last executing test programs: 25.118230602s ago: executing program 0 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1, 0x1000000, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000000000), 0x0) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f00000000c0)="c82f", &(0x7f0000001200)=""/113, &(0x7f0000001280)="59f926a0880a1335ff7cf46a5eb079ca233d689b4ca38d04318833a00a1b4eb4a93c1259d4783aef37111d6fe32405ed9406285d503f3707ccde29bf930165eb83f689c6a9c5014bff74881fd8318e79ac9b4c1ba73e5bfd1219d10f2741152f68f8c110709e6f1bd1e51ad3d97c2c9f0feb5ba7a9847b4e3ac533a9b8d125ecd5f27712f1208705843edb81e261c2dd444c6c044a2e17c97b9c113d80ee2449590654fa7bdc8a02ad398763c1", &(0x7f0000001340)="5935926a3ccdd9ea5a7f38806c74f45ea7849707f23fd6f5e7ef75bfe7516d4e4ed500d7590acb3be8d2b940c3bd5573e7156b5e9935b4a72cdfcedbff204d114466aa735968d0ebea7584c674cb0614fb1dfd665e1ba861e3fbf9c23de75da393622bc722b9d6ea3b18064869e0da0f7ba84b9b5bcc4bfcd59f2941349ce60a24e53734f3752778e04f6b09c9b471dff787fd58d74b80716ad40414f07fe1c597b53703f7f99e94ffa88cbb6fd6fab9405f328a3b8eeaeaaca5372fe87e25ae5966a72ec0da2b44db1229342bed55981ea79d46c688691c7ec950420c01aa7fb32f0413377e76dc7b182c9ef0485aa7230ecda401", 0x10001, r3, 0x4}, 0x38) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, 0x0, 0x0, 0x2000000000000c2a) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT=r0], 0x3, 0x2c8, &(0x7f00000005c0)="$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") 25.083110073s ago: executing program 3 (id=1020): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r1}) preadv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) 24.458222245s ago: executing program 3 (id=1021): socket(0xa, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2, &(0x7f00000001c0)=0x8005, 0x9) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$befs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0xcf16, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESOCT], 0x0, 0x9de6, &(0x7f0000009e80)="$eJwEwAMAbQUAwNBs27aXbdu2bS/3ro1s27Zt27a/0blvgPcP8IEBPjjAhwb48AAfGeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgEMGOHSAwwY4fIAjBjhygKMGOHqAYwY4doDjBDhugOMFOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwS4aICLBbh4gEsEuGSASwW4dIDLBEiAywa4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgBsHuEmAmwa4WYCbB7hFgFsGuFWAWwe4TYDbBrhdgNsHuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBnhYgIcHeESARwZ4VIBHB3hMgMcGeFyAxwd4QoAnBnhSgCcHeEqApwZogKcFeHqAZwR4ZoBnBXh2gOcEeG6AgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwrw6QCfCfDZAJ8L8PkAXwjwxQBfCvDlAF8J8NUAXwvw9QDfCPDNAN8K8O0A3wnw3QDfC/D9AD8I8MMAPwrw4wA/CfDTAD8L8PMAvwjwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8I8M8A/wrw7wD/CfDfAP8LcEiAQwMcFuDwAEcEODLAUQGODnBMgGMDHCfEcUMcL8TxQ5wgxAlDnCjEiUOcJMRJQ5wsxMlDnCLEKUOcKsSpQ5wmxGlDnC7E6UOcIcQZQ5wpxJlDnCXEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDXCzExUNcIsQlQ1wqxKVDXCZEQlw2xOVCXD7EFUJcMcSVQlw5xFVCXDXE1UJcPcQ1QlwzxLVCXDvEdUJcN8T1Qlw/xA1C3DDEjULcOMRNQtw0xM1C3DzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I8NsTjQjw+xBNCPDHEk0I8OcRTQjw1REM8LcTTQzwjxDNDPCvEs0M8J8RzQxyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VYhXh3hNiNeGeF2I14d4Q4g3hnhTiDeHeEuIt4Z4W4i3h3hHiHeGeFeId4d4T4j3hnhfiPeH+ECID4b4UIgPh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4SoivhvhaiK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4hDQhwa4rAQh4c4IsSRIY4KcXSIY0IcG+I4EY4b4XgRjh/hBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhzhIhEuGuFiES4e4RIRLhnhUhEuHeEyERLhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4T4bERHhfh8RGeEOGJEZ4U4ckRnhLhqREa4WkRnh7hGRGeGeFZEZ4d4TkRnhvhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCjyL8OMJPIvw0ws8i/DzCLyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBLh0AiHRTg8whERjoxwVISjIxwT4dgIx4lx3BjHi3H8GCeIccIYJ4px4hgniXHSGCeLcfIYp4hxyhininHqGKeJcdoYp4tx+hhniHHGGGeKceYYZ4lx1hhni3H2GOeIcc4Y54px7hjniXHeGOeLcf4YF4hxwRgXinHhGBeJcdEYF4tx8RiXiHHJGJeKcekYl4mRGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZsYt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+P8YQYT4zxpBhPjvGUGE+N0RhPi/H0GM+I8cwYz4rx7BjPifHcGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQGIfGOCzG4TGOiHFkjKNiHB3jmBjHxjhOguMmOF6C4yc4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCSya4VIJLJ7hMgiS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigicleHKCpyR4aoImeFqCpyd4RoJnJnhWgmcneE6C5yY4SDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BP8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkEn0zwqQSfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8EhyQ4NMFhCQ5PcESCIxMcleDoBMckODbBcVIcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyxaVSXDrFZVIkxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzwlxVNTNMXTUjw9xTNSPDPFs1I8O8VzUjw3xUGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYrnpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH+KD6T4YIoPpfhwio+k+GiKj6X4eIpPpPhkik+l+HSKz6T4bIrPpfh8ii+k+GKKL6X4coqvpPhqiq+l+HqKb6T4Zopvpfh2iu+k+G6K76X4foofpPhhih+l+HGKn6T4aYqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgkxaEpDktxeIojUhyZ4qgUR6c4JsWxKY6T4bgZjpfh+BlOkOGEGU6U4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhkukuGiGS6W4eIZLpHhkhkuleHSGS6TIRkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGR6d4TEZHpvhcRken+EJGZ6Y4UkZnpzhKRmemqEZnpbh6RmekeGZGZ6V4dkZnpPhuRkOMgwyDDOMMowzTDJMM8wyzDMsMiwzrDKsM2wybDPsMuwzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/CDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DIRkOzXBYhsMzHJHhyAxHZTg6wzEZjs1wnBzHzXG8HMfPcYIcJ8xxohwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHGfMcaYcZ85xlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz3GJHJfMcakcl85xmRzJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3ynHjHDfJcdMcN8tx8xy3yHHLHLfKcesct8lx2xy3y3H7HHfIccccd8px5xx3yXHXHHfLcfcc98hxzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L8fgcT8jxxBxPyvHkHE/J8dQczfG0HE/P8Ywcz8zxrBzPzvGcHM/NcZBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+N/OQ7JcWiOw3IcnuOIHEfmOCrH0TmOyXFsjuMUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVuHiBSxS4ZIFLFbh0gcsUSIHLFrhcgcsXuEKBKxa4UoErF7hKgasWuFqBqxe4RoFrFrhWgWsXuE6B6xa4XoHrF7hBgRsWuFGBGxe4SYGbFrhZgZsXuEWBWxa4VYFbF7hNgdsWuF2B2xe4Q4E7FrhTgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBxxZ4XIHHF3hCgScWeFKBJxd4SoGnFmiBpxV4eoFnFHhmgWcVeHaB5xR4boGDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC/yjwzwL/KvDvAv8p8N8C/ytwSIFDCxxW4PACRxQ4ssBRBY4ucEyBYwscp8RxSxyvxPFLnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLXKTERUtcrMTFS1yixCVLXKrEpUtcpkRKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0o8usRjSjy2xONKPL7EE0o8scSTSjy5xFNKPLVESzytxNNLPKPEM0s8q8SzSzynxHNLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3heieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiUNKHFrisBKHlziixJEljipxdIljShxb4jgVjlvheBWOX+EEFU5Y4UQVTlzhJBVOWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeV+HxFZ5Q4YkVnlThyRWeUuGpFVrhaRWeXuEZFZ5Z4VkVnl3hORWeW+GgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7C8yo8v8ILKrywwosqvLjCSyq8tMLLKry8wisqvLLCqyq8usJrKry2wusqvL7CGyq8scKbKry5wlsqvLXC2yq8vcI7KryzwrsqvLvCeyq8t8L7Kry/wgcqfLDChyp8uMJHKny0wscqfLzCJyp8ssKnKny6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocUuHQCodVOLzCERWOrHBUhaMrHFPh2ArHqXHcGsercfwaJ6hxwhonqnHiGiepcdIaJ6tx8hqnqHHKGqeqceoap6lx2hqnq3H6GmeoccYaZ6px5hpnqXHWGmercfYa56hxzhrnqnHuGuepcd4a56tx/hoXqHHBGheqceEaF6lx0RoXq3HxGpeocckal6px6RqXqZEal61xuRqXr3GFGlescaUaV65xlRpXrXG1GlevcY0a16xxrRrXrnGdGtetcb0a169xgxo3rHGjGjeucZMaN61xsxo3r3GLGrescasat65xmxq3rXG7GrevcYcad6xxpxp3rnGXGnetcbcad69xjxr3rHGvGveucZ8a961xvxr3r/GAGg+s8aAaD67xkBoPrfGwGg+v8Ygaj6zxqBqPrvGYGo+t8bgaj6/xhBpPrPGkGk+u8ZQaT63RGk+r8fQaz6jxzBrPqvHsGs+p8dwaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NZ5X4/k1XlDjhTVeVOPFNV5S46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X45Aah9Y4rMbhNY6ocWSNo2ocXeOYGsfWOE6D4zY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2uFiDize4RINLNrhUg0s3uEyDNLhsg8s1uHyDKzS4YoMrNbhyg6s0uGqDqzW4eoNrNLhmg2s1uHaD6zS4boPrNbh+gxs0uGGDGzW4cYObNLhpg5s1uHmDWzS4ZYNbNbh1g9s0uG2D2zW4fYM7NLhjgzs1uHODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkg0c1eHSDxzR4bIPHNXh8gyc0eGKDJzV4coOnNHhqgzZ4WoOnN3hGg2c2eFaDZzd4ToPnNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbPCpBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwaHNDi0wWENDm9wRIMjGxzV4OgGxzQ4tsFxWhy3xfFaHL/FCVqcsMWJWpy4xUlanLTFyVqcvMUpWpyyxalanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8xSVaXLLFpVpcusVlWqTFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK7F41s8ocUTWzypxZNbPKXFU1u0xdNaPL3FM1o8s8WzWjy7xXNaPLfFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i+e1eH6LF7R4YYsXtXhxi5e0eGmLl7V4eYtXtHhli1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi/+1OKTFoS0Oa3F4iyNaHNniqBZHtzimxbEtjtPhuB2O1+H4HU7Q4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhrB3O1uHsHc7R4ZwdztXh3B3O0+G8Hc7X4fwdLtDhgh0u1OHCHS7S4aIdLtbh4h0u0eGSHS7V4dIdLtMhHS7b4XIdLt/hCh2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEdHt3hMR0e2+FxHR7f4QkdntjhSR2e3OEpHZ7aoR2e1uHpHZ7R4ZkdntXh2R2e0+G5HQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Ds8r8PzO7ygwws7vKjDizu8pMNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzv8r8MhHQ7tcFiHwzsc0eHIDkd1OLrDMR2O7XCcHsftcbwex+9xgh4n7HGiHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dgej+vx+B5P6PHEHk/q8eQeT+nx1B7t8bQeT+/xjB7P7PGsHs/u8Zwez+1x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvj/yySAxffB8PounXo3Nm2l9m2bdt2Zpv/n43ZKGbbtm17a+957nnzDZKTEQMcOcBRAxw9wLsGePcA7xngvQO8b4D3D/CBAT44wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BjBjh2gEMCHCfAcQMcGuB4AY4f4AQBThjgsAAnCnDiACcJcNIAJwtw8gCnCHB4gFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESABLhkgEsFuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7BbhzgLsEuGuAuwW4e4B7BLhngHsFuHeA+wS4b4D7Bbh/gAcEeGCABwV4cICHBHhogIcFeHiARwR4ZIBHBXh0gMcEeGyAxwV4fIAnBHhigAZ4UoAnB3hKgKcGeFqApwd4RoBnBnhWgGcHeE6A5wZ4XoDnB3hBgBcGeFGAFwd4SYCXBnhZgJcHeEWAVwY4CDAIMAwwCjAOMAkwDTALMA+wCLAMsAqwDrAJsA2wC7AP8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDHBEgCMDHBXg6ADvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwrw6QCfCXDIcHwuwOcDfCHAFwN8KcCXA3wlwFcDfC3A1wN8I8A3A3wrwLcDfCfAdwN8L8D3A/wgwA8D/CjAjwP8JMBPA/wswM8D/CLALwP8KsCvA/wmwG8D/C7A7wP8IcAfA/wpwJ8D/CXAXwP8LcDfA/wjwD8D/CvAvwP8J8B/A/wvwDEBjv2fT4jjhDhuiENDHC/E8UOcIMQJQxwW4kQhThziJCFOGuJkIU4e4hQhDg9xyhCnCnHqEKcJcdoQpwtx+hBnCHHGEGcKceYQZwlx1hBnC3H2EOcIcc4Q5wpx7hDnCXHeEOcLcf4QFwhxwRAXCnHhEBcJcdEQFwtx8RCXCJEQlwxxqRCXDnGZEJcNcbkQlw9xhRBXDHGlEFcOcZUQVw1xtRBXD3GNENcMca0Q1w5xnRDXDXG9ENcPcYMQNwxxoxA3DnGTEDcNcbMQNw9xixC3DHGrELcOcZsQtw1xuxC3D3GHEHcMcacQdw5xlxB3DXG3EHcPcY8Q9wxxrxD3DnGfEPcNcb8Q9w/xgBAPDPGgEA8O8ZAQDw3xsBAPD/GIEI8M8agQjw7xmBCPDfG4EI8P8YQQTwzREE8K8eQQTwnx1BBPC/H0EM8I8cwQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEAchBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh9iFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4p0hjghxZIijQhwd4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iEyE+GeJTIT4d4jMhPhvicyE+H+ILIb4Y4kshvhziKyG+GuJrIb4e4hshvhniWyG+HeI7Ib4b4nshvh/iByF+GOJHIX4c4ichfhriZyF+HuIXIX4Z4lchfh3iNyF+G+J3IX4f4g8h/hjiTyH+HOIvIf4a4m8h/h7iHyH+GeJfIf4d4j8h/hvifyGOCXFsiEMiHCfCcSMcGuF4EY4f4QQRThjhsAgninDiCCeJcNIIJ4tw8giniHB4hFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNGOFuEs0c4R4RzRjhXhHNHOE+E80Y4X4TzR7hAhAtGuFCEC0e4SISLRrhYhItHuESERLhkhEtFuHSEy0S4bITLRbh8hCtEuGKEK0W4coSrRLhqhKtFuHqEa0S4ZoRrRbh2hOtEuG6E60W4foQbRLhhhBtFuHGEm0S4aYSbRbh5hFtEuGWEW0W4dYTbRLhthNtFuH2EO0S4Y4Q7RbhzhLtEuGuEu0W4e4R7RLhnhHtFuHeE+0S4b4T7Rbh/hAdEeGCEB0V4cISHRHhohIdFeHiER0R4ZIRHRXh0hMdEeGyEx0V4fIQnRHhihEZ4UoQnR3hKhKdGeFqEp0d4RoRnRnhWhGdHeE6E50Z4XoTnR3hBhBdGeFGEF0d4SYSXRnhZhJdHeEWEV0Y4iDCIMIwwijCOMIkwjTCLMI+wiLCMsIqwjrCJsI2wi7CP8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjgjvjHBEhCMjHBXh6AjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCJ+L8PkIX4jwxQhfivDlCF+J8NUIX4vw9QjfiPDNCN+K8O0I34nw3Qjfi/D9CD+I8MMIP4rw4wg/ifDTCD+L8PMIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCP+LcEyEYyMcEuM4MY4b49AYx4tx/BgniHHCGIfFOFGME8c4SYyTxjhZjJPHOEWMw2OcMsapYpw6xmlinDbG6WKcPsYZYpwxxplinDnGWWKcNcbZYpw9xjlinDPGuWKcO8Z5Ypw3xvlinD/GBWJcMMaFYlw4xkViXDTGxWJcPMYlYiTGJWNcKsalY1wmxmVjXC7G5WNcIcYVY1wpxpVjXCXGVWNcLcbVY1wjxjVjXCvGtWNcJ8Z1Y1wvxvVj3CDGDWPcKMaNY9wkxk1j3CzGzWPcIsYtY9wqxq1j3CbGbWPcLsbtY9whxh1j3CnGnWPcJcZdY9wtxt1j3CPGPWPcK8a9Y9wnxn1j3C/G/WM8IMYDYzwoxoNjPCTGQ2M8LMbDYzwixiNjPCrGo2M8JsZjYzwuxuNjPCHGE2M0xpNiPDnGU2I8NcbTYjw9xjNiPDPGs2I8O8ZzYjw3xvNiPD/GC2K8MMaLYrw4xktivDTGy2K8PMYrYrwyxkGMQYxhjFGMcYxJjGmMWYx5jMX/ta9irGNsYmxj7GLsY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2McEePIGEfFODrGu2K8O8Z7Yrw3xvtivD/GB2J8MMaHYnw4xkdifDTGx2J8PMYnYnwyxqdifDrGZ2J8NsbnYnw+xhdifDHGl2J8OcZXYnw1xtdifD3GN2J8M8a3Ynw7xndifDfG92J8P8YPYvwwxo9i/DjGT2L8NMbPYvw8xi9i/DLGr2L8OsZvYvw2xu9i/D7GH2L8McafYvw5xl9i/DXG32L8PcY/Yvwzxr9i/DvGf2L8N8b/YhwT49gYhyQ4ToLjJjg0wfESHD/BCRKcMMFhCU6U4MQJTpLgpAlOluDkCU6R4PAEp0xwqgSnTnCaBKdNcLoEp09whgRnTHCmBGdOcJYEZ01wtgRnT3COBOdMcK4E505wngTnTXC+BOdPcIEEF0xwoQQXTnCRBBdNcLEEF09wiQRJcMkEl0pw6QSXSXDZBJdLcPkEV0hwxQRXSnDlBFdJcNUEV0tw9QTXSHDNBNdKcO0E10lw3QTXS3D9BDdIcMMEN0pw4wQ3SXDTBDdLcPMEt0hwywS3SnDrBLdJcNsEt0tw+wR3SHDHBHdKcOcEd0lw1wR3S3D3BPdIcM8E90pw7wT3SXDfBPdLcP8ED0jwwAQPSvDgBA9J8NAED0vw8ASPSPDIBI9K8OgEj0nw2ASPS/D4BE9I8MQETfCkBE9O8JQET03wtARPT/CMBM9M8KwEz07wnATPTfC8BM9P8IIEL0zwogQvTvCSBC9N8LIEL0/wigSvTHCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gVQleneA1CV6b4HUJXp/gDQnemOBNCd6c4C0J3prgbQnenuAdCd6Z4IgERyY4KsHRCd6V4N0J3pPgvQnel+D9CT6Q4IMJPpTgwwk+kuCjCT6W4OMJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4L8J/pfgmATHJjgkxXFSHDfFoSmOl+L4KU6Q4oQpDktxohQnTnGSFCdNcbIUJ09xihSHpzhlilOlOHWK06Q4bYrTpTh9ijOkOGOKM6U4c4qzpDhrirOlOHuKc6Q4Z4pzpTh3ivOkOG+K86U4f4oLpLhgiguluHCKi6S4aIqLpbh4ikukSIpLprhUikunuEyKy6a4XIrLp7hCiiumuFKKK6e4SoqrprhaiqunuEaKa6a4Voprp7hOiuumuF6K66e4QYobprhRihunuEmKm6a4WYqbp7hFilumuFWKW6e4TYrbprhditunuEOKO6a4U4o7p7hLirumuFuKu6e4R4p7prhXinunuE+K+6a4X4r7p3hAigemeFCKB6d4SIqHpnhYioeneESKR6Z4VIpHp3hMisemeFyKx6d4QoonpmiKJ6V4coqnpHhqiqeleHqKZ6R4ZopnpXh2iuekeG6K56V4fooXpHhhiheleHGKl6R4aYqXpXh5ilekeGWKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FK9K8eoUr0nx2hSvS/H6FG9I8cYUb0rx5hRvSfHWFG9L8fYU70jxzhRHpDgyxVEpjk7xrhTvTvGeFO9N8b4U70/xgRQfTPGhFB9O8ZEUH03xsRQfT/GJFJ9M8akUn07xmRSfTfG5FJ9P8YUUX0zxpRRfTvGVFF9N8bUUX0/xjRTfTPGtFN9O8Z0U303xvRTfT/GDFD9M8aMUP07xkxQ/TfGzFD9P8YsUv0zxqxS/TvGbFL9N8bsUv0/xhxR/TPGnFH9O8ZcUf03xtxR/T/GPFP9M8a8U/07xnxT/TfG/FMekODbFIRmOk+G4GQ7NcLwMx89wggwnzHBYhhNlOHGGk2Q4aYaTZTh5hlNkODzDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznCXDWTOcLcPZM5wjwzkznCvDuTOcJ8N5M5wvw/kzXCDDBTNcKMOFM1wkw0UzXCzDxTNcIkMyXDLDpTJcOsNlMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTLcOMNNMtw0w80y3DzDLTLcMsOtMtw6w20y3DbD7TLcPsMdMtwxw50y3DnDXTLcNcPdMtw9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyPDFDMzwpw5MzPCXDUzM8LcPTMzwjwzMzPCvDszM8J8NzMzwvw/MzvCDDCzO8KMOLM7wkw0szvCzDyzO8IsMrMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4VYZXZ3hNhtdmeF2G12d4Q4Y3ZnhThjdneEuGt2Z4W4a3Z3hHhndmOCLDkRmOynB0hndleHeG92R4b4b3ZXh/hg9k+GCGD2X4cIaPZPhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz2X4fIYvZPhihi9l+HKGr2T4aoavZfh6hm9k+GaGb2X4dobvZPhuhu9l+H6GH2T4YYYfZfhxhp9k+GmGn2X4eYZfZPhlhl9l+HWG32T4bYbfZfh9hj9k+GOGP2X4c4a/ZPhrhr9l+HuGf2T4Z4Z/Zfh3hv9k+G+G/2U4JsOxGQ7JcZwcx81xaI7j5Th+jhPkOGGOw3KcKMeJc5wkx0lznCzHyXOcIsfhOU6Z41Q5Tp3jNDlOm+N0OU6f4ww5zpjjTDnOnOMsOc6a42w5zp7jHDnOmeNcOc6d4zw5zpvjfDnOn+MCOS6Y40I5LpzjIjkumuNiOS6e4xI5kuOSOS6V49I5LpPjsjkul+PyOa6Q44o5rpTjyjmukuOqOa6W4+o5rpHjmjmulePaOa6T47o5rpfj+jlukOOGOW6U48Y5bpLjpjluluPmOW6R45Y5bpXj1jluk+O2OW6X4/Y57pDjjjnulOPOOe6S46457pbj7jnukeOeOe6V49457pPjvjnul+P+OR6Q44E5HpTjwTkekuOhOR6W4+E5HpHjkTkelePROR6T47E5Hpfj8TmekOOJOZrjSTmenOMpOZ6a42k5np7jGTmemeNZOZ6d4zk5npvjeTmen+MFOV6Y40U5XpzjJTlemuNlOV6e4xU5XpnjIMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+x6tyvDrHa3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8cROY7McVSOo3O8K8e7c7wnx3tzvC/H+3N8IMcHc3wox4dzfCTHR3N8LMfHc3wixydzfCrHp3N8Jsdnc3wux+dzfCHHF3N8KceXc3wlx1dzfC3H13N8I8c3c3wrx7dzfCfHd3N8L8f3c/wgxw9z/CjHj3P8JMdPc/wsx89z/CLHL3P8Ksevc/wmx29z/C7H73P8Iccfc/wpx59z/CXHX3P8Lcffc/wjxz9z/CvHv3P8J8d/c/wvxzE5js1xSIHjFDhugUMLHK/A8QucoMAJCxxW4EQFTlzgJAVOWuBkBU5e4BQFDi9wygKnKnDqAqcpcNoCpytw+gJnKHDGAmcqcOYCZylw1gJnK3D2AucocM4C5ypw7gLnKXDeAucrcP4CFyhwwQIXKnDhAhcpcNECFytw8QKXKJAClyxwqQKXLnCZApctcLkCly9whQJXLHClAlcucJUCVy1wtQJXL3CNAtcscK0C1y5wnQLXLXC9AtcvcIMCNyxwowI3LnCTAjctcLMCNy9wiwK3LHCrArcucJsCty1wuwK3L3CHAncscKcCdy5wlwJ3LXC3AncvcI8C9yxwrwL3LnCfAvctcL8C9y/wgAIPLPCgAg8u8JACDy3wsAIPL/CIAo8s8KgCjy7wmAKPLfC4Ao8v8IQCTyzQAk8q8OQCTynw1AJPK/D0As8o8MwCzyrw7ALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAgcFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF9gVeVeDVBV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0FjihwZIGjChxd4F0F3l3gPQXeW+B9Bd5f4AMFPljgQwU+XOAjBT5a4GMFPl7gEwU+WeBTBT5d4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuAXBX5Z4FcFfl3gNwV+W+B3BX5f4A8F/ljgTwX+XOAvBf5a4G8F/l7gHwX+WeBfBf5d4D8F/lvgfwWOKXBsgUNKHKfEcUscWuJ4JY5f4gQlTljisBInKnHiEicpcdISJytx8hKnKHF4iVOWOFWJU5c4TYnTljhdidOXOEOJM5Y4U4kzlzhLibOWOFuJs5c4R4lzljhXiXOXOE+J85Y4X4nzl7hAiQuWuFCJC5e4SImLlrhYiYuXuESJlLhkiUuVuHSJy5S4bInLlbh8iSuUuGKJK5W4comrlLhqiauVuHqJa5S4Zolrlbh2ieuUuG6J65W4fokblLhhiRuVuHGJm5S4aYmblbh5iVuUuGWJW5W4dYnblLhtiduVuH2JO5S4Y4k7lbhzibuUuGuJu5W4e4l7lLhniXuVuHeJ+5S4b4n7lbh/iQeUeGCJB5V4cImHlHhoiYeVeHiJR5R4ZIlHlXh0iceUeGyJx5V4fIknlHhiiZZ4Uoknl3hKiaeWeFqJp5d4RolnlnhWiWeXeE6J55Z4Xonnl3hBiReWeFGJF5d4SYmXlnhZiZeXeEWJV5Y4KDEoMSwxKjEuMSkxLTErMS+xKLEssSqxLrEpsS2xK7Ev8aoSry7xmhKvLfG6Eq8v8YYSbyzxphJvLvGWEm8t8bYSby/xjhLvLHFEiSNLHFXi6BLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK/HxEp8o8ckSnyrx6RKfKfHZEp8r8fkSXyjxxRJfKvHlEl8p8dUSXyvx9RLfKPHNEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcUyJY0scUuE4FY5b4dAKx6tw/AonqHDCCodVOFGFE1c4SYWTVjhZhZNXOEWFwyucssKpKpy6wmkqnLbC6SqcvsIZKpyxwpkqnLnCWSqctcLZKpy9wjkqnLPCuSqcu8J5Kpy3wvkqnL/CBSpcsMKFKly4wkUqXLTCxSpcvMIlKqTCJStcqsKlK1ymwmUrXK7C5StcocIVK1ypwpUrXKXCVStcrcLVK1yjwjUrXKvCtStcp8J1K1yvwvUr3KDCDSvcqMKNK9ykwk0r3KzCzSvcosItK9yqwq0r3KbCbSvcrsLtK9yhwh0r3KnCnSvcpcJdK9ytwt0r3KPCPSvcq8K9K9ynwn0r3K/C/Ss8oMIDKzyowoMrPKTCQys8rMLDKzyiwiMrPKrCoys8psJjKzyuwuMrPKHCEyu0wpMqPLnCUyo8tcLTKjy9wjMqPLPCsyo8u8JzKjy3wvMqPL/CCyq8sMKLKry4wksqvLTCyyq8vMIrKryywkGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVXVXh1xbD/vXlthddVeH2FN1R4Y4U3VXhzhbdUeGuFt1V4e4V3VHhnhSMqHFnhqApHV3hXhXdXeE+F91Z4X4X3V/hAhQ9W+FCFD1f4SIWPVvhYhY9X+ESFT1b4VIVPV/hMhc9W+FyFz1f4QoUvVvhShS9X+EqFr1b4WoWvV/hGhW9W+FaFb1f4ToXvVvhehe9X+EGFH1b4UYUfV/hJhZ9W+FmFn1f4RYVfVvhVhV9X+E2F31b4XYXfV/hDhT9W+FOFP1f4S4W/Vvhbhb9X+EeFf1b4V4V/V/hPhf9W+F+FYyocW+GQGsepcdwah9Y4Xo3j1zhBjRPWOKzGiWqcuMZJapy0xslqnLzGKWocXuOUNU5V49Q1TlPjtDVOV+P0Nc5Q44w1zlTjzDXOUuOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1LlLjojUuVuPiNS5RIzUuWeNSNS5d4zI1LlvjcjUuX+MKNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTUeXeMxNR5b43E1Hl/jCTWeWKM1nlTjyTWeUuOpNZ5W4+k1nlHjmTWeVePZNZ5T47k1nlfj+TVeUOOFNV5U48U1XlLjpTVeVuPlNV5R45U1DmoMagxrjGqMa0xqTGvMasxrLGosa6xqrGtsamxr7Grsa7yqxqtrvKbGa2u8rsbra7yhxhtrvKnGm2u8pcZba7ytxttrvKPGO2scUePIGkfVOLrGu2q8u8Z7ary3xvtqvL/GB2p8sMaHany4xkdqfLTGx2p8vMYnanyyxqdqfLrGZ2p8tsbnany+xhdqfLHGl2p8ucZXany1xtdqfL3GN2p8s8a3any7xndqfLfG92p8v8YPavywxo9q/LjGT2r8tMbPavy8xi9q/LLGr2r8usZvavy2xu9q/L7GH2r8scafavy5xl9q/LXG32r8vcY/avyzxr9q/LvGf2r8t8b/ahxT49gahzQ4ToPjNji0wfEaHL/BCRqcsMFhDU7U4MQNTtLgpA1O1uDkDU7R4PAGp2xwqganbnCaBqdtcLoGp29whgZnbHCmBmducJYGZ21wtgZnb3COBudscK4G525wngbnbXC+BudvcIEGF2xwoQYXbnCRBhdtcLEGF29wiQZpcMkGl2pw6QaXaXDZBpdrcPkGV2hwxQZXanDlBldpcNUGV2tw9QbXaHDNBtdqcO0G12lw3QbXa3D9BjdocMMGN2pw4wY3aXDTBjdrcPMGt2hwywa3anDrBrdpcNsGt2tw+wZ3aHDHBndqcOcGd2lw1wZ3a3D3BvdocM8G92pw7wb3aXDfBvdrcP8GD2jwwAYPavDgBg9p8NAGD2vw8AaPaPDIBo9q8OgGj2nw2AaPa/D4Bk9o8MQGbfCkBk9u8JQGT23wtAZPb/CMBs9s8KwGz27wnAbPbfC8Bs9v8IIGL2zwogYvbvCSBi9t8LIGL2/wigavbHDQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/gVQ1e3eA1DV7b4HUNXt/gDQ3e2OBNDd7c4C0N3trgbQ3e3uAdDd7Z4IgGRzY4qsHRDd7V4N0N3tPgvQ3e1+D9DT7Q4IMNPtTgww0+0uCjDT7W4OMNPtHgkw0+1eDTDT7T4LMNPtfg8w2+0OCLDb7U4MsNvtLgqw2+1uDrDb7R4JsNvtXg2w2+0+C7Db7X4PsNftDghw1+1ODHDX7S4KcNftbg5w1+0eCXDX7V4NcNftPgtw1+1+D3Df7Q4I8N/tTgzw3+0uCvDf7W4O8N/tHgnw3+1eDfDf7T4L8N/tfgmAbHNjikxXFaHLfFoS2O1+L4LU7Q4oQtDmtxohYnbnGSFidtcbIWJ29xihaHtzhli1O1OHWL07Q4bYvTtTh9izO0OGOLM7U4c4uztDhri7O1OHuLc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLi7S4aIuLtbh4i0u0SItLtrhUi0u3uEyLy7a4XIvLt7hCiyu2uFKLK7e4Sourtrhai6u3uEaLa7a4Votrt7hOi+u2uF6L67e4QYsbtrhRixu3uEmLm7a4WYubt7hFi1u2uFWLW7e4TYvbtrhdi9u3uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi8e2eFyLx7d4QosntmiLJ7V4countHhqi6e1eHqLZ7R4ZotntXh2i+e0eG6L57V4fosXtHhhixe1eHGLl7R4aYuXtXh5i1e0eGWLgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fq9q8eoWr2nx2hava/H6Fm9o8cYWb2rx5hZvafHWFm9r8fYW72jxzhZHtDiyxVEtjm7xrhbvbvGeFu9t8b4W72/xgRYfbPGhFh9u8ZEWH23xsRYfb/GJFp9s8akWn27xmRafbfG5Fp9v8YUWX2zxpRZfbvGVFl9t8bUWX2/xjRbfbPGtFt9u8Z0W323xvRbfb/GDFj9s8aMWP27xkxY/bfGzFj9v8YsWv2zxqxa/bvGbFr9t8bsWv2/xhxZ/bPGnFn9u8ZcWf23xtxZ/b/GPFv9s8a8W/27xnxb/bfG/Fse0OLbFIR2O0+G4HQ7tcLwOx+9wgg4n7HBYhxN1OHGHk3Q4aYeTdTh5h1N0OLzDKTvGDh3y/3GaDqftcLoOp+9whg5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftcLEOF+9wiQ7pcMkOl+pw6Q6X6XDZDpfrcPkOV+hwxQ5X6nDlDlfpcNUOV+tw9Q7X6HDNDtfqcO0O1+lw3Q7X63D9DjfocMMON+pw4w436XDTDjfrcPMOt+hwyw636nDrDrfpcNsOt+tw+w536HDHDnfqcOcOd+lw1w5363D3DvfocM8O9+pw7w736XDfDvfrcP8OD+jwwA4P6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P6/D4Dk/o8MQO7fCkDk/u8JQOT+3wtA5P7/CMDs/s8KwOz+7wnA7P7fC8Ds/v8IIOL+zwog4v7vCSDi/t8LIOL+/wig6v7HDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/hVR1e3eE1HV7b4XUdXt/hDR3e2OFNHd7c4S0d3trhbR3e3uEdHd7Z4YgOR3Y4qsPRHd7V4d0d3tPhvR3e1+H9HT7Q4YMdPtThwx0+0uGjHT7W4eMdPtHhkx0+1eHTHT7T4bMdPtfh8x2+0OGLHb7U4csdvtLhqx2+1uHrHb7R4ZsdvtXh2x2+0+G7Hb7X4fsdftDhhx1+1OHHHX7S4acdftbh5x1+0eGXHX7V4dcdftPhtx1+1+H3Hf7Q4Y8d/tThzx3+0uGvHf7W4e8d/tHhnx3+1eHfHf7T4b8d/tfhmA7Hdjikx3F6HLfHoT2O1+P4PU7Q44Q9Dutxoh4n7nGSHiftcbIeJ+9xih6H9zhlj1P1OHWP0/Q4bY/T9Th9jzP0OGOPM/U4c4+z9Dhrj7P1OHuPc/Q4Z49z9Th3j/P0OG+P8/U4f48L9Lhgjwv1uHCPi/S4aI+L9bh4j0v0SI9L9rhUj0v3uEyPy/a4XI/L97hCjyv2uFKPK/e4So+r9rhaj6v3uEaPa/a4Vo9r97hOj+v2uF6P6/e4QY8b9rhRjxv3uEmPm/a4WY+b97hFj1v2uFWPW/e4TY/b9rhdj9v3uEOPO/a4U48797hLj7v2uFuPu/e4R4979rhXj3v3uE+P+/a4X4/793hAjwf2eFCPB/d4SI+H9nhYj4f3eESPR/Z4VI9H93hMj8f2eFyPx/d4Qo8n9miPJ/V4co+n9Hhqj6f1eHqPZ/R4Zo9n9Xh2j+f0eG6P5/V4fo8X9Hhhjxf1eHGPl/R4aY+X9Xh5j1f0eGWPgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hq/q8eoer+nx2h6v6/H6Hm/o8cYeb+rx5h5v6fHWHm/r8fYe7+jxzh5H9Diyx1E9ju7x/5Foj1t4HgwCRdOmtm27PbVt27btU6S2bb2PjSJJbdu2bQSzvjX3sH/u4QMcMcCRA7x/gA8M8MEBPjTAhwf4yAAfHeBjA3x8gE8M8MkBPjXApwf4zACfHeBzA3x+gC8M8MUBvjTAlwf4ygBfHeBrA3x9gG8M8M0BvjXAtwf4zgDfHeB7A3x/gB8M8MMBfjTAjwf4yQA/HeBnA/x8gF8M8MsBfjXArwf4zQC/HeB3A/x+gD8M8McB/jTAnwf4ywB/HeBvA/x9gH8M8M8B/jXAvwf4zwD/HeB/Axw1wNEDHDPAsQMcEuA4AY4b4NAAxwtw/AAnCHDCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAXCXDRABcLcPEAlwhwyQCXCpAAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IAADwzwoAAPDvCQAA8N8LAADw/wiACPDPCoAI8O8JgAjw3wuACPD/CEAE8M8KQATw7QAE8J8NQATwvw9ACHBXhGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsA7w7wngDvDfC+AIcHOCLAkQHeH+ADAT4Y4EMBPhzgIwE+GuBjAT4e4BMBPhngUwE+HeAzAT4b4HMBPh/gCwG+GOBLAb4c4CsBvhrgawG+HuAbAb4Z4FsBvh3gOwG+G+B7Ab4f4AcBfhjgRwF+HOAnAX4a4GcBfh7gFwF+GeBXAX4d4DcBfhvgdwF+H+APAf4Y4E8B/hzgLwH+GuBvAf4e4B8B/hngXwH+HeA/Af4b4H8BjgpwdIBjAhwb4JAQxwlx3BCHhjheiOOHOEGIE4Y4UYgThzhJiJOGOFmIk4c4RYhThjhViFOHOE2I04Y4XYjThzhDiDOGOFOIM4c4S4izhjhbiK8NwTlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyxKVCJMSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xGEhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsS7Q7wnxHtDvC/E4SGOCHFkiPeH+ECID4b4UIgPh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4Soiv/s91iK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4ijQhwd4pgQx4Y4JMJxIhw3wqERjhfh+BFOEOGEEU4U4cQRThLhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEuGiES4W4eIRLhHhkhEuFSERLh3hMhEuG+FyES4f4QoRrhjhShGuHOEqEa4a4WoRrh7hGhGuGeFaEa4d4ToRrhvhehGuH+EGEW4Y4UYRbhzhJhFuGuFmEW4e4RYRbhnhVhFuHeE2EW4b4XYRbh/hDhHuGOFOEe4c4S4R7hrhbhHuHuEeEe4Z4V4R7h3hPhHuG+F+Ee4f4QERHhjhQREeHOEhER4a4WERHh7hEREeGeFRER4d4TERHhvhcREeH+EJEZ4Y4UkRnhyhEZ4S4akRnhbh6REOi/CMCM+M8KwIz47wnAjPjfC8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCK+O8JoIr43wugivj/CGCG+M8KYIb47wlghvjfC2CG+P8I4I74zwrggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3h3hPRHeG+F9EQ6PcESEIyO8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCjyL8OMJPIvw0ws8i/DzCLyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBXh6AjHRDg2wiExjhPjuDEOjXG8GMePcYIYJ4xxohgnjnGSGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGJeMcakYiXHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDeJcdMYN4tx8xi3iHHLGLeKcesYt4lx2xi3i3H7GHeIcccYd4px5xh3iXHXGHeLcfcY94hxzxj3inHvGPeJcd8Y94tx/xgPiPHAGA+K8eAYD4nx0BgPi/HwGI+I8cgYj4rx6BiPifHYGI+L8fgYT4jxxBhPivHkGI3xlBhPjfG0GE+PcViMZ8R4ZoxnxXh2jOfEeG6M58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8V4dYzXxHhtjNfFeH2MN8R4Y4w3xXhzjLfEeGuMt8V4e4x3xHhnjHfFOIgxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj/HuGO+J8d4Y74txeIwjYhwZ4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OoGEfHOCbGsTEOSXCcBMdNcGiC4yU4foITJDhhghMlOHGCkyQ4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4Y4IzJThzgrMkOGuCsyU4e4JzJDhngnMlOHeC8yQ4b4LzJTh/ggskuGCCCyW4cIKLJLhogosluHiCSyS4ZIJLJUiCSye4TILLJrhcgssnuEKCKya4UoIrJ7hKgqsmuFqCqye4RoJrJrhWgmsnuE6C6ya4XoLrJ7hBghsmuFGCGye4SYKbJrhZgpsnuEWCWya4VYJbJ7hNgtsmuF2C2ye4Q4I7JrhTgjsnuEuCuya4W4K7J7hHgnsmuFeCeye4T4L7JrhfgvsneECCByZ4UIIHJ3hIgocmeFiChyd4RIJHJnhUgkcneEyCxyZ4XILHJ3hCgicmeFKCJydogqckeGqCpyV4eoLDEjwjwTMTPCvBsxM8J8FzEzwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwasTvCbBaxO8LsHrE7whwRsTvCnBmxO8JcFbE7wtwdsTvCPBOxO8K8FBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn2Cdyd4T4L3JnhfgsMTHJHgyATvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkEn0zwqQSfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8ERyU4OsExCY5NcEiK46Q4bopDUxwvxfFTnCDFCVOcKMWJU5wkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCpFUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5RVM8JcVTUzwtxdNTHJbiGSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0pDlIMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU7w7xXtSvDfF+1IcnuKIFEemeH+KD6T4YIoPpfhwio+k+GiKj6X4eIpPpPhkik+l+HSKz6T4bIrPpfh8ii+k+GKKL6X4coqvpPhqiq+l+HqKb6T4Zopvpfh2iu+k+G6K76X4foofpPhhih+l+HGKn6T4aYqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgqxdEpjklxbIpDMhwnw3EzHJrheBmOn+EEGU6Y4UQZTpzhJBlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOEiGS6a4WIZLp7hEhkumeFSGZLh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZbpThxhlukuGmGW6W4eYZbpHhlhluleHWGW6T4bYZbpfh9hnukOGOGe6U4c4Z7pLhrhnuluHuGe6R4Z4Z7pXh3hnuk+G+Ge6X4f4ZHpDhgRkelOHBGR6S4aEZHpbh4RkekeGRGR6V4dEZHpPhsRkel+HxGZ6Q4YkZnpThyRma4SkZnprhaRmenuGwDM/I8MwMz8rw7AzPyfDcDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/K8OoMr8nw2gyvy/D6DG/I8MYMb8rw5gxvyfDWDG/L8PYM78jwzgzvynCQYZBhmGGUYZxhkmGaYZZhnmHxP7PD/j+c1Bk2GbYZdhn2Gd6d4T0Z3pvhfRkOz3BEhiMzvD/DBzJ8MMOHMnw4w0cyfDTDxzJ8PMMnMnwyw6cyfDrDZzJ8NsPnMnw+wxcyfDHDlzJ8OcNXMnw1w9cyfD3DNzJ8M8O3Mnw7w3cyfDfD9zJ8P8MPMvwww48y/DjDTzL8NMPPMvw8wy8y/DLDrzL8OsNvMvw2w+8y/D7DHzL8McOfMvw5w18y/DXD3zL8PcM/Mvwzw78y/DvDfzL8N8P/MhyV4egMx2Q4NsMhOY6T47g5Ds1xvBzHz3GCHCfMcaIcJ85xkhwnzXGyHCfPcYocp8xxqhynznGaHKfNcbocp89xhhxnzHGmHGfOcZYcZ81xthxnz3GOHOfMca4c585xnhznzXG+HOfPcYEcF8xxoRwXznGRHBfNcbEcF89xiRyXzHGpHMlx6RyXyXHZHJfLcfkcV8hxxRxXynHlHFfJcdUcV8tx9RzXyHHNHNfKce0c18lx3RzXy3H9HDfIccMcN8px4xw3yXHTHDfLcfMct8hxyxy3ynHrHLfJcdsct8tx+xx3yHHHHHfKceccd8lx1xx3y3H3HPfIcc8c98px7xz3yXHfHPfLcf8cD8jxwBwPyvHgHA/J8dAcD8vx8ByPyPHIHI/K8egcj8nx2ByPy/H4HE/I8cQcT8rx5BzN8ZQcT83xtBxPz3FYjmfkeGaOZ+V4do7n5HhujufleH6OF+R4YY4X5XhxjpfkeGmOl+V4eY5X5HhljlfleHWO1+R4bY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z4535TjIMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc/x7hzvyfHeHO/LcXiOI3IcmeP9OT6Q44M5PpTjwzk+kuOjOT6W4+M5PpHjkzk+lePTOT6T47M5Ppfj8zm+kOOLOb6U48s5vpLjqzm+luPrOb6R45s5vpXj2zm+k+O7Ob6X4/s5fpDjhzl+lOPHOX6S46c5fpbj5zl+keOXOX6V49c5fpPjtzl+l+P3Of6Q4485/pTjzzn+kuOvOf6W4+85/pHjnzn+lePfOf6T4785/pfjqBxH5zgmx7E5DilwnALHLXBogeMVOH6BExQ4YYETFThxgZMUOGmBkxU4eYFTFDhlgVMVOHWB0xQ4bYHTFTh9gTMUOGOBMxU4c4GzFDhrgbMVOHuBcxQ4Z4FzFTh3gfMUOG+B8xU4f4ELFLhggQsVuHCBixS4aIGLFbh4gUsUuGSBSxVIgUsXuEyByxa4XIHLF7hCgSsWuFKBKxe4SoGrFrhagasXuEaBaxa4VoFrF7hOgesWuF6B6xe4QYEbFrhRgRsXuEmBmxa4WYGbF7hFgVsWuFWBWxe4TYHbFrhdgdsXuEOBOxa4U4E7F7hLgbsWuFuBuxe4R4F7FrhXgXsXuE+B+xa4X4H7F3hAgQcWeFCBBxd4SIGHFnhYgYcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFnhSgScXaIGnFHhqgacVeHqBwwo8o8AzCzyrwLMLPKfAcws8r8DzC7ygwAsLvKjAiwu8pMBLC7yswMsLvKLAKwu8qsCrC7ymwGsLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF9gXcXeE+B9xZ4X4HDCxxR4MgC7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAv8s8K8C/y7wnwL/LfC/AkcVOLrAMQWOLXBIieOUOG6JQ0scr8TxS5ygxAlLnKjEiUucpMRJS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykxEVLXKzExUtcosQlS1yqREpcusRlSly2xOVKXL7EFUpcscSVSly5xFVKXLXE1UpcvcQ1SlyzxLVKXLvEdUpct8T1Sly/xA1K3LDEjUrcuMRNSty0xM1K3LzELUrcssStSty6xG1K3LbE7UrcvsQdStyxxJ1K3LnEXUrctcTdSty9xD1K3LPEvUrcu8R9Sty3xP1K3L/EA0o8sMSDSjy4xENKPLTEw0o8vMQjSjyyxKNKPLrEY0o8tsTjSjy+xBNKPLHEk0o8uURLPKXEU0s8rcTTSxxW4hklnlniWSWeXeI5JZ5b4nklnl/iBSVeWOJFJV5c4iUlXlriZSVeXuIVJV5Z4lUlXl3iNSVeW+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJQ5KDEoMS4xKjEtMSkxLzErMSyxKLEusSqxLbEpsS+xK7Eu8u8R7Sry3xPtKHF7iiBJHlnh/iQ+U+GCJD5X4cImPlPhoiY+V+HiJT5T4ZIlPlfh0ic+U+GyJz5X4fIkvlPhiiS+V+HKJr5T4aomvlfh6iW+U+GaJb5X4donvlPhuie+V+H6JH5T4YYkflfhxiZ+U+GmJn5X4eYlflPhliV+V+HWJ35T4bYnflfh9iT+U+GOJP5X4c4m/lPhrib+V+HuJf5T4Z4l/lfh3if+U+G+J/5U4qsTRJY4pcWyJQyocp8JxKxxa4XgVjl/hBBVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVLlnhUhVS4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFZ5U4ckVWuEpFZ5a4WkVnl7hsArPqPDMCs+q8OwKz6nw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76pwUGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4d0V3lPhvRXeV+HwCkdUOLLC+yt8oMIHK3yowocrfKTCRyt8rMLHK3yiwicrfKrCpyt8psJnK3yuwucrfKHCFyt8qcKXK3ylwlcrfK3C1yt8o8I3K3yrwrcrfKfCdyt8r8L3K/ygwg8r/KjCjyv8pMJPK/ysws8r/KLCLyv8qsKvK/ymwm8r/K7C7yv8ocIfK/ypwp8r/KXCXyv8rcLfK/yjwj8r/KvCvyv8p8J/K/yvwlEVjq5wTIVjKxxS4zg1jlvj0BrHq3H8GieoccIaJ6px4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqHHJGpeqkRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zxpBpPrtEaT6nx1BpPq/H0GofVeEaNZ9Z4Vo1n13hOjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjYMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xrvrvGeGu+t8b4ah9c4osaRNd5f4wM1PljjQzU+XOMjNT5a42M1Pl7jEzU+WeNTNT5d4zM1PlvjczU+X+MLNb5Y40s1vlzjKzW+WuNrNb5e4xs1vlnjWzW+XeM7Nb5b43s1vl/jBzV+WONHNX5c4yc1flrjZzV+XuMXNX5Z41c1fl3jNzV+W+N3NX5f4w81/ljjTzX+XOMvNf5a4281/l7jHzX+WeNfNf5d4z81/lvjfzWOqnF0jWNqHFvjkAbHaXDcBoc2OF6D4zc4QYMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDSza4VDN0CA0u3eAyDS7b4HINLt/gCg2u2OBKDa7c4CoNrtrgag2u3uAaDa7Z4FoNrt3gOg2u2+B6Da7f4AYNbtjgRg1u3OAmDW7a4GYNbt7gFg1u2eBWDW7d4DYNbtvgdg1u3+AODe7Y4E4N7tzgLg3u2uBuDe7e4B4N7tngXg3u3eA+De7b4H4N7t/gAQ0e2OBBDR7c4CENHtrgYQ0e3uARDR7Z4FENHt3gMQ0e2+BxDR7f4AkNntjgSQ2e3KANntLgqQ2e1uDpDQ5r8IwGz2zwrAbPbvCcBs9t8LwGz2/wggYvbPCiBi9u8JIGL23wsgYvb/CKBq9s8KoGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbPCuBgcNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g3e3eA9Dd7b4H0NDm9wRIMjG7y/wQcafLDBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc1eDoBsc0OLbBIS2O0+K4LQ5tcbwWx29xghYnbHGiFiducZIWJ21xshYnb3GKFqdscaoWp25xmhanbXG6FqdvcYYWZ2xxphZnbnGWFmdtcbYWZ29xjhbnbHGuFuducZ4W521xvhbnb3GBFhdscaEWF25xkRYXbXGxFhdvcYkWl2xxqRZpcekWl2lx2RaXa3H5FldoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqce8W92lx3xb3a3H/Fg9o8cAWD2rx4BYPafHQFg9r8fAWj2jxyBaPavHoFo9p8dgWj2vx+BZPaPHEFk9q8eQWbfGUFk9t8bQWT29xWItntHhmi2e1eHaL57R4bovntXh+ixe0eGGLF7V4cYuXtHhpi5e1eHmLV7R4ZYtXtXh1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7U4aDFoMWwxajFuMWkxbTFrMW+xaLFssWqxbrFpsW2xa7Fv8e4W72nx3hbva3F4iyNaHNni/S0+0OKDLT7U4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLT7X4vMtvtDiiy2+1OLLLb7S4qstvtbi6y2+0eKbLb7V4tstvtPiuy2+1+L7LX7Q4octftTixy1+0uKnLX7W4uctftHily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf7X4qgWR7c4psWxLQ7pcJwOx+1waIfjdTh+hxN0OGGHE3U4cYeTdDhph5N1OHmHU3Q4ZYdTdTh1h9N0OG2H03U4fYczdDhjhzN1OHOHs3Q4a4ezdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0uGiHi3W4eIdLdLhkh0t1SIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch8d3eEKHJ3Z4Uocnd2iHp3R4aoendXh6h8M6PKPDMzs8q8OzOzynw3M7PK/D8zu8oMMLO7yow4s7vKTDSzu8rMPLO7yiwys7vKrDqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYd3d3hPh/d2eF+Hwzsc0eHIDu/v8IEOH+zwoQ4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvDv/u8J8O/+3wvw5HdTi6wzEdju1wSI/j9Dhuj0N7HK/H8XucoMcJe5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqceZe5ylx1l7nK3H2Xuco8c5e5yrx7l7nKfHeXucr8f5e1ygxwV7XKjHhXtcpMdFe1ysx8V7XKLHJXtcqkd6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxx5N6PLlHezylx1N7PK3H03sc1uMZPZ7Z41k9nt3jOT2e2+N5PZ7f4wU9XtjjRT1e3OMlPV7a42U9Xt7jFT1e2eNVPV7d4zU9XtvjdT1e3+MNPd7Y40093tzjLT3e2uNtPd7e4x093tnjXT0Oegx6DHuMeox7THpMe8x6zHsseix7rHqse2x6bHvseux7vLvHe3q8t8f7ehze44geR/b8HwX0oEbXgQBAuKlt29bUtm3btqe2bdvuPTZq27bdONlvX+E3H2AxwHKA1QDrATYDbAfYDbAf4LMDfG6Azw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwc4bIDDBzhigCMHOGqAowc4ZoBjBzhOgEMCHDfA8QIcP8AJApwwwIkCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQJcMsClAlw6QAJcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDPCnAkwM8JUADPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAnw4wEcCfDTAxwJ8PMAnAnwywKcCfDrAZwIcBBgEGAYYBRgHmASYBpgFmAdYBFgGWAVYB9gE2AbYBdgH+GyAzwX4fIAvBPhigC8F+HKArwT4aoCvBfh6gG8E+GaAbwX4doDvBPhugO8F+H6AHwT4YYAfBfhxgJ8E+GmAnwX4eYBfBPhlgF8F+HWA3wT4bYDfBfh9gD8E+GOAPwX4c4C/BPhrgL8F+HuAfwT4Z4B/Bfh3gP8E+G+A/wU4NMBhAQ4PcESAIwMcFeDoAMcEODbAcUIcEuK4IY4X4vghThDihCFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4R4pIhLhXi0iES4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGOJJIZ4c4ikhGuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPivSHeF+L9IT4Q4oMhPhTiwyE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsRnQ3wuxOdDfCHEF0N8KcSXQ3wlxFdDfC3E10N8I8Q3Q3wrxLdDfCfEd0N8L8T3Q/wgxA9D/CjEj0P8JMRPQ/wsxM9D/CLEL0P8KsSvQ/wmxG9D/C7E70P8IcQfQ/wpxJ9D/CXEX0P8LcTfQ/wjxD9D/CvEv0P8J8R/Q/wvxKEhDgtxeIgjQhwZ4qgQR4c4JsSxIY4T4ZAIx41wvAjHj3CCCCeMcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiXjHCpCJeOkAiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIT4rw5AhPidAIT43wtAhPj/CMCM+M8KwIz47wnAjPjfC8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCK+O8JoIr43wugivj/CGCG+M8KYIb47wlghvjfC2CG+P8I4I74zwrgjvjvCeCO+N8L4I74/wgQgfjPChCB+O8JEIH43wsQgfj/CJCJ+M8KkIn47wmQgHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYRPhvhcxE+H+ELEb4Y4UsRvhzhKxG+GuFrEb4e4RsRvhnhWxG+HeE7Eb4b4XsRvh/hBxF+GOFHEX4c4ScRfhrhZxF+HuEXEX4Z4VcRfh3hNxF+G+F3EX4f4Q8R/hjhTxH+HOEvEf4a4W8R/h7hHxH+GeFfEf4d4T8R/hvhfxEOjXBYhMMjHBHhyAhHRTg6wjERjo1wnBiHxDhujOPFOH6ME8Q4YYwTxThxjJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88U4f4wLxLhgjAvFuHCMi8S4aIyLxbh4jEvEuGSMS8W4dIzEuEyMy8a4XIzLx7hCjCvGuFKMK8e4SoyrxrhajKvHuEaMa8a4Voxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuEmMm8a4WYybx7hFjFvGuFWMW8e4TYzbxrhdjNvHuEOMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxnhSjCfHeEqMxnhqjKfFeHqMZ8R4ZoxnxXh2jOfEeG6M58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8V4dYzXxHhtjNfFeH2MN8R4Y4w3xXhzjLfEeGuMt8V4e4x3xHhnjHfFeHeM98R4b4z3xXh/jA/E+GCMD8X4cIyPxPhojI/F+HiMT8T4ZIxPxfh0jM/EOIgxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj/HZGJ+L8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGP+LcWiMw2IcHuOIGEfGOCrG0TGOiXFsjOMkOCTBcRMcL8HxE5wgwQkTnCjBiROcJMFJE5wswckTnCLBKROcKsGpE5wmwWkTnC7B6ROcIcEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIsElE1wqwaUTJMFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDHBkxI8OcFTEjTBUxM8LcHTEzwjwTMTPCvBsxM8J8FzEzwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwasTvCbBaxO8LsHrE7whwRsTvCnBmxO8JcFbE7wtwdsTvCPBOxO8K8G7E7wnwXsTvC/B+xN8IMEHE3wowYcTfCTBRxN8LMHHE3wiwScTfCrBpxN8JsFBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn2Czyb4XILPJ/hCgi8m+FKCLyf4SoKvJvhagq8n+EaCbyb4VoJvJ/hOgu8m+F6C7yf4QYIfJvhRgh8n+EmCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgn8n+E+C/yb4X4JDExyW4PAERyQ4MsFRCY5OcEyCYxMcJ8UhKY6b4ngpjp/iBClOmOJEKU6c4iQpTpriZClOnuIUKU6Z4lQpTp3iNClOm+J0KU6f4gwpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpziIikumuJiKS6e4hIpLpniUikunSIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkeleLRKR6T4rEpHpfi8SmekOKJKZ6U4skpnpKiKZ6a4mkpnp7iGSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQyk+nOIjKT6a4mMpPp7iEyk+meJTKT6d4jMpDlIMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU3w2xedSfD7FF1J8McWXUnw5xVdSfDXF11J8PcU3UnwzxbdSfDvFd1J8N8X3Unw/xQ9S/DDFj1L8OMVPUvw0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXfUvw9xT9S/DPFv1L8O8V/Uvw3xf9SHJrisBSHpzgixZEpjkpxdIpjUhyb4jgZDslw3AzHy3D8DCfIcMIMJ8pw4gwnyXDSDCfLcPIMp8hwygynynDqDKfJcNoMp8tw+gxnyHDGDGfKcOYMZ8lw1gxny3D2DOfIcM4M58pw7gznyXDeDOfLcP4MF8hwwQwXynDhDBfJcNEMF8tw8QyXyHDJDJfKcOkMyXCZDJfNcLkMl89whQxXzHClDFfOcJUMV81wtQxXz3CNDNfMcK0M185wnQzXzXC9DNfPcIMMN8xwoww3znCTDDfNcLMMN89wiwy3zHCrDLfOcJsMt81wuwy3z3CHDHfMcKcMd85wlwx3zXC3DHfPcI8M98xwrwz3znCfDPfNcL8M98/wgAwPzPCgDA/O8JAMD83wsAwPz/CIDI/M8KgMj87wmAyPzfC4DI/P8IQMT8zwpAxPzvCUDM3w1AxPy/D0DM/I8MwMz8rw7AzPyfDcDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/K8OoMr8nw2gyvy/D6DG/I8MYMb8rw5gxvyfDWDG/L8PYM78jwzgzvyvDuDO/J8N4M78vw/gwfyPDBDB/K8OEMH8nw0Qwfy/DxDJ/I8MkMn8rw6QyfyXCQYZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ/hsxk+l+HzGb6Q4YsZvpThyxm+kuGrGb6W4esZvpHhmxm+leHbGb6T4bsZvpfh+xl+kOGHGX6U4ccZfpLhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4d8Z/pPhvxn+l+HQDIdlODzDERmOzHBUhqMzHJPh2AzHyXFIjuPmOF6O4+c4QY4T5jhRjhPnOEmOk+Y4WY6T5zhFjlPmOFWOU+c4TY7T5jhdjtPnOEOOM+Y4U44z5zhLjrPmOFuOs+c4R45z5jhXjnPnOE+O8+Y4X47z57hAjgvmuFCOC+e4SI6L5rhYjovnuESOS+a4VI5L50iOy+S4bI7L5bh8jivkuGKOK+W4co6r5LhqjqvluHqOa+S4Zo5r5bh2juvkuG6O6+W4fo4b5LhhjhvluHGOm+S4aY6b5bh5jlvkuGWOW+W4dY7b5LhtjtvluH2OO+S4Y4475bhzjrvkuGuOu+W4e4575LhnjnvluHeO++S4b4775bh/jgfkeGCOB+V4cI6H5HhojofleHiOR+R4ZI5H5Xh0jsfkeGyOx+V4fI4n5HhijifleHKOp+RojqfmeFqOp+d4Ro5n5nhWjmfneE6O5+Z4Xo7n53hBjhfmeFGOF+d4SY6X5nhZjpfneEWOV+Z4VY5X53hNjtfmeF2O1+d4Q4435nhTjjfneEuOt+Z4W46353hHjnfmeFeOd+d4T4735nhfjvfn+ECOD+b4UI4P5/hIjo/m+FiOj+f4RI5P5vhUjk/n+EyOgxyDHMMcoxzjHJMc0xyzHPMcixzLHKsc6xybHNscuxz7HJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHD/N8bMcP8/xixy/zPGrHL/O8Zscv83xuxy/z/GHHH/M8accf87xlxx/zfG3HH/P8Y8c/8zxrxz/zvGfHP/N8b8ch+Y4LMfhOY7IcWSOo3IcneOYHMfmOE6BQwoct8DxChy/wAkKnLDAiQqcuMBJCpy0wMkKnLzAKQqcssCpCpy6wGkKnLbA6QqcvsAZCpyxwJkKnLnAWQqctcDZCpy9wDkKnLPAuQqcu8B5Cpy3wPkKnL/ABQpcsMCFCly4wEUKXLTAxQpcvMAlClyywKUKXLpAClymwGULXK7A5QtcocAVC1ypwJULXKXAVQtcrcDVC1yjwDULXKvAtQtcp8B1C1yvwPUL3KDADQvcqMCNC9ykwE0L3KzAzQvcosAtC9yqwK0LhvzfcdsCtytw+wJ3KHDHAncqcOcCdylw1wJ3K3D3AvcocM8C9ypw7wL3KXDfAvcrcP8CDyjwwAIPKvDgAg8p8NACDyvw8AKPKPDIAo8q8OgCjynw2AKPK/D4Ak8o8MQCTyrw5AJPKdACTy3wtAJPL/CMAs8s8KwCzy7wnALPLfC8As8v8IICLyzwogIvLvCSAi8t8LICLy/wigKvLPCqAq8u8JoCry3wugKvL/CGAm8s8KYCby7wlgJvLfC2Am8v8I4C7yzwrgLvLvCeAu8t8L4C7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuAXBX5Z4FcFfl3gNwV+W+B3BX5f4A8F/ljgTwX+XOAvBf5a4G8F/l7gHwX+WeBfBf5d4D8F/lvgfwUOLXBYgcMLHFHgyAJHFTi6wDEFji1wnBKHlDhuieOVOH6JE5Q4YYkTlThxiZOUOGmJk5U4eYlTlDhliVOVOHWJ05Q4bYnTlTh9iTOUOGOJM5U4c4mzlDhribOVOHuJc5Q4Z4lzlTh3ifOUOG+J85U4f4kLlLhgiQuVuHCJi5S4aImLlbh4iUuUuGSJS5W4dImUuEyJy5a4XInLl7hCiSuWuFKJK5e4SomrlrhaiauXuEaJa5a4Volrl7hOieuWuF6J65e4QYkblrhRiRuXuEmJm5a4WYmbl7hFiVuWuFWJW5e4TYnblrhdiduXuEOJO5a4U4k7l7hLibuWuFuJu5e4R4l7lrhXiXuXuE+J+5a4X4n7l3hAiQeWeFCJB5d4SImHlnhYiYeXeESJR5Z4VIlHl3hMiceWeFyJx5d4QoknlnhSiSeXeEqJlnhqiaeVeHqJZ5R4ZolnlXh2ieeUeG6J55V4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYnXlHhtideVeH2JN5R4Y4k3lXhzibeUeGuJt5V4e4l3lHhniXeVeHeJ95R4b4n3lXh/iQ+U+GCJD5X4cImPlPhoiY+V+HiJT5T4ZIlPlfh0ic+UOCgxKDEsMSoxLjEpMS0xKzEvsSixLLEqsS6xKbEtsSuxL/HZEp8r8fkSXyjxxRJfKvHlEl8p8dUSXyvx9RLfKPHNEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcWiJw0ocXuKIEkeWOKrE0SWOKXFsieNUOKTCcSscr8LxK5ygwgkrnKjCiSucpMJJK5yswskrnKLCKSucqsKpK5ymwmkrnK7C6SucocIZK5ypwpkrnKXCWSucrcLZK5yjwjkrnKvCuSucp8J5K5yvwvkrXKDCBStcqMKFK1ykwkUrXKzCxStcosIlK1yqwqUrpMJlKly2wuUqXL7CFSpcscKVKly5wlUqXLXC1SpcvcI1KlyzwrUqXLvCdSpct8L1Kly/wg0q3LDCjSrcuMJNKty0ws0q3LzCLSrcssKtKty6wm0q3LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywqMqPLrCYyo8tsLjKjy+whMqPLHCkyo8ucJTKrTCUys8rcLTKzyjwjMrPKvCsys8p8JzKzyvwvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrvKbCayu8rsLrK7yhwhsrvKnCmyu8pcJbK7ytwtsrvKPCOyu8q8K7K7ynwnsrvK/C+yt8oMIHK3yowocrfKTCRyt8rMLHK3yiwicrfKrCpyt8psJBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2Fz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1b4X4VDKxxW4fAKR1Q4ssJRFY6ucEyFYyscp8YhNY5b43g1jl/jBDVOWONENU5c4yQ1TlrjZDVOXuMUNU5Z41Q1Tl3jNDVOW+N0NU5f4ww1zljjTDXOXOMsNc5a42w1zl7jHDXOWeNcNc5d4zw1zlvjfDXOX+MCNS5Y40I1LlzjIjUuWuNiNS5e4xI1LlnjUjUuXSM1LlPjsjUuV+PyNa5Q44o1rlTjyjWuUuOqNa5W4+o1rlHjmjWuVePaNa5T47o1rlfj+jVuUOOGNW5U48Y1blLjpjVuVuPmNW5R45Y1blXj1jVuU+O2NW5X4/Y17lDjjjXuVOPONe5S46417lbj7jXuUeOeNe5V49417lPjvjXuV+P+NR5Q44E1HlTjwTUeUuOhNR5W4+E1HlHjkTUeVePRNR5T47E1Hlfj8TWeUOOJNZ5U48k1nlKjNZ5a42k1nl7jGTWeWeNZNZ5d4zk1nlvjeTWeX+MFNV5Y40U1XlzjJTVeWuNlNV5e4xU1XlnjVTVeXeM1NV5b43U1Xl/jDTXeWONNNd5c4y013lrjbTXeXuMdNd5Z41013l3jPTXeW+N9Nd5f4wM1PljjQzU+XOMjNT5a42M1Pl7jEzU+WeNTNT5d4zM1DmoMagxrjGqMa0xqTGvMasxrLGosa6xqrGtsamxr7Grsa3y2xudqfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2r8uMZPavy0xs9q/LzGL2r8ssavavy6xm9q/LbG72r8vsYfavyxxp9q/LnGX2r8tcbfavy9xj9q/LPGv2r8u8Z/avy3xv9qHFrjsBqH1ziixpE1jqpxdI1jahxb4zgNDmlw3AbHa3D8BidocMIGJ2pw4gYnaXDSBidrcPIGp2hwygananDqBqdpcNoGp2tw+gZnaHDGBmdqcOYGZ2lw1gZna3D2BudocM4G52pw7gbnaXDeBudrcP4GF2hwwQYXanDhBhdpcNEGF2tw8QaXaHDJBpdqcOkGaXCZBpdtcLkGl29whQZXbHClBlducJUGV21wtQZXb3CNBtdscK0G125wnQbXbXC9BtdvcIMGN2xwowY3bnCTBjdtcLMGN29wiwa3bHCrBrducJsGt21wuwa3b3CHBndscKcGd25wlwZ3bXC3BndvcI8G92xwrwb3bnCfBvdtcL8G92/wgAYPbPCgBg9u8JAGD23wsAYPb/CIBo9s8KgGj27wmAaPbfC4Bo9v8IQGT2zwpAZPbvCUBm3w1AZPa/D0Bs9o8MwGz2rw7AbPafDcBs9r8PwGL2jwwgYvavDiBi9p8NIGL2vw8gavaPDKBq9q8OoGr2nw2gava/D6Bm9o8MYGb2rw5gZvafDWBm9r8PYG72jwzgbvavDuBu9p8N4G72vw/gYfaPDBBh9q8OEGH2nw0QYfa/DxBp9o8MkGn2rw6QafaXDQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/gsw0+1+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw3+1+DQBoc1OLzBEQ2ObHBUg6MbHNPg2AbHaXFIi+O2OF6L47c4QYsTtjhRixO3OEmLk7Y4WYuTtzhFi1O2OFWLU7c4TYvTtjhdi9O3OEOLM7Y4U4sztzhLi7O2OFuLs7c4R4tztjhXi3O3OE+L87Y4X4vzt7hAiwu2uFCLC7e4SIuLtrhYi4u3uESLS7a4VItLt0iLy7S4bIvLtbh8iyu0uGKLK7W4courtLhqi6u1uHqLa7S4Zotrtbh2i+u0uG6L67W4fosbtLhhixu1uHGLm7S4aYubtbh5i1u0uGWLW7W4dYvbtLhti9u1uH2LO7S4Y4s7tbhzi7u0uGuLu7W4e4t7tLhni3u1uHeL+7S4b4v7tbh/iwe0eGCLB7V4cIuHtHhoi4e1eHiLR7R4ZItHtXh0i8e0eGyLx7V4fIsntHhiiye1eHKLp7Roi6e2eFqLp7d4RotntnhWi2e3eE6L57Z4Xovnt3hBixe2eFGLF7d4SYuXtnhZi5e3eEWLV7Z4VYtXt3hNi9e2eF2L17d4Q4s3tnhTize3eEuLt7Z4W4u3t3hHi3e2eFeLd7d4T4v3tnhfi/e3+ECLD7b4UIsPt/hIi4+2+FiLj7f4RItPtvhUi0+3+EyLgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fp9t8bkWn2/xhRZfbPGlFl9u8ZUWX23xtRZfb/GNFt9s8a0W327xnRbfbfG9Ft9v8YMWP2zxoxY/bvGTFj9t8bMWP2/xixa/bPGrFr9u8ZsWv23xuxa/b/GHFn9s8acWf27xlxZ/bfG3Fn9v8Y8W/2zxrxb/bvGfFv9t8b8Wh7Y4rMXhLY5ocWSLo1oc3eKYFse2OE6HQzoct8PxOhy/wwk6nLDDiTqcuMNJOpy0w8k6nLzDKTqcssOpOpy6w2k6nLbD6TqcvsMZOpyxw5k6nLnDWTqctcPZOpy9wzk6nLPDuTqcu8N5Opy3w/k6nL/DBTpcsMOFOly4w0U6XLTDxTpcvMMlOlyyw6U6XLpDOlymw2U7XK7D5TtcocMVO1ypw5U7XKXDVTtcrcPVO1yjwzU7XKvDtTtcp8N1O1yvw/U73KDDDTvcqMONO9ykw0073KzDzTvcosMtO9yqw6073KbDbTvcrsPtO9yhwx073KnDnTvcpcNdO9ytw9073KPDPTvcq8O9O9ynw3073K/D/Ts8oMMDOzyow4M7PKTDQzs8rMPDOzyiwyM7PKrDozs8psNjOzyuw+M7PKHDEzs8qcOTOzylQzs8tcPTOjy9wzM6PLPDszo8u8NzOjy3w/M6PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDazq8tsPrOry+wxs6vLHDmzq8ucNbOry1w9s6vL3DOzq8s8O7Ory7w3s6vLfD+zq8v8MHOnyww4c6fLjDRzp8tMPHOny8wyc6fLLDpzp8usNnOhx0GHQYdhh1GHeYdJh2mHWYd1h0WHZYdVh32HTYdth12Hf4bIfPdfh8hy90+GKHL3X4coevdPhqh691+HqHb3T4Zodvdfh2h+90+G6H73X4focfdPhhhx91+HGHn3T4aYefdfh5h190+GWHX3X4dYffdPhth991+H2HP3T4Y4c/dfhzh790+GuHv3X4e4d/dPhnh391+HeH/3T4b4f/dTi0w2EdDu9wRIcjOxzV4egOx3Q4tsNxehzS47g9jtfj+D1O0OOEPU7U48Q9TtLjpD1O1uPkPU7R45Q9TtXj1D1O0+O0PU7X4/Q9ztDjjD3O1OPMPc7S46w9ztbj7D3O0eOcPc7V49w9ztPjvD3O1+P8PS7Q44I9LtTjwj0u0uOiPS7W4+I9LtHjkj0u1ePSPdLjMj0u2+NyPS7f4wo9rtjjSj2u3OMqPa7a42o9rt7jGj2u2eNaPa7d4zo9rtvjej2u3+MGPW7Y40Y9btzjJj1u2uNmPW7e4xY9btnjVj1u3eM2PW7b43Y9bt/jDj3u2ONOPe7c4y497trjbj3u3uMePe7Z41497t3jPj3u2+N+Pe7f4wE9HtjjQT0e3OMhPR7a42E9Ht7jET0e2eNRPR7d4zE9HtvjcT0e3+MJPZ7Y40k9ntzjKT3a46k9ntbj6T2e0eOZPZ7V49k9ntPjuT2e1+P5PV7Q44U9XtTjxT1e0uOlPV7W4+U9XtHjlT1e1ePVPV7T47U9Xtfj9T3e0OONPd7U48093tLjrT3e1uPtPd7R45093tXj3T3e0+O9Pd7X4/09PtDjgz0+1OPDPT7S46M9Ptbj4z0+0eOTPT7V49M9PtPjoMf/BQAA//8iZ+qE") splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 20.648538582s ago: executing program 3 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="08001d800400000040001d802c00008006000500020000000c00021069e10000000000000c000300090000000000000006000500d20000001000008006000500d9000000040004003c001d80380000800c000300000000000000000005000700d00000000400040005000600010000003d0008008d0000000c000300040000000000000024001d801c00008005000c000100000000000c008000"/168], 0xc4}}, 0x4008010) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r6 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) write$binfmt_script(r2, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) fstat(r6, &(0x7f00000004c0)) r8 = openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) socket$key(0xf, 0x3, 0x2) 18.644195031s ago: executing program 4 (id=1029): newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) setresuid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000980)='./file1\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x1}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f00000009c0)=""/4096, &(0x7f0000000000)=0x1000) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8010550e, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r0, &(0x7f00000000c0)={r2, r1, 0x1}) r8 = open$dir(0x0, 0x0, 0x0) r9 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x18) renameat2(r9, &(0x7f0000000040)='./file1\x00', r8, &(0x7f0000000180)='./file1\x00', 0x2) 18.222473333s ago: executing program 0 (id=1030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 16.668689389s ago: executing program 0 (id=1032): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, 0x0}) 16.42292108s ago: executing program 4 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1000, 0x9900}, &(0x7f0000000100)=0x401, 0x0, 0x4d, 0x3, 0x8, 0xfffffffffffff001, 0x0, 0x8001}}], 0x58}, 0x0) 13.559509462s ago: executing program 3 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1, 0x1000000, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000000000), 0x0) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f00000000c0)="c82f", &(0x7f0000001200)=""/113, &(0x7f0000001280)="59f926a0880a1335ff7cf46a5eb079ca233d689b4ca38d04318833a00a1b4eb4a93c1259d4783aef37111d6fe32405ed9406285d503f3707ccde29bf930165eb83f689c6a9c5014bff74881fd8318e79ac9b4c1ba73e5bfd1219d10f2741152f68f8c110709e6f1bd1e51ad3d97c2c9f0feb5ba7a9847b4e3ac533a9b8d125ecd5f27712f1208705843edb81e261c2dd444c6c044a2e17c97b9c113d80ee2449590654fa7bdc8a02ad398763c1", &(0x7f0000001340)="5935926a3ccdd9ea5a7f38806c74f45ea7849707f23fd6f5e7ef75bfe7516d4e4ed500d7590acb3be8d2b940c3bd5573e7156b5e9935b4a72cdfcedbff204d114466aa735968d0ebea7584c674cb0614fb1dfd665e1ba861e3fbf9c23de75da393622bc722b9d6ea3b18064869e0da0f7ba84b9b5bcc4bfcd59f2941349ce60a24e53734f3752778e04f6b09c9b471dff787fd58d74b80716ad40414f07fe1c597b53703f7f99e94ffa88cbb6fd6fab9405f328a3b8eeaeaaca5372fe87e25ae5966a72ec0da2b44db1229342bed55981ea79d46c688691c7ec950420c01aa7fb32f0413377e76dc7b182c9ef0485aa7230ecda401", 0x10001, r3, 0x4}, 0x38) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, 0x0, 0x0, 0x2000000000000c2a) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT=r0], 0x3, 0x2c8, &(0x7f00000005c0)="$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") 12.272270358s ago: executing program 4 (id=1043): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) rt_sigqueueinfo(0x0, 0x21, 0x0) 11.338431632s ago: executing program 1 (id=1045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x24044894) 11.329796302s ago: executing program 4 (id=1046): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5281, 0x0, 0x8000000}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x40047f6, 0x7812, 0x0, 0x0, 0x0) 10.494448866s ago: executing program 1 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000202"], 0x10}}, 0x0) 8.170166036s ago: executing program 0 (id=1049): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000013c0)={0x0, 0x1}, 0x4) 8.169928096s ago: executing program 1 (id=1050): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4204, 0xffffffff, @mcast1, 0xd57a}}, 0x1}, 0x90) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, 0x0) 7.10482823s ago: executing program 1 (id=1052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x0, 0x3, 0x10000, 0xffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040), 0x0, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 7.092699441s ago: executing program 0 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1000, 0x9900}, &(0x7f0000000100)=0x401, 0x0, 0x4d, 0x3, 0x8, 0xfffffffffffff001, 0x0, 0x8001}}], 0x58}, 0x0) 4.534478641s ago: executing program 2 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r3, 0x0, 0x7}, 0x38) 3.566868545s ago: executing program 2 (id=1055): r0 = socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)=')#\'+3\x00', 0x6) 3.546902986s ago: executing program 1 (id=1056): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)) setxattr$trusted_overlay_upper(&(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x0, 0x0, 0x2) prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x0, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x5f, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x2404c040}, 0x44800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) semget$private(0x0, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000b2e000/0x3000)=nil, 0x1000) ioctl$KDENABIO(0xffffffffffffffff, 0x4b32) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1cf, &(0x7f0000000780)="$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") 2.645826129s ago: executing program 2 (id=1057): ioperm(0x0, 0x4, 0x2) unshare(0x2a020400) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 2.3743265s ago: executing program 0 (id=1058): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xffffffffffff0000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0xffffffffffffffc2, &(0x7f0000000280)=0x666) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000005c0), 0xfb, 0x5112, &(0x7f000000a240)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5LrqA4Cf2dd4H97dBCpCimCBOsYFr9d2eKhNxTpNVRRKWZeUqEIUG3sdFm+wsZ2CI0CODUpRBE1LJPhQFEcI1XxIapEgoAHFjYRR1PAQVREkSkRaJ4goNA2gpBCJVDP3ntk75+481vY63vT3k7xzZv7ncc+dmet77r1zLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P9w4hMf+tt28ft+e8UDD189/f7DW65+4qNXXPi9EGbqr1eycGXoxs9P/+L2y+84fPemW+86deVrB/JyeTwM1/705E8+Hms9tTqEr1ZC6EsD60eyQH/+fCTW97KREC4IC4FGidmhrETacPjWYAhHw0KgUdXXB0MYKQSu+sG993yqlrhlMIQ1IYRq2sZD1ayNwTRwyUAWGEoDe/qywDPPZRqBr/VkAVjUM0vIG78MjQ/98ZnmDOOLl2vx+etfQtPns7R7vTEx3jrfz7cs80IVDKQvzJzR21aqjmVR+nqcOKO37YXifP+2ld62m20kiztS+R7KcwuhaujZObtr+3XzB+IrPWFysrdVTcv0Pv/4qY/sWEp6xXwO4wKMn5XP4ae/u+b23nVv+85d69c8dux1Rx4/08X8UWGVFtPLrRryz9yKeR+jaduTFfD1K+0lTdjpCiHset/vvb1dvDT+H28//o8f5/jY05Q71vrsaDY2j6+MxMSTo9nYHAAAAFaMlXDUdM/kN99UKD5WTeorjf8nujv/H0/554P5rLcnQpiuJ46MhXBR/fUs8KXY3HvHQnhlPTXTHNiSBE6E8NJ6Yl2jqqTEqlhiIgn8dDQPTCeBkzEwkwS+GAM3J4GPx8DxJLAjBk4kgctjIMw19+P3R/N+dB0YjIFt2Uo8Hq9C+OVobC1ZVw82qgIAADhL8tFhf/PTwrUOZ5ohDi+PD3bKEK/AbpmhmtSQjmAbw6qWNfR1qqGnUw2Nfh9q3/1SzZVONZcuw6g0Z/j8r/7mHaGN0vh/qv34v7rIglRK5/9D2Fr/G3P35JH5RnzbTFMGAAAA4AwM/+8jX2gXL43/p7u7/j8eE+ktZA73x8MQu8dCmGoOZNX+YTmQnfUezgMAAACwEjTOxzfOhc/lj9kl2ul4upx/Zon544n/6UXzD5z4xrZ2y1sa/890d/3/UPNjthAn41J8ZiyEVYXAt+NS1gJ1EzHwkzc3B/L+n4wr4KZYVX5hQqOqm2KJbTEwlQSOtirx/UaJi5oD+ZvVaPxIox9zeYlCAAAAAM65eDggnpeP1/+/6jebPtSuXGn8v21p1//Xx8Gly/vnh0PY0BdCb/rDgPuHsokBY2Ckkie+OZTV1ZtWdcNQCJfVOpZW9Ug+/39fOsfgDwazqmLgolcde+qSWuILgyFsKAZ++K7bXl9LHEgCjcb/cjCEV9R6mzb+lVVZ4/1p459dFcLLC4FGVe9dFUKtsYG0qnur+X0M0qr+uRrCiwqBRlVvqIZwMACwQsX/SncWX9x/8Prd2+fnZ/ctYyIewx8Mu+bmZyd37JnfWW2xTDuTZW6axuiGcp+6vRfCg/kURe+8c+tIN+nG7wSnim3lx/FLFw7mz+O+UH+9n5v6m55uTrv8mleXmwiFPalWXe5Z5i4PFStZeBNL9cf8A2E4rLpu/+y+yQ9vP3Bg38bsb7fZN2V/42mmbF1tTNfV0GLL1sXHo+VsWYnTXVdri5VsOHDt3g37D16/fu7a7dfMXjP7gY1v2DR16dTmqTdeuqHWq6nsb4eurl2s6qSrz93WZb/OYlcv7itUci62GhISEistsWd4bdv/k0vj/73tx/9xqxO3/Pn8DK3O/4/H0/zZ6wun+bfFwNFuz/+Ptzqb37gwYCIJHIqBQ07zAwAA8MIQB/nxaGY8Kv2zdV95rF250vj/UHe//z9L8/83pq6/stU0/+tiialW8/+n0/w35v8/1Gr+/3Sa/8b8/0efh/n/r2sEklXyS/P/AwAALwTnbv7/jtP7pzcIKGXoOL1/eoOAUoaO0/h3e4OAJc///9B//tV/hzZK4/+buxv/m7gfAAAAzh8f+7MP/U67eGn8f7S78f+5n/8vtLr+f6JVYKbVxIDm/wMAAGCFajX/3/iNQ+9pV640/j/e3fg/XnbR05Q71vrsaDanXUjntHtytPGTAQAAAFgZesLkZH+XeZtmRt1y+m3+OJ8KtF266JE/ObW06/9PdDf+b/pdxqe/u+b23nVv+86zd61f89ix1x15fOH8PwAAALB8uj0uAQAAAAAAAAAAAAAAPP8e+Y/Dm9vFS7//D1vrr7f6/X+871/8fcGLm3LHWjvP/5c/v+qtdxysT1l4/2gIry4Gdh/efUHI782/thi4593rXlJLHE5LfOPhyx+tJd6TBt6y/sKna4nLksC2OEniS9NAvKvi06uTQJxe8d/TQFwfx9PAQB745OqsH5V0Xf1sJFtXlXRdPTASwlgh0FhXXx3J2qikHbwlCTQ6+ME0EDv453mgJ12qO4azpYqBkVj01uFsqQAAOG/FvcD+sGtufnYq7sLHx4v7mh+jpinLbihXW+my+QfzqcneeefWkW7Svem+6MK9xvtDtdaFjaXd1WKWSr2XZ6eWDqvuxS263Gm2t54W5VJLXXUDrXs0mPVocsee+Z39HTu+uXOWTX0ds2wsDXaKWXrqq7SLWrpYli561OW66WKR4/OeMDnZm+T6gxgcD006fSK6/b1+cZ6/Vp+CYp4PnDryTLv6SuP/8e7G/9Viv57ObwZwKN5Z7+/GTPMPAAAAy+uTW379ufjvHTfe98N2eUvj/4nuxv/xCFZ+Kjg72nEi3v//yFgI9Vvrj2eBL8Xm3jsWwivrqZlYIruh/pWxxFQW+FI8YLIultg201zVqhg4ngR+OpoHTiSBkzGQH6U4FvJDOX8/GsLr66mtzSX2xhLjSeDtMTCRBCZjYCoJrI6B6STwxOo8MJME/i0Gwlzzurpzdb6uAAAAliIfZ/U3Pw3pOO94X6cMlU4Zhjpl6OmUodopQ6texOdfjhn6k4tXKoVM/Wmtg0ktpQzxZvhLXq5ShvD95pxpwVLT8fqDxvUGleYMd7+prxraKI3/p7ob/w81P2atn4zj/4X7/2WBb8fF+0y8dHwiBn7y5uZAfmDgZBzs3tSoaiYvkQ/ab4olpmNgIgnsjYHpJLBtax44+pLmQD7SbjR+pNH4XF6iEAAAAIBzLh4giIdp4vj/1v2fGG5XrjT+n+5u/B/bGy429vFY66nVIXy1srA0jcD6kSwQj2OMxJ/Hv2wkhAsKBzgaJWaHshIDScPhW4PZL9QH0qq+Ppj9+CA+v+oH997zqVrilsEQ1hSOvjTaeKiatTGYBi4ZyAJDaWBPXxaIR34aga/1ZAE4Y42jgvEDlV/q0jC+eLkWn78Xyj1B0+6VjoEukm+x31wtl9IB1/yYasPS3ra2x285a0pfjxO+bSvx2zbu21bckcr3UJ5bCFVDz87ZXduvmz8QXyn+krVkmd7n4q9Uu0mfhc/hodNf2s6q6QJMJZuPqcXLLf45rMTqPv3dNbf3rnvbd+5av+axY6878njXi9FC/KHwvR/915EfFVbvcquG/DO34rYnM7YnK+K/geTbPeFtCyFsfeKzN7WLl8b/M92N//uSx7pfx5W5fyyE1xRW7v1x9f/xWLYdLASyreSLyoHslPt/jbbccgIAAMDZ1jjc0TheMJc/ZheEp+Pkcv6ZJeaPxyumF83f7XIP/fW717SLl8b/29qP/1cli+n8v/P/LBPn/xd1vh+KXpW+cOiMDkWXqmNZOP+/qPP92+b8/6Kc/3f+fzHO/3fg/P+izve3rbSXtNdOVwjhsT/65gOhcOe3VGn8v7e78b/5/xaftK8x/9+2VvP/7W01/98h8/8BAADLqsVEc+k4rzR7XylDOntfKUPHCQI7TjFo/r8lz//36MUP/Sa0URr/H+pu/B8/DsPF1lfK/H8TW1tUdXMM7G03MWDlUP24h4kBAQAAOOdaHSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+XX3P/zPznbx+357xQMPXz39/sNbrn7io1dc+L0Q5uqvV7JwZejGz0//4vbL7zh896Zb7zp15Wurebn+/PF3m3LHWp8dDeFo4ZWRmHhytPZkIXDVW+842FdL3D8awquLgd2Hd19QS3xxNIS1xcA97173klricFriGw9f/mgt8Z408Jb1Fz5dS1yWByrp4v7j6mxxK+nifmp1CGOFQGNx37+6uapGG3+aB3rSNv5pJGsjBkZi0c+NZG3EwHwsMbcqhA19IfSmVd1XzarqTav6l2pWVW9a1ceqIVwWQuhLq3p4IKuqL+359wayqmLgolcde+qSWuLoQAgbioEfvuu219cSH0wCjcb/YiCEV9Q+MmnjX+7PGu9PG7+lP4SXhxAG0hK/6stKDKQlHukL4UWFQKPx9/WFcDDwghA3Pk1btP0Hr9+9fX5+dt8yJgbytgbDrrn52ckde+Z3VpNlaqVSSD93w+n3/cGnPrKj9vjOO7eOdJPuy8v11xd5U3/T083n+9LH5RoqVrLwfpTqj/kHwnBYdd3+2X2TH95+4MC+jdnfbrNvyv725tFsXW1cKetqbbGSDQeu3bth/8Hr189du/2a2WtmP7DxDZumLp3aPPXGSzfUejWV/T0bXb3t3Hf14r5CJediAyAhIbHSEj1NW7ep831DXtrRX1jQ/lCtb6BLw4pilkq9l2ej01tOs8ens5/SsUcbSwOHUpZNi2S5oTnL5tJgYqGWwSxLfb+uNDgsNtZTX6XxeU+YnOxttR7Gm58WV+/Pz2D1/jhfdYulq4u8DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//8YvSUZ") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$restrict_keyring(0x4, 0xfffffffffffffffc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x2, "0813"}, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) bind$alg(r4, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x533180, 0x0) r6 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xc4d, 0x400, 0x0, 0x0, 0x0, r5}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, 0x0) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) 2.328814331s ago: executing program 2 (id=1059): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2.239114631s ago: executing program 1 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x10) write$dsp(r4, &(0x7f0000000140)="f3", 0x1) dup2(r3, r4) 1.936883872s ago: executing program 3 (id=1061): munlock(&(0x7f0000ff6000/0x2000)=nil, 0x2000) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000280)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 1.892052443s ago: executing program 4 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4204, 0xffffffff, @mcast1, 0xd57a}}, 0x1}, 0x90) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, 0x0) 227.5054ms ago: executing program 2 (id=1063): socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x6, &(0x7f0000000000)=0x40006, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) 207.22076ms ago: executing program 4 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80def3, 0x8000000000000003}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.373851ms ago: executing program 2 (id=1065): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) dup3(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x20) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME\nSYNTH \'Synth Capture\''], 0x32) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) dup3(r9, r8, 0x0) 0s ago: executing program 3 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x0, 0x3, 0x10000, 0xffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{0x0}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) kernel console output (not intermixed with test programs): [ 68.554530][ T4270] cramfs: root is not a directory [ 69.261886][ T4256] BTRFS info (device loop3): enabling ssd optimizations [ 70.112478][ T4313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.396002][ T4320] netlink: 'syz.0.13': attribute type 29 has an invalid length. [ 70.435135][ T4320] Zero length message leads to an empty skb [ 71.070879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 71.270477][ T4324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 71.280925][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.287590][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.821807][ T4341] loop1: detected capacity change from 0 to 128 [ 71.989634][ T4341] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 72.019859][ T4341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.952628][ T4349] loop3: detected capacity change from 0 to 512 [ 73.104384][ T4349] FAT-fs (loop3): bogus logical sector size 0 [ 73.111011][ T4349] FAT-fs (loop3): Can't find a valid FAT filesystem [ 73.571208][ T4353] netlink: 64 bytes leftover after parsing attributes in process `syz.1.24'. [ 74.021671][ T4364] netlink: 'syz.3.27': attribute type 29 has an invalid length. [ 75.141039][ T4372] netlink: 'syz.1.29': attribute type 29 has an invalid length. [ 76.950480][ T4387] loop1: detected capacity change from 0 to 128 [ 77.058514][ T4387] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 77.084940][ T4387] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.722995][ T4391] loop3: detected capacity change from 0 to 512 [ 77.781236][ T4391] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 79.167310][ T4403] loop3: detected capacity change from 0 to 32768 [ 79.233012][ T4403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.37 (4403) [ 79.284821][ T4403] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 79.293725][ T4403] BTRFS info (device loop3): setting nodatasum [ 79.299986][ T4403] BTRFS info (device loop3): force zlib compression, level 3 [ 79.307464][ T4403] BTRFS info (device loop3): use zlib compression, level 3 [ 79.314694][ T4403] BTRFS info (device loop3): force clearing of disk cache [ 79.321870][ T4403] BTRFS info (device loop3): enabling auto defrag [ 79.328671][ T4403] BTRFS error (device loop3): unrecognized mount option 'rootcontext=root' [ 79.343667][ T4403] BTRFS error (device loop3): open_ctree failed [ 79.395824][ T4212] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.679782][ T4212] usb 2-1: Using ep0 maxpacket: 16 [ 79.825993][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.889432][ T4414] netlink: 'syz.3.40': attribute type 29 has an invalid length. [ 80.574785][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.585021][ T4212] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 80.594725][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.657305][ T4212] usb 2-1: config 0 descriptor?? [ 80.753504][ T4409] loop2: detected capacity change from 0 to 1024 [ 80.824427][ T4418] loop0: detected capacity change from 0 to 512 [ 80.946128][ T4212] usbhid 2-1:0.0: can't add hid device: -71 [ 80.956294][ T4212] usbhid: probe of 2-1:0.0 failed with error -71 [ 80.992184][ T4418] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.020890][ T4212] usb 2-1: USB disconnect, device number 2 [ 81.026552][ T4418] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.42: casefold flag without casefold feature [ 81.145114][ T4418] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.42: couldn't read orphan inode 15 (err -117) [ 81.163781][ T4418] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 81.396975][ T4409] EXT4-fs (loop2): Test dummy encryption mode enabled [ 81.459187][ T4427] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.935873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 82.243636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 82.286030][ T1110] cfg80211: failed to load regulatory.db [ 82.322069][ T4409] EXT4-fs (loop2): Ignoring removed orlov option [ 82.376172][ T4409] EXT4-fs: failed to create workqueue [ 82.386227][ T4409] EXT4-fs (loop2): mount failed [ 82.878738][ T4437] dccp_close: ABORT with 32 bytes unread [ 83.180848][ T4448] loop4: detected capacity change from 0 to 512 [ 83.320721][ T4448] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768 [ 83.748308][ T4451] loop1: detected capacity change from 0 to 32768 [ 84.008917][ T4456] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 84.744881][ T4462] 9pnet_virtio: no channels available for device [ 84.802934][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 84.812462][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 84.825620][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.834666][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.843796][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.852982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.862009][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 85.529091][ T4468] process 'syz.3.52' launched './file0' with NULL argv: empty string added [ 86.087990][ T4183] Bluetooth: hci4: SCO packet for unknown connection handle 968 [ 86.434014][ T4470] loop3: detected capacity change from 0 to 4096 [ 86.552149][ T4470] ntfs3: Unknown parameter '/dev/hwrng' [ 87.523384][ T4486] loop3: detected capacity change from 0 to 512 [ 87.645956][ T4486] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 87.895431][ T4473] loop2: detected capacity change from 0 to 32768 [ 88.018004][ T4473] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.57 (4473) [ 88.209332][ T4473] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 88.255832][ T4473] BTRFS info (device loop2): enabling auto defrag [ 88.264863][ T4473] BTRFS info (device loop2): doing ref verification [ 88.308924][ T4473] BTRFS info (device loop2): use no compression [ 88.338973][ T4499] loop3: detected capacity change from 0 to 128 [ 88.369811][ T4473] BTRFS info (device loop2): force clearing of disk cache [ 88.413445][ T4499] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 88.432401][ T4499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.521629][ T4473] BTRFS info (device loop2): max_inline at 4096 [ 88.552055][ T4473] BTRFS info (device loop2): disabling free space tree [ 88.565820][ T4473] BTRFS info (device loop2): has skinny extents [ 89.381529][ T4524] loop3: detected capacity change from 0 to 16 [ 89.600751][ T4524] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 90.290173][ T4513] loop3: detected capacity change from 0 to 512 [ 90.519302][ T4513] FAT-fs (loop3): bogus logical sector size 0 [ 90.528029][ T4473] BTRFS error (device loop2): open_ctree failed [ 90.555264][ T4513] FAT-fs (loop3): Can't find a valid FAT filesystem [ 91.493729][ T4541] loop1: detected capacity change from 0 to 512 [ 91.531596][ T4541] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 768 [ 91.542222][ T4542] loop3: detected capacity change from 0 to 64 [ 92.467127][ T4548] loop4: detected capacity change from 0 to 2048 [ 92.553039][ T4548] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 92.772801][ T4548] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 92.799641][ T4548] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 92.807508][ T4548] UDF-fs: Scanning with blocksize 512 failed [ 92.830733][ T4548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.918298][ T4559] loop3: detected capacity change from 0 to 128 [ 93.019341][ T4559] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 93.047709][ T4559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.176764][ T4568] loop3: detected capacity change from 0 to 1024 [ 94.357074][ T4568] ======================================================= [ 94.357074][ T4568] WARNING: The mand mount option has been deprecated and [ 94.357074][ T4568] and is ignored by this kernel. Remove the mand [ 94.357074][ T4568] option from the mount to silence this warning. [ 94.357074][ T4568] ======================================================= [ 94.391947][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.432832][ T4555] loop2: detected capacity change from 0 to 32768 [ 94.505768][ T4555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.77 (4555) [ 94.584040][ T4574] loop0: detected capacity change from 0 to 64 [ 94.605819][ T4568] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.625678][ T4555] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 94.635387][ T4555] BTRFS info (device loop2): using free space tree [ 94.642503][ T4555] BTRFS info (device loop2): has skinny extents [ 94.651283][ T4568] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.933073][ T4608] loop0: detected capacity change from 0 to 512 [ 96.015609][ T4609] netlink: 'syz.4.83': attribute type 29 has an invalid length. [ 96.103251][ T4608] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 768 [ 96.576008][ T4555] BTRFS error (device loop2): open_ctree failed [ 98.099287][ T4619] loop1: detected capacity change from 0 to 256 [ 98.316334][ T4627] loop0: detected capacity change from 0 to 512 [ 100.131524][ T4630] loop4: detected capacity change from 0 to 32768 [ 100.266923][ T4627] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.274917][ T4627] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.89: casefold flag without casefold feature [ 100.309962][ T4627] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.89: couldn't read orphan inode 15 (err -117) [ 100.448917][ T4627] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 100.809653][ T4653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.009411][ T4654] loop1: detected capacity change from 0 to 16 [ 101.324768][ T4654] erofs: (device loop1): mounted with root inode @ nid 36. [ 101.521176][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 101.593272][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 101.982224][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 102.012480][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 311295 of nid 36 [ 102.154131][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 102.695990][ T4672] loop0: detected capacity change from 0 to 32768 [ 102.702984][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 102.776077][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 102.949190][ T4677] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 103.324608][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 103.338466][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 103.348526][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 103.384242][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 103.405957][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 103.433627][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 103.459997][ T4651] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.471820][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 103.473672][ T4679] loop2: detected capacity change from 0 to 512 [ 103.491524][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 103.520875][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 103.559978][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 249855 of nid 36 [ 103.571983][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 103.587291][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 245759 of nid 36 [ 103.601082][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 103.612673][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 241663 of nid 36 [ 103.648497][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 103.682838][ T4679] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 103.694072][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 103.711660][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 233471 of nid 36 [ 103.842868][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 103.863694][ T4651] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 54 of nid 36 [ 103.893976][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 103.914109][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36 [ 103.953493][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 104.106736][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 104.232550][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 104.447507][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 104.473387][ T4651] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 104.484973][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 104.709326][ T4651] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 47 of nid 36 [ 104.749945][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 104.855722][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 104.865123][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 104.904377][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 104.949002][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 104.996039][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 105.055777][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 105.131828][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36 [ 105.215720][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 105.287168][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 105.334700][ T4697] loop0: detected capacity change from 0 to 32768 [ 105.342680][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 105.351852][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 105.362001][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 105.371378][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36 [ 105.382321][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 105.391893][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 105.415682][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 159743 of nid 36 [ 105.430780][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 105.457135][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 105.469779][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 147455 of nid 36 [ 105.506224][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 105.525698][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 143359 of nid 36 [ 105.555645][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 105.660757][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 105.721893][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 114687 of nid 36 [ 105.745913][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 105.754988][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 105.764468][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 105.773590][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 102399 of nid 36 [ 105.783728][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 105.792969][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 105.803251][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 105.812655][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 105.835720][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 105.845120][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 105.866390][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 36 [ 105.875471][ T4651] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 105.895827][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 105.925747][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 105.934749][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 105.946453][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 105.971571][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 36 [ 106.004080][ T4651] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 106.019014][ T4651] attempt to access beyond end of device [ 106.019014][ T4651] loop1: rw=524288, want=1049280, limit=16 [ 106.041240][ T4651] attempt to access beyond end of device [ 106.041240][ T4651] loop1: rw=524288, want=6536, limit=16 [ 106.066648][ T4651] attempt to access beyond end of device [ 106.066648][ T4651] loop1: rw=524288, want=34359736344, limit=16 [ 106.110399][ T4651] attempt to access beyond end of device [ 106.110399][ T4651] loop1: rw=524288, want=736, limit=16 [ 106.126651][ T4651] attempt to access beyond end of device [ 106.126651][ T4651] loop1: rw=524288, want=536576872, limit=16 [ 106.138420][ T4651] attempt to access beyond end of device [ 106.138420][ T4651] loop1: rw=524288, want=13478624040, limit=16 [ 106.150426][ T4651] attempt to access beyond end of device [ 106.150426][ T4651] loop1: rw=524288, want=790400, limit=16 [ 106.162754][ T4651] attempt to access beyond end of device [ 106.162754][ T4651] loop1: rw=524288, want=88, limit=16 [ 106.181974][ T4651] attempt to access beyond end of device [ 106.181974][ T4651] loop1: rw=524288, want=1183616, limit=16 [ 106.195937][ T4651] attempt to access beyond end of device [ 106.195937][ T4651] loop1: rw=524288, want=312, limit=16 [ 107.742061][ T4724] loop4: detected capacity change from 0 to 32768 [ 107.890477][ T4727] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 109.062857][ T4736] loop1: detected capacity change from 0 to 32768 [ 111.459255][ T4761] loop0: detected capacity change from 0 to 128 [ 111.530762][ T4761] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 111.555057][ T4761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.784360][ T4775] loop0: detected capacity change from 0 to 32768 [ 114.045494][ T4787] loop3: detected capacity change from 0 to 128 [ 115.248921][ T4787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 115.287704][ T4787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.979240][ T4829] loop0: detected capacity change from 0 to 4096 [ 119.170062][ T4831] loop3: detected capacity change from 0 to 32768 [ 119.199264][ T4829] ntfs3: loop0: ino=3, Correct links count -> 2. [ 119.968398][ T26] audit: type=1800 audit(1731488757.901:2): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.141" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 119.992253][ T4835] loop2: detected capacity change from 0 to 128 [ 120.240447][ T4835] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 120.358666][ T4835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.197734][ T4858] loop2: detected capacity change from 0 to 2048 [ 123.486876][ T4858] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.502216][ T4215] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.526747][ T4215] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1442 with error 28 [ 124.541797][ T4215] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.541797][ T4215] [ 124.552041][ T4215] EXT4-fs (loop2): Total free blocks count 0 [ 124.558667][ T4215] EXT4-fs (loop2): Free/Dirty block details [ 124.565002][ T4215] EXT4-fs (loop2): free_blocks=2415919104 [ 124.573629][ T4215] EXT4-fs (loop2): dirty_blocks=1456 [ 124.579303][ T4215] EXT4-fs (loop2): Block reservation details [ 124.585331][ T4215] EXT4-fs (loop2): i_reserved_data_blocks=91 [ 125.867431][ T4883] loop2: detected capacity change from 0 to 32768 [ 128.344595][ T4912] loop2: detected capacity change from 0 to 128 [ 128.390807][ T4912] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 128.402925][ T4912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.743917][ T4902] loop1: detected capacity change from 0 to 32768 [ 130.459416][ T4927] loop0: detected capacity change from 0 to 32768 [ 130.483700][ T4926] loop3: detected capacity change from 0 to 512 [ 130.508310][ T4902] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.541114][ T4902] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 131.619777][ T4926] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.637743][ T4926] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.170: casefold flag without casefold feature [ 131.659094][ T4902] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 131.761734][ T4926] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.170: couldn't read orphan inode 15 (err -117) [ 131.795351][ T4926] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 131.812041][ T1110] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 131.824299][ T1110] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 132.717869][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.724213][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.738199][ T4948] loop4: detected capacity change from 0 to 1024 [ 132.943693][ T1110] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1119ms [ 132.957281][ T1110] gfs2: fsid=syz:syz.0: jid=0: Done [ 132.963798][ T4902] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 133.011663][ T4948] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 134.136771][ T4902] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 134.523555][ T4948] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 134.631179][ T26] audit: type=1804 audit(1731488772.556:3): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.177" name="/newroot/33/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 134.707786][ T26] audit: type=1804 audit(1731488772.586:4): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.177" name="/newroot/33/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 135.044906][ T4969] loop0: detected capacity change from 0 to 512 [ 135.128822][ T4969] FAT-fs (loop0): bogus logical sector size 0 [ 135.135066][ T4969] FAT-fs (loop0): Can't find a valid FAT filesystem [ 136.335628][ T4976] loop0: detected capacity change from 0 to 32768 [ 136.349759][ T4978] loop4: detected capacity change from 0 to 128 [ 136.597167][ T4978] befs: Invalid uid -1, using default [ 136.602902][ T4978] befs: (loop4): No write support. Marking filesystem read-only [ 136.626114][ T4978] befs: (loop4): invalid magic header [ 138.553752][ T4987] loop4: detected capacity change from 0 to 32768 [ 138.759062][ T4987] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 139.948448][ T5010] loop1: detected capacity change from 0 to 32768 [ 141.659241][ T5027] loop1: detected capacity change from 0 to 32768 [ 141.674779][ T5028] loop3: detected capacity change from 0 to 128 [ 143.545965][ T5030] loop0: detected capacity change from 0 to 40427 [ 143.601130][ T5028] befs: Invalid uid -1, using default [ 143.606646][ T5028] befs: (loop3): No write support. Marking filesystem read-only [ 143.670009][ T5028] befs: (loop3): invalid magic header [ 143.771829][ T5030] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 143.779917][ T5030] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 143.798954][ T5030] F2FS-fs (loop0): invalid crc value [ 143.959207][ T5030] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.104798][ T5030] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 144.112231][ T5030] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.791834][ T5046] handle_bad_sector: 3 callbacks suppressed [ 144.791885][ T5046] attempt to access beyond end of device [ 144.791885][ T5046] loop0: rw=2049, want=78344, limit=40427 [ 144.914304][ T5046] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 145.290788][ T5045] loop4: detected capacity change from 0 to 32768 [ 145.378347][ T5043] loop2: detected capacity change from 0 to 2048 [ 145.538572][ T5045] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 145.575885][ T5043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.016923][ T5051] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 146.033832][ T5051] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 147.357066][ T5064] loop4: detected capacity change from 0 to 32768 [ 150.404147][ T5086] loop1: detected capacity change from 0 to 32768 [ 150.421017][ T5088] loop4: detected capacity change from 0 to 128 [ 151.205340][ T5088] befs: Invalid uid -1, using default [ 151.211008][ T5088] befs: (loop4): No write support. Marking filesystem read-only [ 151.221731][ T5088] befs: (loop4): invalid magic header [ 151.920050][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 153.386004][ T4321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.799345][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 155.890217][ T4321] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.965732][ T4321] usb 5-1: config 1 has no interface number 1 [ 155.972349][ T4321] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 156.246186][ T4321] usb 5-1: string descriptor 0 read error: -71 [ 156.252497][ T4321] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.514213][ T5135] loop0: detected capacity change from 0 to 32768 [ 156.527524][ T5137] loop2: detected capacity change from 0 to 128 [ 156.537081][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.686244][ T4321] usb 5-1: can't set config #1, error -71 [ 156.713911][ T4321] usb 5-1: USB disconnect, device number 2 [ 157.276977][ T5137] befs: Invalid uid -1, using default [ 157.282492][ T5137] befs: (loop2): No write support. Marking filesystem read-only [ 157.297221][ T5137] befs: (loop2): invalid magic header [ 160.662164][ T5163] loop3: detected capacity change from 0 to 512 [ 161.280750][ T5163] FAT-fs (loop3): bogus logical sector size 0 [ 161.287003][ T5163] FAT-fs (loop3): Can't find a valid FAT filesystem [ 161.341639][ T5165] loop0: detected capacity change from 0 to 2048 [ 161.464254][ T5165] NILFS (loop0): invalid segment: Sequence number mismatch [ 161.519307][ T5165] NILFS (loop0): trying rollback from an earlier position [ 161.574822][ T5165] NILFS (loop0): recovery complete [ 162.544842][ T5169] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.594159][ T5175] loop3: detected capacity change from 0 to 256 [ 162.713774][ T5175] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 162.911904][ T5178] loop1: detected capacity change from 0 to 32768 [ 163.956469][ T5175] exFAT-fs (loop3): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 163.956469][ T5175] [ 163.979340][ T5175] exFAT-fs (loop3): Filesystem has been set read-only [ 164.045621][ T5175] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805a8d0160 iblock : 0, err : -5) [ 164.257635][ T5188] loop3: detected capacity change from 0 to 512 [ 164.329155][ T5188] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 167.381369][ T5196] sched: RT throttling activated [ 167.673093][ T5209] loop0: detected capacity change from 0 to 2048 [ 167.811472][ T5211] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.934691][ T5209] attempt to access beyond end of device [ 167.934691][ T5209] loop0: rw=0, want=19791209300042, limit=2048 [ 167.961700][ T5209] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 167.991424][ T5213] attempt to access beyond end of device [ 167.991424][ T5213] loop0: rw=0, want=19791209300042, limit=2048 [ 168.013884][ T5213] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 168.067854][ T5209] attempt to access beyond end of device [ 168.067854][ T5209] loop0: rw=0, want=19791209300042, limit=2048 [ 168.087638][ T5217] loop4: detected capacity change from 0 to 1024 [ 168.094220][ T5209] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 168.115738][ T5209] attempt to access beyond end of device [ 168.115738][ T5209] loop0: rw=0, want=19791209300042, limit=2048 [ 168.158199][ T5209] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 168.192514][ T5213] attempt to access beyond end of device [ 168.192514][ T5213] loop0: rw=0, want=19791209300042, limit=2048 [ 168.249762][ T5213] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 168.287106][ T5209] attempt to access beyond end of device [ 168.287106][ T5209] loop0: rw=0, want=19791209300042, limit=2048 [ 168.317457][ T5209] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 168.356958][ T5224] attempt to access beyond end of device [ 168.356958][ T5224] loop0: rw=0, want=19791209300042, limit=2048 [ 168.387076][ T4226] hfsplus: b-tree write err: -5, ino 4 [ 168.522452][ T5224] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 168.571705][ T5222] loop3: detected capacity change from 0 to 32768 [ 168.893082][ T5209] attempt to access beyond end of device [ 168.893082][ T5209] loop0: rw=0, want=19791209300042, limit=2048 [ 168.929349][ T5209] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 169.113008][ T5213] attempt to access beyond end of device [ 169.113008][ T5213] loop0: rw=0, want=19791209300042, limit=2048 [ 169.266256][ T5213] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 169.420169][ T5209] attempt to access beyond end of device [ 169.420169][ T5209] loop0: rw=0, want=19791209300042, limit=2048 [ 169.585945][ T5209] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 169.680277][ T5224] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 169.686091][ T5239] loop4: detected capacity change from 0 to 512 [ 169.934617][ T5239] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768 [ 171.214659][ T5249] loop4: detected capacity change from 0 to 512 [ 171.886854][ T5249] FAT-fs (loop4): bogus logical sector size 0 [ 171.892989][ T5249] FAT-fs (loop4): Can't find a valid FAT filesystem [ 173.323495][ T5263] loop4: detected capacity change from 0 to 2048 [ 173.339968][ T5265] loop2: detected capacity change from 0 to 256 [ 173.552470][ T5269] loop0: detected capacity change from 0 to 32768 [ 173.578309][ T5263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.601216][ T5265] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 174.120598][ T5267] exFAT-fs (loop2): hint_cluster is invalid (17) [ 174.352908][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 174.389526][ T5263] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 174.405597][ T5263] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 174.709874][ T5279] loop1: detected capacity change from 0 to 512 [ 174.809123][ T5279] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 768 [ 175.684434][ T5283] loop0: detected capacity change from 0 to 32768 [ 176.534751][ T5294] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 182.015795][ T5312] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 182.049041][ T5312] IPv6: sit1: Disabled Multicast RS [ 182.064347][ T4614] Bluetooth: hci3: command 0x0406 tx timeout [ 182.080446][ T4614] Bluetooth: hci2: command 0x0406 tx timeout [ 182.087446][ T4614] Bluetooth: hci1: command 0x0406 tx timeout [ 182.098081][ T4614] Bluetooth: hci4: command 0x0406 tx timeout [ 183.342437][ T5322] loop3: detected capacity change from 0 to 2048 [ 183.379047][ T5328] loop2: detected capacity change from 0 to 512 [ 183.425345][ T5315] loop0: detected capacity change from 0 to 8192 [ 183.511870][ T5328] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 183.558162][ T5322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.055041][ T5339] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 185.069391][ T5339] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 185.494443][ T4614] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 185.815760][ T5343] loop4: detected capacity change from 0 to 40427 [ 185.935932][ T4614] usb 2-1: Using ep0 maxpacket: 8 [ 186.022717][ T5343] F2FS-fs (loop4): invalid crc value [ 186.097592][ T5343] F2FS-fs (loop4): Found nat_bits in checkpoint [ 186.106066][ T4614] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 186.145012][ T4614] usb 2-1: config 0 has no interface number 0 [ 186.325965][ T4614] usb 2-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 186.384210][ T4614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.424017][ T4614] usb 2-1: Product: syz [ 186.496477][ T5343] F2FS-fs (loop4): Start checkpoint disabled! [ 186.617228][ T4614] usb 2-1: Manufacturer: syz [ 186.621955][ T4614] usb 2-1: SerialNumber: syz [ 186.636677][ T4614] usb 2-1: config 0 descriptor?? [ 186.646981][ T5343] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 187.433468][ T4614] ums-usbat 2-1:0.79: USB Mass Storage device detected [ 187.558524][ T4614] usb 2-1: USB disconnect, device number 4 [ 187.742775][ T4388] handle_bad_sector: 1 callbacks suppressed [ 187.742793][ T4388] attempt to access beyond end of device [ 187.742793][ T4388] loop4: rw=2049, want=40968, limit=40427 [ 187.836272][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 188.928884][ T5377] loop1: detected capacity change from 0 to 1024 [ 189.067449][ T5377] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 189.075390][ T5377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=d802e028, mo2=0000] [ 189.214921][ T5377] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.267905][ T5377] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 189.333063][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 189.360828][ T5377] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.297: mark_inode_dirty error [ 189.398990][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 189.419261][ T5377] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.297: Invalid block bitmap block 3 in block_group 0 [ 189.481869][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 189.497975][ T5377] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 189.527977][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 189.534531][ T5377] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.297: mark_inode_dirty error [ 189.602537][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 189.615744][ T5377] Quota error (device loop1): write_blk: dquota write failed [ 189.623718][ T5377] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 1: comm syz.1.297: lblock 6 mapped to illegal pblock 1 (length 1) [ 189.818721][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 189.838127][ T5377] Quota error (device loop1): write_blk: dquota write failed [ 189.921297][ T5377] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 189.987538][ T5377] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 48: comm syz.1.297: lblock 0 mapped to illegal pblock 48 (length 1) [ 190.196305][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 190.219637][ T5377] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 190.250422][ T5377] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.297: Failed to acquire dquot type 0 [ 190.507581][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 190.521559][ T5377] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 49: comm syz.1.297: lblock 1 mapped to illegal pblock 49 (length 1) [ 190.541298][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 190.552279][ T5377] Quota error (device loop1): do_insert_tree: Can't read tree quota block 1 [ 190.563811][ T5377] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 190.790732][ T5377] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.297: Failed to acquire dquot type 0 [ 190.883494][ T5395] loop4: detected capacity change from 0 to 2048 [ 190.937283][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 190.944178][ T5377] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 191.074077][ T5395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.092209][ T5399] loop0: detected capacity change from 0 to 512 [ 191.098969][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 191.105501][ T5377] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #15: comm syz.1.297: mark_inode_dirty error [ 191.159224][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 191.223042][ T5377] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 191.258112][ T5377] EXT4-fs (loop1): 1 orphan inode deleted [ 191.279815][ T5399] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 768 [ 191.298112][ T5377] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,data_err=abort,debug,errors=remount-ro,abort,noblock_validity,barrier,min_batch_time=0x0000000000000577,. Quota mode: none. [ 191.319355][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.523493][ T5404] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 191.537717][ T5404] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 191.922965][ T5377] syz.1.297 (5377) used greatest stack depth: 17112 bytes left [ 192.990145][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 193.388273][ T5421] netlink: 'syz.0.307': attribute type 29 has an invalid length. [ 194.158706][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165116][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.448145][ T5430] loop0: detected capacity change from 0 to 128 [ 196.219097][ T5430] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 196.231178][ T5430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.297635][ T5440] loop1: detected capacity change from 0 to 2048 [ 197.420175][ T5448] loop4: detected capacity change from 0 to 1024 [ 197.428159][ T5440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.561700][ T4614] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 197.650646][ T5448] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.663474][ T5448] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.002573][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 199.295783][ T4614] usb 3-1: config 0 has no interfaces? [ 199.423392][ T5469] netlink: 'syz.4.319': attribute type 29 has an invalid length. [ 200.175984][ T4614] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 200.203076][ T5471] loop3: detected capacity change from 0 to 512 [ 200.285161][ T4614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.293759][ T4614] usb 3-1: Product: syz [ 200.298036][ T4614] usb 3-1: Manufacturer: syz [ 200.302653][ T4614] usb 3-1: SerialNumber: syz [ 200.309795][ T4614] usb 3-1: config 0 descriptor?? [ 200.325890][ T4614] usb 3-1: can't set config #0, error -71 [ 200.334264][ T5471] EXT4-fs (loop3): orphan cleanup on readonly fs [ 200.342952][ T4614] usb 3-1: USB disconnect, device number 2 [ 200.362556][ T5471] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.321: casefold flag without casefold feature [ 200.388184][ T5475] syz.2.323 uses obsolete (PF_INET,SOCK_PACKET) [ 200.455014][ T5471] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.321: couldn't read orphan inode 15 (err -117) [ 200.525864][ T5461] loop1: detected capacity change from 0 to 32768 [ 200.538893][ T5471] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 200.551841][ T5478] device bond1 entered promiscuous mode [ 200.558493][ T5478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.582853][ T5478] bond1 (unregistering): Released all slaves [ 202.221610][ T5491] loop3: detected capacity change from 0 to 2048 [ 202.254057][ T5495] loop2: detected capacity change from 0 to 1024 [ 202.307867][ T5491] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.549046][ T5495] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.572914][ T5495] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.292161][ T5508] atomic_op ffff88807a5b0998 conn xmit_atomic 0000000000000000 [ 203.718679][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 203.881875][ T5516] netlink: 64 bytes leftover after parsing attributes in process `syz.2.333'. [ 203.906676][ T5516] capability: warning: `syz.2.333' uses 32-bit capabilities (legacy support in use) [ 204.682909][ T5519] loop0: detected capacity change from 0 to 512 [ 204.858373][ T5519] EXT4-fs (loop0): orphan cleanup on readonly fs [ 204.905148][ T5519] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.337: casefold flag without casefold feature [ 204.979003][ T5519] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.337: couldn't read orphan inode 15 (err -117) [ 205.052236][ T5519] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 205.850062][ T5533] loop3: detected capacity change from 0 to 2048 [ 206.713597][ T5541] loop2: detected capacity change from 0 to 1024 [ 206.740141][ T5533] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.018330][ T5548] loop4: detected capacity change from 0 to 128 [ 207.997057][ T5548] befs: Invalid uid -1, using default [ 208.002472][ T5548] befs: (loop4): No write support. Marking filesystem read-only [ 208.056398][ T5548] befs: (loop4): invalid magic header [ 208.176645][ T5541] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.222735][ T5541] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.570532][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 209.609020][ T5578] loop3: detected capacity change from 0 to 40427 [ 209.700000][ T5578] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 209.708039][ T5578] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 209.719417][ T5578] F2FS-fs (loop3): invalid crc value [ 209.834288][ T5578] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.930046][ T5589] netlink: 'syz.4.354': attribute type 29 has an invalid length. [ 210.664691][ T5578] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 210.672004][ T5578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 211.826089][ T5601] loop2: detected capacity change from 0 to 2048 [ 211.898852][ T5601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.786279][ T5612] loop2: detected capacity change from 0 to 4096 [ 213.931498][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 214.145256][ T5617] loop3: detected capacity change from 0 to 1024 [ 214.439628][ T5620] loop0: detected capacity change from 0 to 512 [ 214.964133][ T5620] FAT-fs (loop0): bogus logical sector size 0 [ 214.970576][ T5620] FAT-fs (loop0): Can't find a valid FAT filesystem [ 215.120984][ T5617] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.155716][ T5617] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.513404][ T5625] loop1: detected capacity change from 0 to 32768 [ 215.784795][ T5625] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 215.793100][ T5625] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 215.816758][ T5625] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 216.248546][ T1107] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 216.255433][ T1107] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 217.565744][ T5639] netlink: 'syz.0.366': attribute type 29 has an invalid length. [ 218.218920][ T5642] loop4: detected capacity change from 0 to 512 [ 218.232708][ T1107] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1977ms [ 218.256289][ T1107] gfs2: fsid=syz:syz.0: jid=0: Done [ 218.262673][ T5625] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 218.288695][ T5642] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768 [ 221.210826][ T5660] loop3: detected capacity change from 0 to 128 [ 221.469980][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 221.518122][ T5660] befs: Invalid uid -1, using default [ 221.523691][ T5660] befs: (loop3): No write support. Marking filesystem read-only [ 221.538390][ T5660] befs: (loop3): invalid magic header [ 221.922414][ T5665] 9pnet_virtio: no channels available for device [ 222.524721][ T5666] loop0: detected capacity change from 0 to 512 [ 222.795450][ T5669] loop3: detected capacity change from 0 to 2048 [ 222.936344][ T5669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.997469][ T5666] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 223.076710][ T5666] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.868742][ T5681] loop2: detected capacity change from 0 to 32768 [ 223.939252][ T5681] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 223.947887][ T5681] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 223.976398][ T5681] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 224.012673][ T4261] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 224.027261][ T4261] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 226.606356][ T5693] netlink: 'syz.3.381': attribute type 29 has an invalid length. [ 228.146364][ T4261] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 4119ms [ 228.154098][ T4261] gfs2: fsid=syz:syz.0: jid=0: Done [ 228.165856][ T5681] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 228.174630][ T5705] loop4: detected capacity change from 0 to 512 [ 228.224744][ T5705] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768 [ 228.452679][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 229.715048][ T5726] loop4: detected capacity change from 0 to 2048 [ 229.825377][ T5726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.198588][ T5732] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 230.211934][ T5732] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 233.638997][ T5748] loop0: detected capacity change from 0 to 32768 [ 233.813257][ T5750] loop4: detected capacity change from 0 to 32768 [ 233.886567][ T5751] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 233.997800][ T5750] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 234.008495][ T5750] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 234.039189][ T5750] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 2ms [ 234.058281][ T4321] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 234.065560][ T4321] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 234.355097][ T4321] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 289ms [ 234.420915][ T4321] gfs2: fsid=syz:syz.0: jid=0: Done [ 234.439414][ T5750] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 234.529060][ T5753] loop3: detected capacity change from 0 to 512 [ 234.654905][ T5753] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 235.983854][ T5770] loop3: detected capacity change from 0 to 512 [ 236.147537][ T5773] loop1: detected capacity change from 0 to 2048 [ 236.161271][ T5770] EXT4-fs (loop3): orphan cleanup on readonly fs [ 236.174480][ T5770] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.405: casefold flag without casefold feature [ 236.188426][ T5776] loop2: detected capacity change from 0 to 2048 [ 236.201053][ T5770] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.405: couldn't read orphan inode 15 (err -117) [ 236.226594][ T5773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.248377][ T5776] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.358496][ T5770] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 237.022789][ T5780] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 237.035764][ T5780] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 237.323414][ T5782] netlink: 64 bytes leftover after parsing attributes in process `syz.0.410'. [ 237.762511][ T4212] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 238.214548][ T5799] loop3: detected capacity change from 0 to 128 [ 238.285930][ T4212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.312357][ T4212] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 238.361274][ T5802] loop4: detected capacity change from 0 to 512 [ 238.376328][ T4212] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 238.396073][ T5799] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.417760][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.427236][ T5799] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.465693][ T4212] usb 3-1: config 0 descriptor?? [ 238.531108][ T4212] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 238.546787][ T5799] syz.3.414 (pid 5799) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 238.560646][ T5802] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768 [ 238.575370][ T4212] dvb-usb: bulk message failed: -22 (3/0) [ 238.619643][ T4212] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 238.666182][ T4212] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 238.683038][ T4212] usb 3-1: media controller created [ 238.705220][ T4212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.790243][ T4212] dvb-usb: bulk message failed: -22 (6/0) [ 238.846292][ T4212] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 238.929494][ T4212] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 238.945788][ T5804] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 238.983597][ T26] audit: type=1800 audit(1731488876.906:5): pid=5804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.414" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 239.606573][ T4212] dvb-usb: schedule remote query interval to 150 msecs. [ 239.613584][ T4212] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 239.626202][ T4212] usb 3-1: USB disconnect, device number 3 [ 240.043757][ T5820] netlink: 'syz.2.417': attribute type 29 has an invalid length. [ 241.129563][ T4212] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 241.445174][ T5825] loop3: detected capacity change from 0 to 2048 [ 241.515958][ T5825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.536387][ T5833] netlink: 64 bytes leftover after parsing attributes in process `syz.1.421'. [ 243.222252][ T5842] loop1: detected capacity change from 0 to 32768 [ 243.370017][ T5842] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 243.378391][ T5842] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 243.397026][ T5842] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 243.406609][ T4211] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 244.228992][ T5851] loop3: detected capacity change from 0 to 512 [ 244.287863][ T4211] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 244.298493][ T5854] loop4: detected capacity change from 0 to 512 [ 244.341066][ T5851] EXT4-fs (loop3): orphan cleanup on readonly fs [ 244.630120][ T5856] loop2: detected capacity change from 0 to 32768 [ 244.646099][ T5851] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.424: casefold flag without casefold feature [ 244.806869][ T5859] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 244.846719][ T5854] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768 [ 244.998334][ T5851] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.424: couldn't read orphan inode 15 (err -117) [ 245.205441][ T5851] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 245.516641][ T4211] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1228ms [ 245.524382][ T4211] gfs2: fsid=syz:syz.0: jid=0: Done [ 245.531656][ T5842] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 247.007561][ T5873] netlink: 'syz.2.430': attribute type 29 has an invalid length. [ 247.480378][ T5875] netlink: 64 bytes leftover after parsing attributes in process `syz.4.433'. [ 248.278597][ T5887] loop2: detected capacity change from 0 to 512 [ 249.022023][ T5887] FAT-fs (loop2): bogus logical sector size 0 [ 249.028251][ T5887] FAT-fs (loop2): Can't find a valid FAT filesystem [ 250.579259][ T5904] loop2: detected capacity change from 0 to 512 [ 250.690255][ T5904] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 251.804456][ T5911] loop1: detected capacity change from 0 to 512 [ 251.898300][ T5911] EXT4-fs (loop1): orphan cleanup on readonly fs [ 251.915141][ T5911] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.445: casefold flag without casefold feature [ 252.000172][ T5911] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.445: couldn't read orphan inode 15 (err -117) [ 252.120751][ T5911] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 252.325276][ T5921] netlink: 'syz.0.446': attribute type 29 has an invalid length. [ 253.697078][ T5927] loop3: detected capacity change from 0 to 512 [ 253.882509][ T5927] FAT-fs (loop3): bogus logical sector size 0 [ 253.889006][ T5927] FAT-fs (loop3): Can't find a valid FAT filesystem [ 255.597782][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.604157][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.938560][ T5951] loop1: detected capacity change from 0 to 512 [ 257.135264][ T5951] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 768 [ 257.287884][ T5957] netlink: 'syz.0.458': attribute type 29 has an invalid length. [ 259.047824][ T5969] loop1: detected capacity change from 0 to 512 [ 259.154527][ T5969] EXT4-fs (loop1): orphan cleanup on readonly fs [ 259.161772][ T5969] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.462: casefold flag without casefold feature [ 259.178448][ T5969] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.462: couldn't read orphan inode 15 (err -117) [ 259.225901][ T5969] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 259.827719][ T5976] loop2: detected capacity change from 0 to 512 [ 259.880596][ T5976] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 263.255831][ T6003] netlink: 'syz.4.470': attribute type 29 has an invalid length. [ 263.980795][ T6004] loop0: detected capacity change from 0 to 2048 [ 264.051775][ T6004] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.614212][ T6015] loop1: detected capacity change from 0 to 512 [ 264.775940][ T6015] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 768 [ 266.482388][ T6027] loop1: detected capacity change from 0 to 512 [ 267.037547][ T6032] loop0: detected capacity change from 0 to 512 [ 267.163165][ T6032] FAT-fs (loop0): bogus logical sector size 0 [ 267.169516][ T6032] FAT-fs (loop0): Can't find a valid FAT filesystem [ 267.278460][ T6027] EXT4-fs (loop1): orphan cleanup on readonly fs [ 267.522198][ T6027] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.479: casefold flag without casefold feature [ 267.609593][ T6027] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.479: couldn't read orphan inode 15 (err -117) [ 267.726454][ T6027] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 267.898931][ T6037] loop0: detected capacity change from 0 to 4096 [ 269.987394][ T6035] loop3: detected capacity change from 0 to 32768 [ 270.111561][ T6035] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 270.135720][ T6035] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 270.212861][ T6035] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 270.263700][ T4211] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 270.275148][ T4211] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 270.470906][ T4211] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 195ms [ 270.494310][ T4211] gfs2: fsid=syz:syz.0: jid=0: Done [ 270.504469][ T6035] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 271.195196][ T6059] loop3: detected capacity change from 0 to 2048 [ 271.329418][ T6059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.547966][ T6063] loop2: detected capacity change from 0 to 512 [ 271.646747][ T6063] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 272.683690][ T6077] loop2: detected capacity change from 0 to 512 [ 272.846946][ T6077] EXT4-fs (loop2): orphan cleanup on readonly fs [ 272.854283][ T6077] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.493: casefold flag without casefold feature [ 272.953802][ T6077] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.493: couldn't read orphan inode 15 (err -117) [ 272.954746][ T6077] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 274.303398][ T6100] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 276.239062][ T6112] loop0: detected capacity change from 0 to 2048 [ 276.335335][ T6115] loop2: detected capacity change from 0 to 512 [ 276.372019][ T6112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.431455][ T6115] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 277.738624][ T6129] loop0: detected capacity change from 0 to 64 [ 277.874089][ T6131] loop4: detected capacity change from 0 to 512 [ 278.053013][ T6131] EXT4-fs (loop4): orphan cleanup on readonly fs [ 278.074328][ T6131] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.507: casefold flag without casefold feature [ 278.133048][ T6131] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.507: couldn't read orphan inode 15 (err -117) [ 278.235654][ T6131] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 278.542296][ T6138] loop0: detected capacity change from 0 to 32768 [ 280.640859][ T6160] loop3: detected capacity change from 0 to 2048 [ 280.680194][ T6162] loop2: detected capacity change from 0 to 128 [ 280.790619][ T6162] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 280.807137][ T6160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.953947][ T6162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.481148][ T6165] loop4: detected capacity change from 0 to 512 [ 281.586737][ T6165] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768 [ 281.599284][ T6167] ptrace attach of "./syz-executor exec"[6168] was attempted by "./syz-executor exec"[6167] [ 282.755623][ T4612] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 283.038931][ T6176] loop4: detected capacity change from 0 to 32768 [ 283.436223][ T4612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.501379][ T4612] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 283.638697][ T4612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.701022][ T4612] usb 4-1: config 0 descriptor?? [ 283.789109][ T4612] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 283.813843][ T4612] usb 4-1: No valid video chain found. [ 284.003649][ T4612] usb 4-1: USB disconnect, device number 2 [ 284.351018][ T6192] loop1: detected capacity change from 0 to 16 [ 284.440377][ T6192] erofs: (device loop1): mounted with root inode @ nid 36. [ 285.972132][ T6207] loop3: detected capacity change from 0 to 2048 [ 286.156653][ T6207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.796337][ T6214] loop0: detected capacity change from 0 to 512 [ 286.884898][ T6214] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 768 [ 289.300505][ T6227] loop4: detected capacity change from 0 to 32768 [ 290.555133][ T6245] loop1: detected capacity change from 0 to 1024 [ 290.692551][ T6245] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.783355][ T6245] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 290.861321][ T6238] 9pnet_virtio: no channels available for device [ 290.899497][ T6245] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 257 with error 28 [ 290.943460][ T6245] EXT4-fs (loop1): This should not happen!! Data will be lost [ 290.943460][ T6245] [ 290.975136][ T6245] EXT4-fs (loop1): Total free blocks count 0 [ 291.003930][ T6245] EXT4-fs (loop1): Free/Dirty block details [ 291.032040][ T6245] EXT4-fs (loop1): free_blocks=68451041280 [ 291.052442][ T6245] EXT4-fs (loop1): dirty_blocks=272 [ 291.075729][ T6245] EXT4-fs (loop1): Block reservation details [ 291.081798][ T6245] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 291.404497][ T6260] loop0: detected capacity change from 0 to 2048 [ 291.430734][ T6263] 9pnet_virtio: no channels available for device [ 291.852603][ T6260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.250394][ T6266] loop1: detected capacity change from 0 to 512 [ 292.300594][ T6268] loop4: detected capacity change from 0 to 760 [ 292.340163][ T6266] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 768 [ 293.172778][ T6268] attempt to access beyond end of device [ 293.172778][ T6268] loop4: rw=524288, want=1124, limit=760 [ 293.306523][ T26] audit: type=1800 audit(1731488931.236:6): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.543" name="file1" dev="loop4" ino=1925 res=0 errno=0 [ 294.521744][ T6283] loop1: detected capacity change from 0 to 40427 [ 294.608264][ T6283] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 294.616184][ T6283] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 294.627626][ T6283] F2FS-fs (loop1): invalid crc value [ 294.681119][ T6283] F2FS-fs (loop1): Found nat_bits in checkpoint [ 294.782858][ T6283] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 294.789975][ T6283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 295.101558][ T6297] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 295.967396][ T6286] loop4: detected capacity change from 0 to 32768 [ 296.218031][ T6301] 9pnet_virtio: no channels available for device ÿÿÿÿÿÿÿÿ [ 296.688538][ T6307] loop2: detected capacity change from 0 to 64 [ 296.879722][ T6309] loop0: detected capacity change from 0 to 128 [ 296.928700][ T6309] befs: Invalid uid -1, using default [ 296.934179][ T6309] befs: (loop0): No write support. Marking filesystem read-only [ 296.945170][ T6309] befs: (loop0): invalid magic header [ 297.109971][ T6312] loop2: detected capacity change from 0 to 2048 [ 297.112748][ T6314] loop0: detected capacity change from 0 to 512 [ 297.196162][ T6316] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 297.210855][ T6312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.247411][ T6314] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 768 [ 298.536385][ T6326] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.674608][ T6331] 9pnet_virtio: no channels available for device ÿÿÿÿÿÿÿÿ [ 299.005664][ T4211] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 299.255753][ T4211] usb 3-1: Using ep0 maxpacket: 32 [ 299.376154][ T4211] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 299.411554][ T4211] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 299.484595][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.001178][ T4211] usb 3-1: config 0 descriptor?? [ 300.025910][ T6333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 300.047109][ T4211] hub 3-1:0.0: bad descriptor, ignoring hub [ 300.055738][ T4211] hub: probe of 3-1:0.0 failed with error -5 [ 300.063652][ T4211] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 301.197737][ T6359] loop1: detected capacity change from 0 to 2048 [ 301.268666][ T6359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.946951][ T4321] usb 3-1: USB disconnect, device number 4 [ 302.021230][ T6365] loop2: detected capacity change from 0 to 512 [ 302.201220][ T6365] EXT4-fs (loop2): orphan cleanup on readonly fs [ 302.225408][ T6365] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.569: casefold flag without casefold feature [ 302.246389][ T6365] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.569: couldn't read orphan inode 15 (err -117) [ 302.274103][ T6365] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 302.291970][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.410563][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.457865][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.465024][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.728492][ T6378] 9pnet_virtio: no channels available for device ÿÿÿÿÿÿÿÿ [ 303.423385][ T6392] loop1: detected capacity change from 0 to 128 [ 303.511809][ T6392] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 303.569479][ T6392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.916659][ T6396] fuse: Bad value for 'fd' [ 304.217776][ T6400] loop2: detected capacity change from 0 to 2048 [ 304.426827][ T6400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.442625][ T6408] loop4: detected capacity change from 0 to 2048 [ 305.625249][ T6408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.889455][ T6408] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 305.903454][ T6408] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 305.989560][ T6417] 9pnet_virtio: no channels available for device [ 307.062416][ T6431] loop3: detected capacity change from 0 to 512 [ 307.852979][ T6431] EXT4-fs (loop3): orphan cleanup on readonly fs [ 307.873688][ T6431] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.590: casefold flag without casefold feature [ 307.921381][ T6431] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.590: couldn't read orphan inode 15 (err -117) [ 308.017956][ T6431] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 308.177285][ T6444] loop1: detected capacity change from 0 to 512 [ 308.332824][ T6444] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.593: casefold flag without casefold feature [ 308.360354][ T6444] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.593: couldn't read orphan inode 15 (err -117) [ 308.401740][ T6444] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.446314][ T26] audit: type=1800 audit(1731488946.376:7): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.593" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 308.994712][ T6452] loop0: detected capacity change from 0 to 2048 [ 309.117138][ T6452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.500580][ T6473] loop2: detected capacity change from 0 to 128 [ 310.660934][ T6473] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 310.824907][ T6473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.391846][ T6488] loop1: detected capacity change from 0 to 512 [ 312.469913][ T6488] EXT4-fs (loop1): orphan cleanup on readonly fs [ 312.484741][ T6489] 9pnet_virtio: no channels available for device [ 312.495749][ T6488] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.605: casefold flag without casefold feature [ 312.524407][ T6488] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.605: couldn't read orphan inode 15 (err -117) [ 312.577408][ T6488] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 314.254050][ T6505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 315.015409][ T6508] loop2: detected capacity change from 0 to 512 [ 315.120155][ T6508] EXT4-fs (loop2): Ignoring removed nobh option [ 315.121133][ T6510] loop0: detected capacity change from 0 to 512 [ 315.135687][ T6508] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 315.164636][ T6508] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 315.297597][ T6510] EXT4-fs (loop0): orphan cleanup on readonly fs [ 315.303528][ T6508] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 315.319367][ T6510] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.611: casefold flag without casefold feature [ 315.349113][ T6513] loop4: detected capacity change from 0 to 2048 [ 315.366657][ T6510] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.611: couldn't read orphan inode 15 (err -117) [ 315.379392][ T6508] EXT4-fs (loop2): 1 truncate cleaned up [ 315.385048][ T6508] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 315.430396][ T6510] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 315.525640][ T6513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.616224][ T6519] loop3: detected capacity change from 0 to 32768 [ 317.087117][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.098986][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.626824][ T6519] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 318.572793][ T6547] loop1: detected capacity change from 0 to 128 [ 318.640367][ T4173] ocfs2: Unmounting device (7,3) on (node local) [ 318.656221][ T6549] loop4: detected capacity change from 0 to 128 [ 318.806788][ T6547] befs: Invalid uid -1, using default [ 318.811718][ T6549] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 318.824601][ T6549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.855938][ T6547] befs: (loop1): No write support. Marking filesystem read-only [ 318.910854][ T6547] befs: (loop1): invalid magic header [ 320.463064][ T6563] 9pnet_virtio: no channels available for device [ 320.482169][ T6562] loop1: detected capacity change from 0 to 2048 [ 320.570336][ T6562] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.418108][ T6575] loop4: detected capacity change from 0 to 1024 [ 321.550756][ T6575] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,errors=remount-ro,. Quota mode: none. [ 321.606276][ T6575] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.684388][ T6582] loop1: detected capacity change from 0 to 512 [ 321.761764][ T6582] EXT4-fs (loop1): orphan cleanup on readonly fs [ 321.798382][ T6582] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.629: casefold flag without casefold feature [ 321.945832][ T6582] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.629: couldn't read orphan inode 15 (err -117) [ 322.192121][ T6582] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 323.970892][ T6596] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 324.522482][ T6600] loop4: detected capacity change from 0 to 512 [ 324.631693][ T6600] FAT-fs (loop4): bogus logical sector size 0 [ 324.637981][ T6600] FAT-fs (loop4): Can't find a valid FAT filesystem [ 325.419196][ T6604] loop4: detected capacity change from 0 to 2048 [ 325.463256][ T6602] loop2: detected capacity change from 0 to 32768 [ 325.501228][ T6602] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 325.509523][ T6602] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 325.530972][ T6602] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 325.533245][ T6604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.550475][ T4612] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 325.565518][ T4612] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 325.643652][ T4612] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 325.665729][ T4612] gfs2: fsid=syz:syz.0: jid=0: Done [ 325.670997][ T6602] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 326.257155][ T6618] loop0: detected capacity change from 0 to 128 [ 326.314909][ T6618] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 326.338776][ T6618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.395043][ T6622] loop2: detected capacity change from 0 to 32768 [ 329.696447][ T6622] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.640 (6622) [ 329.881579][ T6645] loop4: detected capacity change from 0 to 512 [ 330.013869][ T6645] FAT-fs (loop4): bogus logical sector size 0 [ 330.020137][ T6645] FAT-fs (loop4): Can't find a valid FAT filesystem [ 330.529112][ T6622] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 330.555601][ T6622] BTRFS info (device loop2): using free space tree [ 330.562163][ T6622] BTRFS info (device loop2): has skinny extents [ 331.088831][ T6655] loop3: detected capacity change from 0 to 32768 [ 331.096846][ T6657] 9pnet_virtio: no channels available for device [ 331.782596][ T6672] loop4: detected capacity change from 0 to 2048 [ 331.790259][ T6655] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 331.798475][ T6655] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 331.810514][ T6655] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 331.820016][ T4612] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 331.827112][ T4612] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 331.913549][ T6672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.938765][ T4612] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 111ms [ 331.949957][ T4612] gfs2: fsid=syz:syz.0: jid=0: Done [ 331.967487][ T6655] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 331.992861][ T6622] BTRFS error (device loop2): open_ctree failed [ 332.831084][ T6682] loop0: detected capacity change from 0 to 128 [ 333.336364][ T6682] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 333.376030][ T6682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.312234][ T6696] loop3: detected capacity change from 0 to 512 [ 334.554423][ T6696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 334.713996][ T6696] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.655: casefold flag without casefold feature [ 334.880959][ T6696] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.655: couldn't read orphan inode 15 (err -117) [ 335.049748][ T6696] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 335.904801][ T6708] loop1: detected capacity change from 0 to 4096 [ 336.009848][ T6708] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 336.213834][ T6715] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 336.285912][ T6708] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 336.418201][ T4311] ntfs3: loop1: ino=1b, Internal error [ 336.426009][ T4311] ntfs3: loop1: ntfs3_write_inode r=1b failed, -22. [ 336.769518][ T6722] loop2: detected capacity change from 0 to 2048 [ 336.867845][ T6722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.372476][ T6729] loop1: detected capacity change from 0 to 32768 [ 337.473161][ T6729] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 337.481478][ T6729] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 337.501784][ T6729] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 337.511308][ T4216] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 337.534469][ T4216] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 337.762033][ T6731] loop0: detected capacity change from 0 to 40427 [ 337.820450][ T6731] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 337.828406][ T6731] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 337.851396][ T6731] F2FS-fs (loop0): invalid crc value [ 338.052697][ T6731] F2FS-fs (loop0): Found nat_bits in checkpoint [ 338.613502][ T4216] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1079ms [ 338.632541][ T4216] gfs2: fsid=syz:syz.0: jid=0: Done [ 338.669410][ T6729] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 338.751303][ T6731] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 338.758879][ T6731] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 339.007073][ T6745] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 339.390825][ T6748] fuse: Bad value for 'fd' [ 340.958244][ T6756] loop2: detected capacity change from 0 to 128 [ 341.434149][ T6756] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 341.518398][ T6756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.599377][ T6766] loop4: detected capacity change from 0 to 256 [ 341.651706][ T6765] loop1: detected capacity change from 0 to 512 [ 341.780503][ T6766] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 341.821075][ T6765] EXT4-fs (loop1): orphan cleanup on readonly fs [ 341.846771][ T6765] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.676: casefold flag without casefold feature [ 341.873564][ T6765] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.676: couldn't read orphan inode 15 (err -117) [ 341.892180][ T6765] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 342.598440][ T6779] loop0: detected capacity change from 0 to 1024 [ 342.713179][ T6781] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.388564][ T6783] loop0: detected capacity change from 0 to 40427 [ 343.449338][ T6783] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 343.457187][ T6783] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 343.469715][ T6783] F2FS-fs (loop0): invalid crc value [ 343.557609][ T6783] F2FS-fs (loop0): Found nat_bits in checkpoint [ 343.613309][ T6783] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 343.620723][ T6783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 343.864610][ T6798] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 344.388677][ T6805] loop2: detected capacity change from 0 to 128 [ 344.456808][ T6805] befs: Invalid uid -1, using default [ 344.472611][ T6805] befs: (loop2): No write support. Marking filesystem read-only [ 344.544704][ T6805] befs: (loop2): invalid magic header [ 345.472935][ T6823] loop0: detected capacity change from 0 to 128 [ 345.555748][ T6823] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 345.636575][ T6823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.479289][ T6843] loop4: detected capacity change from 0 to 512 [ 347.490419][ T6843] FAT-fs (loop4): bogus logical sector size 0 [ 347.496658][ T6843] FAT-fs (loop4): Can't find a valid FAT filesystem [ 348.255068][ T6846] loop4: detected capacity change from 0 to 512 [ 348.448365][ T6846] EXT4-fs (loop4): orphan cleanup on readonly fs [ 348.501540][ T6846] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.699: casefold flag without casefold feature [ 348.727781][ T6846] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.699: couldn't read orphan inode 15 (err -117) [ 348.809261][ T6846] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 349.445278][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 349.717113][ T6866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 349.911726][ T6870] binder: 6869:6870 ioctl 4018620d 0 returned -22 [ 350.007144][ T6857] atomic_op ffff88807895c998 conn xmit_atomic 0000000000000000 [ 351.980846][ T6889] loop1: detected capacity change from 0 to 512 [ 352.068402][ T6889] FAT-fs (loop1): bogus logical sector size 0 [ 352.074531][ T6889] FAT-fs (loop1): Can't find a valid FAT filesystem [ 352.479203][ T6895] loop2: detected capacity change from 0 to 512 [ 352.538337][ T6895] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 354.176198][ T6911] binder: 6910:6911 ioctl 4018620d 0 returned -22 [ 354.952865][ T6921] atomic_op ffff88801c112998 conn xmit_atomic 0000000000000000 [ 354.982333][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 357.212908][ T6925] loop0: detected capacity change from 0 to 32768 [ 357.477392][ T6942] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 357.737977][ T6946] loop3: detected capacity change from 0 to 512 [ 357.825147][ T6946] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 359.195676][ T4614] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 359.776257][ T4614] usb 4-1: config 4 has an invalid interface number: 119 but max is 0 [ 359.784592][ T4614] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 359.895614][ T4614] usb 4-1: config 4 has no interface number 0 [ 359.922337][ T4614] usb 4-1: config 4 interface 119 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 360.000985][ T4614] usb 4-1: config 4 interface 119 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 360.034457][ T6964] binder: 6963:6964 ioctl 4018620d 0 returned -22 [ 360.545646][ T4614] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a7.2d [ 360.554740][ T4614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.595608][ T4614] usb 4-1: Product: syz [ 360.599863][ T4614] usb 4-1: Manufacturer: syz [ 360.604548][ T4614] usb 4-1: SerialNumber: syz [ 360.657645][ T4614] pn533_usb 4-1:4.119: NFC: Could not find bulk-in or bulk-out endpoint [ 360.820851][ T6973] atomic_op ffff888074325998 conn xmit_atomic 0000000000000000 [ 360.907258][ T4532] usb 4-1: USB disconnect, device number 3 [ 361.451235][ T6981] 9pnet_virtio: no channels available for device [ 361.459823][ T4532] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 361.820646][ T6987] loop2: detected capacity change from 0 to 64 [ 362.569393][ T4532] usb 5-1: Using ep0 maxpacket: 16 [ 362.691680][ T6990] loop3: detected capacity change from 0 to 512 [ 362.825949][ T4532] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 362.844595][ T4532] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.881830][ T4532] usb 5-1: config 0 has no interface number 0 [ 362.905832][ T6990] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 363.105726][ T4532] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 363.143396][ T4532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.186538][ T4532] usb 5-1: Product: syz [ 364.044909][ T4532] usb 5-1: Manufacturer: syz [ 364.401435][ T4532] usb 5-1: SerialNumber: syz [ 364.408443][ T4532] usb 5-1: config 0 descriptor?? [ 366.114577][ T4532] usb 5-1: can't set config #0, error -71 [ 366.123968][ T4532] usb 5-1: USB disconnect, device number 3 [ 366.497356][ T7015] atomic_op ffff888023223198 conn xmit_atomic 0000000000000000 [ 366.546164][ T7021] 9pnet_virtio: no channels available for device [ 368.312411][ T7039] loop4: detected capacity change from 0 to 512 [ 368.371600][ T7039] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768 [ 368.764721][ T7041] loop1: detected capacity change from 0 to 32768 [ 369.516167][ T7041] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 369.524413][ T7041] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 369.545907][ T7041] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 369.555577][ T4532] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 370.011940][ T4532] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 370.937935][ T4532] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 925ms [ 370.987660][ T4532] gfs2: fsid=syz:syz.0: jid=0: Done [ 370.992940][ T7041] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 374.559246][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 375.540059][ T7081] loop2: detected capacity change from 0 to 512 [ 375.558218][ T7076] team0 (unregistering): Port device team_slave_0 removed [ 375.611919][ T7076] team0 (unregistering): Port device team_slave_1 removed [ 375.644080][ T7081] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 378.503456][ T7105] atomic_op ffff88807cf7b998 conn xmit_atomic 0000000000000000 [ 378.601159][ T7102] loop3: detected capacity change from 0 to 32768 [ 378.611183][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.627416][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.672308][ T7102] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 378.680629][ T7102] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 378.692486][ T7102] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 378.701515][ T4216] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 378.724137][ T4216] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 378.932092][ T4216] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 207ms [ 378.953069][ T4216] gfs2: fsid=syz:syz.0: jid=0: Done [ 378.960569][ T7102] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 380.567094][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 380.708501][ T7107] loop2: detected capacity change from 0 to 16 [ 380.737908][ T7119] netlink: 64 bytes leftover after parsing attributes in process `syz.1.774'. [ 382.758369][ T7130] loop0: detected capacity change from 0 to 512 [ 382.883344][ T7130] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 768 [ 384.362608][ T7146] loop2: detected capacity change from 0 to 32768 [ 385.136493][ T7150] loop0: detected capacity change from 0 to 32768 [ 385.186626][ T7150] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 385.194829][ T7150] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 385.224134][ T7150] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 385.233155][ T1107] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 385.242701][ T1107] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 385.377429][ T1107] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms [ 385.385350][ T1107] gfs2: fsid=syz:syz.0: jid=0: Done [ 385.411306][ T7150] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 386.047532][ T7167] loop2: detected capacity change from 0 to 1024 [ 386.060540][ T7165] loop1: detected capacity change from 0 to 128 [ 386.069406][ T7163] atomic_op ffff88807ddc0998 conn xmit_atomic 0000000000000000 [ 386.506656][ T7165] befs: Invalid uid -1, using default [ 386.512077][ T7165] befs: (loop1): No write support. Marking filesystem read-only [ 386.523741][ T7165] befs: (loop1): invalid magic header [ 386.584977][ T7167] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 386.675685][ T4531] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 386.797361][ T7184] loop2: detected capacity change from 0 to 512 [ 386.878626][ T7184] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 386.925911][ T7187] netlink: 64 bytes leftover after parsing attributes in process `syz.3.793'. [ 386.959386][ T4531] usb 5-1: Using ep0 maxpacket: 32 [ 387.085747][ T4531] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 387.134997][ T4531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.184315][ T4531] usb 5-1: config 0 descriptor?? [ 387.908154][ T4531] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 389.160322][ T7189] loop1: detected capacity change from 0 to 32768 [ 389.364730][ T7200] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 389.675635][ T4531] gspca_nw80x: reg_w err -71 [ 389.680459][ T4531] nw80x: probe of 5-1:0.0 failed with error -71 [ 389.703517][ T4531] usb 5-1: USB disconnect, device number 4 [ 390.297522][ T7206] loop3: detected capacity change from 0 to 32768 [ 390.362612][ T7206] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 390.371270][ T7206] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 390.385278][ T7206] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 390.403241][ T1107] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 390.457208][ T1107] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 390.670980][ T1107] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 213ms [ 390.707087][ T1107] gfs2: fsid=syz:syz.0: jid=0: Done [ 390.712368][ T7206] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 392.681550][ T7226] loop0: detected capacity change from 0 to 512 [ 392.890178][ T7226] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 768 [ 392.936529][ T7233] atomic_op ffff88814c51a198 conn xmit_atomic 0000000000000000 [ 393.043016][ T7235] fuse: Bad value for 'fd' [ 393.967781][ T7238] loop2: detected capacity change from 0 to 64 [ 395.501538][ T7254] loop3: detected capacity change from 0 to 32768 [ 395.557409][ T7254] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 395.565680][ T7254] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 395.588744][ T7254] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 395.597789][ T1107] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 395.604609][ T1107] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 395.771890][ T1107] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 167ms [ 395.804199][ T1107] gfs2: fsid=syz:syz.0: jid=0: Done [ 395.835724][ T7254] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 396.726850][ T7240] loop1: detected capacity change from 0 to 40427 [ 396.851119][ T7240] F2FS-fs (loop1): invalid crc value [ 396.963745][ T7240] F2FS-fs (loop1): Found nat_bits in checkpoint [ 397.938386][ T7240] F2FS-fs (loop1): Start checkpoint disabled! [ 397.948909][ T7269] loop3: detected capacity change from 0 to 128 [ 398.084459][ T7269] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.207230][ T7269] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 399.049339][ T7271] loop4: detected capacity change from 0 to 32768 [ 399.348835][ T7286] loop3: detected capacity change from 0 to 512 [ 399.421286][ T7289] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 399.550530][ T7293] fuse: Bad value for 'fd' [ 400.575618][ T7302] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 400.581882][ T7286] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 401.336246][ T7302] syzkaller0: linktype set to 769 [ 401.919226][ T7306] loop0: detected capacity change from 0 to 32768 [ 402.735545][ T7306] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 402.743796][ T7306] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 402.830115][ T7306] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 402.892867][ T4614] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 403.009822][ T4614] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 406.102861][ T4614] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 3093ms [ 406.142857][ T4614] gfs2: fsid=syz:syz.0: jid=0: Done [ 406.148988][ T7306] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 407.780704][ T7334] loop3: detected capacity change from 0 to 40427 [ 407.801852][ T7336] loop4: detected capacity change from 0 to 1024 [ 409.854733][ T7334] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 409.862736][ T7334] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 409.874958][ T7334] F2FS-fs (loop3): invalid crc value [ 409.893354][ T7336] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 409.912282][ T7336] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 409.921483][ T7336] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 409.929472][ T7336] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 410.007373][ T7334] F2FS-fs (loop3): Found nat_bits in checkpoint [ 410.047908][ T7334] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 410.055002][ T7334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 410.122501][ T7334] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 411.504534][ T7352] fuse: Bad value for 'fd' [ 412.400617][ T7358] loop4: detected capacity change from 0 to 512 [ 412.497241][ T7358] FAT-fs (loop4): bogus logical sector size 0 [ 412.503366][ T7358] FAT-fs (loop4): Can't find a valid FAT filesystem [ 413.458354][ T7375] 9pnet_virtio: no channels available for device [ 413.482443][ T7376] atomic_op ffff8880642d5998 conn xmit_atomic 0000000000000000 [ 415.326086][ T7384] loop3: detected capacity change from 0 to 40427 [ 415.335067][ T7386] 9pnet_virtio: no channels available for device [ 415.930725][ T7384] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 415.938539][ T7384] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 415.952968][ T7384] F2FS-fs (loop3): invalid crc value [ 416.008708][ T7384] F2FS-fs (loop3): Found nat_bits in checkpoint [ 416.048034][ T7384] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 416.055094][ T7384] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 416.120508][ T7396] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 416.817887][ T7407] loop1: detected capacity change from 0 to 47 [ 416.875584][ T1107] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 416.901246][ T7407] MINIX-fs: bad superblock or unable to read bitmaps [ 417.165533][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 417.355648][ T1107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 417.456548][ T1107] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 417.495494][ T1107] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 417.534934][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.981478][ T7415] loop1: detected capacity change from 0 to 32768 [ 418.026433][ T1107] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.045495][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.053656][ T1107] usb 5-1: Product: syz [ 418.058405][ T1107] usb 5-1: Manufacturer: syz [ 418.063023][ T1107] usb 5-1: SerialNumber: syz [ 418.096534][ T7415] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 418.104765][ T7415] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 418.117224][ T7415] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 418.128302][ T4531] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 418.135111][ T4531] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 418.235822][ T4531] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 418.253916][ T4531] gfs2: fsid=syz:syz.0: jid=0: Done [ 418.265581][ T7415] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 418.578571][ T1107] usb 5-1: 0:2 : does not exist [ 418.924015][ T1107] usb 5-1: USB disconnect, device number 5 [ 419.793110][ T7430] 9pnet_virtio: no channels available for device [ 421.908474][ T7440] loop4: detected capacity change from 0 to 40427 [ 421.999941][ T7440] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 422.008095][ T7440] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 422.022826][ T7440] F2FS-fs (loop4): invalid crc value [ 422.134473][ T7449] loop1: detected capacity change from 0 to 128 [ 422.291770][ T7449] befs: Invalid uid -1, using default [ 422.297312][ T7449] befs: (loop1): No write support. Marking filesystem read-only [ 422.314011][ T7449] befs: (loop1): invalid magic header [ 422.369187][ T7440] F2FS-fs (loop4): Found nat_bits in checkpoint [ 422.850514][ T7440] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 422.858567][ T7440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 422.930601][ T7452] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 423.399558][ T7459] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 423.425355][ T7459] device bond1 entered promiscuous mode [ 423.434693][ T7459] device team_slave_1 entered promiscuous mode [ 423.789299][ T7463] loop2: detected capacity change from 0 to 32768 [ 423.816629][ T7459] team0: Port device team_slave_1 removed [ 423.840371][ T7459] bond1: (slave team_slave_1): making interface the new active one [ 423.852564][ T7463] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 423.860974][ T7463] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 423.880308][ T7463] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 423.892449][ T7459] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 423.901783][ T4531] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 423.911473][ T4531] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 424.039028][ T4531] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 424.055625][ T4531] gfs2: fsid=syz:syz.0: jid=0: Done [ 424.084457][ T7463] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 426.461050][ T7490] loop2: detected capacity change from 0 to 2048 [ 426.611583][ T7490] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.841903][ T7504] atomic_op ffff88806082f198 conn xmit_atomic 0000000000000000 [ 428.098694][ T7508] loop0: detected capacity change from 0 to 128 [ 428.161390][ T7508] befs: Invalid uid -1, using default [ 428.166919][ T7508] befs: (loop0): No write support. Marking filesystem read-only [ 428.537546][ T7509] loop2: detected capacity change from 0 to 40427 [ 428.555378][ T7508] befs: (loop0): invalid magic header [ 428.582082][ T7509] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 428.590080][ T7509] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 428.622228][ T7509] F2FS-fs (loop2): invalid crc value [ 428.794532][ T7509] F2FS-fs (loop2): Found nat_bits in checkpoint [ 428.923347][ T7509] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 428.930638][ T7509] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 429.058223][ T7507] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 429.407992][ T7502] loop1: detected capacity change from 0 to 32768 [ 430.960784][ T7532] loop4: detected capacity change from 0 to 128 [ 431.151314][ T7532] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 431.178358][ T7532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.902082][ T7539] loop1: detected capacity change from 0 to 512 [ 434.120797][ T7539] FAT-fs (loop1): bogus logical sector size 0 [ 434.127073][ T7539] FAT-fs (loop1): Can't find a valid FAT filesystem [ 434.497062][ T7544] loop3: detected capacity change from 0 to 32768 [ 434.760871][ T7553] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 435.904778][ T7563] loop3: detected capacity change from 0 to 40427 [ 436.000595][ T7563] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 436.008690][ T7563] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 436.053517][ T7563] F2FS-fs (loop3): invalid crc value [ 436.219430][ T7563] F2FS-fs (loop3): Found nat_bits in checkpoint [ 436.388921][ T7563] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 436.396084][ T7563] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 436.715372][ T7573] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 437.229743][ T7575] syz.1.890 sent an empty control message without MSG_MORE. [ 438.202224][ T7581] loop1: detected capacity change from 0 to 128 [ 438.382915][ T7581] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 438.424393][ T7581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.749143][ T7595] atomic_op ffff8880630cc198 conn xmit_atomic 0000000000000000 [ 439.936875][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.943758][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.005786][ T7585] loop1: detected capacity change from 0 to 32768 [ 440.666596][ T7602] loop3: detected capacity change from 0 to 32768 [ 440.706357][ T7585] XFS (loop1): Mounting V5 Filesystem [ 440.919154][ T7614] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 441.579586][ T7617] loop2: detected capacity change from 0 to 40427 [ 441.718306][ T7617] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 441.726175][ T7617] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 441.738429][ T7617] F2FS-fs (loop2): invalid crc value [ 441.797437][ T7617] F2FS-fs (loop2): Found nat_bits in checkpoint [ 441.888951][ T7585] XFS (loop1): Ending clean mount [ 442.718439][ T7617] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 442.726049][ T7617] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 442.759102][ T4166] XFS (loop1): Unmounting Filesystem [ 442.899549][ T7631] loop4: detected capacity change from 0 to 2048 [ 443.047357][ T7635] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 443.226748][ T7631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.239547][ T7631] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 444.299577][ T7631] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 444.401487][ T7650] loop1: detected capacity change from 0 to 128 [ 444.524497][ T7650] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 444.576463][ T7650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.987469][ T7681] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 450.791728][ T7692] device vlan2 entered promiscuous mode [ 450.841824][ T7692] device bridge0 entered promiscuous mode [ 450.876812][ T7692] bridge0: port 3(vlan2) entered blocking state [ 450.921970][ T7692] bridge0: port 3(vlan2) entered disabled state [ 451.164479][ T7692] device bridge0 left promiscuous mode [ 453.701254][ T7730] nvme_fabrics: unknown parameter or missing value 'îÁ±ZÓ' in ctrl creation request [ 454.559729][ T7736] loop3: detected capacity change from 0 to 128 [ 454.785778][ T7736] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 454.847219][ T7736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.049673][ T7715] loop4: detected capacity change from 0 to 32768 [ 455.140781][ T7715] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.927 (7715) [ 455.287836][ T7734] loop0: detected capacity change from 0 to 32768 [ 455.460022][ T7734] JBD2: Ignoring recovery information on journal [ 455.515687][ T4261] Bluetooth: hci4: command 0x0405 tx timeout [ 455.686743][ T7734] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 455.716128][ T7715] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 455.724955][ T7715] BTRFS info (device loop4): setting nodatasum [ 455.777960][ T7715] BTRFS info (device loop4): enabling auto defrag [ 455.784438][ T7715] BTRFS info (device loop4): disabling tree log [ 455.838752][ T7715] BTRFS info (device loop4): using free space tree [ 455.846783][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 455.849148][ T7715] BTRFS info (device loop4): has skinny extents [ 456.259880][ T7746] loop2: detected capacity change from 0 to 32768 [ 456.270778][ T7715] BTRFS error (device loop4): open_ctree failed [ 456.342302][ T7746] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 456.351194][ T7746] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 456.378231][ T7746] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 456.389652][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 456.401415][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 456.641537][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 240ms [ 457.372845][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 457.380038][ T7746] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 458.365574][ T7782] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 458.745823][ T7782] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 458.772607][ T7782] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.814979][ T7782] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 458.826336][ T7782] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.012645][ T7782] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 460.219466][ T7782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.476707][ T7782] usb 2-1: invalid MIDI out EP 0 [ 461.708610][ T7782] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 461.728905][ T7782] usb 2-1: USB disconnect, device number 5 [ 462.038822][ T4157] udevd[4157]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.537374][ T7821] loop0: detected capacity change from 0 to 32768 [ 463.556628][ T7825] loop4: detected capacity change from 0 to 8 [ 464.012760][ T7821] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 464.020999][ T7821] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 464.033577][ T7821] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 464.043420][ T4532] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 464.058988][ T4532] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 464.466257][ T4532] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 407ms [ 464.517565][ T4532] gfs2: fsid=syz:syz.0: jid=0: Done [ 464.551938][ T7821] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 467.399567][ T7862] 9pnet_virtio: no channels available for device [ 470.009590][ T7871] loop3: detected capacity change from 0 to 512 [ 470.480512][ T7871] EXT4-fs (loop3): Ignoring removed nobh option [ 470.531929][ T7871] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 470.556653][ T7871] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.966: attempt to clear invalid blocks 2 len 1 [ 470.580880][ T7871] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 470.606262][ T7871] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.966: invalid indirect mapped block 1819239214 (level 0) [ 470.625017][ T7871] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.966: invalid indirect mapped block 1819239214 (level 1) [ 470.655632][ T7871] EXT4-fs (loop3): 1 truncate cleaned up [ 470.661512][ T7871] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,delalloc,jqfmt=vfsv1,grpid,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 470.886695][ T7883] loop1: detected capacity change from 0 to 8 [ 472.176883][ T7894] loop2: detected capacity change from 0 to 256 [ 472.299446][ T7890] loop4: detected capacity change from 0 to 8192 [ 472.446250][ T7894] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 472.877053][ T26] audit: type=1800 audit(1731489110.736:8): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.972" name="bus" dev="loop2" ino=1048630 res=0 errno=0 [ 472.905807][ T7901] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 472.914934][ T7901] FAT-fs (loop4): Filesystem has been set read-only [ 473.125316][ T7894] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805a898160 iblock : 0, err : -5) [ 473.135442][ T7894] exFAT-fs (loop2): Filesystem has been set read-only [ 473.965618][ T7914] 9pnet_virtio: no channels available for device [ 480.204884][ T7949] loop4: detected capacity change from 0 to 128 [ 480.227499][ T7949] befs: Invalid uid -1, using default [ 480.232920][ T7949] befs: (loop4): No write support. Marking filesystem read-only [ 480.245839][ T7949] befs: (loop4): invalid magic header [ 481.638277][ T7965] 9pnet_virtio: no channels available for device [ 483.864227][ T7989] loop3: detected capacity change from 0 to 2048 [ 484.020290][ T7989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 484.354377][ T7991] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 484.367800][ T7991] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 484.752076][ T7993] loop0: detected capacity change from 0 to 128 [ 484.816012][ T7993] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 484.828713][ T7993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.043293][ T8013] 9pnet_virtio: no channels available for device [ 487.132497][ T7] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 487.603156][ T8030] netlink: 'syz.3.1006': attribute type 29 has an invalid length. [ 488.066035][ T7] usb 3-1: config 29 has an invalid interface number: 133 but max is 0 [ 488.114773][ T7] usb 3-1: config 29 has no interface number 0 [ 488.230303][ T7] usb 3-1: config 29 interface 133 altsetting 20 has an invalid endpoint with address 0x0, skipping [ 488.424212][ T7] usb 3-1: config 29 interface 133 altsetting 20 has an invalid endpoint with address 0xE2, skipping [ 488.575460][ T7] usb 3-1: config 29 interface 133 altsetting 20 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.635462][ T7] usb 3-1: config 29 interface 133 has no altsetting 0 [ 488.734877][ T8036] loop4: detected capacity change from 0 to 2048 [ 488.872075][ T7] usb 3-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=ca.cd [ 488.893147][ T8036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.907532][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.918960][ T7] usb 3-1: Product: syz [ 488.923184][ T7] usb 3-1: Manufacturer: syz [ 488.928682][ T7] usb 3-1: SerialNumber: syz [ 488.957362][ T8017] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 489.287592][ T8042] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 489.302077][ T8042] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 490.212444][ T7] ftdi_sio 3-1:29.133: FTDI USB Serial Device converter detected [ 490.222295][ T7] usb 3-1: Detected FT-X [ 490.275996][ T7] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 490.305646][ T7] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 490.347821][ T7] ftdi_sio 3-1:29.133: GPIO initialisation failed: -71 [ 490.380367][ T7] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 490.437409][ T7] usb 3-1: USB disconnect, device number 5 [ 490.464299][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 490.665247][ T7] ftdi_sio 3-1:29.133: device disconnected [ 492.453617][ T8073] loop1: detected capacity change from 0 to 128 [ 492.776542][ T8077] loop3: detected capacity change from 0 to 128 [ 494.471539][ T8080] loop2: detected capacity change from 0 to 2048 [ 494.496240][ T8077] befs: Invalid uid -1, using default [ 494.501744][ T8077] befs: (loop3): No write support. Marking filesystem read-only [ 495.680025][ T26] audit: type=1800 audit(1731489132.946:9): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1022" name="bus" dev="loop1" ino=1048631 res=0 errno=0 [ 495.807635][ T8077] befs: (loop3): invalid magic header [ 495.860016][ T8080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.258359][ T8088] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 496.272788][ T8088] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 908 not allocated in directory (ino 1376) [ 498.018054][ T8104] netlink: 'syz.3.1025': attribute type 29 has an invalid length. [ 498.033548][ T8103] loop4: detected capacity change from 0 to 512 [ 498.094094][ T8103] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 498.164532][ T8103] EXT4-fs (loop4): 1 truncate cleaned up [ 498.183184][ T8103] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=remount-ro,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000001,resuid=0x0000000000000000,max_batch_time=0x0000000000000004,. Quota mode: none. [ 498.245555][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 498.679173][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 500.155877][ T23] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 500.166746][ T23] usb 3-1: config 0 has no interface number 0 [ 500.175119][ T23] usb 3-1: config 0 interface 5 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.268275][ T8119] 9pnet_virtio: no channels available for device [ 500.341674][ T23] usb 3-1: config 0 interface 5 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.475949][ T23] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 500.585018][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.957085][ T23] usb 3-1: config 0 descriptor?? [ 500.998117][ T23] usb 3-1: can't set config #0, error -71 [ 501.304820][ T23] usb 3-1: USB disconnect, device number 6 [ 501.357819][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.364143][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.495617][ T8134] loop2: detected capacity change from 0 to 128 [ 502.182868][ T8134] befs: Invalid uid -1, using default [ 502.188325][ T8134] befs: (loop2): No write support. Marking filesystem read-only [ 502.339192][ T8134] befs: (loop2): invalid magic header [ 503.761300][ T8148] loop3: detected capacity change from 0 to 512 [ 503.976248][ T8148] FAT-fs (loop3): bogus logical sector size 0 [ 503.982383][ T8148] FAT-fs (loop3): Can't find a valid FAT filesystem [ 504.349042][ T26] audit: type=1326 audit(1731489142.276:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76376dd719 code=0x7ffc0000 [ 504.399319][ T26] audit: type=1326 audit(1731489142.306:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76376dd719 code=0x7ffc0000 [ 504.445032][ T8159] loop1: detected capacity change from 0 to 8 [ 504.724374][ T26] audit: type=1326 audit(1731489142.616:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76376dd719 code=0x7ffc0000 [ 505.025032][ T26] audit: type=1326 audit(1731489142.946:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76376dd719 code=0x7ffc0000 [ 505.079058][ T26] audit: type=1326 audit(1731489143.006:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76376dd719 code=0x7ffc0000 [ 505.300006][ T26] audit: type=1326 audit(1731489143.026:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76376dd719 code=0x7ffc0000 [ 505.381728][ T26] audit: type=1326 audit(1731489143.026:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76376d46e7 code=0x7ffc0000 [ 505.742193][ T26] audit: type=1326 audit(1731489143.026:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7637679099 code=0x7ffc0000 [ 505.764481][ T26] audit: type=1326 audit(1731489143.026:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76376d46e7 code=0x7ffc0000 [ 505.829838][ T26] audit: type=1326 audit(1731489143.026:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7637679099 code=0x7ffc0000 [ 513.755351][ T8207] loop1: detected capacity change from 0 to 8 [ 514.618470][ T8211] loop0: detected capacity change from 0 to 32768 [ 514.725034][ T8211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1058 (8211) [ 514.858380][ T8211] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 514.867486][ T8211] BTRFS info (device loop0): using free space tree [ 514.874057][ T8211] BTRFS info (device loop0): has skinny extents [ 517.368509][ T4311] BTRFS warning (device loop0): checksum verify failed on 5341184 wanted 0xe51addfa found 0xe59bd0b1 level 0 [ 517.815241][ T8211] BTRFS warning (device loop0): failed to read root (objectid=10): -5 [ 562.876269][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.882795][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.825378][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 622.832379][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8242/1:b..l [ 622.840950][ C0] (detected by 0, t=10502 jiffies, g=35949, q=229) [ 622.847554][ C0] task:syz.4.1064 state:R running task stack:27480 pid: 8242 ppid: 4165 flags:0x00004004 [ 622.859804][ C0] Call Trace: [ 622.863124][ C0] [ 622.866078][ C0] __schedule+0x12c4/0x45b0 [ 622.870658][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 622.876659][ C0] ? release_firmware_map_entry+0x190/0x190 [ 622.882576][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 622.887881][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 622.893181][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 622.898307][ C0] ? __cond_resched+0x20/0x20 [ 622.903005][ C0] ? print_irqtrace_events+0x210/0x210 [ 622.908490][ C0] irqentry_exit+0x53/0x80 [ 622.912929][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 622.918937][ C0] RIP: 0010:rt_mutex_slowlock_block+0x4a0/0x5d0 [ 622.925191][ C0] Code: 79 8c e8 93 ec 8c f7 48 83 3d 9b ca 3b 02 00 48 8b 5c 24 10 0f 84 2f 01 00 00 48 89 ef e8 e8 a6 fa f6 66 90 84 c0 75 64 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 48 8b 6c 24 18 0f 84 [ 622.944819][ C0] RSP: 0018:ffffc900032d7800 EFLAGS: 00000246 [ 622.950908][ C0] RAX: ffff8880b9100000 RBX: ffffc900032d7a30 RCX: dffffc0000000000 [ 622.958897][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 622.966885][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100fa743b9 [ 622.974865][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110048d0b4b [ 622.982848][ C0] R13: ffff8880744c5974 R14: 1ffff110048d0b4c R15: ffff88807d3a1dc0 [ 622.990865][ C0] rt_mutex_wait_proxy_lock+0x79/0xf0 [ 622.996300][ C0] futex_lock_pi+0xa10/0xf70 [ 623.000924][ C0] ? futex_requeue+0x2080/0x2080 [ 623.005898][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 623.010958][ C0] do_futex+0x1499/0x1810 [ 623.015327][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 623.020375][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 623.025603][ C0] ? read_lock_is_recursive+0x10/0x10 [ 623.030999][ C0] ? __context_tracking_exit+0x4c/0x80 [ 623.036487][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 623.041533][ C0] __se_sys_futex+0x407/0x490 [ 623.046239][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 623.051027][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 623.057026][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 623.062244][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 623.067025][ C0] do_syscall_64+0x3b/0xb0 [ 623.071452][ C0] ? clear_bhb_loop+0x15/0x70 [ 623.076143][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 623.082053][ C0] RIP: 0033:0x7f76376dd719 [ 623.086482][ C0] RSP: 002b:00007f7635b34038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 623.094911][ C0] RAX: ffffffffffffffda RBX: 00007f7637895058 RCX: 00007f76376dd719 [ 623.102897][ C0] RDX: 0000000000000000 RSI: 000080000000000d RDI: 000000002000cffc [ 623.110877][ C0] RBP: 00007f7637750616 R08: 0000000000000000 R09: 0000000000000000 [ 623.118861][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.126848][ C0] R13: 0000000000000001 R14: 00007f7637895058 R15: 00007ffc7bcef6b8 [ 623.134846][ C0] [ 623.137874][ C0] rcu: rcu_preempt kthread starved for 9951 jiffies! g35949 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 623.148991][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 623.158960][ C0] rcu: RCU grace-period kthread stack dump: [ 623.164848][ C0] task:rcu_preempt state:R running task stack:27256 pid: 15 ppid: 2 flags:0x00004000 [ 623.175640][ C0] Call Trace: [ 623.178927][ C0] [ 623.181873][ C0] __schedule+0x12c4/0x45b0 [ 623.186389][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 623.192323][ C0] ? release_firmware_map_entry+0x190/0x190 [ 623.198229][ C0] ? mod_timer_pending+0x20/0x20 [ 623.203183][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 623.208577][ C0] schedule+0x11b/0x1f0 [ 623.212757][ C0] schedule_timeout+0x1b9/0x300 [ 623.217640][ C0] ? console_conditional_schedule+0x40/0x40 [ 623.223550][ C0] ? update_process_times+0x200/0x200 [ 623.228952][ C0] ? prepare_to_swait_event+0x321/0x340 [ 623.234515][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 623.239382][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 623.244611][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 623.250789][ C0] ? rcu_gp_init+0xdae/0x1140 [ 623.255485][ C0] ? rcu_gp_init+0x1140/0x1140 [ 623.260272][ C0] ? finish_swait+0xc5/0x1d0 [ 623.264876][ C0] rcu_gp_kthread+0xa4/0x360 [ 623.269487][ C0] ? _raw_spin_unlock+0x40/0x40 [ 623.274359][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 623.279482][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 623.285406][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 623.290450][ C0] kthread+0x3f6/0x4f0 [ 623.294528][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 623.299652][ C0] ? kthread_blkcg+0xd0/0xd0 [ 623.304255][ C0] ret_from_fork+0x1f/0x30 [ 623.308698][ C0] [ 623.311723][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 623.318044][ C0] NMI backtrace for cpu 0 [ 623.322371][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.171-syzkaller #0 [ 623.330359][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 623.340419][ C0] Call Trace: [ 623.343705][ C0] [ 623.346553][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 623.351248][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 623.356896][ C0] ? panic+0x860/0x860 [ 623.360993][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 623.365944][ C0] ? __wake_up_klogd+0xd5/0x100 [ 623.370814][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 623.376983][ C0] ? _printk+0xd1/0x120 [ 623.381157][ C0] ? cpu_online+0x1f/0x40 [ 623.385504][ C0] ? panic+0x860/0x860 [ 623.389596][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 623.395677][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 623.401674][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 623.407868][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 623.413354][ C0] ? print_cpu_stall+0x600/0x600 [ 623.418309][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 623.423350][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 623.428567][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 623.433793][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 623.438659][ C0] ? hrtimer_run_queues+0x163/0x450 [ 623.443869][ C0] ? account_process_tick+0x232/0x3a0 [ 623.449264][ C0] update_process_times+0x196/0x200 [ 623.454480][ C0] tick_sched_timer+0x386/0x550 [ 623.459348][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 623.464912][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 623.470137][ C0] ? hrtimer_interrupt+0x980/0x980 [ 623.475275][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 623.481377][ C0] hrtimer_interrupt+0x392/0x980 [ 623.486374][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 623.492405][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 623.498075][ C0] [ 623.501018][ C0] [ 623.503957][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 623.509978][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 623.515806][ C0] Code: a9 42 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 34 24 49 f7 0f 1f 44 00 00 e8 da a5 42 f7 0f 00 2d 63 73 a5 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 cb 7d 8c f7 [ 623.535544][ C0] RSP: 0018:ffffffff8c607b80 EFLAGS: 000002d3 [ 623.541643][ C0] RAX: ffffffff8a3dcdd6 RBX: 0000000000000000 RCX: ffffffff8c6bd5c0 [ 623.549633][ C0] RDX: 0000000000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90500 [ 623.557759][ C0] RBP: ffffffff8c607c10 R08: ffffffff8186f230 R09: fffffbfff18d7ab9 [ 623.565753][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff18c0f70 [ 623.573740][ C0] R13: ffff88801e12c004 R14: ffffffff8c607ba0 R15: dffffc0000000000 [ 623.581736][ C0] ? trace_hardirqs_on+0x30/0x80 [ 623.586706][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 623.591930][ C0] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 623.597140][ C0] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 623.602697][ C0] ? rcu_qs+0x190/0x190 [ 623.606871][ C0] acpi_idle_enter+0x352/0x4f0 [ 623.611648][ C0] cpuidle_enter_state+0x521/0xef0 [ 623.616783][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 623.622174][ C0] ? menu_enable_device+0x380/0x380 [ 623.627386][ C0] cpuidle_enter+0x59/0x90 [ 623.631817][ C0] do_idle+0x3e4/0x670 [ 623.635913][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 623.641126][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 623.646794][ C0] ? schedule_idle+0x57/0x90 [ 623.651400][ C0] cpu_startup_entry+0x14/0x20 [ 623.656180][ C0] ? time_init+0x40/0x40 [ 623.660434][ C0] start_kernel+0x48c/0x540 [ 623.664950][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 623.670873][ C0] [ 624.239410][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.245804][ T1421] ieee802154 phy1 wpan1: encryption failed: -22