh+N3OEGHE3Y4UYdDOxzW4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDh8A5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftcLEOF+9wiQ7pcMkOl+pw6Q6X6XDZDpfrcPmOYUOGDHHFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA7t8KQOT+7wlA5P7fC0Dk/v8IwOz+xw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4YgOz+rw7A7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6PDKDq/q8OoOr+nw2g6v6/D6Dm/o8MYOb+rw5g5v6fDWDm/r8PYO7+jwzg5Hdjiqw7s6vLvD0R3e0+G9Hd7X4f0dPtDhgx0+1OHDHT7S4aMdPtbh4x0+0eGTHT7V4dMdPtPhsx0+1+HzHb7Q4YsdvtThyx2+0uGrHb7W4esdvtHhmx2+1eHbHb7T4bsdvtfh+x1+0OGHHX7U4ccdftLhpx1+1uHnHX7R4ZgOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDsd2+GeHf3X4d4f/dPhvh/91OKTHcXoct8fxehy/xwl6nLDHiXoc2uOwHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeh/c4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiPS/RIj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/a4VY9b97hNj9v2uF2P2/e4Q4879rhTjzv3uEuPu/a4W4+797hHj3v2uFePe/e4T4/79rhfj/v3eECPB/Z4UI8H93hIj4f2eFiPh/d4RI9H9nhUj0f3eEyPx/Z4XI/H93hCjyf2aI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj4Megx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x5H9HhWj2f3eE6P5/Z4Xo/n93hBjxf2eFGPF/d4SY+X9nhZj5f3eEWPV/Z4VY9X93hNj9f2eF2P1/d4Q4839nhTjzf3eEuPt/Z4W4+393hHj3f2OLLHUT3e1ePdPY7u8Z6e/7FID0x4HgwCRVO3qW3bvbVt27btWyO138dGbSupbdu2He3szPcXzhyHD3DEAB8a4MMDfGSAjw7wsQE+PsAnBvjkAJ8a4NMDfGaAzw7wuQE+P8AXBvjiAF8a4MsDfGWArw7wtQG+PsA3BvjmAN8a4NsDfGeA7w7wvQG+P8APBvjhAD8a4McD/GSAnw7wswF+PsAvBvjlAL8a4NcD/GaA3w7wuwF+P8AfBvjjAH8a4M8D/GWAvw7wtwH+PsA/BvjnAP8a4N8D/GeA/w7wvwGOHOCoAY4e4JgBjh3gkADHCXDcAMcLcPwAJwhwwgAnCnDiACcJcGiAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIAEuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7BbhzgLsEuGuAuwW4e4B7BLhngHsFuHeA+wS4b4D7Bbh/gAcEeGCABwV4cICHBHhogIcFeHiARwR4ZIBHBXh0gMcEeGyAxwV4fIAnBHhigCcFeHKABnhKgKcGeFqApwd4RoBnBnhWgGcHeE6A5wY4LMDzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrAhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4dYDXBHhtgNcFeH2ANwR4Y4A3BXhzgLcEeGuAtwV4e4B3BHhngHcFeHeA9wR4b4D3BXh/gA8E+GCAwwMcEeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH+G+B/AY4McFSAowMcE+DYAIeEOE6I44Y4XojjhzhBiBOGOFGIE4c4SYhDQ5w0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyxKVCJMSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xGEhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXiIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xKtDvCbEa0O8LsTrQ7whxBtDvCnEm0O8JcRbQ7wtxNtDvCPEO0O8K8S7Q7wnxHtDvC/E+0N8IMQHQxwe4ogQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8Q/wtxZIijQhwd4pgQx4Y4JMJxIhw3wvEiHD/CCSKcMMKJIpw4wkkiHBrhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEuGiES4W4eIRLhHhkhEuFSERLh3hMhEuG+FyES4f4QoRrhjhShGuHOEqEa4a4WoRrh7hGhGuGeFaEa4d4ToRrhvhehGuH+EGEW4Y4UYRbhzhJhFuGuFmEW4e4RYRbhnhVhFuHeE2EW4b4XYRbh/hDhHuGOFOEe4c4S4R7hrhbhHuHuEeEe4Z4V4R7h3hPhHuG+F+Ee4f4QERHhjhQREeHOEhER4a4WERHh7hEREeGeFRER4d4TERHhvhcREeH+EJEZ4Y4UkRnhyhEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuREOi/C8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hFeHeE1EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjh8AhHRPhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH9G+FeEf0f4T4T/RvhfhCMjHBXh6AjHRDg2wiExjhPjuDGOF+P4MU4Q44QxThTjxDFOEuPQGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGJeMcakYiXHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDeJcdMYN4tx8xi3iHHLGLeKcesYt4lx2xi3i3H7GHeIcccYd4px5xh3iXHXGHeLcfcY94hxzxj3inHvGPeJcd8Y94tx/xgPiPHAGA+K8eAYD4nx0BgPi/HwGI+I8cgYj4rx6BiPifHYGI+L8fgYT4jxxBhPivHkGI3xlBhPjfG0GE+P8YwYz4zxrBjPjvGcGM+NcViM58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8U4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8eoYr4nx2hivi/H6GG+I8cYYb4rx5hhvifHWGG+L8fYY74jxzhjvivHuGO+J8d4Y74vx/hgfiPHBGIfHOCLGh2J8OMZHYnw0xsdifDzGJ2J8MsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYvwyxq9i/DrGb2L8NsbvYvw+xh9i/DHGn2L8OcZfYvw1xt9i/D3GP2L8M8a/Yvw7xn9i/DfG/2IcGeOoGEfHOCbGsTEOSXCcBMdNcLwEx09wggQnTHCiBCdOcJIEhyY4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4Y4IzJThzgrMkOGuCsyU4e4JzJDhngnMlOHeC8yQ4b4LzJTh/ggskuGCCCyW4cIKLJLhogosluHiCSyS4ZIJLJUiCSye4TILLJrhcgssnuEKCKya4UoIrJ7hKgqsmuFqCqye4RoJrJrhWgmsnuE6C6ya4XoLrJ7hBghsmuFGCGye4SYKbJrhZgpsnuEWCWya4VYJbJ7hNgtsmuF2C2ye4Q4I7JrhTgjsnuEuCuya4W4K7J7hHgnsmuFeCeye4T4L7JrhfgvsneECCByZ4UIIHJ3hIgocmeFiChyd4RIJHJnhUgkcneEyCxyZ4XILHJ3hCgicmeFKCJydogqckeGqCpyV4eoJnJHhmgmcleHaC5yR4boLDEjwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJXJ3hNgtcmeF2C1yd4Q4I3JnhTgjcneEuCtyZ4W4K3J3hHgncmeFeCdyd4T4L3Jnhfgvcn+ECCDyY4PMERCT6U4MMJPpLgowk+luDjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCX6T4LcJfpfg9wn+kOCPCf6U4M8J/pLgrwn+luDvCf6R4J8J/pXg3wn+k+C/Cf6X4MgERyU4OsExCY5NcEiK46Q4borjpTh+ihOkOGGKE6U4cYqTpDg0xUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCpFUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5RVM8JcVTUzwtxdNTPCPFM1M8K8WzUzwnxXNTHJbieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTvDrFa1K8NsXrUrw+xRtSvDHFm1K8OcVbUrw1xdtSvD3FO1K8M8W7Urw7xXtSvDfF+1K8P8UHUnwwxeEpjkjxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/03xvxRHpjgqxdEpjklxbIpDMhwnw3EzHC/D8TOcIMMJM5wow4kznCTDoRlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOH7GS6a4WIZLp7hEhkumeFSGZLh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZbpThxhlukuGmGW6W4eYZbpHhlhluleHWGW6T4bYZbpfh9hnukOGOGe6U4c4Z7pLhrhnuluHuGe6R4Z4Z7pXh3hnuk+G+Ge6X4f4ZHpDhgRkelOHBGR6S4aEZHpbh4RkekeGRGR6V4dEZHpPhsRkel+HxGZ6Q4YkZnpThyRma4SkZnprhaRmenuEZGZ6Z4VkZnp3hORmem+GwDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/KcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+HVGV6T4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9Gd6X4f0ZPpDhgxkOz3BEhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobv/e/wBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvhfxmOzHBUhqMzHJPh2AyH5DhOjuPmOF6O4+c4QY4T5jhRjhPnOEmOQ3OcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHJXJcMselciTHpXNcJsdlc1wux+VzXCHHFXNcKceVc1wlx1VzXC3H1XNcI8c1c1wrx7VzXCfHdXNcL8f1c9wgxw1z3CjHjXPcJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHXXPcLcfdc9wjxz1z3CvHvXPcJ8d9c9wvx/1zPCDHA3M8KMeDczwkx0NzPCzHw3M8Iscjczwqx6NzPCbHY3M8LsfjczwhxxNzPCnHk3M0x1NyPDXH03I8Pcczcjwzx7NyPDvHc3I8N8dhOZ6X4/k5XpDjhTlelOPFOV6S46U5Xpbj5TlekeOVOV6V4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3McnuOIHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHP/LcWSOo3IcneOYHMfmOKTAcQoct8DxChy/wAkKnLDAiQqcuMBJChxa4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4IwFzlTgzAXOUuCsBc5W4OwFzlHgnAXOVeDcBc5T4LwFzlfg/AUuUOCCBS5U4MIFLlLgogUuVuDiBS5R4JIFLlUgBS5d4DIFLlvgcgUuX+AKBa5Y4EoFrlzgKgWuWuBqBa5e4BoFrlngWgWuXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuX+ABBR5Y4EEFHlzgIQUeWuBhBR5e4BEFHlngUQUeXeAxBR5b4HEFHl/gCQWeWOBJBZ5coAWeUuCpBZ5W4OkFnlHgmQWeVeDZBZ5T4LkFDivwvALPL/CCAi8s8KICLy7wkgIvLfCyAi8v8IoCryzwqgIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQXeWeBdBd5d4D0F3lvgfQXeX+ADBT5Y4PACRxT4UIEPF/hIgY8W+FiBjxf4RIFPFvhUgU8X+EyBzxb4XIHPF/hCgS8W+FKBLxf4SoGvFvhaga8X+EaBbxb4VoFvF/hOge8W+F6B7xf4QYEfFvhRgR8X+EmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4x//7DMW/Cvy7wH8K/LfA/wocWeCoAkcXOKbAsQUOKXGcEsctcbwSxy9xghInLHGiEicucZISh5Y4aYmTlTh5iVOUOGWJU5U4dYnTlDhtidOVOH2JM5Q4Y4kzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nzlTh/iQuUuGCJC5W4cImLlLhoiYuVuHiJS5S4ZIlLlUiJS5e4TInLlrhcicuXuEKJK5a4Uokrl7hKiauWuFqJq5e4RolrlrhWiWuXuE6J65a4Xonrl7hBiRuWuFGJG5e4SYmblrhZiZuXuEWJW5a4VYlbl7hNiduWuF2J25e4Q4k7lrhTiTuXuEuJu5a4W4m7l7hHiXuWuFeJe5e4T4n7lrhfifuXeECJB5Z4UIkHl3hIiYeWeFiJh5d4RIlHlnhUiUeXeEyJx5Z4XInHl3hCiSeWeFKJJ5doiaeUeGqJp5V4eolnlHhmiWeVeHaJ55R4bonDSjyvxPNLvKDEC0u8qMSLS7ykxEtLvKzEy0u8osQrS7yqxEGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5Y4vMQRJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/Jf5X4sgSR5U4usQxJY4tcUiF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDi0wkkrnKzCySucosIpK5yqwqkrnKbCaSucrsLpK5yhwhkrnKnCmSucpcJZK5ytwtkrnKPCOSucq8K5K5ynwnkrnK/C+StcoMIFK1yowoUrXKTCRStcrMLFK1yiwiUrXKpCKly6wmUqXLbC5SpcvsIVKlyxwpUqXLnCVSpctcLVKly9wjUqXLPCtSpcu8J1Kly3wvUqXL/CDSrcsMKNKty4wk0q3LTCzSrcvMItKtyywq0q3LrCbSrctsLtKty+wh0q3LHCnSrcucJdKty1wt0q3L3CPSrcs8K9Kty7wn0q3LfC/Srcv8IDKjywwoMqPLjCQyo8tMLDKjy8wiMqPLLCoyo8usJjKjy2wuMqPL7CEyo8scKTKjy5Qis8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrHFbheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRUOKgwqDCuMKowrTCpMK8wqzCssKiwrrCqsK2wqbCvsKuwrvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7Kry7wnsqvLfC+yq8v8IHKnywwuEVjqjwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8K/63wvwpHVjiqwtEVjqlwbIVDahynxnFrHK/G8WucoMYJa5yoxolrnKTGoTVOWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNVLj0jUuU+OyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTVa4yk1nlrjaTWeXuMZNZ5Z41k1nl3jOTWeW+OwGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+qcVBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX+PVNV5T47U1Xlfj9TXeUOONNd5U48013lLjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzUOr3FEjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/U+GeNf9X4d43/1Phvjf/VOLLGUTWOrnFMjWNrHNLgOA2O2+B4DY7f4AQNTtjgRA1O3OAkDQ5tcNIGJ2tw8ganaHDKBqdqcOoGp2lw2gana3D6BmdocMYGZ2pw5gZnaXDWBmdrcPYG52hwzgbnanDuBudpcN4G52tw/gYXaHDBBhdqcOEGF2lw0QYXa3DxBpdocMkGl2qQBpducJkGl21wuQaXb3CFBldscKUGV25wlQZXbXC1BldvcI0G12xwrQbXbnCdBtdtcL0G129wgwY3bHCjBjducJMGN21wswY3b3CLBrdscKsGt25wmwa3bXC7BrdvcIcGd2xwpwZ3bnCXBndtcLcGd29wjwb3bHCvBvducJ8G921wvwb3b/CABg9s8KAGD27wkAYPbfCwBg9v8IgGj2zwqAaPbvCYBo9t8LgGj2/whAZPbPCkBk9u0AZPafDUBk9r8PQGz2jwzAbPavDsBs9p8NwGhzV4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYODBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wa7BvsGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbPCuBu9u8J4G723wvgbvb/CBBh9scHiDIxp8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxv8r8GRDY5qcHSDYxoc2+CQFsdpcdwWx2tx/BYnaHHCFidqceIWJ2lxaIuTtjhZi5O3OEWLU7Y4VYtTtzhNi9O2OF2L07c4Q4sztjhTizO3OEuLs7Y4W4uztzhHi3O2OFeLc7c4T4vztjhfi/O3uECLC7a4UIsLt7hIi4u2uFiLi7e4RItLtrhUi7S4dIvLtLhsi8u1uHyLK7S4Yosrtbhyi6u0uGqLq7W4eotrtLhmi2u1uHaL67S4bovrtbh+ixu0uGGLG7W4cYubtLhpi5u1uHmLW7S4ZYtbtbh1i9u0uG2L27W4fYs7tLhjizu1uHOLu7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtHhki0e1eHSLx7R4bIvHtXh8iye0eGKLJ7V4cou2eEqLp7Z4Wount3hGi2e2eFaLZ7d4TovntjisxfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxataHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3h1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIvDWxzR4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4n8tjmxxVIujWxzT4tgWh3Q4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh0M7nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8wyU6XLLDpTqkw6U7XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTOzypw5M7tMNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfDYR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7HN7hiA4f6vDhDh/p8NEOH+vw8Q6f6PDJDp/q8OkOn+nw2Q6f6/D5Dl/o8MUOX+rw5Q5f6fDVDl/r8PUO3+jwzQ7f6vDtDt/p8N0O3+vw/Q4/6PDDDj/q8OMOP+nw0w4/6/DzDr/o8MsOv+rw6w6/6fDbDr/r8PsOf+jwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDv8aNsS/O/ynw387/K/DkR2O6nB0h2M6HNvhkB7H6XHcHsfrcfweJ+hxwh4n6nHiHifpcWiPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI/0uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKP9nhKj6f2eFqPp/d4Ro9n9nhWj2f3eE6P5/Y4rMfzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/jw/0+GCPw3sc0eP/kVyOTXwfjBZMmSa1bbtb27Zt295aqW3j/7NRt1Ft27btO8/c8w3OzuyLHTnAUQMcPcAxAxw7wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHC/A8QOcIMAJAxwa4EQBDgtweIATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgCMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4Z4B3BXh3gPcEeG+A9wV4f4APBPhggCMDHBXg6ADHBDg2wIcCfDjARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP+C8RwS4jghjhvieCGOH+IEIU4Y4tAQJwpxWIjDQ5w4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCHBHiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQ7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDHBniqBBHhzgmxLEhPhTiwyE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8h/hfikAjHiXDcCMeLcPwIJ4hwwgiHRjhRhMMiHB7hxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+GICM+N8LwIz4/wgggvjPCiCC+O8JIIL43wsggvj/CKCK+M8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOHICEdFODrCMRGOjfChCB+O8JEIH43wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jfC/CIfEOE6M48Y4XozjxzhBjBPGODTGiWIcFuPwGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYNxl3yJD/cdssxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2IcEeO5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2McGeOoGEfHOCbGsTE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBIcmOFGCwxIcnuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgySOGe0qCpyZ4WoKnJ3hGgmcmeFaCZyd4ToIjEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneGeCdyV4d4L3JHhvgvcleH+CDyT4YIIjExyV4OgExyQ4NsGHEnw4wUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4tAUJ0pxWIrDU5w4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSJMUlU1wqxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxQdTHJniqBRHpzgmxbEpPpTiwyk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXDcDMfLcPwMJ8hwwgyHZjhRhsMyHJ7hxBlOkuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukSEZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+2f8CA/fLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/M8KwMz87wnAxHZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2Q4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8M4M78rw7gzvyfDeDO/L8P4MH8jwwQxHZjgqw9EZjslwbIYPZfhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx6E5TpTjsByH5zhxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkOCLHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY535nhXjnfneE+O9+Z4X4735/hAjg/mODLHUTmOznFMjmNzfCjHh3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQWOU+C4BY5X4PgFTlDghAUOLXCiAocVOLzAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8ARBZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQUOCgwKDAuMCowLTApMC8wKzAssCiwLhg4ZMsS6wKbAtsCuwL7AOwu8q8C7C7ynwHsLvK/A+wt8oMAHCxxZ4KgCRxc4psCxBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/Bf5X4JASxylx3BLHK3H8EicoccISh5Y4UYnDShxe4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiiBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4SByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiyBJHlTi6xDElji3xoRIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8fNuT/V+JbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ6pcJwKx61wvArHr3CCCiescGiFE1U4rMLhFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVUuGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFVrhSRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVjqjw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+ocFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+GdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVjqxwVIWjKxxT4dgKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twSI3j1DhujePVOH6NE9Q4YY1Da5yoxmE1Dq9x4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqXFEjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R42DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsa76zxrhrvrvGeGu+t8b4a76/xgRofrHFkjaNqHF3jmBrH1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbHNrgRA0Oa3B4gxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDNLhkg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6DIxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hng3c1eHeD9zR4b4P3NXh/gw80+GCDIxsc1eDoBsc0OLbBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OLQFidqcViLw1ucuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWqTFJVtcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWhzR4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxzZ4qgWR7c4psWxLT7U4sMtPtLioy0+1uLjLT7R4pMtPtX+vy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//970+H43Q4bofjdTh+hxN0OGGHQzucqMNhHQ7vcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+iQDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s0A5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+lwRIfndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/s8K4O7+7wng7v7fC+Du/v8IEOH+xwZIejOhzd4ZgOx3b4UIcPd/hIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehynx3F7HK/H8XucoMcJexza40Q9DutxeI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo/2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOjyN6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4Z4939Xh3j/f0eG+P9/V4f48P9PhgjyN7HNXj6B7H9Di25/9YtOc2vgtAgeJbtWrZtl0n27Zt2z7Ztm17v6+NbBvLNlat7T73ufe8h/Pfx26A/QCfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8McOQAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wFED/HuA/wzw3wGOHuB/AxwzwLEDHBLg0ADHCXDcAMcLcFiA4wc4QYATBjg8wIkCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQIkwCUDXCrApQNcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDNMCTAjw5wFMCPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAnw4wEcCfDTAxwJ8PMAnAhwR4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTAkQF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8Bjgrw7wD/CfDfAEcH+F+AYwIcG+CQEIeGOE6I44Y4XojDQhw/xAlCnDDE4SFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4RIiEuGeJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGKIhnhTiySGeEuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPivSHeF+L9IT4Q4oMhPhTiwyE+EuKjIT4W4uMhPhHiiBAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIY4M8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CnFUiH+H+E+I/4Y4OsT/QhwT4tgQh0Q4NMJxIhw3wvEiHBbh+BFOEOGEEQ6PcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiJcMkIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I1xn2/2YjwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM0wpMiPDnCUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wiciHBHhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wicjfCrCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN8L8L3I/wgwg8j/CjCjyP8JMKREX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/hnhXxGOivDvCP+J8N8IR0f4X4RjIhwb4ZAYh8Y4TozjxjhejMNiHD9m1Nj/y+ExThTjxDFOEuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuESMxLhnjUjEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYTEeHuMRMR4Z41ExHh3jMTEeG+NxMR4f4wkxnhijMZ4U48kxnhLjqTGeFuPpMZ4R45kxnhXj2TGeE+O5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOODMT4U48MxPhLjozE+FuPjMT4R44gYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MT4Z41MxPh3jMzE+G+NzMT4f4wsxvhjjSzG+HOMrMb4a42sxvh7jGzG+GeNbMb4d4zsxvhvjezG+H+MHMX4Y40cxfhzjJzGOjPHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4pxVIx/x/hPjP/GODrG/2IcE+PYGIckODTBcRIcN8HxEhyW4PgJTpDghAkOT3CiBCdOcJIEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF05wkQQXTXCxBBdPcIkESXDJBJdKcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE3wpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEb03wtgRvT/COBO9M8K4E707wngTvTfC+BO9P8IEEH0zwoQQfTvCRBB9N8LEEH0/wiQRHJDhIMEgwTDBKME4wSTBNMEswT7BIsEywSrBOsEmwTbBLsE/wyQSfSvDpBJ9J8NkEn0vw+QRfSPDFBF9K8OUEX0nw1QRfS/D1BN9I8M0E30rw7QTfSfDdBN9L8P0EP0jwwwQ/SvDjBD9JcGSCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgqMS/DvBfxL8N8HRCf6X4JgExyY4JMWhKY6T4rgpjpfisBTHT3GCFCdMcXiKE6U4cYqTpDhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inOkOGeKc6U4d4rzpDhvivOlOH+KC6S4YIoLpbhwioukuGiKi6W4eIpLpEiKS6a4VIpLp7hMisumuFyKy6e4QoorprhSiiunuEqKq6a4Woqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6a4UYobp7hJipumuFmKm6e4RYpbprhVilunuE2K26a4XYrbp7hDijumuFOKO6e4S4q7prhbirunuEeKe6a4V4p7p7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciseneEKKJ6ZoiieleHKKp6R4aoqnpXh6imekeGaKZ6V4dornpHhuiueleH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWK16R4bYrXpXh9ijekeGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+kOCLFQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpvhWim+n+E6K76b4Xorvp/hBih+m+FGKH6f4SYojU/w0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXfUvw9xT9S/DPFv1IcleLfKf6T4r8pjk7xvxTHpDg2xSEZDs1wnAzHzXC8DIdlOH6GE2Q4YYbDM5wow4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCJDMlwyw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxQzM8KcOTMzwlw1MzPC3D0zM8I8MzMzwrw7MzPCfDczM8L8PzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrM7wmw2szvC7D6zO8IcMbM7wpw5szvCXDWzO8LcPbM7wjwzszvCvDuzO8J8N7M7wvw/szfCDDBzN8KMOHM3wkw0czfCzDxzN8IsMRGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8MsOnMnw6w2cyfDbD5zJ8PsMXMnwxw5cyfDnDVzJ8NcPXMnw9wzcyfDPDtzJ8O8N3Mnw3w/cyfD/DDzL8MMOPMvw4w08yHJnhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4agM/87wnwz/zXB0hv9lOCbDsRkOyXFojuPkOG6O4+U4LMfxc5wgxwlzHJ7jRDlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOZLjkjkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rpXj2jmuk+O6Oa6X4/o5bpDjhjlulOPGOW6S46Y5bpbj5jlukeOWOW6V49Y5bpPjtjlul+P2Oe6Q44457pTjzjnukuOuOe6W4+457pHjnjnulePeOe6T47457pfj/jkekOOBOR6U48E5HpLjoTkeluPhOR6R45E5HpXj0Tkek+OxOR6X4/E5npDjiTma40k5npzjKTmemuNpOZ6e4xk5npnjWTmeneM5OZ6b43k5np/jBTlemONFOV6c4yU5XprjZTlenuMVOV6Z41U5Xp3jNTlem+N1OV6f4w053pjjTTnenOMtOd6a42053p7jHTnemeNdOd6d4z053pvjfTnen+MDOT6Y40M5PpzjIzk+muNjOT6e4xM5jshxkGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2M/fMiQ/33iqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHEfm+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z45/5Tgqx79z/CfHf3McneN/OY7JcWyOQwocWuA4BY5b4HgFDitw/AInKHDCAocXOFGBExc4SYGTFjhZgZMXOEWBUxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjhfgfMXuECBCxa4UIELF7hIgYsWuFiBixe4RIEUuGSBSxW4dIHLFLhsgcsVuHyBKxS4YoErFbhygasUuGqBqxW4eoFrFLhmgWsVuHaB6xS4boHrFbh+gRsUuGGBGxW4cYGbFLhpgZsVuHmBWxS4ZYFbFbh1gdsUuG2B2xW4fYE7FLhjgTsVuHOBuxS4a4G7Fbh7gXsUuGeBexW4d4H7FLhvgfsVuH+BBxR4YIEHFXhwgYcUeGiBhxV4eIFHFHhkgUcVeHSBxxR4bIHHFXh8gScUeGKBFnhSgScXeEqBpxZ4WoGnF3hGgWcWeFaBZxd4ToHnFnhegecXeEGBFxZ4UYEXF3hJgZcWeFmBlxd4RYFXFnhVgVcXeE2B1xZ4XYHXF3hDgTcWeFOBNxd4S4G3FnhbgbcXeEeBdxZ4V4F3F3hPgfcWeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgSMKHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBbxT4ZoFvFfh2ge8U+G6B7xX4foEfFPhhgR8V+HGBnxQ4ssBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8L/KvAUQX+XeA/Bf5b4OgC/ytwTIFjCxxS4tASxylx3BLHK3FYieOXOEGJE5Y4vMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqcv8QFSlywxIVKXLjERUpctMTFSly8xCVKpMQlS1yqxKVLXKbEZUtcrsTlS1yhxBVLXKnElUtcpcRVS1ytxNVLXKPENUtcq8S1S1ynxHVLXK/E9UvcoMQNS9yoxI1L3KTETUvcrMTNS9yixC1L3KrErUvcpsRtS9yuxO1L3KHEHUvcqcSdS9ylxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxANLPKjEg0s8pMRDSzysxMNLPKLEI0s8qsSjSzymxGNLPK7E40s8ocQTS7TEk0o8ucRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0ocUeKgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7EJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxJElflriZyV+XuIXJX5Z4lclfl3iNyV+W+J3JX5f4g8l/ljiTyX+XOIvJf5a4m8l/l7iHyX+WeJfJY4q8e8S/ynx3xJHl/hfiWNKHFvikAqHVjhOheNWOF6Fwyocv8IJKpywwuEVTlThxBVOUuGkFU5W4eQVTlHhlBVOVeHUFU5T4bQVTlfh9BXOUOGMFc5U4cwVzlLhrBXOVuHsFc5R4ZwVzlXh3BXOU+G8Fc5X4fwVLlDhghUuVOHCFS5S4aIVLlbh4hUuUSEVLlnhUhUuXeEyFS5b4XIVLl/hChWuWOFKFa5c4SoVrlrhahWuXuEaFa5Z4VoVrl3hOhWuW+F6Fa5f4QYVbljhRhVuXOEmFW5a4WYVbl7hFhVuWeFWFW5d4TYVblvhdhVuX+EOFe5Y4U4V7lzhLhXuWuFuFe5e4R4V7lnhXhXuXeE+Fe5b4X4V7l/hARUeWOFBFR5c4SEVHlrhYRUeXuERFR5Z4VEVI0cMGeIxFR5b4XEVHl/hCRWeWKEVnlThyRWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhiAoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFY6s8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qnBUhX9X+E+F/1Y4usL/KhxT4dgKh9Q4tMZxahy3xvFqHFbj+DVOUOOENQ6vcaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF69xiRqpcckal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6px4xo3qXHTGjercfMat6hxyxq3qnHrGrepcdsat6tx+xp3qHHHGneqcecad6lx1xp3q3H3Gveocc8a96px7xr3qXHfGvercf8aD6jxwBoPqvHgGg+p8dAaD6vx8BqPqPHIGo+q8egaj6nx2BqPq/H4Gk+o8cQarfGkGk+u8ZQaT63xtBpPr/GMGs+s8awaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGkfUOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6lxZI2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNo2r8u8Z/avy3xtE1/lfjmBrH1jikwaENjtPguA2O1+CwBsdvcIIGJ2xweIMTNThxg5M0OGmDkzU4eYNTNDhlg1M1OHWD0zQ4bYPTNTh9gzM0OGODMzU4c4OzNDhrg7M1OHuDczQ4Z4NzNTh3g/M0OG+D8zU4f4MLNLhggws1uHCDizS4aIOLNbh4g0s0SINLNrhUg0s3uEyDyza4XIPLN7hCgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoNrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYPbNrhdg9s3uEODOza4U4M7N7hLg7s2uFuDuze4R4N7NrhXg3s3uE+D+za4X4P7N3hAgwc2eFCDBzd4SIOHNnhYg4c3eESDRzZ4VINHN3hMg8c2eFyDxzd4QoMnNmiDJzV4coOnNHhqg6c1eHqDZzR4ZoNnNXh2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDDzX4cIOPNPhog481+HiDTzQ4osFBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJgyMb/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/GhzV4N8N/tPgvw2ObvC/Bsc0OLbBIS0ObXGcFsdtcbwWh7U4fosTtDhhi8NbnKjFiVucpMVJW5ysxclbnKLFKVucqsWpW5ymxWlbnK7F6VucocUZW5ypxZlbnKXFWVucrcXZW5yjxTlbnKvFuVucp8V5W5yvxflbXKDFBVtcqMWFW1ykxUVbXKzFxVtcokVaXLLFpUYPdekWl2lx2RaXa3H5FldoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqce8W92lx3xb3a3H/Fg9o8cAWD2rx4BYPafHQFg9r8fAWj2jxyBaPavHoFo9p8dgWj2vx+BZPaPHEFm3xpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbvGRFh9t8bEWH2/xiRZHtDhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xyRafavHpFp9p8dkWn2vx+RZfaPHFFl9q8eUWX2nx1RZfa/H1Ft9o8c0W32rx7RbfafHdFt9r8f0WP2jxwxY/avHjFj9pcWSLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi6Na/LvFf1r8t8XRLf7X4pgWx7Y4pMOhHY7T4bgdjtfhsA7H73CCDifscHiHE3U4cYeTdDhph5N1OHmHU3Q4ZYdTdTh1h9N0OG2H03U4fYczdDhjhzN1OHOHs3Q4a4ezdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0uGiHi3W4eIdLdEiHS3a4VIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch8d3eEKHJ3Zohyd1eHKHp3R4aoendXh6h2d0eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090OKLDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h092+FSHT3f4TIfPdvhch893+EKHL3b4Uocvd/hKh692+FqHr3f4RodvdvhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYcjO/y0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzoc1eHfHf7T4b8dju7wvw7HdDi2wyE9Du1xnB7H7XG8Hof1OH6PE/Q4YY/De5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqceZe5ylx1l7nK3H2Xuco8c5e5yrx7l7nKfHeXucr8f5e1ygxwV7XKjHhXtcpMdFe1ysx8V7XKJHelyyx6V6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxR3s8qceTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHW3u8rcfbe7yjxzt7vKvHu3u8p8d7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3t8oscRPQ56/J8AAAD//8P52+I=") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003007663616e300000000000000000000000140014006e657464655473696d3000"], 0x64}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 2.885955277s ago: executing program 3 (id=707): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000001c0)={0x0, "425ae375378532d249154c94b4c78a38b4c9810000f900000000000000001e00", 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r2, 0x8058}], 0x1, 0x0, 0x0, 0x0) io_submit(r0, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 2.679876828s ago: executing program 2 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xaba}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4) 2.533956643s ago: executing program 2 (id=712): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x2, 0x171}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffeffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.126222854s ago: executing program 0 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}}, 0x0) 2.126031634s ago: executing program 2 (id=715): ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.953677442s ago: executing program 0 (id=716): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000040)=[{r1, 0x10a}, {r1, 0x212bdb8c3662ab0c}], 0x2, 0x0, 0x0, 0x0) close(0x3) 1.835664674s ago: executing program 3 (id=717): r0 = epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000100)={0x4}) 1.746166513s ago: executing program 1 (id=718): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) 1.745897023s ago: executing program 0 (id=719): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x5, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x8000) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x102, 0x0) 1.654593792s ago: executing program 3 (id=720): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x9, 0x3032, 0xffffffffffffffff, 0x1263b000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 1.623115076s ago: executing program 1 (id=721): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0xfd, 0x0}, @remote]}]}}, {0x4e22, 0x4e20, 0x8}}}}}, 0x0) 1.562201321s ago: executing program 0 (id=722): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x6}, 0x1c) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r1, 0x0, 0x8003) 1.511283347s ago: executing program 2 (id=723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="6ec595b4a5d76ac4e3b19bfb4e26735f", 0x10) sendto$inet6(r1, &(0x7f0000000080)="255b2a20f709b4a43a1307c620044218fe1f90c892edda55948fc95472faf24df297a8e4228b32dcc11a0a004c287b035078ffffffffffeffffdfc5955de", 0xfffffffffffffd0b, 0x2000800, 0x0, 0x0) 1.448077203s ago: executing program 3 (id=724): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r0) 1.38590687s ago: executing program 0 (id=725): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000140)='./file0\x00', 0x6010000, &(0x7f0000000200), 0x1, 0x97ac, &(0x7f0000009740)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file0/file0\x00') 1.345127524s ago: executing program 1 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0x5, 0xffff}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) 1.167837901s ago: executing program 1 (id=727): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x80000001, 0x8}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xfff3}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 906.070568ms ago: executing program 1 (id=728): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)="d8", 0x1) fallocate(r0, 0x0, 0x9, 0x8001) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100}) 283.217132ms ago: executing program 2 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='@'}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x0, 0x0, {0x3, 0x8, 0x0, 0x3f8, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x6e7e8ecd, 0x55}}, @chandef_params]}, 0x58}, 0x1, 0x0, 0x0, 0xc810}, 0xc040) 81.311482ms ago: executing program 0 (id=730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r1, &(0x7f0000001680)=[{&(0x7f00000000c0)='0', 0x1}], 0x1, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) 21.540538ms ago: executing program 2 (id=731): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) 0s ago: executing program 1 (id=732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) close(r0) kernel console output (not intermixed with test programs): entered promiscuous mode [ 79.560618][ T5766] hsr_slave_1: entered promiscuous mode [ 79.581562][ T5768] team0: Port device team_slave_1 added [ 79.591525][ T5767] hsr_slave_0: entered promiscuous mode [ 79.598740][ T5767] hsr_slave_1: entered promiscuous mode [ 79.605573][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.613761][ T5767] Cannot create hsr debugfs directory [ 79.635675][ T5769] team0: Port device team_slave_0 added [ 79.675704][ T5769] team0: Port device team_slave_1 added [ 79.703219][ T5774] Bluetooth: hci1: command tx timeout [ 79.758711][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.765931][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.793198][ T5774] Bluetooth: hci0: command tx timeout [ 79.798966][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.843528][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.850520][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.876731][ T5774] Bluetooth: hci3: command tx timeout [ 79.882568][ T5774] Bluetooth: hci2: command tx timeout [ 79.888355][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.901138][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.908374][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.934660][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.948842][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.955909][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.981930][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.114261][ T5768] hsr_slave_0: entered promiscuous mode [ 80.120710][ T5768] hsr_slave_1: entered promiscuous mode [ 80.127533][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.135192][ T5768] Cannot create hsr debugfs directory [ 80.156952][ T5769] hsr_slave_0: entered promiscuous mode [ 80.163564][ T5769] hsr_slave_1: entered promiscuous mode [ 80.169645][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.177306][ T5769] Cannot create hsr debugfs directory [ 80.366997][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.417675][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.433543][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.467704][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.565274][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.609002][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.626773][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.650132][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.728103][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.739819][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.767863][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.779121][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.838398][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.849707][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.861540][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.873028][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.006191][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.042878][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.065950][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.095355][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.102743][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.128549][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.163310][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.170489][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.183843][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.191068][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.235557][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.242716][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.267519][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.301486][ T5767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.313273][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.349992][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.409613][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.416899][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.455603][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.477000][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.484238][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.569302][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.619694][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.626941][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.706503][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.713748][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.781407][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.782560][ T5774] Bluetooth: hci1: command tx timeout [ 81.863302][ T5774] Bluetooth: hci0: command tx timeout [ 81.942175][ T5774] Bluetooth: hci3: command tx timeout [ 81.942771][ T51] Bluetooth: hci2: command tx timeout [ 81.986326][ T5767] veth0_vlan: entered promiscuous mode [ 82.020775][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.050002][ T5767] veth1_vlan: entered promiscuous mode [ 82.204396][ T5767] veth0_macvtap: entered promiscuous mode [ 82.218519][ T5766] veth0_vlan: entered promiscuous mode [ 82.243400][ T5767] veth1_macvtap: entered promiscuous mode [ 82.277470][ T5766] veth1_vlan: entered promiscuous mode [ 82.300850][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.324698][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.339802][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.350231][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.364623][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.374247][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.384138][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.393144][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.474233][ T5766] veth0_macvtap: entered promiscuous mode [ 82.509138][ T5766] veth1_macvtap: entered promiscuous mode [ 82.557871][ T5769] veth0_vlan: entered promiscuous mode [ 82.608135][ T5768] veth0_vlan: entered promiscuous mode [ 82.621466][ T5768] veth1_vlan: entered promiscuous mode [ 82.630774][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.642232][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.655157][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.666575][ T5769] veth1_vlan: entered promiscuous mode [ 82.678177][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.694185][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.704689][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.715707][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.727862][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.769370][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.780956][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.790100][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.798974][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.849988][ T5768] veth0_macvtap: entered promiscuous mode [ 82.858790][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.872934][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.894000][ T5769] veth0_macvtap: entered promiscuous mode [ 82.906753][ T5769] veth1_macvtap: entered promiscuous mode [ 82.921063][ T5768] veth1_macvtap: entered promiscuous mode [ 82.960617][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.980948][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.995313][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.006452][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.019347][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.046509][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.058239][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.072037][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.083310][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.095442][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.115133][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.133728][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.143982][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.155046][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.166722][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.177573][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.188918][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.220527][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.238963][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.249596][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.258659][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.311411][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.322426][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.332829][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.343587][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.353806][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.364623][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.381295][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.395526][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.408720][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.418240][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.431399][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.446726][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.471266][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.568759][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.596863][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.689414][ T5855] syz.2.5[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.701370][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.712305][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.800084][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.828776][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.861440][ T5855] loop2: detected capacity change from 0 to 4096 [ 83.868176][ T51] Bluetooth: hci1: command tx timeout [ 83.903926][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.915799][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.942204][ T51] Bluetooth: hci0: command tx timeout [ 83.968713][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.010373][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.024713][ T51] Bluetooth: hci3: command tx timeout [ 84.024722][ T5774] Bluetooth: hci2: command tx timeout [ 84.069783][ T5855] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 84.077922][ T5855] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 84.348546][ T1314] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 84.376895][ T5767] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 84.423772][ T5767] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 84.430973][ T5767] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 84.453769][ T49] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 84.699610][ T5868] syzkaller1: entered promiscuous mode [ 84.728326][ T5868] syzkaller1: entered allmulticast mode [ 84.754478][ T5871] loop0: detected capacity change from 0 to 256 [ 84.844602][ T5871] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.324895][ T5881] loop0: detected capacity change from 0 to 8192 [ 85.358622][ T5881] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.383833][ T5881] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 85.395447][ T5881] REISERFS (device loop0): using ordered data mode [ 85.402481][ T5881] reiserfs: using flush barriers [ 85.412410][ T5881] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.430289][ T5881] REISERFS (device loop0): checking transaction log (loop0) [ 85.592795][ T5881] REISERFS (device loop0): Using tea hash to sort names [ 85.620857][ T5881] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 85.837439][ T5877] loop3: detected capacity change from 0 to 32768 [ 85.925556][ T5877] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.945009][ T51] Bluetooth: hci1: command tx timeout [ 86.023136][ T51] Bluetooth: hci0: command tx timeout [ 86.054129][ T5894] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 86.102585][ T5774] Bluetooth: hci2: command tx timeout [ 86.108067][ T51] Bluetooth: hci3: command tx timeout [ 86.171451][ T5877] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 86.391404][ T5877] XFS (loop3): Starting recovery (logdev: internal) [ 86.404384][ T5903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'. [ 86.562426][ T5877] XFS (loop3): Ending recovery (logdev: internal) [ 86.762905][ T5877] XFS (loop3): User initiated shutdown received. [ 86.770117][ T5877] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 86.837957][ T5877] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 86.946581][ T5766] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 87.996291][ T5921] syz.0.26 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 88.440305][ T5923] loop1: detected capacity change from 0 to 32768 [ 88.466823][ T5923] ======================================================= [ 88.466823][ T5923] WARNING: The mand mount option has been deprecated and [ 88.466823][ T5923] and is ignored by this kernel. Remove the mand [ 88.466823][ T5923] option from the mount to silence this warning. [ 88.466823][ T5923] ======================================================= [ 88.761506][ T5923] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 88.993269][ T966] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 89.085715][ T5923] syz.1.27 (5923) used greatest stack depth: 17680 bytes left [ 89.231480][ T966] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.254085][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 89.262067][ T966] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.279476][ T966] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.289266][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.544003][ T966] usb 3-1: usb_control_msg returned -32 [ 89.562331][ T966] usbtmc 3-1:16.0: can't read capabilities [ 89.698044][ T5958] loop1: detected capacity change from 0 to 4096 [ 89.927609][ T5958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.949937][ T5958] EXT4-fs (loop1): Test dummy encryption mode enabled [ 89.971410][ T5958] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 89.981197][ T5958] System zones: 0-5 [ 89.995229][ T5958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.072955][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.171617][ T5970] loop1: detected capacity change from 0 to 64 [ 90.195451][ T5819] usb 3-1: USB disconnect, device number 2 [ 90.223477][ T5970] hfs: unable to locate alternate MDB [ 90.229880][ T5970] hfs: continuing without an alternate MDB [ 90.394432][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.599348][ T5978] loop3: detected capacity change from 0 to 1024 [ 90.859827][ T1314] hfsplus: b-tree write err: -5, ino 3 [ 90.896797][ T5766] hfsplus: node 4:3 still has 1 user(s)! [ 91.149919][ T5819] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.212431][ T5990] vxcan0: tx address claim with different name [ 91.281201][ T5992] loop0: detected capacity change from 0 to 4096 [ 91.332024][ T5992] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 91.368192][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.384131][ T5992] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 91.411593][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.434390][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.447976][ T5819] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.471614][ T5992] ntfs: volume version 3.1. [ 91.490392][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.503465][ T5994] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.518105][ T5819] usb 2-1: config 0 descriptor?? [ 91.532909][ T5994] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 91.556879][ T5992] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 91.589953][ T5996] syzkaller1: entered promiscuous mode [ 91.612114][ T5992] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 91.612114][ T5996] syzkaller1: entered allmulticast mode [ 91.641974][ T5992] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 91.973083][ T5819] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.980817][ T5819] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 92.030172][ T5819] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 92.042953][ T5819] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 92.060937][ T5819] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 92.071521][ T5819] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 92.081217][ T5819] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 92.089084][ T5819] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 92.113876][ T970] cfg80211: failed to load regulatory.db [ 92.122111][ T5819] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 92.143265][ T5819] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 92.225233][ T6008] Zero length message leads to an empty skb [ 92.251711][ T5819] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 92.300789][ T5819] usb 2-1: USB disconnect, device number 2 [ 92.422581][ T6013] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 92.439764][ T6012] IPVS: stopping master sync thread 6013 ... [ 92.509560][ T6010] fido_id[6010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.018625][ T5819] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 93.234733][ T5819] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 93.254905][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 93.275959][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 41407, setting to 1023 [ 93.305712][ T5819] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 93.330223][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.366466][ T5819] usb 4-1: Product: syz [ 93.380005][ T5819] usb 4-1: Manufacturer: syz [ 93.391448][ T5819] usb 4-1: SerialNumber: syz [ 93.400272][ T5819] usb 4-1: config 0 descriptor?? [ 93.410658][ T5819] hub 4-1:0.0: bad descriptor, ignoring hub [ 93.419310][ T5819] hub: probe of 4-1:0.0 failed with error -5 [ 93.430890][ T5819] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 93.449070][ T5819] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 93.489222][ T5819] usbtouchscreen: probe of 4-1:0.0 failed with error -22 [ 93.731181][ T6038] loop0: detected capacity change from 0 to 128 [ 93.750667][ T28] audit: type=1326 audit(1768164223.517:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe656d8f749 code=0x7fc00000 [ 93.754856][ T6038] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.791790][ T6038] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.836889][ T5819] usb 4-1: USB disconnect, device number 2 [ 93.862987][ T6042] loop2: detected capacity change from 0 to 512 [ 93.917156][ T6042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.959245][ T6042] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.010378][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.040738][ T28] audit: type=1800 audit(1768164223.777:3): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.71" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 94.093753][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.112754][ T6046] tap0: tun_chr_ioctl cmd 1074025675 [ 94.118282][ T6046] tap0: persist enabled [ 94.124287][ T6046] tap0: tun_chr_ioctl cmd 1074025675 [ 94.129709][ T6046] tap0: persist enabled [ 94.176124][ T6048] loop0: detected capacity change from 0 to 128 [ 94.698778][ T6065] warning: `syz.1.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.739384][ T6063] loop3: detected capacity change from 0 to 2048 [ 94.752856][ T966] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.776671][ T6063] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.952538][ T966] usb 1-1: Using ep0 maxpacket: 32 [ 94.968206][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.010675][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.039361][ T966] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 95.065995][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.093226][ T966] usb 1-1: config 0 descriptor?? [ 95.475633][ T6080] loop1: detected capacity change from 0 to 128 [ 95.518767][ T6080] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.553099][ T6080] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.595530][ T966] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 95.794102][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.927895][ T970] usb 1-1: USB disconnect, device number 2 [ 96.029670][ T966] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.053240][ T6073] loop2: detected capacity change from 0 to 40427 [ 96.097306][ T6073] F2FS-fs (loop2): invalid crc value [ 96.130663][ T6073] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.244346][ T966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.262536][ T966] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 96.287820][ T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.288560][ T6073] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.317740][ T966] usb 4-1: config 0 descriptor?? [ 96.345711][ T966] pwc: Askey VC010 type 2 USB webcam detected. [ 96.445882][ T6073] syz.2.85: attempt to access beyond end of device [ 96.445882][ T6073] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.533194][ T5767] syz-executor: attempt to access beyond end of device [ 96.533194][ T5767] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 96.570241][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 96.788903][ T966] pwc: recv_control_msg error -32 req 02 val 2b00 [ 96.797166][ T966] pwc: recv_control_msg error -32 req 02 val 2700 [ 96.847370][ T6095] loop1: detected capacity change from 0 to 32768 [ 96.921799][ T6095] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.014928][ T966] pwc: recv_control_msg error -71 req 04 val 1000 [ 97.023601][ T966] pwc: recv_control_msg error -71 req 04 val 1300 [ 97.030731][ T966] pwc: recv_control_msg error -71 req 04 val 1400 [ 97.038628][ T966] pwc: recv_control_msg error -71 req 02 val 2000 [ 97.045843][ T966] pwc: recv_control_msg error -71 req 02 val 2100 [ 97.052939][ T966] pwc: recv_control_msg error -71 req 04 val 1500 [ 97.060212][ T966] pwc: recv_control_msg error -71 req 02 val 2500 [ 97.079617][ T966] pwc: recv_control_msg error -71 req 02 val 2400 [ 97.095801][ T966] pwc: recv_control_msg error -71 req 02 val 2600 [ 97.110629][ T966] pwc: recv_control_msg error -71 req 02 val 2900 [ 97.129499][ T966] pwc: recv_control_msg error -71 req 02 val 2800 [ 97.150754][ T966] pwc: recv_control_msg error -71 req 04 val 1100 [ 97.174167][ T966] pwc: recv_control_msg error -71 req 04 val 1200 [ 97.200501][ T966] pwc: Registered as video103. [ 97.219269][ T966] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 97.264840][ T966] usb 4-1: USB disconnect, device number 3 [ 97.353354][ T6095] XFS (loop1): Ending clean mount [ 97.408457][ T6095] XFS (loop1): Quotacheck needed: Please wait. [ 97.502364][ T6095] XFS (loop1): Quotacheck: Done. [ 97.804219][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.891167][ T6116] netlink: 'syz.2.99': attribute type 5 has an invalid length. [ 98.365427][ T6124] loop1: detected capacity change from 0 to 2048 [ 98.375923][ T6124] EXT4-fs: Ignoring removed i_version option [ 98.453225][ T6124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.538961][ T6124] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.694188][ T6124] fs-verity: sha512 using implementation "sha512-avx2" [ 98.787562][ T6124] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.98: bg 0: block 321: padding at end of block bitmap is not set [ 98.837129][ T6124] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 1 [ 98.845791][ T6124] fs-verity (loop1, inode 13): Error -117 building Merkle tree [ 98.966374][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.981088][ T6133] capability: warning: `syz.3.106' uses deprecated v2 capabilities in a way that may be insecure [ 99.121429][ T6120] loop2: detected capacity change from 0 to 32768 [ 99.176234][ T6120] JBD2: Ignoring recovery information on journal [ 99.207033][ T6135] loop1: detected capacity change from 0 to 1764 [ 99.347687][ T6120] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 99.678858][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 99.796721][ T6137] loop3: detected capacity change from 0 to 32768 [ 99.859277][ T6137] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.979440][ T6137] XFS (loop3): Ending clean mount [ 100.000287][ T6137] XFS (loop3): Quotacheck needed: Please wait. [ 100.049009][ T6137] XFS (loop3): Quotacheck: Done. [ 100.112212][ T966] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.283302][ T5766] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.334579][ T966] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.373870][ T966] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.405691][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.422157][ T966] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.442426][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.494374][ T966] usb 1-1: config 0 descriptor?? [ 101.005428][ T6165] loop2: detected capacity change from 0 to 32768 [ 101.031430][ T6165] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.135822][ T6165] XFS (loop2): Ending clean mount [ 101.156620][ T966] usb 1-1: string descriptor 0 read error: -22 [ 101.465033][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.561815][ T966] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 101.578432][ T966] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 101.588919][ T966] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 101.600072][ T966] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 101.608587][ T966] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 101.629467][ T966] usb 1-1: USB disconnect, device number 3 [ 101.652748][ T5819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.736850][ T6188] loop3: detected capacity change from 0 to 512 [ 101.747929][ T6188] EXT4-fs: Ignoring removed i_version option [ 101.754147][ T6188] EXT4-fs: Ignoring removed nobh option [ 101.762965][ T6188] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.774109][ T6188] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.788394][ T6188] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.808347][ T6188] EXT4-fs (loop3): 1 truncate cleaned up [ 101.815797][ T6188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.879950][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.898798][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.914720][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.932209][ T5819] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.941313][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.976959][ T5819] usb 2-1: config 0 descriptor?? [ 101.979172][ T6188] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 102.033867][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.455064][ T5819] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 102.488758][ T5819] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 102.585249][ T6207] loop0: detected capacity change from 0 to 1024 [ 102.644046][ T6207] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.710933][ T6207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.751552][ T6207] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.832173][ T6207] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.129: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 102.865737][ T970] usb 2-1: USB disconnect, device number 3 [ 102.910281][ T6207] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.129: couldn't read orphan inode 11 (err -117) [ 102.957859][ T6207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.050518][ T6207] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.129: Invalid block bitmap block 0 in block_group 0 [ 103.076508][ T6207] Quota error (device loop0): write_blk: dquota write failed [ 103.086579][ T6207] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 103.101099][ T6207] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.129: Failed to acquire dquot type 0 [ 103.162861][ T6207] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.129: Invalid inode table block 8589934593 in block_group 0 [ 103.271521][ T1314] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm kworker/u4:7: Invalid inode table block 8589934593 in block_group 0 [ 103.311263][ T6216] loop2: detected capacity change from 0 to 512 [ 103.344737][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.519037][ T6210] loop3: detected capacity change from 0 to 32768 [ 103.571501][ T6210] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.130 (6210) [ 103.677365][ T6210] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.709601][ T6210] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 103.753544][ T6210] BTRFS info (device loop3): setting nodatacow, compression disabled [ 103.772699][ T6210] BTRFS info (device loop3): force clearing of disk cache [ 103.789918][ T6210] BTRFS info (device loop3): enabling ssd optimizations [ 103.808564][ T6210] BTRFS info (device loop3): using spread ssd allocation scheme [ 103.821948][ T6210] BTRFS info (device loop3): turning off barriers [ 103.828429][ T6210] BTRFS info (device loop3): disabling free space tree [ 103.862666][ T6210] BTRFS info (device loop3): not using ssd optimizations [ 103.869749][ T6210] BTRFS info (device loop3): not using spread ssd allocation scheme [ 103.943257][ T6225] loop0: detected capacity change from 0 to 4096 [ 103.973994][ T6225] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 104.054440][ T6210] BTRFS info (device loop3): rebuilding free space tree [ 104.161455][ T28] audit: type=1800 audit(1768164489.925:4): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 104.272892][ T6210] BTRFS info (device loop3): disabling free space tree [ 104.286885][ T6210] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.317303][ T6210] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.754291][ T5766] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.190356][ T6256] loop2: detected capacity change from 0 to 128 [ 105.214468][ T6256] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 105.258913][ T6256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.715351][ T6269] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.333824][ T5850] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.543804][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.563299][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.589659][ T5850] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.612905][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.620973][ T5850] usb 2-1: SerialNumber: syz [ 107.921524][ T5850] usb 2-1: 0:2 : does not exist [ 107.994443][ T5850] usb 2-1: USB disconnect, device number 4 [ 108.147339][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.507313][ T6324] loop3: detected capacity change from 0 to 4096 [ 108.545587][ T6324] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 108.611856][ T6325] loop0: detected capacity change from 0 to 8192 [ 108.847633][ T6324] ntfs3: loop3: ino=0, attr_set_size [ 108.872999][ T6324] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 108.942612][ T6326] ntfs3: loop3: ino=0, attr_set_size [ 108.949453][ T6329] ntfs3: loop3: ino=0, attr_set_size [ 109.011702][ T6324] ntfs3: loop3: no free space to extend mft [ 109.208222][ T6332] loop0: detected capacity change from 0 to 128 [ 109.273737][ T6332] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.326668][ T6332] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.436225][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.777397][ T6354] loop0: detected capacity change from 0 to 32768 [ 110.792359][ T6354] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.179 (6354) [ 110.851755][ T6354] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 110.893204][ T6354] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 110.948722][ T6354] BTRFS info (device loop0): force zlib compression, level 3 [ 110.956636][ T6354] BTRFS info (device loop0): turning on flush-on-commit [ 110.966324][ T6354] BTRFS info (device loop0): max_inline at 4096 [ 110.973219][ T6354] BTRFS info (device loop0): using free space tree [ 111.273156][ T6354] BTRFS info (device loop0): enabling ssd optimizations [ 111.292029][ T6354] BTRFS info (device loop0): auto enabling async discard [ 111.581507][ T6354] BTRFS info (device loop0): balance: start -d -m [ 111.657518][ T6354] BTRFS info (device loop0): balance: paused [ 111.892430][ T5768] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 112.921885][ C0] sched: RT throttling activated [ 113.377017][ T6367] loop3: detected capacity change from 0 to 262144 [ 113.393045][ T6367] F2FS-fs (loop3): invalid crc value [ 113.445440][ T6367] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.489823][ T970] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 113.504324][ T6367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 113.707901][ T970] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 113.737768][ T970] usb 2-1: config 0 has no interface number 0 [ 113.757767][ T970] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 113.769291][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.804165][ T970] usb 2-1: Product: syz [ 113.815550][ T970] usb 2-1: Manufacturer: syz [ 113.830418][ T970] usb 2-1: SerialNumber: syz [ 113.851707][ T970] usb 2-1: config 0 descriptor?? [ 113.966722][ T970] usb 2-1: can't set config #0, error -71 [ 114.000625][ T970] usb 2-1: USB disconnect, device number 5 [ 114.069237][ T6399] loop0: detected capacity change from 0 to 1024 [ 114.347588][ T6270] Set syz1 is full, maxelem 65536 reached [ 115.743663][ T6408] loop2: detected capacity change from 0 to 32768 [ 115.835978][ T6408] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.062156][ T6408] XFS (loop2): Ending clean mount [ 116.093052][ T6424] veth1_to_bond: entered allmulticast mode [ 116.125709][ T6408] XFS (loop2): Quotacheck needed: Please wait. [ 116.148183][ T6424] veth1_to_bond: left allmulticast mode [ 116.323236][ T6408] XFS (loop2): Quotacheck: Done. [ 116.807577][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.968201][ T6405] loop1: detected capacity change from 0 to 262144 [ 116.995309][ T6405] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.194 (6405) [ 117.041418][ T6405] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 117.052871][ T6405] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.063509][ T6405] BTRFS info (device loop1): setting nodatasum [ 117.069739][ T6405] BTRFS info (device loop1): enabling ssd optimizations [ 117.076771][ T6405] BTRFS info (device loop1): using spread ssd allocation scheme [ 117.084507][ T6405] BTRFS info (device loop1): using free space tree [ 117.578391][ T5769] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 118.375372][ T6466] syzkaller1: entered promiscuous mode [ 118.381004][ T6466] syzkaller1: entered allmulticast mode [ 118.482219][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.501762][ T6467] netlink: 27 bytes leftover after parsing attributes in process `syz.0.208'. [ 118.672426][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 118.703959][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 118.722022][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.752380][ T9] usb 2-1: config 0 descriptor?? [ 119.001572][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 119.039713][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.067881][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 119.104374][ T9] usb 2-1: media controller created [ 119.208731][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.304595][ T9] az6027: usb out operation failed. (-71) [ 119.334427][ T9] az6027: usb out operation failed. (-71) [ 119.340222][ T9] stb0899_attach: Driver disabled by Kconfig [ 119.371972][ T9] az6027: no front-end attached [ 119.371972][ T9] [ 119.399544][ T9] az6027: usb out operation failed. (-71) [ 119.422112][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 119.454175][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 119.486841][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 119.515227][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 119.549034][ T9] usb 2-1: USB disconnect, device number 6 [ 119.755749][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 119.837173][ T6472] loop2: detected capacity change from 0 to 32768 [ 119.871207][ T6472] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.211 (6472) [ 119.921184][ T6472] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.977096][ T6472] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 119.998219][ T6472] BTRFS info (device loop2): enabling auto defrag [ 120.018596][ T6472] BTRFS info (device loop2): use no compression [ 120.027195][ T6479] loop0: detected capacity change from 0 to 32768 [ 120.041047][ T6472] BTRFS info (device loop2): max_inline at 4096 [ 120.067903][ T6472] BTRFS info (device loop2): using free space tree [ 120.106845][ T6479] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.288249][ T6472] BTRFS info (device loop2): enabling ssd optimizations [ 120.322203][ T6472] BTRFS info (device loop2): auto enabling async discard [ 120.410536][ T6479] XFS (loop0): Ending clean mount [ 120.434529][ T966] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 120.452293][ T6479] XFS (loop0): Quotacheck needed: Please wait. [ 120.585846][ T6479] XFS (loop0): Quotacheck: Done. [ 120.712640][ T966] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.731918][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.766672][ T966] usb 2-1: config 0 descriptor?? [ 120.787976][ T966] cp210x 2-1:0.0: cp210x converter detected [ 120.840190][ T5767] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.851706][ T6484] loop3: detected capacity change from 0 to 40427 [ 120.906809][ T6484] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.954902][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.066349][ T6484] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.233412][ T28] audit: type=1800 audit(1768164507.005:5): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.214" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 121.300218][ T6503] loop1: detected capacity change from 0 to 2048 [ 121.336010][ T5778] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (5778) [ 121.356549][ T6503] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 121.378511][ T5766] syz-executor: attempt to access beyond end of device [ 121.378511][ T5766] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.431275][ T5766] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 121.467327][ T6503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.787434][ T966] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 121.808156][ T966] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 121.843903][ T966] usb 2-1: cp210x converter now attached to ttyUSB0 [ 121.884600][ T966] usb 2-1: USB disconnect, device number 7 [ 121.923016][ T966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.931555][ T966] cp210x 2-1:0.0: device disconnected [ 122.656593][ T6523] loop0: detected capacity change from 0 to 32768 [ 122.684803][ T6523] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.217 (6523) [ 122.755320][ T6523] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 122.815393][ T6523] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 122.844218][ T6523] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 122.914619][ T6523] BTRFS info (device loop0): use lzo compression, level 0 [ 122.934714][ T6523] BTRFS info (device loop0): force clearing of disk cache [ 122.953573][ T6523] BTRFS info (device loop0): using free space tree [ 123.181433][ T6556] veth1_to_hsr: entered promiscuous mode [ 123.188218][ T6556] macvlan2: entered promiscuous mode [ 123.201930][ T6556] veth1_to_hsr: left promiscuous mode [ 123.228114][ T6523] BTRFS info (device loop0): enabling ssd optimizations [ 123.250263][ T6523] BTRFS info (device loop0): auto enabling async discard [ 123.277426][ T6523] BTRFS info (device loop0): rebuilding free space tree [ 123.329448][ T966] libceph: connect (1)[c::]:6789 error -101 [ 123.350291][ T966] libceph: mon0 (1)[c::]:6789 connect error [ 123.379638][ T6564] ceph: No mds server is up or the cluster is laggy [ 123.416150][ T966] libceph: connect (1)[c::]:6789 error -101 [ 123.462500][ T966] libceph: mon0 (1)[c::]:6789 connect error [ 123.890200][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 123.908912][ T5768] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 123.955030][ T6579] bond_slave_0: entered promiscuous mode [ 123.961237][ T6579] bond_slave_1: entered promiscuous mode [ 123.974901][ T6579] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 124.512044][ T5819] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.712017][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 124.723524][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.742045][ T5819] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.756796][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.768650][ T5819] usb 3-1: config 0 descriptor?? [ 124.985622][ T5819] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 125.182063][ T8] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 125.207070][ T9] usb 3-1: USB disconnect, device number 3 [ 125.363852][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.372141][ T8] usb 4-1: config 0 has no interface number 0 [ 125.378296][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 125.390450][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 125.401750][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.410950][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.424509][ T8] usb 4-1: config 0 descriptor?? [ 125.432385][ T6602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.447927][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 125.682304][ T8] usb 4-1: USB disconnect, device number 4 [ 125.807039][ T6608] syzkaller1: entered promiscuous mode [ 125.813223][ T6608] syzkaller1: entered allmulticast mode [ 126.002149][ T966] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.080501][ T6612] loop2: detected capacity change from 0 to 4096 [ 126.103471][ T6612] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 126.120036][ T6612] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 126.139266][ T6612] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 126.151111][ T6612] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 126.165827][ T6612] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 126.181812][ T6612] ntfs: volume version 3.1. [ 126.189213][ T6612] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 126.209517][ T966] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.214011][ T6612] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 126.230734][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.251577][ T966] usb 1-1: config 0 descriptor?? [ 126.265032][ T966] cp210x 1-1:0.0: cp210x converter detected [ 126.271276][ T6612] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 126.308199][ T6612] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 126.369164][ T6612] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 126.404963][ T6612] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 126.432010][ T6612] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 126.469696][ T6612] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota/$Q index. [ 126.492993][ T6612] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 126.629649][ T6614] loop3: detected capacity change from 0 to 8192 [ 126.670368][ T966] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 126.697621][ T966] usb 1-1: cp210x converter now attached to ttyUSB0 [ 126.939057][ T966] usb 1-1: USB disconnect, device number 4 [ 126.957940][ T966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.988254][ T966] cp210x 1-1:0.0: device disconnected [ 127.332057][ T5850] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.534148][ T5850] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.551795][ T5850] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 127.573139][ T5850] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.587432][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.597644][ T5850] usb 4-1: Product: syz [ 127.607777][ T5850] usb 4-1: Manufacturer: syz [ 127.613162][ T5850] usb 4-1: SerialNumber: syz [ 127.632536][ T5850] cdc_mbim 4-1:1.0: skipping garbage [ 127.789912][ T6636] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 127.852432][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.481811][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.491555][ T5850] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 128.501771][ T5850] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 128.693662][ T5850] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 128.704327][ T5850] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 128.740547][ T5850] wwan wwan0: port wwan0mbim0 attached [ 128.763319][ T5850] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, ce:61:42:6f:0c:53 [ 128.782197][ T5850] usb 4-1: USB disconnect, device number 5 [ 128.789220][ T5850] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 128.929467][ T5850] wwan wwan0: port wwan0mbim0 disconnected [ 129.232206][ T5819] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 129.439285][ T6647] loop1: detected capacity change from 0 to 32768 [ 129.445976][ T5819] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 129.472361][ T5819] usb 1-1: config 0 has no interface number 0 [ 129.497335][ T6647] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.507581][ T5819] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 129.520508][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.529648][ T5819] usb 1-1: Product: syz [ 129.534089][ T5819] usb 1-1: Manufacturer: syz [ 129.538728][ T5819] usb 1-1: SerialNumber: syz [ 129.550734][ T5819] usb 1-1: config 0 descriptor?? [ 129.844132][ T6647] XFS (loop1): Ending clean mount [ 129.869740][ T6647] XFS (loop1): Quotacheck needed: Please wait. [ 129.968581][ T6647] XFS (loop1): Quotacheck: Done. [ 129.989882][ T5819] usb 1-1: Firmware version (0.0) predates our first public release. [ 130.007828][ T5819] usb 1-1: Please update to version 0.2 or newer [ 130.027398][ T5819] usb 1-1: Firmware: build [ 130.188943][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.265325][ T5819] usb 1-1: USB disconnect, device number 5 [ 130.657590][ T6673] loop2: detected capacity change from 0 to 128 [ 130.696393][ T6673] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 130.722412][ T6673] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.786088][ T28] audit: type=1800 audit(1768164516.555:6): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.265" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 130.838144][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.952295][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.139141][ T6683] loop0: detected capacity change from 0 to 4096 [ 131.148898][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 131.148940][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.148964][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.148983][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 131.163684][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 131.221157][ T6683] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 131.242451][ T6683] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 131.256752][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 131.269902][ T8] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 131.276812][ T6683] ntfs: volume version 3.1. [ 131.291436][ T8] usb 2-1: Manufacturer: syz [ 131.298769][ T6683] __ntfs_error: 3 callbacks suppressed [ 131.298783][ T6683] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 131.308238][ T8] usb 2-1: config 0 descriptor?? [ 131.333744][ T6683] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 131.352949][ T6683] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 131.368723][ T6683] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 131.380646][ T6683] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 131.396439][ T5850] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.413707][ T6683] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 131.431301][ T6683] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 131.452388][ T6683] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota/$Q index. [ 131.481167][ T6683] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 131.612182][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 131.622089][ T5850] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.631450][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.662102][ T5850] usb 4-1: Product: syz [ 131.681173][ T5850] usb 4-1: Manufacturer: syz [ 131.687682][ T5850] usb 4-1: SerialNumber: syz [ 131.718984][ T5850] usb 4-1: config 0 descriptor?? [ 131.760890][ T8] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 131.779663][ T8] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 131.794018][ T8] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 131.954260][ T5850] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.124844][ T8] usb 2-1: USB disconnect, device number 8 [ 132.291980][ T966] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.397621][ T6699] loop2: detected capacity change from 0 to 32768 [ 132.412132][ T6699] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.276 (6699) [ 132.441080][ T6699] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 132.454666][ T6699] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 132.464028][ T6699] BTRFS info (device loop2): force zlib compression, level 3 [ 132.471567][ T6699] BTRFS info (device loop2): turning on flush-on-commit [ 132.478672][ T6699] BTRFS info (device loop2): max_inline at 4096 [ 132.485576][ T6699] BTRFS info (device loop2): using free space tree [ 132.498165][ T966] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.524160][ T966] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.534889][ T966] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.544324][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.555496][ T6699] BTRFS info (device loop2): enabling ssd optimizations [ 132.565088][ T5850] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 132.578281][ T6697] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.590455][ T5850] usb 4-1: USB disconnect, device number 6 [ 132.602055][ T966] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 132.605883][ T6699] BTRFS info (device loop2): auto enabling async discard [ 132.834362][ T6699] BTRFS info (device loop2): balance: start -d -m [ 132.864325][ T6699] BTRFS info (device loop2): balance: paused [ 132.953161][ T5850] usb 1-1: USB disconnect, device number 6 [ 132.998730][ T6718] BTRFS info (device loop2): balance: canceled [ 133.082692][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.089480][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.106768][ T5767] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 134.491973][ T966] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.653258][ T6759] loop2: detected capacity change from 0 to 2048 [ 134.688491][ T6759] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.698487][ T966] usb 1-1: Using ep0 maxpacket: 8 [ 134.710183][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.754505][ T966] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.784354][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.817888][ T966] usb 1-1: config 0 descriptor?? [ 135.066840][ T966] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.207199][ T6774] input: syz1 as /devices/virtual/input/input8 [ 135.215460][ T6774] input: failed to attach handler leds to device input8, error: -6 [ 135.349941][ T8] usb 1-1: USB disconnect, device number 7 [ 135.400797][ T6770] loop2: detected capacity change from 0 to 8192 [ 135.448929][ T6770] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.498045][ T6770] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 135.542176][ T6770] REISERFS (device loop2): using ordered data mode [ 135.548763][ T6770] reiserfs: using flush barriers [ 135.565875][ T6770] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.602920][ T6770] REISERFS (device loop2): checking transaction log (loop2) [ 135.854432][ T6770] REISERFS (device loop2): Using tea hash to sort names [ 135.887864][ T6770] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 136.062660][ T6770] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 136.368204][ T6798] loop1: detected capacity change from 0 to 128 [ 136.436305][ T6798] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.481403][ T6798] hpfs: filesystem error: improperly stopped [ 136.491303][ T6798] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 136.519578][ T6798] hpfs: You really don't want any checks? You are crazy... [ 136.541728][ T6798] hpfs: hpfs_map_sector(): read error [ 136.561210][ T6798] hpfs: code page support is disabled [ 136.578463][ T6798] hpfs: hpfs_map_4sectors(): unaligned read [ 136.610566][ T6798] hpfs: hpfs_map_4sectors(): unaligned read [ 136.663297][ T6798] hpfs: filesystem error: unable to find root dir [ 137.019364][ T6794] loop3: detected capacity change from 0 to 32768 [ 137.037846][ T6794] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.309 (6794) [ 137.091578][ T6794] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 137.117434][ T6794] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 137.132558][ T6794] BTRFS info (device loop3): force zlib compression, level 3 [ 137.157944][ T6794] BTRFS info (device loop3): turning on flush-on-commit [ 137.184326][ T6794] BTRFS info (device loop3): max_inline at 4096 [ 137.190703][ T6794] BTRFS info (device loop3): using free space tree [ 137.343753][ T6794] BTRFS info (device loop3): enabling ssd optimizations [ 137.372015][ T6794] BTRFS info (device loop3): auto enabling async discard [ 137.523736][ T6794] BTRFS info (device loop3): balance: start -d -m [ 137.556021][ T6794] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 137.848431][ T6794] BTRFS info (device loop3): balance: paused [ 137.978641][ T6819] loop0: detected capacity change from 0 to 40427 [ 138.051548][ T6819] F2FS-fs (loop0): invalid crc value [ 138.074806][ T5766] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 138.085998][ T6819] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.210187][ T6819] F2FS-fs (loop0): Start checkpoint disabled! [ 138.224360][ T6843] loop2: detected capacity change from 0 to 4096 [ 138.247880][ T6819] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 138.302331][ T6843] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 138.411576][ T1326] kworker/u4:8: attempt to access beyond end of device [ 138.411576][ T1326] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.460318][ T1326] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 138.597803][ T6843] ntfs3: loop2: ino=0, attr_set_size [ 138.641120][ T6843] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 138.708456][ T6846] ntfs3: loop2: ino=0, attr_set_size [ 138.762750][ T6847] ntfs3: loop2: ino=0, attr_set_size [ 138.777990][ T6843] ntfs3: loop2: no free space to extend mft [ 138.978072][ T6852] loop2: detected capacity change from 0 to 1024 [ 139.160791][ T6854] nbd: illegal input index -1 [ 139.188917][ T59] hfsplus: b-tree write err: -5, ino 3 [ 139.240047][ T5767] hfsplus: node 4:3 still has 1 user(s)! [ 139.742178][ T5850] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 139.809997][ T6871] loop0: detected capacity change from 0 to 2048 [ 139.832136][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.916687][ T6872] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.957287][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.996038][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.043974][ T5850] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.054579][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 140.063906][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.072431][ T9] usb 3-1: config 0 has an invalid interface number: 209 but max is 0 [ 140.083824][ T5850] usb 2-1: SerialNumber: syz [ 140.103907][ T9] usb 3-1: config 0 has no interface number 0 [ 140.129762][ T9] usb 3-1: config 0 interface 209 has no altsetting 0 [ 140.154743][ T9] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 140.178358][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.192031][ T9] usb 3-1: Product: syz [ 140.202828][ T9] usb 3-1: Manufacturer: syz [ 140.215057][ T9] usb 3-1: SerialNumber: syz [ 140.229030][ T6872] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 140.243025][ T6872] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 140.254250][ T9] usb 3-1: config 0 descriptor?? [ 140.271544][ T6872] Remounting filesystem read-only [ 140.286628][ T59] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 140.301832][ T59] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 140.320266][ T5850] usb 2-1: 0:2 : does not exist [ 140.333583][ T59] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 140.341031][ T59] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 140.358820][ T59] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 140.370762][ T59] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 140.382525][ T59] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 140.389952][ T59] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 140.392620][ T5850] usb 2-1: USB disconnect, device number 9 [ 140.416222][ T59] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 140.424091][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.433553][ T59] NILFS (loop0): discard dirty page: offset=131072, ino=3 [ 140.440979][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.487930][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.527200][ T59] NILFS (loop0): discard dirty block: blocknr=46, size=1024 [ 140.544404][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.558345][ T6508] udevd[6508]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.574500][ T9] usb 3-1: USB disconnect, device number 4 [ 140.588682][ T59] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 140.604406][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.637062][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.657906][ T59] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 140.695988][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.716293][ T59] NILFS (loop0): discard dirty page: offset=0, ino=14 [ 140.732032][ T59] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 140.744839][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.754278][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.764291][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.773430][ T59] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 140.780155][ T59] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 140.787970][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.807599][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.821108][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.836814][ T59] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 140.843705][ T59] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 140.851032][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.860525][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.871996][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.880958][ T59] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 140.891053][ T59] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 140.898566][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.912070][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.923578][ T59] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.943982][ T5768] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 141.385646][ T6888] loop2: detected capacity change from 0 to 4096 [ 141.567499][ T6888] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 141.658488][ T6888] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 141.661587][ T6892] loop0: detected capacity change from 0 to 4096 [ 141.732316][ T6896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.957971][ T6888] overlayfs: upper fs does not support tmpfile. [ 141.989602][ T6888] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 142.273251][ T6886] loop1: detected capacity change from 0 to 32768 [ 142.356793][ T6886] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.505858][ T6914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.557664][ T6886] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 142.632165][ T6886] XFS (loop1): Starting recovery (logdev: internal) [ 142.690437][ T6886] XFS (loop1): Ending recovery (logdev: internal) [ 142.867539][ T6886] XFS (loop1): User initiated shutdown received. [ 142.902170][ T6886] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 142.953296][ T6886] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 143.057429][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.557815][ T6943] loop3: detected capacity change from 0 to 512 [ 143.963607][ T6955] netlink: 'syz.0.359': attribute type 34 has an invalid length. [ 144.164237][ T6957] loop1: detected capacity change from 0 to 4096 [ 144.205516][ T6957] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 144.355362][ T6965] loop3: detected capacity change from 0 to 4096 [ 144.376467][ T28] audit: type=1800 audit(1768164530.135:7): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.360" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 144.929388][ T6978] loop1: detected capacity change from 0 to 512 [ 145.542106][ T966] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 145.652241][ T5850] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.755166][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.776648][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.785790][ T6985] loop3: detected capacity change from 0 to 32768 [ 145.802082][ T966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.818840][ T6985] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.369 (6985) [ 145.832013][ T966] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.846648][ T5850] usb 1-1: Using ep0 maxpacket: 32 [ 145.858876][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.871563][ T5850] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 145.889852][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.908108][ T966] usb 2-1: config 0 descriptor?? [ 145.913910][ T6985] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.930452][ T5850] usb 1-1: config 0 descriptor?? [ 145.972102][ T6985] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 146.001279][ T6985] BTRFS info (device loop3): force clearing of disk cache [ 146.009317][ T6985] BTRFS info (device loop3): enabling auto defrag [ 146.016385][ T6985] BTRFS info (device loop3): enabling ssd optimizations [ 146.024434][ T6985] BTRFS info (device loop3): max_inline at 0 [ 146.030611][ T6985] BTRFS info (device loop3): enabling disk space caching [ 146.039036][ T6985] BTRFS info (device loop3): disk space caching is enabled [ 146.184591][ T5850] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 146.213465][ T6985] BTRFS info (device loop3): rebuilding free space tree [ 146.229640][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.260174][ T5850] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 146.282565][ T5850] usb 1-1: media controller created [ 146.294566][ T6985] BTRFS info (device loop3): disabling free space tree [ 146.325110][ T6985] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.345166][ T6985] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.386930][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.397872][ T966] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 146.463099][ T966] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 146.483794][ T5850] az6027: usb out operation failed. (-71) [ 146.495171][ T5850] az6027: usb out operation failed. (-71) [ 146.500956][ T5850] stb0899_attach: Driver disabled by Kconfig [ 146.524938][ T5850] az6027: no front-end attached [ 146.524938][ T5850] [ 146.535888][ T5850] az6027: usb out operation failed. (-71) [ 146.541664][ T5850] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 146.571152][ T5850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 146.624114][ T5850] dvb-usb: schedule remote query interval to 400 msecs. [ 146.631139][ T5850] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 146.695510][ T5850] usb 1-1: USB disconnect, device number 8 [ 146.755650][ T9] usb 2-1: USB disconnect, device number 10 [ 146.840387][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.869700][ T5850] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 147.104143][ T7027] mmap: syz.3.382 (7027) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.649363][ T7044] loop2: detected capacity change from 0 to 512 [ 147.750018][ T7044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.811219][ T7044] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.955466][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.149729][ T7056] loop2: detected capacity change from 0 to 128 [ 148.160674][ T7056] EXT4-fs: Ignoring removed nobh option [ 148.202423][ T7056] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.277918][ T7056] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.496481][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 148.525781][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.049941][ T7053] loop0: detected capacity change from 0 to 40427 [ 149.109453][ T7053] F2FS-fs (loop0): invalid crc value [ 149.134609][ T7053] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.280271][ T7053] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 149.312020][ T5850] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.452658][ T5768] syz-executor: attempt to access beyond end of device [ 149.452658][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 149.492064][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 149.499059][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 149.512862][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.538136][ T5850] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.561346][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.591406][ T5850] usb 3-1: config 0 descriptor?? [ 150.040789][ T5850] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 150.063174][ T5850] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input11 [ 150.219316][ T5850] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 150.420107][ T28] audit: type=1326 audit(1768164536.185:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.3.407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f0998f749 code=0x0 [ 150.498407][ T7103] loop1: detected capacity change from 0 to 512 [ 150.516942][ T7103] EXT4-fs: Ignoring removed nobh option [ 150.573345][ T7103] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.409: iget: bad i_size value: 38620345925642 [ 150.610021][ T7103] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.409: couldn't read orphan inode 15 (err -117) [ 150.664129][ T7103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.753188][ T5819] usb 3-1: USB disconnect, device number 5 [ 150.829814][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.731382][ T7134] loop1: detected capacity change from 0 to 16 [ 151.768879][ T7134] erofs: (device loop1): mounted with root inode @ nid 36. [ 151.824010][ T7134] syz.1.422: attempt to access beyond end of device [ 151.824010][ T7134] loop1: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 151.851700][ T7134] syz.1.422: attempt to access beyond end of device [ 151.851700][ T7134] loop1: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 153.086526][ T7178] macvtap1: entered promiscuous mode [ 153.093812][ T7178] macvtap1: entered allmulticast mode [ 153.099267][ T7178] veth1_vlan: entered allmulticast mode [ 153.159133][ T7183] loop1: detected capacity change from 0 to 8 [ 153.199470][ T7181] macvtap2: entered promiscuous mode [ 153.221001][ T7181] macvtap2: entered allmulticast mode [ 153.236576][ T7183] SQUASHFS error: lzo decompression failed, data probably corrupt [ 153.282474][ T7183] SQUASHFS error: Failed to read block 0x144: -5 [ 153.288900][ T7183] SQUASHFS error: Unable to read metadata cache entry [142] [ 153.308698][ T7183] SQUASHFS error: Unable to read inode 0x11f [ 153.656125][ T7189] loop1: detected capacity change from 0 to 256 [ 153.951513][ T7180] loop0: detected capacity change from 0 to 32768 [ 153.978652][ T7180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.437 (7180) [ 154.015023][ T7180] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.055018][ T7180] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 154.068917][ T7180] BTRFS info (device loop0): setting nodatacow, compression disabled [ 154.083848][ T7180] BTRFS info (device loop0): max_inline at 0 [ 154.091046][ T7180] BTRFS info (device loop0): enabling disk space caching [ 154.107228][ T7180] BTRFS info (device loop0): turning off barriers [ 154.129969][ T7180] BTRFS info (device loop0): turning on flush-on-commit [ 154.147250][ T7202] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 154.168387][ T7180] BTRFS info (device loop0): doing ref verification [ 154.190212][ T7180] BTRFS info (device loop0): force clearing of disk cache [ 154.212032][ T5819] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 154.228421][ T7180] BTRFS info (device loop0): enabling ssd optimizations [ 154.242250][ T7180] BTRFS info (device loop0): max_inline at 4096 [ 154.248560][ T7180] BTRFS info (device loop0): disk space caching is enabled [ 154.393155][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 154.408984][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.424984][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.437109][ T5819] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.448905][ T7223] loop2: detected capacity change from 0 to 128 [ 154.452791][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.477553][ T5819] usb 2-1: config 0 descriptor?? [ 154.484919][ T7180] BTRFS info (device loop0): auto enabling async discard [ 154.496115][ T5819] hub 2-1:0.0: USB hub found [ 154.503105][ T7223] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.549872][ T7180] BTRFS info (device loop0): rebuilding free space tree [ 154.579414][ T7223] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.674534][ T7180] BTRFS info (device loop0): disabling free space tree [ 154.681588][ T7180] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.727144][ T5819] hub 2-1:0.0: 1 port detected [ 154.732115][ T7180] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.774479][ T1326] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.209620][ T5768] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.323565][ T7234] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 155.428825][ T966] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 155.448619][ T7227] loop3: detected capacity change from 0 to 32768 [ 155.561953][ T7227] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.677802][ T7227] XFS (loop3): Ending clean mount [ 155.764667][ T966] usb 2-1: USB disconnect, device number 11 [ 155.906720][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.093709][ T7250] loop0: detected capacity change from 0 to 256 [ 156.103835][ T7250] exfat: Deprecated parameter 'utf8' [ 156.117636][ T7250] exfat: Deprecated parameter 'utf8' [ 156.163180][ T7250] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 156.610618][ T28] audit: type=1326 audit(1768164542.375:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.2.462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b8c18f749 code=0x0 [ 157.028463][ T7252] loop1: detected capacity change from 0 to 32768 [ 157.059401][ T7252] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 157.089675][ T7252] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 157.224617][ T7252] overlayfs: upper fs does not support tmpfile. [ 157.241962][ T966] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.282545][ T7252] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 157.292006][ T7252] overlayfs: failed to set xattr on upper [ 157.300099][ T7252] overlayfs: ...falling back to redirect_dir=nofollow. [ 157.316445][ T7252] overlayfs: ...falling back to index=off. [ 157.328151][ T7252] overlayfs: ...falling back to uuid=null. [ 157.341046][ T7252] overlayfs: upper fs missing required features. [ 157.432753][ T966] usb 4-1: Using ep0 maxpacket: 16 [ 157.443583][ T966] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.453784][ T966] usb 4-1: config 0 has no interface number 0 [ 157.463718][ T966] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.487252][ T966] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.501657][ T966] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 157.517949][ T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.540114][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 157.550302][ T966] usb 4-1: config 0 descriptor?? [ 157.661413][ T7268] loop0: detected capacity change from 0 to 32768 [ 157.700928][ T7268] JBD2: Ignoring recovery information on journal [ 157.775262][ T7268] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 157.889092][ T7277] loop2: detected capacity change from 0 to 1024 [ 157.905859][ T7277] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.959568][ T7277] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 157.985608][ T7277] EXT4-fs (loop2): orphan cleanup on readonly fs [ 158.023375][ T7277] EXT4-fs error (device loop2): ext4_free_blocks:6692: comm syz.2.469: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.077382][ T7277] EXT4-fs (loop2): 1 orphan inode deleted [ 158.118690][ T7277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.172448][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 158.239166][ T7280] loop1: detected capacity change from 0 to 512 [ 158.252269][ T966] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0008/input/input12 [ 158.274128][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.303923][ T7280] EXT4-fs: inline encryption not supported [ 158.392894][ T7280] EXT4-fs (loop1): orphan cleanup on readonly fs [ 158.411526][ T7280] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #15: comm syz.1.467: corrupted inode contents [ 158.443781][ T7280] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 158.457416][ T966] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0008/input/input13 [ 158.474453][ T7280] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #15: comm syz.1.467: corrupted inode contents [ 158.539049][ T7280] EXT4-fs error (device loop1): ext4_evict_inode:300: inode #15: comm syz.1.467: mark_inode_dirty error [ 158.576680][ T7280] EXT4-fs (loop1): 1 orphan inode deleted [ 158.587904][ T966] uclogic 0003:28BD:0071.0008: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 158.597715][ T7280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.639388][ T966] usb 4-1: USB disconnect, device number 7 [ 158.768900][ T7284] fido_id[7284]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 158.857664][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.015179][ T7289] loop1: detected capacity change from 0 to 1024 [ 159.069663][ T7289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.102212][ T5819] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.292123][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 159.324263][ T5819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.351449][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.372001][ T5819] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 159.381815][ T5819] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 159.406036][ T5819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.422053][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.445355][ T5819] usb 3-1: Product: syz [ 159.450481][ T5819] usb 3-1: Manufacturer: syz [ 159.461665][ T5819] usb 3-1: SerialNumber: syz [ 159.468312][ T7302] loop3: detected capacity change from 0 to 2048 [ 159.501696][ T7302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.536677][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.714261][ T5819] cdc_ncm 3-1:1.0: bind() failure [ 159.761323][ T5819] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 159.783367][ T5819] cdc_ncm 3-1:1.1: bind() failure [ 159.806796][ T5819] usb 3-1: USB disconnect, device number 6 [ 159.847695][ T7310] loop1: detected capacity change from 0 to 128 [ 159.895275][ T7310] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.895865][ T7308] loop3: detected capacity change from 0 to 4096 [ 159.916055][ T7308] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 159.966073][ T7310] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.049426][ T28] audit: type=1800 audit(1768164545.815:10): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.479" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 160.169299][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.489110][ T7317] loop2: detected capacity change from 0 to 2048 [ 160.531964][ T7317] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 160.564700][ T7317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.646946][ T7323] EXT4-fs: Ignoring removed nobh option [ 160.696711][ T7323] EXT4-fs: Ignoring removed oldalloc option [ 160.728126][ T7323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.788992][ T7323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.146704][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.407947][ T28] audit: type=1800 audit(1768164547.165:11): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.483" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 161.776205][ T7342] set_capacity_and_notify: 2 callbacks suppressed [ 161.776220][ T7342] loop2: detected capacity change from 0 to 4096 [ 161.805027][ T7342] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 161.958052][ T28] audit: type=1800 audit(1768164547.725:12): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.491" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 162.422001][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.501283][ T7358] loop0: detected capacity change from 0 to 32768 [ 162.542170][ T7358] JBD2: Ignoring recovery information on journal [ 162.580387][ T7358] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 162.612237][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 162.622049][ T5758] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.641343][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.662051][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 162.680943][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.709501][ T23] usb 2-1: config 0 descriptor?? [ 162.818907][ T5758] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.838144][ T5758] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 162.867766][ T5758] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.890325][ T5758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 162.929419][ T5758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 162.960226][ T5758] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.970980][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.979323][ T5758] usb 3-1: Product: syz [ 162.984020][ T5758] usb 3-1: Manufacturer: syz [ 163.010365][ T5758] cdc_wdm 3-1:1.0: skipping garbage [ 163.025223][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 163.035931][ T5758] cdc_wdm 3-1:1.0: skipping garbage [ 163.061558][ T5758] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 163.074619][ T5758] cdc_wdm 3-1:1.0: Unknown control protocol [ 163.184766][ T23] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 163.343501][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.350533][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.359289][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.365949][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.382339][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.389104][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.395479][ T5850] usb 3-1: USB disconnect, device number 7 [ 163.402020][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.408678][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.414791][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 163.438727][ T23] usb 2-1: USB disconnect, device number 12 [ 163.765248][ T7372] netlink: 48 bytes leftover after parsing attributes in process `syz.0.503'. [ 163.864853][ T7367] loop3: detected capacity change from 0 to 32768 [ 163.895471][ T7367] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 164.016468][ T7367] XFS (loop3): Ending clean mount [ 164.273395][ T7388] syzkaller1: entered promiscuous mode [ 164.279439][ T7388] syzkaller1: entered allmulticast mode [ 164.327021][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 164.832070][ T5758] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 165.012102][ T5758] usb 2-1: Using ep0 maxpacket: 32 [ 165.024621][ T5758] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 165.042551][ T5758] usb 2-1: config 0 has no interface number 0 [ 165.060780][ T5758] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 165.080636][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.118653][ T7410] input: syz1 as /devices/virtual/input/input14 [ 165.125473][ T5758] usb 2-1: Product: syz [ 165.129694][ T5758] usb 2-1: Manufacturer: syz [ 165.157103][ T5758] usb 2-1: SerialNumber: syz [ 165.182783][ T5758] usb 2-1: config 0 descriptor?? [ 165.211272][ T5758] smsc95xx v2.0.0 [ 165.611714][ T5758] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 165.624336][ T5758] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 166.046013][ T5758] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 166.064938][ T5758] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 166.081318][ T5758] usb 2-1: USB disconnect, device number 13 [ 166.943427][ T7421] loop1: detected capacity change from 0 to 4096 [ 168.720687][ T7430] loop0: detected capacity change from 0 to 32768 [ 168.750935][ T7430] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.526 (7430) [ 168.809530][ T7430] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.824280][ T7430] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 168.835509][ T7430] BTRFS info (device loop0): using free space tree [ 168.982161][ T7430] BTRFS info (device loop0): enabling ssd optimizations [ 168.989188][ T7430] BTRFS info (device loop0): auto enabling async discard [ 169.101027][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.237256][ T7492] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 170.793648][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 170.956682][ T7516] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 171.036024][ T7502] loop0: detected capacity change from 0 to 32768 [ 171.055201][ T7502] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.550 (7502) [ 171.148374][ T7502] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 171.165386][ T7502] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 171.192007][ T7502] BTRFS info (device loop0): using free space tree [ 171.322269][ T7502] BTRFS info (device loop0): enabling ssd optimizations [ 171.329535][ T7502] BTRFS info (device loop0): auto enabling async discard [ 171.661405][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.566'. [ 171.770521][ T5768] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 171.871197][ T7558] loop3: detected capacity change from 0 to 64 [ 172.007845][ T7564] capability: warning: `syz.1.570' uses 32-bit capabilities (legacy support in use) [ 172.129701][ T5778] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop0 scanned by udevd (5778) [ 172.258169][ T7568] loop1: detected capacity change from 0 to 512 [ 172.297059][ T7568] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.401776][ T28] audit: type=1800 audit(1768164558.165:13): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.572" name="bus" dev="loop1" ino=1048607 res=0 errno=0 [ 172.683626][ T7577] loop1: detected capacity change from 0 to 512 [ 172.717089][ T7577] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 172.762288][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.777333][ T7577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 172.836646][ T7577] System zones: 1-12 [ 172.877946][ T7577] EXT4-fs (loop1): 1 truncate cleaned up [ 172.935892][ T7577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.026114][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.077101][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.090461][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.114422][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.147706][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.206075][ T8] usb 1-1: config 0 descriptor?? [ 173.271420][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.677627][ T8] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x1 [ 173.701355][ T8] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x1 [ 173.744260][ T8] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 173.762278][ T8] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 173.770656][ T8] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 173.825674][ T8] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 174.073547][ T8] usb 1-1: USB disconnect, device number 9 [ 174.116049][ T7611] loop2: detected capacity change from 0 to 512 [ 174.137584][ T7608] fido_id[7608]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 174.165235][ T7611] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.192962][ T7611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.306794][ T7611] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.588: Invalid block bitmap block 0 in block_group 0 [ 174.343443][ T7611] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 174.361452][ T7611] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.588: attempt to clear invalid blocks 983261 len 1 [ 174.404964][ T7611] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.588: Invalid inode table block 0 in block_group 0 [ 174.419387][ T7618] loop3: detected capacity change from 0 to 512 [ 174.428069][ T7618] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.450023][ T7611] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 174.469471][ T7618] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 174.518378][ T7611] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 174.525207][ T7618] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 174.543769][ T7611] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.588: Invalid inode table block 0 in block_group 0 [ 174.564340][ T7618] EXT4-fs (loop3): 1 truncate cleaned up [ 174.570242][ T7611] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 174.581341][ T7618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.594639][ T7611] EXT4-fs error (device loop2): ext4_truncate:4294: inode #11: comm syz.2.588: mark_inode_dirty error [ 174.625274][ T7611] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 174.650751][ T7611] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.588: Invalid inode table block 0 in block_group 0 [ 174.690425][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.708541][ T7611] EXT4-fs (loop2): 1 truncate cleaned up [ 174.740406][ T7611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.968393][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.081827][ T7629] loop1: detected capacity change from 0 to 2048 [ 175.149468][ T7633] netlink: 104 bytes leftover after parsing attributes in process `syz.0.597'. [ 175.162550][ T7629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.211490][ T7639] loop3: detected capacity change from 0 to 128 [ 175.249057][ T7629] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.293760][ T7639] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.407007][ T7639] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.500749][ T7645] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.595: bg 0: block 345: padding at end of block bitmap is not set [ 175.567667][ T7645] EXT4-fs (loop1): Remounting filesystem read-only [ 175.575286][ T7639] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.599: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 175.599918][ T49] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4868: inode #15: block 1: len 15: ext4_ext_map_blocks returned -5 [ 175.627325][ T7647] input: syz0 as /devices/virtual/input/input15 [ 175.666289][ T7647] input: failed to attach handler leds to device input15, error: -6 [ 175.739034][ T5766] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.869095][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.927088][ T7653] tipc: Started in network mode [ 175.938574][ T7653] tipc: Node identity -B, cluster identity 4711 [ 176.267432][ T23] kernel write not supported for file /351/attr/exec (pid: 23 comm: kworker/1:0) [ 176.492031][ T5850] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 176.708924][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.720069][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.729940][ T5850] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 176.747757][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.767576][ T5850] usb 4-1: config 0 descriptor?? [ 177.220632][ T5850] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 177.250702][ T5850] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 177.337020][ T5850] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 177.360751][ T5850] hid-steam 0003:28DE:1142.000B: No HID_FEATURE_REPORT submitted - nothing to read [ 177.399898][ T5850] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 177.449943][ T5850] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 177.492506][ T5850] usb 4-1: USB disconnect, device number 8 [ 177.514262][ T5850] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 177.602352][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 177.646836][ T7694] fido_id[7694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 177.932650][ T7703] loop0: detected capacity change from 0 to 8192 [ 177.969098][ T7703] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.983749][ T7703] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 177.994214][ T7703] REISERFS (device loop0): using ordered data mode [ 178.000829][ T7703] reiserfs: using flush barriers [ 178.008321][ T7703] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.025435][ T7703] REISERFS (device loop0): checking transaction log (loop0) [ 178.038407][ T7703] REISERFS (device loop0): Using r5 hash to sort names [ 178.045814][ T7703] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 178.935224][ T7734] syzkaller1: entered promiscuous mode [ 178.941000][ T7734] syzkaller1: entered allmulticast mode [ 179.002040][ T966] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.140498][ T7738] loop3: detected capacity change from 0 to 256 [ 179.167774][ T7738] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.181801][ T7738] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 179.190061][ T966] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 179.209377][ T7738] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 179.211175][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.247980][ T966] usb 3-1: config 0 descriptor?? [ 179.269657][ T966] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 179.590050][ T7747] loop0: detected capacity change from 0 to 2048 [ 180.089553][ T966] gspca_sunplus: reg_w_riv err -71 [ 180.095192][ T966] sunplus: probe of 3-1:0.0 failed with error -71 [ 180.109227][ T966] usb 3-1: USB disconnect, device number 8 [ 180.257630][ T28] audit: type=1326 audit(1768165079.029:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.3.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0998f749 code=0x7fc00000 [ 180.337157][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 180.460076][ T7753] loop0: detected capacity change from 0 to 1024 [ 180.481262][ T7753] hfsplus: failed to load catalog file [ 180.589775][ T7756] sctp: [Deprecated]: syz.0.649 (pid 7756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.589775][ T7756] Use struct sctp_sack_info instead [ 180.692276][ T966] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.885677][ T966] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.912716][ T966] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 180.937310][ T966] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 180.971557][ T966] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.981445][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.002207][ T966] usb 4-1: Product: syz [ 181.011701][ T966] usb 4-1: Manufacturer: syz [ 181.041095][ T966] usb 4-1: SerialNumber: syz [ 181.071915][ T966] cdc_ncm 4-1:1.0: skipping garbage [ 182.093406][ T966] cdc_ncm 4-1:1.0: bind() failure [ 182.127669][ T966] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 182.140092][ T966] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 182.152056][ T966] usbtest: probe of 4-1:1.1 failed with error -71 [ 182.177365][ T966] usb 4-1: USB disconnect, device number 9 [ 182.439209][ T7801] loop2: detected capacity change from 0 to 1024 [ 182.503463][ T7801] hfsplus: xattr searching failed [ 182.511813][ T7801] process 'syz.2.667' launched './file0' with NULL argv: empty string added [ 182.523403][ T7801] hfsplus: xattr searching failed [ 182.533361][ T7801] hfsplus: xattr searching failed [ 182.589727][ T5758] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 182.781998][ T5758] usb 1-1: Using ep0 maxpacket: 16 [ 182.789048][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.811959][ T5758] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 182.821046][ T5758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.864516][ T5758] usb 1-1: config 0 descriptor?? [ 183.298002][ T5758] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 183.316196][ T7818] netlink: 104 bytes leftover after parsing attributes in process `syz.2.673'. [ 183.545806][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.675'. [ 183.723851][ T5758] usb 1-1: USB disconnect, device number 10 [ 184.005654][ T7820] loop2: detected capacity change from 0 to 32768 [ 184.041005][ T7820] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.174859][ T7820] XFS (loop2): Ending clean mount [ 184.186987][ T7820] XFS (loop2): Quotacheck needed: Please wait. [ 184.258570][ T7820] XFS (loop2): Quotacheck: Done. [ 184.390039][ T7838] serio: Serial port pty23 [ 184.686994][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.089663][ T7850] loop0: detected capacity change from 0 to 512 [ 185.114059][ T7850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.131414][ T7850] EXT4-fs (loop0): DAX unsupported by block device. [ 185.190482][ T7852] loop3: detected capacity change from 0 to 4096 [ 185.221479][ T7852] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 185.518061][ T7862] netlink: 2 bytes leftover after parsing attributes in process `syz.3.688'. [ 185.527238][ T7862] netlink: 2 bytes leftover after parsing attributes in process `syz.3.688'. [ 185.572105][ T970] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 185.582749][ T7862] netlink: 2 bytes leftover after parsing attributes in process `syz.3.688'. [ 185.591565][ T7862] netlink: 2 bytes leftover after parsing attributes in process `syz.3.688'. [ 185.776437][ T970] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.802314][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.819225][ T970] usb 1-1: Product: syz [ 185.824063][ T970] usb 1-1: Manufacturer: syz [ 185.828715][ T970] usb 1-1: SerialNumber: syz [ 185.847442][ T970] usb 1-1: config 0 descriptor?? [ 186.122191][ T970] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.863576][ T7887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.697'. [ 186.946810][ T970] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 186.968458][ T970] usb 1-1: USB disconnect, device number 11 [ 186.973431][ T7889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'. [ 187.091176][ T7876] loop2: detected capacity change from 0 to 32768 [ 187.151042][ T7876] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 187.394035][ T7901] loop3: detected capacity change from 0 to 128 [ 187.427316][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 187.436141][ T7901] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 187.499255][ T7901] hpfs: filesystem error: improperly stopped [ 187.508384][ T7901] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 187.549589][ T7901] hpfs: You really don't want any checks? You are crazy... [ 187.589277][ T7901] hpfs: hpfs_map_sector(): read error [ 187.636602][ T7901] hpfs: code page support is disabled [ 187.673814][ T7901] hpfs: hpfs_map_4sectors(): unaligned read [ 187.698082][ T7901] hpfs: hpfs_map_4sectors(): unaligned read [ 187.721077][ T7901] hpfs: filesystem error: unable to find root dir [ 187.800816][ T7901] hpfs: hpfs_map_4sectors(): unaligned read [ 187.841485][ T7903] loop2: detected capacity change from 0 to 32768 [ 187.949576][ T7903] UFO tlock:0xffffc9000284a090 [ 187.985318][ T7903] MetaData crosses page boundary!! [ 187.991232][ T7903] lblock = 6300000010, size = -820051968 [ 187.997109][ T7903] CPU: 0 PID: 7903 Comm: syz.2.704 Not tainted syzkaller #0 [ 188.004443][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.014565][ T7903] Call Trace: [ 188.017878][ T7903] [ 188.020837][ T7903] dump_stack_lvl+0x16c/0x230 [ 188.025563][ T7903] ? show_regs_print_info+0x20/0x20 [ 188.030809][ T7903] ? load_image+0x3b0/0x3b0 [ 188.035360][ T7903] ? folio_unlock+0x118/0x2e0 [ 188.040094][ T7903] __get_metapage+0xaac/0xfa0 [ 188.044836][ T7903] dtSearch+0x591/0x21b0 [ 188.049198][ T7903] jfs_lookup+0x156/0x380 [ 188.053588][ T7903] ? jfs_get_parent+0xb0/0xb0 [ 188.058339][ T7903] ? __rwlock_init+0x150/0x150 [ 188.063150][ T7903] ? _raw_spin_unlock+0x28/0x40 [ 188.068028][ T7903] ? d_alloc+0x1eb/0x250 [ 188.072303][ T7903] lookup_one_qstr_excl+0x112/0x250 [ 188.077536][ T7903] filename_create+0x222/0x460 [ 188.082345][ T7903] ? kern_path_create+0x50/0x50 [ 188.087226][ T7903] ? __virt_addr_valid+0x18c/0x540 [ 188.092375][ T7903] do_mknodat+0x183/0x4f0 [ 188.096741][ T7903] ? __check_object_size+0x506/0xa30 [ 188.102069][ T7903] ? do_o_path+0x1f0/0x1f0 [ 188.106526][ T7903] ? getname_flags+0x20a/0x500 [ 188.111330][ T7903] __x64_sys_mknodat+0xa9/0xc0 [ 188.116138][ T7903] do_syscall_64+0x55/0xb0 [ 188.120574][ T7903] ? clear_bhb_loop+0x40/0x90 [ 188.125293][ T7903] ? clear_bhb_loop+0x40/0x90 [ 188.130010][ T7903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.135948][ T7903] RIP: 0033:0x7f7b8c18f749 [ 188.140387][ T7903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.160017][ T7903] RSP: 002b:00007f7b8d043038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 188.168457][ T7903] RAX: ffffffffffffffda RBX: 00007f7b8c3e5fa0 RCX: 00007f7b8c18f749 [ 188.176458][ T7903] RDX: 0000000000001000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 188.184453][ T7903] RBP: 00007f7b8c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 188.192531][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.200619][ T7903] R13: 00007f7b8c3e6038 R14: 00007f7b8c3e5fa0 R15: 00007ffcb3ef5fd8 [ 188.208806][ T7903] [ 188.211957][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.219277][ T7903] bread failed! [ 188.222877][ T7903] jfs_lookup: dtSearch returned -5 [ 188.473169][ T7907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.757857][ T7917] loop0: detected capacity change from 0 to 128 [ 188.806691][ T7917] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 188.831989][ T7917] hpfs: filesystem error: improperly stopped [ 188.841717][ T7917] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 188.885048][ T7917] hpfs: You really don't want any checks? You are crazy... [ 188.919899][ T7917] hpfs: hpfs_map_sector(): read error [ 188.930182][ T7917] hpfs: code page support is disabled [ 188.937394][ T7917] hpfs: hpfs_map_4sectors(): unaligned read [ 188.948597][ T7917] hpfs: hpfs_map_4sectors(): unaligned read [ 188.954757][ T7917] hpfs: filesystem error: unable to find root dir [ 188.974203][ T7917] hpfs: hpfs_map_4sectors(): unaligned read [ 190.222032][ T966] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 190.433479][ T966] usb 4-1: config 0 has no interfaces? [ 190.441618][ T966] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 190.461961][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.470030][ T966] usb 4-1: Product: syz [ 190.481935][ T966] usb 4-1: Manufacturer: syz [ 190.486695][ T966] usb 4-1: SerialNumber: syz [ 190.504302][ T966] usb 4-1: config 0 descriptor?? [ 190.641733][ T7952] loop0: detected capacity change from 0 to 32768 [ 190.739962][ T7952] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.776595][ T7961] loop1: detected capacity change from 0 to 32768 [ 190.833945][ T7961] JBD2: Ignoring recovery information on journal [ 190.842002][ T966] usb 4-1: USB disconnect, device number 10 [ 190.911640][ T7961] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 190.958173][ T7952] XFS (loop0): Ending clean mount [ 191.142278][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 191.268113][ T5769] [ 191.270589][ T5769] ====================================================== [ 191.277610][ T5769] WARNING: possible circular locking dependency detected [ 191.284662][ T5769] syzkaller #0 Not tainted [ 191.289127][ T5769] ------------------------------------------------------ [ 191.296174][ T5769] syz-executor/5769 is trying to acquire lock: [ 191.302355][ T5769] ffff88805ac23498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x351/0x10b0 [ 191.315545][ T5769] [ 191.315545][ T5769] but task is already holding lock: [ 191.322923][ T5769] ffff88805ac209d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 191.335654][ T5769] [ 191.335654][ T5769] which lock already depends on the new lock. [ 191.335654][ T5769] [ 191.346165][ T5769] [ 191.346165][ T5769] the existing dependency chain (in reverse order) is: [ 191.355219][ T5769] [ 191.355219][ T5769] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 191.365777][ T5769] down_write+0x97/0x1f0 [ 191.370588][ T5769] __ocfs2_move_extents_range+0x1a65/0x3380 [ 191.377047][ T5769] ocfs2_move_extents+0x379/0x940 [ 191.382651][ T5769] ocfs2_ioctl_move_extents+0x4e1/0x6c0 [ 191.388749][ T5769] ocfs2_ioctl+0x195/0x750 [ 191.393764][ T5769] __se_sys_ioctl+0xfd/0x170 [ 191.398916][ T5769] do_syscall_64+0x55/0xb0 [ 191.403875][ T5769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.410324][ T5769] [ 191.410324][ T5769] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 191.420882][ T5769] __lock_acquire+0x2ddb/0x7c80 [ 191.426280][ T5769] lock_acquire+0x197/0x410 [ 191.431377][ T5769] down_write+0x97/0x1f0 [ 191.436161][ T5769] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 191.442538][ T5769] ocfs2_flush_truncate_log+0x4f/0x60 [ 191.448475][ T5769] ocfs2_sync_fs+0x117/0x310 [ 191.453635][ T5769] sync_filesystem+0x1c2/0x220 [ 191.458972][ T5769] generic_shutdown_super+0x6f/0x2b0 [ 191.464817][ T5769] kill_block_super+0x44/0x90 [ 191.470053][ T5769] deactivate_locked_super+0x97/0x100 [ 191.476009][ T5769] cleanup_mnt+0x429/0x4c0 [ 191.480978][ T5769] task_work_run+0x1ce/0x250 [ 191.486106][ T5769] exit_to_user_mode_loop+0xe6/0x110 [ 191.491933][ T5769] exit_to_user_mode_prepare+0xf6/0x180 [ 191.498015][ T5769] syscall_exit_to_user_mode+0x1a/0x50 [ 191.504010][ T5769] do_syscall_64+0x61/0xb0 [ 191.508971][ T5769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.515419][ T5769] [ 191.515419][ T5769] other info that might help us debug this: [ 191.515419][ T5769] [ 191.525673][ T5769] Possible unsafe locking scenario: [ 191.525673][ T5769] [ 191.533136][ T5769] CPU0 CPU1 [ 191.538522][ T5769] ---- ---- [ 191.543899][ T5769] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 191.551207][ T5769] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 191.561066][ T5769] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 191.570883][ T5769] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 191.578188][ T5769] [ 191.578188][ T5769] *** DEADLOCK *** [ 191.578188][ T5769] [ 191.586364][ T5769] 2 locks held by syz-executor/5769: [ 191.591676][ T5769] #0: ffff8880792560e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 191.601893][ T5769] #1: ffff88805ac209d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 191.615061][ T5769] [ 191.615061][ T5769] stack backtrace: [ 191.620959][ T5769] CPU: 0 PID: 5769 Comm: syz-executor Not tainted syzkaller #0 [ 191.628520][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.638588][ T5769] Call Trace: [ 191.641881][ T5769] [ 191.644832][ T5769] dump_stack_lvl+0x16c/0x230 [ 191.649525][ T5769] ? load_image+0x3b0/0x3b0 [ 191.654052][ T5769] ? show_regs_print_info+0x20/0x20 [ 191.659270][ T5769] ? print_circular_bug+0x12b/0x1a0 [ 191.664486][ T5769] check_noncircular+0x2bd/0x3c0 [ 191.669447][ T5769] ? print_deadlock_bug+0x5d0/0x5d0 [ 191.674668][ T5769] ? lockdep_lock+0xe0/0x220 [ 191.679287][ T5769] ? _find_first_zero_bit+0xd3/0x100 [ 191.684608][ T5769] __lock_acquire+0x2ddb/0x7c80 [ 191.689484][ T5769] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 191.695483][ T5769] ? __lock_acquire+0x7c80/0x7c80 [ 191.700536][ T5769] ? verify_lock_unused+0x140/0x140 [ 191.705757][ T5769] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 191.711403][ T5769] ? do_raw_spin_lock+0x121/0x2c0 [ 191.716450][ T5769] ? mutex_unlock+0x10/0x10 [ 191.720973][ T5769] lock_acquire+0x197/0x410 [ 191.725497][ T5769] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 191.731501][ T5769] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 191.737505][ T5769] ? __might_sleep+0xe0/0xe0 [ 191.742132][ T5769] ? read_lock_is_recursive+0x20/0x20 [ 191.747536][ T5769] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 191.753706][ T5769] ? __wake_up+0x11f/0x190 [ 191.758148][ T5769] down_write+0x97/0x1f0 [ 191.762408][ T5769] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 191.768406][ T5769] ? down_read_killable+0x340/0x340 [ 191.773626][ T5769] ? _raw_write_unlock+0x28/0x40 [ 191.778579][ T5769] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 191.784401][ T5769] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 191.790226][ T5769] ? ocfs2_truncate_log_needs_flush+0x2e0/0x2e0 [ 191.796507][ T5769] ? read_lock_is_recursive+0x20/0x20 [ 191.801907][ T5769] ? down_write+0x162/0x1f0 [ 191.806423][ T5769] ? down_read_killable+0x340/0x340 [ 191.811639][ T5769] ? __rwlock_init+0x150/0x150 [ 191.816438][ T5769] ocfs2_flush_truncate_log+0x4f/0x60 [ 191.821846][ T5769] ocfs2_sync_fs+0x117/0x310 [ 191.826466][ T5769] ? ocfs2_put_super+0x1c0/0x1c0 [ 191.831423][ T5769] ? writeback_inodes_sb_nr+0x30/0x30 [ 191.836812][ T5769] ? get_nr_dirty_inodes+0x1d4/0x220 [ 191.842114][ T5769] sync_filesystem+0x1c2/0x220 [ 191.846899][ T5769] generic_shutdown_super+0x6f/0x2b0 [ 191.852207][ T5769] kill_block_super+0x44/0x90 [ 191.856899][ T5769] deactivate_locked_super+0x97/0x100 [ 191.862295][ T5769] cleanup_mnt+0x429/0x4c0 [ 191.866724][ T5769] task_work_run+0x1ce/0x250 [ 191.871347][ T5769] ? task_work_cancel+0x240/0x240 [ 191.876403][ T5769] ? exit_to_user_mode_loop+0x3b/0x110 [ 191.881888][ T5769] exit_to_user_mode_loop+0xe6/0x110 [ 191.887201][ T5769] exit_to_user_mode_prepare+0xf6/0x180 [ 191.892767][ T5769] syscall_exit_to_user_mode+0x1a/0x50 [ 191.898265][ T5769] do_syscall_64+0x61/0xb0 [ 191.902717][ T5769] ? clear_bhb_loop+0x40/0x90 [ 191.907412][ T5769] ? clear_bhb_loop+0x40/0x90 [ 191.912112][ T5769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.918028][ T5769] RIP: 0033:0x7fe656d90a77 [ 191.922460][ T5769] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 191.942130][ T5769] RSP: 002b:00007ffc8c962bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 191.950563][ T5769] RAX: 0000000000000000 RBX: 00007fe656e13d7d RCX: 00007fe656d90a77 [ 191.958556][ T5769] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8c962c70 [ 191.966547][ T5769] RBP: 00007ffc8c962c70 R08: 0000000000000000 R09: 0000000000000000 [ 191.974529][ T5769] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8c963d00 [ 191.982519][ T5769] R13: 00007fe656e13d7d R14: 000000000002eaa6 R15: 00007ffc8c963d40 [ 191.990525][ T5769] [ 192.040280][ T7979] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 192.126432][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 194.506752][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.513117][ T1275] ieee802154 phy1 wpan1: encryption failed: -22