last executing test programs: 6m17.603678558s ago: executing program 3 (id=31): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000900)={[{@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-5'}}]}, 0x1, 0x5ed, &(0x7f0000001440)="$eJzs3U1rXNcZB/D/nRlLHhccJbGT1C1EpFBMTGy9mLSFQtViihbBBLrJVtRyLDx2gjQpkyyKWvxB0oW6yqKbEihdZOF1F/kCgi4LhS5FNy5z585oYsvyqNG8OP798Jl7js495zz38b1XmivBBHhhrX+QM7spsn7lvU63vb+32trfW73XryeZT1Ir/6XRrf4zqT9IFtMr+X6SopqueNo6X658cenrm53LvVatKuX+9ePGjWa3Klmrglw7xfkefuv5isERdie90Z98Fjx6tv+Mcfn6GOfmBIqn/F8sJOeSnK3uA/0TtzbZ6E7fzFyAAAAAMEYvHeQgnZyfdhwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPKk+/7+oSq1fX0zR//z/ueprqerPta+mHQAAAAAAAAAAnII3D3KQTs7324+K8nf+b5WNC+Xr9/JJdrKZ7VxNJxtpp53tLCdZ6I2pV2Pb7e3lEUauHI4szXU22u3tlQkdMAAAAAAAAAB8N/0x64e//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFlQJPXepiwX+vWF1BpJziaZ6+63m/y9X3+efTXtAAAAAGACXjrIQTo5328/Ksr3/K+V7/vP5pPcTztbaaeVzdwqnwX03vXX9vdWW/t7q/e65cl5f/nvE4VRzpjes4ejV14q97g4GLGeX+c3uZLFvJ/tbOV32Ug7m1nMjbK2kSIL1dOLhX6cR8e79o3W+8+K9Y0ykmZuZ6uM7Wp+m4/Syq3UymMo9zl+xT90s1P8ojJijm5V2yIpflAd2bjNj7TXQpmRM4OMLFW572bj5eMzccLz5PGVllMbPIO6MIacn6u2xcw96Ho8EytDZ99rx2cieaf91zfvtO7fvXN758okTqOxejwTq0OZeP2FysRclY3eXfRkd8u3yrHns5Wb+Si3spmf5N2slGW13A7n9eII11rtZNfajy5XlVeSotnbzohuXl8eyuvwnW6h7Bv+ymGWXjn9O1LjUlWpJ0VjENMseDwTy0OZePX4TPzpUfd1p3X/7vadjY9HXO/H1bb7/XB+Qt8PRzNXnb2NsvXNs6Pb9+qRfctl34VBX+2JvouDvmddqXPVz3BPzrRS9r1+ZF9v3BtDfUf9lAPAzDv39rm55r+a/2h+3nzQvNN87+yv5n86/8O5nHnY+Fv9L7U/135evJ3P8/vD9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/b+fTz+5utFqb25OszE9j0RekUstMhDFipZGZCEPlycrR94vGpG9QjNW19r2Pr+18+tk7W/c2Ptz8cPP+9aVm3r2+/LPr125vtTaXeq/TjpJxObzopx0JAAAAAAAAAAAAJzGJPyed9jECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/Fj/IGd2U2R56epSt72/t9rqln79cM9akkZ3+9+k/iBZTK9kYWi64mnrfLnyxaWvb3YuH85V6+9fP27caHarkrUqyLVTnO/ht56vGBxhd9Ib/clh2v4XAAD//3D1GxQ=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) 6m17.12174023s ago: executing program 3 (id=34): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="050000000100fe", 0x7) 6m16.36070027s ago: executing program 3 (id=42): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xda1, &(0x7f0000000980)="$eJzs3UtvXNUdAPBzx544LxqHGOKmaeKSUtxHbBKs0l2NlC5QJVSJT4DSQEMNfYQuQEFKuui2kRAfoIh9F31mgRSxSsWmVb8AYtWNi5BoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xYWG6Sunt229dund2/H+rU862csysPY7nscWUUrM1X0qTYXmLE+vpZ59cv9yefp7TKl1MVapa09Nzy615j6SUbqSZdCdNpuc/Pnnr5Q+eXXrvxM0Tl96cvbszrQcAgNFy74fv/uJvT/zg+vH///7MYppoTS/b54t5/Gje7l+s1sdz0vofULWlVdt4cSDkG89DI+Qb65CvvZxmyDfepfwDYbnNLvkmasofa5vWqd0wzDb+x1eNuU3jjcbc3Pp/8lUfjh2o5l69uvTitQFVFNh2n57Nu/gMBsPIDSvHBr0GAlgXjxve50bcs/BgWksb76385WcaneeHbbDbn3/lD1f57960xmH77NdPU2lX+R4dzePxOMJ4mK/f739ZXjwe0eyxnt2OIwzL8YVu9Rzb5XpsVbf6x8/FfvXVnJbX4UyIt39/4ns6LO8x0Nk9+/8NhpEdVga9AgL2rHje3EpW4vG8vhifqIkfrIkfqokfrokfqYnDKPvDa79Nt6qN//nxP32/+8PKfraHcvqlPusT90f2W34877dfD1p+PJ8Y9rTZ/57+9Fd3/h7P//88nP9/Lv+WTuYVRNlfGPert879DxcGN7rkezhU56EO+deeT23OV01tLCe1rWfuq8f05vmOdct3enO+yZDvcN4WORjqG7dPDof5yvZHWa+W12s8tLcZ2nEg1KO8M8dzejC053i3doUd2QdCvmYeToR2TYV2PRLmezS0q5re3K64/7zU52SYHo+TlHzTba9d6vC7FN+LeF3GYzn9dU7fyen7Of2oQ7mjqHweu53/Xz6f06lZvXh16cqTebx8Tu+ONSdWp1/Y5XoDD67X63+m0+brf462pjcb7euFYxvTq/b1wmSYfrHL9KfyePk9+8nYobXpc5d/tvTj7W48jLhrr7/x0xeWlq780hNPPPGk9WTQayZgp82/9srP56+9/sb5q6+88NKVl668euHJ7333qaefXphf26qfb9+2B/aXjR/9QdcEAAAAAAAAAAAA6Fl1qPPknNbd37ZcT16uT4/XxzMcyvtWPg3lPgbl+s9u93Up128e34U6sv1243KiQbcR6Ozf7v9rMIzssLLiLv7A3jDo/v/KfQ9LevT8P4+vDiXb8jOb15fx/oXwIPZ6/3PK31/9/7X6v+p5/Rd6zJrcWrl/vHfoH23FplO9lh/bX+4DO9Vf+X/K5ZfWPJ56K3/ld6H86f7KLf4cyj/cY/n3tf/01sr/Sy6/vGyz53otf73GVWNzPeJ+43IfwLjfuPhraH+5t1/f7d9iR223c/kwyoaln8l+DUv/n92U5Zb1YF49t47Tlftvx/4O+q1/ue93+R14JCy/qvl90//ncKvr/7N8/ub1/wn7zoeO/xkM+2nY2HTpIf/KyspAuz4Z1X5X9opBv/6D3oYcdPmDfv3rxP4/4/+l2P9njMf+P2M89v8Z47F/rRiP/X/G1zP2/xnjJ8NyY/+g0zXxL9fET9XEv1ITP10Tj//fYnymJn6mJn62Jv5wTfyxmvi5mvjXa+KP18SfqInP1sT3u6/ldFTbD6Ms9hvp+w+joxz/6fb9n6qJA8Mr9uscv9/fqIkDw6uc5+H7DSOo6nzHjri/Pe/HfXQ5j7+T0/dz+tHO1ZBd8M2cfiun387pd3J6PqdzOZ3Pqb4hh9tv/nXqzK1q4zy/YyHe6/mk8XqAeJ+YCz3WJx6f6/d81pM9lrNT5W/xchAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAodFYe1xYmK5Sevv2W5f+M/X9H61OOdvKMbP2OJ7HFlNKzZRSlcfHw/JuTKynn31y/XKntEoX1x7LeHpuuTXvkdX500y6kybT8x+fvPXyB88uvXfi5olLb87e3ZnWAwAAwGj4IgAA//9hreYR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80186e82, 0x0) 6m15.566448481s ago: executing program 3 (id=48): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 6m14.778039386s ago: executing program 3 (id=54): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1316}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 6m13.842873113s ago: executing program 3 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8}, 0x80) 6m13.086616374s ago: executing program 32 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8}, 0x80) 6m9.1660265s ago: executing program 0 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100000000421b211f6cdffaa7c8ec2255bab0013c8b691dcac75fea9077145128cff65a23abc9e4f9"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 6m7.652313363s ago: executing program 0 (id=100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 6m7.205295113s ago: executing program 0 (id=101): io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 6m6.954250025s ago: executing program 0 (id=102): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="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"/272], 0x4, 0x153e, &(0x7f0000000240)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6m6.386576255s ago: executing program 0 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000004000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6m5.258393691s ago: executing program 0 (id=113): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000002f80)=""/54) 6m4.472161147s ago: executing program 33 (id=113): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000002f80)=""/54) 2m5.074712496s ago: executing program 6 (id=2741): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x41201003, @mcast1, 0xb}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 2m4.997175021s ago: executing program 6 (id=2743): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x10, 0x0, 0x0, 0x4, 0x4}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2m4.815567636s ago: executing program 6 (id=2744): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) poll(&(0x7f0000000000)=[{r0, 0x4102}], 0x1, 0x7f) 2m4.653143248s ago: executing program 6 (id=2746): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x13a) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x140) 2m4.526719582s ago: executing program 6 (id=2748): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) tkill(r0, 0x8) 2m4.143759344s ago: executing program 6 (id=2756): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x5, @private2, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x1, @private0, 0x200}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)='\x00\x00', 0x2}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000022c0)=""/4138, &(0x7f0000000000)=0x1031) 2m3.177644297s ago: executing program 34 (id=2756): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x5, @private2, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x1, @private0, 0x200}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)='\x00\x00', 0x2}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000022c0)=""/4138, &(0x7f0000000000)=0x1031) 1m46.465689411s ago: executing program 1 (id=2870): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 1m45.758206792s ago: executing program 1 (id=2877): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d) 1m45.52024679s ago: executing program 1 (id=2881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m44.922858961s ago: executing program 1 (id=2889): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1002822, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1m44.426530184s ago: executing program 1 (id=2893): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m44.037872752s ago: executing program 1 (id=2897): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2a82, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0xffffffffffffffba, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) 1m28.551056532s ago: executing program 35 (id=2897): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2a82, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0xffffffffffffffba, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) 6.205483889s ago: executing program 4 (id=3494): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 5.886138403s ago: executing program 2 (id=3496): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2a0210", 0x10, 0x3a, 0xff, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3c}}}}}}, 0x0) 5.569276154s ago: executing program 2 (id=3499): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2$9p(&(0x7f0000000040), 0x0) setreuid(0x0, 0xee01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.407885169s ago: executing program 4 (id=3500): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x6, 0xb, {0xb, 0xd, "25086ae200c4ec6fe2"}}, &(0x7f00000000c0)={0x0, 0x3, 0xb6, @string={0xb6, 0x3, "a227bf484ea8a2adbf5890c973407ef17bf7efabc0f21e17e83d1e96e82c285fd69ee5eea9980afdf8fef3a2a679e71e780a1175a02b5c931b229979146e1f248f0f5f891ad7f99a7304c76baaa1ba2f29b2c27e62806fa13e2ca6fd1df384aa37cd3c1c9fbdde7a0d321d2a24cb0d4c9c1582359f2f7141430082e20e96739a9a5cbd413fc3246fc455de625597890e1eaae2a1001a45ce19d832cbe94b5f9971577b8bd2326c9992238ea3714f833f2ab8a701"}}}, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x10, 0x2, "ad52"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) 5.255547352s ago: executing program 2 (id=3501): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000100)='mnt\x00', 0x143142, 0xa2) read$FUSE(r0, 0x0, 0x0) 3.700249318s ago: executing program 9 (id=3508): socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 3.317113939s ago: executing program 5 (id=3511): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200050, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="8f885045210635adb7e6436894228db3ca307a6a34ed8bcac81952ee0bd544cd75dfb41348803558a5fce3ce459f0520b79b93828d78bdefc834dd46e379d43441d36a2175580482bac07e9f8e36e0c0ed7665883da3c4307fcec811da2a770ebeb360ee9f7feab5696ff3736fc5d0299fd2f93ce9c0f30bd2f5c5c3efe112e0b6f4968d88ad0095457ca2847daf624d643e11daf40e9e8953f2eda4e319da17d99f30c215919c5ffed73a4a908ea9829108fc04e3666f7cf793825539f06254d0cad1dc084027bc029ba42e450b3592f440145b3b4b12f076472702", @ANYRESDEC, @ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT], 0x1, 0x1d9, &(0x7f0000000440)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100013f0000080003000400000014000200"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.187096485s ago: executing program 2 (id=3512): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d02, &(0x7f0000000900)="000001") 3.062737945s ago: executing program 8 (id=3513): bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.061009334s ago: executing program 7 (id=3514): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) recvfrom(r0, 0x0, 0x4f, 0x40002021, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x2402c057}, 0x0) 2.828775252s ago: executing program 9 (id=3515): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) 2.783851605s ago: executing program 5 (id=3516): r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) finit_module(r0, 0x0, 0x0) 2.717675588s ago: executing program 8 (id=3517): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x0, r0, 0x0, 0x80000}) 2.606181905s ago: executing program 7 (id=3518): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.490122609s ago: executing program 2 (id=3519): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f00000000c0)=0x5, 0x4) socket(0x8, 0x5, 0x6) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020ffd001000000000000000ffffffff030005000079000002000000ffffffff0000000000000000080016000000040000000000000000000600000020010000000000"], 0x80}}, 0x0) 2.447741572s ago: executing program 9 (id=3520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fsetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="757365722eaa85"], 0x0, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.25360204s ago: executing program 7 (id=3521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x9, 0x9, 0x1, 0x3}, 0x14) 2.147838559s ago: executing program 5 (id=3522): r0 = inotify_init1(0x80800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2001}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x20000008}) 2.147579622s ago: executing program 4 (id=3523): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000080)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007680afe8eaed0b3c589f1daf0fe389a4c0a839d3c96e249534fa8c59f66f0cc85c3f06a689df8de150e8fafa3625335e4b43e7531b74c008bda93c795f58e5e86b52a1af8fccc1c69527b2e4334c33bd8a3ace83266d463402c750b85ae0b07ec332198c13b68e9ae20cb684c8515f951156f670f39e3896fd7b3b16b737398cde6ae247e1eeb5d0a5dc27a235f1f0540ae603751adc5ebd6e760979e44a"], 0x1, 0x9e29, &(0x7f0000013e80)="$eJwkmFMQ3wfTRlM3tW27PbVt27btU/f/s1Hbdpu0aZLatq3URspv3vl2Zm93njl7rp57BjhsgMMHeO8A7xvgiAHeP8CRAxw1wNEDfGCADw7woQE+PMBHBvjoAB8b4OMDfGKATw7wqQE+PcBnBvjsAJ8b4PMDfGGALw7wpQG+PMBXBvjqAF8b4OsDfGOAbw7wrQG+PcB3BvjuAN8b4PsD/GCAHw7wowF+PMBPBvjpAD8b4OcD/GKAYwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwY4doB/DvCvAf49wH8G+O8A/xvgkADHCXDcAMcLcPwAJwhwwgAnCnDiAIcGOEmAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIAEuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7BbhzgLsEuGuAuwW4e4B7BLhngHsFuHeA+wS4b4D7Bbh/gAcEeGCABwV4cICHBHhogIcFeHiARwR4ZIBHBXh0gMcEeGyAxwV4fIAnBHhigCcFeHKABnhKgKcGeFqApwd4RoBnBnhWgGcHOAgwCDAMMAowDjAJMA0wCzAPsAiwDLAKsA6wCbANsAuwD/CcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4AhwU4PMB7A7wvwBEB3h/gyABHBTg6wAcCfDDAhwJ8OMBHAnw0wMcCfDzAJwJ8MsCnAnw6wGcCfDbA5wJ8PsAXAnwxwJcCfDnAVwJ8NcDXAnw9wDcCfDPAtwJ8O8B3Anw3wPcCfD/ADwL8MMCPAvw4wE8C/DTAzwL8PMAvAhwT4JcBfhXg1wF+E+C3AX4X4PcB/hDgjwH+FODPAf4S4K8B/hbg7wH+EeDYAP8M8K8A/w7wnwD/DfC/AIeEOE6I44Y4XojjhzhBiBOGOFGIE4c4NMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyxKVCJMSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xDNCPDPEs0I8O8RBiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2I54R4bojnhXh+iBeEeGGIF4V4cYiXhHhpiJeFeHmIV4R4ZYhXhXh1iNeEeG2I14V4fYg3hHhjiDeFeHOIt4R4a4i3hXh7iHeEeGeId4V4d4j3hDgsxOEh3hvifSGOCPH+EEeGOCrE0SE+EOKDIT4U4sMhPhLioyE+FuLjIT4R4pMhPhXi0yE+E+KzIT4X4vMhvhDiiyG+FOLLIb4S4qshvhbi6yG+EeKbIb4V4tshvhPiuyG+F+L7IX4Q4ochfhTixyF+EuKnIX4W4uchfhHimBC/DPGrEL8O8ZsQvw3xuxC/D/GHEH8M8acQfw7xlxB/DfG3EH8P8Y8Qx4b4Z4h/hfh3iP+E+G+I/4U4JMJxIhw3wvEiHD/CCSKcMMKJIpw4wqERThLhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8/8sw5P9noQgXjnCRCBeNcLEIF49wiQiXjHCpCIlw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIT4rw5AiN8JQIT43wtAhPj/CMCM+M8KwIz45wEGEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2Ef4TkRnhvheRGeH+EFEV4Y4UURXhzhJRFeGuFlEV4e4RURXhnhVRFeHeE1EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPREOi3B4hPdGeF+EIyK8P8KREY6KcHSED0T4YIQPRfhwhI9E+GiEj0X4eIRPRPhkhE9F+HSEz0T4bITPRfh8hC9E+GKEL0X4coSvRPhqhK9F+HqEb0T4ZoRvRfh2hO9E+G6E70X4foQfRPhhhB9F+HGEn0T4aYSfRfh5hF9EOCbCLyP8KsKvI/wmwm8j/C7C7yP8IcIfI/wpwp8j/CXCXyP8LcLfI/wjwrER/hnhXxH+HeE/Ef4b4X8RDolxnBjHjXG8GMePcYIYJ4xxohgnjnFojJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88U4f4wLxLhgjAvFuHCMi8S4aIyLxbh4jEvEuGSMS8VIjEvHuEyMy8a4XIzLx7hCjCvGuFKMK8e4SoyrxrhajKvHuEaMa8a4Voxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuEmMm8a4WYybx7hFjFvGuFWMW8e4TYzbxrhdjNvHuMP4Q4b8j+9OMe4c4y4x7hrjbjHuHuMeMe4Z414x7h3jPjHuG+N+Me4f4wExHhjjQTEeHOMhMR4a42ExHh7jETEeGeNRMR4d4zExHhvjcTEeH+MJMZ4Y40kxnhyjMZ4S46kxnhbj6TGeEeOZMZ4V49kxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2O8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGYTEOj/HeGO+LcUSM98c4MsZRMY6O8YEYH4zxoRgfjvGRGB+N8bEYH4/xiRifjPGpGJ+O8ZkYn43xuRifj/GFGF+M8aUYX47xlRhfjfG1GF+P8Y0Y34zxrRjfjvGdGN+N8b0Y34/xgxg/jPGjGD+O8ZMYP43xsxg/j/GLGMfE+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xDg2xj9j/CvGv2P8J8Z/Y/wvxiEJjpPguAmOl+D4CU6Q4IQJTpTgxAkOTXCSBCdNcLIEJ09wigSnTHCqBKdOcJoEp01wugSnT3CGBGdMcKYEZ05wlgRnTXC2BGdPcI4E50xwrgTnTnCeBOdNcL4E509wgQQXTHChBBdOcJEEF01wsQQXT3CJBJdMcKkESXDpBJdJcNkEl0tw+QRXSHDFBFdKcOUEV0lw1QRXS3D1BNdIcM0E10pw7QTXSXDdBNdLcP0EN0hwwwQ3SnDjBDdJcNMEN0tw8wS3SHDLBLdKcOsEt0lw2wS3S3D7BHdIcMcEd0pw5wR3SXDXBHdLcPcE90hwzwT3SnDvBPdJcN8E90tw/wQPSPDABA9K8OAED0nw0AQPS/DwBI9I8MgEj0rw6ASPSfDYBI9L8PgET0jwxARPSvDkBE3wlARPTfC0BE9P8IwEz0zwrATPTnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9CQ5LcHiC9yZ4X4IjErw/wZEJjkpwdIIPJPhggg8l+HCCjyT4aIKPJfh4gk8k+GSCTyX4dILPJPhsgs8l+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJPhpgp8l+HmCXyQ4JsEvE/wqwa8T/CbBbxP8LsHvE/whwR8T/CnBnxP8JcFfE/wtwd8T/CPBsQn+meBfCf6d4D8J/pvgfwkOSXGcFMdNcbwUx09xghQnTHGiFCdOcWiKk6Q4aYqTpTh5ilOkOGWKU6U4dYrTpDhtitOlOH2KM6Q4Y4ozpThzirOkOGuKs6U4e4pzpDhninOlOHeK86Q4b4rzpTh/igukuGCKC6W4cIqLpLhoiouluHiKS6S4ZIpLpUiKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKG6e4SYqbprhZipunuEWKW6a4VYpbp7hNitumuF2K26e4Q4o7prhTijunuEuKu6a4W4q7p7hHinumuFeKe6e4T4r7prhfivuneECKB6Z4UIoHp3hIioemeFiKh6d4RIpHpnhUikeneEyKx6Z4XIrHp3hCiiemeFKKJ6doiqekeGqKp6V4eopnpHhmimeleHaKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFK9L8foUb0jxxhRvSvHmFG9J8dYUb0vx9hTvSPHOFO9K8e4U70lxWIrDU7w3xftSHJHi/SmOTHFUiqNTfCDFB1N8KMWHU3wkxUdTfCzFx1N8IsUnU3wqxadTfCYleTbF51J8PsUXUnwxxZdSfDnFV1J8NcXXUnw9xTdSfDPFt1J8O8V3Unw3xfdSfD/FD1L8MMWPUvw4xU9S/DTFz1L8PMUvUhyT4pcpfpXi1yl+k+K3KX6X4vcp/pDijyn+lOLPKf6S4q8p/pbi7yn+keLYFP9M8a8U/07xnxT/TfG/FIdkOE6G42Y4XobjZzhBhhNmOFGGE2c4NMNJMpw0w8kynDzDKTKcMsOpMpw6w2kynDbD6TKcPsMZMpwxw5kynDnDWTKcNcPZMpw9wzkynDPDuTKcO8N5Mpw3w/kynD/DBTJcMMOFMlw4w0UyXDTDxTJcPMMlMlwyw6UyJMOlM1wmw2UzXC7D5TNcIcMVM1wpw5UzXCXDVTNcLcPVM1wjwzUzXCvDtTNcJ8N1M1wvw/Uz3CDDDTPcKMONM9wkw00z3CzDzTPcIsMtM9wqw60z3CbDbTPcLsPtM9whwx0z3CnDnTPcJcNdM9wtw90z3CPDPTPcK8O9M9wnw30z3C/D/TM8IMMDMzwow4MzPCTDQzM8LMPDMzwiwyMzPCrDozM8JsNjMzwuw+MzPCHDEzM8KcOTMzTDUzI8NcPTMjw9wzMyPDPDszI8O8NBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2G52R4bobnZXh+hhdkeGGGF2V4cYaXZHhphpdleHmGV2R4ZYZXZXh1htdkeG2G12V4fYY3ZHhjhjdleHOGt2R4a4a3ZXh7hndkeGeGd2V4d4b3ZDgsw+EZ3pvhfRmOyPD+DEdmOCrD0Rk+kOGDGT6U4cMZPpLhoxk+luHjGT6R4ZMZPpXh0xk+k+GzGT6X4fMZvpDhixm+lOHLGb6S4asZvpbh6xm+keGbGb6V4dsZvpPhuxm+l+H7GX6Q4YcZfpThxxl+kuGnGX6W4ecZfpHhmAy/zPCrDL/O8JsMv83wuwy/z/CHDH/M8KcMf87wlwx/zfC3DH/P8I8Mx2b4Z4Z/Zfh3hv9k+G+G/2U4JMdxchw3x/FyHD/HCXKcMMeJcpw4x6E5TpLjpDlOluPkOU6R45Q5TpXj1DlOk+O0OU6X4/Q5zpDjjDnOlOPMOc6S46w5zpbj7DnOkeOcOc6V49w5zpPjvDnOl+P8OS6Q44I5LpTjwjkukuOiOS6W4+I5LpHjkjkulSM5Lp3jMjkum+NyOS6f4wo5rpjjSjmunOMqOa6a42o5rp7jGjmumeNaOa498ZAh/2Oxbo7r5bh+jhvkuGGOG+W4cY6b5LhpjpvluHmOW+S4ZY5b5bh1jtvkuG2O2+W4fY475LhjjjvluHOOu+S4a4675bh7jnvkuGeOe+W4d4775LhvjvvluH+OB+R4YI4H5XhwjofkeGiOh+V4eI5H5HhkjkfleHSOx+R4bI7H5Xh8jifkeGKOJ+V4co7meEqOp+Z4Wo6n53hGjmfmeFaOZ+c4yDHIMcwxyjHOMckxzTHLMc+xyLHMscqxzrHJsc2xy7HP8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GOHO/M8a4c7/7fv8acM3ZYjsPz/++R/7cjchwyZMiQkTmOynF0jg/k+OD/3B8yZMjDOT6S46M5Ppbj4zk+keOTOT6V49M5PpPjszk+l+PzOb6Q44s5vpTjyzm+kuOrOb6W4+s5vpHjmzm+lePbOb6T47s5vpfj+zl+kOOHOX6U48c5fpLjpzl+luPnOX6R45gcv8zxqxy/zvGbHL/N8bscv8/xhxx/zPGnHH/O8Zccf83xtxx/z/GPHMfm+GeOf+X4d47/5Phvjv/9j0mB4xQ4boHjFTh+gRMUOGGBExU4cYFDC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKpACly6wGUKXLbAjWZqxi5f4AoFrljgSgWuXOAqBa5a4GoFrl7gGgWuWeBaBa5d4DoFrlvgegWuX+AGBW74v3sFblzgJgVuWuBmBW5e4BYFblngVgVuXeA2BW5b4HYFbl/gDgXuWOBOBe5c4C4F7lrgbgXuXuAeBe5Z4F4F7l3gPgXuW+B+Be5f4AEFHljgQQUeXOAhBR5a4GEFHl7gEQUeWeBRBR5d4DEFHlvgcQUeX+AJBZ5Y4EkFnlygBZ5S4KkFnlbg6QWeUeCZBZ5V4NkFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAYQUOL/DeAu8rcESB9xc4ssBRBY4u8IECHyzwoQIfLvCRAh8t8LECHy/wiQKfLPCpAp8u8JkCny3wuQKfL/CFAl8s8KUCXy7wlQJfLfC1Al8v8I0C3yzwrQLfLvCdAt8t8L0C3y/wgwI/LPCjAj8u8JMCPy3wswI/L/CLAscU+GWBXxX4dYHfFPhtgd8V+H2BPxT4Y4E/Ffhzgb8U+GuBvxX4e4F/FDi2wD8L/KvAvwv8p8B/C/yvwCEljlPiuCWOV+L4JU5Q4oQlTlTixCUOLXGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSKXHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEi3xlBJPLfG0Ek8v8YwSzyzxrBLPLnFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9JQ4rcXiJ95Z4X4kjSry/xJEljipxdIkPlPhgiQ+V+HCJj5T4aImPlfh4iU+U+GSJT5X4dInPlPhsic+V+HyJL5T4Yokvlfhyia+U+GqJr5X4eolvlPhmiW+V+HaJ75T4bonvlfh+iR+U+GGJH5X4cYmflPhpiZ+V+HmJX5Q4psQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEsSX+WeJfJf5d4j8l/lvifyUOqXCcCsetcLwKx69wggonrHCiCieucGiFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVLVUiFS1e4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFJ1dohadUeGqFp1V4eoVnVHhmhWdVeHaFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7Cs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76lwWIXDK7y3wvsqHFHh/RWOrHBUhaMrfKDCByt8qMKHK3ykwkcrfKzCxyt8osInK3yqwqcrfKbCZyt8rsLnK3yhwhcrfKnClyt8pcJXK3ytwtcrfKPCNyt8q8K3K3ynwncrfK/C9yv8oMIPK/yowo8r/KTCTyv8rMLPK/yiwjEVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFY6t8M8K/6rw7wr/qfDfCv+rcEiN49Q4bo3j1Th+jRPUOGGNE9U4cY1Da5ykxklrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrMbFa1yixiVrXKpGaly6xmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3LTGzWrcvMYtatyyxq1q3LrGbWrctsbtaty+xh1q3LHGnWrcucZdaty1xt1q3L3GPWrcs8a9aty7xn1q3LfG/Wrcv8YDajywxoNqPLjGQ2o8tMbDajy8xiNqPLLGo2o8usZjajy2xuNqPL7GE2o8scaTajy5Rms8pcZTazytxtNrPKPGM2s8q8azaxzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nd4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjcNqHF7jvTXeV+OIGu+vcWSNo2ocXeMDNT5Y40M1PlzjIzU+WuNjNT5e4xM1PlnjUzU+XeMzNT5b43M1Pl/jCzW+WONLNb5c4ys1vlrjazW+XuMbNb5Z41s1vl3jOzW+W+N7Nb5f4wc1fljjRzV+XOMnNX5a42c1fl7jFzWOqfHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6hxbI1/1vhXjX/X+E+N/9b4X41DGhynwXEbHK/B8RucoMEJG5yowYkbHNrgJA1O2uBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg0u3OAiDS7a4GINLt7gEg0u2eBSDdLg0g0u0+CyDS7X4PINrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ3a4CkNntrgaQ2e3uAZDZ7Z4FkNnt3goMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexoc1uDwBu9t8L4GRzR4f4MjGxzV4OgGH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGP2nw0wY/a/DzBr9ocEyDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg2Mb/LPBvxr8u8F/Gvy3wf8aHNLiOC2O2+J4LY7f4gQtTtjiRC1O3OLQFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpc4Y8iQ/2VfqkVaXLrFZVpctsXlWly+xRVaXLHFlVpcucVVWly1xdVaXL3FNVpcs8W1Wly7xXVaXLfF9Vpcv8UNWtywxY1a3LjFTVrctMXNWty8xS1a3LLFrVrcusVtWty2xe1a3L7FHVrcscWdWty5xV1a3LXF3VrcvcU9Wtyzxb1a3LvFfVrct8X9Wty/xQNaPLDFg1o8uMVDWjy0xcNaPLzFI1o8ssWjWjy6xWNaPLbF41o8vsUTWjyxxZNaPLlFWzylxVNbPK3F01s8o8UzWzyrxbNbHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3hOi+e2eF6L57d4QYsXtnhRixe3eEmLl7Z4WYuXt3hFi1e2eFWLV7d4TYvXtnhdi9e3eEOLN7Z4U4s3t3hLi7e2eFuLt7d4R4t3tnhXi3e3eE+Lw1oc3uK9Ld7X4ogW729xZIujWhzd4gMtPtjiQy0+3OIjLT7a4mMtPt7iEy0+2eJTLT7d4jMtPtvicy1D/+feCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy2OafHLFr9q8esWv2nx2xa/a/H7Fn9o8ccWf2rx5xZ/afHXFn9r8fcW/2hxbIt/tvhXi3+3+E+L/7b4X4tDOhynw3E7HK/D8TucoMMJO5yow4k7HNrhJB1O2uFkHU7e4RQdTtnhVB1O3eE0HU7b4XQdTt/hDB3O2OFMHc7c4SwdztrhbB3O3uEcHc7Z4Vwdzt3hPB3O2+F8Hc7f4QIdLtjhQh0u3OEiHS7a4WIdLt7hEh0u2eFSHdLh0h0u0+GyHS7X4fIdrtDhih1DhwwZ4sodrtLhqh2u1uHqHa7R4ZodrtXh2h2u0+G6Ha7X4fodbtDhhh1u1OHGHW7S4aYdbtbh5h1u0eGWHW7V4dYdbtPhth1u1+H2He7Q4Y4d7tThzh3u0uGuHe7W4e4d7tHhnh3u1eHeHe7T4b4d7tfh/h0e0OGBHR7U4cEdHtLhoR0e1uHhHR7R4ZEdHtXh0R0e0+GxHR7X4fEdntDhiR2e1OHJHdrhKR2e2uFpHZ7e4RkdntnhWR2e3eGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dczo8t8PzOjy/wws6vLDDizq8uMNLOry0w8s6vLzDKzq8ssOrOry6w2s6vLbD6zq8vsMbOryxw5s6vLnDWzq8tcPbOry9wzs6vLPDuzq8u8N7OhzW4fAO7+3wvg5HdHh/hyM7HNXh6A4f6PDBDh/q8OEOH+nw0Q4f6/DxDp/o8MkOn+rw6Q6f6fDZDp/r8PkOX+jwxQ5f6vDlDl/p8NUOX+vw9Q7f6PDNDt/q8O0O3+nw3Q7f6/D9Dj/o8MMOP+rw4w4/6fDTDj/r8PMOv+hwTIdfdvhVh193+E2H33b4XYffd/hDhz92+FOHP3f4S4e/dvhbh793+EeHYzv8s8O/Ovy7w386/LfD/zoc0uM4PY7b43g9jt/jBD1O2ONEPU7c49AeJ+lx0h4n63HyHqfoccoep+px6h6n6XHaHqfrcfoeZ+hxxh5n6nHmHmfpcdYeZ+tx9h7n6HHOHufqce4e5+lx3h7n63H+HhfoccEeF+px4R4X6XHRHhfrcfEel+hxyR6X6pEel+5xmR6X7XG5HpfvcYUeV+xxpR5X7nGVHlftcbUeV+9xjR7X7HGtHtfucZ0e1+1xvR7X73GDHjfscaMeN+5xkx437XGzHjfvcYset+xxqx637nGbHrftcbset+9xhx537HGnHnfucZced+1xtx5373GPHvfsca8e9+5xnx737XG/Hvfv8YAeD+zxoB4P7vGQHg/t8bAeD+/xiB6P7PGoHo/u8Zgej+3xuB6P7/GEHk/s8aQeT+7RHk/p8dQeT+vx9B7P6PHMHs/q8eweBz0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj32PZ7T47k9ntfj+T1e0OOFPV7U48U9XtLjpT1e1uPlPV7R45U9XtXj1T1e0+O1PV7X4/U93tDjjT3e1OPNPd7S46093tbj7T3e0eOdPd7V49093tPjsB6H93hvj/f1OKLH+3sc2eOoHkf3+H8snEMQpgfDLSe2bTuTpGPbtm3bHWNiv4+N2HbGsW3bNm59t/7tWXb18lQPH+CIAY4c4KgBjh7gmAGOHeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgEMCHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQMcGuASAS4Z4FIBEuDSAS4T4LIBLhfg8gGuEOCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4VMNH/OG4T4LYBbhfg9gHuEOCOAe4U4M4B7hLgrgHuFuDuAe4R4J4B7hXg3gHuE+C+Ae4X4P4BHhDggQEeFODBAR4S4KEBHhbg4QEeEeCRAR4V4NEBHhPgsQEeF+DxAZ4Q4IkBnhTgyQEa4CkBnhrgaQGeHuAZAZ4Z4FkBnh3gOQGeG+CwAM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8KcBBgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH+DVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrQHeFuDtAd4R4J0B3hXg3QHeE+C9Ad4X4P0BPhDggwE+FODDAT4S4PAARwQ4MsBRAY4OcEyAYwN8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP8CHBLiOCGOG+J4IY4f4gQhThjiRCFOHOIkIU4a4mQhTh7iFCFOGeJUIU4d4jQhThvidCFOH+IMIc4Y4kwhzhziLCHOGuJsIc4e4hwhzhniXCHOHeI8Ic4b4nwhzh/iAiEuGOJCIS4c4iIhLhriYiEuHuLQEJcIcckQlwqREJcOcZkQlw1xuRCXD3GFEFcMcaUQVw5xlRBXDXG1EFcPcY0Q1wxxrRDXDnGdENcNcb0Q1w9xgxA3DHGjEDcOcZMQNw1xsxA3D3GLELcMcasQtw5xmxC3DXG7ELcPcYcQdwxxpxB3DnGXEHcNcbcQdw9xjxD3DHGvEPcOcZ8Q9w1xvxD3D/GAEA8M8aAQDw7xkBAPDfGwEA8P8YgQjwzxqBCPDvGYEI8N8bgQjw/xhBBPDPGkEE8O0RBPCfHUEE8L8fQQzwjxzBDPCvHsEM8J8dwQh4V4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VYiDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQrw7xmhCvDfG6EK8P8YYQbwzxphBvDvGWEG8N8bYQbw/xjhDvDPGuEO8O8Z4Q7w3xvhDvD/GBEB8M8aEQHw7xkRCHhzgixJEhjgpxdIhjQhwb4qMhPhbi4yE+EeKTIT4V4tMhPhPisyE+F+LzIb4Q4oshvhTiyyG+EuKrIb4W4ushvhHimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIX4R4pchfhXi1yF+E+K3IX4X4vch/hDijyH+FOLPIf4S4q8h/hbi7yH+EeKfIf4V4t8h/hPivyH+F+KQCMeJcNwIx4tw/AgniHDCCCeKcOIIJ4lw0ggni3DyCKeIcMoIp4pw6giniXDaCKeLcPoIZ4hwxghninDmCGeJcNYIZ4tw9gjniHDOCOeKcO4I54lw3gjni3D+CBeIcMEIF4pw4QgXiXDRCBeLcPEIh0a4RIRLRrhUhES4dITLRLhshMtFuHyEK0S4YoQrRbhyhKtEuGqEq0W4eoRrRLhmhGtFuHaE60S4boTrRbh+hBtEuGGEG0W4cYSbRLhphJtFuHmEW0S4ZYRbRbh1hNtEuG2E20W4fYQ7RLhjhDtFuHOEu0S4a4S7Rbh7hHtEuGeEe0W4d4T7RLhvhPtFuH+EB0R4YIQHRXhwhIdEeGiEh0V4eIRHRHhkhEdFeHSEx0R4bITHRXh8hCdEeGKEJ0V4coRGeEqEp0Z4WoSnR3hGhGdGeFaEZ0d4ToTnRjgswvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsiHEQYRBhGGEUYR5hEmEaYRZhHWERYRlhFWEfYRNhG2EXYR3h1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RHhvhPdFeH+ED0T4YIQPRfhwhI9EODzCERGOjHBUhKMjHBPh2AgfjfCxCB+P8IkIn4zwqQifjvCZCJ+N8LkIn4/whQhfjPClCF+O8JUIX43wtQhfj/CNCN+M8K0I347wnQjfjfC9CN+P8IMIP4zwowg/jvCTCD+N8LMIP4/wiwi/jPCrCL+O8JsIv43wuwi/j/CHCH+M8KcIf47wlwh/jfC3CH+P8I8I/4zwrwj/jvCfCP+N8L8Ih8Q4TozjxjhejOPHOEGME8Y4UYwTxzhJjJPGOFmMk8c4RYxTxjhVjFPHOE2M08Y4XYzTxzhDjDPGOFOMM8c4S4yzxjhbjLPHOEeMc8Y4V4xzxzhPjPPGOF+M88e4QIwLxrhQjAvHuEiMi8a4WIyLxzg0xiViXDLGpWIkxqVjXCbGZWNcLsblY1whxhVjXCnGlWNcJcZVY1wtxtVjXCPGNWNcK8a1Y1wnxnVjXC/G9WPcIMYNY9woxo1j3CTGTWPcLMbNY9wixi1j3CrGrWPcJsZtY9wuxu1j3CHGHWPcKcadY9wlxl1j3C3G3WPcI8Y9Y9wrxr1j3CfGfWPcL8b9YzwgxgNjPCjGg2M8JMZDYzwsxsNjPCLGI2M8KsajYzwmxmNjPC7G42M8IcYTYzwpxpNjNMZTYjw1xtNiPD3GM2I8M8azYjw7xnNiPDfGYTGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFeMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7Gq2O8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGe2O8L8b7Y3wgxgdjfCjGh2N8JMbhMY6IcWSMo2IcHeOYGMfG+GiMj8X4eIxPxPhkjE/F+HSMz8T4bIzPxfh8jC/E+GKML8X4coyvxPhqjK/F+HqMb8T4Zoxvxfh2jO/E+G6M78X4fowfxPhhjB/F+HGMn8T4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/F+HeM/8T4b4z/xTgkwXESHDfB8RIcP8EJEpwwwYkSnDjBSRKcNMHJEpw8wSkSnDLBqRKcOsFpEpw2wekSnD7BGRKcMcGZEpw5wVkSnDXB2RKcPcE5EpwzwbkSnDvBeRKcN8H5Epw/wQUSXDDBhRJcOMFFElw0wcUSXDzBoQkukeCSCS6VIAkuneAyCS6b4HIJLp/gCgmumOBKCa6c4CoJrprgagmunuAaCa6Z4FoJrp3gOgmum+B6Ca6f4AYJbpjgRglunOAmCW6a4GYJbp7gFglumeBWCW6d4DYJbpvgdglun+AOCe6Y4E4J7pzgLgnumuBuCe6e4B4J7pngXgnuneA+Ce6b4H4J7p/gAQkemOBBCR6c4CEJHprgYQkenuARCR6Z4FEJHp3gMQkem+BxCR6f4AkJnpjgSQmenKAJnpLgqQmeluDpCZ6R4JkJnpXg2cn4Q4YMwXMTHJbgeQmen+AFCV6Y4EUJXpzgJQlemuBlCV6e4BUJXpngVQkOEgwSDBOMEowTTBJME8wSzBMsEiwTrBKs/+fY/7WeugT7BK9O8JoEr03wugSvT/CGBG9M8KYEb07wlgRvTfC2BG9P8I4E70zwrgTvTvCeBO9N8L4E70/wgQQfTPChBB9O8JEEhyc4IsGRCY5KcHSCYxIcm+CjCT6W4OMJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4L8J/pfgkBTHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFIemuESKS6a4VIqkuHSKy6S4bIrLpbh8iiukuGKKK6W4coqrpLhqiquluHqKa6S4Zoprpbh2iuukuG6K66W4foobpLhhihuluHGKm6S4aYqbpbh5ilukuGWKW6W4dYrbpLhtituluH2KO6S4Y4o7pbhzirukuGuKu6W4e4p7pLhninuluHeK+6S4b4r7pbh/igekeGCKB6V4cIqHpHhoioeleHiKR6R4ZIpHpXh0isekeGyKx6V4fIonpHhiiieleHKKpnhKiqemeFqKp6d4RopnpnhWimeneE6K56Y4LMXzUjw/xQtSvDDFi1K8OMVLUrw0xctSvDzFK1K8MsWrUhykGKQYphilGKeYpJimmKWYp1ikWKZYpVin2KTYptil2Kd4dYrXpHhtiteleH2KN6R4Y4o3pXhzirekeGuKt6V4e4p3pHhnineleHeK96R4b4r3pXh/ig+k+GCKD6X4cIqPpDg8xREpjkxxVIqjUxyT4tgUH03xsRQfT/GJFJ9M8akUn07xmRSfTfG5FJ9P8YUUX0zxpRRfTvGVFF9N8bUUX0/xjRTfTPGtFN9O8Z0U303xvRTfT/GDFD9M8aMUP07xkxQ/TfGzFD9P8YsUv0zxqxS/TvGbFL9N8bsUv0/xhxR/TPGnFH9O8ZcUf03xtxR/T/GPFP9M8a8U/07xnxT/TfG/FIdkOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhm9luFiGi2c4NMMlMlwyw6UyJMOlM1wmw2UzXC7D5TNcIcMVM1wpw5UzXCXDVTNcLcPVM1wjwzUzXCvDtTNcJ8N1M1wvw/Uz3CDDDTPcKMONM9wkw00z3CzDzTPcIsMtM9wqw60z3CbDbTPcLsPtM9whwx0z3CnDnTPcJcNdM9wtw90z3CPDPTPcK8O9M9wnw30z3C/D/TM8IMMDMzwow4MzPCTDQzM8LMPDMzwiwyMzPCrDozM8JsNjMzwuw+MzPCHDEzM8KcOTMzTDUzI8NcPTMjw9wzMyPDPDszI8O8NzMjw3w2EZnpfh+RlekOGFGV6U4cUZXpLhpRleluHlGV6R4ZUZXpXhIMMgwzDDKMM4wyTDNMMswzzDIsMywyrDOsMmwzbDLsM+w6szvCbDazO8LsPrM7whwxszvCnDmzO8JcNbM7wtw9szvCPDOzO8K8O7M7wnw3szvC/D+zN8IMMHM3wow4czfCTD4RmOyHBkhqMyHJ3hmAzHZvhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz2X4fIYvZPhihi9l+HKGr2T4aoavZfh6hm9k+Ob/Ofx2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx4lynDjHSXKcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHoTkukeOSOS6VIzkuneMyOS6b43I5Lp/jCjmumONKOa6c4yo5rprjajmunuMaOa6Z41o5rp3jOjmum+N6Oa6f4wY5bpjjRjlunOMmOW6a42Y5bp7jFjlumeNWOW6d4zY5bpvjdjlun+MOOe6Y40457pzjLjnumuNuOe6e4x457pnjXjnuneM+Oe6b43457p/jATkemONBOR6c4yE5Hvq/feiQIYfneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjifnaI6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkeG6Ow3I8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8KsdBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2OV+d4TY7X5nhdjtfneEOON+Z4U44353hLjrfmeFuOt+d4R4535nhXjnfneE+O9+Z4X4735/hAjg/m+FCOD+f4SI7DcxyR48gcR+U4OscxOY7N8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDHD/K8eMcP8nx0xw/y/HzHL/I8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yPHPHP/K8e8c/8nx3xz/y3FIgeMUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVuHiBQwtcosAlC1yqQApcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLHAkwo8uUALPKXAUws8rcDTCzyjwDMLPKvAsws8p8BzCxxW4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsC7y6wGsKvLbA6wq8vsAbCryxwJsKvLnAWwq8tcDbCry9wDsKvLPAuwq8u8B7Cry3wPsKvL/ABwp8sMCHCny4wEcKHF7giAJHFjiqwNEFjilwbIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFfFvhVgV8X+E2B3xb4XYHfF/hDgT8W+FOBP/+Pz6T4a4G/Ffh7gX8U+GeBfxX4d4H/FPhvgf8VOKTEcUoct8TxShy/xAlKnLDEiUqcuMRJSpy0xMlKnLzEKUqcssSpSpy6xGlKnLbE6UqcvsQZSpyxxJlKnLnEWUqctcTZSpy9xDlKnLPEuUqcu8R5Spy3xPlKnL/EBUpcsMSFSly4xEVKXLTExUpcvMShJS5R4pIlLlUiJS5d4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElHl/iCSWeWOJJJZ5coiWeUuKpJZ5W4uklnlHimSWeVeLZJZ5T4rklDivxvBLPL/GCEi8s8aISLy7xkhIvLfGyEi8v8YoSryzxqhIHJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXl3iNSVeW+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyUOL3FEiSNLHFXi6BLHlDi2xEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9L/KrEr0v8psRvS/yuxO9L/KHEH0v8qcSfS/ylxF9L/K3E30v8o8Q/S/yrxL9L/KfEf0v8r8QhFY5T4bgVjlfh+BVOUOGEFU5U4cQVTlLhpBVOVuHkFU5R4ZQVTlXh1BVOU+G0FU5X4fQVzlDhjBXOVOHMFc5S4awVzlbh7BXOUeGcFc5V4dwVzlPhvBXOV+H8FS5Q4YIVLlThwhUuUuGiFS5W4eIVDq1wiQqXrHCpCqlw6QqXqXDZCpercPkKV6hwxQpXqnDlClepcNUKV6tw9QrXqHDNCteqcO0K16lw3QrXq3D9CjeocMMKN6pw4wo3qXDTCjercPMKt6hwywq3qnDrCrepcNsKt6tw+wp3qHDHCneqcOcKd6lw1wp3q3D3CveocM8K96pw7wr3qXDfCvercP8KD6jwwAoPqvDgCg+p8NAKD6vw8AqPqPDICo+q8OgKj6nw2AqPq/D4Ck+o8MQKT6rw5Aqt8JQKT63wtApPr/CMCs+s8KwKz67wnArPrXBYhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVOKgwqDCsMKowrjCpMK0wqzCvsKiwrLCqsK6wqbCtsKuwr/DqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+pcHiFIyocWeGoCkdXOKbCsRU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFf5e4R8V/lnhXxX+XeE/Ff5b4X8VDqlxnBrHrXG8GsevcYIaJ6xxohonrnGSGietcbIaJ69xihqnrHGqGqeucZoap61xuhqnr3GGGmescaYaZ65xlhpnrXG2GmevcY4a56xxrhrnrnGeGuetcb4a569xgRoXrHGhGheucZEaF61xsRoXr3FojUvUuGSNS9VIjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNu9e4R4171rhXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjcfWeFyNx9d4Qo0n1nhSjSfXaI2n1HhqjafVeHqNZ9R4Zo1n1Xh2jefUeG6Nw2o8r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsZBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI3DaxxR48gaR9U4usYxNY6t8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csav6rx6xq/qfHbGr+r8fsaf6jxxxp/qvHnGn+p8dcaf6vx9xr/qPHPGv+q8e8a/6nx3xr/q3FIg+M0OG6D4zU4foMTNDhhgxM1OHGDkzQ4aYOTNTh5g1M0OGWDUzU4dYPTNDhtg9M1OH2DMzQ4Y4MzNThzg7M0OGuDszU4e4NzNDhng3M1OHeD8zQ4b4PzNTh/gws0uGCDCzW4cIOLNLhog4s1uHiDQxtcosElG1yqQRpcusFlGly2weUaXL7BFRpcscGVGly5wVUaXLXB1RpcvcE1GlyzwbUaXLvBdRpct8H1Gly/wQ0a3LDBjRrcuMFNGty0wc0a3LzBLRrcssGtGty6wW0a3LbB7RrcvsEdGtyxwZ0a3LnBXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLrBYxo8tsHjGjy+wRMaPLHBkxo8uUEbPKXBUxs8rcHTGzyjwTMbPKvBsxs8p8FzGxzW4HkNnt/gBQ1e2OBFDV7c4CUNXtrgZQ1e3uAVDV7Z4FUNDhoMGgwbjBqMG0waTBvMGswbLBosG6warBtsGmwb7BrsG7y6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8F7Gry3wfsavL/BBxp8sMGHGny4wUcaHN7giAZHNjiqwdENjmlwbIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNvhVg183+E2D3zb4XYPfN/hDgz82+FODPzf4S4O/Nvhbg783+EeDfzb4V4N/N/hPg/82+F+DQ1ocp8VxWxyvxfFbnKDFCVucqMWJW5ykxUlbnKzFyVucosUpW5yqxalbnKbFaVucrsXpW5yhxRlbnKnFmVucpcVZW5ytxdlbnKPFOVucq8W5W5ynxXlbnK/F+VtcoMUFW1yoxYVbXKTFRVtcrMXFWxza4hItLtniUi3S4tItLtPisi0u1+LyLa7Q4ootrtTiyi2u0uKqLa7W4uotrtHimi2u1eLaLa7T4rotrtfi+i1u0OKGLW7U4sYtbtLipi1u1uLmLW7R4pYtbtXi1i1u0+K2LW7X4vYt7tDiji3u1OLOLe7S4q4t7tbi7i3u0eKeLe7V4t4t7tPivi3u1+L+LR7Q4oEtHtTiwS0e0uKhLR7W4uEtHtHikS0e1eLRLR7T4rEtHtfi8S2e0OKJLZ7U4skt2uIpLZ7a4mktnt7iGS2e2eJZLZ7d4jktntvisBbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavanHQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt/i1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uLwFke0OLLFUS2ObnFMi2NbfLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+xRdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9a/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/Wvyzxb9a/LvFf1r8t8X/WhzS4TgdjtvheB2O3+EEHU7Y4UQdTtzhJB1O2uFkHU7e4RQdTtnhVB1O3eE0HU7b4XQdTt/hDB3O2OFMHc7c4SwdztrhbB3O3uEcHc7Z4Vwdzt3hPB3O2+F8Hc7f4QIdLtjhQh0u3OEiHS7a4WIdLt7h0A6X6HDJDpfqkA6X7nCZDpftcLkOl+9whQ5X7HClDlfucJUOV+1wtQ5X73CNDtfscK0O1+5wnQ7X7XC9DtfvcIMON+xwow437nCTDjftcLMON+9wiw637HCrDrfucJsOt+1wuw6374b8/y/djh3u1OHOHe7S4a4d7tbh7h3u0eGeHe7V4d4d7tPhvh3u1+H+HR7Q4YEdHtThwR0e0uGhHR7W4eEdHtHhkR0e1eHRHR7T4bEdHtfh8R2e0OGJHZ7U4ckd2uEpHZ7a4Wkdnt7hGR2e2eFZHZ7d4TkdntvhsA7P6/D8Di/o8MIOL+rw4g4v6fDSDi/r8PIOr+jwyg6v6nDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/h1R1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdPtThwx0+0uHwDkd0OLLDUR2O7nBMh2M7fLTDxzp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzr8tMPPOvy8wy86/LLDrzr8usNvOvy2w+86/L7DHzr8scOfOvy5w186/HXYEH/r8PcO/+jwzw7/6vDvDv/p8N8O/+twSI/j9Dhuj+P1OH6PE/Q4YY8T9Thxj5P0OGmPk/U4eY9T9Dhlj1P1OHWP0/Q4bY/T9Th9jzP0OGOPM/U4c4+z9Dhrj7P1OHuPc/Q4Z49z9Th3j/P0OG+P8/U4f48L9Lhgjwv1uHCPi/S4aI+L9bh4j0N7XKLHJXtcqkd6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxx5N6PLlHezylx1N7PK3H03s8o8czezyrx7N7PKfHc3sc1uN5PZ7f4wU9XtjjRT1e3OMlPV7a42U9Xt7jFT1e2eNVPQ56DHoMe4x6jHtMekx7zHrMeyx6LHuseqx7bHpse+x67Hu8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7eryzx7t6vLvHe3q8t8f7ery/xwd6fLDHh3p8uMdHehze44geR/Y4qsfRPY7pcWyP/4+Fc2zC9ACU5WbjjW3b6di2bdt2x9rYNt7HRmwtY9u2jVvn3PMTZqqm5ktXjxjgyAGOGuDoAY4Z4NgBPj3AZwb47ACfG+DzA3xhgC8O8KUBvjzAVwb46gBfG+DrA3xjgG8O8K0Bvj3Adwb47gDfG+D7A/xggB8O8KMBfjzATwb46QA/G+DnA/xigF8O8KsBfj3Abwb47QC/G+D3A/xhgD8O8KcB/jzAXwb46wB/G+DvA/xjgH8O8K8B/j3Afwb47wD/G+CQAMcJcGiA4wY4XoDjBzhBgBMGOFGAEwc4LMBJApw0wMkCnDzAKQKcMsCpApw6wGkCnDbA6QKcPsAZApwxwJkCnDnAWQKcNcDZApw9wDkCnDPAuQKcO8B5Apw3wPkCnD/ABQJcMMCFAlw4wEUCXDTAxQJcPMAlAlwyQAJcKsClA1wmwGUDXC7A5QNcIcAVA1wpwJUDXCXAVQNcLcDVA1wjwDUDXCvAtQNcJ8B1A1wvwPUD3CDADQPcKMCNA9wkwE0D3CzAzQPcIsAtA9wqwK0D3CbAbQPcLsDtA9whwB0D3CnAnQPcJcBdA9wtwN0D3CPAPQPcK8C9A9wnwH0D3C/A/QM8IMADAzwowIMDPCTAQwM8LMDDAzwiwCMDPCrAowM8JsBjAzwuwOMDPCHAEwM8KUADPDnAUwI8NcDTAjw9wDMCPDPAswI8O8BzAjw3wOEBnhfg+QFeEOCFAV4U4MUBXhLgpQFeFuDlAV4R4JUBXhXg1QFeE+C1AV4X4PUB3hDgjQHeFODNAd4S4K0B3hbg7QHeEeCdAQ4CDAIMA4wCjANMAkwDzALMAywCLAOsAqwDbAJsA+wC7AO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrAEQGODHBUgKMDHBPg2ACfDvCZAJ8N8LkAnw/whQBfDPClAF8O8JUAXw3wtQBfD/CNAN8M8K0A3w7wnQDfDfC9AN8P8IMAPwzwowA/DvCTAD8N8LMAPw/wiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8N8L9gXIeEOE6IQ0McN8TxQhw/xAlCnDDEiUKcOMRhIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4R4pIhEuJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGOJJIRriySGeEuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhDg/xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthBvD/GOEO8McRBiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+JdId4d4j0h3hvifSHeH+IDIT4Y4kMhPhziIyE+GuJjIT4e4hMhPhniUyGOCHFkiKNCHB3imBDHhvh0iM+E+GyIz4X4fIgvhPhiiC+F+HKIr4T4aoivhfh6iG+E+GaIb4X4dojvhPhuiO+F+H6IH4T4YYgfhfhxiJ+E+GmIn4X4eYhfhPhliF+F+HWI34T4bYjfhfh9iD+E+GOIP4X4c4i/hPhriL+F+HuIf4T4Z4h/hfh3iP+E+G+I/4U4JMJxIhwa4bgRjhfh+BFOEOGEEU4U4cQRDotwkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiXjJAIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIT4rQCE+O8JQIT43wtAhPj/CMCM+M8KwIz47wnAjPjXB4hOdFeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4SDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsI74rw7gjvifDeCO+L8P4IH4jwwQgfivDhCB+J8NEIH4vw8QifiPDJCJ+KcESEIyMcFeHoCMdEODbCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN8L8L3I/wgwg8j/CjCjyP8JMJPI/wsws8j/CLCLyP8KsKvI/wmwm8j/C7C7yP8IcIfI/wpwp8j/CXCXyP8LcLfI/wjwj8j/CvCvyP8J8J/I/wvwiExjhPj0BjHjXG8GMePcYIYJ4xxohgnjnFYjJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88U4f4wLxLhgjAvFuHCMi8S4aIyLxbh4jEvEuGSMxLhUjEvHuEyMy8a4XIzLx7hCjCvGuFKMK8e4SoyrxrhajKvHuEaMa8a4Voxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuEmMmw4dMuR/ets8xi1i3DLGrWLcOsZtYtw2xu1i3D7GHWLcMcadYtw5xl1i3DXG3WLcPcY9Ytwzxr1i3DvGfWLcN8b9Ytw/xgNiPDDGg2I8OMZDYjw0xsNiPDzGI2I8MsajYjw6xmNiPDbG42I8PsYTYjwxxpNiNMaTYzwlxlNjPC3G02M8I8YzYzwrxrNjPCfGc2McHuN5MZ4f4wUxXhjjRTFeHOMlMV4a42UxXh7jFTFeGeNVMV4d4zUxXhvjdTFeH+MNMd4Y400x3hzjLTHeGuNtMd4e4x0x3hnjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xrtivDvGe2K8N8b7Yrw/xgdifDDGh2J8OMZHYnw0xsdifDzGJ2J8MsanYhwR48gYR8U4OsYxMY6N8ekYn4nx2Rifi/H5GF+I8cUYX4rx5RhfifHVGF+L8fUY34jxzRjfivHtGN+J8d0Y34vx/Rg/iPHDGD+K8eMYP4nx0xg/i/HzGL+I8csYv4rx6xi/ifHbGL+L8fsYf4jxxxh/ivHnGH+J8dcYf4vx9xj/iPHPGP+K8e8Y/4nx3xj/i3FIguMkODTBcRMcL8HxE5wgwQkTnCjBiRMcluAkCU6a4GQJTp7gFAlOmeBUCU6d4DQJTpvgdAlOn+AMCc6Y4EwJzpzgLAnOmuBsCc6e4BwJzpngXAnOneA8Cc6b4HwJzp/gAgkumOBCCS6c4CIJLprgYgkunuASCS6ZIAkuleDSCS6T4LIJLpfg8gmukOCKCa6U4MoJrpLgqgmuluDqCa6R4JoJrpXg2gmuk+C6Ca6X4PoJbpDghglulODGCW6S4KYJbpbg5glukeCWCW6V4NYJbpPgtglul+D2Ce6Q4I4J7pTgzgnukuCuCe6W4O4J7pHgngnuleDeCe6T4L4J7pfg/gkekOCBCR6U4MEJHpLgoQkeluDhCR6R4JEJHpXg0Qkek+CxCR6X4PEJnpDgiQmelKAJnpzgKcOHeWqCpyV4eoJnJHhmgmcleHaC5yR4boLDEzwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwasTvCbBaxO8LsHrE7whwRsTvCnBmxO8JcFbE7wtwdsTvCPBOxMcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneFeCdyd4T4L3Jnhfgvcn+ECCDyb4UIIPJ/hIgo8m+FiCjyf4RIJPJvhUgiMSHJngqARHJzgmwbEJPp3gMwk+m+BzCT6f4AsJvpjgSwm+nOArCb6a4GsJvp7gGwm+meBbCb6d4DsJvpvgewm+n+AHCX6Y4EcJfpzgJwl+muBnCX6e4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+B/CQ5JcZwUh6Y4borjpTh+ihOkOGGKE6U4cYrDUpwkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTJMWlUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjTFk1M8JcVTUzwtxdNTPCPFM1M8K8WzUzwnxXNTHJ7ieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsW7Urw7xXtSvDfF+1K8P8UHUnwwxYdSfDjFR1J8NMXHUnw8xSdSfDLFp1IckeLIFEelODrFMSmOTfHpFJ9J8dkUn0vx+RRfSPHFFF9K8eUUX0nx1RRfS/H1FN9I8c0U30rx7RTfSfHdFN9L8f0UP0jxwxQ/SvHjFD9J8dMUP0vx8xS/SPHLFL9K8esUv0nx2xS/S/H7FH9I8ccUf0rx5xR/SfHXFH9L8fcU/0jxzxT/SvHvFP9J8d8U/0txSIbjZDg0w3EzHC/D8TOcIMMJM5wow4kzHJbhJBlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOEiGS6a4WIZLp7hEhkumSEZLpXh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZbpThxhlukuGmGW6W4eYZbpHhlhluleHWGW6T4bYZbpfh9hnukOGOGe6U4c4Z7pLhrhnuluHuGe6R4Z4Z7pXh3hnuk+G+2dD/ZQf2z/CADA/M8KAMD87wkAwPzfCwDA/P8IgMj8zwqAyPzvCYDI/N8LgMj8/whAxPzPCkDM3w5AxPyfDUDE/L8PQMz8jwzAzPyvDsDM/J8NwMh2d4XobnZ3hBhhdmeFGGF2d4SYaXZnhZhpdneEWGV2Z4VYZXZ3hNhtdmeF2G12d4Q4Y3ZnhThjdneEuGt2Z4W4a3Z3hHhndmOMgwyDDMMMowzjDJMM0wyzDPsMiwzLDKsM6wybDNsMuwz/CuDO/O8J4M783wvgzvz/CBDB/M8KEMH87wkQwfzfCxDB/P8IkMn8zwqQxHZDgyw1EZjs5wTIZjM3w6w2cyfDbD5zJ8PsMXMnwxw5cyfDnDVzJ8NcPXMnw9wzcyfDPDtzJ8O8N3Mnw3w/cyfD/DDzL8MMOPMvw4w08y/DTDzzL8PMMvMvwyw68y/DrDbzL8NsPvMvw+wx8y/DHDnzL8OcNfMvw1w98y/D3DPzL8M8O/Mvw7w38y/DfD/zIckuM4OQ7Ncdwcx8tx/BwnyHHCHCfKceIch+U4SY6T5jhZjpPnOEWOU+Y4VY5T5zhNjtPmOF2O0+c4Q44z5jhTjjPnOEuOs+Y4W46z5zhHjnPmOFeOc+c4T47z5jhfjvPnuECOC+a4UI4L57hIjovmuFiOi+e4RI5L5kiOS+W4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqvkuGqOq+W4eo5r5LhmjmvluHaO6+S4bo7r5bh+jhvkuGGOG+W4cY6b5LhpjpvluHmOW+S4ZY5b5bh1jtvkuG2O2+W4fY475LhjjjvluHOOu+S4a4675bh7jnvkuGeOe+W4d4775LhvjvvluH+OB+R4YI4H5XhwjofkeGiOh+V4eI5H5HhkjkfleHSOx+R4bI7H5Xh8jifkeGKOJ+VojifneEqOp+Z4Wo6n53hGjmfmeFaOZ+d4To7n5jg8x/NyPD/HC3K8MMeLcrw4x0tyvDTHy3K8PMcrcrwyx6tyvDrHa3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8dBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2Od+V4d4735HhvjvfleH+OD+T4YI4P5fhwjo/k+GiOj+X4eI5P5Phkjk/lOCLHkTmOynF0jmNyHJvj0zk+k+OzOT6X4/M5vpDjizm+lOPLOb6S46s5vpbj6zm+keObOb6V49s5vpPjuzm+l+P7OX6Q44c5fpTjxzl+kuOnOX6W4+c5fpHjlzl+lePXOX6T47c5fpfj9zn+kOOPOf6U4885/pLjrzn+luPvOf6R4585/pXj3zn+k+O/Of6X45ACxylwaIHjFjhegeMXOEGBExY4UYETFziswEkKnLTAyQqcvMApCpyywKkKnLrAaQqctsDpCpy+wBkKnLHAmQqcucBZCpy1wNkKnL3AOQqcs8C5Cpy7wHkKnLfA+Qqcv8AFClywwIUKXLjARQpctMDFCly8wCUKXLJAClyqwKULXKbAZQtcrsDlC1yhwBULXKnAlQtcpcBVC1ytwNULXKPANQtcq8C1C1ynmOB/v3e9AtcvcIMCNyxwowI3LnCTAjctcLMCNy9wiwK3LHCrArcucJsCty1wuwK3L3CHAncscKcCdy5wlwJ3LXC3AncvcI8C9yxwrwL3LnCfAvctcL8C9y/wgAIPLPCgAg8u8JACDy3wsAIPL/CIAo8s8KgCjy7wmAKPLfC4Ao8v8IQCTyzwpAIt8OQCTynw1AJPK/D0As8o8MwCzyrw7ALPKfDcAocXeF6B5xd4QYEXFnhRgRcXeEmBlxZ4WYGXF3hFgVcWeFWBVxd4TYHXFnhdgdcXeEOBNxZ4U4E3F3hLgbcWeFuBtxd4R4F3FjgoMCgwLDAqMC4wKTAtMCswL7AosCyYcMiQIdYFNgW2BXYF9gXeVeDdBd5T4L0F3lfg/QU+UOCDBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXgiAJHFjiqwNEFjilwbIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFfFvhVgV8X+E2B3xb4XYHfF/hDgT8W+FOBPxf4S4G/Fvhbgb8X+EeBfxb4V4F/F/hPgf8W+F+BQ0ocp8ShJY5b4ngljl/iBCVOWOJEJU5c4rASJylx0hInK3HyEqcoccoSpypx6hKnKXHaEqcrcfoSZyhxxhJnKnHmEmcpcdYSZytx9hLnKHHOEucqce4S5ylx3hLnK3H+EhcoccESFypx4RIXKXHREhcrcfESlyhxyRIpcakSly5xmRKXLXG5EpcvcYUSVyxxpRJXLnGVElctcbUSVy9xjRLXLHGtEtcucZ0S1y1xvRLXL3GDEjcscaMSNy5xkxI3LXGzEjcvcYsStyxxqxK3LnGbErctcbsSty9xhxJ3LHGnEncucZcSdy1xtxJ3L3GPEvcsca8S9y5xnxL3LXG/Evcv8YASDyzxoBIPLvGQEg8t8bASDy/xiBKPLPGoEo8u8ZgSjy3xuBKPL/GEEk8s8aQSLfHkEk8p8dQSTyvx9BLPKPHMEs8q8ewSzynx3BKHl3heieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Y4KDEoMSwxKjEuMSkxLTErMS+xKLEssSqxLrEpsS2xK7Ev8a4S7y7xnhLvLfG+Eu8v8YESHyzxoRIfLvGREh8t8bESHy/xiRKfLPGpEkeUOLLEUSWOLnFMiWNLfLrEZ0p8tsTnSny+xBdKfLHEl0p8ucRXSny1xNdKfH3i/5OblvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiUMqHKfCoRWOW+F4FY5f4QQVTljhRBVOXOGwCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKqXCpCpeucJkKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCq3w5ApPqfDUCk+r8PQKz6jwzArPqvDsCs+p8NwKh1d4XoXnV3hBhRdWeFGFF1d4SYWXVnhZhZdXeEWFV1Z4VYVXV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWOKgwqDCsMKowrjCpMK0wqzCvsKiwrLCqsK6wqbCtsKuwr/CuCu+u8J4K763wvgrvr/CBCh+s8KEKH67wkQofrfCxCh+v8IkKn6zwqQpHVDiywlEVjq5wTIVjK3y6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocUuM4NQ6tcdwax6tx/BonqHHCGieqceIah9U4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1kiNS9W4dI3L1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9VojSfXeEqNp9Z4Wo2n13hGjWfWeFaNZ9d4To3n1ji8xvNqPL/GC2q8sMaLary4xktqvLTGy2q8vMYraryyxqtqvLrGa2q8tsbrary+xhtqvLHGm2q8ucZbary1xttqvL3GO2q8s8ZBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2Nd9V4d4331HhvjffVeH+ND9T4YI0P1fhwjY/U+GiNj9X4eI1P1PhkjU/VOKLGkTWOqnF0jWNqHFvj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X45AGx2lwaIPjNjheg+M3OEGDEzY4UYMTNziswUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLJBGlyqwaUbXKbBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypQRs8ucFTGjy1wdMaPL3BMxo8s8GzGjy7wXMaPLfB4Q2e1+D5DV7Q4IUNXtTgxQ1e0uClDV7W4OUNXtHglQ1e1eDVDV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0NDhoMGgwbjBqMG0waTBvMGswbLBosG6warBtsGmwb7BrsG7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsERDY5scFSDoxsc0+DYBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwaHtDhOi0NbHLfF8Vocv8UJWpywxYlanLjFYS1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLdLiUi0u3eIyLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS3a4sktntLiqS2e1uLpLZ7R4pktntXi2S2e0+K5LQ5v8bwWz2/xghYvbPGiFi9u8ZIWL23xshYvb/GKFq9s8aoWr27xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbHHQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt/iXS3e3eI9Ld7b4n0t3t/iAy0+2OJDLT7c4iMtPtriYy0+3uITLT7Z4lMtjmhxZIujWhzd4pgWx7b/fy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//9T54Ox+lwaIfjdjheh+N3OEGHE3Y4UYcTdzisw0k6nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8wyU6XLJDOlyqw6U7XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTOzypQzs8ucNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfD4R2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eHVHV7T4bUdXtfh9R3e0OGNHd7U4c0d3tLhrR3e1uHtHd7R4Z0dDjoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO7yrw7s7vKfDezu8r8P7O3ygwwc7fKjDhzt8pMNHO3ysw8c7fKLDJzt8qsMRHY7scFSHozsc0+HYDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvDv/u8J8O/+3wvw6H9DhOj0N7HLfH8Xocv8cJepywx4l6nLjHYT1O0uOkPU7W4+Q9TtHjlD1O1ePUPU7T47Q9Ttfj9D3O0OOMPc7U48w9ztLjrD3O1uPsPc7R45w9ztXj3D3O0+O8Pc7X4/w9LtDjgj0u1OPCPS7S46I9Ltbj4j0u0eOSPdLjUj0u3eMyPS7b43I9Lt/jCj2u2ONKPa7c4yo9rtrjaj2u3uMaPa7Z41o9rt3jOj2u2+N6Pa7f4wY9btjjRj1u3OMmPW7a42Y9bt7jFj1u2eNWPW7d4zY9btvjdj1u3+MOPe7Y40497tzjLj3u2uNuPe7e4x497tnjXj3u3eM+Pe7b43497t/jAT0e2ONBPR7c4yE9HtrjYT0e3uMRPR7Z41E9Ht3jMT0e2+NxPR7f4wk9ntjjST3a48k9ntLjqT2e1uPpPZ7R45k9ntXj2T2e0+O5PQ7v8bwez+/xgh4v7PGiHi/u8ZIeL+3xsh4v7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7HHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY9/jXT3e3eM9Pd7b43093t/jAz0+2ONDPT7c4yM9PtrjYz0+3uMTPT7Z41M9juhxZI+jehzd45gex/b49P9j0Z7b+C4ch4tv1VbLtu062bZt2/bJtm3b+7xtZNtYtrFqtfv6XvfvPIfXf2eALwzwxQG+NMCXB/jKAF8d4GsDfH2AbwzwzQG+NcC3B/jOAN8d4HsDfH+AHwzwwwF+NMCPBzhqgJ8M8NMBfjbAzwf4xQC/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HODoAf41wL8H+M8Axwzw3wH+N8CxAxwS4NAAxwlw3ADHC3BYgMMDHD/ACQIcEeCEAU4U4MQBThLgpAFOFuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBEuASAS4Z4FIBLh3gMgEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHOAhAR4a4GEBHh7gEQEeGeBRAR4d4DEBHhvgcQEeH+AJARrgiQGeFODJAZ4S4KkBnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrQHeFuDtAd4R4J0B3hXg3QHeE+C9Ad4X4P0BPhDggwE+FODDAT4S4KMBPhbg4wGODHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/gEwE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwG+HeA7Ab4b4HsBvh/gBwF+GOBHAX4c4KgAPwnw0wA/C/DzAL8I8MsAvwrw6wC/CfDbAL8L8PsAfwjwxwB/CvDnAH8J8NcAfwvw9wD/CPDPAEcH+FeAfwf4T4BjAvw3wP8CHBvgkBCHhjhOiOOGOF6Iw0IcHuL4IU4Q4ogQJwxxohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD5EQlwhxyRCXCnHpEJcJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjREE8M8aQQTw7xlBBPDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8M8aoQrw7xmhCvDfG6EK8P8YYQbwzxphBvDvGWEG8N8bYQbw/xjhDvDPGuEO8O8Z4Q7w3xvhDvD/GBEB8M8aEQHw7xkRAfDfGxEB8PcWSIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EJ8I8ckQnwrx6RCfCfHZEJ8L8fkQXwjxxRBfCvHlEF8J8dUQXwvx9RDfCPHNEN8K8e0Q3wnx3RDfC/H9ED8I8cMQPwrx4xBHhfhJiJ+G+FmIn4f4RYhfhvhViF+H+E2I34b4XYjfh/hDiD+G+FOIP4f4S4i/hvhbiL+H+EeIf4Y4OsS/Qvw7xH9CHBPivyH+F+LYEIdEODTCcSIcN8LxIhwW4fAIx49wgghHRDhhhBNFOHGEk0Q4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiERLhEhEtGuFSES0e4TITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGsP+79nI8L1Ilw/wg0i3DDCjSLcOMJNItw0ws0i3DzCLSLcMsKtItw6wm0i3DbC7SLcPsIdItwxwp0i3DnCXSLcNcLdItw9wj0i3DPCvSLcO8J9Itw3wv0i3D/CAyI8MMKDIjw4wkMiPDTCwyI8PMIjIjwywqMiPDrCYyI8NsLjIjw+whMiNMITIzwpwpMjPCXCUyM8LcLTIzwjwjMjPCvCsyM8J8JzIzwvwvMjvCDCCyO8KMKLI7wkwksjvCzCyyO8IsIrI7wqwqsjvCbCayO8LsLrI7whwhsjvCnCmyO8JcJbI7wtwtsjvCPCOyO8K8K7I7wnwnsjvC/C+yN8IMIHI3wowocjfCTCRyN8LMLHIxwZ4SDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsInInwywqcifDrCZyJ8NsLnInw+whcifDHClyJ8OcJXInw1wtcifD3CNyJ8M8K3Inw7wncifDfC9yJ8P8IPIvwwwo8i/DjCURF+EuGnEX4W4ecRfhHhlxF+FeHXEX4T4bcRfhfh9xH+EOGPEf4U4c8R/hLhrxH+FuHvEf4R4Z8Rjo7wrwj/jvCfCMdE+G+E/0U4NsIhMQ6NcZwYx41xvBiHxTg8ZvTY/58jYpwwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDxGYlwixiVjXCrGpWNcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhRmM8McaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYjw/xgtivDDGi2K8OMZLYrw0xstivDzGK2K8MsarYrw6xmtivDbG62K8PsYbYrwxxptivDnGW2K8NcbbYrw9xjtivDPGu2K8O8Z7Yrw3xvtivD/GB2J8MMaHYnw4xkdifDTGx2J8PMaRMQ5iDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GN8IsYnY3wqxqdjfCbGZ2N8LsbnY3whxhdjfCnGl2N8JcZXY3wtxtdjfCPGN2N8K8a3Y3wnxndjfC/G92P8IMYPY/woxo9jHBXjJzF+GuNnMX4e4xcxfhnjVzF+HeM3MX4b43cxfh/jDzH+GONPMf4c4y8x/hrjbzH+HuMfMf4Z4+gY/4rx7xj/iXFMjP/G+F+MY2MckuDQBMdJcNwEx0twWILDExw/wQkSHJHghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCZLgEgkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQma4IkJnpTgyQmekuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPgvQnel+D9CT6Q4IMJPpTgwwk+kuCjCT6W4OMJjkxwkGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2Cf4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOCoBD9J8NMEP0vw8wS/SPDLBL9K8OsEv0nw2wS/S/D7BH9I8McEf0rw5wR/SfDXBH9L8PcE/0jwzwRHJ/hXgn8n+E+CYxL8N8H/Ehyb4JAUh6Y4TorjpjheisNSHJ7i+ClOkOKIFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF0+RFJdIcckUl0px6RSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I0RRPTPGkFE9O8ZQUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTPGhFB9O8ZEUH03xsRQfT3FkioMUgxTDFKMU4xSTFNMUsxTzFIsUyxSrFOsUmxTbFLsU+xSfSPHJFJ9K8ekUn0nx2RSfS/H5FF9I8cUUX0rx5RRfSfHVFF9L8fUU30jxzRTfSvHtFN9J8d0U30vx/RQ/SPHDFD9K8eMUR6X4SYqfpvhZip+n+EWKX6b4VYpfp/hNit+m+F2K36f4Q4o/pvhTij+n+EuKv6b4W4q/p/hHin+mODrFv1L8O8V/UhyT4r8p/pfi2BSHZDg0w3EyHDfD8TIcluHwDMfPcIIMR2Q4YYYTZThxhpNkOGmGk2U4eYZTZDhlhlNlOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhghgtluHCGi2S4aIaLZbh4hmS4RIZLZrhUhktnuEyGy2a4XIbLZ7hChitmuFKGK2e4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2e4R4Z7ZrhXhntnuE+G+2a4X4b7Z3hAhgdmeFCGB2d4SIaHZnhYhodneESGR2Z4VIZHZ3hMhsdmeFyGx2d4QoZmeGKGJ2V4coanZHhqhqdleHqGZ2R4ZoZnZXh2hudkeG6G52V4foYXZHhhhhdleHGGl2R4aYaXZXh5hldkeGWGV2V4dYbXZHhthtdleH2GN2R4Y4Y3ZXhzhrdkeGuGt2V4e4Z3ZHhnhndleHeG92R4b4b3ZXh/hg9k+GCGD2X4cIaPZPhoho9l+HiGIzMcZBhkGGYYZRhnmGSYZphlmGdYZFhmWGVYZ9hk2GbYZdhn+ESGT2b4VIZPZ/hMhs9m+FyGz2f4QoYvZvhShi9n+EqGr2b4WoavZ/hGhm9m+FaGb2f4TobvZvhehu9n+EGGH2b4UYYfZzgqw08y/DTDzzL8PMMvMvwyw68y/DrDbzL8NsPvMvw+wx8y/DHDnzL8OcNfMvw1w98y/D3DPzL8M8PRGf6V4d8Z/pPhmAz/zfC/DMdmOCTHoTmOk+O4OY6X47Ach+c4fo4T5DgixwlznCjHiXOcJMdJc5wsx8lznCLHKXOcKsepc5wmx2lznC7H6XOcIccZc5wpx5lznCXHWXOcLcfZc5wjxzlznCvHuXOcJ8d5c5wvx/lzXCDHBXNcKMeFc1wkx0VzXCzHxXMkxyVyXDLHpXJcOsdlclw2x+VyXD7HFXJcMceVclw5x1VyXDXH1XJcPcc1clwzx7VyXDvHdXJcN8f1clw/xw1y3DDHjXLcOMdNctw0x81y3DzHLXLcMsetctw6x21y3DbH7XLcPscdctwxx51y3DnHXXLcNcfdctw9xz1y3DPHvXLcO8d9ctw3x/1y3D/HA3I8MMeDcjw4x0NyPDTHw3I8PMcjcjwyx6NyPDrHY3I8Nsfjcjw+xxNyNMcTczwpx5NzPCXHU3M8LcfTczwjxzNzPCvHs3M8J8dzczwvx/NzvCDHC3O8KMeLc7wkx0tzvCzHy3O8Iscrc7wqx6tzvCbHa3O8Lsfrc7whxxtzvCnHm3O8Jcdbc7wtx9tzvCPHO3O8K8e7c7wnx3tzvC/H+3N8IMcHc3wox4dzfCTHR3N8LMfHcxyZ4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HfsSQIf8z8WSOT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6jcvwkx09z/CzHz3P8Iscvc/wqx6//53EIfpvjdzl+n+MPOf6Y4085/pzjLzn+muNvOf6e4x85/pnj6Bz/yvHvHP/JcUyO/+b4X45jcxxS4NACxylw3ALHK3BYgcMLHL/ACQocUeCEBU5U4MQFTlLgpAVOVuDkBU5R4JQFTlXg1AVOU+C0BU5X4PQFzlDgjAXOVODMBc5S4KwFzlbg7AXOUeCcBc5V4NwFzlPgvAXOV+D8BS5Q4IIFLlTgwgUuUuCiBS5W4OIFUuASBS5Z4FIFLl3gMgUuW+ByBS5f4AoFrljgSgWuXOAqBa5a4GoFrl7gGgWuWeBaBa5d4DoFrlvgegWuX+AGBW5Y4EYFblzgJgVuWuBmBW5e4BYFblngVgVuXeA2BW5b4HYFbl/gDgXuWOBOBe5c4C4F7lrgbgXuXuAeBe5Z4F4F7l3gPgXuW+B+Be5f4AEFHljgQQUeXOAhBR5a4GEFHl7gEQUeWeBRBR5d4DEFHlvgcQUeX+AJBVrgiQWeVODJBZ5S4KkFnlbg6QWeUeCZBZ5V4NkFnlPguQWeV+D5BV5Q4IUFXlTgxQVeUuClBV5W4OUFXlHglQVeVeDVBV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0F3lXg3QXeU+C9Bd5X4P0FPlDggwU+VODDBT5S4KMFPlbg4wWOLHBQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF/gEwU+WeBTBT5d4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4KgCPynw0wI/K/DzAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAkcX+FeBfxf4T4FjCvy3wP8KHFvgkBKHljhOieOWOF6Jw0ocXuL4JU5Q4ogSJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL5ESlyhxyRKXKnHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjREk8s8aQSTy7xlBJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSzy/xghIvLPGiEi8u8ZISLy3xshIvL/GKEq8s8aoSry7xmhKvLfG6Eq8v8YYSbyzxphJvLvGWEm8t8bYSby/xjhLvLPGuEu8u8Z4S7y3xvhLvL/GBEh8s8aESHy7xkRIfLfGxEh8vcWSJgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7Ep8o8ckSnyrx6RKfKfHZEp8r8fkSXyjxxRJfKvHlEl8p8dUSXyvx9RLfKPHNEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xJHlfhJiZ+W+FmJn5f4RYlflvhViV+X+E2J35b4XYnfl/hDiT+W+FOJP5f4S4m/lvhbib+X+EeJf5Y4usS/Svy7xH9KHFPivyX+V+LYEodUOLTCcSoct8LxKhxW4fAKx69wggpHVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFVLhEhUtWuFSFS1e4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVowaOWSIR1d4TIXHVnhchcdXeEKFVnhihSdVeHKFp1R4aoWnVXh6hWdUeGaFZ1V4doXnVHhuhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVDL+6wmsqvLbC6yq8vsIbKryxwpsqvLnCWyq8tcLbKry9wjsqvLPCuyq8u8J7Kry3wvsqvL/CByp8sMKHKny4wkcqfLTCxyp8vMKRFQ4qDCoMK4wqjCtMKkwrzCrMKywqLCusKqwrbCpsK+wq7Ct8osInK3yqwqcrfKbCZyt8rsLnK3yhwhcrfKnClyt8pcJXK3ytwtcrfKPCNyt8q8K3K3ynwncrfK/C9yv8oMIPK/yowo8rHFXhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4egK/6rw7wr/qXBMhf9W+F+FYyscUuPQGsepcdwax6txWI3Daxy/xglqHFHjhDVOVOPENU5S46Q1Tlbj5DVOUeOUNU5V49Q1TlPjtDVOV+P0Nc5Q44w1zlTjzDXOUuOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1LlLjojUuVuPiNVLjEjUuWeNSNS5d4zI1LlvjcjUuX+MKNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTUeXeMxNR5b43E1Hl/jCTVa44k1nlTjyTWeUuOpNZ5W4+k1nlHjmTWeVePZNZ5T47k1nlfj+TVeUOOFNV5U48U1XlLjpTVeVuPlNV5R45U1XlXj1TVeU+O1NV5X4/U13lDjjTXeVOPNNd5S46013lbj7TXeUeOdNd5V49013lPjvTXeV+P9NT5Q44M1PlTjwzU+UuOjNT5W4+M1jqxxUGNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2Nf4xM1PlnjUzU+XeMzNT5b43M1Pl/jCzW+WONLNb5c4ys1vlrjazW+XuMbNb5Z41s1vl3jOzW+W+N7Nb5f4wc1fljjRzV+XOOoGj+p8dMaP6vx8xq/qPHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6jxzxpH1/hXjX/X+E+NY2r8t8b/ahxb45AGhzY4ToPjNjheg8MaHN7g+A1O0OCIBidscKIGJ25wkgYnbXCyBidvcIoGp2xwqganbnCaBqdtcLoGp29whgZnbHCmBmducJYGZ21wtgZnb3COBudscK4G525wngbnbXC+BudvcIEGF2xwoQYXbnCRBhdtcLEGF2+QBpdocMkGl2pw6QaXaXDZBpdrcPkGV2hwxQZXanDlBldpcNUGV2tw9QbXaHDNBtdqcO0G12lw3QbXa3D9BjdocMMGN2pw4wY3aXDTBjdrcPMGt2hwywa3anDrBrdpcNsGt2tw+wZ3aHDHBndqcOcGd2lw1wZ3a3D3BvdocM8G92pw7wb3aXDfBvdrcP8GD2jwwAYPavDgBg9p8NAGD2vw8AaPaPDIBo9q8OgGj2nw2AaPa/D4Bk9o0AZPbPCkBk9u8JQGT23wtAZPb/CMBs9s8KwGz27wnAbPbfC8Bs9v8IIGL2zwogYvbvCSBi9t8LIGL2/wigavbPCqBq9u8JoGr23wugavb/CGBm9s8KYGb27wlgZvbfC2Bm9v8I4G72zwrgbvbvCeBu9t8L4G72/wgQYfbPChBh9u8JEGH23wsQYfb3Bkg4MGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGRzX4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382OLrBvxr8u8F/GhzT4L8N/tfg2AaHtDi0xXFaHLfF8Voc1uLwFsdvcYIWR7Q4YYsTtThxi5O0OGmLk7U4eYtTtDhli1O1OHWL07Q4bYvTtTh9izO0OGOLM7U4c4uztDhri7O1OHuLc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLi7S4aIuLtbh4i7S4RItLjhnqUi0u3eIyLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gkt2uKJLZ7U4sktntLiqS2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0+1uLjLY5scdBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi3+ITLT7Z4lMtPt3iMy0+2+JzLT7f4gstvtjiSy2+3OIrLb7a4mstvt7iGy2+2eJbLb7d4jstvtviey2+3+IHLX7Y4kctftziqBY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8WR7f4V4t/t/hPi2Na/LfF/1oc2+KQDod2OE6H43Y4XofDOhze4fgdTtDhiA4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvkA6X6HDJDpfqcOkOl+lw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6NAOT+zwpA5P7vCUDk/t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7vCRDh/t8LEOH+9wZIeDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsOn+jwyQ6f6vDpDp/p8NkOn+vw+Q5f6PDFDl/q8OUOX+nw1Q5f6/D1Dt/o8M0O3+rw7Q7f6fDdDt/r8P0OP+jwww4/6vDjDkd1+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dji6w786/LvDfzoc0+G/Hf7X4dgOh/Q4tMdxehy3x/F6HNbj8B7H73GCHkf0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI/0uESPS/a4VI9L97hMj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKP9nhijyf1eHKPp/R4ao+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4jyN7HPT4/wIAAP//JinLgw==") r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) 2.127746716s ago: executing program 2 (id=3524): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.059688814s ago: executing program 9 (id=3525): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x8000}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 1.811146011s ago: executing program 5 (id=3526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x40, r1, 0x5, 0x70bc29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x800}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x810) 1.792384164s ago: executing program 7 (id=3527): socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 1.666011697s ago: executing program 9 (id=3528): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000500)=@v1={0x0, @aes128, 0x8, @auto="63b48b84f43719e6"}) 1.578345399s ago: executing program 8 (id=3529): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000440)={0x18, r1, 0x1, 0x0, &(0x7f0000000200)=[{0x8, 0x9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x400}) 1.395843172s ago: executing program 5 (id=3530): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x60080, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f00000002c0)={0x1, 0x2, 0x0, 0x1}) 1.186148403s ago: executing program 8 (id=3531): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x60, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x3, 0x1, 0x9, 0x14, "7f199114c2212a187ddfb2a6f56c7c07c8ba1a602abf797a7d0e83f445539e0387cacea8fb5067408bd5d5a6fa1728f5058ab4771cb0c6346eaccac3dfcdbc31", "adbba93b1a31dc171e78e8bd2e9d7c88b7f7134fe19e593070535b27fa99a08d", [0x8000000000000000, 0x1ff]}) 1.00983048s ago: executing program 7 (id=3532): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) 949.444658ms ago: executing program 5 (id=3533): syz_mount_image$jfs(&(0x7f0000000280), &(0x7f00000002c0)='./bus\x00', 0x1010000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64], 0x21, 0x6236, &(0x7f0000002080)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288Szk92uU8c7a8/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vB2udiLj287RgJeIz0YvoRiyV9WpELK2u5PX7EfFc7DXHsxExWIgob7/3z9MRr0bER09F7OxurpeLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAGiboiiKTvqYfyZ9vu823SkAYCby63+R5OWnvv71P9/6yzz1R61Wq9XqGdRVxXj3qkVEbFVvU75ncDgeAE6Yrfi46S7QIPm3Wj8inmi6E8Bc6zTdAY7Fzu7meifl26m+Hqzut+dzQUby3+o8uL5j0nSa+jkms3p8bUcvnpnQn6UZ9WGe5Py79fyv7bcP03rHnf+sTMp/uH/pU+vk/Hv1/GtOT/7dsfm3Vc6//0j59+QPAAAAAABzLP///0rDx38Xjr4ph/JJx39XZ9QHAAAAAAAAAHjcjjr+3wPG/wMAAIC5VX5WL/3mqYNlk76LrVx+tRPxZG19oGXSxTLLTfcDAAAAAAAAAAAAANqkv38O79VOxCAinlxeLoqi/Kmq14/qqLc/6dq+/dBmTT/JAwDAvo+eql3L34lYjIir6bv+BsvLy0WxuLRcLBdLC/n97HBhsViqfK7N03LZwvAQb4j7w6L8ZYuV21VN+7w8rb3++8r7Gha9Q3TsMRmkv+aE5obCBoBk/9VoxyvSKVMUT0968wEj7P+n0EqsNP24Yv41/TAFAAAAjl9RFEUnfZ33mXTMv9t0pwCAmciv//XjAkequxPaIx7P71er1Wq1Wv2p6qpivHvVIiK2qrcp3zMYjh8ATpit+LjpLtAg+bdaPyKea7oTwFzrNN0BjsXO7uZ6J+Xbqb4epPHd87kgI/lvdfZul28/bjpN/RyTWT2+tqMXz0zoz7Mz6sM8yfl36/lf228fpvWOO/9ZmZT/cO+SufbJ+ffq+decnvy7Y/Nvq5x//5Hy78kfAAAAAADmWP7//xXHf/MmAwAAAAAAAMCJs7O7uZ6ve83H/z83Zj3Xf55OOf/Oo+a/lOblf6Ll/Lu1/L9cW69Xmb//5sH+/+/dzfXf3/nXZ/P0sPkv5JlOemR10iOik+6p00/To2zdw7YHvWF5T4NOt9dP5/wUg3fiRtyMjbgwsm43/T0O2tdG2sueDkbaL4609x9qvzTSPkjfO1As5fZzsR4/iZvx9l572bYwZfsXp7QXU9pz/j3P/62U8+9Xfsr8l1N7pzYt3f+w+9B+X52Ou583bnz+lxeOf3Om2o7eg22rKrfvbAP92fubPDGMn93euHXu7vU7d26tRZqMLL0YafKY5fwHez8LB8//L+y35+f96v56/8PhI+c/L7ajPzH/Fyrz5fa+NOO+NSHnP0w/Of+3U/v4/f8k5z95/3+5gf4AAAAAAAAAAAAAAADAJymKYu8S0Tci4nK6/qepazMBgNnKr/9Fkper1Wq1Wq0+fXVVMd7r1SIi/lq9Tfme4RfjfhkAMM/+FxH/aLoTNEb+LZa/76+cvth0Z4CZuv3+Bz+6fvPmxq3bTfcEAAAAAAAAAPi08vifq5Xxn1+MiJXaeiPjv74Zq0cd/7OfZx4MMPqYB/qeYLs77HUrw40/H3vjc5+bNP732Xh4/O88Jm6vuh0TDKa0D6e0L0xpXxy79CCtsRd6VOT8n6+Md17mf6Y2/Hobxn+tj3nfBjn/s5XHc5n/l2rrVfMvfjt3+W8ddsXt6I7kf/7Oez89f/v9D1658d71dzfe3fjxpbW1C5cuX75y5cr5d27c3Liw/+/x9HoO5Pzz2NfOA22XnH/OXP7tkvP/Qqrl3y45/y+mWv7tkvPP7/fk3y45//zZR/7tkvN/KdXyb5ec/1dSLf922dndXCjzfznV8m+XvP9/NdXyb5ec/yupln+75PzPpVr+7ZLzP5/qQ+Tv6+FPkZx/PsJl/2+XnP9aquXfLjn/i6mWf7vk/C+lWv7tkvN/NdXyb5ec/9dSLf92yflfTrX82yXn//VUHzL/aac9c0Lk/K+k2v7fLjn/b6Ra/u2S8/9mquXfLjn/11It/3bJ+X8r1fJvl5z/t1Mt/3bJ+X8n1fJvl5z/66mWf7scfP+/GTNmzOSZpp+ZAAAAAAAAAAAAAIC6WZxO3PQ2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ/bmtUOIgRCc1JC1Y4xxluz6El9oXUwIlwYoBZIAvWC73rVZ8A2vXQJFsmmgRMKoqKIi/dAWEGojVRVWxQdaUZoPVS+fSvuBfqmoKiE1qgwKqEhtRbPVzHnfd2dmZ2f2Ml6fPef3k5Jnd+acOe+cec/ZeXb9nwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAs21vmv5sLcuy+n+N/23OshfVv944trlx2+tv9QgBAACA1fq/xv+fvyPdcHQJKzUt83ev+sdvzM3NzWXvH/y94S/OzaU7xrJseEOWNe6Lrv/7B2rNywRPZqO1gabvB3psfrDH/UM97h/ucf9Ij/s39Lh/tMf9C3bAAhvz38c0HmxH48vN+S7N7syGG/ft6LDWk7UNAwPxdzkNtcY6c8OnspnsTDadTbYsny9bayz/rW31bb0ti9saaNrW1voM+dEnT8Yx1MI+3tGyrfnHjH7wxmzsxz/65Mk/vnTj7k61525oebx8nLu218f56XBLPtZatiHtkzjOgaZxbu3wmgy2jLPWWK/+dfs4n1/iOAfnh7mm2l/z0Wyg8fV3GvtpqPnXemk/bQ23/fd9WZZdnR92+zILtpUNZJtabhmYf31G8xlZf4z6VHppNrSsebptCfO0Xqd2tM7T9mMivv7bwnpDi4yh+WX6wadGFrzuy52nUf1ZL3astM/Bfh8rRZmDcV58p/Gkn+o4B3eE5//JnYvPwY5zp8McTM+7aQ5u7zUHB0YGG2NOL0Ktsc78HNzTsvxgY0u1Rn1uZ/c5OHHp7IWJ2Y9/4nUzZ0+cnj49fW7fnj2T+w4cOHTo0MSpmTPTk/n/V7i3i29TNpCOge1h38Vj4DVtyzZP1bmv9O84HO1yHG5uW7bfx+FQ+5Orrc0BuXBO58fGo/WdPnptIFvkGGu8PrtXfxym5910HA41HYcdf6Z0OA6HlnAc1pe5sHtp71mGmv7rNIab9bNgc9McbH8/0j4H+/1+pChzcDTMi3/dvfjPgq1hvE+NL/f9yOCCOZiebjj31G9J7/dHDzVKp3l5T/2O20ayy7PTFx944sSlSxf3ZKGsiZc1zZX2+bqp6TllC+brwLLn69GZVz11T4fbN4d9Nfq6+v9GF32t6svsf6D7a9X46dZ5f7bcujcLpc/Wen92+mle35+pl+yyP+vLfHpi9e/FU1/adP4dXuT8G/v+F/LtpYd6cnB4KD9+B9PeGW45H7e+VEONc1etse3nJ5Z2Ph4O/631+fjOLufjLW3L9vt8PNz+5OL5uNbrtx2r0/56joZ5cmay+/m4vsyWvcudk0Ndz8f3hVoL+/+1oVNIfVHT3Fls3qZtDQ0Nh+c1FLfQOk/3tSw/HHqz+rae2buyebrrvvyxBtOzm7dW83Ssbdl+z9N0vlpsntZ6/fZtZdpfz9EwL+7c132e1pd5dv/qz50b45dN586RXnNweHCkPubhNAnz8/3cxjgHH8hOZuezM9lU496RxnyqNbY1/uDS5uBI+G+tz5VbuszBXW3L9nsOpp9ji8292tDCJ98H7a/naJgXTz/YfQ7Wl3n4YH/fu+4Kt6Rlmt67tv9+bbHfed3Ttptu5u+86uP8m4PdfzdbX+bMoeX2md330/3hlts67Kf243exY2oqW5v9tCWM88ahxfdTfTz1Zb54eInz6WiWZVc++lDj973h7yt/fvm732j5u0unv+lc+ehDP7z91N8uZ/wArH8v5GVT/rOu6S9TS/n7PwAAALAuxL5/INRE/w8AAAClEfv++K/CE/0/AAAAlEbs+4dCTSrS/295+MbMC1eylMyfC+L9aTc8ki8XM66T4fuxuXn12x/62vRP/vLK0rY9kGXZTx/5zY7Lb3kkjis3FsZ5/c2tty9c8cqStn/8sfnlmvPrXw6PH5/PUqdBpwjuZJZl37rj843tjH3gWqM++8jxRn3P1aeerC/z/OH8+7j+cy/Ll/+DEP49eupEy/rPhf3w/VAn3955f8T1vn7ttVsPPj6/vbhebfuLG0/76Q/mjxs/J+cLT+bLx/282Pj/6nPPfL2+/BOv7jz+KwOdx/9MeNyvhfo/r8yXb34N6t/H9T4Txh+3F9d74Kvf7jj+65/Nl7/wlny546HG7e8K3+94y42Z5v31RO1Ey/PK3povF7c/+d3fadwfHy8+fvv4R49da9kf7fPj2X/OH2eibfl4e9xO9Bdt268/TvP8jNt/5rePt+znXtu//p7nXll/3Pbt39+23GDb+u2f2PSHn/l8x+3F8Rz9swstz+fou8NxHLb/9AfDfAz3/+/1z7dsNzr+7tbzT1z+y5uvtDyf6G0/zrd//Q2nG/U/xn7y+7e96PYXX723vu+y7DvvzR+v1/ZP/9H5lvF/5a7djdcj3h8z+u3bX0zc/sWPjZ87P3t5ZqpprzY+O+cd+Xg2jG7cVB/vHeHc2v79sfOXPjR9cWxybDLLxsr7EXor9tVQf5iXq8tdf/dj4fW850vf2rTznz4Xb/+XR/Pbr709/7n1mrDcF8Ltm/PXb662yu0/ve2uxvFdezb/viXH3gdbd/znoSUtGJ5/+/uCON8vvPxDjf1Qv6/xcyMe16sc//em8sf5Ztivc+GTmbffNb+95uXjZyNce29+vK96/4XTXHxd/yS83u/8fv74cVzx+X4vvI/59pbW812cH9+8MtD++I1P8bgazifZ1fz+uFTc39eev6vj8OLnkGRX7258/7vpce5e1tNczOzHZyfOzJy7/MTEpenZSxOzH//EsbPnL5+7dKzxWZ7HPtxr/fnz06bG+Wlq+sD+bHJjlmXns8k1OGHdnPHXv1ra+C88dnLq4OTOqelTJy6fuvTYhemLp0/Ozp6cnprdeeLUqemP9Vp/ZurInr2H9x3cO356ZurIocOH9x0enzl3vj6MfFA9HJj8yPi5i8caq8we2X94z4MP7p8cP3t+avrIwcnJ8cu91m/8bBqvr/0b4xenz5y4NHN2enx25hPTR/YcPnBgb89PAzx74dTs2MTFy+cmLs9OX5zIn8vYpcbN9Z99vdannGb/LX8/266WfxBf9q77D6TPZ6372qcWfah8kbYPEL0RPovmH15y4dBSvo99/3CoSUX6fwAAAKiC2PePhJro/wEAAKA0Yt+/IdRE/w8AAAClEfv+0VCTivT/8v/y/0vL/+f3y/9XK/9/4aN5rnS95/9jfr49/78xk/8vo1uc/1/19vuQ/7+3253y/z3I/9/S/PyqDNz68cv/y/+zUNHy/7Hv35hllez/AQAAoApi378p1ET/DwAAAKUR+/7bQk30/wAAAFAase9/UahJRfp/+f8l5f/39gpclT//7/r/a5f/nz8Pyf/nVpX/jy+O6/9XxrLz948/2vJtCfL/Xcn/9yD/v37z/wUYv/y//D/thhe951bl/2Pff3uoSUX6fwAAAKiC2Pe/ONRE/w8AAAClEfv+O0JN9P8AAABQGrHv3xxqUpH+X/5/xdf/H23+Rv6/dfzy/61c/z/Mh4Jd/39J+f+mwcj/rw+u/9+d/H8PK87/j8r/r8f8/3B/x1/s/H/P4cv/c1MU7fr/se9/SahJRfp/AAAAqILY97801ET/DwAAAKUR+/6XhZro/wEAAKA0Yt9/Z6hJRfp/+f8V5/9byP+3jl/+v/P8kP9fh/n/rtf/z7+S/y8W+f/u5P97cP3/auX/+zz+Yuf/+339/+E3t68v/08nRcv/x77/5aEmFen/AQAAoApi339XqIn+HwAAAEoj9v2vCDXR/wMAAEBpxL5/S6hJRfp/+X/5f/l/+X/5/87b753/z8n/F4v8f3fy/z3I/8v/y/8vLf/f4c2v/D+dFC3/H/v+u0NNKtL/AwAAQBXEvv+eUBP9PwAAAJRG7Pt/JtRE/w8AAAClEfv+raEmFen/tzx84/EvNb6S/8/k/+X/K5D/v39E/l/+v9zk/7uT/+9B/l/+X/5/idf/X2g5+f8NvR6M0iha/j/2/a8MNVnQ+LW/IwUAAADWi9j3vyrUpCJ//wcAAIAqiH3/vaEm+n8AAAAojdj3j4WarL/+/30DK1jJ9f/Llf//079++t5M/l/+v8f2S5r/j9NA/r/i5P+7k//vQf5f/l/+f03y/1RH0fL/se/fFmqy/vp/AAAAYBGx798eaqL/BwAAgNKIff99oSb6fwAAACiN2PfvCDWpSP8v/1+u/H8k/y//3237Jc3/J/L/1Sb/30HTQbpO8v9j8v/y/+tx/OXI/8d3v/L/9EfR8v+x7391qEm3xm8lH7QHAAAA3DKx798ZalKRv/8DAABAFcS+/zWhJvp/AAAAKI3Y9+8KNalI/y//L/8v/y//L//fefvy/+uT/H93y83/j7j+v/y//H/F8v+u/09/FS3/H/v+14aaVKT/BwAAgCqIff/uUBP9PwAAAJRG/Peb+b971f8DAABAGcW+fzzUpCL9/yry/3OD8v+J/H/r+Iua/6/J/8v/r23+f2PzN/L/a0P+v7t1cv1/+f8C5f/rt8v/y//L/7NSRcv/x77/daEmFen/AQAAoApi3/9AqIn+HwAAAEoj9v0ToSb6fwAAACiN2PdPhppUpP93/f/K5f83VDn/7/r/8v+u/19+8v/dyf/3IP/v+v9ly/9nmfw/t1TR8v+x798TalKR/h8AAACqIPb9e0NN9P8AAABQGrHv3xdqov8HAACA0oh9//5Qk4r0//L/lcv/V/r6//L/8v/y/+Un/9+d/H8P8v/y/2XL/7v+P7dY0fL/se9/MNSkIv0/AAAAVEHs+w+Emuj/AQAAoDRi338w1CT0/53+XTcAAACwvsS+/1CoSUX+/i//X5L8/2/9fcu25f/l/7ttvz/5/43y/6HK/xdLSfP/7YfFisn/9yD/L/8v/y//T18VLf8f+/7DoSYV6f8BAACgCmLf//pQE/0/AAAAlEbs+3821ET/DwAAAKUR+/6fCzWpSP8v/1+S/H8b+X/5/27bd/1/+f8yK2n+v29Klf8fkP+X/y/W+OX/5f9Z6Obn/+NXS8v/x77/SKhJRfp/AAAAqILY9/98qIn+HwAAAEoj9v1vCDXR/wMAAEBpxL7/aKhJRfp/+X/5f/l/+f+bk/9/Q9auiPn/+uSR/y8X+f/uSpX/d/1/+f+CjV/+X/6fhYp2/f/Y978x1KQi/T8AAABUQez7Hwo10f8DAABAacS+/02hJvp/AAAAKI3Y9z8calKR/l/+X/5f/l/+3/X/O29f/n99kv/vTv6/B/l/+X/5f/l/+qpo+f/Y97851KQi/T8AAABUQez73xJqov8HAACA0oh9/1tDTfT/AAAAUBqx739bqElF+n/5f/n/IuX/R9rGL/8v/5/J/8v/L5P8f3fy/z3I/8v/y//L/9NXRcv/x77/F0JNKtL/AwAAQBXEvv+RUBP9PwAAAJRG7PvfHmqi/wcAAIDSiH3/O0JNKtL/y//L/xcp/5+5/r/8f2Xy/1nLXpX/7x/5/+7k/3uQ/5f/l/+X/6evipb/j33/O0NNKtL/AwAAQBXEvv8XQ030/wAAAFAase9/V6iJ/h8AAABKI/b9vxRqUpH+X/5f/r9Y+f+5K5nr/yfy/7m+5P/rKxUq/+/6/zeL/H938v89dMj/b5D/l/+X/5f/Z8WKlv+Pff+7Q00q0v8DAABAFcS+/z2hJvp/AAAAKI3Y97831ET/DwAAAKUR+/5HQ00q0v/L/1cy/5+ecvHy/67/L/9flev/y//fLPL/3cn/9+D6//L/8v/y//RV0fL/se9/LNSkIv0/AAAAVEHs+x8PNdH/AwAAQGnEvv99oSb6fwAAACiN2Pe/P9SkIv2//H8l8/8Fvv5/2fL/Qy3z4+bk/zcUMv8/2vR6pnkp/y//vwbKmP8fWu6DdCH/34P8f8jPZwPy/wXM/4fZvHGR9eX/KaKi5f9j3/+BUJOK9P8AAABQBbHv/+VQE/0/AAAAlEbs+38l1ET/DwAAAKUR+/5fDTWpSP8v/y//L//v+v+u/995+/L/61MZ8//LfYxu5P97kP93/f8i5/97kP+niIqW/499/6+Fmiza+P3wv5bwNAEAAIACiX3/B0NNKvL3fwAAAKiC2PcfCzXR/wMAAEBpxL7/eKhJRfp/+f/2/H+8oqr8v/z/usv/D8n/5+T/q61/+f9X3J5l8v/y//L/8v/y//L/rEbR8v+x7z8RalKR/h8AAACqIPb9vx5qov8HAACA0oh9/8lQE/0/AAAAlEbs+6dCTSrS/8v/u/5/v/L/P5X/v9X5f9f/D+T/q831/7uT/+9B/l/+X/5f/p++Klr+P/b906EmFen/AQAAoMTSr4Nj338q1ET/DwAAAKUR+/7ToSb6fwAAACiN2Pd/KNSkIv2//L/8v+v/34r8/1DL8vL/Ofl/+f9+kP/vTv6/B/l/+X/5f/l/+qpo+f/Y98+EmlSk/wcAAIAqiH3/h0NN9P8AAABQGrHv/0ioif4fAAAASiP2/WdCTSrS/8v/y/9XPf9fy7Krrv8v/99p+/L//8/efTzZdVV7HL/2s1tqT/z+BCZMGDGEkZlQTJkyo4qxiSYH2+QMJmPAgAkm5xxNzjljgsk5mmioEqXWWkvdfa/Oaalv9z1n789nsp70ntxXdvtRP1Tf2vOk/x+m/x+h/9f/6//1/6zV1Pr/3P1Xxi2d7H8AAADoQe7++8Yt9j8AAAA0I3f//eIW+x8AAACakbv//nFLJ/tf/6//773/X2zk/f+9//f6/zP0//r/dVjq7y85v19/zv7/zne56t76f/2//n+Q/l//r/9nv6n1/7n7HxC3dLL/AQAAoAe5+x8Yt9j/AAAA0Izc/Q+KW+x/AAAAaEbu/qvilk72v/5f/6//1//v6f9v1v/r/+fN+//D9P8j9P/6f/2//p+1mlr/n7v/wXFLJ/sfAAAAepC7/yFxi/0PAAAAzcjd/9C4xf4HAACAZuTuf1jc0sn+1//r//X/c+n/t7z/v+/3o//X/6+i/x+m/x+h/9f/6//1/6zV1Pr/3P0Pj1s62f8AAADQg9z9j4hb7H8AAABoRu7+R8Yt9j8AAAA0I3f/o+KWTva//l//r/+fS/9/TO//6//1/zN34+Ls/0/Q/y/T/48Y6f8XC/3/kAP386t/e/P5/Oeg/9f/s2xq/X/u/kfHLXdbLLYu9DcJAAAATEru/sfELZ38+T8AAAD0IHf/1XGL/Q8AAADNyN1/TdzSyf7X/+v/9f/6f/3/6q+v/5+ng/X3J8756/X/4Zz9/53+/8r79Nv/e/9/mPf/9f/6f/abWv+fu//auKWT/Q8AAAA9yN3/2LjF/gcAAIBm5O5/XNxi/wMAAEAzcvc/Pm7pZP/r/1vr//9vz6/b1f/v1C76f/2//l//37rD9vf6/9D1+//b9UP9v/5f/6//53Cm1v/n7n9C3NLJ/gcAAIAe5O5/Ytxi/wMAAEAzcvc/KW6x/wEAAKAZufufHLd0sv/1/631/3t/nff/9f+rvr7+X//fMv3/MP3/iFbe/7/A75pN9/OHtenPr//X/7Nsav1/7v6nxC2d7H8AAADoQe7+p8Yt9j8AAAA0I3f/0+IW+x8AAACakbv/6XFLJ/tf/6//n0f/n19B/6//P/r+P+n/50n/P0z/P6KV/v8Cbbqfn/vn1//r/1k2tf4/d/8z4pZO9j8AAAD0IHf/M+MW+x8AAACakbv/WXGL/Q8AAADNyN3/7Lilk/2v/9f/z6P/9/6//t/7//r/g9H/D9P/j5hO/3/Rqm8e/f+0P7/+X//Psqn1/7n7r4tbOtn/AAAA0IPc/c+JW+x/AAAAaEbu/ufGLfY/AAAANCN3//Pilk72v/5f/6//1//r/1d/ff3/POn/h+n/R0yn/1/58fT/0/78+n/9P8sm1P/v+lUnF8+PWzrZ/wAAANCD3P0viFvsfwAAAGhG7v4Xxi32PwAAADQjd/+L4pZO9r/+fzL9/07O11b/v71YLC64/7+7/n/e/f/2rn+e9X2p/9f/HwP9/zD9/wj9v/5f/6//Z60m1P/v/Dh3/4vjlk72PwAAAPQgd//1cYv9DwAAAM3I3f+SuMX+BwAAgGbk7n9p3NLJ/tf/T6b/39FW/+/9//3fHz31/97/X6b/Px76/2H6/xH6f/2//l//z1pNrf/P3f+yuGnr0gv+LQIAAAATk7v/hrilkz//BwAAgB7k7n953GL/AwAAwExdt/QzuftfEbd0sv/1/+vt/7d2/Zz+X/+///tD/6//1/8fPf3/MP3/CP2//l//r/9nrabW/+fuf2Xc0sn+BwAAgB7k7r8xbrH/AQAAoBm5+18Vt9j/AAAA0Izc/a+OWzrZ//p/7//r//X/+v/VX1//P0/6/2H6/xH6f/3/Zvv/E2f/R/0/bTiP/v/UqVNXH3n/n7v/NXFLJ/sfAAAAepC7/7Vxi/0PAAAAzcjdf1PcYv8DAABAM3L3vy5u6WT/6/+Pov8/UytOuv/Pb/V59f/XLBb6f/2//l//P0z/P0z/P0L/r//3/r/+n7Wa2vv/uftfH7d0sv8BAACgB7n73xC32P8AAADQjNz9b4xb7H8AAABoRu7+N8Utnex//b/3/2fU/3v/X/+/5/czs/7/9oX+/1jMov/fPvfXn3r/f63+X/8/oLv+/5533fND/b/+n2VT6/9z9785bulk/wMAAEAPcve/JW6x/wEAAKAZufvfGrfY/wAAANCM3P1vi5su6WT/6//1//p//b/+f/XXP+b3/7cWi4X+fw1m0f8PmHr/7/1//f+Q7vr/ffT/+n+WTa3/z93/9rilk/0PAAAAPcjd/464xf4HAACAZuTuf2fcYv8DAABAM3L3vytu6WT/6//1//p//X/z/f+1s+j/vf+/Jvr/Yfr/Efp//b/+X//PsdhU/5+7/91xSyf7HwAAAHqQu/89cYv9DwAAAM3I3f/euMX+BwAAgGbk7n9f3NLJ/m+3/z85+LX1/xfW/+fn1P+31f+fmFz/v/ff307e/9f/r4n+f5j+f4T+X/+v/79O/886Te39/9z9749bOtn/AAAA0IPc/R+IW//Vrf0PAAAAzcjd/8G4xf4HAACAZuTu/1Dc0sn+b7f/H6b/9/7/7r9fvff/zb//r//viv5/mP5/hP5f/6//9/4/azW1/j93/4fjlk72PwAAAPQgd/9H4hb7HwAAAJqRu/+jcYv9DwAAAM3I3X9z3NLJ/tf/6//1//p//f+Zf4b6/zbo/4cdT/+/rf/X/1c/f1H8W6D/1/+P/XraNLX+P3f/x+KWTvY/AAAA9CB3/8fjFvsfAAAAmpG7/xNxi/0PAAAAs3TJip/L3f/JuKWT/a//1//r//X/+v/VX1//P0/6/2FH0//f1MD7/5ddv/tH+v+D9vN32POjub3/v/8/v/T/+n/Wb2r9f+7+T8Utnex/AAAA6EHu/k/HLfY/AAAANCN3/2fiFvsfAAAAmpG7/7NxSyf7X/+v/2+m/z/9IfT/+n/9f/f0/8OO5/3/Ofb/wfv/G30/f+6fX/+v/2fZ1Pr/3P2fi1s62f8AAADQg9z9n49b7H8AAABoRu7+L8Qt9j8AAAA0Y2f3Z1zW4f7X/2+s/9/56+v/vf+v/9f/6//XS/8/TP8/Qv+v/9f/6/9Zq6n1/1/c+VUnF1+KWzrZ/wAAANCD3P1fjlvsfwAAAGhG7v6vxC32PwAAADQjd/9X45ZO9r/+3/v/8+j/T506dbX+X/+/9/dztv+/Vf9P0f8P0/+P0P/r//X/+n/Wamr9f+7+r8Utnex/AAAA6EHu/q/HLfY/AAAANCN3/zfiFvsfAAAAmpG7/5txSyf7X/9/+nNcXj9/tP3/DXdc2f+f1P97/1//v/D+v/5/TfT/q23H1f+PaLH/P3nw3/6m+/nD2vTn1//r/1k2tf4/d/+34pZO9j8AAAD0IHf/t+OWpf1/yzF+KgAAAGCdcvd/J27x5/8AAADQjNz9341bOtn/+v/je///9N+7Xt7/316s/vz6f/2//l//f9S67P+3Dv7X1/+PaLH/Pw+b7ufn/vn1//p/lk2t/8/d/724Ze/wu/T8fpcAAADAlOTu/37c0smf/wMAAEAPcvffErfY/wAAANCM3P0/iFs62f/6/+Pr/3f38633/8fz/v9J/b/+f539/8X6/zZ02f+fB/3/iCPr/7fyr6//P0Kb/vz6/939f3436/97N7X+P3f/D+OWTvY/AAAA9CB3/4/iFvsfAAAAmpG7/8dxi/0PAAAAzcjdf2vcsmv/r2q7W6H/1//Pt//3/r/+3/v/+v9l+v/twf/tQfv/E4vD9f9J/+/9f/1/r/2/9/85Y2r9f+7+n8Qt/vwfAAAAZufSc/x87v6fxi32PwAAADQjd//P4hb7HwAAAJqRu//nccttF2/qIx0r/b/+X/+v/z94/3/Rnu92/f8Z+v9p0f8P8/7/CP3/Ovr5K/T/bfT/i4X+n8ObWv+fu/8XcYs//wcAAIBm5O7/Zdxi/wMAAEAzcvf/Km6x/wEAAKAZuft/Hbd0sv/1//r/Q/b/O2mm/v+M9vt/7//r/6dP/z9M/z9C/+/9f/2/9/9Zq6n1/7n7fxO3dLL/AQAAoAe5+38bt9j/AAAA0Izc/b+LW+x/AAAAaEbu/t/HLZ3s/431//G3Wv+/2f7/Yu//79D/6/9XfX39/zzp/4fp/0fo//X/+n/9P2s1tf4/d/8f4pZO9j8AAAD0IHf/H+MW+x8AAACakbv/T3GL/Q8AAADNyN3/57ilk/3v/f+++/81vP+v/x/u/0/s/jr6f/2//v/o6f+H6f9Xq39Q+n/9/2H6/3tctljo//X/7DG1/j93/1/ilk72PwAAAPQgd/9f4xb7HwAAAJqRu/+2uMX+BwAAgGbk7v9b3NLJ/tf/6//1/97/1/+v/vr6/3nS/w/bZP9/r8vHv6z3/zfe/+dH0P97/1//z1pMrf/P3f/3uKWT/Q8AAAA9yN3/j7jF/gcAAIBm5O7/Z9xi/wMAAEAzcvf/K27pZP+P9P9n3y7X/w/S/+/9/Pr/1d8f+n/9v/7/6On/h3n/f4T+3/v/+n/9P2s1tf4/d/+/45ZO9j8AAAD0IHf/7XGL/Q8AAADNyN3/n7jF/gcAAIBm5O7/b9zSyf73/v+c+v8r9P/6f/2//l//P0L/P0z/P0L/r//X/+v/Waup9f+5+/8XAAD//w+cVBo=") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000001180)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) 750.568122ms ago: executing program 4 (id=3534): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xb2d}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\xff\x7f\x00'}, 0x1c, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 635.525919ms ago: executing program 7 (id=3535): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 606.333387ms ago: executing program 8 (id=3536): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6gretap0\x00', 0x10) sendto$inet(r0, &(0x7f0000000140)='\a', 0x1, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) 438.236087ms ago: executing program 9 (id=3537): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$eJzs3V2IXFcdAPBzd3c2u2lrNjXRNY1tYrWt2m6azRqrQZOSIBiaIL4Uii8h3dZgjNAKaimY5Mk3W0oKPvmBT30pVQQLIqFPvhRsoAh5qoI+NEQs+FCjycjO3DNz78lM7s5md2Zn5/eDu2fuPefO/9zZO3fu17knACNrrPF3YWE2C+HCm68cef+Bf0wvTTnYKjHT+DtRGKuFELJ8fCJ5v/fGm+n1D1482SnNwnzjbxwPx6+25r0jhHA27AoXw0zYceHSy2/PP3Hs3NHzu9957cCVtVl6AAAYLd+4eGBh+1//fM/Wa6/feyhsak2P++czccJUc7//UL7jH/f/x0J5fCndejkJ0n7b0nHD0jA2XS463qFcMU4tKTfRIf7SMJlUodal3KZw6/jjhWmdlhuGWVyPZ0I2NhdC2NwaHxubm2sek4fGcf1kNnfm1Olnnh9QRYFV9+/7Qgi7CsPh8+Xx9TYcXAd1WOFQXwd1GMrhUP9iXas3DXyZ+zTUtwx6CwTQlF4vvMnZbFXjtd5tYnnxrz4+1nl+WAX9Xv97ij95U/zpvsYPA17+dRD/1+dscVg9G3VtissVv0d35uPpdYT0/qVX/1Cery290lGeml6PqC2znt2uIwzL9YVu9Rzvcz1Wqlv90/Vio/pKnsbP4aul3PtK35/0fzos/2Ogsw/T8/8GwxoOj70/+DoM/RBK47Xbea/6gLc/wPqV3jdXj9dHc5MV+Zsq8qcq8qcr8jdX5N9RkQ+j7Lff/2l4KWuf70qP6Xs9Hx7Ps92Vpx/psT7p+che46f3/fbqduOn9xPDevb7E08uPvb0U5ea9/9nrfX/Rr6+x8ONmfy7dTEvEM8XpufV43317YYD5fy03N1Jfe7qUL7xelu5XLat/T6hsJ25qR6z5fm2dCu3s1xuJik3nQ9TSX3T/ZPNyXxx/yNuV+PnNZEsby1ZjsmkHnG7sjVP03rASsT1sXH/f+GiVbz/P66fs6GWPXPq9OKj+XhcT/80Xtu0NH1vPysNrIq0/U97vNz+ZzaU2//c2ZpeGytuF7a0p2fN7cIb+fuVp8+34hSmF37U4u/ct8enG+XnTn7v9NOrvOww6p7/0QvfOXH69OJzXqz4xdfWRzV6eREPW9ZLfbzo9cWutQ4x4A0TsOb2/Li5E/DIqe+eeHbx2cUz+/bv3zc/v/9L+xZCY79+T3HvvujsAGoLrKbmb/2mxec81wMAAAAAAAAAAACGxg+OHrn07ltfvNxs/99u/xfb/8c7f2P7/58k7f/TdvKxHXxsB7i1Q36jTPKA1cmkXC0fPprUd1sSZ3sy38fytNWPX97+P4ZLn+sa6/PxZHqty2jyOIGbnpcymTyDJO0v8FN5ej5PfxVggLLOj/BP19sOz7fOPiys6/H5FIUmvHXPBx4e8f/WWBsKjzSK7b87PtepQ3tthks/WiwOehmBzv45Us///ld7wXuY7+GB13vUhon+xvtZ7+vERhnqXffSl9uDDcDqGHT/n38Pzbjx/OeZP359ammIxa4+Xt5eps8vhV785d3y+Hrvf3Kt46f99vU7/qCXv9/9f7b6v8u3f3G71337l/SYN7OyuP/5+ZXLhbBhx3Ljp8sfnwO9rbf41/L4cWkeDMuLX/9lEj+9ILRM/03ib15m/JuWf+fK4v8vjx8/tofuX278Zo2zsXI9ppPliNf/0vPG0fVk+eOzPW8R/5svdFr+FXbUeCOPD6NsWPqZ7VWyH9Haaa/q/7fX3//b7f+3VdmsXJn0Powv5ONxQxzvc0j7O+m1/vH+ivg7sD15/6zi903/v8Pty3la9X2I/f/G9XEm/8kvjDc+yzhe6/DZbtRtDQyr90bq+l+/hivNw6CVzT81+Pobehjq48sue7z1utVP3IDrX6/X1/aEVoWBBmfgn/+gjxMGHX/Qn3+VtP/fdB8+7f83zU/7/03z0/5/0/zp/D/ULT/t/zf9PNP+f7O04sn7pv0Dz1bkf6Iif0fn/Fb0eyrm31mR/8mK/N2t/IOlEjH/3lvO3y7X7f3vrsi/vyL/0xX5n6nIf6Ai/6FCfrEP6Jj/2WT+LMnf6GJ7lG6fH7Bxpe3zfP9hdMTrP92+/9va+ZPFIv2tJbAWXn197+GnfvOtmWb7/8nW+ZB4He9QPl7Lj41+mI+n171DYXwp7618/G9J/no/3wGjJH1+Rvr7/2BFPjC84n1evt8wgrKpzpPztOq5Vd328xkun8vTz+fpw3n6SJ7O5emePN2bp/N9qh9r4/AbvzvwUtY+3t+S5C/3fvK0PVDpOVEhhH3LrE96fqDX+9nT5/j16nbjr7A5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMCMNf4uLMxmIVx485UjTx47tWdpysFWiZnG34nCWK01XwiP5ul4nv4if3H9gxdPFtMbeZqF+ZCFrDU9HL/ainRHCOFs2BUuhpmw48Kll9+ef+LYuaPnd7/z2oEra/cJAAAAwMb3/wAAAP//bhYJfg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) 348.041544ms ago: executing program 4 (id=3538): clock_nanosleep(0x2, 0x3f, &(0x7f0000000080)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) 228.450032ms ago: executing program 8 (id=3539): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) 0s ago: executing program 4 (id=3540): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000019c40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) kernel console output (not intermixed with test programs): 5840 2-0044: Unable to detect h/w, assuming cx23887 [ 334.528078][T12671] Dev loop9: unable to read RDB block 7 [ 334.537222][ T2362] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 334.598856][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2565'. [ 334.629336][ T2362] pvrusb2: Attached sub-driver cx25840 [ 334.639646][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 334.649856][T12671] loop9: unable to read partition table [ 334.657821][T12675] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2565'. [ 334.671845][T12671] loop9: partition table beyond EOD, truncated [ 334.686511][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 334.701672][T12671] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 334.737226][T12679] program syz.2.2561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.869425][T12673] Dev loop9: unable to read RDB block 7 [ 334.895001][T12673] loop9: unable to read partition table [ 334.919092][T12673] loop9: partition table beyond EOD, truncated [ 334.945933][T12673] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 335.431633][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 335.603701][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 335.638851][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 335.672801][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 335.704423][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 335.728085][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 335.746277][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.761867][ T24] usb 3-1: Product: syz [ 335.769393][ T24] usb 3-1: Manufacturer: syz [ 335.779127][ T24] usb 3-1: SerialNumber: syz [ 335.886309][ T24] usb 3-1: config 0 descriptor?? [ 335.992018][T12707] loop7: detected capacity change from 0 to 256 [ 336.032577][T12707] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 336.056011][T12707] FAT-fs (loop7): Filesystem has been set read-only [ 336.132726][ T24] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 336.355538][T12693] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 336.396761][ T24] usb 3-1: USB disconnect, device number 12 [ 336.494718][T12723] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2586'. [ 336.683568][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2589'. [ 336.950108][T12739] loop7: detected capacity change from 0 to 2048 [ 336.987667][T12740] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.019262][T12740] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 337.036230][ T5640] block nbd2: Receive control failed (result -32) [ 337.036269][ T5641] block nbd2: Receive control failed (result -32) [ 337.060791][T12740] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 337.089853][T12740] Remounting filesystem read-only [ 337.117168][T12739] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 337.225560][ T6256] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 337.365096][T12750] loop5: detected capacity change from 0 to 256 [ 337.631731][ T185] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 337.726566][T12764] loop1: detected capacity change from 0 to 1024 [ 337.802366][ T185] usb 5-1: Using ep0 maxpacket: 16 [ 337.813494][ T185] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 337.835341][ T185] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.865263][ T185] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.884455][ T185] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 337.905769][ T185] usb 5-1: config 7 interface 0 has no altsetting 0 [ 337.927136][ T185] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 337.958081][ T185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.002498][ T185] usb 5-1: Device is not authorized for usage [ 338.379162][T12781] program syz.1.2613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.451697][ T24] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 338.614520][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.627836][ T24] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 338.646033][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.673156][ T24] usb 3-1: config 0 descriptor?? [ 339.037196][T12794] loop1: detected capacity change from 0 to 164 [ 339.108545][ T24] hid_parser_main: 72 callbacks suppressed [ 339.108567][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x1 [ 339.142839][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x5 [ 339.151263][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x6 [ 339.175768][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x0 [ 339.193816][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x0 [ 339.207965][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x0 [ 339.217657][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x0 [ 339.227736][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x0 [ 339.231396][T12801] loop6: detected capacity change from 0 to 1024 [ 339.235358][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x0 [ 339.249533][T12801] EXT4-fs: inline encryption not supported [ 339.299154][ T24] hid-led 0003:0FC5:B080.0017: unknown main item tag 0x0 [ 339.324496][T12801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.339494][ T24] hid-led 0003:0FC5:B080.0017: probe with driver hid-led failed with error -71 [ 339.355528][ T24] usb 3-1: USB disconnect, device number 13 [ 339.453696][ T6046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.561313][T12810] netlink: 'syz.1.2623': attribute type 1 has an invalid length. [ 339.627494][T12807] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.903530][T12822] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2629'. [ 339.967808][T12822] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2629'. [ 340.273884][T12837] loop6: detected capacity change from 0 to 256 [ 340.339862][T12837] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 340.454724][ T802] usb 5-1: USB disconnect, device number 17 [ 340.876579][T12852] loop6: detected capacity change from 0 to 1024 [ 340.909745][T12852] EXT4-fs: Ignoring removed oldalloc option [ 340.935673][T12852] EXT4-fs: Ignoring removed bh option [ 340.989350][T12852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 341.034262][T12852] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.194588][T12835] loop5: detected capacity change from 0 to 32768 [ 341.293849][ T6046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 341.312221][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.240617][T12890] loop5: detected capacity change from 0 to 2048 [ 342.350249][T12890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.399551][T12890] EXT4-fs error (device loop5): ext4_ext_precache:631: inode #2: comm syz.5.2658: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 342.468839][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2662'. [ 342.495349][T12890] EXT4-fs (loop5): Remounting filesystem read-only [ 342.521422][T12901] loop2: detected capacity change from 0 to 256 [ 342.726042][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.482395][T12938] xt_TPROXY: Can be used only with -p tcp or -p udp [ 343.486155][T12939] i2c i2c-0: new_device: Can't parse I2C address [ 343.982597][T12960] loop2: detected capacity change from 0 to 8 [ 344.033775][T12964] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 344.059310][T12964] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 344.091177][T12964] overlayfs: failed to get uuid (426/file2, err=-13); falling back to uuid=null. [ 344.171156][T12968] loop5: detected capacity change from 0 to 512 [ 344.199730][T12968] EXT4-fs: Ignoring removed i_version option [ 344.232807][T12968] EXT4-fs: Ignoring removed nobh option [ 344.270045][T12972] loop2: detected capacity change from 0 to 128 [ 344.304803][T12968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.329716][T12968] ext4 filesystem being mounted at /442/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.457933][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.614936][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 344.637222][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 345.117575][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2708'. [ 345.215514][T13001] loop4: detected capacity change from 0 to 4096 [ 345.255266][T13001] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 345.368894][T13001] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 345.456384][ T30] audit: type=1800 audit(1785504448.523:161): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2707" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 345.886593][T13031] loop2: detected capacity change from 0 to 256 [ 345.907650][T13031] exfat: Deprecated parameter 'utf8' [ 345.935960][T13031] exfat: Deprecated parameter 'utf8' [ 345.957217][T13031] exfat: Deprecated parameter 'utf8' [ 345.968846][T13031] exfat: Deprecated parameter 'namecase' [ 346.016966][T13031] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 346.096903][T13036] loop4: detected capacity change from 0 to 1024 [ 346.142679][T13036] hfsplus: bad catalog entry type [ 346.380887][T13044] loop4: detected capacity change from 0 to 128 [ 346.407139][T13044] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 346.451836][T13044] hpfs: filesystem error: improperly stopped [ 346.473531][T13044] hpfs: You really don't want any checks? You are crazy... [ 346.493637][T13044] hpfs: hpfs_map_sector(): read error [ 346.499271][T13044] hpfs: code page support is disabled [ 346.518452][T13044] hpfs: hpfs_map_4sectors(): unaligned read [ 346.525503][T13044] hpfs: hpfs_map_4sectors(): unaligned read [ 346.531479][T13044] hpfs: filesystem error: unable to find root dir [ 346.741669][ T185] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 346.810043][T13035] loop5: detected capacity change from 0 to 40427 [ 346.901804][T13055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.923532][ T185] usb 3-1: Using ep0 maxpacket: 32 [ 346.936069][ T185] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.967969][ T185] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.007667][ T185] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.032908][T13035] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 347.051162][ T185] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.086237][T13035] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 347.087894][ T185] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.122791][ T185] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 347.151295][ T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.188989][ T185] usb 3-1: config 0 descriptor?? [ 347.253714][ T5626] syz-executor: attempt to access beyond end of device [ 347.253714][ T5626] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 347.270571][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 347.270607][ T5626] Tainted: [L]=SOFTLOCKUP [ 347.270616][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 347.270630][ T5626] Call Trace: [ 347.270640][ T5626] [ 347.270650][ T5626] dump_stack_lvl+0xe8/0x150 [ 347.270693][ T5626] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 347.270734][ T5626] f2fs_write_end_io+0x124b/0x1710 [ 347.270805][ T5626] __submit_merged_bio+0x258/0x6a0 [ 347.270837][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.270869][ T5626] ? rcu_is_watching+0x15/0xb0 [ 347.270901][ T5626] __submit_merged_write_cond+0x3c9/0x4e0 [ 347.270945][ T5626] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 347.270998][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271038][ T5626] f2fs_write_data_pages+0x2a27/0x36f0 [ 347.271075][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271104][ T5626] ? __lock_acquire+0x683/0x2cf0 [ 347.271180][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 347.271216][ T5626] ? is_bpf_text_address+0x26/0x2b0 [ 347.271268][ T5626] ? arch_stack_walk+0xfb/0x150 [ 347.271330][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271359][ T5626] ? add_lock_to_list+0xc7/0x100 [ 347.271387][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271415][ T5626] ? __lock_acquire+0x13e8/0x2cf0 [ 347.271483][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271513][ T5626] ? do_raw_spin_lock+0x12b/0x2f0 [ 347.271552][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271586][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271615][ T5626] ? do_raw_spin_unlock+0xf5/0x210 [ 347.271645][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 347.271684][ T5626] do_writepages+0x338/0x560 [ 347.271722][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271753][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271786][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.271819][ T5626] ? do_raw_spin_unlock+0xf5/0x210 [ 347.271855][ T5626] filemap_fdatawrite+0x1e9/0x2f0 [ 347.271898][ T5626] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 347.271980][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.272012][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.272047][ T5626] ? do_raw_spin_unlock+0xf5/0x210 [ 347.272082][ T5626] f2fs_sync_dirty_inodes+0x30e/0x830 [ 347.272140][ T5626] f2fs_write_checkpoint+0xa3d/0x2710 [ 347.272180][ T5626] ? __lock_acquire+0x683/0x2cf0 [ 347.272253][ T5626] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 347.272292][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.272386][ T5626] kill_f2fs_super+0x2f6/0x700 [ 347.272432][ T5626] ? __pfx_kill_f2fs_super+0x10/0x10 [ 347.272486][ T5626] ? call_rcu+0x64b/0x8b0 [ 347.272510][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.272538][ T5626] ? lockdep_hardirqs_on+0x7a/0x110 [ 347.272569][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.272615][ T5626] deactivate_locked_super+0xbc/0x130 [ 347.272657][ T5626] cleanup_mnt+0x3d3/0x460 [ 347.272688][ T5626] task_work_run+0x1d9/0x270 [ 347.272716][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 347.272754][ T5626] exit_to_user_mode_loop+0x1fa/0x730 [ 347.272789][ T5626] ? rcu_is_watching+0x15/0xb0 [ 347.272819][ T5626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.272847][ T5626] do_syscall_64+0x353/0x580 [ 347.272877][ T5626] ? trace_irq_disable+0x3b/0x140 [ 347.272918][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.272944][ T5626] RIP: 0033:0x7fc3d2b9f257 [ 347.272966][ T5626] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 347.272986][ T5626] RSP: 002b:00007ffc26f9c478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 347.273012][ T5626] RAX: 0000000000000000 RBX: 00007fc3d2c3445c RCX: 00007fc3d2b9f257 [ 347.273029][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc26f9c530 [ 347.273045][ T5626] RBP: 00007ffc26f9c530 R08: 00007ffc26f9d530 R09: 00000000ffffffff [ 347.273063][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc26f9d5c0 [ 347.273079][ T5626] R13: 00007fc3d2c3445c R14: 0000000000054c31 R15: 00007ffc26f9d600 [ 347.273119][ T5626] [ 347.692379][ T5626] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 347.976646][ T185] corsair-cpro 0003:1B1C:0C10.0018: item fetching failed at offset 0/5 [ 348.044714][ T185] corsair-cpro 0003:1B1C:0C10.0018: probe with driver corsair-cpro failed with error -22 [ 348.214218][ T802] usb 3-1: USB disconnect, device number 14 [ 348.734140][T13093] netlink: 'syz.1.2749': attribute type 83 has an invalid length. [ 349.035975][T13103] loop1: detected capacity change from 0 to 512 [ 349.272850][T13103] EXT4-fs (loop1): 1 truncate cleaned up [ 349.318121][T13103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.418493][T13105] loop4: detected capacity change from 0 to 32768 [ 349.460719][T13105] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 349.469348][T13105] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 349.495208][T13105] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 349.508501][ T5635] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 349.568455][ T5635] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 349.617750][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.664614][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.691771][ T185] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 349.772311][ T5635] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 203ms [ 349.803740][ T5635] gfs2: fsid=syz:syz.0: jid=0: Done [ 349.812075][T13105] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 349.874960][ T185] usb 2-1: Using ep0 maxpacket: 32 [ 349.908965][ T185] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.930361][T13105] gfs2: fsid=syz:syz.0: found 1 quota changes [ 349.931153][ T185] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 350.000842][ T185] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 350.071131][ T185] usb 2-1: config 7 has no interface number 0 [ 350.077867][T13105] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 350.092701][T13105] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 350.099732][ T185] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 350.102522][T13105] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:13105 [syz.4.2753] gfs2_quota_sync+0x353/0x450 [ 350.125870][T13105] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 350.134115][T13105] CPU: 1 UID: 0 PID: 13105 Comm: syz.4.2753 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.134151][T13105] Tainted: [L]=SOFTLOCKUP [ 350.134160][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 350.134175][T13105] Call Trace: [ 350.134184][T13105] [ 350.134194][T13105] dump_stack_lvl+0xe8/0x150 [ 350.134236][T13105] gfs2_withdraw+0xc3/0x1b0 [ 350.134266][T13105] inode_go_instantiate+0xbc7/0x12c0 [ 350.134306][T13105] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.134341][T13105] ? __pfx_inode_go_instantiate+0x10/0x10 [ 350.134366][T13105] ? do_raw_spin_unlock+0xf5/0x210 [ 350.134400][T13105] ? __pfx_wake_bit_function+0x10/0x10 [ 350.134437][T13105] gfs2_instantiate+0x168/0x220 [ 350.134469][T13105] gfs2_glock_wait+0x1d4/0x2a0 [ 350.134502][T13105] do_sync+0x49c/0xbb0 [ 350.134535][T13105] ? gfs2_quota_sync+0x353/0x450 [ 350.134581][T13105] ? __pfx_do_sync+0x10/0x10 [ 350.134613][T13105] ? do_raw_spin_lock+0x12b/0x2f0 [ 350.134654][T13105] ? gfs2_quota_sync+0x353/0x450 [ 350.134690][T13105] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.134724][T13105] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.134752][T13105] ? do_raw_spin_unlock+0xf5/0x210 [ 350.134787][T13105] gfs2_quota_sync+0x353/0x450 [ 350.134836][T13105] gfs2_sync_fs+0x4c/0xb0 [ 350.134870][T13105] sync_filesystem+0xee/0x230 [ 350.134900][T13105] gfs2_reconfigure+0xb7/0xb20 [ 350.134937][T13105] reconfigure_super+0x232/0x8f0 [ 350.134988][T13105] path_mount+0xd4b/0x1040 [ 350.135028][T13105] ? user_path_at+0xd4/0x160 [ 350.135071][T13105] __se_sys_mount+0x31d/0x420 [ 350.135114][T13105] ? __pfx___se_sys_mount+0x10/0x10 [ 350.135157][T13105] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.135186][T13105] ? __x64_sys_mount+0x20/0xc0 [ 350.135220][T13105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.135248][T13105] do_syscall_64+0x174/0x580 [ 350.135280][T13105] ? trace_irq_disable+0x3b/0x140 [ 350.135328][T13105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.135353][T13105] RIP: 0033:0x7f8d6f39e019 [ 350.135376][T13105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.135396][T13105] RSP: 002b:00007f8d702d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.135422][T13105] RAX: ffffffffffffffda RBX: 00007f8d6f625fa0 RCX: 00007f8d6f39e019 [ 350.135440][T13105] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 350.135456][T13105] RBP: 00007f8d6f43500c R08: 0000000000000000 R09: 0000000000000000 [ 350.135472][T13105] R10: 0000000002b90026 R11: 0000000000000246 R12: 0000000000000000 [ 350.135488][T13105] R13: 00007f8d6f626038 R14: 00007f8d6f625fa0 R15: 00007ffcb8daac98 [ 350.135529][T13105] [ 350.135538][T13105] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 350.177582][ T185] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 350.210715][ T5635] gfs2: fsid=syz:syz.0: file system withdrawn [ 350.220901][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.448372][ T185] usb 2-1: config 7 interface 128 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 350.462539][ T185] usb 2-1: config 7 interface 128 has no altsetting 0 [ 350.471734][ T185] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 350.480907][ T185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.489669][ T185] usb 2-1: Product: syz [ 350.493885][ T185] usb 2-1: Manufacturer: syz [ 350.498498][ T185] usb 2-1: SerialNumber: syz [ 350.503167][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.521098][T13103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.591726][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 350.650780][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.672787][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.689357][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.705755][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.715450][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.747407][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.747434][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 350.747457][ T10] usb 3-1: config 1 has no interface number 0 [ 350.747523][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.747552][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 350.747580][ T10] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 350.747617][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 350.754869][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.754928][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.754974][ T10] usb 3-1: Product: syz [ 350.754991][ T10] usb 3-1: Manufacturer: syz [ 350.755007][ T10] usb 3-1: SerialNumber: syz [ 350.783316][T13121] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 350.874631][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.874676][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.023836][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.049720][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.079823][ T185] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.089421][ T185] usb 2-1: MIDIStreaming interface descriptor not found [ 351.410934][T13121] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 351.424644][ T185] usb 2-1: USB disconnect, device number 10 [ 351.636844][ T10] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 351.671038][ T10] cdc_ncm 3-1:1.1: bind() failure [ 351.707149][ T5651] udevd[5651]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.877656][ T10] usb 3-1: USB disconnect, device number 15 [ 351.958729][ T13] bridge_slave_1: left allmulticast mode [ 351.998266][ T13] bridge_slave_1: left promiscuous mode [ 352.005097][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.022412][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.128457][ T13] bridge_slave_0: left allmulticast mode [ 352.167980][ T13] bridge_slave_0: left promiscuous mode [ 352.203720][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.831735][ T5641] Bluetooth: hci1: command tx timeout [ 352.961920][ T185] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 353.078406][T13178] loop2: detected capacity change from 0 to 512 [ 353.091057][T13178] EXT4-fs: Ignoring removed bh option [ 353.136668][T13178] EXT4-fs (loop2): Test dummy encryption mode enabled [ 353.144927][T13178] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 353.164357][ T185] usb 2-1: Using ep0 maxpacket: 16 [ 353.175783][ T185] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 353.200123][T13178] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2778: inode has both inline data and extents flags [ 353.227960][ T185] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 353.241457][ T185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.252552][ T185] usb 2-1: Product: syz [ 353.252671][T13178] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 353.256735][ T185] usb 2-1: Manufacturer: syz [ 353.256756][ T185] usb 2-1: SerialNumber: syz [ 353.282303][ T185] usb 2-1: config 0 descriptor?? [ 353.291576][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 353.298033][ C0] EXT4-fs (loop2): initial error at time 1785504456: ext4_orphan_get:1399: inode 15 [ 353.307491][ C0] EXT4-fs (loop2): last error at time 1785504456: ext4_orphan_get:1399: inode 15 [ 353.319006][T13178] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2778: couldn't read orphan inode 15 (err -117) [ 353.344305][T13178] loop2: lost filesystem error report for type 5 error -117 [ 353.349377][ T185] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 353.355139][T13178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.359300][ T185] usb 2-1: Detected FT232R [ 353.406605][T13163] loop5: detected capacity change from 0 to 32768 [ 353.488791][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.490425][T13163] JBD2: Ignoring recovery information on journal [ 353.518626][ T185] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 353.570114][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.585927][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.596311][T13163] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 353.621439][ T13] bond0 (unregistering): Released all slaves [ 353.714251][T13163] (syz.5.2772,13163,1):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 353.835732][ T185] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 353.843203][T13163] (syz.5.2772,13163,1):ocfs2_prepare_dir_for_insert:4343 ERROR: status = -2 [ 353.866929][ T13] tipc: Disabling bearer [ 353.904987][T13163] (syz.5.2772,13163,1):ocfs2_mknod:302 ERROR: status = -2 [ 353.931219][ T13] tipc: Left network mode [ 353.976141][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 353.984249][T13163] (syz.5.2772,13163,1):ocfs2_mknod:506 ERROR: status = -2 [ 354.079872][ T185] usb 2-1: USB disconnect, device number 11 [ 354.151389][ T185] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 354.174663][T13170] loop7: detected capacity change from 0 to 32768 [ 354.212758][ T185] ftdi_sio 2-1:0.0: device disconnected [ 354.223278][T13170] ERROR: (device loop7): dtSearch: stack overrun! [ 354.223278][T13170] [ 354.243014][ T5626] ocfs2: Unmounting device (7,5) on (node local) [ 354.309398][T13170] ERROR: (device loop7): remounting filesystem as read-only [ 354.340894][T13170] btstack dump: [ 354.359413][T13170] bn = 0, index = 4 [ 354.377442][T13170] bn = 0, index = 4 [ 354.398893][T13192] netlink: 'syz.2.2781': attribute type 12 has an invalid length. [ 354.407180][T13170] bn = 0, index = 4 [ 354.416835][T13170] bn = 0, index = 4 [ 354.419959][T13192] netlink: 'syz.2.2781': attribute type 10 has an invalid length. [ 354.431939][T13170] bn = 0, index = 4 [ 354.436533][T13170] bn = 0, index = 4 [ 354.446181][T13170] bn = 0, index = 4 [ 354.450542][T13192] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2781'. [ 354.451515][T13170] bn = 0, index = 0 [ 354.464299][T13170] jfs_lookup: dtSearch returned -5 [ 354.501979][ T802] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 354.528914][T13170] ERROR: (device loop7): dtSearch: stack overrun! [ 354.528914][T13170] [ 354.545246][T13170] btstack dump: [ 354.549645][T13170] bn = 0, index = 4 [ 354.585938][T13170] bn = 0, index = 4 [ 354.601404][T13170] bn = 0, index = 4 [ 354.625855][T13170] bn = 0, index = 4 [ 354.648441][T13170] bn = 0, index = 4 [ 354.668485][T13170] bn = 0, index = 4 [ 354.691978][T13170] bn = 0, index = 4 [ 354.706726][T13170] bn = 0, index = 0 [ 354.712647][ T802] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 354.716927][T13170] jfs_lookup: dtSearch returned -5 [ 354.783137][ T802] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 354.836317][ T13] hsr_slave_0: left promiscuous mode [ 354.849280][ T802] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.902863][ T13] hsr_slave_1: left promiscuous mode [ 354.913379][ T5641] Bluetooth: hci1: command tx timeout [ 354.933212][ T802] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 354.946442][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.955038][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.963127][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.971430][ T802] usb 5-1: Product: syz [ 354.976865][ T802] usb 5-1: Manufacturer: syz [ 354.988146][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.010554][ T802] usb 5-1: SerialNumber: syz [ 355.010832][T13206] loop2: detected capacity change from 0 to 512 [ 355.017086][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.045246][ T802] usb 5-1: Device is not authorized for usage [ 355.058142][T13206] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 355.107984][ T13] veth1_macvtap: left promiscuous mode [ 355.123192][ T13] veth0_macvtap: left promiscuous mode [ 355.128842][ T13] veth1_vlan: left promiscuous mode [ 355.137369][ T13] veth0_vlan: left promiscuous mode [ 355.158567][T13206] EXT4-fs (loop2): 1 truncate cleaned up [ 355.169156][T13206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.374636][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.629324][T13220] loop7: detected capacity change from 0 to 16 [ 355.680116][T13220] erofs (device loop7): mounted with root inode @ nid 36. [ 355.865553][T13225] loop7: detected capacity change from 0 to 256 [ 355.929466][T13225] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 355.943033][ T13] team0 (unregistering): Port device team_slave_1 removed [ 355.962430][T13225] FAT-fs (loop7): Filesystem has been set read-only [ 356.004915][ T13] team0 (unregistering): Port device team_slave_0 removed [ 356.306577][ T1101] smbdirect: ib_dev[syz1] removed [ 356.747273][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 356.761344][ T802] infiniband syz1: ib_query_port failed (-19) [ 356.984391][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2800'. [ 357.003915][ T5641] Bluetooth: hci1: command tx timeout [ 357.017211][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2800'. [ 357.027068][T13248] netlink: 'syz.2.2800': attribute type 15 has an invalid length. [ 357.063214][T13248] netlink: 'syz.2.2800': attribute type 18 has an invalid length. [ 357.358184][ T802] usb 5-1: USB disconnect, device number 18 [ 357.521862][T13259] loop2: detected capacity change from 0 to 256 [ 357.558793][T13259] exfat: Deprecated parameter 'utf8' [ 357.591690][T13259] exfat: Deprecated parameter 'namecase' [ 357.629858][T13259] exfat: Deprecated parameter 'namecase' [ 357.661749][T13259] exfat: Deprecated parameter 'utf8' [ 357.732489][T13259] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 357.802615][T13259] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 357.973352][ T13] IPVS: stop unused estimator thread 0... [ 358.223218][T13127] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.256214][T13127] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.291726][T13127] bridge_slave_0: entered allmulticast mode [ 358.324635][T13127] bridge_slave_0: entered promiscuous mode [ 358.333042][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 358.359080][T13127] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.396230][T13127] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.424645][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'. [ 358.429293][T13127] bridge_slave_1: entered allmulticast mode [ 358.468210][T13285] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2811'. [ 358.482575][T13127] bridge_slave_1: entered promiscuous mode [ 358.536597][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 358.562750][ T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 358.606533][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 358.643959][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.688918][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 358.736155][T13127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.741719][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 358.791107][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 358.806444][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 358.810624][T13127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.836150][ T10] usb 5-1: Product: syz [ 358.849402][ T10] usb 5-1: Manufacturer: syz [ 358.874775][T13301] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 358.874775][T13301] The task syz.7.2814 (13301) triggered the difference, watch for misbehavior. [ 358.916605][ T10] usb 5-1: Device is not authorized for usage [ 358.987880][T13305] loop2: detected capacity change from 0 to 256 [ 359.029953][T13305] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 359.055278][T13127] team0: Port device team_slave_0 added [ 359.071822][ T5641] Bluetooth: hci1: command tx timeout [ 359.093082][T13127] team0: Port device team_slave_1 added [ 359.182958][T13127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.197727][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.227619][T13127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.294524][T13127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.309288][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.398588][T13127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.453642][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 359.623837][T13127] hsr_slave_0: entered promiscuous mode [ 359.650804][T13127] hsr_slave_1: entered promiscuous mode [ 359.694593][T13127] debugfs: 'hsr0' already exists in 'hsr' [ 359.719708][T13127] Cannot create hsr debugfs directory [ 360.305899][T13340] loop5: detected capacity change from 0 to 256 [ 360.382427][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 360.567837][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.596131][ T10] usb 3-1: config 0 has no interface number 0 [ 360.607793][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 360.627881][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.635521][T13350] dummy0: entered promiscuous mode [ 360.636175][ T10] usb 3-1: Product: syz [ 360.645875][ T10] usb 3-1: Manufacturer: syz [ 360.650651][ T10] usb 3-1: SerialNumber: syz [ 360.668783][ T10] usb 3-1: config 0 descriptor?? [ 360.677112][T13350] gretap0: entered promiscuous mode [ 360.700588][T13350] hsr1: entered allmulticast mode [ 360.713545][T13350] dummy0: entered allmulticast mode [ 360.728199][T13350] gretap0: entered allmulticast mode [ 360.894434][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 360.933076][T13127] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 360.941819][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.963529][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 360.986271][T13359] loop1: detected capacity change from 0 to 256 [ 360.996074][ T10] usb 3-1: media controller created [ 360.997965][T13127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.035706][T13127] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 361.078688][ T30] audit: type=1800 audit(1785504464.143:162): pid=13359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2835" name="file0" dev="loop1" ino=1048819 res=0 errno=0 [ 361.113845][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.123722][T13127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.155425][T13127] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 361.192047][ T802] usb 5-1: USB disconnect, device number 19 [ 361.217668][T13127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.249079][ T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 361.257647][T13127] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 361.357566][T13127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.427118][ T10] usb 3-1: USB disconnect, device number 16 [ 361.441250][T13364] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03 [ 361.519983][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 361.816901][T13375] loop7: detected capacity change from 0 to 32768 [ 361.825957][T13375] (syz.7.2838,13375,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 361.841470][T13375] (syz.7.2838,13375,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 361.876215][T13375] JBD2: Ignoring recovery information on journal [ 361.926199][T13375] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 362.025510][T13375] ocfs2: Unmounting device (7,7) on (node local) [ 362.125527][T13127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.234616][T13127] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.299452][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.306628][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.397046][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.404208][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.530389][T13417] loop5: detected capacity change from 0 to 2048 [ 363.574711][T13417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.609432][T13417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.654615][T13417] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.701171][T13396] loop7: detected capacity change from 0 to 32768 [ 363.730992][T13417] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 363.782462][T13417] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 363.813445][T13396] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 363.834515][T13417] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2852: Failed to acquire dquot type 0 [ 363.940089][ T6256] ocfs2: Unmounting device (7,7) on (node local) [ 363.963141][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.224018][T13127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.256495][T13408] loop1: detected capacity change from 0 to 32768 [ 364.303317][T13408] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2848 (13408) [ 364.363677][T13442] tipc: Started in network mode [ 364.395126][T13442] tipc: Node identity 7f000001, cluster identity 4711 [ 364.397825][T13408] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 364.430187][T13442] tipc: Enabled bearer , priority 10 [ 364.459281][T13408] BTRFS info (device loop1): using sha256 checksum algorithm [ 364.571406][T13408] BTRFS info (device loop1): enabling ssd optimizations [ 364.583244][T13408] BTRFS info (device loop1): turning on async discard [ 364.591191][T13408] BTRFS info (device loop1): enabling free space tree [ 364.920203][ T5628] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.167372][T13470] syz_tun: entered allmulticast mode [ 365.185455][T13430] loop2: detected capacity change from 0 to 32768 [ 365.222801][T13469] syz_tun: left allmulticast mode [ 365.236077][T13430] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2854 (13430) [ 365.348941][T13430] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 365.386900][T13430] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 365.431680][ T29] tipc: Node number set to 2130706433 [ 365.667557][T13430] BTRFS info (device loop2): enabling ssd optimizations [ 365.675381][T13430] BTRFS info (device loop2): turning on async discard [ 365.684918][T13430] BTRFS info (device loop2): enabling free space tree [ 365.742899][T13430] BTRFS critical (device loop2 state E): emergency shutdown [ 365.869075][ T5630] BTRFS info (device loop2 state E): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 365.910183][T13127] veth0_vlan: entered promiscuous mode [ 365.967821][T13127] veth1_vlan: entered promiscuous mode [ 365.975868][T13499] loop4: detected capacity change from 0 to 2048 [ 366.110392][T13503] loop1: detected capacity change from 0 to 512 [ 366.115188][T13499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.160115][T13503] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 366.198485][T13127] veth0_macvtap: entered promiscuous mode [ 366.238140][T13503] System zones: 0-7 [ 366.248211][T13127] veth1_macvtap: entered promiscuous mode [ 366.295999][T13503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.302640][T13474] loop5: detected capacity change from 0 to 32768 [ 366.364172][T13127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.431427][T13474] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 366.433036][T13498] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 366.454744][T13127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.550909][T13498] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 366.593605][T13498] EXT4-fs (loop4): This should not happen!! Data will be lost [ 366.593605][T13498] [ 366.599759][T13474] XFS (loop5): Ending clean mount [ 366.604686][T13498] EXT4-fs (loop4): Total free blocks count 0 [ 366.615604][T13498] EXT4-fs (loop4): Free/Dirty block details [ 366.626157][T13498] EXT4-fs (loop4): free_blocks=2415919504 [ 366.634972][ T1101] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.669942][T13498] EXT4-fs (loop4): dirty_blocks=64 [ 366.698767][T13498] EXT4-fs (loop4): Block reservation details [ 366.733633][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.751101][T13498] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 366.783452][ T47] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.863354][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.917677][ T5626] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 366.933982][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 366.949082][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.969773][ T5631] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 367.236043][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.287568][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.441566][T13526] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 367.487547][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.535981][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.030811][T13553] loop2: detected capacity change from 0 to 128 [ 368.067632][T13553] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 368.436767][T13560] smpboot: CPU 1 is now offline [ 368.469161][T13565] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2889'. [ 369.219707][T13579] netlink: 'syz.2.2895': attribute type 10 has an invalid length. [ 369.469520][T13534] loop7: detected capacity change from 0 to 32768 [ 370.420017][T13598] loop5: detected capacity change from 0 to 32768 [ 370.472552][T13598] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 370.480729][T13598] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 370.500514][T13598] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 370.510568][ T5757] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 370.568774][ T5757] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 371.057372][ T5757] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 488ms [ 371.157032][ T5757] gfs2: fsid=syz:syz.0: jid=0: Done [ 371.222664][T13598] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 371.231757][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.302681][T13598] gfs2: fsid=syz:syz.0: found 1 quota changes [ 371.510379][T13607] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 371.670435][T13607] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 371.768761][T13607] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:13607 [gfs2_quotad/syz] gfs2_quota_sync+0x353/0x450 [ 371.891331][T13607] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 371.992838][T13607] CPU: 0 UID: 0 PID: 13607 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 371.992865][T13607] Tainted: [L]=SOFTLOCKUP [ 371.992871][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 371.992881][T13607] Call Trace: [ 371.992888][T13607] [ 371.992895][T13607] dump_stack_lvl+0xe8/0x150 [ 371.992925][T13607] gfs2_withdraw+0xc3/0x1b0 [ 371.992946][T13607] inode_go_instantiate+0xbc7/0x12c0 [ 371.992963][T13607] ? preempt_schedule_thunk+0x16/0x40 [ 371.992988][T13607] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.993010][T13607] ? __pfx_inode_go_instantiate+0x10/0x10 [ 371.993029][T13607] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.993064][T13607] gfs2_instantiate+0x168/0x220 [ 371.993086][T13607] gfs2_glock_wait+0x1d4/0x2a0 [ 371.993108][T13607] do_sync+0x49c/0xbb0 [ 371.993131][T13607] ? gfs2_quota_sync+0x353/0x450 [ 371.993162][T13607] ? __pfx_do_sync+0x10/0x10 [ 371.993184][T13607] ? do_raw_spin_lock+0x12b/0x2f0 [ 371.993212][T13607] ? gfs2_quota_sync+0x353/0x450 [ 371.993236][T13607] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.993258][T13607] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.993280][T13607] ? do_raw_spin_unlock+0xf5/0x210 [ 371.993307][T13607] gfs2_quota_sync+0x353/0x450 [ 371.993340][T13607] gfs2_quotad+0x2ab/0x6f0 [ 371.993376][T13607] ? __pfx_gfs2_quotad+0x10/0x10 [ 371.993399][T13607] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.993421][T13607] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 371.993440][T13607] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.993460][T13607] ? __kthread_parkme+0x71/0x1f0 [ 371.993484][T13607] ? __kthread_parkme+0x196/0x1f0 [ 371.993512][T13607] kthread+0x388/0x470 [ 371.993537][T13607] ? __pfx_gfs2_quotad+0x10/0x10 [ 371.993561][T13607] ? __pfx_kthread+0x10/0x10 [ 371.993587][T13607] ret_from_fork+0x514/0xb70 [ 371.993616][T13607] ? __pfx_ret_from_fork+0x10/0x10 [ 371.993641][T13607] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.993660][T13607] ? __switch_to+0xc89/0x1420 [ 371.993685][T13607] ? __pfx_kthread+0x10/0x10 [ 371.993711][T13607] ret_from_fork_asm+0x1a/0x30 [ 371.993741][T13607] [ 371.993758][T13607] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 372.379987][ T30] audit: type=1326 audit(1785504475.333:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 372.567712][ T30] audit: type=1326 audit(1785504475.353:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 372.782509][ T30] audit: type=1326 audit(1785504475.373:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 372.999695][ T30] audit: type=1326 audit(1785504475.373:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 373.202863][ T30] audit: type=1326 audit(1785504475.373:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 373.305271][T13612] loop7: detected capacity change from 0 to 32768 [ 373.396525][T13612] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2908 (13612) [ 373.437355][ T30] audit: type=1326 audit(1785504475.373:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 373.540166][T13638] loop2: detected capacity change from 0 to 64 [ 373.584301][T13612] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.686812][T13612] BTRFS info (device loop7): using crc32c checksum algorithm [ 373.716565][ T30] audit: type=1326 audit(1785504475.373:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 373.979950][ T30] audit: type=1326 audit(1785504475.373:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 374.168814][ T9] gfs2: fsid=syz:syz.0: file system withdrawn [ 374.175859][T13612] BTRFS info (device loop7): enabling ssd optimizations [ 374.200403][T13657] loop2: detected capacity change from 0 to 512 [ 374.212365][T13598] gfs2: unable to remount read-write [ 374.303436][T13612] BTRFS info (device loop7): turning on flush-on-commit [ 374.311123][ T30] audit: type=1326 audit(1785504475.383:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 374.356041][T13657] EXT4-fs: Ignoring removed orlov option [ 374.422165][T13612] BTRFS info (device loop7): enabling free space tree [ 374.487841][T13657] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 374.499867][T13625] loop4: detected capacity change from 0 to 32768 [ 374.524860][T13612] BTRFS info (device loop7): enabling auto defrag [ 374.586195][T13612] BTRFS info (device loop7): use lzo compression, level 1 [ 374.630069][ T30] audit: type=1326 audit(1785504475.423:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.2.2911" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc315b9e019 code=0x7ffc0000 [ 374.687718][T13612] BTRFS info (device loop7): max_inline set to 4096 [ 375.020140][ T6256] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 375.396370][T13632] loop8: detected capacity change from 0 to 32768 [ 377.146288][T13680] loop8: detected capacity change from 0 to 131072 [ 377.197375][T13680] F2FS-fs (loop8): invalid crc value [ 377.257055][T13680] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 377.271018][T13680] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 377.490536][T13686] netlink: 'syz.2.2926': attribute type 14 has an invalid length. [ 377.801456][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.809599][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.833508][T13689] loop5: detected capacity change from 0 to 2048 [ 377.929366][T13689] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 378.063250][T13689] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 378.166321][T13689] UDF-fs: Scanning with blocksize 512 failed [ 378.318516][T13689] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.610482][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 378.610498][ T30] audit: type=1800 audit(1785504481.673:193): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2927" name="file1" dev="loop5" ino=838 res=0 errno=0 [ 378.920814][T13700] loop2: detected capacity change from 0 to 256 [ 379.030780][T13700] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 379.270493][T13700] FAT-fs (loop2): error, invalid FAT chain (i_pos 196, last_block 8200) [ 379.443059][T13700] FAT-fs (loop2): Filesystem has been set read-only [ 379.770247][T13710] loop4: detected capacity change from 0 to 1024 [ 379.929371][T13713] loop5: detected capacity change from 0 to 1024 [ 380.017074][T13713] EXT4-fs: Ignoring removed bh option [ 380.031989][ T30] audit: type=1800 audit(1785504483.093:194): pid=13710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2933" name="file0" dev="loop4" ino=27 res=0 errno=0 [ 380.149978][T13713] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 380.340628][T13713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.874097][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.999021][T13728] loop4: detected capacity change from 0 to 4096 [ 381.166487][T13735] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.018001][T13747] loop7: detected capacity change from 0 to 8 [ 382.604644][T13751] loop8: detected capacity change from 0 to 256 [ 382.996382][T13758] loop7: detected capacity change from 0 to 2048 [ 383.146875][T13761] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.929881][T13770] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 384.086388][T13745] loop4: detected capacity change from 0 to 32768 [ 384.216164][T13745] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 384.357384][T13745] JBD2: Ignoring recovery information on journal [ 384.656165][T13745] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 385.748335][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.764699][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.773206][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 385.786638][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 385.794256][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 385.993144][ T5631] ocfs2: Unmounting device (7,4) on (node local) [ 386.023902][T13793] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 386.915609][T13812] bad cache= option: ™f [ 386.915609][T13812] – EqiòO ¿%Æb)¿–d‰’ê&ñ¸VbŸïÜ×'0«Î{Ñ^k»ß#pŸÁaô>Çx9Æ Ž8LÞ­1¤Këáo$ VX±wa‹8ZúU U‘Z>ÿï/7Êsý™Xj·wi_ÖôÂ#BMy'ÐÏŸí9…×áˆûàÙiÛÆÏÕÇ˺ùÇx9Æ Ž8LÞ­1¤Këáo$ VX±wa‹8ZúU U‘Z>ÿï/7Êsý™Xj·wi_ÖôÂ#BMy'ÐÏŸí9…×áˆûàÙiÛÆÏÕÇ˺ù [ 395.027688][T13933] dump_stack_lvl+0xe8/0x150 [ 395.027721][T13933] gfs2_withdraw+0xc3/0x1b0 [ 395.027743][T13933] inode_go_instantiate+0xbc7/0x12c0 [ 395.027762][T13933] ? preempt_schedule_thunk+0x16/0x40 [ 395.027789][T13933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.027813][T13933] ? __pfx_inode_go_instantiate+0x10/0x10 [ 395.027834][T13933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.027863][T13933] gfs2_instantiate+0x168/0x220 [ 395.027886][T13933] gfs2_glock_wait+0x1d4/0x2a0 [ 395.027911][T13933] do_sync+0x49c/0xbb0 [ 395.027936][T13933] ? gfs2_quota_sync+0x353/0x450 [ 395.027970][T13933] ? __pfx_do_sync+0x10/0x10 [ 395.027993][T13933] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.028023][T13933] ? gfs2_quota_sync+0x353/0x450 [ 395.028049][T13933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.028074][T13933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.028095][T13933] ? do_raw_spin_unlock+0xf5/0x210 [ 395.028121][T13933] gfs2_quota_sync+0x353/0x450 [ 395.028157][T13933] gfs2_quotad+0x2ab/0x6f0 [ 395.028196][T13933] ? __pfx_gfs2_quotad+0x10/0x10 [ 395.028221][T13933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.028245][T13933] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.028268][T13933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.028289][T13933] ? __kthread_parkme+0x71/0x1f0 [ 395.028320][T13933] ? __kthread_parkme+0x196/0x1f0 [ 395.028350][T13933] kthread+0x388/0x470 [ 395.028377][T13933] ? __pfx_gfs2_quotad+0x10/0x10 [ 395.028403][T13933] ? __pfx_kthread+0x10/0x10 [ 395.028432][T13933] ret_from_fork+0x514/0xb70 [ 395.028463][T13933] ? __pfx_ret_from_fork+0x10/0x10 [ 395.028490][T13933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.028511][T13933] ? __switch_to+0xc89/0x1420 [ 395.028537][T13933] ? __pfx_kthread+0x10/0x10 [ 395.028566][T13933] ret_from_fork_asm+0x1a/0x30 [ 395.028599][T13933] [ 395.028633][T13933] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 395.254147][T13796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.492257][ T57] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm kworker/u8:4: Invalid inode table block 8589934593 in block_group 0 [ 395.552175][T13939] loop7: detected capacity change from 0 to 16 [ 395.636141][T13939] erofs (device loop7): mounted with root inode @ nid 36. [ 395.713648][T13942] loop2: detected capacity change from 0 to 512 [ 395.746213][T13796] hsr_slave_0: entered promiscuous mode [ 395.799184][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.826084][T13942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 395.836762][T13796] hsr_slave_1: entered promiscuous mode [ 395.889376][T13796] debugfs: 'hsr0' already exists in 'hsr' [ 395.951714][T13796] Cannot create hsr debugfs directory [ 396.166203][T13942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 396.233220][T13942] System zones: 1-12 [ 396.297406][T13942] EXT4-fs (loop2): 1 truncate cleaned up [ 396.366045][T13951] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3005'. [ 396.404975][T13942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.437882][T13951] netlink: 'syz.4.3005': attribute type 2 has an invalid length. [ 396.490601][T13951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3005'. [ 396.737821][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.809661][T13955] loop7: detected capacity change from 0 to 4096 [ 396.937213][T13959] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.982861][T13955] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=77 [ 397.271169][ T5757] gfs2: fsid=syz:syz.0: file system withdrawn [ 397.304410][T13955] Remounting filesystem read-only [ 397.361615][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 397.525086][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 397.603155][ T9] usb 3-1: config 0 has no interface number 0 [ 397.655069][ T9] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 397.777321][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.900463][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 398.008667][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 398.092673][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 398.177193][ T9] usb 3-1: Product: syz [ 398.213742][ T9] usb 3-1: SerialNumber: syz [ 398.283662][ T9] usb 3-1: config 0 descriptor?? [ 398.367521][ T9] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 398.376038][T13982] dyndbg: expected <4096 bytes into control [ 398.467850][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14 [ 398.501151][T13986] loop4: detected capacity change from 0 to 64 [ 398.557228][T13796] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 398.580204][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.588516][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.596322][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.603441][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.612616][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.619696][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.626798][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.633904][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.640983][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.648119][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.774029][ T9] usb 3-1: USB disconnect, device number 17 [ 398.779960][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 398.851339][T13796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.865758][ T30] audit: type=1800 audit(1785504501.913:196): pid=13986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3017" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 398.964933][T13796] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 399.101013][T13796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.134252][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 399.194193][T13796] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 399.323976][T13796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.410556][T13796] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 399.538586][T13796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.269504][T13796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.362074][ T5757] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 400.399770][T13796] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.491370][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.498507][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.605508][ T5757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.689471][ T5757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 400.707893][T14029] loop7: detected capacity change from 0 to 16 [ 400.725949][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.733070][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.797230][T14029] erofs (device loop7): mounted with root inode @ nid 36. [ 400.817819][ T5757] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 400.892232][ T5757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.031416][ T5757] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 401.133597][ T5757] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 401.530881][ T10] usb 6-1: USB disconnect, device number 20 [ 401.577448][T14041] loop8: detected capacity change from 0 to 1024 [ 401.640750][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 401.729720][ T10] spcp8x5 6-1:1.0: device disconnected [ 402.100071][T14017] loop2: detected capacity change from 0 to 32768 [ 402.453800][T14053] loop5: detected capacity change from 0 to 128 [ 402.569923][ T30] audit: type=1800 audit(1785504505.633:197): pid=14053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3036" name="file2" dev="loop5" ino=1048827 res=0 errno=0 [ 402.635487][T14053] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 402.779148][T14053] FAT-fs (loop5): Filesystem has been set read-only [ 402.822854][ T30] audit: type=1800 audit(1785504505.663:198): pid=14053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3036" name="file2" dev="loop5" ino=1048827 res=0 errno=0 [ 402.877521][T14053] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 402.944012][T14053] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 403.014036][T14052] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 403.096060][T14052] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 403.180167][T14053] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 403.244677][T14053] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 403.314659][T14052] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 403.379299][T14040] loop7: detected capacity change from 0 to 32768 [ 403.395530][T14052] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 403.465146][T14053] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000060b) [ 403.495413][ T30] audit: type=1800 audit(1785504506.563:199): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3033" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 403.552766][T14040] read_mapping_page failed! [ 403.580120][T14069] loop2: detected capacity change from 0 to 1024 [ 403.607314][T14040] ERROR: (device loop7): txCommit: [ 403.607314][T14040] [ 403.750998][T14069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 404.502416][T14077] loop4: detected capacity change from 0 to 131072 [ 404.551800][T14077] F2FS-fs (loop4): invalid crc value [ 404.692713][T14077] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 404.708592][T14077] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 404.728687][T14069] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.767766][T14076] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 405.109358][T13796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.326679][ T1121] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:10: lblock 0 mapped to illegal pblock 0 (length 6) [ 405.500631][ T1121] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 405.650552][ T1121] EXT4-fs (loop2): This should not happen!! Data will be lost [ 405.650552][ T1121] [ 405.775390][ T1121] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 405.928307][ T1121] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 406.055652][ T1121] EXT4-fs (loop2): This should not happen!! Data will be lost [ 406.055652][ T1121] [ 406.134526][ T5630] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 406.257479][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 407.038506][T13796] veth0_vlan: entered promiscuous mode [ 407.048512][T14089] loop5: detected capacity change from 0 to 32768 [ 407.122447][T13796] veth1_vlan: entered promiscuous mode [ 407.133326][ T30] audit: type=1800 audit(1785504510.193:200): pid=14089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3045" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 407.389854][T13796] veth0_macvtap: entered promiscuous mode [ 407.515819][T13796] veth1_macvtap: entered promiscuous mode [ 407.708696][T13796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.828395][T13796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.054086][ T1101] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.141396][ T1101] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.315605][ T1121] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.423897][ T1121] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.738300][T14135] loop2: detected capacity change from 0 to 256 [ 408.835725][T14135] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 409.383485][T14138] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 409.438427][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.520307][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.686805][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3066'. [ 409.749195][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.779990][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3066'. [ 409.822389][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.631804][T14169] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3077'. [ 411.341726][T14144] loop4: detected capacity change from 0 to 32768 [ 411.403331][T14144] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3046 (14144) [ 411.540564][T14144] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 411.615653][T14144] BTRFS info (device loop4): using sha256 checksum algorithm [ 411.803810][T14202] loop8: detected capacity change from 0 to 256 [ 411.849128][T14202] exfat: Deprecated parameter 'utf8' [ 411.860304][T14144] BTRFS info (device loop4): enabling ssd optimizations [ 411.923634][T14144] BTRFS info (device loop4): turning on async discard [ 412.014141][T14202] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 412.026312][T14144] BTRFS info (device loop4): enabling free space tree [ 412.484050][T14213] net_ratelimit: 1236 callbacks suppressed [ 412.484066][T14213] sock: sock_set_timeout: `syz.5.3091' (pid 14213) tries to set negative timeout [ 412.617568][ T5631] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 413.150528][T14228] loop2: detected capacity change from 0 to 8 [ 413.410226][T14235] loop7: detected capacity change from 0 to 256 [ 413.417667][T14228] SQUASHFS error: zstd decompression error: 10 [ 413.523956][T14228] SQUASHFS error: zstd decompression failed, data probably corrupt [ 413.659476][T14228] SQUASHFS error: Failed to read block 0x60: -5 [ 413.739961][T14228] SQUASHFS error: zstd decompression error: 10 [ 413.843349][T14228] SQUASHFS error: zstd decompression failed, data probably corrupt [ 413.994602][T14228] SQUASHFS error: Failed to read block 0x60: -5 [ 414.070784][T14240] loop8: detected capacity change from 0 to 4096 [ 414.111493][ T30] audit: type=1800 audit(1785504517.163:201): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3097" name="/" dev="loop2" ino=1 res=0 errno=0 [ 414.196758][T14240] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 414.383559][T14240] ntfs3(loop8): Failed to load $Bitmap (-22). [ 415.566170][T14275] loop4: detected capacity change from 0 to 1024 [ 415.627371][T14275] EXT4-fs: Ignoring removed orlov option [ 415.770750][T14275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.807349][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3115'. [ 416.302274][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.898181][ T5640] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 418.426620][T14344] loop4: detected capacity change from 0 to 256 [ 418.643096][ T5743] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 418.875478][ T5743] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.999570][ T5743] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 419.105641][ T5743] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.188916][ T5743] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.276587][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.360224][ T5743] usb 6-1: Product: syz [ 419.415848][ T5743] usb 6-1: Manufacturer: syz [ 419.468099][ T5743] usb 6-1: SerialNumber: syz [ 419.548142][ T5743] usb 6-1: config 0 descriptor?? [ 419.643648][ T5743] usb 6-1: selecting invalid altsetting 0 [ 420.170472][ T5743] usb 6-1: USB disconnect, device number 21 [ 420.424334][T14384] sctp: [Deprecated]: syz.8.3155 (pid 14384) Use of int in max_burst socket option deprecated. [ 420.424334][T14384] Use struct sctp_assoc_value instead [ 420.623491][T14390] netlink: 'syz.9.3157': attribute type 10 has an invalid length. [ 420.715145][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.903223][T14390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.992025][ T5640] Bluetooth: hci4: command 0x041b tx timeout [ 421.134381][T14354] loop2: detected capacity change from 0 to 32768 [ 421.679950][T14403] loop4: detected capacity change from 0 to 4096 [ 421.780624][T14403] EXT4-fs (loop4): Test dummy encryption mode enabled [ 421.843826][T14410] loop9: detected capacity change from 0 to 256 [ 421.887462][T14403] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 421.990310][T14410] exFAT-fs (loop9): error, no upcase table entry. Please run fsck [ 422.027867][T14403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.090514][T14410] exFAT-fs (loop9): Filesystem has been set read-only [ 422.165337][T14410] exFAT-fs (loop9): failed to test first cluster bit of root dir(5) [ 422.708329][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.738091][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 422.967405][ T10] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 423.079419][ T10] usb 3-1: config 0 has no interface number 0 [ 423.176343][ T10] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 423.219597][ T5641] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 423.326494][ T10] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 423.363269][T14433] loop7: detected capacity change from 0 to 4096 [ 423.430177][T14433] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 423.430802][ T10] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 423.430824][ T10] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 423.430841][ T10] usb 3-1: Manufacturer: syz [ 423.430854][ T10] usb 3-1: SerialNumber: syz [ 423.439647][ T10] usb 3-1: config 0 descriptor?? [ 423.924164][T14446] loop9: detected capacity change from 0 to 512 [ 423.979290][T14446] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 423.979308][T14446] UDF-fs: Scanning with blocksize 512 failed [ 424.044030][T14446] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 424.044047][T14446] UDF-fs: Scanning with blocksize 1024 failed [ 424.057384][ T10] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 424.077493][ T10] usb 3-1: USB disconnect, device number 18 [ 424.081145][T14446] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 424.081160][T14446] UDF-fs: Scanning with blocksize 2048 failed [ 424.082718][T14446] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 424.090267][T14446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.149106][ T30] audit: type=1800 audit(1785504527.203:202): pid=14446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3181" name="file1" dev="loop9" ino=26 res=0 errno=0 [ 424.505613][T14456] loop7: detected capacity change from 0 to 256 [ 424.521145][T14456] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 424.983676][T14461] loop8: detected capacity change from 0 to 1024 [ 425.043206][T14461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.737535][T13127] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.037546][T14483] db_root: cannot open: ./m [ 426.224095][T14488] netlink: 'syz.7.3199': attribute type 8 has an invalid length. [ 427.110381][T14473] loop4: detected capacity change from 0 to 32768 [ 427.232320][ T5641] Bluetooth: hci1: command 0x2016 tx timeout [ 427.262770][T14473] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 427.679302][T14473] (syz.4.3192,14473,0):ocfs2_double_lock:1193 ERROR: status = -2 [ 427.776737][T14473] (syz.4.3192,14473,0):ocfs2_rename:1302 ERROR: status = -2 [ 427.858399][T14473] (syz.4.3192,14473,0):ocfs2_rename:1700 ERROR: status = -2 [ 427.970639][T14525] block2mtd: parameter too long [ 428.340544][ T5631] ocfs2: Unmounting device (7,4) on (node local) [ 429.043790][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3224'. [ 429.134903][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3224'. [ 429.324337][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 429.552133][ T5640] Bluetooth: hci6: command tx timeout [ 429.798468][T14557] loop5: detected capacity change from 0 to 1024 [ 429.837918][T14555] loop7: detected capacity change from 0 to 4096 [ 429.865343][T14557] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 429.969926][T14555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.987349][T14557] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 430.098275][T14557] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 430.235105][T14557] EXT4-fs error (device loop5): ext4_get_journal_inode:5900: inode #5: comm syz.5.3230: unexpected bad inode w/o EXT4_IGET_BAD [ 430.437184][T14557] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 430.441536][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 430.457045][ C0] EXT4-fs (loop5): initial error at time 1785504533: ext4_get_journal_inode:5900: inode 5 [ 430.466960][ C0] EXT4-fs (loop5): last error at time 1785504533: ext4_get_journal_inode:5900: inode 5 [ 430.482847][T14557] EXT4-fs (loop5): no journal found [ 430.557070][T14557] EXT4-fs (loop5): can't get journal size [ 430.630192][T14557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 430.760909][ T6256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.821946][T14557] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1332: inode #12: block 16: comm syz.5.3230: path /534/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 431.025174][T14573] vcan0: tx address claim with dest, not broadcast [ 431.253182][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.651300][T14581] loop2: detected capacity change from 0 to 1024 [ 431.693622][T14584] loop5: detected capacity change from 0 to 2048 [ 431.729355][T14581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 431.739601][T14584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.754517][T14581] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 431.754540][T14581] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 431.754619][T14581] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 431.779754][T14581] EXT4-fs (loop2): journal inode is deleted [ 431.779769][T14581] EXT4-fs (loop2): can't get journal size [ 431.786997][T14581] EXT4-fs error (device loop2): __ext4_fill_super:5600: inode #2: comm syz.2.3239: iget: special inode unallocated [ 431.787022][T14581] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 431.794823][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 431.794840][ C0] EXT4-fs (loop2): initial error at time 1785504534: __ext4_fill_super:5600: inode 2 [ 431.794869][ C0] EXT4-fs (loop2): last error at time 1785504534: __ext4_fill_super:5600: inode 2 [ 431.885454][T14581] EXT4-fs (loop2): get root inode failed [ 431.885472][T14581] EXT4-fs (loop2): mount failed [ 432.082031][T14554] loop8: detected capacity change from 0 to 40427 [ 432.098448][T14554] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 432.098468][T14554] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 432.099324][T14554] F2FS-fs (loop8): invalid crc value [ 432.335837][ T5640] Bluetooth: hci6: link tx timeout [ 432.336046][ T5640] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 432.668580][T14554] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 433.591258][T14618] qnx4: block size(16384) > page size(4096) not supported by filesystem [ 434.026931][T14622] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3256'. [ 434.112037][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 434.153668][ T10] IPVS: starting estimator thread 0... [ 434.302752][T14627] IPVS: using max 34 ests per chain, 81600 per kthread [ 434.357835][ T5640] Bluetooth: hci6: command 0x0406 tx timeout [ 434.763071][T14603] loop5: detected capacity change from 0 to 32768 [ 434.862394][T14603] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 435.248124][T14603] XFS (loop5): Ending clean mount [ 435.395632][T14603] XFS (loop5): Quotacheck needed: Please wait. [ 435.486534][T14662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.683933][T14603] XFS (loop5): Quotacheck: Done. [ 435.927275][ T5626] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 436.346287][T14683] loop2: detected capacity change from 0 to 256 [ 436.416411][T14683] exfat: Deprecated parameter 'utf8' [ 436.504587][T14683] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 438.128797][T14678] loop8: detected capacity change from 0 to 32768 [ 438.253696][ T5641] Bluetooth: hci6: unexpected event for opcode 0x1408 [ 438.270152][T14678] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 438.457040][T14678] XFS (loop8): Ending clean mount [ 438.749323][T13127] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 439.241140][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.268574][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.495640][T14728] loop9: detected capacity change from 0 to 256 [ 439.642720][T14734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.755043][T14736] loop2: detected capacity change from 0 to 256 [ 440.575242][T14755] loop4: detected capacity change from 0 to 256 [ 440.646972][T14755] exfat: Deprecated parameter 'utf8' [ 440.729902][T14755] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x202d7169, utbl_chksum : 0xe619d30d) [ 441.138536][T14773] loop9: detected capacity change from 0 to 128 [ 441.174920][T14775] loop2: detected capacity change from 0 to 128 [ 441.279836][T14775] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 441.386190][T14775] ext4 filesystem being mounted at /622/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 441.660618][T14784] loop8: detected capacity change from 0 to 4096 [ 441.697497][T14790] loop7: detected capacity change from 0 to 256 [ 441.750134][T14790] exfat: Deprecated parameter 'utf8' [ 441.806206][T14790] exfat: Deprecated parameter 'utf8' [ 441.858221][T14790] exfat: Deprecated parameter 'utf8' [ 441.875477][ T5630] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 441.922598][T14795] loop4: detected capacity change from 0 to 512 [ 441.947680][T14790] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 442.037393][T14795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 442.105167][T14795] System zones: 1-12 [ 442.145892][T14795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.3322: missing EA_INODE flag [ 442.177500][T14801] loop2: detected capacity change from 0 to 164 [ 442.253902][T14795] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 442.255714][T14795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3322: error while reading EA inode 12 err=-117 [ 442.264907][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 442.264923][ C0] EXT4-fs (loop4): initial error at time 1785504545: ext4_xattr_inode_iget:441: inode 12 [ 442.264952][ C0] EXT4-fs (loop4): last error at time 1785504545: ext4_xattr_inode_iget:441: inode 12 [ 442.307438][ T5641] Bluetooth: hci6: command 0x0406 tx timeout [ 442.675408][T14795] loop4: lost filesystem error report for type 5 error -117 [ 442.675719][T14795] EXT4-fs (loop4): 1 orphan inode deleted [ 442.726074][T14814] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3330'. [ 442.808793][T14795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.068407][T14795] fscrypt (loop4, inode 18): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 443.498668][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.149272][ T5640] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 444.952524][T14842] loop2: detected capacity change from 0 to 128 [ 444.964043][T14807] loop7: detected capacity change from 0 to 32768 [ 445.002951][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 445.027362][T14842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 445.094378][T14842] System zones: 1-3, 19-19, 35-36 [ 445.176545][T14842] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 445.279393][T14842] ext4 filesystem being mounted at /627/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 445.343942][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.418644][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.492974][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 445.544603][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 445.602476][ T9] usb 6-1: SerialNumber: syz [ 445.845722][ T5630] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.924892][ T9] usb 6-1: skipping empty audio interface (v1) [ 446.194932][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 446.413267][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 446.557744][T14865] loop9: detected capacity change from 0 to 2048 [ 446.603256][ T9] usb 6-1: USB disconnect, device number 22 [ 446.760487][T14870] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 447.088810][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.364352][T14870] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 447.528542][T14870] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 447.757736][T14870] Remounting filesystem read-only [ 447.816572][T14884] loop4: detected capacity change from 0 to 256 [ 447.845432][T13796] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 447.887467][T14884] exfat: Deprecated parameter 'utf8' [ 447.963958][T14884] exfat: Deprecated parameter 'utf8' [ 448.017609][T14884] exfat: Deprecated parameter 'utf8' [ 448.140079][T14884] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 448.273638][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 448.745969][T14901] loop7: detected capacity change from 0 to 128 [ 448.810298][T14901] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 448.829081][T14904] loop4: detected capacity change from 0 to 1024 [ 448.877532][T14904] EXT4-fs: Ignoring removed oldalloc option [ 448.902409][T14901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.954557][T14904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.030048][T14904] EXT4-fs: Ignoring removed i_version option [ 449.154742][T14904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 449.268112][T14904] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.459081][T14904] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.3369: lblock 3 mapped to illegal pblock 3 (length 2) [ 449.673510][T14904] EXT4-fs (loop4): Remounting filesystem read-only [ 449.976440][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 450.531929][T14933] loop5: detected capacity change from 0 to 4096 [ 450.621485][T14933] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 450.728675][T14941] loop9: detected capacity change from 0 to 1024 [ 450.840339][T14941] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 451.041393][T14941] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 2: comm syz.9.3383: lblock 2 mapped to illegal pblock 2 (length 1) [ 451.139167][T14933] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 451.249297][T14941] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 451.251187][T14941] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 451.260284][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 451.260301][ C0] EXT4-fs (loop9): initial error at time 1785504554: ext4_map_blocks:791: inode 3: block 2 [ 451.260337][ C0] EXT4-fs (loop9): last error at time 1785504554: ext4_map_blocks:791: inode 3: block 2 [ 451.773345][T14941] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 48: comm syz.9.3383: lblock 0 mapped to illegal pblock 48 (length 1) [ 451.929003][T14941] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 451.929249][T14941] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 452.129195][T14941] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3383: Failed to acquire dquot type 0 [ 452.233558][T14941] loop9: lost filesystem error report for type 5 error -117 [ 452.233872][T14941] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 452.260237][T14956] syz_tun: entered allmulticast mode [ 452.321435][T14955] syz_tun: left allmulticast mode [ 452.419907][T14941] loop9: lost filesystem error report for type 5 error -117 [ 452.423162][T14941] EXT4-fs error (device loop9): ext4_evict_inode:267: inode #11: comm syz.9.3383: mark_inode_dirty error [ 452.598194][T14941] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 452.599936][T14941] EXT4-fs warning (device loop9): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 452.774824][T14941] EXT4-fs (loop9): 1 orphan inode deleted [ 452.795496][ T132] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 452.839073][T14941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.907257][ T132] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 452.913202][ T132] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 453.095534][ T132] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 453.114669][T14941] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm syz.9.3383: lblock 1 mapped to illegal pblock 1 (length 1) [ 453.165115][T14968] loop7: detected capacity change from 0 to 512 [ 453.210382][T14968] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 453.278391][ T5638] udevd[5638]: incorrect ext4 checksum on /dev/loop7 [ 453.294714][T14941] Quota error (device loop9): find_tree_dqentry: Can't read quota tree block 1 [ 453.369148][T14941] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 60928 [ 453.462492][T14941] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3383: Failed to acquire dquot type 0 [ 453.744490][T13796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.767793][ T132] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 453.868734][ T132] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 453.868972][ T132] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 454.017642][ T132] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 454.091873][T14976] loop5: detected capacity change from 0 to 1024 [ 454.110761][ T132] loop9: lost filesystem error report for type 5 error -117 [ 454.114091][T13796] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 454.162282][T14976] EXT4-fs: Ignoring removed oldalloc option [ 454.210756][T14976] EXT4-fs: Ignoring removed oldalloc option [ 454.281026][T14976] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 454.310513][T14962] loop4: detected capacity change from 0 to 32768 [ 454.340987][T13796] loop9: lost filesystem error report for type 5 error -117 [ 454.398410][T14962] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3393 (14962) [ 454.420198][T13796] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 454.466226][T14976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.516090][T13796] loop9: lost filesystem error report for type 5 error -117 [ 454.516395][T13796] EXT4-fs error (device loop9): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 454.690448][T13796] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 454.715561][T14962] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 454.904281][T14962] BTRFS info (device loop4): using crc32c checksum algorithm [ 454.981082][T14962] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 455.113988][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.333598][T14968] loop7: detected capacity change from 0 to 32768 [ 455.349273][T14962] BTRFS info (device loop4): rebuilding free space tree [ 455.462027][T14968] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 455.551267][T15012] loop5: detected capacity change from 0 to 512 [ 455.650710][T15012] EXT4-fs (loop5): Test dummy encryption mode enabled [ 455.714176][T14968] XFS (loop7): Ending clean mount [ 455.729309][T15012] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 455.825124][T15012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 455.912432][T15012] EXT4-fs (loop5): orphan cleanup on readonly fs [ 455.963717][T14962] BTRFS info (device loop4): disabling free space tree [ 455.986516][T15012] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3406: bad orphan inode 3 [ 456.050879][T14962] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 456.122826][T15012] loop5: lost filesystem error report for type 5 error -117 [ 456.123161][T15012] EXT4-fs (loop5): Remounting filesystem read-only [ 456.136969][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 456.136985][ C0] EXT4-fs (loop5): initial error at time 1785504559: ext4_orphan_get:1425 [ 456.137008][ C0] EXT4-fs (loop5): last error at time 1785504559: ext4_orphan_get:1425 [ 456.217353][T14962] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 456.262349][ T6256] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 456.422851][T14962] BTRFS info (device loop4): enabling ssd optimizations [ 456.470257][T14962] BTRFS info (device loop4): turning on async discard [ 456.501841][T15012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 456.556484][T14962] BTRFS info (device loop4): enabling disk space caching [ 456.628763][T14962] BTRFS info (device loop4): force clearing of disk cache [ 456.707855][T14962] BTRFS info (device loop4): use zstd compression, level 3 [ 456.960234][ T5631] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 456.998508][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 457.033309][T14990] loop9: detected capacity change from 0 to 32768 [ 457.100477][T14990] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3400 (14990) [ 457.277525][T14990] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 457.385216][T14990] BTRFS info (device loop9): using blake2b checksum algorithm [ 457.961383][T14990] BTRFS info (device loop9): enabling ssd optimizations [ 458.037366][T14990] BTRFS info (device loop9): turning on async discard [ 458.115837][T14990] BTRFS info (device loop9): enabling free space tree [ 458.312982][T15061] macvlan1: entered allmulticast mode [ 458.405090][T15059] loop2: detected capacity change from 0 to 2048 [ 458.423482][T13796] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 458.451217][T15064] veth1_vlan: entered allmulticast mode [ 458.493133][T15059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.523554][T15064] macvlan1: left allmulticast mode [ 458.600242][T15064] veth1_vlan: left allmulticast mode [ 459.900936][T15091] loop4: detected capacity change from 0 to 512 [ 459.983390][T15091] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 460.937464][T15112] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3441'. [ 461.039351][T15112] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3441'. [ 461.114740][T15114] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3441'. [ 461.153751][T15115] loop2: detected capacity change from 0 to 128 [ 461.256405][T15115] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 461.374107][T15115] ext4 filesystem being mounted at /650/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 461.701149][T15125] loop9: detected capacity change from 0 to 1024 [ 461.765442][ T5630] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 461.789636][T15129] netlink: 'syz.8.3447': attribute type 11 has an invalid length. [ 461.828942][T15125] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.949131][T15133] team0: No ports can be present during mode change [ 462.228478][T15138] loop4: detected capacity change from 0 to 1024 [ 462.900751][ T30] audit: type=1326 audit(1785504565.963:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15148 comm="syz.8.3456" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64dd9e019 code=0x0 [ 462.929320][T13796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.046572][T15157] loop4: detected capacity change from 0 to 16 [ 463.150824][T15157] erofs (device loop4): mounted with root inode @ nid 36. [ 463.253378][T15157] erofs (device loop4): invalid h_shared_count 83 @ nid 46 [ 463.353991][T15165] erofs (device loop4): invalid h_shared_count 83 @ nid 46 [ 463.407114][T15157] erofs (device loop4): invalid h_shared_count 83 @ nid 46 [ 463.449423][T15157] overlayfs: failed to get redirect (-117) [ 463.495436][T15163] loop9: detected capacity change from 0 to 4096 [ 463.610802][T15163] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.937429][ T30] audit: type=1800 audit(1785504567.003:204): pid=15163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3460" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 464.065362][T15180] loop5: detected capacity change from 0 to 512 [ 464.180989][T15180] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 464.234855][T13796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.288197][T15180] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 464.404700][T15180] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3468: Failed to acquire dquot type 1 [ 464.521043][T15180] loop5: lost filesystem error report for type 5 error -117 [ 464.521519][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 464.535231][ C0] EXT4-fs (loop5): last error at time 1785504567: ext4_acquire_dquot:7041 [ 464.568394][T15180] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 464.656252][T15180] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 464.730879][T15180] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3468: Failed to acquire dquot type 1 [ 464.800516][T15180] loop5: lost filesystem error report for type 5 error -117 [ 464.825012][T15180] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3468: bg 0: block 248: padding at end of block bitmap is not set [ 464.899000][T15201] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3476'. [ 464.931599][T15180] loop5: lost filesystem error report for type 5 error -117 [ 464.931977][T15180] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 465.042942][T15180] loop5: lost filesystem error report for type 5 error -117 [ 465.043570][T15180] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 465.159626][T15180] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 465.190530][T15206] tipc: Started in network mode [ 465.199789][T15180] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3468: Failed to acquire dquot type 1 [ 465.220940][T15206] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 465.230581][T15207] loop4: detected capacity change from 0 to 512 [ 465.249763][T15180] loop5: lost filesystem error report for type 5 error -117 [ 465.250900][T15180] EXT4-fs (loop5): 1 orphan inode deleted [ 465.290663][T15207] EXT4-fs (loop4): 1 orphan inode deleted [ 465.302653][ T1101] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 465.330371][T15180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.348605][T15207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.365370][ T1101] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 465.400876][T15180] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.415694][ T1101] loop4: lost filesystem error report for type 5 error -117 [ 465.417940][T15207] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.526042][T15180] EXT4-fs (loop5): shut down requested (1) [ 465.691016][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.749768][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.942060][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 466.140509][ T9] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 466.215344][ T9] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 466.287223][ T9] usb 9-1: Product: syz [ 466.319482][ T9] usb 9-1: SerialNumber: syz [ 466.392545][ T9] usb 9-1: config 0 descriptor?? [ 466.664445][ T9] hso 9-1:0.0: Failed to find BULK eps [ 466.869532][ T9] usb 9-1: USB disconnect, device number 2 [ 468.111877][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 468.311716][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 468.342087][T15264] loop7: detected capacity change from 0 to 512 [ 468.367979][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 468.413848][T15264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.435621][ T9] usb 5-1: config 0 has no interface number 0 [ 468.485764][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 468.539960][T15264] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 468.587024][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 468.646121][T15264] EXT4-fs (loop7): 1 truncate cleaned up [ 468.661261][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.738151][ T9] usb 5-1: Product: syz [ 468.757798][T15264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.807592][ T9] usb 5-1: Manufacturer: syz [ 468.824621][T15271] loop9: detected capacity change from 0 to 128 [ 468.850823][ T9] usb 5-1: SerialNumber: syz [ 468.882402][T15271] EXT4-fs (loop9): Test dummy encryption mode enabled [ 468.898246][ T9] usb 5-1: Device is not authorized for usage [ 468.985761][T15271] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.096896][T15271] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 469.266367][ T6256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.290183][ T30] audit: type=1804 audit(1785504572.343:205): pid=15278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3505" name="/newroot/63/mnt/file0" dev="loop9" ino=12 res=1 errno=0 [ 469.460998][T15261] loop2: detected capacity change from 0 to 32768 [ 469.487181][T13796] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 469.553507][T15261] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 470.050208][T15288] loop5: detected capacity change from 0 to 64 [ 470.187761][ T5630] ocfs2: Unmounting device (7,2) on (node local) [ 470.680841][T15299] Invalid ELF header magic: != ELF [ 470.957154][ T5757] usb 5-1: USB disconnect, device number 20 [ 471.187458][T15315] loop4: detected capacity change from 0 to 128 [ 471.271788][T15315] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 471.376715][T15315] hpfs: filesystem error: improperly stopped [ 471.430810][T15315] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 471.497953][T15315] hpfs: You really don't want any checks? You are crazy... [ 471.570956][T15315] hpfs: hpfs_map_sector(): read error [ 471.619653][T15315] hpfs: code page support is disabled [ 471.688946][T15315] hpfs: hpfs_map_4sectors(): unaligned read [ 471.739394][T15325] loop9: detected capacity change from 0 to 512 [ 471.777236][T15315] hpfs: hpfs_map_4sectors(): unaligned read [ 471.831020][T15315] hpfs: filesystem error: unable to find root dir [ 471.857700][T15325] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.3528: corrupted in-inode xattr: invalid ea_ino [ 471.968578][T15315] hpfs: hpfs_map_4sectors(): unaligned read [ 471.991105][T15325] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 471.991517][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 472.007052][ C0] EXT4-fs (loop9): initial error at time 1785504575: ext4_iget_extra_inode:5180: inode 15 [ 472.016960][ C0] EXT4-fs (loop9): last error at time 1785504575: ext4_iget_extra_inode:5180: inode 15 [ 472.038628][T15325] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3528: couldn't read orphan inode 15 (err -117) [ 472.118438][T15315] hpfs: hpfs_map_sector(): read error [ 472.160009][T15325] loop9: lost filesystem error report for type 5 error -117 [ 472.175336][T15325] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.210963][T15315] hpfs: hpfs_map_sector(): read error [ 472.336950][T15335] loop9: detected capacity change from 512 to 511 [ 472.416190][T15325] EXT4-fs error (device loop9): __ext4_new_inode:1081: comm syz.9.3528: reserved inode found cleared - inode=1 [ 472.766205][T13796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.107385][T15353] loop8: detected capacity change from 0 to 512 [ 473.132760][T15351] loop9: detected capacity change from 0 to 2048 [ 473.212907][T15353] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 473.259317][T15357] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 473.300541][T15353] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 480.801503][ C0] sched: DL replenish lagged too much [ 501.494578][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.315497][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.116257][ T5641] Bluetooth: hci1: command 0x2016 tx timeout [ 551.872654][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.256705][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 612.791435][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 612.798397][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4987/1:b..l [ 612.807020][ C0] rcu: (detected by 0, t=10502 jiffies, g=91873, q=771248 ncpus=1) [ 612.814973][ C0] task:udevd state:R running task stack:22440 pid:4987 tgid:4987 ppid:1 task_flags:0x400140 flags:0x00080000 [ 612.829360][ C0] Call Trace: [ 612.832619][ C0] [ 612.835532][ C0] __schedule+0x17d9/0x56c0 [ 612.840043][ C0] ? __pfx___schedule+0x10/0x10 [ 612.844889][ C0] preempt_schedule_irq+0x4d/0xa0 [ 612.849900][ C0] irqentry_exit+0x14f/0x8f0 [ 612.854474][ C0] ? trace_irq_disable+0x3b/0x140 [ 612.859485][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 612.865444][ C0] RIP: 0010:__kasan_check_byte+0x14/0x40 [ 612.871061][ C0] Code: fa ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 56 53 48 89 f3 49 89 fe e8 3e 15 00 00 84 c0 <75> 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 f6 04 00 00 [ 612.890645][ C0] RSP: 0018:ffffc9000351f008 EFLAGS: 00000202 [ 612.896699][ C0] RAX: 0000000000000001 RBX: ffffffff8177929c RCX: 0000000080000001 [ 612.904648][ C0] RDX: 0000000000000000 RSI: ffffffff8177929c RDI: 1ffffffff1d6b38c [ 612.912599][ C0] RBP: ffffffff8177927f R08: 0000000000000000 R09: 0000000000000000 [ 612.920546][ C0] R10: dffffc0000000000 R11: ffffffff81b20a80 R12: 0000000000000002 [ 612.928506][ C0] R13: ffffffff8eb59c60 R14: ffffffff8eb59c60 R15: 0000000000000000 [ 612.936458][ C0] ? unwind_next_frame+0x8f/0x2550 [ 612.941546][ C0] ? unwind_next_frame+0xac/0x2550 [ 612.946632][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.952776][ C0] ? unwind_next_frame+0xac/0x2550 [ 612.957869][ C0] ? __kasan_check_byte+0x12/0x40 [ 612.962882][ C0] lock_acquire+0x84/0x350 [ 612.967289][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.972906][ C0] ? unwind_next_frame+0x8f/0x2550 [ 612.977995][ C0] ? security_file_open+0xa9/0x240 [ 612.983096][ C0] ? unwind_next_frame+0x8f/0x2550 [ 612.988186][ C0] unwind_next_frame+0xac/0x2550 [ 612.993101][ C0] ? unwind_next_frame+0x8f/0x2550 [ 612.998191][ C0] ? tomoyo_check_open_permission+0x229/0x470 [ 613.004244][ C0] ? unwind_next_frame+0x8f/0x2550 [ 613.009333][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 613.015469][ C0] arch_stack_walk+0x11b/0x150 [ 613.020218][ C0] ? security_file_open+0xa9/0x240 [ 613.025332][ C0] stack_trace_save+0xa9/0x100 [ 613.030075][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 613.035425][ C0] ? __lock_acquire+0x683/0x2cf0 [ 613.040352][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.045965][ C0] save_stack+0x122/0x230 [ 613.050282][ C0] ? __pfx_save_stack+0x10/0x10 [ 613.055115][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.060728][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 613.066008][ C0] ? __slab_free+0x274/0x2c0 [ 613.070584][ C0] ? qlist_free_all+0x99/0x100 [ 613.075331][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 613.080946][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 613.085954][ C0] ? __kmalloc_noprof+0x311/0x720 [ 613.090973][ C0] ? tomoyo_encode+0x2ad/0x570 [ 613.095717][ C0] ? tomoyo_realpath_from_path+0x5fa/0x640 [ 613.101503][ C0] ? tomoyo_check_open_permission+0x229/0x470 [ 613.107560][ C0] ? security_file_open+0xa9/0x240 [ 613.112664][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.118278][ C0] ? page_ext_put+0x97/0xc0 [ 613.122770][ C0] __reset_page_owner+0x71/0x1f0 [ 613.127695][ C0] __free_frozen_pages+0xc1e/0xd10 [ 613.132797][ C0] __slab_free+0x274/0x2c0 [ 613.137217][ C0] ? qlist_free_all+0x8e/0x100 [ 613.141968][ C0] qlist_free_all+0x99/0x100 [ 613.146544][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 613.151554][ C0] kasan_quarantine_reduce+0x148/0x160 [ 613.157001][ C0] __kasan_slab_alloc+0x22/0x80 [ 613.161840][ C0] __kmalloc_noprof+0x311/0x720 [ 613.166674][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 613.171680][ C0] ? tomoyo_encode+0x2ad/0x570 [ 613.176426][ C0] ? tomoyo_encode+0x2ad/0x570 [ 613.181177][ C0] tomoyo_encode+0x2ad/0x570 [ 613.185763][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 613.191397][ C0] tomoyo_check_open_permission+0x229/0x470 [ 613.197285][ C0] ? tomoyo_check_open_permission+0x1d3/0x470 [ 613.203342][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 613.209746][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.215355][ C0] ? __asan_memset+0x22/0x50 [ 613.219929][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 613.226088][ C0] ? mnt_get_write_access+0x66/0x280 [ 613.231361][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.236982][ C0] security_file_open+0xa9/0x240 [ 613.241918][ C0] do_dentry_open+0x4a0/0x1380 [ 613.246670][ C0] vfs_open+0x3b/0x340 [ 613.250730][ C0] ? path_openat+0x2e2d/0x3830 [ 613.255480][ C0] path_openat+0x2e44/0x3830 [ 613.260051][ C0] ? kasan_save_track+0x3e/0x80 [ 613.264887][ C0] ? do_sys_openat2+0xcc/0x200 [ 613.269635][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.275707][ C0] do_file_open+0x23e/0x4a0 [ 613.280194][ C0] ? __pfx_do_file_open+0x10/0x10 [ 613.285216][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.290827][ C0] ? _raw_spin_unlock+0x28/0x50 [ 613.295653][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.301270][ C0] ? alloc_fd+0x651/0x6c0 [ 613.305611][ C0] do_sys_openat2+0x115/0x200 [ 613.310274][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 613.315459][ C0] ? rcu_is_watching+0x15/0xb0 [ 613.320199][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.325814][ C0] __x64_sys_openat+0x138/0x170 [ 613.330655][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.336701][ C0] do_syscall_64+0x174/0x580 [ 613.341281][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.347151][ C0] RIP: 0033:0x7f2ffcaa7407 [ 613.351543][ C0] RSP: 002b:00007ffe9dfac470 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 613.359933][ C0] RAX: ffffffffffffffda RBX: 00007f2ffd15c880 RCX: 00007f2ffcaa7407 [ 613.367880][ C0] RDX: 0000000000080141 RSI: 000055e157e7502e RDI: ffffffffffffff9c [ 613.375830][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 613.383777][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 613.391723][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 613.399687][ C0] [ 613.410223][ T1313] ieee802154 phy1 wpan1: encryption failed: -22