last executing test programs: 2m3.805955917s ago: executing program 0 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m3.580062627s ago: executing program 0 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x5, 0x80400000, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x6, 0x2000}}, 0x1c}}, 0x20000440) 2m3.353707487s ago: executing program 0 (id=358): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x3}) 2m3.086972561s ago: executing program 0 (id=361): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000240)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$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") ioprio_get$pid(0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2m2.470976725s ago: executing program 0 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="64f5"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) 2m1.763467917s ago: executing program 0 (id=371): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) 2m1.535010677s ago: executing program 32 (id=371): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) 16.310995941s ago: executing program 1 (id=1556): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x800800, &(0x7f0000000100)=ANY=[@ANYBLOB='fmask=00000000000000000001000,iocharset=cp857,iocharset=macgreek,errors=continue,namecase=1,iocharset=macgaelic,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x152e, &(0x7f0000003e40)="$eJzs3AuYjtX6MPD7Xms9Y0zS2ySHYa11P7xJLJMkOSTJIUmSJMkpIWmSLQmJIaekSRJyHJLDEJLDxKRxPp8PCUnSJElITsn6LuFTu/p2+7/3f/uuPffvup7Lut/13OtZ73s/7/uu5zEz33YaVL1hjSr1iQj+JXjhn2QAiAWA/gBwDQAEAFAmvkz8+f6cEpP/tYOwf6+H0670DNiVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2capBa7lLftufP//v1/dP+3h7///IlklR3+5uuT1nQFi/moK1z974/r/1wr+yk5c/+yN659dxV7pCbD/D/D7PzvI8ac9XP/sjevPWHZ2pe8/X+kNItn7NbjS5x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsezhlL9MAcCl9pWeF2OMMcYYY4wxxv59fI4rPQPGGGOMMcYYY4z970MQIEFBADGQA2IhJ8SBAICrITdcAxG4FuLhOsgD10NeyAf5oQAkQEEoBBoMWCAIoTAUgSjcAEXhRigGN0FxKAEOSkIi3Ayl4BYoDbdCGbgNysLtUA7KQwWoCHdAJbgTKsNdUAXuhqpQDapDDbgHasK9UAvug9pwP9SBB6AuPAj14CGoDw9DA3gEGsKj0Ageg8bQBJpCM2j+P8p/EbrBS9AdekAy9IRe8DL0hj7QF/pBf3gFBsCrMBBegxR4HQbBGzAY3oQh8BYMhWEwHN6GETASRsFoGANjIRXGwXh4BybAuzARJsFkmAJpMBWmwXswHWbATHgfZsEHMBvmwFyYB+nwIcyHBZABH8FC+BgyYREshiWwFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVtsF2+AR2wKewE3bBbvgM9sDn/2T+yb/L74yAgAIFKlQYgzEYi7EYh3GYC3NhbsyNEYxgPMZjHsyDeTEv5sf8mIAJWAgLoUGDhISFsTBGMYpFsSgWw2JYHIujQ4eJmIil8BYsjaWxDJbBslgWy2F5LI8VsSJWwkpYGStjFayCVbEqVsfqeA/egz2xFtbC2lgb62CdS7ensD7WxwbYABtiQ2yEjbAxNsam2BSbY3NsgS2wJbbE1tga22AbbIttMQmTsB22w/bYHjtgB+yIHbETdsLO2AW7ZL2YA/AlfAl7YFXRE3thL+yNKTn6Yj/sh6/gAHwVX8XXMAVfx0H4Br6Bb+IQPIFDcRgOx+FYSYzEUTgaSYzFVEzF8TgeJ+AEnIiTcBJOwTScitNwGk7HGTgD38dZ+AF+gHNwDs7DdEzH+bgAMzADF+JJzMRFuBiX4FJchktxBa7EFbga1+BqXIfrcANuwE24CbfgFtyG2/ATVAD4Ke7CXZiCe3AP7sW9uA/34X7cj1mYhQfwAB7Eg3gID+FhPIxH8Cgew6N4HI/jCTyJp/AUnsEzeBafT/i6wSc3rUoBcZ4SSsSIGBErYkWciBO5RC6RW+QWERER8SJe5BF5RF6RV+QX+UWCSBCFRCFhhBEkwhgAEFERFUVFUVFMFBPFRXHhhBOJIlGUEqVEaVFalBG3ibLidlFOlBetXEVRUVQSrV1lcZeoIqqIqqKaqC5qiBqipqgpaolaoraoLeqIOqKueFDUEz2xLz4szlemoXgdG4lB2Fg0EfLiJ1gLMQRbilaitXhSDMOh2Fa0cEniGdFOjML24m9iND4nOoqx2Em8IDqLLqKreFF0Ey1dd9FDTMSeopeYgr1FH9FX9BPTsZp4H2flrC5eEynidTFIvCHm4ZtiiHhLDBXDxHDxthghRopRYrQYI8aKVDFOjBfviAniXTFRTBKTxRSRJqaKaeI9MV3MEDPF+2KW+EDMFnPEXDFPpIsPxXyxQGSIj8RC8bHIFIvEYrFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGaxRWwV28R28YnYIT4VO8UusVt8JvaIz8Ve8YXYJ74U+8VXIkt8LQ6Ib8RB8a04JL4Th8X34og4Ko6JH8Rx8aM4IU6KU+K0OCN+EmfFz+Kc8AIkSiGlVDKQMTKHjJU5ZZy8SuaSwcVX91oZL6+TeeT1Mq/MJ/PLAjJBFpSFpJZGWkkylIVlERmVN8ii8kZZTN4ki8sS0smSMlHeLEvJW2RpeassI2+TZeXtspwsLyvIivIOWUneKSFy4RhVZTVZXdaQ98hkuFfWkvfJ2vJ+WUc+IOvKB2U9+ZCsLx+WDeQjsqF8VDaSj8nGsolsKpvJ5vJx2UI+IVvKVrK1fFK2kU/JtvJpmSSfke2kv3iKPCc7yudlJ/mC7Cy7yK7yZ3lOetld9pDQE2Qv+bLsLfvIvrKf7C9fkQPkq3KgfE2myNflIPmGHCzflEPkW3KoHCaHy7flCDlSjpKj5Rg5VqbKcXK8fEdOkO/KiXKSnCynyDQ5Vfa9ONJMKf9h/jt/kD/wl6NvkBvlJrlZbpFb5Ta5XX4id8gdcqfcKXfL3XKP3CP3yr1yn9wn98v9MktmyQPygDwoD8pD8pA8LA/LI/KoPC1/kMflj/KEPClPytPyjDwjz158DUChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiCaOKqxLKqZIqUd38z+SroupGVUzd9Jv8S/NL/pP5NVfNVQvVQrVULVVr1Vq1UW1UW9VWJakk1U61U+1Ve9VBdVAdVUfVSXVS50+Irqqr6qa6qe6qu0pWyaqXeln1Vn1UX9VP9VevqAFqgBqoBqoUlaIGqUFqsBqshqghaqgaqoar4WqEGqFGqVFqjBqjUlWqGq/GqwlqgpqoJqrJarJKU2lqmpqmpqvpaqaaqWapWWq2mq3mqrkqXaWr+Wq+ylAZaqFaqDLVIrVILVFL1DK1TK1QK9QqtUqtUWvUOrVOZaqNaqParDarrWqr2q62qx1qh9qpdqrdarfao/aovWqv2qf2qf1qv8pSWSr2YhEOqUPqsDqsjqgj6pg6po6r4+qEOqFOqVPqjDqjzqqz6pw6d37ZF4hABCpQQUwQE8QGsUFcEBfkCnIFuYPcQSSIBPFBfJAnuD7IG+QL8gcFgoSgYFAo0IEJbCAuHi8a3BAUDW4MigU3BcWDEoELSgaJwc1BqeCWoHRwa1AmuC0oG9welAvKBxWCisEdQaXgzqBycFdQJbg7qBpUC6oHNYJ7gprBvUGt4L6gdnB/UCd4IKgbPBjUCx4K6gcPBw2CR4KGwaNBo+CxoHHQJGgaNAua/4XxL52Y/3h870/ke8J11z10su6pe+mXdW/dR/fV/XR//YoeoF/VA/VrOkW/rgfpN/Rg/aYeot/SQ/UwPVy/rUfokXqUHq3H6LE6VY/T4/U7eoJ+V0/Uk/RkPUWn6al6mn5PT9cz9Ez9vp6lP9Cz9Rw9V8/T6fpDPV8v0Bn6I71Qf6wz9SK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1df6J36E/1Tr1L79af6T36c71Xf6H36S/1fv2VztJf6wP6G31Qf6sP6e/0Yf29PqKP6mP6B31c/6hP6JP6lD6tz+if9FkNcE7784v781/vRhllYkyMiTWxJs7EmVwml8ltcpuIiZh4E2/ymDwmr8lr8pv8JsEkmEKmkDmPDJnCprCJmqgpaoqaYqaYKW6KG2ecSTSJppQpZUqb0qaMKWPKmrKmnClnKpgK5g5zh7nT3GnuMneZu83dppqpZmqYGqamqWlqmVqmtqlt6pg6pq6pa+qZeqa+qW8amAamoWloGplGprFpbJqapqa5aW5amBampWlpWpvWpo1pY9qatibJJJl2pp1pb9qbDqaD6Wg6mk6mk+lsOpuupqvpZrqZ7qa7STbJppfpZXqb3qav6Wv6m/5mgBlgBpqBJsWkmEFmkBlsBpshZogZaoaZ4ecXqmakGWVGmzFmrEk1qWa8GW8mmAlmoploJpvJJs2kmWlmmpluppuZZqaZZWaZ2Wa2mWvmmnSTbuab+SbDZJiFZqHJNJlmsVlslpqlZrlZblaalWa1WW3Wwlqz3qw3G81Gs9lsNlvNVrPdbDc7zA6z0+w0u81us8fsMXvNXrPP7DP7zX6TZbLMAXPAHDQHzSFzyBw2h80Rc8QcM8fMcXPcnDAnzClzypwx+S5+X3oTa3PaOHuVzWWvtrntNfbv4/y2gE2wBW0hq21em+83sbHWFrM32eK2hHW2pE20N/8uLmfL2wq2or3DVrJ32sq/i2vae20te5+tbe+3New9v4nr2AdsXfuorYcIYJvYBraZbWgftY3sY7axbWKb2ma2jX3KtrVP2yT7jG1nn/1dPN8usCvtKrvarrE77S57yp62B+239oz9yXa3PWx/+4odYF+1A+1rNsW+/rt4uH3bjrAj7Sg72o6xY38XT7ZTbJqdaqfZ9+x0O+N3cbr90M6yGXa2nWPn2nm/xOfnlGE/sgvtxzbTBrDYLrFL7TK73K74v3NdYtfZ9XaD3WE/tZvtFrvVbrPbLy2E7S67235m99jP7QH7jd1nv7T77SGbZb/+JT7//A7Z7+xh+709Yo/aY/YHe9z+qH7JHdkbwP5kf7A/23PWWyAkIEmKAoqhHBRLOSmOrqJcdDXlpmsoQtdSPF1Heeh6ykv5KD8VoAQqSIVIkyFLRCEVpiIUpRvo0vSKUwlyVJIS6WYqRbdQabqVytBtVJZup3JUnipQRbqDKtGdVJnuoip0N1WlalSdatA9VJPupVp0H9Wm+6kOPUB16UGqRw9RfXqYGtAj1JAepUb0GDWmJtSUmlFzepxa0BPUklpRa3qS2tBT1JaepiR6htrRs9Se/kYd6DnqSM9TJ3qBOlMX6kovUjd6ibpTD0qmntSLXqbe1If6Uj/qT6/QAHqVBtJrlEKv0yB6gwbTmzSE3qKhNIyG09s0gkbSKBpNY2gspdI4Gk/v0AR6lybSJJpMUyiNptI0eo+m0wyaSe/TLPqAZtMcmkvzKJ0+pPm0gDLoI1pIH1MmLaLFtISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOn9AO+pR20i7aTZ/RHvqc9tIXtI++pP30FWXR13SAvqGD9C0dou98D/qejtBROkY/0HH6kU7QSTpFp+kM/URn6Wc6R54gxFCEMlRhEMaEOcLYMGcYF14V5gqvDnOH14SR8NowPrwuzBNeH+YN84X5wwJhQlgwLBTq0IQ2pDAMC4dFwmh4Q1g0vDEsFmJYPCwRurBkmBjeHJYKbwlLh7eGZcLbwrLh7WG5sHz46P0VwzvCSuGdYeXwrrBKeHdYNawWVg9rhPeENcN7w1rhfWHt8P6wdPhAWDd8MKwXPhTWDx8OG4SPhA3DR8NG4WNh47BJ2DRsFjYPHw9bhE+ELcNWYevwybBN+FTYNnw6TAqfCduFz/7S/8CCP+9PDnuGvcKXw5dD7++Tc6PzounRD6PzowuiGdGPogujH0czo4uii6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbot7XyAEOnXDSKRe4GJfDxbqcLs5d5XK5q11ud42LuGtdvLvO5XHXu7wun8vvCrgEV9AVctoZZx250BV2RVzU3eCKuhtdMXeTK+5KOOdKukTXzDV3zV0L94Rr6Vq51u5J96R7yj3lnnZPu2dcO/esa+/+5jq451xH97x73r3gOrsurqt70XVz43JfeE8mu16ul+vteru+rq/r7/q7AW6AG+gGuhSX4ga5QW6wG+yGuCFuqBvqhrvhboQb4Ua5UW6MG+NSXaob78a7CW6Cm+gmuslusktzaW6am+amu+mu0owLR5ntZru5bq5Ld+luvju/ZsxwC91Cl+ky3WK32C11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XA73E5/zYVB3R631+11+9w+t9995bLc1+6A+8YddN+6Q+47d9h97464o+6Y+8Eddz+6E+6kO+VOuzPuJ3fW/ezOOe9SI+Mi4yPvRCZE3o1MjEyKTI5MiaRFpkamRd6LTI/MiMyMvB+ZFfkgMjsyJzI3Mi+SHvkwMj+yIJIR+SiyMPJxJDOyKLI4siSyNLIs4n3BzaEv7Iv4qL/BF/U3+mL+Jl/cl/DOl/SJ/mZfyt/iS/tbfRl/my/rb/flfHlfwT/mG/smvqlv5pv7x30L/4Rv6Vv51v5J38Y/5dv6p32Sf8a388/69v5vvoN/znf0z/tO/gXf2XfxXf2Lvpt/yXf3PXyy7+l7+Zd9b9/H9/X9fH//ih/gX/UD/Wu/XAgP8m/4wf5NP8S/5Yf6YX54zNt+xKVLZBjrU/04P96/4yf4d/1EP8lP9lN8mp/qp/n3/HQ/w8/07/tZ/gM/28/xc/08n+4/9PP9Ap/hP/IL/cc+0y+6dFPZL/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/gd/lO/0+/yu/1nfo//3O/1X/h9/ku/33/ls/zX/oD/xh/03/pD/jt/2H/vj/ij/pj/wR/3P/oT/qQ/5U/7M/4nf9b/7M/x76wxxhhjjP0l4y43xW97Ltw17fkHOeJXO/cCgKu3FMj6df/5FeXavBfafURCmwgAPNOj08OXtqpVk5OTL+6bKSEoMgfg0v8EnRcDl+NF0BqegiRoBaX+cP59RJcz9A/Gj94GEPernFi4HF8e/wsATP6D8R9/cvj8suGp+P/H+HMAihW5nJMTLseLoPUv91daQek/mX++Fr+ef+zvx8/5ZSpAy1/l5ILL8eX5J8IT8Cwk/WZPxhhjjDHGGGPsgj6iQodL15+XfuLzj67PE9TlnBxwOf5H1+eMMcYYY4wxxhi78p7r0vXpx5OSWnX45xuV/0dZf7nRCP63RubGHza8B7j0iAKAf3FAgPMN+Z98Fpv+I8dKufjW+fuupad9AFe+lGn/pnGu8AcTY4wxxhhj7N/u8qL/t4+rKzUhxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/pP/FmyK/0cGWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsSvt/wQAAP//tuf5PQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 15.953904802s ago: executing program 1 (id=1563): syz_usb_connect(0x3, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/113, 0x71}], 0x1) 13.974056687s ago: executing program 1 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fd0900250300000004000500050002"], 0x20}, 0x1, 0x0, 0x0, 0x20048890}, 0x4008080) 13.705127861s ago: executing program 1 (id=1584): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 13.205892155s ago: executing program 1 (id=1576): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x7, {0xffff, 0x1}, {0x49, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0xfff8, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 11.911439759s ago: executing program 1 (id=1587): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x890b, &(0x7f0000000000)) 11.687300749s ago: executing program 33 (id=1587): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x890b, &(0x7f0000000000)) 4.367387415s ago: executing program 5 (id=1628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf250d000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000816) 2.794364543s ago: executing program 5 (id=1643): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2.61004252s ago: executing program 5 (id=1646): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x47}], 0x1) 2.3833706s ago: executing program 5 (id=1648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1.81094376s ago: executing program 5 (id=1666): r0 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) 1.5872316s ago: executing program 2 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032abd70000000000009000000040003"], 0x24}, 0x1, 0x0, 0x0, 0x30000800}, 0x0) 1.435559534s ago: executing program 2 (id=1671): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008ebff0085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.292691236s ago: executing program 3 (id=1661): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x300}) 1.290280296s ago: executing program 2 (id=1662): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 1.120308572s ago: executing program 3 (id=1664): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 959.393745ms ago: executing program 3 (id=1665): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 959.185526ms ago: executing program 4 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 879.577022ms ago: executing program 4 (id=1668): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808002, &(0x7f00000002c0)={[{@force}, {@umask={'umask', 0x3d, 0x8}}, {@nobarrier}, {@creator={'creator', 0x3d, "849eb55b"}}, {@barrier}, {@force}, {@nodecompose}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp869'}}, {@part={'part', 0x3d, 0x5}}]}, 0x1, 0x6f3, &(0x7f0000000740)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0x1a39143, 0x0) 868.832954ms ago: executing program 3 (id=1670): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x2, 0x5}}, 0x6e) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) 818.911668ms ago: executing program 3 (id=1672): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@uid}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uid}, {@uid}]}, 0x20, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 729.724346ms ago: executing program 4 (id=1673): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) 583.410879ms ago: executing program 4 (id=1674): r0 = socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) accept4(r0, 0x0, 0x0, 0x0) 382.964306ms ago: executing program 2 (id=1675): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x2}, 0xe) 382.897616ms ago: executing program 4 (id=1676): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) 295.477424ms ago: executing program 4 (id=1677): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42908}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 249.135238ms ago: executing program 2 (id=1678): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0xffffff20, "984c323de8fed63723b821c9a59a4006f7feede6e56d4cad6c8ad393b58ba111"}) 86.482463ms ago: executing program 2 (id=1679): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 86.394653ms ago: executing program 5 (id=1680): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xffff}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) 0s ago: executing program 3 (id=1681): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f00000000c0)={[{@eas_no}, {@chkdsk_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$eJwUk1Mc34UDRZe37JZtnmzbtm375H5fG8u23VbLtm3XsrH4//wf7ut9OPfcOwc4coCjBnjXAO8e4OgB3jPAewd43wDvH+ADA3xwgA8N8OEBPjLARwf42AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+AbA3xzgG8N8O0BvjPAdwf43gDfH+AHA/xwgB8N8OMBfjLATwf42QA/H+AXAxwzwC8H+NUAvx7gNwP8doDfDfD7Af4wwB8H+NMAfx7gLwP8dYC/DfD3Af4xwLED/HOAfw3w7wH+M8B/B/jfAIcEOE6A4wY4XoDjBzhBgBMGOFGAQwMcFuDEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4PAAZwxwpgBnDnCWAGcNcLYAZw9wjgDnDHCuAOcOcJ4A5w1wvgDnD3CBABcMcKEAFw5wkQAXDXCxABcPcIkACXDJAJcKcOkAlwlw2QCXC3D5AFcIcMUAVwpw5QBXCXDVAFcLcPUA1whwzQDXCnDtANcJcN0A1wtw/QA3CHDDADcKcOMANwlw0wA3C3DzALcIcMsAtwpw6wC3CXDbALcLcPsAdwhwxwB3CnDnAHcJcNcAdwtw9wD3CHDPAPcKcO8A9wlw3wD3C3D/AA8I8MAADwrw4AAPCfDQAA8L8PAAjwjwyACPCvDoAI8J8NgAjwvw+ABPCPDEAA3wpABPDvCUAE8N8LQATw/wjADPDHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/giADPCvDsAM8J8NwAzwvw/AAvCPDCAC8K8OIALwnw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAG8J8NYAbwvw9gDvCPDOAEcGOCrAuwK8O8DRAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHgmAC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8Axwb4Z4B/Bfh3gP8E+G+A/wU4JMRxQhw3xPFCHD/ECUKcMMSJQhwa4rAQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhCHhzhjiDOFOHOIs4Q4a4izhTh7iHOEOGeIc4U4d4jzhDhviPOFOH+IC4S4YIgLhbhwiIuEuGiIi4W4eIhLhEiIS4a4VIhLh7hMiMuGuFyIy4e4QogrhrhSiCuHuEqIq4a4Woirh7hGiGuGuFaIa4e4TojrhrheiOuHuEGIG4a4UYgbh7hJiJuGuFmIm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh4Z4WIiHh3hEiEeGeFSIR4d4TIjHhnhciMeHeEKIJ4ZoiCeFeHKIp4R4aoinhXh6iGeEeGaIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EEeEeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiLeHeEeId4Y4MsRRId4V4t0hjg7xnhDvDfG+EO8P8YEQHwzxoRAfDvGREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrRDfDvGdEN8N8b0Q3w/xgxA/DPGjED8O8ZMQPw3xsxA/D/GLEMeE+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hDg2xD9D/CvEv0P8J8R/Q/wvxCERjhPhuBGOF+H4EU4Q4YQRThTh0AiHRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEODzCGSOcKcKZI5wlwlkjnC3C2SOcI8I5I5wrwrkjnCfCeSOcL8L5I1wgwgUjXCjChSNcJMJFI1wswsUjXCJCIlwywqUiXDrCZSJcNsLlIlw+whUiXDHClSJcOcJVIlw1wtUiXD3CNSJcM8K1Ilw7wnUiXDfC9SJcP8INItwwwo0i3DjCTSLcNMLNItw8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDbC4yI8PsITIjwxQiM8KcKTIzwlwlMjPC3C0yM8I8IzIxxEGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4IsKzIjw7wnMiPDfC8yI8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJrIrw2wusivD7CGyK8McKbIrw5wlsivDXC2yK8PcI7IrwzwpERjorwrgjvjnB0hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0Q4JsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCsRH+GeFfEf4d4T8R/hvhfxEOiXGcGMeNcbwYx49xghgnjHGiGIfGOCzGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcbhMc4Y40wxzhzjLDHOGuNsMc4e4xwxzhnjXDHOHeM8Mc4b43wxzh/jAjEuGONCMS4c4yIxLhrjYjEuHuMSMRLjkjEuFePSMS4T47IxLhfj8jGuEOOKMa4U48oxrhLjqjGuFuPqMa4R45oxrhXj2jGuE+O6Ma4X4/oxbhDjhjFuFOPGMW4S46Yxbhbj5jFuEeOWMW4V49YxbhPjtjFuN/6QIf/nu0OMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxmiMJ8V4coynxHhqjKfFeHqMZ8R4ZoyDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYR8R4Voxnx3hOjOfGeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xjgyxlEx3hXj3TGOjvGeGO+N8b4Y74/xgRgfjPGhGB+O8ZEYH43xsRgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYx8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/EODbGP2P8K8a/Y/wnxn9j/C/GIQmOk+C4CY6X4PgJTpDghAlOlODQBIclOHGCkyQ4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4PMEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIkESXDLBpRJcOsFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDFBEzwpwZMTPCXBUxM8LcHTEzwjwTMTHCQYJBgmGCUYJ5gkmCaYJZgnWCRYJlglWCfYJNgm2CXYJzgiwbMSPDvBcxI8N8HzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrErw6wWsSvDbB6xK8PsEbErwxwZsSvDnBWxK8NcHbErw9wTsSvDPBkQmOSvCuBO9OcHSC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJDgmwS8T/CrBrxP8JsFvE/wuwe8T/CHBHxP8KcGfE/wlwV8T/C3B3xP8I8GxCf6Z4F8J/p3gPwn+m+B/CQ5JcZwUx01xvBTHT3GCFCdMcaIUh6Y4LMWJU5wkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxeEpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpziIikumuJiKS6e4hIpkuKSKS6V4tIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkeleLRKR6T4rEpHpfi8SmekOKJKZriSSmenOIpKZ6a4mkpnp7iGSmemeIgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FESmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLNKd6S4q0p3pbi7SnekeKdKY5McVSKd6V4d4qjU7wnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JiV5NsXnUnw+xRdSfDHFl1J8OcVXUnw1xddSfD3FN1J8M8W3Unw7xXdSfDfF91J8P8UPUvwwxY9S/DjFT1L8NMXPUvw8xS9SHJPilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4tgU/0zxrxT/TvGfFP9N8b8Uh2Q4TobjZjhehuNnOEGGE2Y4UYZDMxyW4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDh8AxnzHCmDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIEMF8xwoQwXznCRDBfNcLEMF89wiQzJcMkMl8pw6QyXyXDZDJfLcPkMV8hwxQxXynDlDFfJcNUMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/McJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+GIDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4MR2Y4KsO7Mrw7w9EZ3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGT6W4eMZPpHhkxk+leHTGT6T4bMZPpfh8xm+kOGLGb6U4csZvpLhqxm+luHrGb6R4ZsZvpXh2xm+k+G7Gb6X4fsZfpDhhxl+lOHHGX6S4acZfpbh5xl+keGYDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwzHZvhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx4lyHJrjsBwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHIfnOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOaw4dMuT/LNbOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxqxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoBwPzvGQHA/N8bAcD8/xiByPzPGoHI/O8Zgcj83xuByPz/GEHE/M0RxPyvHkHE/J8dQcT8vx9BzPyPHMHAc5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jmOyPGsHM/O8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GO/+81ZsTYkTmO+r/LQ4YM+X9G5zhkyJAh9+Z4X4735/hAjg/+3/0hQ4Y8nOMjOT6a42M5Pp7jEzk+meNTOT6d4zM5Ppvjczk+n+MLOb6Y40s5vpzjKzm+muNrOb6e4xs5vpnjWzm+neM7Ob6b43s5vp/jBzl+mONHOX6c4yc5fprjZzl+nuMXOY7J8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yHFsjn/m+FeOf+f4T47/5vjf/5kUOE6B4xY4XoHjFzhBgRMWOFGBQwscVuDEBU5S4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4PACZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy5wkQIXLXCxAhcvcIkCKXDJApcqcOkCNxjejF22wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Clz//30FbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnligBZ5U4MkFnlLgqQWeVuDpBZ5R4JkFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCxxR4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngyAJHFXhXgXcXOLrAewq8t8D7Cry/wAcKfLDAhwp8uMBHCny0wMcKfLzAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvChxT4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeDYAv8s8K8C/y7wnwL/LfC/AoeUOE6J45Y4XonjlzhBiROWOFGJQ0scVuLEJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4vASZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSKXHJEpcqcekSlylx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEi3xpBJPLvGUEk8t8bQSTy/xjBLPLHFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iiBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEkeWOKrEu0q8u8TRJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHimBK/LPGrEr8u8ZsSvy3xuxK/L/GHEn8s8acSfy7xlxJ/LfG3En8v8Y8Sx5b4Z4l/lfh3if+U+G+J/5U4pMJxKhy3wvEqHL/CCSqcsMKJKhxa4bAKJ65wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgqHVzhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVEiFS1a4VIVLV7hMhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1ZohSdVeHKFp1R4aoWnVXh6hWdUeGaFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7CkdUeFaFZ1d4ToXnVnhehedXeEGFF1Z4UYUXV3hJhZdWeFmFl1d4RYVXVnhVhVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Y4ssJRFd5V4d0Vjq7wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCsdU+GWFX1X4dYXfVPhthd9V+H2FP1T4Y4U/Vfhzhb9U+GuFv1X4e4V/VDi2wj8r/KvCvyv8p8J/K/yvwiE1jlPjuDWOV+P4NU5Q44Q1TlTj0BqH1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOLzGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKJGalyyxqVqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxRms8qcaTazylxlNrPK3G02s8o8YzaxzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nc4osazajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxpE1jqrxrhrvrnF0jffUeG+N99V4f40P1PhgjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9Q4psYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGsTX+WeNfNf5d4z81/lvjfzUOaXCcBsdtcLwGx29wggYnbHCiBoc2OKzBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocHhDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDdLgkg0u1eDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ3a4EkNntzgKQ2e2uBpDZ7e4BkNntngoMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wRENntXg2Q2e0+C5DZ7X4PkNXtDghQ1e1ODFDV7S4KUNXtbg5Q1e0eCVDV7V4NUNXtPgtQ1e1+D1Dd7Q4I0N3tTgzQ3e0uCtDd7W4O0N3tHgnQ2ObHBUg3c1eHeDoxu8p8F7G7yvwfsbfKDBBxt8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwTENftngVw1+3eA3DX7b4HcNft/gDw3+2OBPDf7c4C8N/trgbw3+3uAfDY5t8M8G/2rw7wb/afDfBv9rcEiL47Q4bovjtTh+ixO0OGGLE7U4tMVhLU7c4iQtTtriZC1O3uIULU7Z4lQtTt3iNC1O2+J0LU7f4gwtDm9xxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2iRFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s0RZPavHkFk9p8dQWT2vx9BbPaPHMFgctBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i2OaPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9scWSLo1q8q8W7Wxzd4j0t3tvifS3e3+IDLT7Y4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtw/7/mxdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9aHNPily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4tgW/2zxrxb/bvGfFv9t8b8Wh3Q4Tofjdjheh+N3OEGHE3Y4UYdDOxzW4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDh8A5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftcLEOF+9wiQ7pcMkOl+pw6Q6X6XDZDpfrcPmOYUOGDHHFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA7t8KQOT+7wlA5P7fC0Dk/v8IwOz+xw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4YgOz+rw7A7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6PDKDq/q8OoOr+nw2g6v6/D6Dm/o8MYOb+rw5g5v6fDWDm/r8PYO7+jwzg5Hdjiqw7s6vLvD0R3e0+G9Hd7X4f0dPtDhgx0+1OHDHT7S4aMdPtbh4x0+0eGTHT7V4dMdPtPhsx0+1+HzHb7Q4YsdvtThyx2+0uGrHb7W4esdvtHhmx2+1eHbHb7T4bsdvtfh+x1+0OGHHX7U4ccdftLhpx1+1uHnHX7R4ZgOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDsd2+GeHf3X4d4f/dPhvh/91OKTHcXoct8fxehy/xwl6nLDHiXoc2uOwHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeh/c4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiPS/RIj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/a4VY9b97hNj9v2uF2P2/e4Q4879rhTjzv3uEuPu/a4W4+797hHj3v2uFePe/e4T4/79rhfj/v3eECPB/Z4UI8H93hIj4f2eFiPh/d4RI9H9nhUj0f3eEyPx/Z4XI/H93hCjyf2aI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj4Megx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x5H9HhWj2f3eE6P5/Z4Xo/n93hBjxf2eFGPF/d4SY+X9nhZj5f3eEWPV/Z4VY9X93hNj9f2eF2P1/d4Q4839nhTjzf3eEuPt/Z4W4+393hHj3f2OLLHUT3e1ePdPY7u8Z6e/7FID0x4HgwCRVO3qW3bvbVt27btWyO138dGbSupbdu2He3szPcXzhyHD3DEAB8a4MMDfGSAjw7wsQE+PsAnBvjkAJ8a4NMDfGaAzw7wuQE+P8AXBvjiAF8a4MsDfGWArw7wtQG+PsA3BvjmAN8a4NsDfGeA7w7wvQG+P8APBvjhAD8a4McD/GSAnw7wswF+PsAvBvjlAL8a4NcD/GaA3w7wuwF+P8AfBvjjAH8a4M8D/GWAvw7wtwH+PsA/BvjnAP8a4N8D/GeA/w7wvwGOHOCoAY4e4JgBjh3gkADHCXDcAMcLcPwAJwhwwgAnCnDiACcJcGiAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIAEuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7BbhzgLsEuGuAuwW4e4B7BLhngHsFuHeA+wS4b4D7Bbh/gAcEeGCABwV4cICHBHhogIcFeHiARwR4ZIBHBXh0gMcEeGyAxwV4fIAnBHhigCcFeHKABnhKgKcGeFqApwd4RoBnBnhWgGcHeE6A5wY4LMDzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrAhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4dYDXBHhtgNcFeH2ANwR4Y4A3BXhzgLcEeGuAtwV4e4B3BHhngHcFeHeA9wR4b4D3BXh/gA8E+GCAwwMcEeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH+G+B/AY4McFSAowMcE+DYAIeEOE6I44Y4XojjhzhBiBOGOFGIE4c4SYhDQ5w0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyxKVCJMSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xGEhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXiIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xKtDvCbEa0O8LsTrQ7whxBtDvCnEm0O8JcRbQ7wtxNtDvCPEO0O8K8S7Q7wnxHtDvC/E+0N8IMQHQxwe4ogQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8Q/wtxZIijQhwd4pgQx4Y4JMJxIhw3wvEiHD/CCSKcMMKJIpw4wkkiHBrhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEuGiES4W4eIRLhHhkhEuFSERLh3hMhEuG+FyES4f4QoRrhjhShGuHOEqEa4a4WoRrh7hGhGuGeFaEa4d4ToRrhvhehGuH+EGEW4Y4UYRbhzhJhFuGuFmEW4e4RYRbhnhVhFuHeE2EW4b4XYRbh/hDhHuGOFOEe4c4S4R7hrhbhHuHuEeEe4Z4V4R7h3hPhHuG+F+Ee4f4QERHhjhQREeHOEhER4a4WERHh7hEREeGeFRER4d4TERHhvhcREeH+EJEZ4Y4UkRnhyhEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuREOi/C8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hFeHeE1EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjh8AhHRPhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH9G+FeEf0f4T4T/RvhfhCMjHBXh6AjHRDg2wiExjhPjuDGOF+P4MU4Q44QxThTjxDFOEuPQGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGJeMcakYiXHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDeJcdMYN4tx8xi3iHHLGLeKcesYt4lx2xi3i3H7GHeIcccYd4px5xh3iXHXGHeLcfcY94hxzxj3inHvGPeJcd8Y94tx/xgPiPHAGA+K8eAYD4nx0BgPi/HwGI+I8cgYj4rx6BiPifHYGI+L8fgYT4jxxBhPivHkGI3xlBhPjfG0GE+P8YwYz4zxrBjPjvGcGM+NcViM58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8U4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8eoYr4nx2hivi/H6GG+I8cYYb4rx5hhvifHWGG+L8fYY74jxzhjvivHuGO+J8d4Y74vx/hgfiPHBGIfHOCLGh2J8OMZHYnw0xsdifDzGJ2J8MsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYvwyxq9i/DrGb2L8NsbvYvw+xh9i/DHGn2L8OcZfYvw1xt9i/D3GP2L8M8a/Yvw7xn9i/DfG/2IcGeOoGEfHOCbGsTEOSXCcBMdNcLwEx09wggQnTHCiBCdOcJIEhyY4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4Y4IzJThzgrMkOGuCsyU4e4JzJDhngnMlOHeC8yQ4b4LzJTh/ggskuGCCCyW4cIKLJLhogosluHiCSyS4ZIJLJUiCSye4TILLJrhcgssnuEKCKya4UoIrJ7hKgqsmuFqCqye4RoJrJrhWgmsnuE6C6ya4XoLrJ7hBghsmuFGCGye4SYKbJrhZgpsnuEWCWya4VYJbJ7hNgtsmuF2C2ye4Q4I7JrhTgjsnuEuCuya4W4K7J7hHgnsmuFeCeye4T4L7JrhfgvsneECCByZ4UIIHJ3hIgocmeFiChyd4RIJHJnhUgkcneEyCxyZ4XILHJ3hCgicmeFKCJydogqckeGqCpyV4eoJnJHhmgmcleHaC5yR4boLDEjwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJXJ3hNgtcmeF2C1yd4Q4I3JnhTgjcneEuCtyZ4W4K3J3hHgncmeFeCdyd4T4L3Jnhfgvcn+ECCDyY4PMERCT6U4MMJPpLgowk+luDjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCX6T4LcJfpfg9wn+kOCPCf6U4M8J/pLgrwn+luDvCf6R4J8J/pXg3wn+k+C/Cf6X4MgERyU4OsExCY5NcEiK46Q4borjpTh+ihOkOGGKE6U4cYqTpDg0xUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCpFUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5RVM8JcVTUzwtxdNTPCPFM1M8K8WzUzwnxXNTHJbieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTvDrFa1K8NsXrUrw+xRtSvDHFm1K8OcVbUrw1xdtSvD3FO1K8M8W7Urw7xXtSvDfF+1K8P8UHUnwwxeEpjkjxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/03xvxRHpjgqxdEpjklxbIpDMhwnw3EzHC/D8TOcIMMJM5wow4kznCTDoRlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOH7GS6a4WIZLp7hEhkumeFSGZLh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZbpThxhlukuGmGW6W4eYZbpHhlhluleHWGW6T4bYZbpfh9hnukOGOGe6U4c4Z7pLhrhnuluHuGe6R4Z4Z7pXh3hnuk+G+Ge6X4f4ZHpDhgRkelOHBGR6S4aEZHpbh4RkekeGRGR6V4dEZHpPhsRkel+HxGZ6Q4YkZnpThyRma4SkZnprhaRmenuEZGZ6Z4VkZnp3hORmem+GwDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/KcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+HVGV6T4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9Gd6X4f0ZPpDhgxkOz3BEhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobv/e/wBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvhfxmOzHBUhqMzHJPh2AyH5DhOjuPmOF6O4+c4QY4T5jhRjhPnOEmOQ3OcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHJXJcMselciTHpXNcJsdlc1wux+VzXCHHFXNcKceVc1wlx1VzXC3H1XNcI8c1c1wrx7VzXCfHdXNcL8f1c9wgxw1z3CjHjXPcJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHXXPcLcfdc9wjxz1z3CvHvXPcJ8d9c9wvx/1zPCDHA3M8KMeDczwkx0NzPCzHw3M8Iscjczwqx6NzPCbHY3M8LsfjczwhxxNzPCnHk3M0x1NyPDXH03I8Pcczcjwzx7NyPDvHc3I8N8dhOZ6X4/k5XpDjhTlelOPFOV6S46U5Xpbj5TlekeOVOV6V4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3McnuOIHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHP/LcWSOo3IcneOYHMfmOKTAcQoct8DxChy/wAkKnLDAiQqcuMBJChxa4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4IwFzlTgzAXOUuCsBc5W4OwFzlHgnAXOVeDcBc5T4LwFzlfg/AUuUOCCBS5U4MIFLlLgogUuVuDiBS5R4JIFLlUgBS5d4DIFLlvgcgUuX+AKBa5Y4EoFrlzgKgWuWuBqBa5e4BoFrlngWgWuXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuX+ABBR5Y4EEFHlzgIQUeWuBhBR5e4BEFHlngUQUeXeAxBR5b4HEFHl/gCQWeWOBJBZ5coAWeUuCpBZ5W4OkFnlHgmQWeVeDZBZ5T4LkFDivwvALPL/CCAi8s8KICLy7wkgIvLfCyAi8v8IoCryzwqgIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQXeWeBdBd5d4D0F3lvgfQXeX+ADBT5Y4PACRxT4UIEPF/hIgY8W+FiBjxf4RIFPFvhUgU8X+EyBzxb4XIHPF/hCgS8W+FKBLxf4SoGvFvhaga8X+EaBbxb4VoFvF/hOge8W+F6B7xf4QYEfFvhRgR8X+EmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4x//7DMW/Cvy7wH8K/LfA/wocWeCoAkcXOKbAsQUOKXGcEsctcbwSxy9xghInLHGiEicucZISh5Y4aYmTlTh5iVOUOGWJU5U4dYnTlDhtidOVOH2JM5Q4Y4kzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nzlTh/iQuUuGCJC5W4cImLlLhoiYuVuHiJS5S4ZIlLlUiJS5e4TInLlrhcicuXuEKJK5a4Uokrl7hKiauWuFqJq5e4RolrlrhWiWuXuE6J65a4Xonrl7hBiRuWuFGJG5e4SYmblrhZiZuXuEWJW5a4VYlbl7hNiduWuF2J25e4Q4k7lrhTiTuXuEuJu5a4W4m7l7hHiXuWuFeJe5e4T4n7lrhfifuXeECJB5Z4UIkHl3hIiYeWeFiJh5d4RIlHlnhUiUeXeEyJx5Z4XInHl3hCiSeWeFKJJ5doiaeUeGqJp5V4eolnlHhmiWeVeHaJ55R4bonDSjyvxPNLvKDEC0u8qMSLS7ykxEtLvKzEy0u8osQrS7yqxEGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5Y4vMQRJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/Jf5X4sgSR5U4usQxJY4tcUiF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDi0wkkrnKzCySucosIpK5yqwqkrnKbCaSucrsLpK5yhwhkrnKnCmSucpcJZK5ytwtkrnKPCOSucq8K5K5ynwnkrnK/C+StcoMIFK1yowoUrXKTCRStcrMLFK1yiwiUrXKpCKly6wmUqXLbC5SpcvsIVKlyxwpUqXLnCVSpctcLVKly9wjUqXLPCtSpcu8J1Kly3wvUqXL/CDSrcsMKNKty4wk0q3LTCzSrcvMItKtyywq0q3LrCbSrctsLtKty+wh0q3LHCnSrcucJdKty1wt0q3L3CPSrcs8K9Kty7wn0q3LfC/Srcv8IDKjywwoMqPLjCQyo8tMLDKjy8wiMqPLLCoyo8usJjKjy2wuMqPL7CEyo8scKTKjy5Qis8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrHFbheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRUOKgwqDCuMKowrTCpMK8wqzCssKiwrrCqsK2wqbCvsKuwrvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7Kry7wnsqvLfC+yq8v8IHKnywwuEVjqjwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8K/63wvwpHVjiqwtEVjqlwbIVDahynxnFrHK/G8WucoMYJa5yoxolrnKTGoTVOWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNVLj0jUuU+OyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTVa4yk1nlrjaTWeXuMZNZ5Z41k1nl3jOTWeW+OwGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+qcVBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX+PVNV5T47U1Xlfj9TXeUOONNd5U48013lLjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzUOr3FEjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/U+GeNf9X4d43/1Phvjf/VOLLGUTWOrnFMjWNrHNLgOA2O2+B4DY7f4AQNTtjgRA1O3OAkDQ5tcNIGJ2tw8ganaHDKBqdqcOoGp2lw2gana3D6BmdocMYGZ2pw5gZnaXDWBmdrcPYG52hwzgbnanDuBudpcN4G52tw/gYXaHDBBhdqcOEGF2lw0QYXa3DxBpdocMkGl2qQBpducJkGl21wuQaXb3CFBldscKUGV25wlQZXbXC1BldvcI0G12xwrQbXbnCdBtdtcL0G129wgwY3bHCjBjducJMGN21wswY3b3CLBrdscKsGt25wmwa3bXC7BrdvcIcGd2xwpwZ3bnCXBndtcLcGd29wjwb3bHCvBvducJ8G921wvwb3b/CABg9s8KAGD27wkAYPbfCwBg9v8IgGj2zwqAaPbvCYBo9t8LgGj2/whAZPbPCkBk9u0AZPafDUBk9r8PQGz2jwzAbPavDsBs9p8NwGhzV4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYODBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wa7BvsGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbPCuBu9u8J4G723wvgbvb/CBBh9scHiDIxp8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxv8r8GRDY5qcHSDYxoc2+CQFsdpcdwWx2tx/BYnaHHCFidqceIWJ2lxaIuTtjhZi5O3OEWLU7Y4VYtTtzhNi9O2OF2L07c4Q4sztjhTizO3OEuLs7Y4W4uztzhHi3O2OFeLc7c4T4vztjhfi/O3uECLC7a4UIsLt7hIi4u2uFiLi7e4RItLtrhUi7S4dIvLtLhsi8u1uHyLK7S4Yosrtbhyi6u0uGqLq7W4eotrtLhmi2u1uHaL67S4bovrtbh+ixu0uGGLG7W4cYubtLhpi5u1uHmLW7S4ZYtbtbh1i9u0uG2L27W4fYs7tLhjizu1uHOLu7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtHhki0e1eHSLx7R4bIvHtXh8iye0eGKLJ7V4cou2eEqLp7Z4Wount3hGi2e2eFaLZ7d4TovntjisxfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxataHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3h1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIvDWxzR4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4n8tjmxxVIujWxzT4tgWh3Q4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh0M7nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8wyU6XLLDpTqkw6U7XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTOzypw5M7tMNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfDYR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7HN7hiA4f6vDhDh/p8NEOH+vw8Q6f6PDJDp/q8OkOn+nw2Q6f6/D5Dl/o8MUOX+rw5Q5f6fDVDl/r8PUO3+jwzQ7f6vDtDt/p8N0O3+vw/Q4/6PDDDj/q8OMOP+nw0w4/6/DzDr/o8MsOv+rw6w6/6fDbDr/r8PsOf+jwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDv8aNsS/O/ynw387/K/DkR2O6nB0h2M6HNvhkB7H6XHcHsfrcfweJ+hxwh4n6nHiHifpcWiPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI/0uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKP9nhKj6f2eFqPp/d4Ro9n9nhWj2f3eE6P5/Y4rMfzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/jw/0+GCPw3sc0eP/kVyOTXwfjBZMmSa1bbtb27Zt295aqW3j/7NRt1Ft27btO8/c8w3OzuyLHTnAUQMcPcAxAxw7wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHC/A8QOcIMAJAxwa4EQBDgtweIATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgCMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4Z4B3BXh3gPcEeG+A9wV4f4APBPhggCMDHBXg6ADHBDg2wIcCfDjARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP+C8RwS4jghjhvieCGOH+IEIU4Y4tAQJwpxWIjDQ5w4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCHBHiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQ7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDHBniqBBHhzgmxLEhPhTiwyE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8h/hfikAjHiXDcCMeLcPwIJ4hwwgiHRjhRhMMiHB7hxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+GICM+N8LwIz4/wgggvjPCiCC+O8JIIL43wsggvj/CKCK+M8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOHICEdFODrCMRGOjfChCB+O8JEIH43wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jfC/CIfEOE6M48Y4XozjxzhBjBPGODTGiWIcFuPwGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYNxl3yJD/cdssxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2IcEeO5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2McGeOoGEfHOCbGsTE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBIcmOFGCwxIcnuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgySOGe0qCpyZ4WoKnJ3hGgmcmeFaCZyd4ToIjEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneGeCdyV4d4L3JHhvgvcleH+CDyT4YIIjExyV4OgExyQ4NsGHEnw4wUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4tAUJ0pxWIrDU5w4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSJMUlU1wqxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxQdTHJniqBRHpzgmxbEpPpTiwyk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXDcDMfLcPwMJ8hwwgyHZjhRhsMyHJ7hxBlOkuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukSEZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+2f8CA/fLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/M8KwMz87wnAxHZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2Q4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8M4M78rw7gzvyfDeDO/L8P4MH8jwwQxHZjgqw9EZjslwbIYPZfhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx6E5TpTjsByH5zhxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkOCLHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY535nhXjnfneE+O9+Z4X4735/hAjg/mODLHUTmOznFMjmNzfCjHh3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQWOU+C4BY5X4PgFTlDghAUOLXCiAocVOLzAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8ARBZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQUOCgwKDAuMCowLTApMC8wKzAssCiwLhg4ZMsS6wKbAtsCuwL7AOwu8q8C7C7ynwHsLvK/A+wt8oMAHCxxZ4KgCRxc4psCxBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/Bf5X4JASxylx3BLHK3H8EicoccISh5Y4UYnDShxe4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiiBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4SByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiyBJHlTi6xDElji3xoRIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8fNuT/V+JbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ6pcJwKx61wvArHr3CCCiescGiFE1U4rMLhFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVUuGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFVrhSRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVjqjw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+ocFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+GdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVjqxwVIWjKxxT4dgKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twSI3j1DhujePVOH6NE9Q4YY1Da5yoxmE1Dq9x4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqXFEjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R42DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsa76zxrhrvrvGeGu+t8b4a76/xgRofrHFkjaNqHF3jmBrH1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbHNrgRA0Oa3B4gxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDNLhkg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6DIxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hng3c1eHeD9zR4b4P3NXh/gw80+GCDIxsc1eDoBsc0OLbBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OLQFidqcViLw1ucuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWqTFJVtcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWhzR4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxzZ4qgWR7c4psWxLT7U4sMtPtLioy0+1uLjLT7R4pMtPtX+vy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//970+H43Q4bofjdTh+hxN0OGGHQzucqMNhHQ7vcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+iQDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s0A5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+lwRIfndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/s8K4O7+7wng7v7fC+Du/v8IEOH+xwZIejOhzd4ZgOx3b4UIcPd/hIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehynx3F7HK/H8XucoMcJexza40Q9DutxeI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo/2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOjyN6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4Z4939Xh3j/f0eG+P9/V4f48P9PhgjyN7HNXj6B7H9Di25/9YtOc2vgtAgeJbtWrZtl0n27Zt2z7Ztm17v6+NbBvLNlat7T73ufe8h/Pfx26A/QCfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8McOQAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wFED/HuA/wzw3wGOHuB/AxwzwLEDHBLg0ADHCXDcAMcLcFiA4wc4QYATBjg8wIkCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQIkwCUDXCrApQNcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDNMCTAjw5wFMCPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAnw4wEcCfDTAxwJ8PMAnAhwR4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTAkQF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8Bjgrw7wD/CfDfAEcH+F+AYwIcG+CQEIeGOE6I44Y4XojDQhw/xAlCnDDE4SFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4RIiEuGeJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGKIhnhTiySGeEuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPivSHeF+L9IT4Q4oMhPhTiwyE+EuKjIT4W4uMhPhHiiBAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIY4M8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CnFUiH+H+E+I/4Y4OsT/QhwT4tgQh0Q4NMJxIhw3wvEiHBbh+BFOEOGEEQ6PcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiJcMkIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I1xn2/2YjwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM0wpMiPDnCUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wiciHBHhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wicjfCrCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN8L8L3I/wgwg8j/CjCjyP8JMKREX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/hnhXxGOivDvCP+J8N8IR0f4X4RjIhwb4ZAYh8Y4TozjxjhejMNiHD9m1Nj/y+ExThTjxDFOEuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuESMxLhnjUjEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYTEeHuMRMR4Z41ExHh3jMTEeG+NxMR4f4wkxnhijMZ4U48kxnhLjqTGeFuPpMZ4R45kxnhXj2TGeE+O5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOODMT4U48MxPhLjozE+FuPjMT4R44gYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MT4Z41MxPh3jMzE+G+NzMT4f4wsxvhjjSzG+HOMrMb4a42sxvh7jGzG+GeNbMb4d4zsxvhvjezG+H+MHMX4Y40cxfhzjJzGOjPHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4pxVIx/x/hPjP/GODrG/2IcE+PYGIckODTBcRIcN8HxEhyW4PgJTpDghAkOT3CiBCdOcJIEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF05wkQQXTXCxBBdPcIkESXDJBJdKcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE3wpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEb03wtgRvT/COBO9M8K4E707wngTvTfC+BO9P8IEEH0zwoQQfTvCRBB9N8LEEH0/wiQRHJDhIMEgwTDBKME4wSTBNMEswT7BIsEywSrBOsEmwTbBLsE/wyQSfSvDpBJ9J8NkEn0vw+QRfSPDFBF9K8OUEX0nw1QRfS/D1BN9I8M0E30rw7QTfSfDdBN9L8P0EP0jwwwQ/SvDjBD9JcGSCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgqMS/DvBfxL8N8HRCf6X4JgExyY4JMWhKY6T4rgpjpfisBTHT3GCFCdMcXiKE6U4cYqTpDhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inOkOGeKc6U4d4rzpDhvivOlOH+KC6S4YIoLpbhwioukuGiKi6W4eIpLpEiKS6a4VIpLp7hMisumuFyKy6e4QoorprhSiiunuEqKq6a4Woqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6a4UYobp7hJipumuFmKm6e4RYpbprhVilunuE2K26a4XYrbp7hDijumuFOKO6e4S4q7prhbirunuEeKe6a4V4p7p7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciseneEKKJ6ZoiieleHKKp6R4aoqnpXh6imekeGaKZ6V4dornpHhuiueleH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWK16R4bYrXpXh9ijekeGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+kOCLFQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpvhWim+n+E6K76b4Xorvp/hBih+m+FGKH6f4SYojU/w0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXfUvw9xT9S/DPFv1IcleLfKf6T4r8pjk7xvxTHpDg2xSEZDs1wnAzHzXC8DIdlOH6GE2Q4YYbDM5wow4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCJDMlwyw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxQzM8KcOTMzwlw1MzPC3D0zM8I8MzMzwrw7MzPCfDczM8L8PzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrM7wmw2szvC7D6zO8IcMbM7wpw5szvCXDWzO8LcPbM7wjwzszvCvDuzO8J8N7M7wvw/szfCDDBzN8KMOHM3wkw0czfCzDxzN8IsMRGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8MsOnMnw6w2cyfDbD5zJ8PsMXMnwxw5cyfDnDVzJ8NcPXMnw9wzcyfDPDtzJ8O8N3Mnw3w/cyfD/DDzL8MMOPMvw4w08yHJnhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4agM/87wnwz/zXB0hv9lOCbDsRkOyXFojuPkOG6O4+U4LMfxc5wgxwlzHJ7jRDlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOZLjkjkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rpXj2jmuk+O6Oa6X4/o5bpDjhjlulOPGOW6S46Y5bpbj5jlukeOWOW6V49Y5bpPjtjlul+P2Oe6Q44457pTjzjnukuOuOe6W4+457pHjnjnulePeOe6T47457pfj/jkekOOBOR6U48E5HpLjoTkeluPhOR6R45E5HpXj0Tkek+OxOR6X4/E5npDjiTma40k5npzjKTmemuNpOZ6e4xk5npnjWTmeneM5OZ6b43k5np/jBTlemONFOV6c4yU5XprjZTlenuMVOV6Z41U5Xp3jNTlem+N1OV6f4w053pjjTTnenOMtOd6a42053p7jHTnemeNdOd6d4z053pvjfTnen+MDOT6Y40M5PpzjIzk+muNjOT6e4xM5jshxkGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2M/fMiQ/33iqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHEfm+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z45/5Tgqx79z/CfHf3McneN/OY7JcWyOQwocWuA4BY5b4HgFDitw/AInKHDCAocXOFGBExc4SYGTFjhZgZMXOEWBUxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjhfgfMXuECBCxa4UIELF7hIgYsWuFiBixe4RIEUuGSBSxW4dIHLFLhsgcsVuHyBKxS4YoErFbhygasUuGqBqxW4eoFrFLhmgWsVuHaB6xS4boHrFbh+gRsUuGGBGxW4cYGbFLhpgZsVuHmBWxS4ZYFbFbh1gdsUuG2B2xW4fYE7FLhjgTsVuHOBuxS4a4G7Fbh7gXsUuGeBexW4d4H7FLhvgfsVuH+BBxR4YIEHFXhwgYcUeGiBhxV4eIFHFHhkgUcVeHSBxxR4bIHHFXh8gScUeGKBFnhSgScXeEqBpxZ4WoGnF3hGgWcWeFaBZxd4ToHnFnhegecXeEGBFxZ4UYEXF3hJgZcWeFmBlxd4RYFXFnhVgVcXeE2B1xZ4XYHXF3hDgTcWeFOBNxd4S4G3FnhbgbcXeEeBdxZ4V4F3F3hPgfcWeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgSMKHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBbxT4ZoFvFfh2ge8U+G6B7xX4foEfFPhhgR8V+HGBnxQ4ssBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8L/KvAUQX+XeA/Bf5b4OgC/ytwTIFjCxxS4tASxylx3BLHK3FYieOXOEGJE5Y4vMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqcv8QFSlywxIVKXLjERUpctMTFSly8xCVKpMQlS1yqxKVLXKbEZUtcrsTlS1yhxBVLXKnElUtcpcRVS1ytxNVLXKPENUtcq8S1S1ynxHVLXK/E9UvcoMQNS9yoxI1L3KTETUvcrMTNS9yixC1L3KrErUvcpsRtS9yuxO1L3KHEHUvcqcSdS9ylxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxANLPKjEg0s8pMRDSzysxMNLPKLEI0s8qsSjSzymxGNLPK7E40s8ocQTS7TEk0o8ucRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0ocUeKgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7EJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxJElflriZyV+XuIXJX5Z4lclfl3iNyV+W+J3JX5f4g8l/ljiTyX+XOIvJf5a4m8l/l7iHyX+WeJfJY4q8e8S/ynx3xJHl/hfiWNKHFvikAqHVjhOheNWOF6Fwyocv8IJKpywwuEVTlThxBVOUuGkFU5W4eQVTlHhlBVOVeHUFU5T4bQVTlfh9BXOUOGMFc5U4cwVzlLhrBXOVuHsFc5R4ZwVzlXh3BXOU+G8Fc5X4fwVLlDhghUuVOHCFS5S4aIVLlbh4hUuUSEVLlnhUhUuXeEyFS5b4XIVLl/hChWuWOFKFa5c4SoVrlrhahWuXuEaFa5Z4VoVrl3hOhWuW+F6Fa5f4QYVbljhRhVuXOEmFW5a4WYVbl7hFhVuWeFWFW5d4TYVblvhdhVuX+EOFe5Y4U4V7lzhLhXuWuFuFe5e4R4V7lnhXhXuXeE+Fe5b4X4V7l/hARUeWOFBFR5c4SEVHlrhYRUeXuERFR5Z4VEVI0cMGeIxFR5b4XEVHl/hCRWeWKEVnlThyRWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhiAoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFY6s8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qnBUhX9X+E+F/1Y4usL/KhxT4dgKh9Q4tMZxahy3xvFqHFbj+DVOUOOENQ6vcaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF69xiRqpcckal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6px4xo3qXHTGjercfMat6hxyxq3qnHrGrepcdsat6tx+xp3qHHHGneqcecad6lx1xp3q3H3Gveocc8a96px7xr3qXHfGvercf8aD6jxwBoPqvHgGg+p8dAaD6vx8BqPqPHIGo+q8egaj6nx2BqPq/H4Gk+o8cQarfGkGk+u8ZQaT63xtBpPr/GMGs+s8awaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGkfUOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6lxZI2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNo2r8u8Z/avy3xtE1/lfjmBrH1jikwaENjtPguA2O1+CwBsdvcIIGJ2xweIMTNThxg5M0OGmDkzU4eYNTNDhlg1M1OHWD0zQ4bYPTNTh9gzM0OGODMzU4c4OzNDhrg7M1OHuDczQ4Z4NzNTh3g/M0OG+D8zU4f4MLNLhggws1uHCDizS4aIOLNbh4g0s0SINLNrhUg0s3uEyDyza4XIPLN7hCgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoNrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYPbNrhdg9s3uEODOza4U4M7N7hLg7s2uFuDuze4R4N7NrhXg3s3uE+D+za4X4P7N3hAgwc2eFCDBzd4SIOHNnhYg4c3eESDRzZ4VINHN3hMg8c2eFyDxzd4QoMnNmiDJzV4coOnNHhqg6c1eHqDZzR4ZoNnNXh2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDDzX4cIOPNPhog481+HiDTzQ4osFBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJgyMb/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/GhzV4N8N/tPgvw2ObvC/Bsc0OLbBIS0ObXGcFsdtcbwWh7U4fosTtDhhi8NbnKjFiVucpMVJW5ysxclbnKLFKVucqsWpW5ymxWlbnK7F6VucocUZW5ypxZlbnKXFWVucrcXZW5yjxTlbnKvFuVucp8V5W5yvxflbXKDFBVtcqMWFW1ykxUVbXKzFxVtcokVaXLLFpUYPdekWl2lx2RaXa3H5FldoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqce8W92lx3xb3a3H/Fg9o8cAWD2rx4BYPafHQFg9r8fAWj2jxyBaPavHoFo9p8dgWj2vx+BZPaPHEFm3xpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbvGRFh9t8bEWH2/xiRZHtDhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xyRafavHpFp9p8dkWn2vx+RZfaPHFFl9q8eUWX2nx1RZfa/H1Ft9o8c0W32rx7RbfafHdFt9r8f0WP2jxwxY/avHjFj9pcWSLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi6Na/LvFf1r8t8XRLf7X4pgWx7Y4pMOhHY7T4bgdjtfhsA7H73CCDifscHiHE3U4cYeTdDhph5N1OHmHU3Q4ZYdTdTh1h9N0OG2H03U4fYczdDhjhzN1OHOHs3Q4a4ezdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0uGiHi3W4eIdLdEiHS3a4VIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch8d3eEKHJ3Zohyd1eHKHp3R4aoendXh6h2d0eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090OKLDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h092+FSHT3f4TIfPdvhch893+EKHL3b4Uocvd/hKh692+FqHr3f4RodvdvhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYcjO/y0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzoc1eHfHf7T4b8dju7wvw7HdDi2wyE9Du1xnB7H7XG8Hof1OH6PE/Q4YY/De5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqceZe5ylx1l7nK3H2Xuco8c5e5yrx7l7nKfHeXucr8f5e1ygxwV7XKjHhXtcpMdFe1ysx8V7XKJHelyyx6V6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxR3s8qceTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHW3u8rcfbe7yjxzt7vKvHu3u8p8d7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3t8oscRPQ56/J8AAAD//8P52+I=") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) kernel console output (not intermixed with test programs): loop5): Quotacheck needed: Please wait. [ 148.504401][ T6734] XFS (loop5): Quotacheck: Done. [ 148.594239][ T5233] XFS (loop5): Unmounting Filesystem [ 148.657887][ T4266] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.715703][ T5602] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.723903][ T4225] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 149.087223][ T4266] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 149.097014][ T4225] usb 3-1: config 0 has an invalid interface number: 221 but max is 0 [ 149.105268][ T4225] usb 3-1: config 0 has no interface number 0 [ 149.106793][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.111965][ T5602] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 149.141742][ T4266] usb 4-1: config 0 descriptor?? [ 149.146980][ T4225] usb 3-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.147023][ T4225] usb 3-1: config 0 interface 221 has no altsetting 0 [ 149.147053][ T4225] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 149.178362][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.197888][ T5602] usb 5-1: config 0 descriptor?? [ 149.216980][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.229897][ T4225] usb 3-1: config 0 descriptor?? [ 149.238331][ T5602] ums-jumpshot 5-1:0.0: USB Mass Storage device detected [ 149.273357][ T5602] ums-jumpshot 5-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 149.314030][ T6764] loop1: detected capacity change from 0 to 32768 [ 149.331247][ T6765] loop5: detected capacity change from 0 to 32768 [ 149.379309][ T6764] [ 149.379309][ T6764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.379309][ T6764] [ 149.434277][ T6764] ERROR: (device loop1): diWrite: ixpxd invalid [ 149.434277][ T6764] [ 149.453831][ T5602] usb 5-1: USB disconnect, device number 10 [ 149.466074][ T6764] ERROR: (device loop1): txCommit: [ 149.466074][ T6764] [ 149.503693][ T6765] XFS (loop5): Mounting V5 Filesystem [ 149.529467][ T4188] [ 149.529467][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.529467][ T4188] [ 149.552626][ T4188] [ 149.552626][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.552626][ T4188] [ 149.585729][ T6765] XFS (loop5): Ending clean mount [ 149.634635][ T5233] XFS (loop5): Unmounting Filesystem [ 149.714221][ T4225] uclogic 0003:5543:0522.0011: unknown main item tag 0x2 [ 149.726088][ T4266] elan 0003:04F3:0755.0010: item fetching failed at offset 0/5 [ 149.734801][ T4266] elan 0003:04F3:0755.0010: Hid Parse failed [ 149.741401][ T4266] elan: probe of 0003:04F3:0755.0010 failed with error -22 [ 149.741798][ T4225] uclogic 0003:5543:0522.0011: No inputs registered, leaving [ 149.821533][ T4225] uclogic 0003:5543:0522.0011: hidraw0: USB HID v0.02 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input221 [ 149.956242][ T4540] usb 4-1: USB disconnect, device number 9 [ 149.958822][ T4225] usb 3-1: USB disconnect, device number 9 [ 150.025057][ T6778] fido_id[6778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 150.321749][ T6788] loop5: detected capacity change from 0 to 128 [ 150.409768][ T5233] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 150.446735][ T6777] loop1: detected capacity change from 0 to 32768 [ 150.499227][ T6777] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.833 (6777) [ 150.560291][ T6794] netlink: 'syz.5.841': attribute type 29 has an invalid length. [ 150.593617][ T6777] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 150.605422][ T6796] loop4: detected capacity change from 0 to 1024 [ 150.612405][ T6794] netlink: 'syz.5.841': attribute type 29 has an invalid length. [ 150.640601][ T6777] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 150.667460][ T6797] netlink: 'syz.5.841': attribute type 29 has an invalid length. [ 150.719211][ T6777] BTRFS info (device loop1): use zstd compression, level 3 [ 150.726503][ T6777] BTRFS info (device loop1): use no compression [ 150.783856][ T6777] BTRFS info (device loop1): using free space tree [ 150.838614][ T6777] BTRFS info (device loop1): has skinny extents [ 150.863447][ T9] hfsplus: b-tree write err: -5, ino 4 [ 151.008921][ T6817] loop5: detected capacity change from 0 to 2048 [ 151.034198][ T6817] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 151.117922][ T6817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.201391][ T6777] BTRFS info (device loop1): enabling ssd optimizations [ 151.302600][ T6843] loop3: detected capacity change from 0 to 64 [ 151.487362][ T6845] loop5: detected capacity change from 0 to 256 [ 151.524662][ T6777] BTRFS warning (device loop1): failed to trim 2 block group(s), last error -512 [ 151.636596][ T26] audit: type=1800 audit(1771930727.321:4): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.855" name="file1" dev="loop5" ino=1048660 res=0 errno=0 [ 151.683614][ T6849] loop3: detected capacity change from 0 to 4096 [ 151.716443][ T6777] BTRFS warning (device loop1): failed to trim 1 device(s), last error -512 [ 151.930836][ T26] audit: type=1326 audit(1771930727.621:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.5.862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec87895629 code=0x0 [ 151.971115][ T6849] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.039169][ T6849] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.857: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 152.065621][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.091248][ T6849] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.857: directory missing '..' [ 152.130087][ T6861] loop4: detected capacity change from 0 to 4096 [ 152.183237][ T6836] loop2: detected capacity change from 0 to 32768 [ 152.321841][ T6861] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 152.367896][ T6861] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 152.381522][ T6861] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 152.394648][ T6861] ntfs: volume version 3.1. [ 152.405551][ T6836] XFS (loop2): Mounting V5 Filesystem [ 152.599611][ T6836] XFS (loop2): Ending clean mount [ 152.610481][ T6836] XFS (loop2): Quotacheck needed: Please wait. [ 152.619933][ T4195] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 152.662126][ T6878] loop3: detected capacity change from 0 to 512 [ 152.736076][ T6878] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.766206][ T6836] XFS (loop2): Quotacheck: Done. [ 152.782395][ T6878] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 152.809643][ T6878] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 152.818795][ T6878] System zones: 0-2, 18-18, 34-35 [ 152.826399][ T6878] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.844261][ T6878] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 152.865643][ T6878] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 152.880192][ T6878] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 152.887179][ T4229] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 152.911369][ T6878] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 152.958770][ T6884] netlink: 'syz.5.867': attribute type 2 has an invalid length. [ 153.023461][ T4194] XFS (loop2): Unmounting Filesystem [ 153.257455][ T4229] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 153.291044][ T4229] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 153.312969][ T4229] usb 2-1: config 0 has no interface number 0 [ 153.337623][ T4229] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 153.357019][ T4229] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.386924][ T4229] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 153.406334][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.440608][ T4229] usb 2-1: config 0 descriptor?? [ 153.516175][ T4225] kernel write not supported for file /input/event0 (pid: 4225 comm: kworker/1:3) [ 153.578212][ T6906] netlink: 'syz.5.879': attribute type 2 has an invalid length. [ 153.606631][ T6906] netlink: 44 bytes leftover after parsing attributes in process `syz.5.879'. [ 153.667526][ T4536] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.755641][ T6914] IPVS: Error joining to the multicast group [ 153.860035][ T6912] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 154.067184][ T4536] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.096917][ T4536] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 154.120261][ T4536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.131687][ T4229] usb 2-1: USB disconnect, device number 6 [ 154.169513][ T4536] usb 4-1: config 0 descriptor?? [ 154.442421][ T6933] overlayfs: filesystem on './file0' not supported [ 154.489088][ T6916] JBD2: Ignoring recovery information on journal [ 154.542854][ T9] hfsplus: b-tree write err: -5, ino 4 [ 154.571211][ T6916] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 154.677714][ T4536] kone 0003:1E7D:2CED.0012: hidraw0: USB HID v10.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 154.762915][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 154.845119][ T6929] (syz.4.889,6929,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.881628][ T4536] kone 0003:1E7D:2CED.0012: couldn't init struct kone_device [ 154.892723][ T4536] kone 0003:1E7D:2CED.0012: couldn't install mouse [ 154.909855][ T6929] (syz.4.889,6929,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.931605][ T4536] kone: probe of 0003:1E7D:2CED.0012 failed with error -5 [ 154.959396][ T4536] usb 4-1: USB disconnect, device number 10 [ 155.000326][ T6929] JBD2: Ignoring recovery information on journal [ 155.006820][ T6944] Unable to read rock-ridge attributes [ 155.060724][ T6944] Unable to read rock-ridge attributes [ 155.120461][ T6946] fido_id[6946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 155.145999][ T6949] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 155.168094][ T6929] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 155.207049][ T4266] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 155.344548][ T6956] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: value out of range 0 (89/830110067) at count 0 [ 155.373617][ T6956] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: access overflow [ 155.392723][ T6954] hfsplus: bad catalog entry type [ 155.609390][ T6963] set_capacity_and_notify: 6 callbacks suppressed [ 155.609407][ T6963] loop5: detected capacity change from 0 to 2048 [ 155.624420][ T6965] sp0: Synchronizing with TNC [ 155.630750][ T6961] loop1: detected capacity change from 0 to 2048 [ 155.687345][ T4266] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.705843][ T6966] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.738514][ T4266] usb 3-1: not running at top speed; connect to a high speed hub [ 155.765250][ T6967] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.795724][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 155.867167][ T4266] usb 3-1: config 1 has an invalid interface number: 167 but max is 1 [ 155.883524][ T4266] usb 3-1: config 1 has an invalid interface number: 92 but max is 1 [ 155.937298][ T4266] usb 3-1: config 1 has no interface number 0 [ 155.946683][ T6969] NILFS error (device loop5): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 155.956968][ T4266] usb 3-1: config 1 has no interface number 1 [ 155.999454][ T4266] usb 3-1: config 1 interface 167 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 156.031010][ T4266] usb 3-1: config 1 interface 167 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 156.054107][ T6969] Remounting filesystem read-only [ 156.067128][ T4266] usb 3-1: config 1 interface 92 has no altsetting 0 [ 156.125276][ T5233] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 156.297219][ T4266] usb 3-1: New USB device found, idVendor=04b8, idProduct=0601, bcdDevice= 1.00 [ 156.313992][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.346698][ T4266] usb 3-1: Product: syz [ 156.371126][ T4266] usb 3-1: Manufacturer: syz [ 156.384914][ T4266] usb 3-1: SerialNumber: syz [ 156.437309][ T6943] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.453300][ T6991] loop3: detected capacity change from 0 to 8 [ 156.460130][ T6943] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.538009][ T6991] SQUASHFS error: zlib decompression failed, data probably corrupt [ 156.551588][ T6991] SQUASHFS error: Failed to read block 0x9b: -5 [ 156.578568][ T6991] SQUASHFS error: Unable to read metadata cache entry [99] [ 156.592778][ T6991] SQUASHFS error: Unable to read inode 0x127 [ 156.775967][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.920'. [ 156.797875][ T4266] usb-storage 3-1:1.167: USB Mass Storage device detected [ 156.846571][ T4266] usb-storage 3-1:1.167: Quirks match for vid 04b8 pid 0601: 8 [ 156.920198][ T7014] loop1: detected capacity change from 0 to 512 [ 156.967668][ T4266] usb-storage 3-1:1.92: USB Mass Storage device detected [ 156.996256][ T4266] usb-storage 3-1:1.92: Quirks match for vid 04b8 pid 0601: 8 [ 157.026735][ T7014] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.924: corrupted in-inode xattr [ 157.073002][ T4266] usb 3-1: USB disconnect, device number 10 [ 157.173556][ T7014] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.924: couldn't read orphan inode 15 (err -117) [ 157.258389][ T7014] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.321333][ T7014] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.1.924: path /144/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 157.349895][ T7007] loop3: detected capacity change from 0 to 32768 [ 157.405933][ T7007] jfs_lookup: dtSearch returned -5 [ 157.749858][ T7029] loop2: detected capacity change from 0 to 4096 [ 157.758994][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 157.841159][ T7029] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 157.920588][ T7031] loop1: detected capacity change from 0 to 8192 [ 158.007642][ T7029] ntfs: volume version 3.1. [ 158.027617][ T7018] loop4: detected capacity change from 0 to 32768 [ 158.058011][ T7031] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 158.074970][ T7029] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-6. You might want to try to use the mount option nls=utf8. [ 158.098431][ T7044] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:18980 [ 158.157485][ T7031] REISERFS (device loop1): using ordered data mode [ 158.164143][ T7031] reiserfs: using flush barriers [ 158.175850][ T7029] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 158.186745][ T7031] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.204953][ T7031] REISERFS (device loop1): checking transaction log (loop1) [ 158.252574][ T7031] REISERFS (device loop1): Using r5 hash to sort names [ 158.303357][ T7031] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 158.428398][ T7031] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 158.749297][ T7063] loop2: detected capacity change from 0 to 1024 [ 158.821287][ T7067] IPVS: Unknown mcast interface: pim6reg1 [ 158.930171][ T4256] hfsplus: b-tree write err: -5, ino 4 [ 159.538292][ T7050] loop5: detected capacity change from 0 to 40427 [ 159.557603][ T4536] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.625011][ T7050] F2FS-fs (loop5): invalid crc value [ 159.650454][ T7050] F2FS-fs (loop5): Found nat_bits in checkpoint [ 159.836751][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 159.856097][ T7050] F2FS-fs (loop5): Start checkpoint disabled! [ 159.925280][ T7050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 160.007283][ T4536] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 160.037447][ T4536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.075157][ T4536] usb 4-1: config 0 descriptor?? [ 160.529988][ T7129] erofs: (device loop2): mounted with root inode @ nid 36. [ 160.583346][ T4536] wacom 0003:056A:00B8.0013: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 160.602052][ T7129] erofs: (device loop2): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 10 of nid 36 [ 160.615519][ T4536] wacom 0003:056A:00B8.0013: hidraw0: USB HID v0.02 Device [HID 056a:00b8] on usb-dummy_hcd.3-1/input0 [ 160.638491][ T4536] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B8.0013/input/input14 [ 160.657466][ T7137] set_capacity_and_notify: 2 callbacks suppressed [ 160.657481][ T7137] loop5: detected capacity change from 0 to 64 [ 160.746537][ T7143] loop4: detected capacity change from 0 to 256 [ 160.819019][ T4536] usb 4-1: USB disconnect, device number 11 [ 161.096056][ T7162] (unnamed net_device) (uninitialized): (slave veth1_to_bridge): Device is not bonding slave [ 161.112384][ T7162] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1_to_bridge) [ 161.221333][ T7165] netlink: 'syz.5.994': attribute type 8 has an invalid length. [ 161.246127][ T7163] fido_id[7163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 161.337083][ T6869] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 161.596910][ T6869] usb 5-1: Using ep0 maxpacket: 8 [ 161.675078][ T7173] loop5: detected capacity change from 0 to 8192 [ 161.727246][ T6869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.776761][ T7173] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 161.797259][ T7148] loop2: detected capacity change from 0 to 32768 [ 161.843564][ T6869] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 161.846587][ T7182] loop3: detected capacity change from 0 to 1024 [ 161.860421][ T7173] REISERFS (device loop5): using ordered data mode [ 161.867311][ T7173] reiserfs: using flush barriers [ 161.879351][ T7173] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.895766][ T6869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.924495][ T6869] usb 5-1: config 0 descriptor?? [ 161.952051][ T7173] REISERFS (device loop5): checking transaction log (loop5) [ 161.986010][ T7148] XFS (loop2): Mounting V5 Filesystem [ 162.030328][ T4256] hfsplus: b-tree write err: -5, ino 4 [ 162.094170][ T7148] XFS (loop2): Ending clean mount [ 162.133994][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1005'. [ 162.230774][ T4194] XFS (loop2): Unmounting Filesystem [ 162.344172][ T7173] REISERFS (device loop5): Using tea hash to sort names [ 162.356563][ T7173] REISERFS warning (device loop5): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 162.401628][ T7173] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 162.443536][ T6869] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0014/input/input17 [ 162.502678][ T7208] UBIFS error (pid: 7208): cannot open "upperdir=./file1,", error -22 [ 162.565070][ T7210] loop1: detected capacity change from 0 to 64 [ 162.595287][ T6869] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0014/input/input18 [ 162.658798][ T7212] loop3: detected capacity change from 0 to 1024 [ 162.675841][ T6869] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0014/input/input19 [ 162.718140][ T7212] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 162.725631][ T7212] EXT4-fs (loop3): inline encryption not supported [ 162.798310][ T7212] EXT4-fs (loop3): Ignoring removed oldalloc option [ 162.812058][ T6869] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0014/input/input20 [ 162.826453][ T7212] EXT4-fs (loop3): Ignoring removed bh option [ 162.826487][ T7212] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.873700][ T7212] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,nomblk_io_submit,usrquota,data_err=ignore,inlinecrypt,oldalloc,journal_dev=0x0000000000000003,noload,max_batch_time=0x0000000000000001,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 162.929110][ T26] audit: type=1800 audit(1771930738.621:6): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1014" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 162.951273][ T4912] attempt to access beyond end of device [ 162.951273][ T4912] loop1: rw=1, want=268435470, limit=64 [ 162.974223][ T4912] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 162.986272][ T6869] hid-udraw 0003:20D6:CB17.0014: hidraw0: USB HID v1.41 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 163.114054][ T6869] usb 5-1: USB disconnect, device number 11 [ 163.356962][ T4266] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.389317][ T7220] fido_id[7220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 163.422765][ T7230] comedi comedi3: das16m1: I/O port conflict (0x20,16) [ 163.747192][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.763066][ T4266] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 163.772314][ T7240] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1025'. [ 163.781759][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.819135][ T4266] usb 2-1: config 0 descriptor?? [ 164.290984][ T4266] wacom 0003:056A:00B0.0015: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 164.301793][ T7224] loop5: detected capacity change from 0 to 40427 [ 164.319612][ T7258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.338265][ T4266] wacom 0003:056A:00B0.0015: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0 [ 164.355879][ T7238] loop3: detected capacity change from 0 to 32768 [ 164.364213][ T4266] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.0015/input/input21 [ 164.410359][ T7224] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 164.430639][ T7238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1024 (7238) [ 164.443736][ T7224] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 164.491346][ T4225] usb 2-1: USB disconnect, device number 7 [ 164.510724][ T7238] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 164.544440][ T7238] BTRFS info (device loop3): using free space tree [ 164.560052][ T7261] loop2: detected capacity change from 0 to 4096 [ 164.576441][ T7224] F2FS-fs (loop5): Found nat_bits in checkpoint [ 164.591265][ T7238] BTRFS info (device loop3): has skinny extents [ 164.715972][ T7261] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 164.726077][ T7271] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.762749][ T7261] NILFS (loop2): mounting fs with errors [ 164.840653][ T7267] fido_id[7267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 164.864796][ T7224] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 164.895468][ T7224] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 165.023521][ T7238] BTRFS info (device loop3): enabling ssd optimizations [ 165.311392][ T7300] openvswitch: netlink: Actions may not be safe on all matching packets [ 165.370261][ T7302] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 165.484940][ T7304] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1046'. [ 166.034717][ T7312] loop5: detected capacity change from 0 to 32768 [ 166.093957][ T7312] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 166.102250][ T7312] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 166.122739][ T7312] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (first in block) [ 166.132199][ T7312] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 166.132199][ T7312] inode = 2 2073 [ 166.132199][ T7312] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 166.151150][ T7312] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 166.158649][ T7312] gfs2: fsid=syz:syz.s: File system withdrawn [ 166.166166][ T7312] CPU: 1 PID: 7312 Comm: syz.5.1042 Not tainted syzkaller #0 [ 166.173577][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.183661][ T7312] Call Trace: [ 166.186977][ T7312] [ 166.189947][ T7312] dump_stack_lvl+0x188/0x250 [ 166.194661][ T7312] ? kobject_uevent_env+0x371/0x890 [ 166.199900][ T7312] ? show_regs_print_info+0x20/0x20 [ 166.205138][ T7312] ? load_image+0x400/0x400 [ 166.209677][ T7312] ? kobject_uevent_env+0x371/0x890 [ 166.214935][ T7312] gfs2_withdraw+0x1149/0x1490 [ 166.219751][ T7312] ? gfs2_freeze_unlock+0x50/0x50 [ 166.224836][ T7312] ? gfs2_lm+0x240/0x240 [ 166.229115][ T7312] ? load_image+0x400/0x400 [ 166.233677][ T7312] ? gfs2_consist_inode_i+0xc0/0xe0 [ 166.238916][ T7312] gfs2_dirent_scan+0x525/0x650 [ 166.243805][ T7312] ? gfs2_meta_buffer+0x1b8/0x310 [ 166.248869][ T7312] ? gfs2_dirent_search+0x7f0/0x7f0 [ 166.254110][ T7312] gfs2_dirent_search+0x2e9/0x7f0 [ 166.259181][ T7312] ? gfs2_dirent_search+0x7f0/0x7f0 [ 166.264429][ T7312] ? __might_sleep+0xf0/0xf0 [ 166.269142][ T7312] ? gfs2_dir_search+0x220/0x220 [ 166.274123][ T7312] ? _raw_spin_unlock+0x24/0x40 [ 166.279107][ T7312] ? gfs2_glock_nq+0xcb0/0x1550 [ 166.284010][ T7312] gfs2_dir_search+0x49/0x220 [ 166.288739][ T7312] gfs2_lookupi+0x46c/0x600 [ 166.293278][ T7312] ? verify_lock_unused+0x140/0x140 [ 166.298521][ T7312] ? gfs2_lookup_simple+0x100/0x100 [ 166.303764][ T7312] ? gfs2_lookupi+0x40e/0x600 [ 166.308478][ T7312] ? crc32_le_base+0x755/0xcf0 [ 166.313299][ T7312] gfs2_lookup_simple+0xab/0x100 [ 166.318281][ T7312] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 166.323447][ T7312] ? lockref_put_or_lock+0x6e/0xb0 [ 166.328713][ T7312] init_journal+0x1c3/0x22f0 [ 166.333347][ T7312] ? __rwlock_init+0x140/0x140 [ 166.338245][ T7312] ? format_decode+0x19d/0x1300 [ 166.343154][ T7312] ? vsnprintf+0x14e/0x1c20 [ 166.347830][ T7312] ? end_bio_io_page+0x100/0x100 [ 166.352809][ T7312] ? vsnprintf+0x1b21/0x1c20 [ 166.357454][ T7312] ? snprintf+0xe5/0x140 [ 166.361728][ T7312] ? vscnprintf+0x80/0x80 [ 166.366115][ T7312] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 166.371298][ T7312] init_inodes+0xdb/0x320 [ 166.375691][ T7312] gfs2_fill_super+0x16b2/0x1f00 [ 166.380701][ T7312] ? gfs2_reconfigure+0xd30/0xd30 [ 166.385866][ T7312] ? gfs2_glock_nq_num+0x82/0x1b0 [ 166.390953][ T7312] ? sb_set_blocksize+0xa5/0xe0 [ 166.395855][ T7312] get_tree_bdev+0x3f1/0x610 [ 166.400502][ T7312] ? gfs2_reconfigure+0xd30/0xd30 [ 166.405722][ T7312] gfs2_get_tree+0x4d/0x1e0 [ 166.410263][ T7312] vfs_get_tree+0x88/0x270 [ 166.414722][ T7312] do_new_mount+0x24a/0xa40 [ 166.419280][ T7312] __se_sys_mount+0x2e3/0x3d0 [ 166.424021][ T7312] ? __x64_sys_mount+0xc0/0xc0 [ 166.428859][ T7312] ? lockdep_hardirqs_on+0x94/0x140 [ 166.434094][ T7312] ? __x64_sys_mount+0x1c/0xc0 [ 166.438909][ T7312] do_syscall_64+0x4c/0xa0 [ 166.443620][ T7312] ? clear_bhb_loop+0x30/0x80 [ 166.448464][ T7312] ? clear_bhb_loop+0x30/0x80 [ 166.453184][ T7312] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.459118][ T7312] RIP: 0033:0x7fec878968ca [ 166.463655][ T7312] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.483417][ T7312] RSP: 002b:00007fec85aeee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.492068][ T7312] RAX: ffffffffffffffda RBX: 00007fec85aeeee0 RCX: 00007fec878968ca [ 166.500174][ T7312] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 00007fec85aeeea0 [ 166.508180][ T7312] RBP: 0000200000000400 R08: 00007fec85aeeee0 R09: 0000000002a00041 [ 166.516361][ T7312] R10: 0000000002a00041 R11: 0000000000000246 R12: 0000200000000000 [ 166.524382][ T7312] R13: 00007fec85aeeea0 R14: 0000000000012645 R15: 0000200000000240 [ 166.532496][ T7312] [ 166.538025][ T7312] gfs2: fsid=syz:syz.s: can't lookup journal index: 0 [ 166.695871][ T7308] loop1: detected capacity change from 0 to 32768 [ 166.727016][ T7308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1048 (7308) [ 166.758937][ T7298] loop4: detected capacity change from 0 to 32768 [ 166.790208][ T7308] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 166.804535][ T7315] loop3: detected capacity change from 0 to 2048 [ 166.807556][ T7308] BTRFS info (device loop1): using free space tree [ 166.861297][ T7298] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1041 (7298) [ 166.906966][ T7308] BTRFS info (device loop1): has skinny extents [ 166.940479][ T7317] loop5: detected capacity change from 0 to 2048 [ 166.950413][ T7315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.975625][ T7315] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 167.004000][ T7315] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 167.072089][ T7317] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 167.153879][ T7317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.173334][ T4649] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4649) [ 167.319458][ T7309] loop2: detected capacity change from 0 to 32768 [ 167.417421][ T7308] BTRFS info (device loop1): enabling ssd optimizations [ 167.508680][ T7343] loop4: detected capacity change from 0 to 1024 [ 168.172876][ T7371] ALSA: mixer_oss: invalid OSS volume '' [ 168.198160][ T4907] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 168.388690][ T7378] loop3: detected capacity change from 0 to 256 [ 168.400059][ T7379] loop2: detected capacity change from 0 to 256 [ 168.432544][ T7373] loop5: detected capacity change from 0 to 1024 [ 168.501962][ T26] audit: type=1800 audit(1771930744.191:7): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1070" name=AB558DD927B972A7B6E39F9435C9CE7FF7 dev="loop2" ino=1048662 res=0 errno=0 [ 168.503784][ T7373] hfsplus: bad catalog entry type [ 168.580616][ T7378] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 168.867723][ T1266] hfsplus: b-tree write err: -5, ino 4 [ 169.070470][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1072'. [ 169.070549][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1072'. [ 169.306998][ T4266] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 169.557383][ T4266] usb 3-1: Using ep0 maxpacket: 8 [ 169.887275][ T4266] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 169.909778][ T7419] tipc: Enabling of bearer rejected, failed to enable media [ 170.097072][ T4266] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 170.106179][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.142852][ T4266] usb 3-1: Product: syz [ 170.160508][ T4266] usb 3-1: Manufacturer: syz [ 170.165236][ T4266] usb 3-1: SerialNumber: syz [ 170.198146][ T4266] usb 3-1: config 0 descriptor?? [ 170.239119][ T4266] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 170.256976][ T4266] usb 3-1: setting power ON [ 170.261805][ T4266] dvb-usb: bulk message failed: -22 (2/0) [ 170.277907][ T4266] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.308427][ T4266] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 170.317724][ T4266] usb 3-1: media controller created [ 170.352020][ T4266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.396734][ T4266] usb 3-1: selecting invalid altsetting 6 [ 170.415362][ T4266] usb 3-1: digital interface selection failed (-22) [ 170.471610][ T7386] dvb-usb: bulk message failed: -22 (3/0) [ 170.486240][ T4266] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 170.507118][ T7386] dvb-usb: bulk message failed: -22 (3/0) [ 170.557470][ T4266] usb 3-1: setting power OFF [ 170.574548][ T4266] dvb-usb: bulk message failed: -22 (2/0) [ 170.581831][ T4266] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 170.591932][ T4266] (NULL device *): no alternate interface [ 170.669574][ T4266] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 170.698133][ T4266] usb 3-1: USB disconnect, device number 11 [ 170.847099][ T4540] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 170.872746][ T4536] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.049676][ T7462] FAT-fs (loop5): Directory bread(block 64) failed [ 171.067656][ T7462] FAT-fs (loop5): Directory bread(block 65) failed [ 171.074423][ T7462] FAT-fs (loop5): Directory bread(block 66) failed [ 171.115401][ T7462] FAT-fs (loop5): Directory bread(block 67) failed [ 171.123021][ T4540] usb 4-1: Using ep0 maxpacket: 16 [ 171.143484][ T7462] FAT-fs (loop5): Directory bread(block 68) failed [ 171.158802][ T7462] FAT-fs (loop5): Directory bread(block 69) failed [ 171.166994][ T4536] usb 2-1: Using ep0 maxpacket: 8 [ 171.196174][ T7462] FAT-fs (loop5): Directory bread(block 70) failed [ 171.208346][ T7462] FAT-fs (loop5): Directory bread(block 71) failed [ 171.214997][ T7462] FAT-fs (loop5): Directory bread(block 72) failed [ 171.222800][ T7462] FAT-fs (loop5): Directory bread(block 73) failed [ 171.277835][ T4540] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 171.296363][ T4540] usb 4-1: config 0 has no interface number 0 [ 171.303310][ T7452] set_capacity_and_notify: 2 callbacks suppressed [ 171.303342][ T7452] loop4: detected capacity change from 0 to 32768 [ 171.307620][ T4540] usb 4-1: config 0 interface 29 altsetting 8 endpoint 0xF has invalid maxpacket 608, setting to 64 [ 171.327822][ T4536] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 171.349715][ T4536] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.356408][ T4536] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 171.381040][ T4540] usb 4-1: config 0 interface 29 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 171.397228][ T4536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.434665][ T4540] usb 4-1: config 0 interface 29 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1023 [ 171.446068][ T4540] usb 4-1: config 0 interface 29 has no altsetting 0 [ 171.453869][ T4536] usb 2-1: config 0 descriptor?? [ 171.463449][ T7452] XFS (loop4): Mounting V5 Filesystem [ 171.552599][ T7452] XFS (loop4): Ending clean mount [ 171.641923][ T4195] XFS (loop4): Unmounting Filesystem [ 171.697281][ T4540] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=44.da [ 171.716891][ T4540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.752808][ T4540] usb 4-1: Product: syz [ 171.759856][ T4540] usb 4-1: Manufacturer: syz [ 171.764653][ T4540] usb 4-1: SerialNumber: syz [ 171.803541][ T4540] usb 4-1: config 0 descriptor?? [ 171.839405][ T7447] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.891596][ T4540] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 171.939140][ T7466] loop2: detected capacity change from 0 to 32768 [ 171.991100][ T4536] glorious 0003:258A:0036.0016: item fetching failed at offset 3/4 [ 172.039518][ T4536] glorious: probe of 0003:258A:0036.0016 failed with error -22 [ 172.090713][ T9] usb 4-1: Failed to submit usb control message: -71 [ 172.138601][ T9] usb 4-1: unable to send the bmi data to the device: -71 [ 172.147488][ T4536] usb 4-1: USB disconnect, device number 12 [ 172.155857][ T7466] XFS (loop2): Mounting V5 Filesystem [ 172.199743][ T5252] usb 2-1: USB disconnect, device number 8 [ 172.239728][ T9] usb 4-1: unable to get target info from device [ 172.297548][ T9] usb 4-1: could not get target info (-71) [ 172.328976][ T7466] XFS (loop2): Ending clean mount [ 172.346792][ T9] usb 4-1: could not probe fw (-71) [ 172.416241][ T7466] XFS (loop2): Quotacheck needed: Please wait. [ 172.515947][ T7466] XFS (loop2): Quotacheck: Done. [ 172.595163][ T4194] XFS (loop2): Unmounting Filesystem [ 172.744818][ T7520] loop4: detected capacity change from 0 to 4096 [ 172.853967][ T7520] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 173.361188][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 173.879087][ T7561] loop4: detected capacity change from 0 to 16 [ 173.922292][ T7563] device macsec1 entered promiscuous mode [ 173.997232][ T7561] erofs: (device loop4): mounted with root inode @ nid 36. [ 174.027618][ T26] audit: type=1800 audit(1771930749.721:8): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1143" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 174.070093][ T7540] loop1: detected capacity change from 0 to 32768 [ 174.157360][ T7544] loop2: detected capacity change from 0 to 32768 [ 174.366250][ T7544] ERROR: (device loop2): diWrite: ixpxd invalid [ 174.366250][ T7544] [ 174.403926][ T7544] ERROR: (device loop2): remounting filesystem as read-only [ 174.455384][ T7544] ERROR: (device loop2): txCommit: [ 174.455384][ T7544] [ 174.475332][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 174.522870][ T7544] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 174.522870][ T7544] [ 174.586914][ T7544] ialloc: diAlloc returned -5! [ 174.620503][ T7583] loop1: detected capacity change from 0 to 1024 [ 174.784517][ T7583] hfsplus: bad catalog entry type [ 174.853159][ T9] hfsplus: b-tree write err: -5, ino 4 [ 175.057300][ T7594] loop1: detected capacity change from 0 to 1764 [ 175.136476][ T7594] isofs: isofs_export_get_parent(): child directory not normalized! [ 175.448546][ T7610] loop2: detected capacity change from 0 to 512 [ 175.509495][ T7610] EXT4-fs (loop2): Ignoring removed bh option [ 175.515691][ T7610] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.563575][ T7586] loop3: detected capacity change from 0 to 32768 [ 175.582684][ T7610] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 175.656968][ T7586] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1154 (7586) [ 175.705275][ T7586] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 175.715362][ T7586] BTRFS info (device loop3): setting nodatasum [ 175.723878][ T7610] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1166: Invalid block bitmap block 0 in block_group 0 [ 175.737706][ T7586] BTRFS info (device loop3): using free space tree [ 175.744252][ T7586] BTRFS info (device loop3): has skinny extents [ 175.751144][ T7610] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 175.810802][ T7610] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1166: attempt to clear invalid blocks 983261 len 1 [ 175.977678][ T7595] non-latin1 character 0xffff found in JFS file name [ 175.984855][ T7595] mount with iocharset=utf8 to access [ 175.997980][ T7610] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.1166: Invalid inode table block 0 in block_group 0 [ 176.105077][ T7610] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 176.159690][ T7644] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1172'. [ 176.173966][ T7610] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 176.173999][ T7586] BTRFS info (device loop3): enabling ssd optimizations [ 176.271627][ T7610] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.1166: Invalid inode table block 0 in block_group 0 [ 176.487405][ T7610] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 176.582350][ T7610] EXT4-fs error (device loop2): ext4_truncate:4279: inode #11: comm syz.2.1166: mark_inode_dirty error [ 176.613744][ T7657] set_capacity_and_notify: 2 callbacks suppressed [ 176.613763][ T7657] loop5: detected capacity change from 0 to 1024 [ 176.645490][ T7610] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 176.696132][ T7610] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.1166: Invalid inode table block 0 in block_group 0 [ 176.731675][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 176.768353][ T7610] EXT4-fs (loop2): 1 truncate cleaned up [ 176.774164][ T7610] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,grpquota,bh,noblock_validity,,errors=continue. Quota mode: writeback. [ 176.796786][ T7657] hfsplus: bad catalog file entry [ 176.805944][ T7657] hfsplus: failed to load root directory [ 176.868837][ T7657] overlayfs: unrecognized mount option "verity=on" or missing value [ 177.139059][ T7673] loop5: detected capacity change from 0 to 256 [ 177.291775][ T7680] loop2: detected capacity change from 0 to 512 [ 177.430865][ T7685] loop3: detected capacity change from 0 to 64 [ 177.464113][ T7680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.573384][ T7693] loop1: detected capacity change from 0 to 1024 [ 177.630325][ T7696] mmap: syz.5.1196 (7696) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 177.632197][ T7680] EXT4-fs warning (device loop2): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 177.743277][ T4912] hfsplus: b-tree write err: -5, ino 4 [ 178.054122][ T7706] loop3: detected capacity change from 0 to 4096 [ 178.129530][ T7706] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 178.476598][ T7724] loop4: detected capacity change from 0 to 64 [ 178.527232][ T4653] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 178.596086][ T7732] loop2: detected capacity change from 0 to 1024 [ 178.848724][ T7748] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1220'. [ 178.937109][ T1108] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 178.967199][ T4653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.998748][ T4653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.039394][ T4653] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 179.086710][ T4653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.134602][ T4653] usb 6-1: config 0 descriptor?? [ 179.339465][ T7744] loop4: detected capacity change from 0 to 32768 [ 179.379126][ T1108] usb 4-1: config 0 has an invalid interface number: 221 but max is 0 [ 179.396904][ T1108] usb 4-1: config 0 has no interface number 0 [ 179.416682][ T1108] usb 4-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.434568][ T1108] usb 4-1: config 0 interface 221 has no altsetting 0 [ 179.441505][ T1108] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 179.457159][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.478035][ T1108] usb 4-1: config 0 descriptor?? [ 179.659910][ T4653] arvo 0003:1E7D:30D4.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 179.857072][ T4653] arvo 0003:1E7D:30D4.0017: couldn't init struct arvo_device [ 179.877135][ T4653] arvo 0003:1E7D:30D4.0017: couldn't install keyboard [ 179.898139][ T4653] arvo: probe of 0003:1E7D:30D4.0017 failed with error -71 [ 179.924542][ T4653] usb 6-1: USB disconnect, device number 4 [ 179.936994][ T4538] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 179.980271][ T1108] uclogic 0003:5543:0522.0018: unknown main item tag 0x2 [ 180.004384][ T1108] uclogic 0003:5543:0522.0018: No inputs registered, leaving [ 180.040027][ T1108] uclogic 0003:5543:0522.0018: hidraw0: USB HID v0.02 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input221 [ 180.090516][ T7783] loop4: detected capacity change from 0 to 1024 [ 180.109488][ T7781] fido_id[7781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 180.171622][ T7768] [ 180.171622][ T7768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.171622][ T7768] [ 180.223498][ T13] usb 4-1: USB disconnect, device number 13 [ 180.248007][ T7768] ERROR: (device loop2): diWrite: ixpxd invalid [ 180.248007][ T7768] [ 180.267346][ T7768] ERROR: (device loop2): txCommit: [ 180.267346][ T7768] [ 180.354154][ T7784] fido_id[7784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 180.375143][ T4194] [ 180.375143][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.375143][ T4194] [ 180.388040][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.408442][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.419151][ T4538] usb 2-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 180.436486][ T4194] [ 180.436486][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.436486][ T4194] [ 180.458359][ T4538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.476738][ T4538] usb 2-1: config 0 descriptor?? [ 180.525532][ T7786] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.593939][ T7786] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz.4.1238: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 180.626045][ T7786] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.1238: directory missing '..' [ 180.952205][ T4538] wacom 0003:056A:030E.0019: Unknown device_type for 'HID 056a:030e'. Assuming pen. [ 180.988809][ T4538] wacom 0003:056A:030E.0019: hidraw0: USB HID v0.08 Device [HID 056a:030e] on usb-dummy_hcd.1-1/input0 [ 181.031786][ T4538] input: Wacom Intuos S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:030E.0019/input/input24 [ 181.176367][ T4538] usb 2-1: USB disconnect, device number 9 [ 181.367232][ T1108] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 181.374067][ T7824] fido_id[7824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 181.580127][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1257'. [ 181.626693][ T7821] set_capacity_and_notify: 2 callbacks suppressed [ 181.626710][ T7821] loop3: detected capacity change from 0 to 32768 [ 181.721545][ T7821] non-latin1 character 0xffff found in JFS file name [ 181.737616][ T7821] mount with iocharset=utf8 to access [ 181.759473][ T7833] device macsec1 entered promiscuous mode [ 181.827240][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.849877][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.870254][ T1108] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 181.890086][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.938390][ T1108] usb 3-1: config 0 descriptor?? [ 182.200903][ T7845] loop4: detected capacity change from 0 to 1024 [ 182.224014][ T7847] loop3: detected capacity change from 0 to 128 [ 182.323444][ T7845] hfsplus: bad catalog file entry [ 182.363874][ T7845] hfsplus: failed to load root directory [ 182.407333][ T4185] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 182.420736][ T1108] arvo 0003:1E7D:30D4.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 182.433582][ T7845] overlayfs: unrecognized mount option "verity=on" or missing value [ 182.450362][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 182.639519][ T1108] arvo 0003:1E7D:30D4.001A: couldn't init struct arvo_device [ 182.657087][ T1108] arvo 0003:1E7D:30D4.001A: couldn't install keyboard [ 182.669203][ T7857] loop4: detected capacity change from 0 to 2048 [ 182.692101][ T1108] arvo: probe of 0003:1E7D:30D4.001A failed with error -71 [ 182.693500][ T7835] loop5: detected capacity change from 0 to 32768 [ 182.728456][ T7857] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 182.749925][ T1108] usb 3-1: USB disconnect, device number 12 [ 182.783794][ T7857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.845168][ T7835] XFS (loop5): Mounting V5 Filesystem [ 182.922920][ T7867] fido_id[7867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 182.983251][ T7835] XFS (loop5): Ending clean mount [ 183.003986][ T7835] XFS (loop5): Quotacheck needed: Please wait. [ 183.161174][ T7835] XFS (loop5): Quotacheck: Done. [ 183.276141][ T5233] XFS (loop5): Unmounting Filesystem [ 183.305858][ T7878] loop4: detected capacity change from 0 to 512 [ 183.353549][ T7855] loop3: detected capacity change from 0 to 32768 [ 183.383297][ T7878] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.411684][ T7878] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 183.485686][ T7881] loop1: detected capacity change from 0 to 1024 [ 183.556566][ T7878] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 183.566187][ T7878] System zones: 0-2, 18-18, 34-35 [ 183.576465][ T7878] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.611112][ T155] hfsplus: b-tree write err: -5, ino 4 [ 183.634928][ T7889] loop2: detected capacity change from 0 to 256 [ 183.720850][ T7878] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 183.766352][ T7878] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 183.796473][ T7855] XFS (loop3): Mounting V5 Filesystem [ 183.842778][ T26] audit: type=1800 audit(1771930759.531:9): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1280" name="file1" dev="loop2" ino=1048711 res=0 errno=0 [ 183.867098][ T7878] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 183.913628][ T7889] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 183.934492][ T7878] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 184.042619][ T7855] XFS (loop3): Ending clean mount [ 184.053882][ T7855] XFS (loop3): Quotacheck needed: Please wait. [ 184.228878][ T7855] XFS (loop3): Quotacheck: Done. [ 184.381758][ T4185] XFS (loop3): Unmounting Filesystem [ 184.387607][ T7905] IPVS: Error joining to the multicast group [ 184.576153][ T7893] loop1: detected capacity change from 0 to 32768 [ 184.682625][ T7893] ERROR: (device loop1): diWrite: ixpxd invalid [ 184.682625][ T7893] [ 184.715287][ T7893] ERROR: (device loop1): remounting filesystem as read-only [ 184.717608][ T7898] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1281 (7898) [ 184.747100][ T3161] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 184.787588][ T7898] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 184.797545][ T7893] ERROR: (device loop1): txCommit: [ 184.797545][ T7893] [ 184.813268][ T7898] BTRFS info (device loop5): setting nodatasum [ 184.832515][ T7893] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 184.832515][ T7893] [ 184.844460][ T7893] ialloc: diAlloc returned -5! [ 184.853546][ T7898] BTRFS info (device loop5): using free space tree [ 184.886892][ T7898] BTRFS info (device loop5): has skinny extents [ 185.107262][ T3161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.128376][ T3161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.142114][ T3161] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 185.151781][ T3161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.164967][ T3161] usb 5-1: config 0 descriptor?? [ 185.188687][ T7898] BTRFS info (device loop5): enabling ssd optimizations [ 185.265500][ T13] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 185.652053][ T3161] arvo 0003:1E7D:30D4.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 185.731357][ T13] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 185.751263][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.790767][ T13] usb 3-1: config 0 descriptor?? [ 185.812856][ T154] hfsplus: b-tree write err: -5, ino 4 [ 185.857078][ T3161] arvo 0003:1E7D:30D4.001B: couldn't init struct arvo_device [ 185.864546][ T3161] arvo 0003:1E7D:30D4.001B: couldn't install keyboard [ 185.869201][ T13] ums-jumpshot 3-1:0.0: USB Mass Storage device detected [ 185.907665][ T3161] arvo: probe of 0003:1E7D:30D4.001B failed with error -71 [ 185.927163][ T3161] usb 5-1: USB disconnect, device number 12 [ 185.968475][ T13] ums-jumpshot 3-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 186.040964][ T7947] fido_id[7947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 186.074748][ T13] usb 3-1: USB disconnect, device number 13 [ 186.180904][ T7949] SQUASHFS error: zlib decompression failed, data probably corrupt [ 186.203296][ T7949] SQUASHFS error: Failed to read block 0x9b: -5 [ 186.221528][ T7949] SQUASHFS error: Unable to read metadata cache entry [99] [ 186.230566][ T7949] SQUASHFS error: Unable to read inode 0x127 [ 186.245522][ T7942] XFS (loop1): Mounting V5 Filesystem [ 186.319225][ T7942] XFS (loop1): Ending clean mount [ 186.340822][ T7942] XFS (loop1): Quotacheck needed: Please wait. [ 186.582867][ T7942] XFS (loop1): Quotacheck: Done. [ 186.629938][ T7969] set_capacity_and_notify: 7 callbacks suppressed [ 186.629956][ T7969] loop3: detected capacity change from 0 to 512 [ 186.685248][ T7967] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 186.696693][ T7971] Unable to read rock-ridge attributes [ 186.741148][ T7971] Unable to read rock-ridge attributes [ 186.757393][ T4188] XFS (loop1): Unmounting Filesystem [ 186.793209][ T7969] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.332347][ T7994] loop3: detected capacity change from 0 to 2048 [ 187.409928][ T7999] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.642957][ T26] audit: type=1326 audit(1771930763.331:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb812bc629 code=0x7ffc0000 [ 187.665222][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.735794][ T8011] syz.4.1317 uses obsolete (PF_INET,SOCK_PACKET) [ 187.757635][ T26] audit: type=1326 audit(1771930763.371:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb812bc629 code=0x7ffc0000 [ 187.843458][ T8016] loop1: detected capacity change from 0 to 256 [ 187.887772][ T26] audit: type=1326 audit(1771930763.371:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb812bc629 code=0x7ffc0000 [ 187.926593][ T26] audit: type=1326 audit(1771930763.371:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb812bc629 code=0x7ffc0000 [ 187.953298][ T8022] loop5: detected capacity change from 0 to 512 [ 187.960892][ T8016] exfat: Deprecated parameter 'namecase' [ 188.004853][ T8016] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 188.063936][ T26] audit: type=1326 audit(1771930763.371:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb812bc629 code=0x7ffc0000 [ 188.117889][ T26] audit: type=1326 audit(1771930763.371:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb812bc629 code=0x7ffc0000 [ 188.206470][ T26] audit: type=1326 audit(1771930763.371:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb812bc629 code=0x7ffc0000 [ 188.268400][ T8022] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.299303][ T8026] loop2: detected capacity change from 0 to 4096 [ 188.324573][ T8026] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 188.421807][ T8026] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 188.506501][ T8026] ntfs: volume version 3.1. [ 188.586313][ T8042] loop3: detected capacity change from 0 to 4096 [ 188.773931][ T8042] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,journal_ioprio=0x0000000000000001,resgid=0x0000000000000000,init_itable,data_err=abort,quota,errors=remount-ro,. Quota mode: writeback. [ 189.022910][ T8042] EXT4-fs error (device loop3): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.3.1340: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 189.104061][ T8061] loop2: detected capacity change from 0 to 4096 [ 189.122609][ T8061] EXT4-fs (loop2): Ignoring removed nobh option [ 189.132389][ T8042] EXT4-fs (loop3): Remounting filesystem read-only [ 189.141244][ T8042] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #12: comm syz.3.1340: directory missing '..' [ 189.184373][ T8042] EXT4-fs (loop3): Remounting filesystem read-only [ 189.438308][ T8061] EXT4-fs (loop2): Test dummy encryption mode enabled [ 189.464007][ T8061] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,nobh,dioread_nolock,test_dummy_encryption,nodelalloc,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 189.488486][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.763128][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 189.951735][ T8060] loop4: detected capacity change from 0 to 32768 [ 190.085435][ T8060] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 190.219834][ T8060] (syz.4.1337,8060,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 190.237376][ T8086] loop3: detected capacity change from 0 to 32768 [ 190.306557][ T8086] JFS: Invalid stbl[2] = -55 for inode 2, block = 0 [ 190.362628][ T8060] (syz.4.1337,8060,1):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 190.435125][ T8060] (syz.4.1337,8060,1):ocfs2_unlink:990 ERROR: status = -5 [ 190.456594][ T8068] loop1: detected capacity change from 0 to 32768 [ 190.487284][ T8060] (syz.4.1337,8060,1):ocfs2_unlink:1042 ERROR: status = -5 [ 190.584855][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 190.599233][ T8110] exfat: Deprecated parameter 'namecase' [ 190.688237][ T8068] (syz.1.1342,8068,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 190.713233][ T8110] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 190.750082][ T8068] (syz.1.1342,8068,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 190.935760][ T8068] JBD2: Ignoring recovery information on journal [ 191.101402][ T8122] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.121484][ T8068] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 191.177037][ T4538] Bluetooth: hci3: command 0x0406 tx timeout [ 191.190176][ T4538] Bluetooth: hci1: command 0x0406 tx timeout [ 191.206505][ T4538] Bluetooth: hci2: command 0x0406 tx timeout [ 191.216628][ T4538] Bluetooth: hci4: command 0x0406 tx timeout [ 191.286947][ T1108] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 191.494883][ T8134] __ntfs_warning: 5 callbacks suppressed [ 191.494902][ T8134] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 191.543389][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 191.577527][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 191.643164][ T8144] set_capacity_and_notify: 3 callbacks suppressed [ 191.643181][ T8144] loop2: detected capacity change from 0 to 512 [ 191.700861][ T8134] ntfs: volume version 3.1. [ 191.717180][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.737956][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.756882][ T1108] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 191.780412][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.812007][ T8134] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-6. You might want to try to use the mount option nls=utf8. [ 191.836513][ T8144] EXT4-fs (loop2): 1 truncate cleaned up [ 191.846516][ T8144] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 191.860331][ T1108] usb 4-1: config 0 descriptor?? [ 191.864872][ T8134] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 191.974961][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 192.339122][ T1108] zydacron 0003:13EC:0006.001C: item fetching failed at offset 0/2 [ 192.357723][ T1108] zydacron 0003:13EC:0006.001C: parse failed [ 192.363896][ T1108] zydacron: probe of 0003:13EC:0006.001C failed with error -22 [ 192.434670][ T8162] loop5: detected capacity change from 0 to 16 [ 192.479806][ T8139] loop4: detected capacity change from 0 to 32768 [ 192.517068][ T8162] erofs: (device loop5): mounted with root inode @ nid 36. [ 192.578308][ T1108] usb 4-1: USB disconnect, device number 14 [ 192.585946][ T8162] erofs: (device loop5): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 10 of nid 36 [ 192.640484][ T8139] ERROR: (device loop4): diWrite: ixpxd invalid [ 192.640484][ T8139] [ 192.673500][ T8139] ERROR: (device loop4): remounting filesystem as read-only [ 192.717174][ T8139] ERROR: (device loop4): txCommit: [ 192.717174][ T8139] [ 192.796404][ T8139] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 192.796404][ T8139] [ 192.827838][ T8139] ialloc: diAlloc returned -5! [ 192.883172][ T8151] loop1: detected capacity change from 0 to 32768 [ 193.079162][ T8165] loop2: detected capacity change from 0 to 32768 [ 193.178931][ T8165] (syz.2.1384,8165,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 193.267640][ T8165] (syz.2.1384,8165,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 193.368104][ T8165] JBD2: Ignoring recovery information on journal [ 193.524695][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1386'. [ 193.535848][ T8165] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 193.554153][ T8191] UBIFS error (pid: 8191): cannot open "upperdir=./file1,", error -22 [ 193.555071][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1386'. [ 193.631338][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1386'. [ 193.712987][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 193.792758][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 193.917127][ T1108] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 193.930129][ T8202] loop5: detected capacity change from 0 to 8192 [ 194.017177][ T8202] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 194.062042][ T8202] REISERFS (device loop5): using ordered data mode [ 194.097179][ T8202] reiserfs: using flush barriers [ 194.107801][ T8202] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.127277][ T8202] REISERFS (device loop5): checking transaction log (loop5) [ 194.136020][ T8202] REISERFS (device loop5): Using r5 hash to sort names [ 194.144495][ T8202] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 194.158832][ T8202] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 194.222987][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.229400][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.239594][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.342644][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.352667][ T1108] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 194.362161][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.373422][ T1108] usb 4-1: config 0 descriptor?? [ 194.486940][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 194.607066][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.623552][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.635246][ T23] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 194.644568][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.661244][ T23] usb 2-1: config 0 descriptor?? [ 194.785800][ T8220] loop4: detected capacity change from 0 to 256 [ 194.869193][ T1108] thrustmaster 0003:044F:B653.001D: unknown main item tag 0x0 [ 194.900833][ T1108] thrustmaster 0003:044F:B653.001D: unknown main item tag 0x0 [ 194.925941][ T8220] FAT-fs (loop4): Directory bread(block 64) failed [ 194.945611][ T8230] loop5: detected capacity change from 0 to 512 [ 194.947297][ T1108] thrustmaster 0003:044F:B653.001D: unknown main item tag 0x0 [ 194.959703][ T8220] FAT-fs (loop4): Directory bread(block 65) failed [ 194.959825][ T8220] FAT-fs (loop4): Directory bread(block 66) failed [ 194.959859][ T8220] FAT-fs (loop4): Directory bread(block 67) failed [ 194.960023][ T8220] FAT-fs (loop4): Directory bread(block 68) failed [ 194.992481][ T8220] FAT-fs (loop4): Directory bread(block 69) failed [ 194.997393][ T1108] thrustmaster 0003:044F:B653.001D: unknown main item tag 0x0 [ 195.006672][ T8220] FAT-fs (loop4): Directory bread(block 70) failed [ 195.010114][ T1108] thrustmaster 0003:044F:B653.001D: unknown main item tag 0x0 [ 195.035444][ T8220] FAT-fs (loop4): Directory bread(block 71) failed [ 195.059210][ T1108] thrustmaster 0003:044F:B653.001D: hidraw0: USB HID v0.01 Device [HID 044f:b653] on usb-dummy_hcd.3-1/input0 [ 195.072080][ T1108] thrustmaster 0003:044F:B653.001D: no inputs found [ 195.080010][ T8220] FAT-fs (loop4): Directory bread(block 72) failed [ 195.088909][ T8220] FAT-fs (loop4): Directory bread(block 73) failed [ 195.094859][ T1108] usb 4-1: USB disconnect, device number 15 [ 195.101691][ T8230] EXT4-fs (loop5): 1 truncate cleaned up [ 195.118074][ T8230] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 195.140690][ T23] macally 0003:060B:0001.001E: unknown main item tag 0x0 [ 195.166211][ T23] macally 0003:060B:0001.001E: unknown main item tag 0x0 [ 195.217532][ T23] macally 0003:060B:0001.001E: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.1-1/input0 [ 195.276373][ T8238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.391450][ T1108] usb 2-1: USB disconnect, device number 10 [ 195.410412][ T8241] comedi comedi3: das16m1: I/O port conflict (0x20,16) [ 195.445401][ T8239] fido_id[8239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 195.477057][ T4536] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 195.545738][ T8245] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1421'. [ 195.626565][ T8248] fido_id[8248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 195.767722][ T8250] loop3: detected capacity change from 0 to 8192 [ 195.824261][ T8250] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 195.834671][ T8250] REISERFS (device loop3): using ordered data mode [ 195.842965][ T8250] reiserfs: using flush barriers [ 195.853842][ T8250] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.870993][ T8250] REISERFS (device loop3): checking transaction log (loop3) [ 195.879911][ T8250] REISERFS (device loop3): Using r5 hash to sort names [ 195.887252][ T4536] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 195.906939][ T4536] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.930005][ T8250] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 195.961502][ T4536] usb 3-1: config 0 has no interface number 0 [ 195.967995][ T4536] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 195.974460][ T8254] loop4: detected capacity change from 0 to 64 [ 195.977890][ T8250] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 195.993135][ T4536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.010487][ T4536] usb 3-1: config 0 descriptor?? [ 196.089482][ T4536] usb 3-1: bad CDC descriptors [ 196.218486][ T4912] attempt to access beyond end of device [ 196.218486][ T4912] loop4: rw=1, want=268435470, limit=64 [ 196.252662][ T4912] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 196.306215][ T4536] usb 3-1: USB disconnect, device number 14 [ 196.468605][ T8265] netlink: 'syz.5.1426': attribute type 29 has an invalid length. [ 196.492785][ T8265] netlink: 'syz.5.1426': attribute type 29 has an invalid length. [ 196.521675][ T8265] netlink: 'syz.5.1426': attribute type 29 has an invalid length. [ 196.660485][ T8271] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.723131][ T8273] loop5: detected capacity change from 0 to 256 [ 196.820944][ T8273] FAT-fs (loop5): Directory bread(block 64) failed [ 196.846529][ T8273] FAT-fs (loop5): Directory bread(block 65) failed [ 196.889777][ T8273] FAT-fs (loop5): Directory bread(block 66) failed [ 196.913665][ T8273] FAT-fs (loop5): Directory bread(block 67) failed [ 196.967041][ T8273] FAT-fs (loop5): Directory bread(block 68) failed [ 196.988726][ T8273] FAT-fs (loop5): Directory bread(block 69) failed [ 196.995414][ T8273] FAT-fs (loop5): Directory bread(block 70) failed [ 197.032838][ T8261] loop3: detected capacity change from 0 to 32768 [ 197.046998][ T8273] FAT-fs (loop5): Directory bread(block 71) failed [ 197.053710][ T8273] FAT-fs (loop5): Directory bread(block 72) failed [ 197.078075][ T8273] FAT-fs (loop5): Directory bread(block 73) failed [ 197.128895][ T8282] loop4: detected capacity change from 0 to 1024 [ 197.195819][ T8261] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 197.201169][ T3161] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 197.248808][ T8282] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 197.278596][ T8261] (syz.3.1424,8261,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 197.294997][ T8282] EXT4-fs (loop4): inline encryption not supported [ 197.305180][ T8282] EXT4-fs (loop4): Ignoring removed oldalloc option [ 197.314076][ T8282] EXT4-fs (loop4): Ignoring removed bh option [ 197.327328][ T8261] (syz.3.1424,8261,0):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 197.335690][ T8282] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.352816][ T8261] (syz.3.1424,8261,0):ocfs2_unlink:990 ERROR: status = -5 [ 197.389417][ T8261] (syz.3.1424,8261,0):ocfs2_unlink:1042 ERROR: status = -5 [ 197.404049][ T8282] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,nomblk_io_submit,usrquota,data_err=ignore,inlinecrypt,oldalloc,journal_dev=0x0000000000000003,noload,max_batch_time=0x0000000000000001,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 197.504377][ T26] audit: type=1800 audit(1771930773.191:17): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1436" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 197.664033][ T8288] loop1: detected capacity change from 0 to 32768 [ 197.714617][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 197.812397][ T8288] (syz.1.1439,8288,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x62b9e51c, computed 0xc1700438. Applying ECC. [ 197.826980][ T8288] (syz.1.1439,8288,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x62b9e51c, computed 0x98b843da [ 197.839895][ T8288] (syz.1.1439,8288,1):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 352 [ 197.849824][ T8288] (syz.1.1439,8288,1):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 197.868411][ T8288] (syz.1.1439,8288,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 197.876280][ T8288] (syz.1.1439,8288,1):ocfs2_find_entry_el:728 ERROR: reading directory 66, offset 0 [ 197.907079][ T3161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.925337][ T3161] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 197.934911][ T8288] (syz.1.1439,8288,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 197.944817][ T8288] (syz.1.1439,8288,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 197.944856][ T8288] (syz.1.1439,8288,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 197.966255][ T8288] (syz.1.1439,8288,1):ocfs2_initialize_super:2281 ERROR: status = -22 [ 197.974511][ T8288] (syz.1.1439,8288,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 197.983968][ T3161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.042154][ T3161] usb 3-1: config 0 descriptor?? [ 198.325024][ T8291] loop5: detected capacity change from 0 to 32768 [ 198.412896][ T8291] (syz.5.1438,8291,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.434644][ T8300] loop3: detected capacity change from 0 to 8192 [ 198.453683][ T8291] (syz.5.1438,8291,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.494758][ T8300] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 198.549011][ T3161] thrustmaster 0003:044F:B653.001F: unknown main item tag 0x0 [ 198.556560][ T3161] thrustmaster 0003:044F:B653.001F: unknown main item tag 0x0 [ 198.564496][ T8291] JBD2: Ignoring recovery information on journal [ 198.576931][ T3161] thrustmaster 0003:044F:B653.001F: unknown main item tag 0x0 [ 198.584470][ T3161] thrustmaster 0003:044F:B653.001F: unknown main item tag 0x0 [ 198.602116][ T8300] REISERFS (device loop3): using ordered data mode [ 198.607129][ T3161] thrustmaster 0003:044F:B653.001F: unknown main item tag 0x0 [ 198.618002][ T3161] thrustmaster 0003:044F:B653.001F: hidraw0: USB HID v0.01 Device [HID 044f:b653] on usb-dummy_hcd.2-1/input0 [ 198.631447][ T3161] thrustmaster 0003:044F:B653.001F: no inputs found [ 198.683614][ T8300] reiserfs: using flush barriers [ 198.747013][ T8300] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.792859][ T8291] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 198.812763][ T8300] REISERFS (device loop3): checking transaction log (loop3) [ 198.813578][ T3161] usb 3-1: USB disconnect, device number 15 [ 198.857017][ T8297] loop1: detected capacity change from 0 to 32768 [ 198.914859][ T8303] fido_id[8303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 199.055144][ T8298] loop4: detected capacity change from 0 to 32768 [ 199.083174][ T5233] ocfs2: Unmounting device (7,5) on (node local) [ 199.149541][ T8300] REISERFS (device loop3): Using tea hash to sort names [ 199.204454][ T8300] REISERFS warning (device loop3): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 199.327350][ T8300] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 199.382373][ T8298] XFS (loop4): Mounting V5 Filesystem [ 199.490497][ T8298] XFS (loop4): Ending clean mount [ 199.663840][ T4195] XFS (loop4): Unmounting Filesystem [ 199.669422][ T8322] loop1: detected capacity change from 0 to 1024 [ 199.716149][ T8329] ALSA: mixer_oss: invalid OSS volume '' [ 199.910375][ T9] hfsplus: b-tree write err: -5, ino 4 [ 200.065255][ T8342] loop3: detected capacity change from 0 to 128 [ 200.436726][ T8357] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 201.505458][ T8378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1473 (8378) [ 201.601324][ T8378] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 201.660546][ T8378] BTRFS info (device loop4): using free space tree [ 201.679435][ T8378] BTRFS info (device loop4): has skinny extents [ 201.723178][ T26] audit: type=1800 audit(1771930777.411:18): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1487" name=AB558DD927B972A7B6E39F9435C9CE7FF7 dev="loop1" ino=1048737 res=0 errno=0 [ 202.173422][ T8444] set_capacity_and_notify: 5 callbacks suppressed [ 202.173441][ T8444] loop2: detected capacity change from 0 to 256 [ 202.194227][ T8378] BTRFS info (device loop4): enabling ssd optimizations [ 202.234288][ T8435] loop3: detected capacity change from 0 to 32768 [ 202.272881][ T8435] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 202.281266][ T8435] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 202.289965][ T8435] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (first in block) [ 202.299686][ T8435] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 202.299686][ T8435] inode = 2 2073 [ 202.299686][ T8435] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 202.318292][ T8435] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 202.325859][ T8435] gfs2: fsid=syz:syz.s: File system withdrawn [ 202.332008][ T8435] CPU: 0 PID: 8435 Comm: syz.3.1496 Not tainted syzkaller #0 [ 202.339428][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.349562][ T8435] Call Trace: [ 202.352865][ T8435] [ 202.355815][ T8435] dump_stack_lvl+0x188/0x250 [ 202.360528][ T8435] ? kobject_uevent_env+0x371/0x890 [ 202.365753][ T8435] ? show_regs_print_info+0x20/0x20 [ 202.370999][ T8435] ? load_image+0x400/0x400 [ 202.375723][ T8435] ? kobject_uevent_env+0x371/0x890 [ 202.380984][ T8435] gfs2_withdraw+0x1149/0x1490 [ 202.385785][ T8435] ? gfs2_freeze_unlock+0x50/0x50 [ 202.390839][ T8435] ? gfs2_lm+0x240/0x240 [ 202.395134][ T8435] ? load_image+0x400/0x400 [ 202.399678][ T8435] ? gfs2_consist_inode_i+0xc0/0xe0 [ 202.404909][ T8435] gfs2_dirent_scan+0x525/0x650 [ 202.409803][ T8435] ? gfs2_meta_buffer+0x1b8/0x310 [ 202.414855][ T8435] ? gfs2_dirent_search+0x7f0/0x7f0 [ 202.420088][ T8435] gfs2_dirent_search+0x2e9/0x7f0 [ 202.425143][ T8435] ? gfs2_dirent_search+0x7f0/0x7f0 [ 202.430377][ T8435] ? __might_sleep+0xf0/0xf0 [ 202.434997][ T8435] ? gfs2_dir_search+0x220/0x220 [ 202.439954][ T8435] ? _raw_spin_unlock+0x24/0x40 [ 202.444833][ T8435] ? gfs2_glock_nq+0xcb0/0x1550 [ 202.449714][ T8435] gfs2_dir_search+0x49/0x220 [ 202.454507][ T8435] gfs2_lookupi+0x46c/0x600 [ 202.459038][ T8435] ? verify_lock_unused+0x140/0x140 [ 202.464288][ T8435] ? gfs2_lookup_simple+0x100/0x100 [ 202.469513][ T8435] ? gfs2_lookupi+0x40e/0x600 [ 202.474214][ T8435] ? crc32_le_base+0x755/0xcf0 [ 202.479088][ T8435] gfs2_lookup_simple+0xab/0x100 [ 202.484049][ T8435] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 202.489186][ T8435] ? lockref_put_or_lock+0x6e/0xb0 [ 202.494354][ T8435] init_journal+0x1c3/0x22f0 [ 202.498970][ T8435] ? __rwlock_init+0x140/0x140 [ 202.503763][ T8435] ? format_decode+0x19d/0x1300 [ 202.508635][ T8435] ? vsnprintf+0x14e/0x1c20 [ 202.513179][ T8435] ? end_bio_io_page+0x100/0x100 [ 202.518289][ T8435] ? vsnprintf+0x1b21/0x1c20 [ 202.522940][ T8435] ? snprintf+0xe5/0x140 [ 202.527226][ T8435] ? vscnprintf+0x80/0x80 [ 202.531668][ T8435] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 202.536804][ T8435] init_inodes+0xdb/0x320 [ 202.541194][ T8435] gfs2_fill_super+0x16b2/0x1f00 [ 202.546159][ T8435] ? gfs2_reconfigure+0xd30/0xd30 [ 202.551202][ T8435] ? gfs2_glock_nq_num+0x82/0x1b0 [ 202.556257][ T8435] ? sb_set_blocksize+0xa5/0xe0 [ 202.561144][ T8435] get_tree_bdev+0x3f1/0x610 [ 202.565806][ T8435] ? gfs2_reconfigure+0xd30/0xd30 [ 202.570851][ T8435] gfs2_get_tree+0x4d/0x1e0 [ 202.575369][ T8435] vfs_get_tree+0x88/0x270 [ 202.579815][ T8435] do_new_mount+0x24a/0xa40 [ 202.584356][ T8435] __se_sys_mount+0x2e3/0x3d0 [ 202.589054][ T8435] ? __x64_sys_mount+0xc0/0xc0 [ 202.593836][ T8435] ? lockdep_hardirqs_on+0x94/0x140 [ 202.599068][ T8435] ? __x64_sys_mount+0x1c/0xc0 [ 202.603856][ T8435] do_syscall_64+0x4c/0xa0 [ 202.608288][ T8435] ? clear_bhb_loop+0x30/0x80 [ 202.612982][ T8435] ? clear_bhb_loop+0x30/0x80 [ 202.617710][ T8435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.623697][ T8435] RIP: 0033:0x7f3061af08ca [ 202.628160][ T8435] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.647786][ T8435] RSP: 002b:00007f305fd48e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.656218][ T8435] RAX: ffffffffffffffda RBX: 00007f305fd48ee0 RCX: 00007f3061af08ca [ 202.664208][ T8435] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 00007f305fd48ea0 [ 202.672289][ T8435] RBP: 0000200000000400 R08: 00007f305fd48ee0 R09: 0000000002a00041 [ 202.680271][ T8435] R10: 0000000002a00041 R11: 0000000000000246 R12: 0000200000000000 [ 202.688271][ T8435] R13: 00007f305fd48ea0 R14: 0000000000012645 R15: 0000200000000240 [ 202.696278][ T8435] [ 202.699794][ T8435] gfs2: fsid=syz:syz.s: can't lookup journal index: 0 [ 202.780354][ T8444] FAT-fs (loop2): Directory bread(block 64) failed [ 202.789103][ T8444] FAT-fs (loop2): Directory bread(block 65) failed [ 202.795750][ T8444] FAT-fs (loop2): Directory bread(block 66) failed [ 202.802559][ T8444] FAT-fs (loop2): Directory bread(block 67) failed [ 202.960231][ T8444] FAT-fs (loop2): Directory bread(block 68) failed [ 202.967370][ T8444] FAT-fs (loop2): Directory bread(block 69) failed [ 202.978267][ T8444] FAT-fs (loop2): Directory bread(block 70) failed [ 202.990786][ T8444] FAT-fs (loop2): Directory bread(block 71) failed [ 203.013548][ T8444] FAT-fs (loop2): Directory bread(block 72) failed [ 203.032562][ T8444] FAT-fs (loop2): Directory bread(block 73) failed [ 203.557131][ T4536] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 203.678179][ T8474] netlink: 'syz.2.1506': attribute type 32 has an invalid length. [ 203.691843][ T8473] loop3: detected capacity change from 0 to 1024 [ 203.846935][ T4536] usb 6-1: Using ep0 maxpacket: 16 [ 203.997325][ T4536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.014279][ T4536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.055567][ T4536] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.077334][ T4536] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.115008][ T4536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.150845][ T4536] usb 6-1: config 0 descriptor?? [ 204.382192][ T8478] loop2: detected capacity change from 0 to 32768 [ 204.414109][ T8478] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1511 (8478) [ 204.430796][ T4538] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 204.456633][ T8478] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 204.481235][ T8478] BTRFS info (device loop2): using free space tree [ 204.488747][ T8478] BTRFS info (device loop2): has skinny extents [ 204.612821][ T8501] loop3: detected capacity change from 0 to 8192 [ 204.654741][ T4536] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 204.677622][ T4536] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0020/input/input27 [ 204.705705][ T8501] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 204.727094][ T8501] REISERFS (device loop3): using ordered data mode [ 204.733658][ T8501] reiserfs: using flush barriers [ 204.774015][ T4536] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 204.791543][ T8501] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 204.827682][ T8478] BTRFS info (device loop2): enabling ssd optimizations [ 204.837625][ T8501] REISERFS (device loop3): checking transaction log (loop3) [ 204.861381][ T4536] usb 6-1: USB disconnect, device number 5 [ 204.868697][ T8501] REISERFS (device loop3): Using r5 hash to sort names [ 204.887276][ T4538] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 204.895549][ T4538] usb 2-1: config 0 has no interface number 0 [ 204.956891][ T4538] usb 2-1: config 0 interface 29 has no altsetting 0 [ 205.031938][ T8523] loop4: detected capacity change from 0 to 1024 [ 205.073056][ T8524] fido_id[8524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 205.091082][ T4237] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 205.187241][ T4538] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 205.196466][ T4538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.276791][ T4538] usb 2-1: Product: syz [ 205.281328][ T4538] usb 2-1: Manufacturer: syz [ 205.306898][ T4538] usb 2-1: SerialNumber: syz [ 205.341291][ T4538] usb 2-1: config 0 descriptor?? [ 205.617033][ T4538] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 205.836377][ T4538] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 205.856568][ T4538] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 205.879355][ T4538] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 205.998370][ T8551] loop4: detected capacity change from 0 to 64 [ 206.197784][ T4538] peak_usb: probe of 2-1:0.29 failed with error -22 [ 206.241343][ T4538] usb 2-1: USB disconnect, device number 11 [ 206.392338][ T8572] loop2: detected capacity change from 0 to 1024 [ 206.516721][ T8570] loop3: detected capacity change from 0 to 4096 [ 206.530746][ T8572] hfsplus: bad catalog entry type [ 206.610554][ T8570] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 206.718947][ T4237] hfsplus: b-tree write err: -5, ino 4 [ 206.951871][ T8586] loop1: detected capacity change from 0 to 64 [ 207.210201][ T8592] loop1: detected capacity change from 0 to 256 [ 207.356483][ T8592] exfat: Deprecated parameter 'namecase' [ 207.415649][ T8600] loop2: detected capacity change from 0 to 128 [ 207.424275][ T8604] loop3: detected capacity change from 0 to 16 [ 207.441445][ T8592] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 207.513221][ T8578] loop5: detected capacity change from 0 to 32768 [ 207.530625][ T8600] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 207.537344][ T8604] erofs: (device loop3): mounted with root inode @ nid 36. [ 207.577595][ T8578] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1549 (8578) [ 207.604508][ T26] audit: type=1800 audit(1771930783.291:19): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1562" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 207.630819][ T8600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.688590][ T4538] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 207.696381][ T8578] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 207.696404][ T8600] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 207.717194][ T8600] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 207.749843][ T8578] BTRFS info (device loop5): using free space tree [ 207.756500][ T8578] BTRFS info (device loop5): has skinny extents [ 207.778064][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 207.833633][ T4194] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 207.887579][ T4194] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 207.927118][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.957151][ T4538] usb 5-1: Using ep0 maxpacket: 16 [ 208.084337][ T8578] BTRFS info (device loop5): enabling ssd optimizations [ 208.097522][ T4538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.111402][ T4538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.122173][ T4538] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 208.131731][ T4538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.149889][ T4538] usb 5-1: config 0 descriptor?? [ 208.282930][ T4237] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.328061][ T7] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 208.336413][ T7] usb 2-1: config 0 has no interface number 0 [ 208.364212][ T7] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.425437][ T4237] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.470167][ T4648] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (4648) [ 208.588807][ T7] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 208.603308][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.611800][ T7] usb 2-1: Product: syz [ 208.616108][ T7] usb 2-1: Manufacturer: syz [ 208.627732][ T7] usb 2-1: SerialNumber: syz [ 208.649054][ T4538] lua 0003:1E7D:2C2E.0021: item fetching failed at offset 1/5 [ 208.658421][ T7] usb 2-1: config 0 descriptor?? [ 208.663709][ T4538] lua 0003:1E7D:2C2E.0021: parse failed [ 208.669741][ T4538] lua: probe of 0003:1E7D:2C2E.0021 failed with error -22 [ 208.721577][ T7] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 208.850394][ T5249] usb 5-1: USB disconnect, device number 13 [ 208.872095][ T4237] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.929763][ T3161] usb 2-1: USB disconnect, device number 12 [ 208.945533][ T4237] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.958494][ T3161] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 209.621513][ T8653] loop5: detected capacity change from 0 to 4096 [ 209.716706][ T8653] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 209.784345][ T8666] loop1: detected capacity change from 0 to 128 [ 209.867020][ T7313] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 209.898207][ T8666] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 210.003355][ T8666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.096297][ T8666] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 210.112569][ T154] ntfs3: loop5: MFT: r=5, expect seq=0 instead of 5! [ 210.125016][ T154] ntfs3: loop5: ino=1f, failed to open parent directory r=5 to update [ 210.127856][ T8666] UDF-fs: error (device loop1): udf_count_free_bitmap: udf_count_free failed [ 210.277803][ T7313] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.285984][ T7313] usb 4-1: config 0 has no interface number 0 [ 210.309554][ T4188] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 210.321672][ T4188] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 210.330237][ T7313] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 210.362720][ T7313] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 210.374052][ T7313] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.391082][ T7313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.426550][ T4237] device hsr_slave_0 left promiscuous mode [ 210.456392][ T7313] usb 4-1: config 0 descriptor?? [ 210.479012][ T8659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.505791][ T4237] device hsr_slave_1 left promiscuous mode [ 210.516326][ T7313] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 210.527704][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.535330][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.544908][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.552822][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.566613][ T4237] device bridge_slave_1 left promiscuous mode [ 210.574347][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.593526][ T4237] device bridge_slave_0 left promiscuous mode [ 210.600199][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.619602][ T4237] device veth1_macvtap left promiscuous mode [ 210.625713][ T4237] device veth0_macvtap left promiscuous mode [ 210.638414][ T4237] device veth1_vlan left promiscuous mode [ 210.644241][ T4237] device veth0_vlan left promiscuous mode [ 210.728262][ T4173] usb 4-1: USB disconnect, device number 16 [ 210.940820][ T4237] team0 (unregistering): Port device team_slave_1 removed [ 210.959289][ T4237] team0 (unregistering): Port device team_slave_0 removed [ 210.973901][ T4237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.990143][ T4237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.062636][ T4237] team0 (unregistering): Port device bridge0 removed [ 211.085833][ T4237] bond0 (unregistering): Released all slaves [ 211.209764][ T8665] chnl_net:caif_netlink_parms(): no params data found [ 211.459316][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.533948][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.599893][ T8665] device bridge_slave_0 entered promiscuous mode [ 211.647310][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.656957][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.678176][ T8665] device bridge_slave_1 entered promiscuous mode [ 211.833651][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.883738][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.897084][ T3161] Bluetooth: hci3: command 0x0409 tx timeout [ 212.018246][ T8665] team0: Port device team_slave_0 added [ 212.056641][ T8665] team0: Port device team_slave_1 added [ 212.247385][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.254388][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.397332][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.455005][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.538498][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.569315][ T8754] loop4: detected capacity change from 0 to 1024 [ 212.576161][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.624202][ T8754] hfsplus: bad catalog entry type [ 212.728088][ T155] hfsplus: b-tree write err: -5, ino 4 [ 212.775783][ T8665] device hsr_slave_0 entered promiscuous mode [ 212.795373][ T8665] device hsr_slave_1 entered promiscuous mode [ 212.830623][ T8665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.857115][ T8665] Cannot create hsr debugfs directory [ 213.327006][ T8556] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 213.535740][ T8742] chnl_net:caif_netlink_parms(): no params data found [ 213.744505][ T8556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 213.765045][ T8556] usb 5-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 213.788686][ T8556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.813268][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.826969][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.834892][ T8556] usb 5-1: config 0 descriptor?? [ 213.848549][ T8742] device bridge_slave_0 entered promiscuous mode [ 213.865315][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.884659][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.916996][ T8742] device bridge_slave_1 entered promiscuous mode [ 213.966647][ T8742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.976971][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 213.986056][ T8742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.055499][ T8742] team0: Port device team_slave_0 added [ 214.081267][ T8742] team0: Port device team_slave_1 added [ 214.120691][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.128275][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.184152][ T8742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.206529][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.214983][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.247816][ T8742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.266217][ T8665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.285666][ T8665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.325188][ T8665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.343003][ T8665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.359702][ T8556] wacom 0003:056A:0018.0022: unbalanced collection at end of report description [ 214.377023][ T5250] Bluetooth: hci2: command 0x0409 tx timeout [ 214.384205][ T8556] wacom 0003:056A:0018.0022: parse failed [ 214.400173][ T8556] wacom: probe of 0003:056A:0018.0022 failed with error -22 [ 214.424866][ T8742] device hsr_slave_0 entered promiscuous mode [ 214.456602][ T8742] device hsr_slave_1 entered promiscuous mode [ 214.493249][ T8742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.522418][ T8742] Cannot create hsr debugfs directory [ 214.572573][ T8556] usb 5-1: USB disconnect, device number 14 [ 214.825617][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.853106][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.873574][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.892443][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.916316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.935388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.961326][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.968474][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.990381][ T8742] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 215.006183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.015654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.037839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.046333][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.053464][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.062516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.072121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.129958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.151187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.206255][ T8742] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 215.242637][ T8742] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 215.260923][ T8818] loop5: detected capacity change from 0 to 64 [ 215.277488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.308822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.327895][ T8819] loop3: detected capacity change from 0 to 2048 [ 215.335640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.347399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.356003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.373340][ T8665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.398735][ T8819] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 215.450669][ T8818] virtiofs: Unexpected value for 'dax' [ 215.473389][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.496150][ T8824] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.508604][ T8742] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.562322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.616724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.828585][ T8835] loop3: detected capacity change from 0 to 512 [ 215.924385][ T8742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.960242][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.977420][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.990242][ T8835] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 215.997355][ T5249] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 216.033276][ T8742] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.051307][ T8835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 216.060079][ T4552] Bluetooth: hci3: command 0x040f tx timeout [ 216.131105][ T8835] EXT4-fs (loop3): orphan cleanup on readonly fs [ 216.177032][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.186792][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.216363][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.223561][ T4256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.241064][ T8835] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1616: bg 0: block 361: padding at end of block bitmap is not set [ 216.267298][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.294923][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.316589][ T8835] EXT4-fs (loop3): Remounting filesystem read-only [ 216.326721][ T8835] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 216.336194][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.343327][ T4256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.355916][ T8835] EXT4-fs (loop3): Remounting filesystem read-only [ 216.366288][ T8835] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1616: attempt to clear invalid blocks 33619980 len 1 [ 216.386987][ T5249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.388806][ T8835] EXT4-fs (loop3): Remounting filesystem read-only [ 216.398077][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.411711][ T5249] usb 6-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 216.427166][ T8835] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1616: invalid indirect mapped block 1811939328 (level 0) [ 216.444492][ T5249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.453768][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.461456][ T8835] EXT4-fs (loop3): Remounting filesystem read-only [ 216.468893][ T4536] Bluetooth: hci2: command 0x041b tx timeout [ 216.477880][ T5249] usb 6-1: config 0 descriptor?? [ 216.499981][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.508511][ T8835] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1616: invalid indirect mapped block 2185560079 (level 1) [ 216.525377][ T8835] EXT4-fs (loop3): Remounting filesystem read-only [ 216.541765][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.550799][ T8835] EXT4-fs (loop3): 1 truncate cleaned up [ 216.556781][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.564404][ T8835] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 216.587062][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.608902][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.637956][ T8839] loop4: detected capacity change from 0 to 32768 [ 216.660932][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.673903][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.739341][ T4237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.810034][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.881939][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.897892][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.910332][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.931924][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.941406][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.981817][ T4237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.005516][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.050484][ T4237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.077399][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.093715][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.143620][ T4237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.167191][ T1108] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.176024][ T4228] usb 6-1: USB disconnect, device number 6 [ 217.241941][ T8665] device veth0_vlan entered promiscuous mode [ 217.274974][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.311114][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.325478][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.334246][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.352773][ T8665] device veth1_vlan entered promiscuous mode [ 217.475961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.489292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.498766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.508375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.519452][ T8665] device veth0_macvtap entered promiscuous mode [ 217.558304][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 217.577976][ T1108] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 217.591821][ T8665] device veth1_macvtap entered promiscuous mode [ 217.607164][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.624210][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.648431][ T1108] usb 4-1: config 0 descriptor?? [ 217.656291][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.685856][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.694738][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.713409][ T8742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.761964][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.795537][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.817117][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.855718][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.897028][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.927185][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.951551][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.963595][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.996561][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.018386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.037739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.107339][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.124255][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.135277][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.146487][ T4653] Bluetooth: hci3: command 0x0419 tx timeout [ 218.153483][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.166619][ T1108] wacom 0003:056A:0018.0024: unbalanced collection at end of report description [ 218.187574][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.198277][ T1108] wacom 0003:056A:0018.0024: parse failed [ 218.204127][ T1108] wacom: probe of 0003:056A:0018.0024 failed with error -22 [ 218.216843][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.261117][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.277354][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.290325][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.303203][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.317871][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.359642][ T8665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.390031][ T8665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.399301][ T1108] usb 4-1: USB disconnect, device number 17 [ 218.426921][ T8665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.435695][ T8665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.537345][ T4540] Bluetooth: hci2: command 0x040f tx timeout [ 218.620173][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.637911][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.650181][ T8876] loop5: detected capacity change from 0 to 32768 [ 218.714913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.741285][ T8876] XFS (loop5): Mounting V5 Filesystem [ 218.750586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.770697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.788480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.836147][ T8742] device veth0_vlan entered promiscuous mode [ 218.867442][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.876118][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.887537][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.895403][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.914670][ T8742] device veth1_vlan entered promiscuous mode [ 218.923308][ T8876] XFS (loop5): Ending clean mount [ 219.034298][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.046204][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.087629][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.117916][ T5233] XFS (loop5): Unmounting Filesystem [ 219.264934][ T8742] device veth0_macvtap entered promiscuous mode [ 219.314426][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.336399][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.394266][ T8742] device veth1_macvtap entered promiscuous mode [ 219.412669][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.438230][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.539485][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.580339][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.613441][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.657035][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.705961][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.757184][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.814646][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.838119][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.857155][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.876986][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.944702][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.946530][ T8940] loop3: detected capacity change from 0 to 4096 [ 219.972339][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.987745][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.011744][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.087677][ T8940] ntfs: volume version 3.1. [ 220.126971][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.167181][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.199206][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.227122][ T7313] Bluetooth: hci3: command 0x0411 tx timeout [ 220.233469][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.263970][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.291544][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.316968][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.347004][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.406926][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.435408][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.471006][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.490240][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.508620][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1628'. [ 220.526324][ T8742] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.552329][ T8742] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.571504][ T8742] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.580799][ T8742] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.646886][ T7313] Bluetooth: hci2: command 0x0419 tx timeout [ 220.726734][ T8937] loop4: detected capacity change from 0 to 32768 [ 220.899906][ T8937] XFS (loop4): Mounting V5 Filesystem [ 220.991685][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.037436][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.125832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.182194][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.193024][ T8986] netlink: 'syz.3.1651': attribute type 5 has an invalid length. [ 221.201346][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.248153][ T8937] XFS (loop4): Ending clean mount [ 221.252255][ T4237] device hsr_slave_0 left promiscuous mode [ 221.270110][ T8937] XFS (loop4): Quotacheck needed: Please wait. [ 221.280407][ T4237] device hsr_slave_1 left promiscuous mode [ 221.385766][ T8937] XFS (loop4): Quotacheck: Done. [ 221.403574][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.422799][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.458837][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.507268][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.525755][ T4195] XFS (loop4): Unmounting Filesystem [ 221.532645][ T4237] device bridge_slave_1 left promiscuous mode [ 221.552129][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.636748][ T4237] device bridge_slave_0 left promiscuous mode [ 221.684835][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.771007][ T4237] device veth1_macvtap left promiscuous mode [ 221.809586][ T4237] device veth0_macvtap left promiscuous mode [ 221.845482][ T4237] device veth1_vlan left promiscuous mode [ 221.910103][ T4237] device veth0_vlan left promiscuous mode [ 222.225910][ T26] audit: type=1326 audit(1771930797.911:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.2.1662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc1982b629 code=0x0 [ 222.621469][ T9043] loop4: detected capacity change from 0 to 1024 [ 222.727560][ T9] hfsplus: b-tree write err: -5, ino 4 [ 222.898080][ T4237] team0 (unregistering): Port device team_slave_1 removed [ 222.920798][ T4237] team0 (unregistering): Port device team_slave_0 removed [ 222.949322][ T4237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.967606][ T4237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.127643][ T4237] bond0 (unregistering): Released all slaves [ 223.192864][ T9045] loop3: detected capacity change from 0 to 32768 [ 223.232242][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.292377][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 223.332948][ T9045] read_mapping_page failed! [ 223.349307][ T9045] ERROR: (device loop3): txCommit: [ 223.349307][ T9045] [ 223.350540][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'. [ 223.401430][ T9055] netlink: 'syz.4.1677': attribute type 18 has an invalid length. [ 223.452345][ T276] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 223.464159][ T276] ------------[ cut here ]------------ [ 223.477998][ T276] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 223.505310][ T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 223.511444][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 223.518666][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.528748][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 223.533713][ T276] Code: ff 77 de 06 0f 0b e8 68 18 a6 fe 48 c7 c7 80 6a 62 8a 48 c7 c6 79 66 62 8a ba a4 03 00 00 48 c7 c1 40 75 62 8a e8 d9 77 de 06 <0f> 0b e8 42 18 a6 fe 48 c7 c7 80 6a 62 8a 48 c7 c6 79 66 62 8a ba [ 223.553340][ T276] RSP: 0018:ffffc900025dfd28 EFLAGS: 00010246 [ 223.559429][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 4b3963f3fe318e00 [ 223.567419][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 223.575405][ T276] RBP: ffffc900028a2048 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 223.583426][ T276] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88805bcf9d90 [ 223.591414][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002681220 [ 223.599493][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 223.608433][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.615043][ T276] CR2: 00007fd373168000 CR3: 0000000074d77000 CR4: 00000000003506f0 [ 223.623032][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.631022][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.639018][ T276] Call Trace: [ 223.642304][ T276] [ 223.645250][ T276] ? lockdep_hardirqs_on+0x94/0x140 [ 223.650479][ T276] jfs_lazycommit+0x581/0xb40 [ 223.655177][ T276] ? txFreelock+0x5a0/0x5a0 [ 223.659687][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 223.665593][ T276] ? sched_dynamic_update+0x210/0x210 [ 223.670975][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 223.676878][ T276] ? __kthread_parkme+0x157/0x1b0 [ 223.682047][ T276] kthread+0x436/0x520 [ 223.686236][ T276] ? txFreelock+0x5a0/0x5a0 [ 223.690765][ T276] ? kthread_blkcg+0xd0/0xd0 [ 223.695374][ T276] ret_from_fork+0x1f/0x30 [ 223.699822][ T276] [ 223.702870][ T276] Modules linked in: [ 223.715088][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.772239][ T276] ---[ end trace 0bac5f0c25510442 ]--- [ 223.779181][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 223.784252][ T276] Code: ff 77 de 06 0f 0b e8 68 18 a6 fe 48 c7 c7 80 6a 62 8a 48 c7 c6 79 66 62 8a ba a4 03 00 00 48 c7 c1 40 75 62 8a e8 d9 77 de 06 <0f> 0b e8 42 18 a6 fe 48 c7 c7 80 6a 62 8a 48 c7 c6 79 66 62 8a ba [ 223.793247][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.812718][ T276] RSP: 0018:ffffc900025dfd28 EFLAGS: 00010246 [ 223.823115][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 4b3963f3fe318e00 [ 223.832174][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 223.854659][ T276] RBP: ffffc900028a2048 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 223.872742][ T276] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88805bcf9d90 [ 223.882765][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002681220 [ 223.890843][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 223.900539][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.907875][ T276] CR2: 00007fd37317e000 CR3: 000000002035d000 CR4: 00000000003506f0 [ 223.916175][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.924742][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.933024][ T276] Kernel panic - not syncing: Fatal exception [ 223.943494][ T276] Kernel Offset: disabled [ 223.947840][ T276] Rebooting in 86400 seconds..