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", 0x2000, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 854.633250][T20132] loop4: detected capacity change from 0 to 512 [ 854.673304][T20132] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:03 executing program 3: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x1f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 22:25:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) [ 854.719144][T20132] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:03 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x1adeff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) acct(&(0x7f0000000100)='./bus\x00') r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104000000f5ffffffffffffff00", @ANYRES32=r2, @ANYBLOB='\v'], 0x20}}, 0x0) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) [ 854.826349][T20132] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:25:03 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0) pselect6(0x40, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2c, 0x76dda20f, 0x8000}, &(0x7f0000001580)={0x80000000, 0x7, 0x400, 0x10001, 0x5, 0xfffffffffffffffe, 0x0, 0x1}, &(0x7f00000015c0)={0x7fff, 0x7ff, 0xe578, 0xfffffffffffffe00, 0x1e, 0x44, 0x5, 0x1}, &(0x7f0000001600)={0x77359400}, &(0x7f0000001680)={&(0x7f0000001640)={[0x2]}, 0x8}) syz_genetlink_get_family_id$l2tp(&(0x7f00000016c0), 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000001700), &(0x7f0000001740)={'fscrypt:', @desc2}, &(0x7f0000001780)={0x0, "0130a60df5466c2fc46b14b3041baccdec9f5a4a918340c57d9be7c68a5207582278623415c9d899d6c5c0e35bcdfc821f6508eac9c73132463eb966a2e443c3", 0x3a}, 0x48, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000001800)='trusted\x00', 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x0, 0x5003) r2 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x0, 0x2003) request_key(&(0x7f0000001840)='syzkaller\x00', 0x0, &(0x7f00000018c0)='\x00', r1) add_key$fscrypt_v1(&(0x7f0000001900), &(0x7f0000001940)={'fscrypt:', @desc1}, &(0x7f0000001980)={0x0, "3176825121d51c1751c8d6bcbcf20613bd8cf9ff1c48685d5c5c8341ec0fe9ace5174802c47f5afb0561614ea3b73854a85172e8f69e294f41cf9834d9f461e9", 0x15}, 0x48, 0xffffffffffffffff) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001b00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) request_key(&(0x7f0000001d40)='id_resolver\x00', &(0x7f0000001d80)={'syz', 0x2}, &(0x7f0000001dc0)='syz', 0x0) [ 854.946833][T20132] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 35: padding at end of block bitmap is not set [ 854.968503][ T27] audit: type=1800 audit(1107296703.270:55): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 855.007857][T20132] EXT4-fs (loop4): 1 truncate cleaned up [ 855.013605][T20132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.090210][T20152] Process accounting resumed [ 855.157089][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.336199][T11666] usb 6-1: new high-speed USB device number 10 using dummy_hcd 22:25:03 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:03 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 22:25:03 executing program 2: pselect6(0x40, &(0x7f0000000b80)={0x6}, 0x0, 0x0, 0x0, 0x0) 22:25:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs289rHFUcAPDvzCaptrapWn+0Vq0WMfgjadKqPXhRFDxUFPRQj3GTltJtI00EW4KNIvUiSEHP4lHwL/DmRdST4FXvUigahFZPK7M7k262u/nRbHZj9/OBIe/NvMl7333zdt/M2w2gbx3It7si4reIGI6IpEWB7M/1xfnyP4vz5SSq1bf+TGrlri3Ol4uixXk78sxIGpF+ktRPbjJ7/sLpyUpl+lyeH5s7897Y7PkLz546M3ly+uT02YmjR48cHn/h+YnnOhJnFt+1fR/O7N/72juXXy8fv/zuT98m+f5oiqNTDmSB/1WtJi2OPdHpynpsZ0M6GehhQ1iXUkRk3TVYG//DUYobnTccr37c08YBm6parVa3tT+8UAVuY0n0ugVAbxQf9Nn9b7F1aeqxJVx9qX4DlMV9Pd/qRwYizcsMNt3fdtKBiDi+8O9X2Rab9BwCAKDRZ+Uvj8UzreZ/adzfUG5Xvja0OyLujoh7IuLeiNgTEfdF1Mo+EBEPrrP+5qWhm+c/6ZVbCmyNsvnfi/na1vL5XzH7G/67lOd21uIfTE6cqkwfyl+TkRjcluXHV6jj+1d+/bzdscb5X7Zl9RdzwbwdVwaaHtBNTc5N1ialHXD1o4h9A63iT5ZWApKI2BsR+9b3r3cViVNPfbO/XaHV419BB9aZql9HPFnv/4Voir+QrLw+OXZHVKYPjRVXxc1+/uXSm+3q31D8HZD1//bl139zkd1J43rt7PrruPT7p23vaW71+h9K3q6NyaF83weTc3PnxiOGkmO1/LL9EzfOLfJF+Sz+kYOtx/9D+TlZ/Fk6u4gfjohHIuLRvO2PRcTjEXFwhfh/fLn9sa3Q/1Mt3/+Wrv+m/l9/onT6h+/a1b+2/j9SS43ke2rvf6tYawM38toBAADA/0Va+w58ko4updN0dLT+Hf49sT2tzMzOPX1i5v2zU/Xvyu+OwbR40jXc8Dx0PFnI/2M9P5E/Ky6OH86fG39RurOWHy3PVKZ6HDv0ux1txn/mj1KvWwdsulbraBNDPWgI0HXN4z9dnr34RjcbA3SV32tD/1pl/KfdagfQfT7/oX+1Gv8Xm/LWAuD25PMf+pfxD/3L+If+ZfxDX9rI7/ol+jkR6ZZohsQmJXr9zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAZ/wUAAP//P8rr6w==") 22:25:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000003c0), 0x10, 0x0, &(0x7f0000000400)={0x6}) [ 855.505900][T20166] loop4: detected capacity change from 0 to 512 22:25:04 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fchdir(r0) [ 855.637774][T20166] EXT4-fs: Ignoring removed mblk_io_submit option [ 855.663773][T20166] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 855.767643][T20166] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:25:04 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000180)=[@rights], 0x18}, 0x0) [ 855.838243][T20166] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 35: padding at end of block bitmap is not set [ 855.859294][T20166] EXT4-fs (loop4): 1 truncate cleaned up [ 855.867157][T11666] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 855.883317][T20166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.887719][T11666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.916531][T11666] usb 6-1: Product: syz [ 855.923172][T11666] usb 6-1: Manufacturer: syz [ 855.931665][T11666] usb 6-1: SerialNumber: syz 22:25:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) [ 855.978573][T11666] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 22:25:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs289rHFUcAPDvzCaptrapWn+0Vo0WMfgjadKqPXhRFDxUFPRQj3GTltJtI00EW4qNIvUiSEHP4lHwL/DmRdST4FXvUigahFZPK7M7k262u/nRbHZj9/OBIe/NvMl7333zdt/M2w2gb41ExGMRcVdE/BYRwxGRNBcYqf+5vnih/M/ihXIS1epbfya1ctcWL5SLosV5O/LMaBqRfpLUT24yd+78qalKZeZsnh+fP/3e+Ny588+ePD11YubEzJnJI0cOH5p44fnJ5zoSZxbftX0fzu7f+9o7l18vH7v87k/fJvn+aIqjU0aywP+qVpMWx57odGU9trMhnQz0sCGsSykisu4arI3/4SjFjc4bjlc/7mnjgE1VrVar29ofXqgCt7Eket0CoDeKD/rs/rfYujT12BKuvlS/Acrivp5v9SMDkeZlBpvubztpJCKOLfz7VbbFJj2HAABo9Fn5y6PxTKv5Xxr3N5Tbla8N7Y6IuyPinoi4NyL2RMR9EbWyD0TEg+usv3lp6Ob5T3rllgJbo2z+92K+trV8/lfM/ob/LuW5nbX4B5PjJyszB/PXZDQGt2X5iRXq+P6VXz9vd6xx/pdtWf3FXDBvx5WBpgd001PzU7VJaQdc/Shi30Cr+JOllYAkIvZGxL71/etdReLkU9/sb1do9fhX0IF1purXEU/W+38hmuIvJCuvT47fEZWZg+PFVXGzn3+59Ga7+jcUfwdk/b99+fXfXGR30rheO7f+Oi79/mnbe5pbvf6HkrdrY3Io3/fB1Pz82YmIoeRoLb9s/+SNc4t8UT6Lf/RA6/H/UH5OFn+Wzi7ihyPikYh4tGHt/PGIOLBC/D++3P7YVuj/6Zbvf0vXf1P/rz9ROvXDd+3qX1v/H66lRvM9tfe/Vay1gRt57QAAAOD/Iq19Bz5Jx5bSaTo2Vv8O/57YnlZm5+afPj77/pnp+nfld8dgWjzpGm54HjqRLOT/sZ6fzJ8VF8cP5c+NvyjdWcuPlWcr0z2OHfrdjjbjP/NHqdetAzZdq3W0yaEeNATouubxny7PXnyjm40BusrvtaF/rTL+0261A+g+n//Qv1qN/4tNeWsBcHvy+Q/9y/iH/mX8Q/8y/qEvbeR3/RL9nIh0SzRDYpMSvX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA//88Auvs") [ 856.083371][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:25:04 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:04 executing program 3: clock_gettime(0x0, &(0x7f0000000040)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000480)={0x9}, 0x4) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 856.319280][T20184] loop4: detected capacity change from 0 to 512 [ 856.363536][T20184] EXT4-fs: Ignoring removed mblk_io_submit option [ 856.385773][T20184] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 856.444523][T20184] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 856.460027][T20184] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 35: padding at end of block bitmap is not set [ 856.488206][T20184] EXT4-fs (loop4): 1 truncate cleaned up [ 856.493953][T20184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.539305][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.646722][ T5034] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 856.711746][ T5128] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 856.739208][ T5126] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 856.854861][T13375] usb 6-1: USB disconnect, device number 10 [ 856.996415][ T5126] usb 3-1: Using ep0 maxpacket: 32 [ 857.116430][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 857.256222][ T5128] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 857.265343][ T5128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.296027][ T5128] usb 4-1: Product: syz [ 857.300275][ T5128] usb 4-1: Manufacturer: syz [ 857.304925][ T5128] usb 4-1: SerialNumber: syz [ 857.310329][ T5126] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 857.326003][ T5126] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 857.334500][ T5126] usb 3-1: Product: syz 22:25:05 executing program 5: add_key$fscrypt_v1(&(0x7f0000001900), &(0x7f0000001940)={'fscrypt:', @desc1}, &(0x7f0000001980)={0x0, "3176825121d51c1751c8d6bcbcf20613bd8cf9ff1c48685d5c5c8341ec0fe9ace5174802c47f5afb0561614ea3b73854a85172e8f69e294f41cf9834d9f461e9"}, 0x48, 0xffffffffffffffff) 22:25:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 857.366078][ T5126] usb 3-1: Manufacturer: syz [ 857.370758][ T5126] usb 3-1: SerialNumber: syz 22:25:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) [ 857.407259][ T5128] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 857.428269][ T5126] usb 3-1: config 0 descriptor?? 22:25:05 executing program 0: pselect6(0x40, &(0x7f0000000b80), &(0x7f0000000bc0)={0x3}, 0x0, &(0x7f0000000c40)={0x0, 0x989680}, 0x0) [ 857.492095][T20196] loop4: detected capacity change from 0 to 512 [ 857.501975][ T5126] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 857.535074][T20196] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000180)=""/165, 0x27, 0xa5, 0x1}, 0x20) [ 857.592428][T20196] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:05 executing program 0: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) [ 857.634529][ T5126] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 857.706930][ T5034] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 857.714797][ T5034] ath9k_htc: Failed to initialize the device [ 857.742617][T20196] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 857.777812][T20196] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 35: padding at end of block bitmap is not set [ 857.787021][T13375] usb 6-1: ath9k_htc: USB layer deinitialized [ 857.816841][T20196] EXT4-fs (loop4): 1 truncate cleaned up 22:25:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x8}}, &(0x7f0000000280)=""/141, 0x1a, 0x8d, 0x1}, 0x20) [ 857.822665][T20196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00-\x00{'], 0x54}}, 0x0) 22:25:06 executing program 5: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x7f, 0x7f, 0x40, 0x64, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x5, 0x91c}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001000)={'syztnl1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', r1, 0x40, 0x8, 0x1, 0xfffffffd, {{0x45, 0x4, 0x0, 0x1, 0x114, 0x64, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x4, [{@private=0xa010101}, {@broadcast, 0x8}, {@empty, 0x1c000}, {@dev={0xac, 0x14, 0x14, 0x15}}]}, @cipso={0x86, 0x6a, 0xffffffffffffffff, [{0x0, 0x6, "87ac915f"}, {0x5, 0xb, "bd7a583652c1297cce"}, {0x1, 0x6, "e2917b81"}, {0x7, 0x9, "6f1c9609d0e925"}, {0x7, 0xb, "da29f5a7a1bf257dd5"}, {0x6, 0x11, "21d9cf42d95d053d830fc981cac23b"}, {0x0, 0xa, "baa965e60c0653b9"}, {0x2, 0x12, "d1a6221cc6f554c9bc437a4bfd6486f1"}, {0x2, 0x8, "3d7e95ceaeea"}, {0x7, 0x4, 'r\b'}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xe5, 0x3, 0x1, [{@broadcast, 0x4}, {@loopback}]}, @timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}]}, @lsrr={0x83, 0x2b, 0x80, [@local, @empty, @multicast1, @empty, @multicast2, @multicast2, @broadcast, @empty, @local, @rand_addr=0x64010100]}, @lsrr={0x83, 0x23, 0x85, [@multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @empty, @multicast1, @rand_addr=0x64010102, @multicast2]}]}}}}}) [ 857.972169][T20218] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 858.001869][T12298] usb 3-1: USB disconnect, device number 15 [ 858.016533][T12477] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 858.038812][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.089805][T12298] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 858.220613][T20189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.246809][T20189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.261508][ T5128] usb 4-1: USB disconnect, device number 11 22:25:06 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x2}}], 0x1, 0x0) 22:25:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 858.916236][T12298] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 858.922285][T20228] loop4: detected capacity change from 0 to 512 [ 858.949796][T20228] EXT4-fs: Ignoring removed mblk_io_submit option [ 858.970249][T20228] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 859.013531][T20228] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 859.042290][T20228] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 35: padding at end of block bitmap is not set [ 859.126947][T20228] EXT4-fs (loop4): 1 truncate cleaned up [ 859.132812][T20228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.146242][T12477] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 859.166194][T12298] usb 3-1: Using ep0 maxpacket: 32 [ 859.169868][T12477] ath9k_htc: Failed to initialize the device [ 859.225041][ T5128] usb 4-1: ath9k_htc: USB layer deinitialized [ 859.240902][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.287083][T12298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 859.496379][T12298] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 859.509922][T12298] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 859.526073][T12298] usb 3-1: Product: syz [ 859.530356][T12298] usb 3-1: Manufacturer: syz [ 859.535088][T12298] usb 3-1: SerialNumber: syz [ 859.553097][T12298] usb 3-1: config 0 descriptor?? [ 859.598992][T12298] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 859.628673][T12298] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 860.104077][T12298] usb 3-1: USB disconnect, device number 16 [ 860.150457][T12298] ldusb 3-1:0.0: LD USB Device #0 now disconnected 22:25:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:09 executing program 0: syz_clone(0x1920500, 0x0, 0x3b, 0x0, 0x0, 0x0) 22:25:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x500}}], 0x2, 0x0) 22:25:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, &(0x7f0000000180)=""/165, 0x32, 0xa5, 0x1}, 0x20) 22:25:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vi1tCpSPlgKBgoj4SJq0QA9cQCBxKAIJDuUYnLSq6jaoCRKtKhoQKhckVAnOiCMSfwE3Lgg4IXGFO6pUQYTUwslo7d3Uce18NI4d6t9PWmVmdzYzj2fHnt2xA+hbIxHxWETcERG/RsRwRCTNBUbqf64vXij/vXihnES1+uYfSa3ctcUL5aJocd6OPDOaRqQfJ/WTm8ydO39qqlKZOZvnx+dPvzs+d+78MydPT52YOTFzZvLIkcOHJp5/bvLZjsSZxXdt3wez+/e++vbl18rHLr/z4zdJvj+a4uiUkSzwP6vVpMWxxztdWY/tbEgnAz1sCOtSioisuwZr4384SnGj84bjlY962jhgU1Wr1eq29ocXqsBtLIletwDojeKDPrv/LbYuTT22hKsv1m+Asriv51v9yECkeZnBpvvbThqJiGML/3yZbbFJzyEAABp9Wv7iaDzdav6Xxr0N5Xbla0O7I+LOiLgrIu6OiD0RcU9Erex9EXH/OutvXhq6ef6TXrmlwNYom/+9kK9tLZ//FbO/4b9KeW5nLf7B5PjJyszB/DUZjcFtWX5ihTq+e/mXz9oda5z/ZVtWfzEXzNtxZaDpAd301PxUbVLaAVc/jNg30Cr+ZGklIImIvRGxb33/eleROPnk1/vbFVo9/hV0YJ2p+lXEE/X+X4im+AvJyuuT4/+LyszB8eKquNlPP196o139G4q/A7L+3778+m8usjtpXK+dW38dl377pO09za1e/0PJW7UxOZTve39qfv7sRMRQcrSWX7Z/8sa5Rb4on8U/eqD1+H8gPyeLP0tnF/GDEfFQRDyct/2RiHg0Ig6sEP8PL7U/thX6f7rl+9/S9d/U/+tPlE59/227+tfW/4drqdF8T+39bxVrbeBGXjsAAAD4r0hr34FP0rGldJqOjdW/w78ntqeV2bn5p47Pvndmuv5d+d0xmBZPuoYbnodOJAv5f6znJ/NnxcXxQ/lz489L/6/lx8qzlekexw79bkeb8Z/5vdTr1gGbrtU62uRQDxoCdF3z+E+XZy++3s3GAF3l99rQv1YZ/2m32gF0n89/6F+txv/Fpry1ALg9+fyH/mX8Q/8y/qF/Gf/Qlzbyu36Jfk5EuiWaIbFJiV6/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTGvwEAAP//MKrr7w==") 22:25:09 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x1, 0x0) 22:25:09 executing program 3: mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)) munlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) [ 861.588024][T20240] loop4: detected capacity change from 0 to 512 [ 861.602009][T20240] EXT4-fs: Ignoring removed mblk_io_submit option [ 861.617952][T20240] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002580)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002780)=[@dontfrag={{0x14, 0x29, 0x2}}], 0x18}, 0x0) [ 861.752037][T20240] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 861.805317][T20240] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 35: padding at end of block bitmap is not set 22:25:10 executing program 5: r0 = socket(0x1, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x1) [ 861.856160][T12298] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 861.880123][T20240] EXT4-fs (loop4): 1 truncate cleaned up 22:25:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000002080), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x8000000) [ 861.896168][T20240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:25:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 862.056595][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.096161][T12298] usb 3-1: Using ep0 maxpacket: 32 [ 862.222014][T12298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 862.287964][T20263] loop4: detected capacity change from 0 to 512 [ 862.337711][T20263] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8}}, @RTA_UID={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x38}}, 0x0) 22:25:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000d00)={&(0x7f0000000b00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="1e", 0x1}, {&(0x7f00000023c0)='^', 0x1}, {&(0x7f0000000bc0)="83", 0x1}], 0x3}, 0x8080) 22:25:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002280)=[{0x0, 0xffffffff00000000}, {0xffffffffffffffff}], 0x2, 0x0, 0x90}, 0x0) [ 862.377142][T20263] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 862.406152][T12298] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 862.415318][T12298] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 22:25:10 executing program 0: syz_usb_connect$uac1(0x0, 0xc7, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x0, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x9}, [@processing_unit={0x8, 0x24, 0x7, 0x4, 0x2, 0x18, "d4"}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x2, "f82b7d2add7e"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x1, 0x0, 0x7fff, 0x1f, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x0, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x4, 0x7, 0x40}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x4, 0x38, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x58, 0x81, "d2", "2898c2"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x90, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x0, 0xff, {0x7, 0x25, 0x1, 0x0, 0xf8, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x0, 0x6, 0x0, "", "4b4393"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1, 0x80, 0x6, {0x7, 0x25, 0x1, 0x0, 0x7, 0x5}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x40, 0x20, 0x8, 0x40, 0x4}, 0xf8, &(0x7f0000000240)={0x5, 0xf, 0xf8, 0x4, [@generic={0xca, 0x10, 0x2, "88893297c3d99cd1cfe5db2e23c960b7613d1efae0cf229240b776004adc06dafc2200a1f92cfa75da9a1c65bc13d48d2911aa57603aa418be739c23ef1913b254af488293ef0ea555a5b8b1a5aa475a3e2357ccc2c616d081425af10178eec96eab2bac18cdf60bdf33214134a76eb50e64b55d7766837108ea39b9e68ec1d012ea08cbf4f5f4cfca11fa657126f518b016cfcd7abba32519f4ccef0f7eb41b854d725c6d353839ade747ba48f82ae8498300b49afceb01051e5370244727818807abfea36f0c"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x7, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x1, 0xf00, 0x80, [0xffc0, 0xc0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x0, 0x3f, 0x400}]}, 0x3, [{0x2f, &(0x7f0000000380)=@string={0x2f, 0x3, "eaefca6c39549e4785f195001001d92fb2c62a388bfe5872cc8f9cd9e1ede222251ebbbfa46d54c40b8ae3f269"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x480a}}]}) [ 862.439341][T12298] usb 3-1: Product: syz [ 862.446506][T12298] usb 3-1: Manufacturer: syz [ 862.453491][T12298] usb 3-1: SerialNumber: syz [ 862.466214][T12298] usb 3-1: config 0 descriptor?? [ 862.508256][T12298] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 862.523506][T20263] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 862.539613][T12298] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 862.616384][T20263] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 36: padding at end of block bitmap is not set [ 862.649186][T20263] EXT4-fs (loop4): 1 truncate cleaned up [ 862.654923][T20263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.747505][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.826196][T12298] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 863.084246][T12298] usb 1-1: Using ep0 maxpacket: 8 [ 863.138221][T11768] usb 3-1: USB disconnect, device number 17 [ 863.177849][T11768] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 863.306528][T12298] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.336159][T12298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.516478][T12298] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 863.539330][T12298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.566145][T12298] usb 1-1: Product: 䠊 [ 863.579885][T12298] usb 1-1: Manufacturer: ъ [ 863.597021][T12298] usb 1-1: SerialNumber: syz 22:25:12 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c, 0x0}}], 0x2, 0x0) 22:25:12 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_POLL(r0, 0x0, 0x0) 22:25:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002280)=[{0x0, 0x7ffffffff000}, {0xffffffffffffffff}], 0x2, 0x0, 0x90}, 0x0) [ 863.803654][T20286] loop4: detected capacity change from 0 to 512 22:25:12 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xcd79, 0x0) read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) [ 863.864429][T20286] EXT4-fs: Ignoring removed mblk_io_submit option [ 863.927997][T20286] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 863.939938][T12298] usb 1-1: 0:2 : does not exist 22:25:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002580)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002780)=[@dontfrag={{0x14, 0x29, 0x3e, 0x12}}], 0x18}, 0x0) [ 863.980339][T12298] usb 1-1: USB disconnect, device number 5 [ 864.021263][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.047019][T20286] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:25:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @array]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/141, 0x43, 0x8d, 0x1}, 0x20) [ 864.127105][T20286] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 37: padding at end of block bitmap is not set [ 864.156193][ T5034] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 864.183967][T20286] EXT4-fs (loop4): 1 truncate cleaned up [ 864.190532][T20286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:25:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 22:25:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 864.314621][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.396188][ T5034] usb 3-1: Using ep0 maxpacket: 32 22:25:12 executing program 5: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) [ 864.512127][T20312] loop4: detected capacity change from 0 to 512 [ 864.519127][ T5034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 864.567911][T20312] EXT4-fs: Ignoring removed mblk_io_submit option [ 864.616335][T20312] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 864.726811][ T5034] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 864.737476][T20312] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 864.741717][ T5034] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 864.759492][ T5034] usb 3-1: Product: syz [ 864.763717][ T5034] usb 3-1: Manufacturer: syz [ 864.768468][ T5034] usb 3-1: SerialNumber: syz [ 864.775549][ T5034] usb 3-1: config 0 descriptor?? [ 864.818765][ T5034] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 864.831846][T20312] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 38: padding at end of block bitmap is not set [ 864.857477][ T5034] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 864.867193][T20312] EXT4-fs (loop4): 1 truncate cleaned up [ 864.873196][T20312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.094354][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.341020][T13375] usb 3-1: USB disconnect, device number 18 [ 865.384882][T13375] ldusb 3-1:0.0: LD USB Device #0 now disconnected 22:25:14 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="f1", 0x1) 22:25:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast1={0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 22:25:14 executing program 3: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, r1+60000000}}, 0x0) 22:25:14 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xf000000000000000) 22:25:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002580)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18}}, @rthdrdstopts={{0x18}}], 0x30}, 0x0) 22:25:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18}, 0x48) 22:25:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x24, 0x1c, 0x76e91e3ee7dc7153}, 0x24}}, 0x0) [ 866.043891][T20326] loop4: detected capacity change from 0 to 512 [ 866.077647][T20326] EXT4-fs: Ignoring removed mblk_io_submit option [ 866.117573][T20326] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001ac0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001cc0)=ANY=[], 0x130}, 0x0) 22:25:14 executing program 5: r0 = socket(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) [ 866.177677][T20326] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 866.207356][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:25:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) [ 866.287748][T20326] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 39: padding at end of block bitmap is not set [ 866.316114][T11768] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 866.358721][T20326] EXT4-fs (loop4): 1 truncate cleaned up [ 866.391488][T20326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.508337][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.556129][T11768] usb 3-1: Using ep0 maxpacket: 32 [ 866.707233][T11768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 866.906992][T11768] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 866.918917][T11768] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 866.930015][T11768] usb 3-1: Product: syz [ 866.934280][T11768] usb 3-1: Manufacturer: syz [ 866.950987][T11768] usb 3-1: SerialNumber: syz [ 866.986468][T11768] usb 3-1: config 0 descriptor?? [ 867.028981][T11768] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 867.061854][T11768] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:25:20 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="f1", 0x1) 22:25:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x300}}], 0x1, 0x0) 22:25:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x10, 0x2c, 0x76e91e3ee7dc7153}, 0x24}}, 0x0) 22:25:20 executing program 0: r0 = socket(0x1, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 22:25:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 872.286199][T20328] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 872.317018][T12477] usb 3-1: USB disconnect, device number 19 [ 872.379746][T12477] ldusb 3-1:0.0: LD USB Device #0 now disconnected 22:25:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) 22:25:20 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000002080), 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) [ 872.443793][T20361] loop4: detected capacity change from 0 to 512 [ 872.452162][T20361] EXT4-fs: Ignoring removed mblk_io_submit option [ 872.462822][T20361] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x0) 22:25:20 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x2, 0xffffffff}]}]}, {0x0, [0x5f, 0x5f, 0x30]}}, &(0x7f0000000180)=""/165, 0x35, 0xa5, 0x1}, 0x20) [ 872.517814][T20361] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 872.537576][T20361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set 22:25:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000d00)={&(0x7f0000000b00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f00000023c0)='^', 0x1}], 0x1}, 0x8080) [ 872.567807][T20361] EXT4-fs (loop4): 1 truncate cleaned up [ 872.573535][T20361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:25:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 872.689224][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.786151][T12477] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 872.797881][T20379] loop4: detected capacity change from 0 to 512 [ 872.809644][T20379] EXT4-fs: Ignoring removed mblk_io_submit option [ 872.822078][T20379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 872.928326][T20379] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 873.009408][T20379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 41: padding at end of block bitmap is not set [ 873.038947][T20379] EXT4-fs (loop4): 1 truncate cleaned up [ 873.044762][T20379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.067834][T12477] usb 3-1: Using ep0 maxpacket: 32 [ 873.104715][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.216491][T12477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.406459][T12477] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 873.423789][T12477] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 873.436369][T12477] usb 3-1: Product: syz [ 873.440691][T12477] usb 3-1: Manufacturer: syz [ 873.445396][T12477] usb 3-1: SerialNumber: syz [ 873.459050][T12477] usb 3-1: config 0 descriptor?? [ 873.508292][T12477] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 873.535530][T12477] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 875.237856][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.244165][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 22:25:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 22:25:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002280)=[{0x0}, {0xffffffffffffffff, 0xffffffff00000000}], 0x2, 0x0, 0x90}, 0x0) 22:25:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40402) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xfffffdef) 22:25:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:27 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="f1", 0x1) 22:25:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 878.766218][T20360] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 878.793245][T12477] usb 3-1: USB disconnect, device number 20 22:25:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x24, 0x24, 0x76e91e3ee7dc7153}, 0x24}}, 0x0) 22:25:27 executing program 5: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) [ 878.898626][T20393] loop4: detected capacity change from 0 to 512 [ 878.930989][T12477] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 878.943280][T20393] EXT4-fs: Ignoring removed mblk_io_submit option [ 878.971177][T20393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:27 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random="f1c03fc34c4f", @val, {@ipv4}}, 0x0) [ 879.098455][T20393] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:25:27 executing program 5: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 22:25:27 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil) clock_gettime(0x0, &(0x7f0000000040)) [ 879.184240][T20393] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 42: padding at end of block bitmap is not set [ 879.247034][T20393] EXT4-fs (loop4): 1 truncate cleaned up 22:25:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 879.286561][T20393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:25:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 879.356142][T12477] usb 3-1: new high-speed USB device number 21 using dummy_hcd 22:25:27 executing program 0: sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0) [ 879.407080][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.616214][T12477] usb 3-1: Using ep0 maxpacket: 32 [ 879.682307][T20422] loop4: detected capacity change from 0 to 512 [ 879.708882][T20422] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40402) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xfffffdef) 22:25:28 executing program 5: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) [ 879.729189][T20422] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 879.746312][T12477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 879.814329][T20422] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 879.890278][T20422] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 43: padding at end of block bitmap is not set [ 879.907935][T20422] EXT4-fs (loop4): 1 truncate cleaned up [ 879.913732][T20422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.946393][T12477] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 879.955564][T12477] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 880.013062][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.025726][T12477] usb 3-1: Product: syz [ 880.044200][T12477] usb 3-1: Manufacturer: syz [ 880.061829][T12477] usb 3-1: SerialNumber: syz [ 880.095117][T12477] usb 3-1: config 0 descriptor?? [ 880.158289][T12477] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 880.180454][T12477] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 885.406158][T20399] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 22:25:33 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:33 executing program 0: bpf$MAP_CREATE(0x1a, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 22:25:33 executing program 5: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 22:25:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:33 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40402) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xfffffdef) [ 885.463142][T12477] usb 3-1: USB disconnect, device number 21 22:25:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5422, 0x0) [ 885.557513][T12477] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 885.574985][T20446] loop4: detected capacity change from 0 to 512 [ 885.587467][T20446] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:33 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000001400)) 22:25:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xab}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000000499a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000544c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x89a0, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001200)={r7, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000548c0)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "b514444c55d2a4"}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="940000004300010029bd7200fbdbdf259515526ea71a6c758099ebc8f10003000400000008000200fdffffff05000100000000000c00080006000000000000001400068008000a00ff0f000008000b00090001000800020064ffffff1c0006800c00060006000000000000000c"], 0x94}, 0x1, 0x0, 0x0, 0x24000814}, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r13, 0x0, 0xf03b0000) [ 885.666145][T20446] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:34 executing program 5: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000040)) [ 885.760305][T20446] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 885.811086][T20446] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 44: padding at end of block bitmap is not set [ 886.537044][T20446] EXT4-fs (loop4): 1 truncate cleaned up [ 886.642446][T20446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:25:35 executing program 0: process_madvise(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)="21a3c331b9ca84679fed6a911aac38e7c236d1fa655449d754563d370b4aadefa1a90622f4ad82fa35eee3ce4d2f3e3fb7b31968b8be7494e5f594525a024c949ad28243c5df28c3e8dc916c74ae5f53f15d72969b21fcc080e7ef36cfee64309587ceb40ba5863e9a5ee699cd2082c1a02813ce709bee"}, {&(0x7f0000000080)="9baf6d8f9578adaace5038c3535e7a45ee41271c419c4ecc52c75c5cb5350c124c8331818657217c5c94c91f3ea9dcaf3fedaa676708c9c5dae40cdbb584f7ab0b8010acaaa64da88dab35ee7acf75f3f8f0900fac7682f17c771480149de609e82c4aa08cffabcb412c7d305823e96f2661f68998eeb4aeb0"}, {&(0x7f0000000100)="1bc35c9edbd4103f99320da8d4dfe58787698fcd16f171f4800bc9a8a27868f3efbd6afd4747bb2a79fcc83f1bf64c6d7e9a8f6abe597b613ce2785294b25da854250d3edc7d20364f89cf41a8da7a4c439eeb14a5b03490e8fbbe57"}, {&(0x7f0000000180)="a8847d6c86638ed60103f70c2284f5aef58fbf144ce23c7db684f5dd8fd397b12759e366163b0a25735f136bc129d098bf075a476bda6e2d2152e83c7e06cf0c7a8e494759e832103e9abdb5a694329bf15dad8fb9aea3d2f65c06767dfd2c8646f74ede36892c6febff48cb0ffefcece58b58b92e0ce4ff869e704856b9742c78126710b51911bcd8556c839b574e11084849d7d949334aea7175b70d13f87c7b98acb422f514ebd72c43ce9b45bfa4f354a8"}, {&(0x7f0000000240)="69772486e9170284301ac023820caafac51650391bed9b2a5118571937752a2a7e24833d2ffce86799d899abff1dd7df193d8ef997aed2590db92f1c2102b5661f7310de3236eea4c36beb2c16bd36e2a86021070a9e8289ada3370f236ad7187d3b0fe9c62ddd1ce949f8cde3165283ee862aa6259ee3b2c74534218ed14ae4883a64b217c6852ae28f0c53ed50dbbe34717ab5ecbbbfc2cbae343d7726d8c55de06f928c1a273c305498b1dd957ef07e913726f28e453109d20d8492adc5d0574df2ac9f70dfde6e97da9ee9d155de797495fe4c1b16a6", 0x19}, {&(0x7f0000000340)="d68dacfef6412dfd75a438d562b3aac73e555c245d7ab5d04293f214a1dc18bb25755bf40fa07c52dff508a880529a5a784b5317a8e91622cbd492a4aeb91f948f9976059b8ad4c2c6bc0d69133fd22df5ff405d56741eb082e8fa3e15e4c930bc956f4338d5a2d67cad465ed7b769d4f379bfde89775f0d43ebdb0bcd8a4af3"}, {&(0x7f00000003c0)="d327539ce02dd1b340faf1a092f57a20b11ed4a8b40bb20549d36956c7925c4ed4abfe50c30d1e7832961070995a2fcdaec805be8aed82586f5fa42ed2ab3e01f68bf2c55a757444ae98757432b1a9fe89679c5fe3669eae9e1deb25e357c62978bb6d35152c038261dde3302cf0eba8e9d0f5caad0518619aaf772d9f35e555abc30c9ac67d3bca22e6b26cc5ca1ee69531067fc8bb2a4acd08fea50775cd0e0bc7307012d7b910ef4128220f0a04abe5217f8b7b9bab0507a56c3826b2317960fca86fb592132a4c18da3231fba04e8f1657622a2f495864b825471a77ccd98a91a1"}], 0x39b, 0x10, 0x0) 22:25:35 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) write$FUSE_GETXATTR(r2, &(0x7f0000000040)={0x18}, 0x18) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40010102) [ 886.788089][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.866176][T12477] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 887.116221][T12477] usb 3-1: Using ep0 maxpacket: 32 [ 887.256388][T12477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.446346][T12477] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 887.455434][T12477] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 887.473761][T12477] usb 3-1: Product: syz [ 887.478655][T12477] usb 3-1: Manufacturer: syz [ 887.483282][T12477] usb 3-1: SerialNumber: syz [ 887.496845][T12477] usb 3-1: config 0 descriptor?? [ 887.538181][T12477] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 887.559727][T12477] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:25:37 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:37 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffff8000, 0x0) 22:25:37 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40402) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xfffffdef) 22:25:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) lchown(&(0x7f0000000480)='./bus/file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 22:25:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x10, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 888.752840][ T5034] usb 3-1: USB disconnect, device number 22 22:25:37 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 888.865051][T20478] loop4: detected capacity change from 0 to 512 [ 888.879983][ T5034] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 888.886678][T20478] EXT4-fs: Ignoring removed mblk_io_submit option [ 888.918581][T20478] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 889.025700][T20478] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:25:37 executing program 0: bpf$MAP_CREATE(0x3, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 889.088096][T20478] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 45: padding at end of block bitmap is not set [ 889.175529][T20478] EXT4-fs (loop4): 1 truncate cleaned up [ 889.202135][T20478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:25:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc020660b, 0x0) 22:25:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 889.276180][ T5034] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 889.352633][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:25:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0189436, 0x0) 22:25:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x10, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 889.516100][ T5034] usb 3-1: Using ep0 maxpacket: 32 [ 889.588643][T20504] loop4: detected capacity change from 0 to 512 [ 889.627760][T20504] EXT4-fs: Ignoring removed mblk_io_submit option [ 889.636246][ T5034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 889.678340][T20504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 889.745011][T20504] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 889.816328][ T5034] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 889.826768][ T5034] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 889.839275][ T5034] usb 3-1: Product: syz [ 889.844752][ T5034] usb 3-1: Manufacturer: syz [ 889.851863][ T5034] usb 3-1: SerialNumber: syz [ 889.859268][ T5034] usb 3-1: config 0 descriptor?? [ 889.877180][T20504] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 46: padding at end of block bitmap is not set [ 889.902267][ T5034] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 889.919388][ T5034] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 889.962101][T20504] EXT4-fs (loop4): 1 truncate cleaned up [ 889.969133][T20504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.055126][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:25:40 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:40 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x0) 22:25:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) 22:25:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:40 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x4b47, 0x0) [ 891.896605][T12477] usb 3-1: USB disconnect, device number 23 22:25:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x10, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) [ 891.997135][T12477] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 892.019004][T20521] loop4: detected capacity change from 0 to 512 22:25:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x0, 0x5, 0x1, 0x0, 0x20}, @CTA_EXPECT_ID={0x4}, @CTA_EXPECT_TIMEOUT]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000090) 22:25:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}]}, 0x1c}, 0x300}, 0x0) [ 892.097571][T20521] EXT4-fs: Ignoring removed mblk_io_submit option [ 892.112971][T20521] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 892.150867][T20521] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 892.166430][T20532] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 22:25:40 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) getdents(r0, 0x0, 0x0) 22:25:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) [ 892.228507][T20521] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 47: padding at end of block bitmap is not set 22:25:40 executing program 5: add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="e159efdf5776cd7b8cb017a4eb259fea56eba46ec584501d3f431ebcb92aac1c8e7b04c3bc4e3ee8c211d2a1bc4ac5f56d291101", 0xff26, 0xffffffffffffffff) [ 892.297178][T20521] EXT4-fs (loop4): 1 truncate cleaned up [ 892.323970][T20521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.506497][T12477] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 892.556695][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.756248][T12477] usb 3-1: Using ep0 maxpacket: 32 [ 892.897842][T12477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 893.086189][T12477] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 893.095315][T12477] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 893.128657][T12477] usb 3-1: Product: syz [ 893.137438][T12477] usb 3-1: Manufacturer: syz [ 893.145530][T12477] usb 3-1: SerialNumber: syz [ 893.180091][T12477] usb 3-1: config 0 descriptor?? [ 893.228542][T12477] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 893.245311][T12477] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:25:43 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5423, 0x0) 22:25:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) 22:25:43 executing program 5: add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="e159efdf5776cd7b8cb017a4eb259fea56eba46ec584501d3f431ebcb92aac1c8e7b04c3bc4e3ee8c211d2a1bc4ac5f56d291101", 0xff26, 0xffffffffffffffff) 22:25:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:43 executing program 2: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:25:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 895.060550][T11768] usb 3-1: USB disconnect, device number 24 22:25:43 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x141) 22:25:43 executing program 5: add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="e159efdf5776cd7b8cb017a4eb259fea56eba46ec584501d3f431ebcb92aac1c8e7b04c3bc4e3ee8c211d2a1bc4ac5f56d291101", 0xff26, 0xffffffffffffffff) 22:25:43 executing program 3: select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x81}, &(0x7f0000000100)={0x0, 0x2710}) [ 895.186987][T20557] loop4: detected capacity change from 0 to 512 [ 895.209270][T11768] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 895.252957][T20557] EXT4-fs: Ignoring removed mblk_io_submit option [ 895.286834][T20557] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x8, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_ID, @CTA_EXPECT_ID={0x4}, @CTA_EXPECT_TIMEOUT]}, 0x24}}, 0x0) [ 895.372459][T20557] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 895.388605][T20557] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 48: padding at end of block bitmap is not set 22:25:43 executing program 3: syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58) 22:25:43 executing program 5: add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="e159efdf5776cd7b8cb017a4eb259fea56eba46ec584501d3f431ebcb92aac1c8e7b04c3bc4e3ee8c211d2a1bc4ac5f56d291101", 0xff26, 0xffffffffffffffff) [ 895.523983][T20557] EXT4-fs (loop4): 1 truncate cleaned up [ 895.531304][T20557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:25:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_ID, @CTA_EXPECT_ID={0x4}, @CTA_EXPECT_TIMEOUT]}, 0x37fe0}}, 0x0) 22:25:43 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x103040, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) [ 895.653093][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:25:44 executing program 2: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:25:44 executing program 5: ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001800)) [ 895.923396][T20590] loop4: detected capacity change from 0 to 512 [ 895.938044][T20590] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:44 executing program 3: waitid(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 22:25:44 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 22:25:44 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000001000)) [ 895.981022][T20590] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000001ac0)="d87a9e45238c4fb2407c80656868fd539031c7bdfd4250412204d99bee31b3c4a7fbe9e400af3c85f0784981df2c343addcb35bfebd91e88cfd1d23fc00492424c279ddb187c553b2e9ed9b0d143856995b38460fe8cd6e6ddf5fc82d54076fdd7a4b4cfe2dcb97ba949ce6e80132e847b7ed14ec7dc42ce8c54c25b3b0b41f8014c8a3a1801a94656ee60fd96376e") [ 896.055033][T20590] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 896.085430][T20590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 49: padding at end of block bitmap is not set 22:25:44 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) [ 896.127064][T20590] EXT4-fs (loop4): 1 truncate cleaned up [ 896.135480][T20590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:25:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:44 executing program 2: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 896.330095][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:25:44 executing program 5: sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000140)={0x22, 0x8, 0x7, 0x7}, 0x6) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001680)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000001ac0)="d8") syz_genetlink_get_family_id$nbd(&(0x7f0000002180), 0xffffffffffffffff) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 22:25:44 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002280), 0x80900, 0x0) [ 896.568624][T20616] loop4: detected capacity change from 0 to 512 [ 896.593230][T20616] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:44 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000e00)) [ 896.620441][T20616] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003580)={0x14}, 0x14}}, 0x0) [ 896.724276][T20616] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 896.797548][T20616] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 50: padding at end of block bitmap is not set [ 896.881442][T20616] EXT4-fs (loop4): 1 truncate cleaned up [ 896.896142][T20616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.028137][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:25:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:47 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000002280), 0x80900, 0x0) 22:25:47 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 22:25:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x421, &(0x7f0000000900)="$eJzs28tvG8UfAPDvrpP29+uDhFIeLQUMBRHxSJq0QA9cQCBxAAkJDuUYkrQKdRvUBIlWEQSEyhFV4o44IvEXcIILAk5IXOGOKlUolxZORmvvJq5jhzycurCfj7TtjHecma9nx56dsQMorWr2TxKxLyJ+jYihZvbmAtXmfzeWF6f+XF6cSqJef+OPpFHu+vLiVFG0eN7ePDOSRqSfJG1/sGn+4qWzk7XazIU8P7Zw7t2x+YuXnp49N3lm5szM+YmTJ08cH3/u2YlnehJnFtf1wx/MHTn0yltXXps6deXtH7/OmrUvP98aR69Uo9op9IbHel1Zn+1vSScDfWwIm1KJiKy7Bhvjfygqsdp5Q/Hyx31tHLCj6vV6fXf300t14D8siX63AOiP4oM+u/8tjls09bgtXHuheQOUxX0jP5pnBiLNywy23d/2UjUiTi399UV2xA6tQwAAtPo2m/881Wn+l8Y9LeXuyPdQhiPizog4EBF3RcTBiLg7olH23oi4b5P1V9vya+c/6dUtBbZB2fzv+Xxv6+b5XzH7i+FKntvfiH8wOT1bmzmWvyYjMbg7y4+vU8d3L/3yWbdzrfO/7MjqL+aCeTuuDrQt0E1PLkxuJ+ZW1z6KODzQKf5kZScgiYhDEXF4i3XMPvHVkW7n/jn+dfRgn6n+ZcTjzf5firb4C8n6+5Nj/4vazLGx4qpY66efL7/erf5txd8DWf/v6Xj9r8Q/nLTu185vvo7Lv33a9Z5mq9f/ruTNRnpX/tj7kwsLF8YjdiWvrn18YvW5Rb4on8U/crTz+D8Qq6/E/RGRXcQPRMSDEfFQ3vaHI+KRiDi6Tvw/vPjoO1uPf2dl8U9vqv83n6ic/f6bbvVvrP9PNFIj+SMbef/baAO389oBAADAv0Xa+A58ko6upNN0dLT5Hf6DsSetzc0vPHl67r3z083vyg/HYFqsdA21rIeO52vDRX6iLX88Xzf+vPL/Rn50aq423e/goeT2dhn/md8r/W4dsOP8XgvKy/iH8jL+obyMfygv4x/Kq9P4/7AP7QBuPZ//UF7GP5SX8Q/lZfxDKW3nd/0SZU5Eels0Q2KHEv1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiNvwMAAP//8HXmZw==") 22:25:47 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:47 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000040), 0x100000001, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) 22:25:47 executing program 3: r0 = openat$audio(0xffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000940)=0x5ba5) [ 899.630778][T20634] loop4: detected capacity change from 0 to 512 [ 899.638991][T20633] loop5: detected capacity change from 0 to 512 [ 899.669021][T20634] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:48 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) [ 899.707043][T20634] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:48 executing program 0: openat$audio(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), 0xffffffffffffffff) [ 899.766445][T20634] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 899.833396][T20633] EXT4-fs (loop5): 1 truncate cleaned up [ 899.840692][T20634] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 51: padding at end of block bitmap is not set 22:25:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000100)) 22:25:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@func, @kfunc]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x26, &(0x7f00000000c0)=""/38, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 899.874939][T20634] EXT4-fs (loop4): 1 truncate cleaned up [ 899.889969][T20634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.898579][T20633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.000113][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.088678][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:25:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:48 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 22:25:48 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000140), 0x0) 22:25:48 executing program 0: syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x4141) 22:25:48 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:48 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:25:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@mcast2, 0xf8}) 22:25:48 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002"], 0x64}}, 0x0) [ 900.471498][T20669] loop4: detected capacity change from 0 to 512 22:25:48 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) [ 900.554965][T20669] EXT4-fs: Ignoring removed mblk_io_submit option [ 900.567273][T20669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@kfunc]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x26, &(0x7f00000000c0)=""/38, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 900.616815][T20679] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 900.653903][T20669] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:25:48 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), 0x0) [ 900.682479][T20669] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 52: padding at end of block bitmap is not set [ 900.716180][T20669] EXT4-fs (loop4): 1 truncate cleaned up [ 900.738820][T20669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.873228][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:25:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:49 executing program 5: move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 22:25:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) 22:25:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x2, 0x3f00}}, 0x20) 22:25:49 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) [ 901.207945][T20695] loop4: detected capacity change from 0 to 512 22:25:49 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100", @ANYRES32]) 22:25:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x1, &(0x7f0000000200)=@raw=[@ldst], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:25:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) [ 901.248382][T20695] EXT4-fs: Ignoring removed mblk_io_submit option [ 901.276424][T20695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 901.341750][T20695] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 901.387244][T20695] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 53: padding at end of block bitmap is not set 22:25:49 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800011, &(0x7f0000000100)={[{@check_strict}, {@utf8}, {@hide}]}, 0xff, 0x94f, &(0x7f0000000ac0)="$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") [ 901.467802][T20695] EXT4-fs (loop4): 1 truncate cleaned up 22:25:49 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) 22:25:49 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) [ 901.513123][T20695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.721856][T20720] loop5: detected capacity change from 0 to 1764 [ 901.743191][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:25:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0xf6, 0x9, 0x2}) 22:25:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @empty}, r1}}, 0x30) 22:25:50 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x48) 22:25:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x100, 0x0, 0x0, 0x0, 0x1}, 0x48) 22:25:50 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, &(0x7f0000000200), 0x0) 22:25:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) [ 902.232897][T20731] loop4: detected capacity change from 0 to 512 [ 902.257793][T20731] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000900)={'vxcan1\x00'}) [ 902.280822][T20731] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 902.340993][T20731] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 902.360114][T11768] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 902.397135][T20731] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 54: padding at end of block bitmap is not set 22:25:50 executing program 0: pipe2$9p(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f00000024c0)={0x7}, 0x7) write$P9_RLINK(r0, &(0x7f0000002740)={0x7}, 0x7) 22:25:50 executing program 3: syz_open_dev$vcsa(0x0, 0x8, 0x4312c0) pipe2$watch_queue(&(0x7f0000000200), 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) [ 902.463062][T20731] EXT4-fs (loop4): 1 truncate cleaned up [ 902.499379][T20731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.576120][T11768] usb 3-1: device descriptor read/64, error 18 [ 902.720751][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.846145][T11768] usb 3-1: new high-speed USB device number 26 using dummy_hcd 22:25:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:51 executing program 5: pipe2$9p(0x0, 0x3800) 22:25:51 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="a40300003800000000000000000000001800008014000000000000000000000000000023017c8088003400"/54, @ANYRES32, @ANYBLOB="89dfad6fa2de85b6"], 0x3a4}], 0x1}, 0x0) 22:25:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 903.056034][T11768] usb 3-1: device descriptor read/64, error 18 [ 903.168320][T20760] loop4: detected capacity change from 0 to 512 [ 903.193943][T11768] usb usb3-port1: attempt power cycle [ 903.218049][T20760] EXT4-fs: Ignoring removed mblk_io_submit option [ 903.246709][T20760] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 903.285391][T20760] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 903.325811][T20760] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 55: padding at end of block bitmap is not set [ 903.366892][T20760] EXT4-fs (loop4): 1 truncate cleaned up [ 903.390223][T20760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.480334][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.616205][T11768] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 903.806271][T11768] usb 3-1: device descriptor read/8, error -61 [ 904.093809][T11768] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 904.314196][T11768] usb 3-1: device descriptor read/8, error -61 [ 904.436190][T11768] usb usb3-port1: unable to enumerate USB device 22:25:53 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 22:25:53 executing program 5: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)={0x30, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x543, 0x0, 0x0, @ipv6=@private2={0xfc, 0xf}}]}, @generic="65b8d4b4c8"]}, 0x30}], 0x1}, 0x0) 22:25:53 executing program 0: clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, r0+10000000}, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 22:25:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) [ 905.202351][T20776] loop4: detected capacity change from 0 to 512 [ 905.229863][T20776] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:53 executing program 5: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)={0x30, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x543, 0x0, 0x0, @ipv6=@private2={0xfc, 0xf}}]}, @generic="65b8d4b4c8"]}, 0x30}], 0x1}, 0x0) [ 905.263023][T20776] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sched_setscheduler(0x0, 0x2, 0x0) [ 905.341112][T20776] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 905.357709][T20776] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 56: padding at end of block bitmap is not set [ 905.437044][T20776] EXT4-fs (loop4): 1 truncate cleaned up 22:25:53 executing program 5: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)={0x30, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x543, 0x0, 0x0, @ipv6=@private2={0xfc, 0xf}}]}, @generic="65b8d4b4c8"]}, 0x30}], 0x1}, 0x0) [ 905.493442][T20776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.556163][ T5121] usb 3-1: new high-speed USB device number 29 using dummy_hcd 22:25:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281rXFUbAPDn3knS921tU7V+tFaNFjH4kTRp1SJuFAUXFQVd1GWcpKV02kgTwZZio0jdCFLQtbgU/AvcuRF1JbjVvRSKBqHV1ciduTedTGfy0UxmYuf3g0vOuffcnPPMuWfm3HtmAuhbIxHxfETcERG/RsRwRCTNBUbqf64vXij/vXihnES1+uYfSa3ctcUL5aJocd6OPDOaRqQfJ/WTm8ydO39qqlKZOZvnx+dPvzs+d+780ydPT52YOTFzZvLIkcOHJp57dvKZjsSZxXdt3wez+/e++vbl18rHLr/z4zdJvj+a4uiUkSzwP6vVpMWxxzpdWY/tbEgnAz1sCOtSioisuwZr4384SnGj84bjlY962jhgU1Wr1eq29ocXqsBtLIletwDojeKDPrv/LbYuTT22hKsv1m+Asriv51v9yECkeZnBpvvbThqJiGML/3yZbbFJzyEAABp9Wv7iaDzVav6Xxr0N5Xbla0O7I+LOiLgrIu6OiD0RcU9Erex9EXH/OutvXhq6ef6TXrmlwNYom/+9kK9tLZ//FbO/4b9KeW5nLf7B5PjJyszB/DUZjcFtWX5ihTq+e/mXz9oda5z/ZVtWfzEXzNtxZaDpAd301PxUbVLaAVc/jNg30Cr+ZGklIImIvRGxb33/eleROPnE1/vbFVo9/hV0YJ2p+lXE4/X+X4im+AvJyuuT4/+LyszB8eKquNlPP196o139G4q/A7L+3778+m8usjtpXK+dW38dl377pO09za1e/0PJW7UxOZTve39qfv7sRMRQcrSWX7Z/8sa5Rb4on8U/eqD1+H8gPyeLP0tnF/GDEfFQRDyct/2RiHg0Ig6sEP8PL7U/thX6f7rl+9/S9d/U/+tPlE59/227+tfW/4drqdF8T+39bxVrbeBGXjsAAAD4r0hr34FP0rGldJqOjdW/w78ntqeV2bn5J4/Pvndmuv5d+d0xmBZPuoYbnodOJAv5f6znJ/NnxcXxQ/lz489L/6/lx8qzlekexw79bkeb8Z/5vdTr1gGbrtU62uRQDxoCdF3z+E+XZy++3s3GAF3l99rQv1YZ/2m32gF0n89/6F+txv/Fpry1ALg9+fyH/mX8Q/8y/qF/Gf/Qlzbyu36Jfk5EuiWaIbFJiV6/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTGvwEAAP//3WvsBQ==") 22:25:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 905.673827][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.756122][ T5121] usb 3-1: device descriptor read/64, error 18 [ 905.839939][T20800] loop4: detected capacity change from 0 to 512 [ 905.862114][T20800] EXT4-fs: Ignoring removed mblk_io_submit option [ 905.918140][T20800] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 905.981727][T20800] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 905.997413][T20800] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 57: padding at end of block bitmap is not set [ 906.046176][ T5121] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 906.068707][T20800] EXT4-fs (loop4): 1 truncate cleaned up [ 906.104397][T20800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.184329][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.246157][ T5121] usb 3-1: device descriptor read/64, error 18 [ 906.384237][ T5121] usb usb3-port1: attempt power cycle [ 906.816188][ T5121] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 907.047999][ T5121] usb 3-1: device descriptor read/8, error -61 [ 907.354153][ T5121] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 907.566444][ T5121] usb 3-1: device descriptor read/8, error -61 [ 907.696305][ T5121] usb usb3-port1: unable to enumerate USB device 22:25:56 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:56 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x10) 22:25:56 executing program 5: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)={0x30, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x543, 0x0, 0x0, @ipv6=@private2={0xfc, 0xf}}]}, @generic="65b8d4b4c8"]}, 0x30}], 0x1}, 0x0) 22:25:56 executing program 3: mount$binderfs(0x0, &(0x7f0000000180)='./binderfs\x00', 0x0, 0x397d8b791b722fc9, 0x0) 22:25:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000280)) 22:25:56 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x18, 0x0, 0x0) [ 908.319928][T20809] loop4: detected capacity change from 0 to 512 [ 908.347659][T20809] EXT4-fs: Ignoring removed mblk_io_submit option 22:25:56 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="70c46576021071a6ab637c9875e60dc3", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="c2aa31f44ee6bc0e6aafc952c6d889fe", 0x10) [ 908.373999][T20809] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:56 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x2, 0x2}]}]}, {0x0, [0x0]}}, 0x0, 0x37, 0x0, 0x1}, 0x20) 22:25:56 executing program 5: r0 = fanotify_init(0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) fanotify_mark(r0, 0x2, 0x12, r1, 0x0) [ 908.468140][T20809] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 908.507558][T20809] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 58: padding at end of block bitmap is not set 22:25:56 executing program 0: bpf$MAP_CREATE(0x16, &(0x7f00000008c0), 0x48) [ 908.541295][T20809] EXT4-fs (loop4): 1 truncate cleaned up [ 908.548424][T20809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.666294][T13375] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 908.675414][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.856333][T13375] usb 3-1: device descriptor read/64, error 18 [ 909.136079][T13375] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 909.326148][T13375] usb 3-1: device descriptor read/64, error 18 [ 909.447020][T13375] usb usb3-port1: attempt power cycle [ 909.863971][T13375] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 910.056565][T13375] usb 3-1: device descriptor read/8, error -61 [ 910.332919][T13375] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 910.512584][T13375] usb 3-1: device descriptor read/8, error -61 [ 910.636262][T13375] usb usb3-port1: unable to enumerate USB device 22:25:59 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:25:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:25:59 executing program 3: syz_clone3(&(0x7f0000000340)={0x24080000, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/124, 0x7c, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) 22:25:59 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 22:25:59 executing program 0: syz_clone3(&(0x7f0000000300)={0x144204000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:25:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000000)={0x2, 0x4e22, @private}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x0, [{@multicast2}]}]}}}], 0x20}}], 0x1, 0x0) [ 911.444761][T20844] loop4: detected capacity change from 0 to 512 [ 911.453943][T20844] EXT4-fs: Ignoring removed mblk_io_submit option [ 911.483837][T20844] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:25:59 executing program 3: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000001c0)=""/4096) [ 911.653034][T20844] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 911.686713][T20844] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 59: padding at end of block bitmap is not set 22:26:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x504, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 911.703469][T20844] EXT4-fs (loop4): 1 truncate cleaned up [ 911.710185][T20844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281rXFUbAPDn3knS921tU7V+tFaNFjH4kTRp1S50oSi4qCjooi7jJC2l00aaCLYUG0XqRpCCrsWl4F/gzo2oK8Gt7qVQNAitrkbuzL3pZDqTj2YyEzu/H1xyzr3n5pxnzj0z594zE0DfGomIFyLijoj4NSKGIyJpLjBS/3N98UL578UL5SSq1Tf/SGrlri1eKBdFi/N25JnRNCL9OKmf3GTu3PlTU5XKzNk8Pz5/+t3xuXPnnz55eurEzImZM5NHjhw+NPHcs5PPdCTOLL5r+z6Y3b/31bcvv1Y+dvmdH79J8v3RFEenjGSB/1mtJi2OPdbpynpsZ0M6GehhQ1iXUkRk3TVYG//DUYobnTccr3zU08YBm6parVa3tT+8UAVuY0n0ugVAbxQf9Nn9b7F1aeqxJVx9sX4DlMV9Pd/qRwYizcsMNt3fdtJIRBxb+OfLbItNeg4BANDo0/IXR+OpVvO/NO5tKLcrXxvaHRF3RsRdEXF3ROyJiHsiamXvi4j711l/89LQzfOf9MotBbZG2fzv+Xxta/n8r5j9Df9VynM7a/EPJsdPVmYO5q/JaAxuy/ITK9Tx3cu/fNbuWOP8L9uy+ou5YN6OKwNND+imp+anapPSDrj6YcS+gVbxJ0srAUlE7I2Ifev717uKxMknvt7frtDq8a+gA+tM1a8iHq/3/0I0xV9IVl6fHP9fVGYOjhdXxc1++vnSG+3q31D8HZD1//bl139zkd1J43rt3PrruPTbJ23vaW71+h9K3qqNyaF83/tT8/NnJyKGkqO1/LL9kzfOLfJF+Sz+0QOtx/8D+TlZ/Fk6u4gfjIiHIuLhvO2PRMSjEXFghfh/eKn9sa3Q/9Mt3/+Wrv+m/l9/onTq+2/b1b+2/j9cS43me2rvf6tYawM38toBAADAf0Va+w58ko4tpdN0bKz+Hf49sT2tzM7NP3l89r0z0/Xvyu+OwbR40jXc8Dx0IlnI/2M9P5k/Ky6OH8qfG39e+n8tP1aerUz3OHbodzvajP/M76Vetw7YdK3W0SaHetAQoOuax3+6PHvx9W42Bugqv9eG/rXK+E+71Q6g+3z+Q/9qNf4vNuWtBcDtyec/9C/jH/qX8Q/9y/iHvrSR3/VL9HMi0i3RDIlNSvT6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAz/g0AAP//0hPsCA==") [ 911.746182][T13375] usb 3-1: new high-speed USB device number 37 using dummy_hcd 22:26:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x0, [@empty, @local, @empty, @rand_addr, @multicast1, @rand_addr, @private, @rand_addr, @remote, @loopback]}]}}}], 0x40}}], 0x1, 0x0) [ 911.806896][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:26:00 executing program 5: r0 = socket(0x29, 0x2, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 911.946277][T13375] usb 3-1: device descriptor read/64, error 18 [ 911.991205][T20868] loop4: detected capacity change from 0 to 512 [ 912.022218][T20868] EXT4-fs: Ignoring removed mblk_io_submit option [ 912.067802][T20868] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 912.143851][T20868] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 912.195503][T20868] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 60: padding at end of block bitmap is not set [ 912.226869][T20868] EXT4-fs (loop4): 1 truncate cleaned up [ 912.232695][T20868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.244906][T13375] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 912.309541][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.456117][T13375] usb 3-1: device descriptor read/64, error 18 [ 912.580143][T13375] usb usb3-port1: attempt power cycle [ 913.004023][T13375] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 913.194095][T13375] usb 3-1: device descriptor read/8, error -61 [ 913.486082][T13375] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 913.656597][T13375] usb 3-1: device descriptor read/8, error -61 [ 913.787466][T13375] usb usb3-port1: unable to enumerate USB device 22:26:02 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x13f}}, 0x20) 22:26:02 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x200044400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 22:26:02 executing program 0: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) 22:26:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:02 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb1, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x4, 0x0, {0x9, 0x21, 0x3, 0x3}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1f, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x81, 0x7f}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x4, 0x9, 0x0, 0xff}, 0xf, &(0x7f0000000400)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x0, 0xfb}]}, 0x1, [{0x0, 0x0}]}) syz_open_dev$hiddev(&(0x7f0000003300), 0x0, 0x120c0) [ 914.504368][T20880] loop4: detected capacity change from 0 to 512 [ 914.572617][T20880] EXT4-fs: Ignoring removed mblk_io_submit option [ 914.582140][T20880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 914.655307][T20880] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 914.687678][T20880] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 61: padding at end of block bitmap is not set 22:26:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 914.713301][T20880] EXT4-fs (loop4): 1 truncate cleaned up [ 914.719496][T20880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:03 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 914.778029][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.836061][ T5123] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 914.886068][ T5121] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 914.935632][T20898] loop4: detected capacity change from 0 to 512 [ 914.957698][T20898] EXT4-fs: Ignoring removed mblk_io_submit option [ 914.964888][T20898] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 915.007256][T20898] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 915.059462][T20898] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 62: padding at end of block bitmap is not set [ 915.076158][ T5123] usb 6-1: Using ep0 maxpacket: 32 [ 915.096476][ T5121] usb 3-1: device descriptor read/64, error 18 [ 915.115649][T20898] EXT4-fs (loop4): 1 truncate cleaned up [ 915.124039][T20898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281rXFUbAPDn3knS921tU7V+tFaNFjH4kTRp1S5cqCi4qCjooi7jJC2l00aaCLYUG0XqRpCCrsWl4F/gzo2oK8Gt7qVQNAitrkbuzL3pZDqTj2YyEzu/H1xyzr3n5pxnzj0z594zE0DfGomIFyLijoj4NSKGIyJpLjBS/3N98UL578UL5SSq1Tf/SGrlri1eKBdFi/N25JnRNCL9OKmf3GTu3PlTU5XKzNk8Pz5/+t3xuXPnnz55eurEzImZM5NHjhw+NPHcs5PPdCTOLL5r+z6Y3b/31bcvv1Y+dvmdH79J8v3RFEenjGSB/1mtJi2OPdbpynpsZ0M6GehhQ1iXUkRk3TVYG//DUYobnTccr3zU08YBm6parVa3tT+8UAVuY0n0ugVAbxQf9Nn9b7F1aeqxJVx9sX4DlMV9Pd/qRwYizcsMNt3fdtJIRBxb+OfLbItNeg4BANDo0/IXR+OpVvO/NO5tKLcrXxvaHRF3RsRdEXF3ROyJiHsiamXvi4j711l/89LQzfOf9MotBbZG2fzv+Xxta/n8r5j9Df9VynM7a/EPJsdPVmYO5q/JaAxuy/ITK9Tx3cu/fNbuWOP8L9uy+ou5YN6OKwNND+imp+anapPSDrj6YcS+gVbxJ0srAUlE7I2Ifev717uKxMknvt7frtDq8a+gA+tM1a8iHq/3/0I0xV9IVl6fHP9fVGYOjhdXxc1++vnSG+3q31D8HZD1//bl139zkd1J43rt3PrruPTbJ23vaW71+h9K3qqNyaF83/tT8/NnJyKGkqO1/LL9kzfOLfJF+Sz+0QOtx/8D+TlZ/Fk6u4gfjIiHIuLhvO2PRMSjEXFghfh/eKn9sa3Q/9Mt3/+Wrv+m/l9/onTq+2/b1b+2/j9cS43me2rvf6tYawM38toBAADAf0Va+w58ko4tpdN0bKz+Hf49sT2tzM7NP3l89r0z0/Xvyu+OwbR40jXc8Dx0IlnI/2M9P5k/Ky6OH8qfG39e+n8tP1aerUz3OHbodzvajP/M76Vetw7YdK3W0SaHetAQoOuax3+6PHvx9W42Bugqv9eG/rXK+E+71Q6g+3z+Q/9qNf4vNuWtBcDtyec/9C/jH/qX8Q/9y/iHvrSR3/VL9HMi0i3RDIlNSvT6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAz/g0AAP//xrvsCw==") [ 915.196396][ T5123] usb 6-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.212029][ T5126] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 915.231650][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.247806][ T5123] usb 6-1: config 1 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 915.305249][ T5123] usb 6-1: config 1 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 915.328559][ T5123] usb 6-1: config 1 interface 0 has no altsetting 0 [ 915.366264][ T5121] usb 3-1: new high-speed USB device number 42 using dummy_hcd 22:26:03 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x50, &(0x7f0000000d00)=@string={0x50, 0x3, "84dd7acca26370c84f0990cdb84bbec72d7646f42cfb584e8c75503ee4c3a58d149dd348dead9b76c8f62a64a8b00d8c770af89896738f6105a846052600ce0e3e5d147ec647f82e9bc1750acd26"}}, {0x35, &(0x7f0000000d80)=@string={0x35, 0x3, "225cd84e0e4f3666f488c9c41d898543063acd8575c2a81d29d5d8011064fbac68f5480eec1318e91871cb97a9c4d7551fe490"}}]}) [ 915.420954][T20907] loop4: detected capacity change from 0 to 512 [ 915.437351][T20907] EXT4-fs: Ignoring removed mblk_io_submit option [ 915.456795][T20907] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 915.466731][ T5126] usb 4-1: Using ep0 maxpacket: 32 [ 915.494096][T20907] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 915.512336][T20907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 63: padding at end of block bitmap is not set [ 915.536727][T20907] EXT4-fs (loop4): 1 truncate cleaned up [ 915.549313][T20907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.556346][ T5121] usb 3-1: device descriptor read/64, error 18 [ 915.590298][ T5126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.626211][ T5123] usb 6-1: string descriptor 0 read error: -22 [ 915.633767][ T5123] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.40 [ 915.647653][ T5126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.676768][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.688103][ T5123] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.697368][ T5121] usb usb3-port1: attempt power cycle [ 915.715437][ T5126] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.781692][ T5123] usbhid 6-1:1.0: can't add hid device: -22 [ 915.796665][ T5123] usbhid: probe of 6-1:1.0 failed with error -22 [ 915.806241][T13375] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 915.900232][ T5126] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.40 [ 915.919248][ T5126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.939015][ T5126] usb 4-1: Product: syz [ 915.944528][ T5126] usb 4-1: Manufacturer: syz [ 915.967434][ T5126] usb 4-1: SerialNumber: syz [ 915.988068][ T5123] usb 6-1: USB disconnect, device number 11 [ 916.076097][T13375] usb 1-1: Using ep0 maxpacket: 32 [ 916.126431][ T5121] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 916.206368][T13375] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 916.296627][ T5126] usbhid 4-1:1.0: can't add hid device: -22 [ 916.302703][ T5126] usbhid: probe of 4-1:1.0 failed with error -22 [ 916.310334][ T5121] usb 3-1: device descriptor read/8, error -61 [ 916.341479][ T5126] usb 4-1: USB disconnect, device number 12 [ 916.426517][T13375] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 916.442486][T13375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.471179][T13375] usb 1-1: Product: syz [ 916.482428][T13375] usb 1-1: Manufacturer: 尢付伎昶裴쓉褝䎅㨆藍쉵ᶨ픩ǘ搐곻่Ꮼ焘韋쒩嗗 [ 916.503709][T13375] usb 1-1: SerialNumber: syz [ 916.575298][T13375] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 916.588489][ T5121] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 916.596225][ T4434] Bluetooth: hci4: command 0x0405 tx timeout [ 916.790609][ T5126] usb 1-1: USB disconnect, device number 6 [ 916.806498][ T5121] usb 3-1: device descriptor read/8, error -61 [ 916.926273][ T5121] usb usb3-port1: unable to enumerate USB device 22:26:05 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:05 executing program 5: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x25, &(0x7f0000000100)=ANY=[@ANYBLOB=',-\n']) 22:26:05 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0x4020940d, 0x0) 22:26:05 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x50, &(0x7f0000000d00)=@string={0x50, 0x3, "84dd7acca26370c84f0990cdb84bbec72d7646f42cfb584e8c75503ee4c3a58d149dd348dead9b76c8f62a64a8b00d8c770af89896738f6105a846052600ce0e3e5d147ec647f82e9bc1750acd26"}}, {0x35, &(0x7f0000000d80)=@string={0x35, 0x3, "225cd84e0e4f3666f488c9c41d898543063acd8575c2a81d29d5d8011064fbac68f5480eec1318e91871cb97a9c4d7551fe490"}}]}) 22:26:05 executing program 3: mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0xa02808, 0x0) [ 917.575855][T20917] binder: Unknown parameter '- [ 917.575855][T20917] ' [ 917.610507][T20920] loop4: detected capacity change from 0 to 512 [ 917.668916][T20920] EXT4-fs: Ignoring removed mblk_io_submit option [ 917.704047][T20920] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:26:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) dup3(r1, r0, 0x0) [ 917.774308][T20920] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) r2 = dup3(r1, r0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, 0x0, 0x0) [ 917.828719][T20920] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 64: padding at end of block bitmap is not set [ 917.896222][T11666] usb 1-1: new high-speed USB device number 7 using dummy_hcd 22:26:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup3(r1, r0, 0x0) 22:26:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 917.937225][T20920] EXT4-fs (loop4): 1 truncate cleaned up [ 917.944318][T20920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.957237][ T5126] usb 3-1: new high-speed USB device number 45 using dummy_hcd 22:26:06 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) [ 918.036723][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.156110][T11666] usb 1-1: Using ep0 maxpacket: 32 [ 918.156223][ T5126] usb 3-1: device descriptor read/64, error 18 [ 918.215031][T20943] loop4: detected capacity change from 0 to 512 [ 918.249169][T20943] EXT4-fs: Ignoring removed mblk_io_submit option [ 918.270334][T20943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 918.296536][T11666] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 918.332590][T20943] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 918.357214][T20943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 65: padding at end of block bitmap is not set [ 918.405701][T20943] EXT4-fs (loop4): 1 truncate cleaned up [ 918.444312][T20943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.457266][ T5126] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 918.546445][T11666] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 918.555574][T11666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.556681][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.583215][T11666] usb 1-1: Product: syz [ 918.592227][T11666] usb 1-1: Manufacturer: 尢付伎昶裴쓉褝䎅㨆藍쉵ᶨ픩ǘ搐곻่Ꮼ焘韋쒩嗗 [ 918.616247][T11666] usb 1-1: SerialNumber: syz [ 918.646175][ T5126] usb 3-1: device descriptor read/64, error 18 [ 918.704083][T11666] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 918.766329][ T5126] usb usb3-port1: attempt power cycle [ 918.949588][T11666] usb 1-1: USB disconnect, device number 7 [ 919.192340][ T5126] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 919.376220][ T5126] usb 3-1: device descriptor read/8, error -61 [ 919.653805][ T5126] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 919.851316][ T5126] usb 3-1: device descriptor read/8, error -61 [ 919.978530][ T5126] usb usb3-port1: unable to enumerate USB device 22:26:08 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:08 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 22:26:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:09 executing program 3: r0 = mq_open(&(0x7f0000000140)='\xf2\x16\xae\xe3P\xed\x00\x02\xaeGI\xdd\xc8;\x10\r0\x90\xaa\xf6\xc1p\x19\x1f\xcaI\x0e\xb3\x86\xd9L9\xd7\xbf\x94\xbc\xd7\xcap\x06g)0uQ\x12\xf6\x82 U\xe2|\xf1\x8dLq0f\xf1\x16\x7f\xb8\tY\x8d\xe3H\xda\v}\xb7\xed^u\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x60, &(0x7f0000000280)={0x2, 0xf36, 0x4, 0xffff}) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000980)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000009c0)={{r0}, 0x0, 0x4, @unused=[0x1, 0x100000001, 0xe3, 0x1], @devid}) fcntl$getown(r0, 0x9) r2 = semget$private(0x0, 0x3, 0x0) r3 = semget$private(0x0, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0, &(0x7f0000002a40)) setgid(r6) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000020c0)={{0x1, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x2}, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, 0x0, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r9, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r12 = getgid() r13 = getgid() getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000540)={0x3c8, 0xfffffffffffffff5, r4, [{{0x5, 0x1, 0xff6d, 0xc8c, 0x7, 0x0, {0x1, 0x5, 0x4, 0x3ff, 0x2, 0x0, 0x3f, 0x8001, 0xa84, 0x1000, 0x7, 0xee01, 0x0, 0x5, 0x200}}, {0x2, 0x3, 0x2, 0x6, '/\''}}, {{0x0, 0x2, 0x10001, 0x9, 0x1, 0x101, {0x4, 0x7f, 0x8, 0x0, 0x0, 0x9, 0x8, 0x8001, 0x5, 0x800, 0x37f, r11, r6, 0x3, 0x401}}, {0x6, 0xf63, 0x5, 0x7fff, '@]^(/'}}, {{0x4, 0x1, 0xffffffff, 0x40, 0x80000001, 0x8, {0x1, 0x7fff, 0x0, 0x7f, 0x5a96, 0x9, 0x8, 0x5, 0xfffffff9, 0x8000, 0x393e, r5, r12, 0xffffffff}}, {0x0, 0x5, 0x2, 0x0, '{('}}, {{0x4, 0x0, 0x4, 0x5, 0x6, 0x7, {0x5, 0xaa7, 0x9, 0x9, 0x80, 0x100000001, 0x2, 0x63f2e10a, 0xffffff80, 0x8000, 0xfffffffd, r5, r13, 0x6, 0x10001}}, {0x5, 0x0, 0x1, 0x4, '\x00'}}, {{0x0, 0x0, 0x4, 0x2, 0x1, 0x0, {0x6, 0x2c, 0xad, 0x4, 0x20ec, 0x1ce, 0xffffffff, 0x400, 0x0, 0xc000, 0x8001, r5, r14, 0x2, 0x7}}, {0x1, 0x8000, 0x0, 0x7}}, {{0x3, 0x2, 0x9, 0x6, 0x9, 0x3f, {0x4, 0x0, 0x71, 0x6, 0x4, 0x80000000, 0x7ff, 0x800, 0x8, 0xa000, 0xba24, r15, r7, 0xfff, 0x6}}, {0x3, 0x10001, 0x1, 0x1ff, '!'}}]}, 0x3c8) semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000000200)=""/67) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet6_udp_encap(r17, 0x11, 0x64, 0x0, 0x0) write$FUSE_BMAP(r17, &(0x7f0000000940)={0x18, 0x0, 0x0, {0x9}}, 0x18) setsockopt$inet6_udp_encap(r16, 0x11, 0x64, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f00000001c0)={0x0, 0x2, r16, 0x7fe, 0x80000}) semtimedop(r3, &(0x7f0000000000)=[{0x4, 0x7fff, 0x1800}], 0x53, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000040)=""/216) 22:26:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:09 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_BMAP(r0, &(0x7f0000000940)={0x18}, 0xb52caecb) 22:26:09 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002440), 0x1, 0x0) write$P9_RREADLINK(r0, 0x0, 0x10) 22:26:09 executing program 3: setreuid(0xee00, 0xee00) socket$inet(0x2, 0x3, 0x0) 22:26:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100), 0x9a9f1ba9760712ac) [ 921.130631][T20958] loop4: detected capacity change from 0 to 512 [ 921.136279][ T5128] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 921.184530][T20958] EXT4-fs: Ignoring removed mblk_io_submit option [ 921.233422][T20958] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 921.267532][T20958] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 921.350192][T20958] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 66: padding at end of block bitmap is not set [ 921.376202][ T5128] usb 3-1: Using ep0 maxpacket: 32 [ 921.384109][T20958] EXT4-fs (loop4): 1 truncate cleaned up [ 921.390538][T20958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000940)="83", 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, 0x0) r2 = syz_clone(0x927e7349bccfb53b, &(0x7f0000004700)="64e5a8f6d547925de37f5eff3a6a73dbb8f4e4fc83cfe5daf7f16d70a407c7339a6118b2e84d74049e0913181d10bda6f84032e536284c0c4415d54aba459c03171ef85d0e7afdd6c508360f5dd3bc899c3456a829c15ca90c721bf2ff9566752c9afac88e86482c5c5940b46aca76ff6850d18eb21646367b6e4eaf7fce2cabb0d8d07f5c14939e681d7e72c2fddddd8f142f5b776ff275191965029f299e2b155c43dfbfb1affdf6001a3fb2984cefd7705b02f2a529a93b1b1ee965f343fbf2341385402ed1ee3a5c84eb48508691a417004d09673255a9d23178edaae830582a038437453215f7bdc6a73733ef52e4b2036e", 0xf4, &(0x7f0000004800), &(0x7f0000004840), &(0x7f0000004880)="9760fbf842b426bb339be1f5cb4b2b325359a9f7a7db6ed2050b6cb751c84458a520bac9bc061ca65ea8c4e84fc0eb885078d0979643aa7085f42560691f8aa868c93fd618af9433c62d157494fbbad06f23e850d158e788b34103ab05027a152247dacda82047a807427d68") getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) chown(&(0x7f0000000200)='./file0\x00', r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, 0x0) r6 = syz_clone(0x10000, &(0x7f0000004900)="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", 0x1000, &(0x7f0000005900), &(0x7f0000005940), &(0x7f0000005980)="3772cf7c1c0ae29d7492c1bd2d82ea3486a28a82c9e240194f777763eb6121aa804b1476987dace9b088922b61735b151dd9ccb808bb3ec7054e18d29cffe6afc5982c23d63e7595527e313cdd31e4156c99fd74fab95a5dec6ef4aad3981991459723e4a34387ff9122777adb9e0e02ffc098f25facaac9c316680de0519169bc551de6f657af2ae560b160878ac140d72b135d92a0540c7f52039731c4033c578cdb8d0b3b55f0bd0f767d856938a58d9f0486") statx(0xffffffffffffff9c, &(0x7f0000005a40)='./file0\x00', 0x400, 0x2, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = mq_open(&(0x7f0000005b80)=':\x00', 0x40, 0x10, &(0x7f0000005bc0)={0x6, 0x8001, 0xf50e, 0x6}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r11, 0xd0009411, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) r13 = socket(0x27, 0x3, 0x2) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r14, 0xd0009411, 0x0) r15 = syz_clone(0x2040, &(0x7f0000005c00)="e302ab882b0fbdb07720d63c3a93f6cc7c88074cb774d49dbe80308205eac854afd34c74eafca6e7c04a169c08fa17b1e768f287cc5dd97a4052b587e618fe50bde50a9828ec7f80251e3e5b506d503e93f8a3f7ce429ab0e27716617abe7222570247c245773740671fdff15326c79d301bc7348eaf8ed3126596c0ebec2cf8c6719e2fc271d56848c10e051fd434ee6d8a4b7aed5f3d6bd52c11f26dae2506edb4b39d595af8a9c7a931dfe2111f56d453f9cf3ec9d6bc8646cd160074392397929a1494c43c8a9322f238", 0xcc, &(0x7f0000005d00), &(0x7f0000005d40), &(0x7f0000005d80)="e3466528ed99ab41ed3b1561609e62bc737d46ef8f1263e1da97e7485d56f2559557282a76e34bbee95d90c63fa7453f0b68580a795cc7a5c34671b93a352fd807ec995d504c2a44d49c172d2a90ae268471657e45378503") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000005e00)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005f80)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)="cb29022e3c3dc0f0f386ccdde86bafdcdf8f6159e95be07ca443a79c1e12d7fbe7cd5345e327e0aafe8c039a6ee7ee794c5f4d93856aeb353e76a905a8", 0x3d}], 0x1, 0x0, 0x0, 0x400}}, {{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)="ff5cb3b0aaded93666cf9c8dc3ea10e619ff4043891df5c3e0f67cf464f85bb09230187f48144483fd74abef5616c9913dfb497a194f18136b8b45963a", 0x3d}, {&(0x7f0000000300)}], 0x2, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="93701e6f072dafcf202b6427e351eda3776ef565b0500e3f0920f148dc078ce3a446a1c2cd29387a8ad1dfb69c53b5d174a668beabea134ffbaf777d045e7413bebf3b5505d02036635e6c7fa09a12642aec9cc875f9b8091bb2bf82e7228c0c7e83d066ecfe03d4f6e227176dc1fbf05842fb47339fd51d3201e22e9ecbac4d17d7e8e5b70cd0cad3fe8bee8f2448ff54e2bcd947137c930739", 0x9a}, {&(0x7f0000000500)="e9196c4ce93591601e631ef96795813a0b3fecc287bcd96e8edff9ecf1654369e4d1dbe1ed8ef6749b0beba60b16c2b34d933121f1234e88396371cf2ee4e3ab8af3d79d31c34153e960653a5ee08655bfdf5ce39c2d55f612c95da42e043399b6a9fcaa3127513e686715a38eff1b11cca3757b63", 0x75}, {&(0x7f0000000580)="fc166d113d2623836aa1a7c1312c717919ba9c128a94d8564b0345dce33572b14389ffe469df4a7d3db572d1fe7a31595865b48972fba9d72dd81f73080439439b5246bb62e3c03d8f4c627ed121fa6ef2c2b5f11c3f3c48fcfc04c53645c4f72d8090a9598ddeba2aa491b4e412579d18e6bf62ea4aaa7e63f4cd706bbe6b8b065b32c1ae7c0ec244678313b0525cef4f6f811b95aa09a5a228ce1215acc1680767e8c199f28166b35ac1ca80605879ca321b652ad90d99c9a33a284a6a", 0xbe}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000640)="337d9e4874747b9164b187f31bf650fb2b08be2d67e92c373226f9cac6d8735acc504932c0035d6d7582fca3f79c4038417d0e6ca0217bfabc644ea4748a5d1248a0f075bf58f40287a8d812b2bd840c3e8254a5f33f7ade50c4384dd7aa5034af94ef09b831655640ce6a59f7be13d86f75d9edd4e042d372d213eea855bd9ef65c4c222db59f3c7badd9334bbd148af98dd31ae8a024", 0x97}], 0x5, &(0x7f00000007c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x8851}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000880)="f14155314bf06f3ad07cd058369de5c3046c2b3f089879a182c5920326b884137dd3a24a3f2d76eb614e43865357bf960b83e091e16998a59005b1651aab77552ce010b8a23605ac4dfb5d9a14db3477c4b66ee051fb80469dd32d9f01585b301d08e870840a5ee291e84f6f07bece18145de04c369111fb64961110eed6616a1c77b9591ae3124a836d2c4308ca82a127c98fe70a79", 0x96}], 0x1, &(0x7f0000001a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x20, 0x1}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000001a40)="a01c095c925523ccb150bf27c77f06390bf8baf727d16f7373dd73a361c3c06ef770afc5bf8fc6e6e1aaa478a2d06f2134a9305a7224565d567ef6b20ec00dcb812918a12bf5276512cb33a6e29909e463ddd5eb7623c74b11a9e71ec77230d7f6c8efece9241b2f52591776a7d7167fa52a6805a1425772ba1e971c7e1a721a11c8a9f53e1524c00c5a48f59bcc1848447d327d6d79c670837849158c0b4dbeb0fbee19318d2d560052d8c9f7835574b09d30ace59d8f0953cd710df2fe24fb0c8f5f9429ee5d2cff405902bc64ac4f216db1057b704b7030dc7f34fa18aa632ce0b4296a5735ef86b437dd4b52b50a5c5d3f2eec936437182d4c1f8a0a2c2878af4bec7377cc7ae9447dead0777ef62677b2d14ad1153ebb15e9fc3d6b168fec3e1a617ffc4bd5763fbcd1d6b185f0e54f1840d9c466e2264dff6aedce27b2898ebb9dcf20f175681a20da17d3b77c2dc92e9b1a369ebf7f9ee781d7c05b75e234aaa032e3d651954ad9e0820b7547dbf3d30819923c2bff67f59d95540d9b4744b98f639c34caa8c59797dabf6f6efd5100333241b3fcb676976b53b1a75ab63e06be54e710b8b2d9aa9406fc451d3a815325b6165131c32c91e0617125d73a42a157656ab00dddf617b03b68ea854a4f15b3ece98469b0e0d23a6c540a3d54d3d2ccb1f3c678504195226affc5f75f8a7bc9059ecff9a6f49489d8cb9852de8afc418648c3813f009dd029e9ecbe10c81f52aa418fe0d7ca91b47ce173e28c3887a0a8ac3c31b6746e03e050b699fd1882232c029d739f0527c64bedcbc0db08796a3e8c84700b0367bd24a13cceec7078489e56a923b2e02e8765c97257993625c0f13e02500f3ec5ae00def9666e9d2bd172a157492e09ed3aa342796cb78ab89397df791dd6a4df986e04754144789e2bb4b9fa8b499f78a557e78bf19816f22c295aa6c6c7ea1c7a055d950a378b2a7de21c32216199f7710736d33ce52a6d3d49d246a38bdaa339b878f1ca02a347429abcdd6a2b741296cbae83fb4ef34453c810a991c3f9d56d06849c4eba8650404677634af09a56212db7be75f34da3ac5632f5d04c7fbe8c0d2d4049f00e37e2de1652174fb00e8fcf4ee4f84d705d4841086e8e2131cd4d19283195503e3d0311f41d6c0d36a8691c8ab3e379b241ec7a62f12427d7e2721800f8281e1a3666fda3c49c9d5722f2c751c9b57e385cebbf6ad0926830caffffe3c099cf4b087092067cbd65f83b021a166de5a589ffabcebd77cd89eadbc3ec28325ebbd0cb9257fec29f6bd60ecd6696b7fecf00156e4ca52f62a56a798f780f64b9bac6b10d62c7192664af6bf43a60d3783ee12b5c61b96dc86b3b797a7c7d7eaf2fb93386cf85fe460a8178388dc513380ebb33aadfcf878530c30cec563b1c804c4e2677957b0c60075b64291faede528cc045a427562f15239a2f5c1e73d5f8f647725ac3a864b8fcdd5f1ffd32057b8b91669c4c8e232f0d676149f8b9d42e4863234931c5711e6ff36b39a123658568220aeff7d86c6eaea3581269e182126df47b478b4a5c9819bc60bb3eb153d6b21b5bbdafc125039d3b284cdbb40fda7d9d8b072d4e4ba85df9e447e172c64dd157ecb01ccf383332d4fc1b52d1b06afd27ac2bad6c3116d3b0b126b1b7e90e67353a0a1edc6ecda3d293336ea265a36f4848b4c4f5c9e242d3f1de59eb67feefdf87a24b64182964295e6cd234c642156ab29efeb8039cd158761cbcf6e93539e84cca6649a3d5eaea19e63c030758b1ade7e763d95ad125a86864d4e12cb4963f7b4fd23b41d44a24d56a87b5b816deb73e28c0597791af1b0c3793f2b0bb236484bc2c094bef92a0171898eefc071ed2d4015929f94fa41ffd2cf77bb522218db7eb5adb573418456172be3e711f0cb86251665a225c0804c486ca2757766011a1d27a801ba817d7486de97ffa43e5e9fd3ad401d874b4abcbf89bc0ad5d4adbe6cc0f9cdd6cd92a46fd6f1208168b0f5bfda43a3c4669db3d19a606b42a1c3f14278e9f9059edb522ca27a9e007299e9b38ade2780c25c5c55b843857e3dccc33081f958831120dd3f1c119843649f7501aa9c8227d22a02c79833f1a6bcc1515815c75858c87ad1c6245ef54a505047ba3c928e90eabf9b8807df401d758c61b348d933cff3b9e37e173399be67b484ddd17ec61a683b61810ca5b2df7f70a139fe12e22e2cc289589b411a1df7456ea54422b4f56710ad8a4deab270bc3517db4d0e1af2913b00c536714fc017148044c67663b5f907c6e80209d91fee0525d8aa7967046f73861e2fa9f204ebdd36c647ade39188577f645a0eefa86d54b8649c8f830e6dc16f5c4b16feef5c16e24189280ba4c5f4563e820d598703996fe52d511a8eae9c2eea7fa2919221f98879f72ea38a9154e70617c7a7f9322855c4af9d3e616474e11a10f9312d58167d361566a3ee52af654b4648866558e35a86de9e1fc54521ebb7f4a33aa17937841c3ed8d8c583c38d4cd1a2efdbcda400f997f37f68ce13e2c2622e298711fa17be02957757ed32d7c91ccda378ac603ea99413015c6d0e123ea45919d4362aaa81157e4cbf33b4345517f9e46dac8c021509de6003a408af115a8e504d8b9ab39e18d2bb2d4d27c15e03594c99341ec98d688a93a868365e7f635d8b36fb51f7a1ee41e272061046ff4d4aa5a44b24290996dc6cecbb89d8f8f349cf61959a94ddf73c148d406d942ec3f66921082785a7ef3e9b5d392c1b7222692f5a4299ce765adf86eb1efae48b8cf529f7a34c06a01208d924f815dbc5ae076be647c20bf304bd2489bc21346ac61bcf15db06834e2fd34d7180f71f4c4c66c9ff264ea334da72527652f90376286ff5ec757a7a0cf637ee67a0e5f02fc77fa35275a7678bd7cf8431b51a799b15f7ac5743d52a99a76b188878ca61e3eaa51118182171d946164ae3766fc5aa62a5ffd6958772b0487dd7152a157a58a41d4434cdf4363ea7986f5ab34f80a6e09aabc5d9fd5dfc674c92aee730a5d891ad07b45db8ecab0c2ea4fbe3d9c76b25163d0aa7ac8be5c4c0601f448f78d2405768acf9a9c96d3c4bd1c3fd690426d3b5ca7b96ad65d1dc023eb5b85122daa013c68045887c5c1e52f49454f0141d7bfb790d6f686278ffb1e3e65e950904358f0a05d4da024e5df59a518c677a35c48dafd93b0036a87287cb824b1b7d7f81c50b2b2cbd580c662b880365d7359149a5eddd889623c085e4f0f10271d37328b9f227d5fde4712b99b28fbc87fc07e76f68d58acb6c07190630e8b696348a945715047dc11b30005b497b37ee05b83c711a6a0b62b8407755db90056227ca5dad57791e2993b19921336ae8b7525bfb83e901e8deedde3226f12d7ea601f2d50a11bdbfe1ab6081ee948fe1bf09b2a64525b4148c6270be0d8b01f9f6087bb43efa6325522da164018fa3c378e480dc24c50538fbbed34b9c4f85ccac8a6ea533f346165a4b7eb4973f8bdd79af3623ecacfa9f1f15e4d6b20b6ccab37f777b0722745f571a40bae233ea06a594565edb33452a0de3992abae255eb55607d8f93ff3563dfde2dd497050befdf4a4175faf60352a255474b0178b12f8159580a78f02067571c7ea01cc00febe70d606852b19563dcadf68a04beba95985d9a0f5345b0a786ce60c44d8ffd19eb00faa6636ce01af11f3b134dccda62472a521f066040a8aea782b2c9cc3e9908e8402a4389ccf3983689f98788d450d8d719cbaee66eb9405ab5adb658b647e84117ea81616592ea8b52cbaa770d4a53a2f467b75d3dd59665a89708e10171cfa06b11b4158ffaa812762f4b26a9b94dd1889e206993096f3a666baaf702c55d536af940f9cd436446b2cb573616bc835230e33ba0fab37bba12137bbdef36821e948da811da10eb3cdf111af178797f87d4adc7882ceef37b1fd50c7eefceff7c44234a1f85e2c9b1ba30034ccd5d12b9fa553c7b3b9bdefe739a4f95ddb143aec54373766f98d9c00c3083f32ea4f4fb32ef7258967f662afbfc24663b121fde2227bf3c80b0de2f40f88fcfcb08976a82cfa18e99ad72fd85669b5132b197e873f80cd3f8d6dc7f2d77b3caceb07c7c010a1c7b5fcad8096223ac07456c5ce0ce893474713a155773cbdeaf1f4c7c72d57f0f95ef26ae2a8bae1515aefb500bef65722168a08dd6dd0e7298e663a999fe08792d23b98e59bb9752a60f511b99cd1c87324261f73d7c8d6cd865a8d75038751afeb9beeec4d8915fe727d5c645f87608ffb58725fc781f9e8db7e54efdd2c3781b372c4e9ca0e090bec4f15e0053f972ccb128adc6b6bc24824b9c495e1178169025d02e4866416f9f2a470c58ede702371a4aa1b3d525a5ac608120bb19dc65f7d5b6a31a7aee647e09d4394b5a1e22b77294530f45a6ee8a5190828d5db616f490509f0c03d80d8bbfaa52d8d07db5b4e13bf2ba4886ef4c80b40aefe2ece83d3b4ff35b1f3a47c3b6b5cddce453cbb1df3c68de9366d2569cedb9e6e021dee52bf7f8861bb14bdbb90a4d671938dbffa0d035d93dd96aef87f615a22ae5d5c2da0748109996cab121ff4bf9b441923610bbe0184333203706d83835556bf2f5eb92bcbceb22e613104de9ef3ab9e67091a44a419083086d218b78baadbfd336c55becde8370f0a00f7785aa1f96e90805ef4eb4bbec074a7802c2e6ae846305d62063143261a3274798efb4475271e3d38a26d113cd87764bad993d3c19880cfa9604b3d740e394e2f2afb548c1ee4018c0f3823b95efdcf7895c0df911a64fa6661f62d44215de49410cc6a097c5acd76a02493c1724dae8d2544d3e1ce8e140b03a7654882cbcfdc452d033666347c605100f8ba33d6668bba0f0cc66bc6221455754dab7dd1d78bcbbdc1eaf5e5fa5fa27398eab8116d44064d036cac7659d13ddcb4fc92a9d911fee999a27b9ce99a67675885d6199619e6b5cf3d0bcf200f8c5423bff3a759353b906be89e0642000ea3078c9d1f56f8cc0cf6e4a4fc5a73fded5efa5a8a758819768202fd13bd75322b9dd0619e703a90183b288c41cc19448fa5c1e8206ab839c8ff335b6a567dd6ddf919f3a08d01ee9183962512ba2c25f0f6263a4bf4c01e391a335094d8410827cd375de9b7a21e08288c0ed257c576d9462dc44a4ce4599b0076bee5778543cc61ef8c4516a929f1e3ec727eb8d05a2789a9ba64f11e52b32243044033bf2741f9bfa249d3e1e7f7caca95e490e792f8afde011474a91f70b1eef1e3f067444ad0bc9322eadfb3a09922593feb034f62b118c2740b12729454dec7fa8a18fde16422f05ab41ac0fc1868254e51e9cf185bfc011284f2f7b5fb0cf829c2e69d758b91e55d7534d4aa9389d7f0c6c188705e1c4959b0fbcf3e9f83a39f0a5ed190caf4a9520ad7e23b24df5e2ab332f73cc50a7b73bd65f92c5c554ced4c8a1ac9c3d8c4598eed3b8f1fbf62ba248248a490277b25a56ba0e23d21fe2e2dfed03ef826ad0d63ac4cc9141866bde9960ff15fdd415de030fdc001961c8e304bb1c29707a16bca7812c38347a71c487db687f27c2201bfa5a46e670b0bb0b75a3d6c6362211f1fcab22675bbc3d4e9940b64b508f9f178fddd3b83e9ae96709f1fb6b10ddbd08c096afe01cb53ec4a515e718ff11977b6fbac1eaa157d27b58b28e2242365710231574575236cdc068ec0622ae7edc036f947c4337e9da2afa2e9c8d38fd3689d3f02037b66d21a3d185cea200963bde841f29595896fd15068", 0x1000}, {&(0x7f0000002a40)="172db69eb748d2aa4cfafc71473a858d5c9d836408c17cde9f7c48c51b994fc19c23118da41ac96968246dfdd9df3e88b77f1d8eca7ea778bec6a4ba332550312d47d11d717796c6e21e59a22aeb2e3852b123957c22cecb122b", 0x5a}, {&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="b85ba1d582386d21d61f419d56119938636402fb39b48ec617ceda6c4bec9c520444b8d7adc57db3a2570e91d31ba73647cfed374dea2a87b37ceb69", 0x3c}], 0x4, &(0x7f0000003c40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r1]}}], 0xc0, 0x40}}, {{&(0x7f0000003d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000003d80)="72e2438a5211ed06f74ae8bc7b87fc26a0b6cbeec00f2d8357f6bc6f15c3c453e1d1ff", 0x23}, {&(0x7f0000003dc0)="08b000f844d0526a00c0723ac307cdb0ed60a18884c57d203cee79b7a17c29395a19a904b933edecd21065c46f6179466c3b1ce284a66a350230fd75eef6a64096a64c69a64583a9958b55031fdcff84cb4f5add66514ad35071f6757a25da349b4b5747a616f9a869581f56e8ef8c1d4f2831707926895c4cadf35134be7149fe3c18f6695f53b37ee8fdbf16fac70f5e8c9f4d209491a668cc9b89319bb33eaea4152937b60f01ce37ac853fd93e703e81a97fd4d974f65f2582730b105df2c6d2ec1910e95f909ee8c452c6a1bcb1d20c", 0xd2}, {&(0x7f0000003ec0)="0794f21241b82c36e55f95443a4d47f1cd061bb510c767543444521f2ae25697fb75b2982972e841ad63c000533625f7dba86e592dbc1533d29aaf6455ad472c101899271fbdaf61478cc1a2b27bd5ac879de355ccc182d8e7d1249f6f9954a2e31384a5c259c3a4e20f3252f339f7fa9dd6e7f2cd3cc1736aa96b4024a8f050ee2db42c75bd57e0006094d9c3ec57a69ffe964395d2ad7b341155886f9ab9ca04d6884757fe47a5b9a93b7e1635bc5256ec73d3280df63c813b10260be68641a086e0b4dc0f04052ca83c804d8bcdddeb0fdb16b4470ac6524264ecebb7210fe19b7aff14aa85c3e4d3", 0xea}], 0x3, &(0x7f0000004000)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}], 0x20, 0x4008010}}, {{&(0x7f0000004040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004680)=[{&(0x7f00000040c0)="77f20fdd31ebe1b7ccd8ec89f0c3a8dd569c759dc0f08437fb3cc9dfad266b92dd035fc988cdd9c88a9e4aa3ceea42b50b1a5d42049c23c444c267b7d4245970b0c53ec34c8506c7af040c2bf9bf2a97b982101e6b0faa457924b264f13db6aaeaf56610619b3bd39e3bb2d53cb11b411cedc0a3592e749eb0805faeb04df47b4b711d24c03a85bc4c742aa46e6c6f317454edb7f1a899ac1c6da81f0016769b", 0xa0}, {&(0x7f0000004180)="bc8beea4d19efbede3c2d2b673748dccc54a1b6c0ae02ee104b0748cdb2af11f27bf604d0c29c12fa086deb044325d38088904d31f6b9375500222c22d155b7f05743f84a19da08386a5e0bfd3bee5e31dd17e7dbecefb78a5ae72b6e42f0ec472ecb3", 0x63}, {&(0x7f0000004200)="87a7d0668c4974caaea91fde00238d3d0bb22afa2f44515c2b76e9931f1606aa074d26d274f858abedecbf5927b69e1b51400655a1f62b6ef622f13417dedcf17ba8c64c195fa6b8a29345df0196ce2f0438517d19e90cee517e85d104391d2dbad21525f290ecd0e2d00f7ebac8f7e9d20e4c84a106c98849fdd93c814e314d12c8eb6f53006f50f7f8ba071507463f255bfcc80ddb08861638003b966bf370c050b851520aaf92f35739a47ebce0931165974e03f65f63c57cf97976912a61c02e42998a377833d1911dbe02f61fbaa4f641f50f4d4afdfd620e91d05bd166104d1f8b8039f7ea68b1", 0xea}, {&(0x7f0000004300)="689198d922be96cceba659008669fe865a8cc2d42821e22ebf41b10cf9d44d0367b10db0d9ea3552770096d98f459ade15ce1300ef85c4f6d426aad84369c1426b81cbc0632fa98c", 0x48}, {&(0x7f0000004380)="750beb541a379b1cf9f053309a82e45b4f3b6e8f9c7933e80ea3856babbad699c77fc530c0b962a61b8e291426f640a963ef3e76563b355af69a7f3c90846eef2fab59dc578353963376dc36c75611e4e68b02765f4693f3b5c99d10c8c4b0358fbb45400eddb64a4b5055bbf2a5958b9635a310e6dbe518222542f507fcf4a5f903b8d5df525a1c45e6a2486a44134d2468d628ed1542aac16edf8f8d0583e950f6515743bf4393e54964ad6441c19febb453b72a7d783f0e2f4d35011c32b14d253c5b1d19078c86bce4914d40603325c5d0856b913bbba4d8d895", 0xdc}, {&(0x7f0000004480)="33d134b8349a0f91733d515fc8e696aa5ecee219496dfd81618950f2a88624ea812adeb7a946e308224f460910695ffa5abf93dd6ad2d80597959e9ec6e67eb1f220c12821f99f63ba90df0911b420848542e75ec5544ef66d584688585977536b1f4d825d8d5de63da81d6cf434e82f5bdcef058193f59fa4d63acb7d2df2c50807d8c01a543b380e9c7c15b6706f7c53c8d49a46d6dc0cbb839dce6ea4ff93e6091c07a74a0308a0ea374a3486f4ccd7750882739dd73c2d2b916b434f33cc5d4afea457761f635473acdd338ffd567ae20bfd665e8afe69efe11172896dc7d8d7ecf0e9231eed3890", 0xea}, {&(0x7f0000004580)="3fb1af250886c9ba17feac18f21d0be787ada325b01f3e471795f3fbeae67162cde73dbcc4eff2bb2bbaca366a7e466f163094a7c0dc73eaa53e6392afa8dc73e27e0e52329757ff12d87ce2440dddd5fb0fb9fae0299164c55f9ad9bfb680cd862830beecf40f2b89aaac14937a155c89b5b65e1487813ddb2262f75ddd0a7f2d7f222baf890ec5c90f29a6a1d7c7f830a9c5a467c8431fb82e129995296b", 0x9f}, {&(0x7f0000004640)="4e144375675c94872446b121e7c1704608", 0x11}], 0x8, &(0x7f0000005e80)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r0, r4, r5, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7}}}, @rights={{0x34, 0x1, 0x1, [r8, r0, r0, r9, r0, r0, r10, r11, r12]}}, @rights={{0x18, 0x1, 0x1, [r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xffffffffffffffff}}}], 0x100, 0x4}}], 0x7, 0x4000) r17 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r17, 0xd0009411, 0x0) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000003b40)=ANY=[@ANYBLOB="6374d75560be0376750e710889de4b95d1c2aa79d4447e8e1c3634cb3595fbb6b594ce89de86f02dffbc6eaf35cb882e96e7770eefdd2531143c01650de1eddad70ed825c3d8385edbab16b691a672b66c5a88abdde5bd93d8c1231d99c0de9dda1b10b909d2687d899f93d205689ce2f700635595d324f56c0717eab5a3b9e9efcdca8eb5f96687174dc6bc", @ANYBLOB="41685d47ba84", @ANYRES8, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=r17, @ANYRES8=r17, @ANYRES16=r17], 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) 22:26:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 921.496460][ T5128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.519109][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.529102][ T5128] usb 3-1: config 0 has no interfaces? 22:26:10 executing program 3: mq_open(&(0x7f0000000040)='pids.max\x00', 0x0, 0x0, 0x0) [ 921.726913][ T5128] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 921.740137][T20980] loop4: detected capacity change from 0 to 512 [ 921.761217][ T5128] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 921.765308][T20980] EXT4-fs: Ignoring removed mblk_io_submit option [ 921.797698][ T5128] usb 3-1: Product: syz [ 921.818690][ T5128] usb 3-1: Manufacturer: syz [ 921.837547][ T5128] usb 3-1: SerialNumber: syz [ 921.852197][T20980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 921.867171][ T5128] usb 3-1: config 0 descriptor?? [ 921.944455][T20980] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 922.072761][T20980] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 67: padding at end of block bitmap is not set [ 922.130745][T20980] EXT4-fs (loop4): 1 truncate cleaned up [ 922.142826][T20980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.265492][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:26:12 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:12 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4) 22:26:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x32, &(0x7f0000000140)={0x0, 0x0}, 0x10) 22:26:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, 0x0) 22:26:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 923.762375][T11666] usb 3-1: USB disconnect, device number 49 22:26:12 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x10, "57de1fc81977bd37b96805bf1f3a94a0"}}) 22:26:12 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)={&(0x7f0000000840)='./file0\x00'}, 0x10) 22:26:12 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000006540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22:26:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 923.881689][T20994] loop4: detected capacity change from 0 to 512 [ 923.918866][T20994] EXT4-fs: Ignoring removed mblk_io_submit option [ 923.985110][T20994] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 924.012469][T21000] nbd: must specify a device to reconfigure [ 924.024355][T20994] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x7e, 0x0, 0x0, 0x0, 0x0, {}, [@pci, @pci={{0x8}, {0x11}}, @nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xfffffffffffffe14, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xa8}}, 0x0) [ 924.075102][T20994] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 68: padding at end of block bitmap is not set 22:26:12 executing program 0: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80020000, 0x0) [ 924.187405][T20994] EXT4-fs (loop4): 1 truncate cleaned up [ 924.207354][T20994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.330123][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.346434][T11666] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 924.606085][T11666] usb 3-1: Using ep0 maxpacket: 32 [ 924.736352][T11666] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.751293][T11666] usb 3-1: config 0 has no interfaces? [ 924.926317][T11666] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 924.935447][T11666] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 924.966054][T11666] usb 3-1: Product: syz [ 924.970303][T11666] usb 3-1: Manufacturer: syz [ 924.974961][T11666] usb 3-1: SerialNumber: syz [ 925.007988][T11666] usb 3-1: config 0 descriptor?? 22:26:15 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:15 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001080)='ns/pid\x00') ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) 22:26:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 22:26:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x1, 0x0, @loopback}, 0x1c) 22:26:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vi1tCpSPlgKBChHxkTRpgR64gABxKAIJDuUYnLSq6jaoCRKtKhoQKhckVAnOiCMSfwE3Lgg4IXGFO6pUQYTUwslo7d3Uce18NI4d6t9PWmVmdzYzj2fHnt2xA+hbIxHxSkTcERG/RsRwRCTNBUbqf64vXij/vXihnES1+uYfSa3ctcUL5aJocd6OPDOaRqQfJ/WTm8ydO39qqlKZOZvnx+dPvzs+d+780ydPT52YOTFzZvLIkcOHJp57dvKZjsSZxXdt3wez+/e++vbl18rHLr/z4zdJvj+a4uiUkSzwP6vVpMWxxzpdWY/tbEgnAz1sCOtSioisuwZr4384SnGj84bj5Y962jhgU1Wr1eq29ocXqsBtLIletwDojeKDPrv/LbYuTT22hKsv1G+Asriv51v9yECkeZnBpvvbThqJiGML/3yZbbFJzyEAABp9Wv7iaDzVav6Xxr0N5Xbla0O7I+LOiLgrIu6OiD0RcU9Erex9EXH/OutvXhq6ef6TXrmlwNYom/89n69tLZ//FbO/4b9KeW5nLf7B5PjJyszB/DUZjcFtWX5ihTq+e+mXz9oda5z/ZVtWfzEXzNtxZaDpAd301PxUbVLaAVc/jNg30Cr+ZGklIImIvRGxb33/eleROPnE1/vbFVo9/hV0YJ2p+lXE4/X+X4im+AvJyuuT4/+LyszB8eKquNlPP196o139G4q/A7L+3778+m8usjtpXK+dW38dl377pO09za1e/0PJW7UxOZTve39qfv7sRMRQcrSWX7Z/8sa5Rb4on8U/eqD1+H8gPyeLP0tnF/GDEfFQRDyct/2RiHg0Ig6sEP8PL7Y/thX6f7rl+9/S9d/U/+tPlE59/227+tfW/4drqdF8T+39bxVrbeBGXjsAAAD4r0hr34FP0rGldJqOjdW/w78ntqeV2bn5J4/Pvndmuv5d+d0xmBZPuoYbnodOJAv5f6znJ/NnxcXxQ/lz489L/6/lx8qzlekexw79bkeb8Z/5vdTr1gGbrtU62uRQDxoCdF3z+E+XZy++3s3GAF3l99rQv1YZ/2m32gF0n89/6F+txv/Fpry1ALg9+fyH/mX8Q/8y/qF/Gf/Qlzbyu36Jfk5EuiWaIbFJiV6/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTGvwEAAP//sAvsEQ==") 22:26:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 926.930871][T12298] usb 3-1: USB disconnect, device number 50 22:26:15 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) 22:26:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 22:26:15 executing program 5: sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getpeername$inet6(r0, 0x0, 0x0) 22:26:15 executing program 3: r0 = socket(0x11, 0x2, 0x0) bind$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) [ 927.107237][T21023] loop4: detected capacity change from 0 to 512 [ 927.134356][T21023] EXT4-fs: Ignoring removed mblk_io_submit option [ 927.166638][T21023] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:26:15 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10) 22:26:15 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x34}}, 0x0) [ 927.311668][T21023] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 927.361835][T21023] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 69: padding at end of block bitmap is not set [ 927.389642][T21023] EXT4-fs (loop4): 1 truncate cleaned up [ 927.398989][T21023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.476243][T12298] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 927.511656][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.736086][T12298] usb 3-1: Using ep0 maxpacket: 32 [ 927.876364][T12298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.891119][T12298] usb 3-1: config 0 has no interfaces? [ 928.116471][T12298] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 928.125618][T12298] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 928.149478][T12298] usb 3-1: Product: syz [ 928.159585][T12298] usb 3-1: Manufacturer: syz [ 928.169932][T12298] usb 3-1: SerialNumber: syz [ 928.183625][T12298] usb 3-1: config 0 descriptor?? 22:26:18 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b00010000000009040000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:18 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000002180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 22:26:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6tnl0\x00', 0x600}) 22:26:18 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000021c0)={0x0, 0x0, 0x0}, 0x2) 22:26:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vi1tCpSPlgKBChHxkTRpgR64gEBwKAIJDuUYnLSq6jaoCRKtKhoQKhckVAnOiCMSfwE3Lgg4IXGFO6pUQYTUwslo7d3Uce18NI4d6t9PWmVmdzYzj2fHnt2xA+hbIxHxSkTcERG/RsRwRCTNBUbqf64vXij/vXihnES1+uYfSa3ctcUL5aJocd6OPDOaRqQfJ/WTm8ydO39qqlKZOZvnx+dPvzs+d+780ydPT52YOTFzZvLIkcOHJp57dvKZjsSZxXdt3wez+/e++vbl18rHLr/z4zdJvj+a4uiUkSzwP6vVpMWxxzpdWY/tbEgnAz1sCOtSioisuwZr4384SnGj84bj5Y962jhgU1Wr1eq29ocXqsBtLIletwDojeKDPrv/LbYuTT22hKsv1G+Asriv51v9yECkeZnBpvvbThqJiGML/3yZbbFJzyEAABp9Wv7iaDzVav6Xxr0N5Xbla0O7I+LOiLgrIu6OiD0RcU9Erex9EXH/OutvXhq6ef6TXrmlwNYom/89n69tLZ//FbO/4b9KeW5nLf7B5PjJyszB/DUZjcFtWX5ihTq+e+mXz9oda5z/ZVtWfzEXzNtxZaDpAd301PxUbVLaAVc/jNg30Cr+ZGklIImIvRGxb33/eleROPnE1/vbFVo9/hV0YJ2p+lXE4/X+X4im+AvJyuuT4/+LyszB8eKquNlPP196o139G4q/A7L+3778+m8usjtpXK+dW38dl377pO09za1e/0PJW7UxOZTve39qfv7sRMRQcrSWX7Z/8sa5Rb4on8U/eqD1+H8gPyeLP0tnF/GDEfFQRDyct/2RiHg0Ig6sEP8PL7Y/thX6f7rl+9/S9d/U/+tPlE59/227+tfW/4drqdF8T+39bxVrbeBGXjsAAAD4r0hr34FP0rGldJqOjdW/w78ntqeV2bn5J4/Pvndmuv5d+d0xmBZPuoYbnodOJAv5f6znJ/NnxcXxQ/lz489L/6/lx8qzlekexw79bkeb8Z/5vdTr1gGbrtU62uRQDxoCdF3z+E+XZy++3s3GAF3l99rQv1YZ/2m32gF0n89/6F+txv/Fpry1ALg9+fyH/mX8Q/8y/qF/Gf/Qlzbyu36Jfk5EuiWaIbFJiV6/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTGvwEAAP//rEPsEg==") 22:26:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 930.044475][ T5121] usb 3-1: USB disconnect, device number 51 22:26:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x0, 0x100}, 0x48) [ 930.161968][T21058] loop4: detected capacity change from 0 to 512 [ 930.194171][T21058] EXT4-fs: Ignoring removed mblk_io_submit option [ 930.221035][T21058] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 930.252365][T21058] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) 22:26:18 executing program 0: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x47) close(0xffffffffffffffff) [ 930.283656][T21058] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 70: padding at end of block bitmap is not set [ 930.309655][T21058] EXT4-fs (loop4): 1 truncate cleaned up [ 930.319015][T21058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 930.436380][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:26:18 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000001c0)=""/134, 0x26, 0x86, 0x1}, 0x20) 22:26:18 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000041d850001020000009700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) [ 930.556633][ T5121] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 930.578620][T21074] loop4: detected capacity change from 0 to 512 [ 930.587247][T21074] EXT4-fs: Ignoring removed mblk_io_submit option [ 930.628070][T21074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 930.699758][T21074] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 930.727029][T21074] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 71: padding at end of block bitmap is not set [ 930.752271][T21074] EXT4-fs (loop4): 1 truncate cleaned up [ 930.758225][T21074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.796088][ T5121] usb 3-1: Using ep0 maxpacket: 32 [ 930.827684][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.916315][ T5121] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.116169][ T5121] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 931.125275][ T5121] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 931.147036][ T5121] usb 3-1: Product: syz [ 931.151289][ T5121] usb 3-1: Manufacturer: syz [ 931.155905][ T5121] usb 3-1: SerialNumber: syz [ 931.174518][ T5121] usb 3-1: config 0 descriptor?? [ 931.217881][ T5121] ldusb 3-1:0.0: Interrupt in endpoint not found 22:26:21 executing program 3: syz_clone(0x1200100, 0x0, 0x0, 0x0, 0x0, 0x0) 22:26:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000041d850001020000009700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) 22:26:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5000000}]}}, &(0x7f0000000140)=""/244, 0x26, 0xf4, 0x1}, 0x20) 22:26:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:21 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b00010000000009040000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) [ 933.168261][ T5126] usb 3-1: USB disconnect, device number 52 22:26:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000380)=""/134, 0x2a, 0x86, 0x1}, 0x20) [ 933.261704][T21089] loop4: detected capacity change from 0 to 512 22:26:21 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000940)=ANY=[], 0x180}, 0x0) [ 933.303493][T21089] EXT4-fs: Ignoring removed mblk_io_submit option 22:26:21 executing program 3: socketpair(0x23, 0x0, 0x5, &(0x7f00000000c0)) 22:26:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000041d850001020000009700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) [ 933.412003][T21089] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:26:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000041d850001020000009700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) 22:26:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xb}, {}, {}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20) [ 933.510188][T21089] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 22:26:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @volatile={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x32}, 0x20) [ 933.573755][T21089] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 72: padding at end of block bitmap is not set [ 933.624291][T21089] EXT4-fs (loop4): 1 truncate cleaned up [ 933.636176][T21089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)='2', 0x1}], 0x1}, 0x40011) 22:26:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 933.736368][ T5126] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 933.770364][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.868969][T21122] loop4: detected capacity change from 0 to 512 [ 933.908841][T21122] EXT4-fs: Ignoring removed mblk_io_submit option 22:26:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 933.924547][T21122] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 933.975760][T21122] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 933.986096][ T5126] usb 3-1: Using ep0 maxpacket: 32 [ 933.997339][T21122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 73: padding at end of block bitmap is not set [ 934.013248][T21122] EXT4-fs (loop4): 1 truncate cleaned up [ 934.019531][T21122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.075688][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.114553][ T5126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.306342][ T5126] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 934.330175][ T5126] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 934.383764][ T5126] usb 3-1: Product: syz [ 934.391755][ T5126] usb 3-1: Manufacturer: syz [ 934.406318][ T5126] usb 3-1: SerialNumber: syz [ 934.424704][ T5126] usb 3-1: config 0 descriptor?? [ 934.467917][ T5126] ldusb 3-1:0.0: Interrupt in endpoint not found 22:26:24 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b00010000000009040000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:24 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) 22:26:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/40, 0x28}], 0x1) write(r0, 0x0, 0x0) 22:26:24 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 22:26:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281rXFUbAPDn3knS921tU7V+tFaNFjH4kTRp1S7cKAqCFQVd1GWcpKV02kgTwZZio0jdCFLQtbgU/AvcuRF1JbjVvRSKBqHV1ciduTedTGfy0UxmYuf3g0vOuffcnPPMuWfm3HtmAuhbIxHxakTcERG/RsRwRCTNBUbqf64vXij/vXihnES1+uYfSa3ctcUL5aJocd6OPDOaRqQfJ/WTm8ydO39qqlKZOZvnx+dPvzs+d+780ydPT52YOTFzZvLIkcOHJp57dvKZjsSZxXdt3wez+/e+8vbl18rHLr/z4zdJvj+a4uiUkSzwP6vVpMWxxzpdWY/tbEgnAz1sCOtSioisuwZr4384SnGj84bj5Y962jhgU1Wr1eq29ocXqsBtLIletwDojeKDPrv/LbYuTT22hKsv1G+Asriv51v9yECkeZnBpvvbThqJiGML/3yZbbFJzyEAABp9Wv7iaDzVav6Xxr0N5Xbla0O7I+LOiLgrIu6OiD0RcU9Erex9EXH/OutvXhq6ef6TXrmlwNYom/89n69tLZ//FbO/4b9KeW5nLf7B5PjJyszB/DUZjcFtWX5ihTq+e+mXz9oda5z/ZVtWfzEXzNtxZaDpAd301PxUbVLaAVc/jNg30Cr+ZGklIImIvRGxb33/eleROPnE1/vbFVo9/hV0YJ2p+lXE4/X+X4im+AvJyuuT4/+LyszB8eKquNlPP196o139G4q/A7L+3778+m8usjtpXK+dW38dl377pO09za1e/0PJW7UxOZTve39qfv7sRMRQcrSWX7Z/8sa5Rb4on8U/eqD1+H8gPyeLP0tnF/GDEfFQRDyct/2RiHg0Ig6sEP8PL7Y/thX6f7rl+9/S9d/U/+tPlE59/227+tfW/4drqdF8T+39bxVrbeBGXjsAAAD4r0hr34FP0rGldJqOjdW/w78ntqeV2bn5J4/Pvndmuv5d+d0xmBZPuoYbnodOJAv5f6znJ/NnxcXxQ/lz489L/6/lx8qzlekexw79bkeb8Z/5vdTr1gGbrtU62uRQDxoCdF3z+E+XZy++3s3GAF3l99rQv1YZ/2m32gF0n89/6F+txv/Fpry1ALg9+fyH/mX8Q/8y/qF/Gf/Qlzbyu36Jfk5EuiWaIbFJiV6/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTGvwEAAP//nSPsFg==") 22:26:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 936.303081][T12298] usb 3-1: USB disconnect, device number 53 22:26:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@in, 0xc, 0x0}, 0x0) 22:26:24 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x10, 0x0) 22:26:24 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4) read(r0, &(0x7f0000000100)=""/36, 0x24) [ 936.424940][T21142] loop4: detected capacity change from 0 to 512 [ 936.448105][T21142] EXT4-fs: Ignoring removed mblk_io_submit option [ 936.456859][T21142] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 936.551902][T21142] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:24 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsync(r0) [ 936.591870][T21142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 74: padding at end of block bitmap is not set [ 936.646465][T21142] EXT4-fs (loop4): 1 truncate cleaned up [ 936.652197][T21142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.668410][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.675505][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 22:26:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@jmp]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 936.740377][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.846745][T12298] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 936.948922][T21163] loop4: detected capacity change from 0 to 512 [ 936.983567][T21163] EXT4-fs: Ignoring removed mblk_io_submit option [ 936.996630][T21163] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 937.042278][T21163] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 937.067483][T21163] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 75: padding at end of block bitmap is not set [ 937.088141][T21163] EXT4-fs (loop4): 1 truncate cleaned up [ 937.093983][T21163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.126214][T12298] usb 3-1: Using ep0 maxpacket: 32 [ 937.240170][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.266428][T12298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.476259][T12298] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 937.488807][T12298] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 937.508021][T12298] usb 3-1: Product: syz [ 937.517871][T12298] usb 3-1: Manufacturer: syz [ 937.530260][T12298] usb 3-1: SerialNumber: syz [ 937.549330][T12298] usb 3-1: config 0 descriptor?? [ 937.587911][T12298] ldusb 3-1:0.0: Interrupt in endpoint not found 22:26:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe800"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:27 executing program 3: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000020c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 22:26:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x0, 0x1, &(0x7f0000001240)=@raw=[@func], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:26:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x16, 0x0, 0x4cb, 0x9eae, 0x1}, 0x48) 22:26:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 939.427888][T11666] usb 3-1: USB disconnect, device number 54 22:26:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 22:26:27 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003100)={0xffffffffffffffff}, 0xc) 22:26:27 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 939.560244][T21178] loop4: detected capacity change from 0 to 512 22:26:28 executing program 5: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 939.658090][T21178] EXT4-fs: Ignoring removed mblk_io_submit option [ 939.696202][T21178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 939.759989][T21178] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x9, 0x0, 0x104}, 0x98) [ 939.832848][T21178] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 76: padding at end of block bitmap is not set 22:26:28 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0) [ 939.914172][T21178] EXT4-fs (loop4): 1 truncate cleaned up [ 939.945070][T21178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 939.966463][T11666] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 940.037658][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.206030][T11666] usb 3-1: Using ep0 maxpacket: 32 [ 940.326074][T11666] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.336343][T11666] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 940.516328][T11666] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 940.525450][T11666] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 940.549817][T11666] usb 3-1: Product: syz [ 940.554083][T11666] usb 3-1: Manufacturer: syz [ 940.576094][T11666] usb 3-1: SerialNumber: syz [ 940.587582][T11666] usb 3-1: config 0 descriptor?? [ 940.650542][T11666] ldusb 3-1:0.0: Interrupt in endpoint not found 22:26:30 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe800"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 22:26:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, &(0x7f0000000000)="1133935c10fe99610d8f68b719cd016a4d2135e192565d58f0ef1fb7b03cd25a35819b08993c6b178283aa662b8545370c3de23104e532402aaa417a4124721cec358879d9c5e2406bf1fff8867906011a0e1255d0e3f34bc4eed79d61ca83e7c8a7e6a973619b59fa87e15cd34309f383de139b24204e027f3620ec29f9b5cdf5c3e23d0330ecd2cdba51c5fd9d7daea701e935d5198831dd54b517cc402580f4", 0xa1, 0x80, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 22:26:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 22:26:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 942.530998][T11666] usb 3-1: USB disconnect, device number 55 22:26:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x14) [ 942.647444][T21205] loop4: detected capacity change from 0 to 512 [ 942.655263][T21205] EXT4-fs: Ignoring removed mblk_io_submit option 22:26:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x13, 0x0, 0x0) 22:26:31 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000280)="ad", 0x1, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) [ 942.698558][T21205] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 942.752708][T21205] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 942.777439][T21205] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 77: padding at end of block bitmap is not set [ 942.827485][T21205] EXT4-fs (loop4): 1 truncate cleaned up [ 942.833246][T21205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)=@un=@file={0xa}, 0xa) 22:26:31 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv4}}, 0x0) 22:26:31 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002380)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f00000023c0)=""/93, 0x5d}, 0x0) [ 943.096168][T11666] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 943.155664][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.362969][T11666] usb 3-1: Using ep0 maxpacket: 32 [ 943.486481][T11666] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.516338][T11666] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 943.706558][T11666] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 943.715679][T11666] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 943.746401][T11666] usb 3-1: Product: syz [ 943.750640][T11666] usb 3-1: Manufacturer: syz [ 943.755275][T11666] usb 3-1: SerialNumber: syz [ 943.797882][T11666] usb 3-1: config 0 descriptor?? [ 943.838240][T11666] ldusb 3-1:0.0: Interrupt in endpoint not found 22:26:34 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe800"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:34 executing program 0: syz_emit_ethernet(0x4f, &(0x7f0000000980)={@local, @random="14b8017bcad2", @val, {@ipv4}}, 0x0) 22:26:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:34 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f0000000840)="9a", 0x1, 0x4, &(0x7f0000000900)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 22:26:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:34 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 945.681401][T11666] usb 3-1: USB disconnect, device number 56 22:26:34 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utimes(&(0x7f0000000040)='./file0\x00', 0x0) [ 945.858841][T21252] loop4: detected capacity change from 0 to 512 [ 945.879882][T21252] EXT4-fs: Ignoring removed mblk_io_submit option 22:26:34 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x3, &(0x7f0000000000), 0x8) [ 945.907040][T21252] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:26:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 945.977959][T21252] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:34 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x4300, 0x0) [ 946.057289][T21252] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 78: padding at end of block bitmap is not set [ 946.140332][T21252] EXT4-fs (loop4): 1 truncate cleaned up 22:26:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 946.181009][T21252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.226103][T11666] usb 3-1: new high-speed USB device number 57 using dummy_hcd 22:26:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0xc048aeca, &(0x7f0000000440)={"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"}) [ 946.365135][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.486107][T11666] usb 3-1: Using ep0 maxpacket: 32 [ 946.606108][T11666] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.617181][T11666] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 946.786527][T11666] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 946.795643][T11666] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 946.822153][T11666] usb 3-1: Product: syz [ 946.829617][T11666] usb 3-1: Manufacturer: syz [ 946.834383][T11666] usb 3-1: SerialNumber: syz [ 946.851496][T11666] usb 3-1: config 0 descriptor?? [ 946.919317][T11666] ldusb 3-1:0.0: Interrupt in endpoint not found 22:26:37 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:37 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x4300, 0x0) [ 948.814878][ T5126] usb 3-1: USB disconnect, device number 57 22:26:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0xc008aec1, &(0x7f0000000440)={"263f3e9de0f5b7bcc9c87860595aa98ba9f94a1e6dc6d726cb11f3c404e719f68b039d6eb4bed248084f91cbec521539ff18e9d4ff126b0e5fdc0c9c8ad00ad016d368b0f2826f3028bc52b19861b95700b141b324011a297e5c69d0dc32411a52cdbda2d56ff81ec89ca7ae5335a7097602250b69ebba2720dfdfbbf8989ed6b12e60c5d55424733d0e242c099e01932dec47d246fc69f83fb3563d1a7479e30865b8f8f5273d4b844dd36117e9f36d7d45ab2a888d315d820fe76010fcf3d117d20f98f0f6d0b679bb452aa2e6e65619e0bcf68d6060d1d9eb15f3e9391fa0010949fc60b62bd2c3bcfa6697a0f724e1f05310bfa2d0ef0c526ab84d2eca5272bca09c149a616d901617e6869f50108390a01506667678d59f912dc57172ca27c8ec69f3dd18107d717d216f28e4f0db0a3b1349a6a18cd833f83c49e13d3b17bdfead63425776f59b560e7f363d5d3a2639c1e0ff459d359e53a15d1126f749d2b3a2163313fc7f56557410b55eff1ef64422a7848bb598bdd2e9f38c215dd3b63c24766cc470ef27fcebdaa2435f7b4260ed8bce3f58d5e9d5be3316b22293b462b1f5d1cc374c1a0d7672c1fc3a948d5e1d089e6ac4fd81238f06d1ca04ed2b5af0e6ee5accd4dbcc7c31e5e2a50fa93602cbac22b9222d69dc38877b4f4b0e092ac8cb290a0c61d5d39ca3197e81ad4176b908cc0f21c6d7aab9cd5ca18cd0f6fce219916e4823c8c0b2ee4683fa5e9b07ced504ddab2f75837714589bb8b9578f4ef9cdcb41fd64a70315881183060b94535f4522c86272b1a839cf470cee404f7b327cfb30415dbd0bb9a3d65805b3094a272d10c2fd61614f821e649d78c319b697bb0e66adffacfb079ccff093f02068ee5adf0d721a5a5b2aacea02bb64f8e079cd94052a89bf3b09c62176bc8a3c37e17a244cfbc387bce5725a33e4f3536ffbff6715289b6d20ed6db2d3d56886b20ffb4a93b5eae9a9b4dc4e075130348d00bd3361a43076c4addb41071236c3dca1157babb396c515d0bc93d3706e0b57ef205fc8475a737a3a1ba83c93e1502732c369be639ff047158621e339a6379ef654505df428ef94ac3bdae637fb7f891376147d2f84d8bca6bf5d550af78cfe9f8b7e98f15a17695d6b727c74b0e5efafcba6b756f04ee122b6891bcd036c4a7f3109dfc2c90a52a05db0375ffe00f14b21894e9af9aaebd50b1693f8a2c7a3ab95be27d9e4e7019f92a2f43d8dca802c1091aef8dbc51e6dd2c398ddfde4fe81ffd7518b948a82401a88f43ecfad9f8206a5c7fe66d2a07944dddf756aee7e8f576fc0a30a42bef942ac806ca5d353b498350668c9f97f46e4b68487777eb9c60c7ba0e92afb9f07b4fa454c73d8b918b656f0338d2403e60baff74336ac2fa01105a2a89f7167593037d6335dfada9648f6499d058e892c5daf"}) 22:26:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_clone(0x40080000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:37 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x4300, 0x0) [ 948.959677][T21287] loop4: detected capacity change from 0 to 512 [ 948.980076][T21287] EXT4-fs: Ignoring removed mblk_io_submit option [ 948.994343][T21287] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 949.063489][T21287] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 949.105061][T21287] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 79: padding at end of block bitmap is not set [ 949.131048][T21287] EXT4-fs (loop4): 1 truncate cleaned up [ 949.137076][T21287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:37 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x4300, 0x0) 22:26:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 949.329512][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.398936][ T5126] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 949.578539][T21307] loop4: detected capacity change from 0 to 512 [ 949.602381][T21307] EXT4-fs: Ignoring removed mblk_io_submit option [ 949.630719][T21307] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 949.686189][ T5126] usb 3-1: Using ep0 maxpacket: 32 [ 949.691762][T21307] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 949.758689][T21307] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 80: padding at end of block bitmap is not set [ 949.792869][T21307] EXT4-fs (loop4): 1 truncate cleaned up [ 949.809298][T21307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.826310][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 949.959500][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.024325][ T5126] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 950.042055][ T5126] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 950.061318][ T5126] usb 3-1: Product: syz [ 950.065553][ T5126] usb 3-1: Manufacturer: syz [ 950.096005][ T5126] usb 3-1: SerialNumber: syz [ 950.102896][ T5126] usb 3-1: config 0 descriptor?? [ 950.178107][ T5126] ldusb 3-1:0.0: Interrupt in endpoint not found 22:26:40 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x301, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}]}, 0x2c}}, 0x0) 22:26:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x4300, 0x0) 22:26:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 951.966548][T11666] usb 3-1: USB disconnect, device number 58 22:26:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x4300, 0x0) [ 952.115876][T21318] loop4: detected capacity change from 0 to 512 [ 952.123339][T21321] nft_compat: unsupported protocol 0 22:26:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 952.221388][T21318] EXT4-fs: Ignoring removed mblk_io_submit option 22:26:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0), 0x4) [ 952.268905][T21318] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:26:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x4300, 0x0) [ 952.375320][T21318] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0), 0x4) [ 952.496583][T21318] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 81: padding at end of block bitmap is not set [ 952.546336][ T5034] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 952.560020][T21318] EXT4-fs (loop4): 1 truncate cleaned up [ 952.599994][T21318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.779054][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.796071][ T5034] usb 3-1: Using ep0 maxpacket: 32 [ 952.926433][ T5034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 953.104788][ T5034] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 953.114228][ T5034] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 953.135996][ T5034] usb 3-1: Product: syz [ 953.140228][ T5034] usb 3-1: Manufacturer: syz [ 953.144959][ T5034] usb 3-1: SerialNumber: syz [ 953.169068][ T5034] usb 3-1: config 0 descriptor?? [ 953.209235][ T5034] ldusb 3-1:0.0: Interrupt in endpoint not found 22:26:43 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) 22:26:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 22:26:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 955.206629][ T5034] usb 3-1: USB disconnect, device number 59 [ 955.283495][T21350] loop4: detected capacity change from 0 to 512 [ 955.301836][T21350] EXT4-fs: Ignoring removed mblk_io_submit option 22:26:43 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f000001ee80)='./file0\x00', 0xa00840, &(0x7f0000001340)={[{@case_sensitive_no}, {@fmask={'fmask', 0x3d, 0x3}}, {@errors_continue}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x1}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_yes}, {@errors_remount}, {}, {@nls={'nls', 0x3d, 'euc-jp'}}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@gid}, {@case_sensitive_no}]}, 0xdb, 0x1ee53, &(0x7f000001eec0)="$eJzs3QmcTXX/B/Df2fd9s8Vg7Pu+77vsW5Ls+54tJIZk3wnZk+whVJJEkkqyS5IkSZJUsiX+L3fuTGaGp2eep6f6O5/362XOuWfu/Z3fOd/5zeece4653zWaWq9J9cYxMTExRKRJvGskiTgSR24z8fNsdNnt6PQXQghFCLk6d0SNPP32VbmzTM+07Ymha7Js768026S/KZC9ZqvvLhU+s9ffm/a7W026dO0X07VfTK/e/WPaxrTr3bt/23Y9OsZ06Nqve/6YBj06tu3XMaZrr34d+yb5dqcevfv0GRzTtlcHTe7Tt2O/fjFtew2O6d5xcEz/3jH9+w6Oadu5bddeMfnz54/RZAL/pqar/u4eAAAAAAAAAAAAAAAAAADAn+P2bSLcmVb4uzsCAAAAAAAAAAAAAAAAAAAA/7HqtepUK0i4xMcUoUhFQpHFFCFE/P15Cf/vX0z2epMQ0iYylybytWbi3L/G/5v9K0gI6ZLYPk1qR+aoaI85EtekYK8Jt45R95uSU9GGjiVdL8vEkrqkOmkSfRwX7fudrY//iwbxskWnFRMWtIn+kYSCSadW9vg9tD5JO0yK7Ulsx0wySZxaVHx7t2/fvv1v7qL/QvJqQrig/uGG+oebeN/8b5Ms/5loKtLJWrhf/v9RLt8z/6mUi+7kf5/E9mnSKLX5HxNtKDpNWK+YmP91SVfSl/SNLr/fcUDCXGJ+x9x7mpmOj+2/Jr//W8mrCeGC+ocb6h9udIr8p/9F/tP/H/M/8Z2L+Ond+V+H9CadSXXSlfQgHaPL75f/Cf8/IjH/k7WbMM1ckYq8CPkP/3yof7ih/uGWMv+ZaP6fS5b//F3HAHczo3mZkP8F/8P8T/o+P0UapDrnk0poX2BiSTPSm/QgA0hP0jHSblziemjSIXGNbNyd7Ui4HuBGvls0ur0uWUTZJD7ZCWdHXx9ZFv8E7s7pfwxNkjwn+fdI9FipYOL6WWJH5/qRwWQI6U7akh6Ro5GE9yPuHPvkTHw+R9Rk11eY6JbHJS5Pk3jdIc0fHodg/Icb6h9uqH+4pcx/Npr/79/j+j/7P87//+o8P+ECevSv/999nl+J9Cf9SV9SlXQknaLLkx4HMP/2ccA4kvI4ILIslccB93ufIUHy+wQStithalHVI9P/7n0GjP9wQ/3DDfUPt5T5z0USiYn/LKBk5/93niUka+GP8n9jXKUn7p4mLM+erJ2CSa4jUKTqf3/+H0lOiskfedwgSd7+/nN/v+v6ec2kU4uOfLQRmUoIaX5nho0/bigZfUksqUWKkIKR7aCiO4aK7p+c0X93dzJNsrsDF0f7SLEVo3s6qZp37/B7TBPWb1HVIo/XJ7xvwMa/zyAm62d8X4T/J9cp4H8j+WiGcEH9w01Ikf989Py/+T2u//N/0/X/u+//T/V1gWg+VkzcvuiWM7GkMulK+pOepC3pk+rz8YrJlltUjcj0/1ee4vg/3FD/cEP9wy3l+b8Qzf/t93j/X/jLrv/TpM6fdJ8/F8n53qQ36R95/E993//f/f8FVrSdP+c4A+M/3FD/cEP9wy1l/ovR/I+7R/6Lf/v9/8x/cP9/UnffF1CZtCUdSJXIvYH9SHyeJr2Pjk6ci0vy/vzvzd6Kzia+P38pU9JpVMLa6NvxL/hnvE+A8R9uqH+4of7hljL/pUj+S2R9suv/XOR7f2r+xyTvDfWH7///Kf8vILJegYkljUlH0p4MIH1Jx2T5/vtWJpyP/379Pf7/+d0kSad3WqtKGhOrUvwzp0avwSfcJzA18fr7nefFP8cmSe8TiEt8b+LONrrR7Y8vQsPYjZH9kzBNeN5QQkgtUivF8y/ZzLU7DSdMSbLnx6Mj66Wj/V1Mfr9fIO6u/iY830zW3z6Jx2aEuNH150z4/5D3WXfy591vmxJ3d7R//4zjpQcNfv+HG+ofbinzX/4Xf/9P/tuv/zP/Qf7TidtKkl3/b0r6kCqkLekXzf97vS+fcBZf8a59dq9p5phxkWlCO4SLf/8gJnofXiypRXqRTqR39FUJBz9q1/Tdnxx24njy7f5r8g7jP9xQ/3BD/cMtZf4r0fv/x9Ip7/9TIq8YkKSFPzP//6Lz/8hp7J38r0YGkf6kI+lFOkTOfwdRCee/dOT+xz+6r78mFf/vjrTxW0DakHrR/Rj/NbX9yx49NOCZWFKftCPdSK3EexT+7PYbEjpyX0RbQki6aPtdIldY/vv2RSaWNCIdSR/SlvSNHGElhfP6fwL8/g831D/cUua/GjnXpUjOe9z/r/4P7//7u/8uT9Lr/lTi3IOdTxj/4Yb6hxvqH24p81/7F/mvIf8fMBj/4Yb6hxvqH24p81//F/mvI/8fMBj/4Yb6hxvqH24p89/4F/lv/GPzP/II+Z9qGP/hhvqHG+ofbinz34ze6z6VJM1/KvEVSf1Z+f9g5+w/FcZ/uKH+4Yb6h1vK/LeQ/yGC8R9uqH+4of7hljL/beR/iGD8hxvqH26of7ilzH8H+R8iGP/hhvqHG+ofbinz30X+hwjGf7ih/uGG+odbyvz3kP8hgvEfbqh/uKH+4ZYy/33kf4hg/Icb6h9uqH+4pcz/APkfIhj/4Yb6hxvqH24p85+KfP6PRgbRKT//L82f+Pl/2f/Dz/+tF/38nz/n828GJH7+TeTzfyK7JP5zBpsnfv5t/cTXWiTZ5//c9bnAMZE9xN2Od4+/MUQl3eC7P3f3UuJ6abI/cb0Nkzz37vVuj/4jkfs1Ckb3e/TzdKPt3r3hCfvidjJ3V9ONfsJh87s+v/ffbyf6knv8XaXk24vjvH8S/P4PN9Q/3O6f/23u8ff/0j5g+X/35+tNjf4NwoQcLniP/HdI0hyOISk34v9XzmH8hxvqH26of7jdP/+73CP/0/1N+d8nsX0q8um0f0b+3+/zae9/HNAosQ2HCEm2///vcQDGf7ih/uGG+ofbvfI//vp/5H1tMemz09/jJ+afnW/wr2H8hxvqH26of7ilLv8zIP8fMBj/4Yb6hxvqH26py/+HkP8PGIz/cEP9ww31D7fU5X9G5P8DBuM/3FD/cEP9wy11+Z8J+f+AwfgPN9Q/3FD/cEtd/scg/x8wGP/hhvqHG+ofbqnL/8zI/wcMxn+4of7hhvqHW+ryPwvy/wGD8R9uqH+4of7hlrr8z4r8f8Bg/Icb6h9uqH+4pS7/Y5H/DxiM/3BD/cMN9Q+31OV/NuT/AwbjP9xQ/3BD/cMtdfmfHfn/gMH4DzfUP9xQ/3BLXf7nQP4/YDD+ww31DzfUP9xSl/85kf8PGIz/cEP9ww31D7fU5X8u5P8DBuM/3FD/cEP9wy11+Z8b+f+AwfgPN9Q/3FD/cEtd/udB/j9gMP7DDfUPN9Q/3FKX/3mR/w8YjP9wQ/3DDfUPt9Tlfz7k/wMG4z/cUP9wQ/3DLXX5nx/5/4DB+A831D/cUP9wS13+F0D+P2Aw/sMN9Q831D/cUpf/BZH/DxiM/3BD/cMN9Q8XJtnj1OV/IeT/AwbjP9xQ/3BD/cMtdflfGPn/gMH4DzfUP9xQ/3BLXf4XQf4/YDD+ww31DzfUP9xSl/9Fkf8PGIz/cEP9ww31D7fU5X8x5P8DBuM/3FD/cEP9wy11+V8c+f+AwfgPN9Q/3FD/cEtd/pdA/j9gMP7DDfUPN9Q/3FKX/yWR/w8YjP9wQ/3DDfUPt9Tlfynk/wMG4z/cUP9wQ/3DLXX5Xxr5/4DB+A831D/cUP9wS13+l0H+P2Aw/sMN9Q831D/cUpf/ZZH/DxiM/3BD/cMN9Q+31OV/OeT/AwbjP9xQ/3BD/cMtdflfHvn/gMH4DzfUP9xQ/3BLXf5XQP4/YDD+ww31DzfUP9zulf8UqUgY0odOmv9s9LiAjxwh/M5MOFaIKkgISUMIWZ2j0hMTbh2j8ldLOk1YHpOsJ3de1yXxEUPqRNqhoj3jEtu73zT5lsXEd41wpBPpSnqQjpE1ENIgyXqoyOM0kTk2ziWExEa/U/TOsvjhwd3pawyd8jFNMsTvDcYlt6lMhKKijRJCpt7ZN3fm2DSR/Xwpvk8kltQiRUjBSG+o6A6kovvxVPTfHZWiTbWJ7In4fX/n8d6i8dvrl006TVgew8a/Ph2buB/IvfZD5chXPkX7G6rGt3O/afNoe82i09gU7RdK8fNB4zjxH4r/uzsAfyvUP9z4++Q/ReZwKfO/UuT3fMe+PTr+vvx++f+HOZWsJ/fL/+S5d79pQu4luF/u/VX5H0cIKZnYJzqSx3fW02/wkO5te/To2PcfMcP9w/qDmb92hiP/iG5gpnvbHvG/Kf7a42Tur1sV/ANx983//VTK/K8cSeak7pf/f3QeGZusnT/K///ivDQTueu89K/M/z6J66Ej/bqznlq9+g+qU+9hqgDpT3qSPqQA6UcGkyEkH+lKepK2pDPpGPnXixQmxUhBUpIUIoVJQVKKlCDFSIG7jmYKJDmy+c9+bySvJoQL6h9uqH+4MffN/3PJ8p8nhFQhhEjJWrhf/teuE5/LxxrFT7e3iJ8mLE/t+/8Jr7vf1EzWXsrz/78+/3MmrocmMkl+/h//nbjothM+TeQoi4++bhBpS/qT/qRvtN+D2vbv37dQ8udz93h+4d+fX/iPjguSVxPCBfUPN9Q/3KR75D8dyX8z2fX/O8+oSkgkx+52v/zP1TY+l6/0ip8OGhg/TVie2vxPeN39ptG39xOlzP/C91gPe9/1JPQ7YZp8PTmz3m89RSKP/8rjjJqRBxWT3M+TMFfx7h18V7/jpzLJzFSKtIPr82GUfDRDuKD+4Sb/2+f/LCGk2j2uGN0v/68Pj8/LKqOTThOW3yv/E98vr8iQJslyOeF195t2SdZeQvtSYi7nJ+1Jb9KDdIj076/M57jE9dCkQ4r3Af53M+QPcx3X/8IN9Q831D/cUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjnoAgb55qExJjxj11CCE2IKUYepSG3qUyEoiMPuBhCSMydeSXNncdmiuXEjX8+Fb/cvvNVceOfe/cy4pK3KSfxeUri86hTSZaRNGQlsZOsP/Pv61+cYjkAAAAAAAAA/NvuPldPet4OAAAAAAAAAP8f1apXtXlOIqVYnpMQspkn5JwR/zgNOUbd6/Vs9GsX0igyx0W/xjUp2GvCrWPU/aYker8BkeMnfPShyMSSSqQ/6U/6kqqLElZJkfj7EcTUryeZu9dTmbQlHUgV0oMMIP0iS4Xo93nShjT4j7anYrL1CJH1dCX9SU/SlvQhQnQ9bUid1LUfE20wJmn7XKT93qQ36U+6kh4k/r4J5d/sfxryL/aTmdD/amQQ6U86kl6kA4m/zYL+D+rAJvmJubsOdUhv0plUj/S/Y7TeCXVvQ2qnbj2noi89lnQ/sUwsqUuqkyaJLcd/TfV23KcOYmL7dUlX0pf0jb+PJjqypNT/PKWsR0xCPRqTjqQ9GUD6ko7R4SP/B+3TkVFNohW9++e1KelDqpC2pB/pSJjIUubP6H9i+81I78iY60k6JrbXnFS9Z/sb4yo9cff0fu1nj/68Ukz+yONqifVtkqTd68Pj26kyOuk0YXmXaHsdkpaZSKRT9OczP2kf6X/8MypG15N8PK/OEd9e/mpJpwnLk/c/Jtp/LnE9BSPLq9yn/dp14ts51ih+ur1F/DRhebJfr4nb8Xv7hSL1r3qf9nO1jW/nSq/46aCB8dOE5dHukZxZ79d+4cjj/137RZLsPzPxJxn+fWn+7g7A3wr1DzfUP9xQ/3BLQ+6cTTQhlUg9UpVUIo1IVdKa1CL1SHVSnzQidUkl0oTUIvVJvf9RD8y75u8cS0cP+0jN6DQ20oMmpBGpRSqTpqQJqUZakzqkVqTf/3sxd83H3TV/OyqWVCe1SJ1Ir+qRSqRu9Mzjr1LwrvnKicfbhFSOHgzHkvqkMqlNqpEqpEmktlX/0v5VvM98win+nZ+/O31rGqlwE/IoaU2qkmqkMakSWdKANIn8JP6vNLhr/t71bUbqkzqkaaSyf32N29w1X/Huc5zE/Ze0f3/l2L2jT7L+qdH5hGls5PfKnd8wf4+4+yz/vb61Ir/7qpHmpDVpROqT+n/J75UEU++ar/iH/atE6pA6pD6p8pfU9o7Fd83fe3xUjozbOz9tDf7HfbmX9X/Yv0akGmkQybbGkRHSgNSP7NO/psrb79O/hGLHkmqk0t8wbhPsT9YlMTqfMI3v39/n1H2/E/8LMDYyHmqQGqRa5NilaWTf1UnMksaRY4dqkd/a/xN3vZMXd79vAAAA/MNcvXOQxBBy7fZdfo+uuIRFxr1ffr/DawAAAAAAAAD4B7lkM9fufqt6aPRvAtYkhDSPLov/m4BFo9ceXTKO2Mn+LkCa+GXJ/h7gHz2+o2HsxkhbcalY/yIq5fojy/6D9QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBKl2zmGqF+fzyUEEIRNq4mIaR5dJlLCKFJUUJHH40jNqHiX8PZkUma+GXxT+BiCCExNPnDx3c0jN0YaSsuFetfRKVcf2TZf7B+AAAAAAAAgHCgCE0YwhKO8EQgIpGITBSiEo3oxCAmsYhNHOISj/gkIGlIWpKOpCcZyEMkI8lEYkhmkoVkJbEkG8lOcpCcJBfJTfKQvCQfyU8KkIKkEClMipCipBgpTkqQkqQUKU3KkLKkHClPKpCKpBKpTKqQqqQaqU5qkJqkFqlNHiZ1SF1Sj9QnDUhD0og0Jk1IU9KMPEKak0dJC/IYaUkeJ61Ia9LmP3r9U2QoeZoMI8NJHBlBRpJnyCjyLBlNxpCxZBwZTyaQiWQSmUymkKlkGplOZpCZ5Dkyi8wmc8jzZC6ZR+aTBWQhWUQWkxfIEvIiWUpeIsvIcrKCrCSryGqyhrxM1pJ1ZD15hWwgG8km8ip5jbxONpM3yBbyJtlK3iLbyNtkO9lB3iE7ybtkF3mP7Cbvkw/Ih2QP+YjsJR+TfWQ/OUAOkkPkMDlCjpJPyDHyKTlOPiMnyOfkJPkila+/muz1gyhCEYqmaIqlWIqneEqkREqmZEqlVEqndMqkTMqmbMqlXMqnfCoNlYZKR6WjMlAZqIxURiqGiqGyUFmoWCqWyk5lp3JSOancVG4qL5WXyk/lpwpShajCVGGqKFWUKk4Vp0pSpahSVBmqDFWOKkdVoCpQlahKVBWqClWNqkbVoGpQtajaVG2qDlWHqkfVoxpQDahGVCOqCdWEakY1o5pTzakWVAuqJdWSakW1otpQbah2VDuqA9WB6kR1orpQXahuVDeqB9WD6kX1ovpQfai+VF+qP9WfGkgNpAZRg6nB1FPUU9TT1NPUcKoKPYIaSY2kRlGjqNHUGGoMNY4aT02gJlCTqMnUFGoqNY2aRs2gZlJXqFnUbGoONYcqR8+j5lMLqBh6EbWYWkwtoZZQS6ml1DJqObWcWkmtolZTa6g11FpqHbWOeoXaQG2kNlKvUq9Sr1Obqc3UFupNaiu1ldpGXaW2Uzuod6id1LvULupdajf1PrWb+pDaQ31I7aX2UvuofdQB6gB1iDpEHaGOUJ9Qn1CfUp9Sn1GfUZOpk9RJ6hR1ijpNnabOUGeos9RZ6hx1jjpPnacuUBeoi9RF6hL1I/UT9SN1mbpMXaGuUteoa9QN6gZ1k7pJ3aJu3Rn89B0szdI8zdMiLdIyLdMqrdI6rdMmbdI2bdMu7dI+7dNp6DR0OjodnYHOQGekM9IxdGY6C52FjqVj6ex0djonnZPOTeem89J56fx0frogXZAuTBemi9LF6OJ0CbokXYouTZehy9Dl6PJ0BboiXYmuRFehq9LV6Op0dbomXZOuTdem69B16Hp0Pbp33p55G9EjqNFUU/pOZZrTU6gW9FSqJf043YpuTc+g2tLt6JlUB7oj3YnuTM+mZlHd6HZ5e9A96V70fKoP3SvvAqof3Z9eRA2kn6QH0YPpIfRT9FC6Q95h9HB6GTWCHkmvpEbRz9Kj6TH0Wqoqfadi1ehJ9GR6Cj2Vnka/Ts2gZ9LP0bPo2fQc+nl6Lj2Pnk8voBfSi+jF9Av0EvpFein9Er2MXk6voFfSq+jV9Br6ZXotvY5eT79Cb6A30pvoV+nX6NfpzfQb9Bb6TXor/Ra9jX6b3k7voN+hd9Lv0rvo9+jd9Pv0B/SH9B76I3ov/TG9j95PH6AP0ofow/QR+ij9CX2M/pQ+Tn9Gn6A/p0/SX9Cn6C/p0/RX9Bn6a/os/Q19jv6WPk9/R1+gv6cv0j/Ql+gf6Z/on+nL9C/0FfoqfY2+Tt+gf6Vv0r/Rt+jbNGEohmYYhmU4hmcERmQkRmYURmU0RmcMxmQsxmYcxmU8xmcCJg2TlknHpGcyMA8xGZlMTAyTmcnCZGVimWxMdiYHk5PJxeRm8jB5mXxMfqYAU5ApxBRmijBFmWJMcaYEU5IpxZRmyjBlmXJMeaYCU5GpxFRmqjBVmWpMdaYGU5OpxdRmHmbqMHWZekx9pgHTkGnENGaaME2ZZswjTHPmUaYF8xjTknmcacW0ZtowbZl2THumA9OR6cR0ZrowXZluTHemB9OT6cX0ZvowfZi+TF+mPzOAGcgMZAYxg5khzG/MLeY2M4wZzsQxI5iRzDPMKOZZZjQzhhnLjGPGMxOYicwkZjIzhZnKTGOmMzOYmcxzzCxmNjOHeZ6Zy8xj5jMLmIXMImYx8wKzhHmRWcq8xCxjljMrmJXMKmY1Mzra0vp/4/Xv3OP1EyNr38fsZw4wB5lDzGHmCHOU2cccY44xx5njzAnmBHOSOcmcYk4xp5nTzBnmDHOWOcucY84x55nzzAXmAnORuchcYn5krjM/M5eZX5grzFXmKnOducHcYG5G9wFhKZZmGZZlOZZnBVZkJVZmFVZlNVZnDdZkLdZmHdZlPdZnAzYNm5ZNx6ZnM7APsRnZTGwMm5nNwmZlY9lsbHY2B5uTzcXmZvOwedl8bH62wH/9+j/qXxu2DduObcd2YDuwndhObBe2C9uN7cb2YHuwvdhebB+2D9uX7cv2Z/uzA9mB7CB2EDuEHcIOZYeyw9hhbBwbx45kn2FHsc+yo9kx7Fh2HDueHc9OZCeyk9nJ7FR2Kjudnc7OZGeys9hZ7Bx2DjuXncvOZ+ezC9mF7GJ2MbuEXcIuZZeyy9hl7Ap2BbuKXcWuYdewa9m17Hp2PbuB3cBuYjexr7GvsZvZzewWdgu7ld3KbmO3sdvZHewOdie7k93F7mJ3s7vZD9gP2D3sHnYvu5fdzu5n97MH2YPsYfYwe5Q9yh5jj7HH2ePsCfYEe5I9yZ5iT7Gn2dPsGfYMe5Y9y55jz7Hn2fPsBfYCe5G9yF5iL7E/sT+xl9nL7BX2CnuNvcbeYG+wN9mb7C321p3DPo7maI7lWI7neE7kRE7mZE7lVE7ndM7kTM7mbM7lXM7nfC4Nl4ZLx6XjMnAZuIxcRi6Gi+GycFm4WC4bl53LweXkcnG5uTxcXi4fl58rwBXkCnGFuSJcUa4YV5wrwZXkSnGluTJcWa4cV56rwFXkKnGVuSpcVa4aV52rwdXkanG1uYe5Olxdrh5Xn2vANeQacY25JlxTrhn3CNece5RrwT3GteQe51pxrbk2f2r7Y7ix3DhuPDeBm8hN4iZzU7ip3DRuOjeDm8k9x83iZnNzuOe5udw8bj63gFvILeIWcy9wS7gXuaXcS9wybjm3glvJreJWc2u4l7m13DpuPfcKt4HbyG3iXuVe417nNnNvcFu4N7mt3FvcNu5tbju3g3uH28m9y+3i3uN2c+9zH3Afcnu4j7i93MfcPm4/d4A7yB3iDnNHuKPcJ9wx7lPuOPcZd4L7nDvJfcGd4r7kTnNfcWe4r7mz3DfcOe5b7jz3HXeB+567yP3AXeJ+5H7ifuYuc79wV7ir3DXuOneD+5W7yf3G3eJuc4SneJpneJbneJ4XeJGXeJlXeJXXeJ03eJO3eJt3eJf3eJ8P+DR8Wj4dn57PwD/EZ+Qz8TF8Zj4Ln5WP5bPx2fkcfE4+F5+bz8Pn5fPx+fkCfEG+EF+YL8IX5YvxxfkSfEm+FF+aL8OX5cvx5fkKfEW+El+Zr8JX5avx1fkafE2+Fl+bf5ivw9fl6/H1+QZ8Q74R35hvwjflm/GP8M35R/kW/GN8S/5xvhXfmm/Dt+Xb8e35DnxHvhPfme/Cd+W78d35HnxPvhffm+/DP8H35fvx/fkB/ED+SX4QP5gfwj/FD+Wf5ofxw/k4fgQ/kn+GH8U/y4/mx/Bj+XH8eH4CP5GfxE/mp/BT+Wn8dH4GP5N/jp/Fz+bn8M/zc/l5/Hx+Ab+QX8Qv5l/gl/Av8kv5l/hl/HJ+Bb+SX8Wv5tfwL/Nr+XX8ev4VfgO/kd/Ev8q/xr/Ob+bf4Lfwb/Jb+bf4bfzb/HZ+B/8Ov5N/l9/Fv8fv5t/nP+A/5PfwH/F7+Y/5ffx+/gB/kD/EH+aP8Ef5T/hj/Kf8cf4z/gT/OX+S/4I/xX/Jn+a/4s/wX/Nn+W/4c/y3/Hn+O/4C/z1/kf+Bv8T/yP/E/8xf5n/hr/BX+Wv8df4G/yt/k/+Nv8Xf5olACbTACKzACbwgCKIgCbKgCKqgCbpgCKZgCbbgCK7gCb4QCGmEtEI6Ib2QQXhIyChkEmKEzEIWIasQK2QTsgs5hJxCLiG3kEfIK+QT8gsFhIJCIaGwUEQoKhQTigslhJJCKaG0UEYoK5QTygsVhIpCJaGyUEWoKlQTqgs1hJpCLaG28LBQR6gr1BPqCw2EhkIjobHQRGgqNBMeEZoLjwothMeElsLjQiuhtdBGaCu0E9oLHYSOQiehs9BF6Cp0E7oLPYSeQi+ht9BHeELoK/QT+gsDhIHCk8IgYbAwRHhKGCo8LQwThgtxwghhpPCMMEp4VhgtjBHGCuOE8cIEYaIwSZgsTBGmCtOE6cIMYabwnDBLmC3MEZ4X5grzhPnCAmGhsEhYLLwgLBFeFJYKLwnLhOXCCmGlsEpYLawRXhbWCuuE9cIrwgZho7BJeFV4TXhd2Cy8IWwR3hS2Cm8J24S3he3CDuEdYafwrrBLeE/YLbwvfCB8KOwRPhL2Ch8L+4T9wgHhoHBIOCwcEY4KnwjHhE+F48Jnwgnhc+Gk8IVwSvhSOC18JZwRvhbOCt8I54RvhfPCd8IF4XvhovCDcEn4UfhJ+Fm4LPwiXBGuCteE68IN4VfhpvCbcEu4LRCREmmREVmRE3lREEVREmVREVVRE3XREE3REm3REV3RE30xENOIacV0Ynoxg/iQmFHMJMaImcUsYlYxVswmZhdziDnFXGJuMY+YV8wn5hcLiAXFQmJhsYhYVCwmFhdLiCXFUmJpsYxYViwnlhcriBXFSmJlsYpYVawmVhdriDXFWmJt8WGxjlhXrCfWFxuIDcVGYmOxidhUbCY+IjYXHxVbiI+JLcXHxVZia7GN2FZsJ7YXO4gdxU5iZ7GL2FXsJnYXe4g9xV5ib7GP+ITYV+wn9hcHiAPFJ8VB4mBxiPiUOFR8WhwmDhfjxBHiSPEZcZT4rDhaHCOOFceJ48UJ4kRxkjhZnCJOFaeJ08UZ4kzxOXGWOFucIz4vzhXnifPFBeJCcZG4WHxBXCK+KC4VXxKXicvFFeJKcZW4WlwjviyuFdeJ68VXxA3iRnGT+Kr4mvi6uFl8Q9wiviluFd8St4lvi9vFHeI74k7xXXGX+J64W3xf/ED8UNwjfiTuFT8W94n7xQPiQfGQeFg8Ih4VPxGPiZ+Kx8XPxBPi5+JJ8QvxlPileFr8Sjwjfi2eFb8Rz4nfiufF78QL4vfiRfEH8ZL4o/iT+LN4WfxFvCJeFa+J18Ub4q/iTfE38ZZ4WyQSJdESI7ESJ/GSIImSJMmSIqmSJumSIZmSJdmSI7mSJ/lSIKWR0krppPRSBukhKaOUSYqRMktZpKxSrJRNyi7lkHJKuaTcUh4pr5RPyi8VkApKhaTCUhGpqFRMKi6VkEpKpaTSUhmprFROKi9VkCpKlaTKUhWpqlRNqi7VkGpKtaTa0sNSHamuVE+qLzWQGkqNpMZSE6mp1Ex6RGouPSq1kB6TWkqPS62k1lIbqa3UTmovdZA6Sp2kzlIXqavUTeou9ZB6Sr2k3lIf6Qmpr9RP6i8NkAZKT0qDpMHSEOkpaaj0tDRMGi7FSSOkkdIz0ijpWWm0NEYaK42TxksTpInSJGmyNEWaKk2TpkszpJnSc9IsabY0R3pemivNk+ZLC6SF0iJpsfSCtER6UVoqvSQtk5ZLK6SV0ipptbRGellaK62T1kuvSBukjdIm6VXpNel1abP0hrRFelPaKr0lbZPelrZLO6R3pJ3Su9Iu6T1pt/S+9IH0obRH+kjaK30s7ZP2Swekg9Ih6bB0RDoqfSIdkz6VjkufSSekz6WT0hfSKelL6bT0lXRG+lo6K30jnZO+lc5L30kXpO+li9IP0iXpR+kn6WfpsvSLdEW6Kl2Trks3pF+lm9Jv0i3ptkRkSqZlRmZlTuZlQRZlSZZlRVZlTdZlQzZlS7ZlR3ZlT/blQE4jp5XTyenlDPJDckY5kxwjZ5azyFnlWDmbnF3OIeeUc8m55TxyXjmfnF8uIBeUC8mF5SJyUbmYXFwuIZeUS8ml5TJyWbmcXF6uIFeUK8mV5SpyVbmaXF2uIdeUa8m15YflOnJduZ5cX24gN5QbyY3lJnJTuZn8iNxcflRuIT8mt5Qfl1vJreU2clu5ndxe7iB3lDvJneUucle5m9xd7iH3lHvJveU+8hNyX7mf3F8eIA+Un5QHyYPlIfJT8lD5aXmYPFyOk0fII+Vn5FHys/JoeYw8Vh4nj5cnyBPlSfJkeYo8VZ4mT5dnyDPl5+RZ8mx5jvy8PFeeJ8+XF8gL5UXyYvkFeYn8orxUfkleJi+XV8gr5VXyanmN/LK8Vl4nr5dfkTfIG+VN8qvya/Lr8mb5DXmL/Ka8VX5L3ia/LW+Xd8jvyDvld+Vd8nvybvl9+QP5Q3mP/JG8V/5Y3ifvlw/IB+VD8mH5iHxU/kQ+Jn8qH5c/k0/In8sn5S/kU/KX8mn5K/mM/LV8Vv5GPid/K5+Xv5MvyN/LF+Uf5Evyj/JP8s/yZfkX+Yp8Vb4mX5dvyL/KN+Xf5FvybZkolEIrjMIqnMIrgiIqkiIriqIqmqIrhmIqlmIrjuIqnuIrgZJGSaukU9IrGZSHlIxKJiVGyaxkUbIqsUo2JbuSQ8mp5FJyK3mUvEo+Jb9SQCmoFFIKK0WUokoxpbhSQimplFJKK2WUsko5pbxSQamoVFIqK1WUqko1pbpSQ6mp1FJqKw8rdZS6Sj2lvtJAaag0UhorTZSmSjPlEaW58qjSQnlMaak8rrRSWittlLZKO6W90kHpqHRSOitdlK5KN6W70kPpqfRSeit9lCeUvko/pb8yQBmoPKkMUgYrQ5SnlKHK08owZbgSp4xQRirPKKOUZ5XRyhhlrDJOGa9MUCYqk5TJyhRlqjJNma7MUGYqzymzlNnKHOV5Za4yT5mvLFAWKouUxcoLyhLlRWWp8pKyTFmurFBWKquU1coa5WVlrbJOWa+8omxQNiqblFeV15TXlc3KG8oW5U1lq/KWsk15W9mu7FDeUXYq7yq7lPeU3cr7ygfKh8oe5SNlr/Kxsk/ZrxxQDiqHlMPKEeWo8olyTPlUOa58ppxQPldOKl8op5QvldPKV8oZ5WvlrPKNck75VjmvfKdcUL5XLio/KJeUH5WflJ+Vy8ovyhXlqnJNua7cUH5Vbiq/KbeU2wpRKZVWGZVVOZVXBVVUJVVWFVVVNVVXDdVULdVWHdVVPdVXAzWNmlZNp6ZXM6gPqRnVTGqMmlnNomZVY9VsanY1h5pTzaXmVvOoedV8an61gFpQLaR+ebuIWlQtphZXS6gl1VJqabWMWlYtp5ZXK6gV1UpqZbWKWlWtplZXa6g11VpqbfVhtY5aV62n1lcbqA3VRmpjtYnaVG2mPqI2Vx9VW6iPqS3Vx9VWamu1jdpWbae2VzuoHdVOame1i9pV7aZ2V3uoPdVeam+1j/qE2lftp/ZXB6gD1SfVQepgdYj6lDpUfVodpg5X49QR6kj1GXWU+qw6Wh2jjlXHqePVCepEdZI6WZ2iTlWnqdPVGepM9Tl1ljpbnaM+r85V56nz1QXqQnWRulh9QV2ivqguVV9Sl6nL1RXqSnWVulpdo76srlXXqevVV9QN6kZ1k/qq+pr6urpZfUPdor6pblXfUrepb6vb1R3qO+pO9V11l/qeult9X/1A/VDdo36k7lU/Vvep+9UD6kH1kHpYPaIeVT9Rj6mfqsfVz9QT6ufqSfUL9ZT6pXpa/Uo9o36tnlW/Uc+p36rn1e/UC+r36kX1B/WS+qP6k/qzeln9Rb2iXlWvqdfVG+qv6k31N/WWelslGqXRGqOxGqfxmqCJmqTJmqKpmqbpmqGZmqXZmqO5mqf5WqCl0dJq6bT0WgbtIS2jlkmL0TJrWbSsWqyWTcuu5dByarm03FoeLa+WT8uvFdAKaoW0wloRrahWTCuuldBKaqW00loZraxWTiuvVdAqapW0yloVrapWTauu1dBqarW02trDWh2trlZPq6810BpqjbTGWhOtqdZMe0Rrrj2qtdAe01pqj2uttNZaG62t1k5rr3XQOmqdtM5aF62r1k3rrvXQemq9tN5aH+0Jra/WT+uvDdAGak9qg7TB2hDtKW2o9rQ2TBuuxWkjtJHaM9oo7VlttDZGG6uN08ZrE7SJ2iRtsjZFm6pN06ZrM7SZ2nPaLG22Nkd7XpurzdPmawu0hdoibbH2grZEe1Fbqr2kLdOWayu0ldoqbbW2RntZW6ut09Zrr2gbtI3aJu1V7TXtdW2z9oa2RXtT26q9pW3T3ta2azu0d7Sd2rvaLu09bbf2vvaB9qG2R/tI26t9rO3T9msHtIPaIe2wdkQ7qn2iHdM+1Y5rn2kntM+1k9oX2intS+209pV2RvtaO6t9o53TvtXOa99pF7TvtYvaD9ol7UftJ+1n7bL2i3ZFu6pd065rN7RftZvab9ot7bZGdEqndUZndU7ndUEXdUmXdUVXdU3XdUM3dUu3dUd3dU/39UBPo6fV0+np9Qz6Q3pGPZMeo2fWs+hZ9Vg9m55dz6Hn1HPpufU8el49n55fL6AX1AvphfUielG9mF5cL6GX1EvppfUyelm9nF5er6BX1CvplfUqelW9ml5dr6HX1GvptfWH9Tp6Xb2eXl9voDfUG+mN9SZ6U72Z/ojeXH9Ub6E/prfUH9db6a31NnpbvZ3eXu+gd9Q76Z31LnpXvZveXe+h99R76b31PvoTel+9n95fH6AP1J/UB+mD9SH6U/pQ/Wl9mD5cj9NH6CP1Z/RR+rP6aH2MPlYfp4/XJ+gT9Un6ZH2KPlWfpk/XZ+gz9ef0WfpsfY7+vD5Xn6fP1xfoC/VF+mL9BX2J/qK+VH9JX6Yv11foK/VV+mp9jf6yvlZfp6/XX9E36Bv1Tfqr+mv66/pm/Q19i/6mvlV/S9+mv61v13fo7+g79Xf1Xfp7+m79ff0D/UN9j/6Rvlf/WN+n79cP6Af1Q/ph/Yh+VP9EP6Z/qh/XP9NP6J/rJ/Uv9FP6l/pp/Sv9jP61flb/Rj+nf6uf17/TL+jf6xf1H/RL+o/6T/rP+mX9F/2KflW/pl/Xb+i/6jf13/Rb+m2dGJRBG4zBGpzBG4IhGpIhG4qhGpqhG4ZhGpZhG47hGp7hG4GRxkhrpDPSGxmMh4yMRiYjxshsZDGyGrFGNiO7kcPIaeQycht5jLxGPiO/UcAoaBQyChtFjKJGMaO4UcIoaZQyShtljLJGOaO8UcGoaFQyKhtVjKpGNaO6UcOoadQyahsPG3WMukY9o77RwGhoNDIaG02MpkYz4xGjufGo0cJ4zGhpPG60MlobbYy2RjujvdHB6Gh0MjobXYyuRjeju9HD6Gn0MnobfYwnjL5GP6O/McAYaDxpDDIGG0OMp4yhxtPGMGO4EWeMMEYazxijjGeN0cYYY6wxzhhvTDAmGpOMycYUY6oxzZhuzDBmGs8Zs4zZxhzjeWOuMc+YbywwFhqLjMXGC8YS40VjqfGSscxYbqwwVhqrjNXGGuNlY62xzlhvvGJsMDYam4xXjdeM143NxhvGFuNNY6vxlrHNeNvYbuww3jF2Gu8au4z3jN3G+8YHxofGHuMjY6/xsbHP2G8cMA4ah4zDxhHjqPGJccz41DhufGacMD43ThpfGKeML43TxlfGGeNr46zxjXHO+NY4b3xnXDC+Ny4aPxiXjB+Nn4yfjcvGL8YV46pxzbhu3DB+NW4avxm3jNsGMSmTNhmTNTmTNwVTNCVTNhVTNTVTNw3TNC3TNh3TNT3TNwMzjZnWTGemNzOYD5kZzUxmjJnZzGJmNWPNbGZ2M4eZ08xl5jbzmHnNfGZ+s4BZ0CxkFjaLmEXNYmZxs4RZ0ixlljbLmGXNcmZ5s4JZ0axkVjarmFXNamZ1s4ZZ06xl1jYfNuuYdc16Zn2zgdnQbGQ2NpuYTc1m5iNmc/NRs4X5mNnSfNxsZbY225htzXZme7OD2dHsZHY2u5hdzW5md7OH2dPsZfY2+5hPmH3NfmZ/c4A50HzSHGQONoeYT5lDzafNYeZwM84cYY40nzFHmc+ao80x5lhznDnenGBONCeZk80p5lRzmjndnGHONJ8zZ5mzzTnm8+Zcc54531xgLjQXmYvNF8wl5ovmUvMlc5m53FxhrjRXmavNNebL5lpznbnefMXcYG40N5mvmq+Zr5ubzTfMLeab5lbzLXOb+ba53dxhvmPuNN81d5nvmbvN980PzA/NPeZH5l7zY3Ofud88YB40D5mHzSPmUfMT85j5qXnc/Mw8YX5unjS/ME+ZX5qnza/MM+bX5lnzG/Oc+a153vzOvGB+b140fzAvmT+aP5k/m5fNX8wr5lXzmnndvGH+at40fzNvmbdNYlEWbTEWa3EWbwmWaEmWbCmWammWbhmWaVmWbTmWa3mWbwVWGiutlc5Kb2WwHrIyWpmsGCuzlcXKasVa2azsVg4rp5XLym3lsfJa+az8VgGroFXIKmwVsYpaxaziVgmrpFXKKm2Vscpa5azyVgWrolXJqmxVsapa1azqVg2rplXLqm09bNWx6lr1rPpWA6uh1chqbDWxmlrNrEes5tajVgvrMaul9bjVympttbHaWu2s9lYHq6PVyepsdbG6Wt2s7lYPq6fVy+pt9bGesPpa/az+1gBroPWkNcgabA2xnrKGWk9bw6zhVpw1whppPWONsp61RltjrLHWOGu8NcGaaE2yJltTrKnWNGu6NcOaaT1nzbJmW3Os56251jxrvrXAWmgtshZbL1hLrBetpdZL1jJrubXCWmmtslZba6yXrbXWOmu99Yq1wdpobbJetV6zXrc2W29YW6w3ra3WW9Y2621ru7XDesfaab1r7bLes3Zb71sfWB9ae6yPrL3Wx9Y+a791wDpoHbIOW0eso9Yn1jHrU+u49Zl1wvrcOml9YZ2yvrROW19ZZ6yvrbPWN9Y561vrvPWddcH63rpo/WBdsn60frJ+ti5bv1hXrKvWNeu6dcP61bpp/Wbdsm5bxKZs2mZs1uZs3hZs0ZZs2VZs1dZs3TZs07Zs23Zs1/Zs3w7sNHZaO52d3s5gP2RntDPZMXZmO4ud1Y61s9nZ7Rx2TjuXndvOY+e189n57QJ2QbuQXdguYhe1i9nF7RJ2SbuUXdouY5e1y9nl7Qp2RbuSXdmuYle1q9nV7Rp2TbuWXdt+2K5j17Xr2fXtBnZDu5Hd2G5iN7Wb2Y/Yze1H7Rb2Y3ZL+3G7ld3abmO3tdvZ7e0Odke7k93Z7mJ3tbvZ3e0edk+J2L3tPvYTdl+7n93fHmAPtJ+0B9mD7SH2U/ZQ+2l7mD3cjrNH2CPtZ+xR9rP2aHuMPdYeZ4+3J9gT7Un2ZHuKPdWeZk+3Z9gz7efsWfZse479vD3XnmfPtxfYC+1F9mL7BXuJ/aK91H7JXmYvt1fYK+1V9mp7jf2yvdZeZ6+3X7E32BvtTfar9mv26/Zm+w17i/2mvdV+y95mv21vt3fY79g77XftXfZ79m77ffsD+0N7j/2Rvdf+2N5n77cP2AftQ/Zh+4h91P7EPmZ/ah+3P7NP2J/bJ+0v7FP2l/Zp+yv7jP21fdb+xj5nf2uft7+zL9jf2xftH+xL9o/2T/bP9mX7F/uKfdW+Zl+3b9i/2jft3+xb9m2bOJRDO4zDOpzDO4IjOpIjO4qjOpqjO4ZjOpZjO47jOp7jO4GTxknrpHPSOxmch5yMTiYnxsnsZHGyOrFONie7k8PJ6eRycjt5nLxOPie/U8Ap6BRyCjtFnKJOMae4U8Ip6ZRySjtlnLJOOae8U8Gp6FRyKjtVnKpONae6U8Op6dRyajsPO3Wcuk49p77TwGnoNHIaO02cpk4z5xGnufOo08J5zGnpPO60clo7bZy2TjunvdPB6eh0cjo7XZyuTjenu9PD6en0cno7fZwnnL5OP6e/M8AZ6DzpDHIGO0Ocp5yhztPOMGe4E+eMcEY6zzijnGed0c4YZ6wzzhnvTHAmOpOcyc4UZ6ozzZnuzHBmOs85s5zZzhzneWeuM8+Z7yxwFjqLnMXOC84S50VnqfOSs8xZ7qxwVjqrnNXOGudlZ62zzlnvvOJscDY6m5xXndec153NzhvOFudNZ6vzlrPNedvZ7uxw3nF2Ou86u5z3nN3O+84HzofOHucjZ6/zsbPP2e8ccA46h5zDzhHnqPOJc8z51DnufOaccD53TjpfOKecL53TzlfOGedr56zzjXPO+dY573znXHC+dy46PziXnB+dn5yfncvOL84V56pzzbnu3HB+dW46vzm3nNsOcSmXdhmXdTmXdwVXdCVXdhVXdTVXdw3XdC3Xdh3XdT3XdwM3jZvWTeemdzO4D7kZ3UxujJvZzeJmdWPdbG52N4eb083l5nbzuHndfG5+t4Bb0C3kFnaLuEXdYm5xt4Rb0i3llnbLuGXdcm55t4Jb0a3kVnaruFXdam51t4Zb063l1nYfduu4dd16bn23gdvQbeQ2dpu4Td1m7iNuc/dRt4X7mNvSfdxt5bZ227ht3XZue7eD29Ht5HZ2u7hd3W5ud7eH29Pt5fZ2+7hPuH3dfm5/d4A70H3SHeQOdoe4T7lD3afdYe5wN84d4Y50n3FHuc+6o90x7lh3nDveneBOdCe5k90p7lR3mjvdneHOdJ9zZ7mz3Tnu8+5cd547313gLnQXuYvdF9wl7ovuUvcld5m73F3hrnRXuavdNe7L7lp3nbvefcXd4G50N7mvuq+5r7ub3TfcLe6b7lb3LXeb+7a73d3hvuPudN91d7nvubvd990P3A/dPe5H7l73Y3efu9894B50D7mH3SPuUfcT95j7qXvc/cw94X7unnS/cE+5X7qn3a/cM+7X7ln3G/ec+6173v3OveB+7150f3AvuT+6P7k/u5fdX9wr7lX3mnvdveH+6t50f3Nvubdd4lEe7TEe63Ee7wme6Eme7Cme6mme7hme6Vme7Tme63me7wVeGi+tl85L72XwHvIyepm8GC+zl8XL6sV62bzsXg4vp5fLy+3l8fJ6+bz8XgGvoFfIK+wV8Yp6xbziXgmvpFfKK+2V8cp65bzyXgWvolfJq+xV8ap61bzqXg2vplfLq+097NXx6nr1vPpeA6+h18hr7DXxmnrNvEe85t6jXgvvMa+l97jXymvttfHaeu289l4Hr6PXyevsdfG6et287l4Pr6fXy+vt9fGe8Pp6/bz+3gBvoPekN8gb7A3xnvKGek97w7zhXpw3whvpPeON8p71RntjvLHeOG+8N8Gb6E3yJntTvKneNG+6N8Ob6T3nzfJme3O857253jxvvrfAW+gt8hZ7L3hLvBe9pd5L3jJvubfCW+mt8lZ7a7yXvbXeOm+994q3wdvobfJe9V7zXvc2e294W7w3va3eW942721vu7fDe8fb6b3r7fLe83Z773sfeB96e7yPvL3ex94+b793wDvoHfIOe0e8o94n3jHvU++495l3wvvcO+l94Z3yvvROe195Z7yvvbPeN94571vvvPedd8H73rvo/eBd8n70fvJ+9i57v3hXvKveNe+6d8P71bvp/ebd8m57xKd82md81ud83hd80Zd82Vd81dd83Td807d823d81/d83w/8NH5aP52f3s/gP+Rn9DP5MX5mP4uf1Y/1s/nZ/Rx+Tj+Xn9vP4+f18/n5/QJ+Qb+QX9gv4hf1i/nF/RJ+Sb+UX9ov45f1y/nl/Qp+Rb+SX9mv4lf1q/nV/Rp+Tb+WX9t/2K/j1/Xr+fX9Bn5Dv5Hf2G/iN/Wb+Y/4zf1H/Rb+Y35L/3G/ld/ab+O39dv57f0Ofke/k9/Z7+J39bv53f0efk+/l9/b7+M/4ff1+/n9/QH+QP9Jf5A/2B/iP+UP9Z/2h/nD/Th/hD/Sf8Yf5T/rj/bH+GP9cf54f4I/0Z/kT/an+FP9af50f4Y/03/On+XP9uf4z/tz/Xn+fH+Bv9Bf5C/2X/CX+C/6S/2X/GX+cn+Fv9Jf5a/21/gv+2v9df56/xV/g7/R3+S/6r/mv+5v9t/wt/hv+lv9t/xt/tv+dn+H/46/03/X3+W/5+/23/c/8D/09/gf+Xv9j/19/n7/gH/QP+Qf9o/4R/1P/GP+p/5x/zP/hP+5f9L/wj/lf+mf9r/yz/hf+2f9b/xz/rf+ef87/4L/vX/R/8G/5P/o/+T/7F/2f/Gv+Ff9a/51/4b/q3/T/82/5d/2SUAFdMAEbMAFfCAEYiAFcqAEaqAFemAEZmAFduAEbuAFfhAEaYK0QbogfZAheCjIGGQKYoLMQZYgaxAbZAuyBzmCnEGuIHeQJ8gb5AvyBwWCgkGhoHBQJCgaFAuKByWCkkGpoHRQJigblAvKBxWCikGloHJQJagaVAuqBzWCmkGtoHbwcFAnqBvUC+oHDYKGQaOgcdAkaBo0Cx4JmgePBi2Cx4KWweNBq6B10CZoG7QL2gcdgo5Bp6Bz0CXoGnQLugc9gp5Br6B30Cd4Iugb9Av6BwOCgcGTwaBgcDAkeCoYGjwdDAuGB3HBiGBk8EwwKng2GB2MCcYG44LxwYRgYjApmBxMCaYG04LpwYxgZvBcMCuYHcwJng/mBvOC+cGCYGGwKFgcvBAsCV4MlgYvBcuC5cGKYGWwKlgdrAleDtYG64L1wSvB/9Fyj01+BX0D5ye28T82+5zTx4ht27Zt27ZtWxM7mdi2J3YySbaue6u26t7rwVZt7fazT3V11+/7Arq3xrbFtsd2xHbGdsV2x/bE9sb2xeJj+2MHYgdjh2KHY0diR2PHYsdjJ2InY6dip2NnYmdjCbFzsfOxC7GLsUuxy7Ersauxa7HrsRuxm7FbsduxO7G7sXux+7EHsYexR7HHsSexp7FnseexF7GXsVex17E3scTY29i72PvYh9jH2KfY59iX2NfYt9j32I/Yz9iv2O9YUuxP7G/sXywOSYYkR1IgKZFUSGokDZIWSYekRzIgGZFMSGYkC5IVyYZkR3IgOZFcSG4khiAIimAIjhAIiVAIjTAIi3AIjwiIiEiIjCiIigBEQ3TEQCBiIhZiIw7iIh7iIwESIhGSB8mL5EPyIwWQgkghpDBSBCmKFEOKIyWQkkgppDRSBimLlEPKIxWQikglpDJSBamKVEOqIzWQmkgtpDZSB6mL1EPqIw2QhkgjpDHSBGmKNEOaIy2QlkgrpDXSBmmLtEPaIx2QjkgnpDPSBemKdEO6Iz2QnkgvpDfSB+mL9EP6IwOQgcggZDAyBBmKDEOGIyOQkcgoZDQyBhmLjEPGIxOQicgkZDIyBZmKTEOmIzOQmcgsZDYyB5mLzEPmIwuQhcgiZDGyBFmKLEOWIyuQlcgqZDWyBlmLrEPWIxuQjcgmZDOyBdmKbEO2IzuQncguZDeyB9mL7EPikf3IAeQgcgg5jBxBjiLHkOPICeQkcgo5jZxBziIJyDnkPHIBuYhcQi4jV5CryDXkOnIDuYncQm4jd5C7yD3kPvIAeYg8Qh4jT5CnyDPkOfICeYm8Ql4jb5BE5C3yDnmPfEA+Ip+Qz8gX5CvyDfmO/EB+Ir+Q30gS8gf5i/xD4tBkaHI0BZoSTYWmRtOgadF0aHo0A5oRzYRmRrOgWdFsaHY0B5oTzYXmRmMogqIohuIogZIohdIog7Ioh/KogIqohMqogqooQDVURw0UoiZqoTbqoC7qoT4aoCEaoXnQvGg+ND9aAC2IFkILo0XQomgxtDhaAi2JlkJLo2XQsmg5tDxaAa2IVkIro1XQqmg1tDpaA62J1kJro3XQumg9tD7aAG2INkIbo03QpmgztDnaAm2JtkJbo23Qtmg7tD3aAe2IdkI7o13Qrmg3tDvaA+2J9kJ7o33Qvmg/tD86AB2IDkIHo0PQoegwdDg6Ah2JjkJHo2PQseg4dDw6AZ2ITkIno1PQqeg0dDo6A52JzkJno3PQueg8dD66AF2ILkIXo0vQpegydDm6Al2JrkJXo2vQteg6dD26Ad2IbkI3o1vQreg2dDu6A92J7kJ3o3vQveg+NB7djx5AD6KH0MPoEfQoegw9jp5AT6Kn0NPoGfQsmoCeQ8+jF9CL6CX0MnoFvYpeQ6+jN9Cb6C30NnoHvYveQ++jD9CH6CP0MfoEfYo+Q5+jL9CX6Cv0NfoGTUTfou/Q9+gH9CP6Cf2MfkG/ot/Q7+gP9Cf6C/2NJqF/0L/oPzQOS4Ylx1JgKbFUWGosDZYWS4elxzJgGbFMWGYsC5YVy4Zlx3JgObFcWG4shiEYimEYjhEYiVEYjTEYi3EYjwmYiEmYjCmYigFMw3TMwCBmYhZmYw7mYh7mYwEWYhGWB8uL5cPyYwWwglghrDBWBCuKFcOKYyWwklgprDRWBiuLlcPKYxWwilglrDJWBauKVcOqYzWwmlgtrDZWB6uL1cPqYw2whlgjrDHWBGuKNcOaYy2wllgrrDXWBmuLtcPaYx2wjlgnrDPWBeuKdcO6Yz2wnlgvrDfWB+uL9cP6YwOwgdggbDA2BBuKDcOGYyOwkdgobDQ2BhuLjcPGYxOwidgkbDI2BZuKTcOmYzOwmdgsbDY2B5uLzcPmYwuwhdgibDG2BFuKLcOWYyuwldgqbDW2BluLrcPWYxuwjdgmbDO2BduKbcO2YzuwndgubDe2B9uL7cPisf3YAewgdgg7jB3BjmLHsOPYCewkdgo7jZ3BzmIJ2DnsPHYBu4hdwi5jV7Cr2DXsOnYDu4ndwm5jyePi4u5h97EH2EPsEfYYe4I9xZ5hz7EX2EvsFfYae4MlYm+xd9h77AP2EfuEfca+YF+xb9h37Af2E/uF/caSsD/YX+wfFocnw5PjKfCUeCo8NZ4GT4unw9PjGfCMeCY8M54Fz4pnw7PjOfCceC48Nx7DERzFMRzHCZzEKZzGGZzFOZzHBVzEJVzGFVzFAa7hOm7gEDdxC7dxB3dxD/fxAA/xCM+D58Xz4fnxAnhBvBBeGC+CF8WL4cXxEnhJvBReGi+Dl8XL4eXxCnhFvBJeGa+CV8Wr4dXxGnhNvBZeG6+D18Xr4fXxBnhDvBHeGG+CN8Wb4c3xFnhLvBXeGm+Dt8Xb4e3xDnhHvBPeGe+Cd8W74d3xHnhPvBfeG++D98X74f3xAfhAfBA+GB+CD8WH4cPxEfhIfBQ+Gh+Dj8XH4ePxCfhEfBI+GZ+CT8Wn4dPxGfhMfBY+G5+Dz8Xn4fPxBfhCfBG+GF+CL8WX4cvxFfhKfBW+Gl+Dr8XX4evxDfhGfBO+Gd+Cb8W34dvxHfhOfBe+G9+D78X34fH4fvwAfhA/hB/Gj+BH8WP4cfwEfhI/hZ/Gz+Bn8QT8HH4ev4BfxC/hl/Er+FX8Gn4dv4HfxG/ht/E7+F38Hn4ff4A/xB/hj/En+FP8Gf4cf4G/xF/hr/E3eCL+Fn+Hv8c/4B/xT/hn/Av+Ff+Gf8d/4D/xX/hvPAn/g//F/+FxRDIiOZGCSEmkIlITaYi0RDoiPZGByEhkIjITWYisRDYiO5GDyEnkInITMQIhUAIjcIIgSIIiaIIhWIIjeEIgREIiZEIhVAIQGqETBgEJk7AIm3AIl/AInwiIkIiIPEReIh+RnyhAFCQKEYWJIkRRohhRnChBlCRKEaWJMkRZohxRnqhAVCQqEZWJKkRVohpRnahB1CRqEbWJOkRdoh5Rn2hANCQaEY2JJkRTohnRnGhBtCRaEa2JNkRboh3RnuhAdCQ6EZ2JLkRXohvRnehB9CR6Eb2JPkRfoh/RnxhADCQGEYOJIcRQYhgxnBhBjCRGEaOJMcRYYhwxnphATCQmEZOJKcRUYhoxnZhBzCRmEbOJOcRcYh4xn1hALCQWEYuJJcRSYhmxnFhBrCRWEauJNcRaYh2xnthAbCQ2EZuJLcRWYhuxndhB7CR2EbuJPcReYh8RT+wnDhAHiUPEYeIIcZQ4RhwnThAniVPEaeIMcZZIIM4R54kLxEXiEnGZuEJcJa4R14kbxE3iFnGbuEPcJe4R94kHxEPiEfGYeEI8JZ4Rz4kXxEviFfGaeEMkEm+Jd8R74gPxkfhEfCa+EF+Jb8R34gfxk/hF/CaSiD/EX+IfEUcmI5OTKciUZCoyNZmGTEumI9OTGciMZCYyM5mFzEpmI7OTOcicZC4yNxkjERIlMRInCZIkKZImGZIlOZInBVIkJVImFVIlAamROmmQkDRJi7RJh3RJj/TJgAzJiMxD5iXzkfnJAmRBshBZmCxCFiWLkcXJEmRJshRZmixDliXLkeXJCmRFshJZmaxCViWrkdXJGmRNshZZm6xD1iXrkfXJBmRDshHZmGxCNiWbkc3JFmRLshXZmmxDtiXbke3JDmRHshPZmexCdiW7kd3JHmRPshfZmxywqi/Zj+xPNtMHkoPIweQQcig5jBxOjiBHkqPI0eQYciw5jhxPTiAnkpPIyeQUcio5jZxOziBnkrPI2eQcci45j5xPLiAXkovIxeQScim5jFxOriBXkqvI1eQaci25jlxPbiA3kpvIzeQWciu5jdxO7iB3krvI3eQeci+5j4wn95MHyIPkIfIweYQ8Sh4jj5MnyJPkKfI0eYY8SyaQ58jz5AXyInmJvExeIa+S18jr5A3yJnmLvE3eIe+S98j75APyIfmIfEw+IZ+Sz8jn5AvyJfmKfE2+IRPJt+Q78j35gfxIfiI/k1/Ir+Q38jv5g/xJ/iJ/k0nkH/Iv+Y+Mo+Ko5FRyKiWVkkpNpabSUmmp9FR6KiOVkcpMZaayUlmp7FR2KieVk8pN5aYQCqEwCqMIiqD+sxiKoTiKowRKoCRKohRKoQAFKJ3SKUhByqIsyqEcyqM8KqACKqIiKi+Vl8pP5acKUgWpwlRhqihVlCpOFadKUiWp0lRpqixVlipPlacqUhWpylRlqipVlapOVadqUjWp2lRtqi5Vl6pP1acaUg2pxlRjqinVlGpONadaUi2p1lRrqi3VlmpPtac6Uh2pzlRnqivVlepOdad6Uj2p3lRvqi/Vl+pP9acGUgOpwdRgaig1lBpODadGUiOp0dRoaiw1lhpPjacmUhOpydRkaio1lZpOTadmUrOo2dQcai41j5pPLaAWUouoxdRiaim1lFpOLadWUiup1dRqai21llpPrac2UhupzdRmaiu1ldpObad2Ujup3dRuai+1l4qn4qkD1AHqEHWIOkIdoY5Rx6gT1AnqFHWKOkOdoRKoBOo8dZ66SF2kLlOXqavUVeo6dZ26Sd2kblO3qbvUXeo+dZ96SD2kHlOPqafUU+o59Zx6Sb2kXlOvqUQqkXpHvaM+UB+oT9Qn6gv1hfpGfaN+UD+oX9QvKolKov5Sf6m0dDo6PZ2BzkhnojPTWej/uxEapTEapwmapHPTsf9liqZphVZpQGu0Ths0pM3/ckTnofPS+ej8dAG6IF3ov1yaLkOXpcvR5ekKdEm61P9yRboSXZmuQ1el69HV6QZ0TboRXZuuQ9el69H16QZ0Q7oR3ZpuQ7el29Ht6Q50R7rTf3kvvY8+RZ+mz9Bn6dv0HfoH/ZN+Tb+hf9G/6YH0IHo0PYYeS4+jx9MT6In0pP/ybHoOPZeeR8+nF9AL6UX/5dX0GnotvY5eT2+gN9Kb/su76T30Vjqe3k7voHfSu/7H/5kpnt5PH6AP0ofow/QROoE+Rh+nT9An/69ZE+hz9Hn6An2TvkVfpq/QV+lr9HX6xv/4Px136Xv0ffoB/ZJ+RT+mn9BP6UT6Of3if/yfvkT6Lf2Ofk9/oD/Sn+gk+gv9lf5Gf/+f/v+0J9F/6L/0PzqOScYkZ1IwKZlUTGomDZOWScekZzIwGZlMTGYmC5OVycZkZ3IwOZlcTG4mxiAMymAMzhAMyVAMzTAMy3AMzwiMyEiMzCiMygBGY3TGYCBjMhZjMw7jMh7jMwETMhGTh8nL5GPyMwWYgkwhpjBThCnKFGOKMyWYkkwppjRThinLlGPKMxWYikwlpjJThanKVGOqMzWYmkwtpjZTh6nL1GPqMw2YhkwjpjHThGnKNGOaMy2YlkwrpjXThmnLtGPaMx2YjkwnpjPThenKdGO6Mz2YnkwvpjfTh+nL9GP6MwOYgcwgZjAzhBnKDGOGMyOYkcwoZjQzhhnLjGPGMxOYicwkZjIzhZnKTGOmMzOYmcwsZjYzh5nLzGPmMwuYhcwiZjGzhFnKLGOWMyuYlcwqZjWzhlnLrGPWMxuYjcwmZjOzhdnKbGO2MzuYncwuZjezh9nL7GPimf3MAeYgc4g5zBxhjjLHmOPMCeYkc4o5zZxhzjIJzDnmPHOBuchcYi4zV5irzDXmOnODucncYm4zd5i7zD3mPvOAecg8Yh4zT5inzDPmOfOCecm8Yl4zb5hE5i3zjnnPfGA+Mp+Yz8wX5ivzjfnO/GB+Mr+Y30wS84f5y/xj4thkbHI2BZuSTcWmZtOwadl0bHo2A5uRzcRmZrOwWdlsbHY2B5uTzcXmZmMswqIsxuIswZIsxdIsw7Isx/KswIqsxMqswqosYDVWZw0WsiZrsTbrsC7rsT4bsCEbsXnYvGw+Nj9bgC3IFmILs0XYomwxtjhbgi3JlmJLs2XYsmw5tjxbgXXYSmxltgpbla3GVmdrsDXZWmxttg5bl63H1mcbsA3ZRmxjtgnblG3GNmdbsC3ZVmxrtg3blm3Htmc7sB3ZTv+P+4PZIexQdhg7jB3BjmRHsaPZMexYdhw7np3ATmQnsZPZKexUdho7nZ3BzmRnsbPZOexcdh47n13ALmQXsYvZJexSdhm7nF3BrmRXsavZNexadh27nt3AbmQ3sZvZLexWdhu7nd3B7mR3sbvZPexedh8bz+5nD7AH2UPsYfYIe5Q9xh5nT7An2VPsafYMe5ZNYM+x59kL7EX2EnuZvcJeZa+x19kb7E32FnubvcPeZe+x99kH7EP2EfuYfcI+ZZ+xz9kX7Ev2FfuafcMmsm/Zd+x79gP7kf3Efma/sF/Zb+x39gf7k/3F/maT2D/sX/YfG8cl45JzKbiUXCouNZeGS8ul49JzGbiMXCYuM5eFy8pl47JzObicXC4uNxfjEA7lMA7nCI7kKI7mGI7lOI7nBE7kJE7mFE7lAKdxOmdwkDM5i7M5h3M5j/O5gAu5iMvD5eXycfm5AlxBrhBXmCvCFeWKccW5ElxJrhRXmivDleXKceW5ClxFrhJXmavCVeWqcdW5GlxNrhZXm6vD1eXqcfW5BlxDrhHXmGvCNeWacc25FlxLrhXXmmvDteXace25DlxHrhPXmevCdeW6cd25HlxPrhfXm+vD9eX6cf25AdxAbhA3mBvCDeWGccO5EdxIbhQ3mhvDjeXGceO5CdxEbhI3mZvCTeWmcdO5GdxMbhY3m5vDzeXmcfO5BdxCbhG3mFvCLeWWccu5FdxKbhW3mlvDreXWceu5DdxGbhO3mdvCbeW2cdu5HdxObhe3m9vD7eX2cfHcfu4Ad5A7xB3mjnBHuWPcce4Ed5I7xZ3mznBnuQTuHHeeu8Bd5C5xl7kr3FXuGnedu8Hd5G5xt7k73F3uHnefe8A95B5xj7kn3FPuGfece8G95F5xr7k3XCL3lnvHvec+cB+5T9xn7gv3lfvGfed+cD+5X9xvLon7w/3l/nFxfDI+OZ+CT8mn4lPzafi0fDo+PZ+Bz8hn4jPzWfisfDY+O5+Dz8nn4nPzMR7hUR7jcZ7gSZ7iaZ7hWZ7jeV7gRV7iZV7hVR7wGq/zBg95k7d4m3d4l/d4nw/4kI/4PHxePh+fny/AF+QL8YX5InxRvhhfnC/Bl+RL8aX5MnxZvhxfnq/AV+Qr8ZX5KnxVvhpfna/B1+Rr8bX5Onxdvh5fn2/AN+Qb8Y35JnxTvhnfnG/Bt+Rb8a35Nnxbvh3fnu/Ad+Q78Z35LnxXvhvfne/B9+R78b35Pnxfvh/fnx/AD+QH8YP5IfxQfhg/nB/Bj+RH8aP5MfxYfhw/np/AT+Qn8ZP5KfxUfho/nZ/Bz+Rn8bP5Ofxcfh4/n1/AL+QX8Yv5JfxSfhm/nF/Br+RX8av5Nfxafh2/nt/Ab+Q38Zv5LfxWfhu/nd/B7+R38bv5Pfxefh8fz+/nD/AH+UP8Yf4If5Q/xh/nT/An+VP8af4Mf5ZP4M/x5/kL/EX+En+Zv8Jf5a/x1/kb/E3+Fn+bv8Pf5e/x9/kH/EP+Ef+Yf8I/5Z/xz/8N+j+/9OHf8In8W/4d/57/wH/kP/Gf+S/8V/4b/53/wf/kf/G/+ST+D/+X/8fHCcmE5EIKIaWQSkgtpBHSCumE9EIGIaOQScgsZBGyCtmE7EIOIaeQS8gtxAREQAVMwAVCIAVKoAVGYAVO4AVBEAVJkAVFUAUgaIIuGAIUTMESbMERXMETfCEQQiES8gh5hXxCfqGAUFAoJBQWighFhWJCcaGEUFIoJZQWyghlhXJCeaGCUFGoJFQWqghVhWpCdaGGUFOoJdQW6gh1hXpCfaGB0FBoJDQWmghNhWZCc6GF0FJoJbQW2ghthXZCe6GD0FHoJHQWughdhW5Cd6GH0FPoJfQW+gh9hX5Cf2GAMFAYJAwWhghDhWHCcGGEMFIYJYwWxghjhXHCeGGCMFGYJEwWpghThWnCdGGGMFOYJcwW5ghzhXnCfGGBsFBYJCwWlghLhWXCcmGFsFJYJawW1ghrhXXCemGDsFHYJGwWtghbhW3CdmGHsFPYJewW9gh7hX1CvLBfOCAcFA4Jh4UjwlHhmHBcOCGcFE4Jp4UzwlkhQTgnnBcu/L8681p4IyQKb4V3wnvhg/BR+CR8Fr4IX4Vvwnfhh/BT+CX8FpKEP8Jf4Z8QJyYTk4spxJRiKjG1mEZMK6YT04sZxIxiJjGzmEXMKmYTs4s5xJxiLjG3GBMRERUxERcJkRQpkRYZkRU5kRcFURQlURYVURWBqIm6aIhQNEVLtEVHdEVP9MVADMVIzCPmFfOJ+cUCYkGxkFhYLCIWFYuJxcUSYkmxlFhaLCOWFcuJ5cUKYkWxklhZrCJWFauJ1cUaYk2xllhbrCPWFeuJ9cUGYkOxkdhYbCI2FZuJzcUWYkuxldhabCO2FduJ7cUOYkexk9hZ7CJ2FbuJ3cUeYk+xl9hb7CP2FfuJ/cUB4kBxkDhYHCIOFYeJw8UR4khxlDhaHCOOFceJ48UJ4kRxkjhZnCJOFaeJ08UZ4kxxljhbnCPOFeeJ88UF4kJxkbhYXCIuFZeJy8UV4kpxlbhaXCOuFdeJ68UN4kZxk7hZ3CJuFbeJ28Ud4k5xl7hb3CPuFfeJ8eJ+8YB4UDwkHhaPiEfFY+Jx8YR4UjwlnhbPiGfFBPGceF68IF4UL4mXxSviVfGaeF28Id4Ub4m3xTviXfGeeF98ID4UH4mPxSfiU/GZ+Fx8Ib4UX4mvxTdiovhWfCe+Fz+IH8VP4mfxi/hV/CZ+F3+IP8Vf4m8xSfwj/hX/iXFSMim5lEJKKaWSUktppLRSOim9lEHKKGWSMktZpKxSNim7lEPKKeWScksxCZFQCZNwiZBIiZJoiZFYiZN4SZBESZJkSZFUCUiapEuGBCVTsiRbciRX8iRfCqRQiqQ8Ul4pn5RfKiAVlApJhaUiUlGpmFRcKiGVlEpJpaUyUlmpnFReqiBVlCpJlaUqUlWpmlRdqiHVlGpJtaU6Ul2pnlRfaiA1lBpJjaUmUlOpmdRcaiG1lFpJraU2UlupndRe6iB1lDpJnaUuUlepm9Rd6iH1lHpJvaU+Ul+pn9RfGiANlAZJg6Uh0lBpmDRcGiGNlEZJo6Ux0lhpnDRemiBNlCZJk6Up0lRpmjRdmiHNlGZJs6U50lxpnjRfWiAtlBZJi6Ul0lJpmbRcWiGtlFZJq6U10lppnbRe2iBtlDZJm6Ut0lZpm7Rd2iHtlHZJu6U90l5pnxQv7ZcOSAelQ9Jh6Yh0VDomHZdOSCelU9Jp6Yx0VkqQzknnpQvSRemSdFm6Il2VrknXpRvSTemWdFu6I92V7kn3pQfSQ+mR9Fh6Ij2VnknPpRfSS+mV9Fp6IyVKb6V30nvpg/RR+iR9lr5IX6Vv0nfph/RT+iX9lpKkP9Jf6Z8UJyeTk8sp5JRyKjm1nEZOK6eT08sZ5IxyJjmznEXOKmeTs8s55JxyLjm3HJMRGZUxGZcJmZQpmZYZmZU5mZcFWZQlWZYVWZWBrMm6bMhQNmVLtmVHdmVP9uVADuVIziPnlfPJ+eUCckG5kFxYLiIXlYvJxeUSckm5lFxaLiOXlcvJ5eUKckW5klxZriJXlavJ1eUack25llxbriPXlevJ9eUGckO5kdxYbiI3lZvJzeUWcku5ldxabiO3ldvJ7eUOcke5k9xZ7iJ3lbvJ3eUeck+5l9xb7iP3lfvJ/eUB8kB5kDxYHiIPlYfJw+UR8kh5lDxaHiOPlcfJ4+UJ8kR5kjxZniJPlafJ0+UZ8kx5ljxbniPPlefJ8+UF8kJ5kbxYXiIvlZfJy+UV8kp5lbxaXiOvldfJ6+UN8kZ5k7xZ3iJvlbfJ2+Ud8k55l7xb3iPvlffJ8fJ++YB8UD4kH5aPyEflY/Jx+YR8Uj4ln5bPyGflBPmcfF6+IF+UL8mX5SvyVfmafF2+Id+Ub8m35TvyXfmefF9+ID+UH8mP5SfyU/mZ/Fx+Ib+UX8mv5TdyovxWfie/lz/IH+VP8mf5i/xV/iZ/l3/IP+Vf8m85Sf4j/5X/yXFKMiW5kkJJqaRSUitplLRKOiW9kkHJqGRSMitZlKxKNiW7kkPJqeRScisxBVFQBVNwhVBIhVJohVFYhVN4RVBERVJkRVFUBSiaoiuGAhVTsRRbcRRX8RRfCZRQiZQ8Sl4ln5JfKaAUVAophZUiSlGlmFJcKaGUVEoppZUySlmlnFJeqaBUVCoplZUqSlWlmlJdqaHUVGoptZU6Sl2lnlJfaaA0VBopjZUmSlOlmdJcaaG0VFoprZU2SlulndJe6aB0VDopnZUuSlelm9Jd6aH0VHopvZU+Sl+ln9JfGaAMVAYpg5UhylBlmDJcGaGMVEYpo5UxylhlnDJemaBMVCYpk5UpylRlmjJdmaHMVGYps5U5ylxlnjJfWaAsVBYpi5UlylJlmbJcWaGsVFYpq5U1ylplnbJe2aBsVDYpm5UtylZlm7Jd2aHsVHYpu5U9yl5lnxKv7FcOKAeVQ8ph5YhyVDmmHFdOKCeVU8pp5YxyVklQzinnlQvKReWSclm5olxVrinXlRvKTeWWclu5o9xV7in3lQfKQ+WR8lh5ojxVninPlRfKS+WV8lp5oyQqb5V3ynvlg/JR+aR8Vr4oX5Vvynflh/JT+aX8VpKUP8pf5Z8SpyZTk6sp1JRqKjW1mkZNq6ZT06sZ1IxqJjWzmkXNqmZTs6s51JxqLjW3GlMRFVUxFVcJlVQplVYZlVU5lVcFVVQlVVYVVVWBqqm6aqhQNVVLtVVHdVVP9dVADdVIzaPmVfOp+dUCakG1kFpYLaIWVYupxdUSakm1lFpaLaOWVcup5dUKakW1klpZraJWVaup1dUaak21llpbraPWVeup9dUGakO1kdpYbaI2VZupzdUWaku1ldpabaO2Vdup7dUOake1k9pZ7aJ2Vbup3dUeak+1l9pb7aP2Vfup/dUB6kB1kDpYHaIOVYepw9UR6kh1lDpaHaOOVcep49UJ6kR1kjpZnaJOVaep09UZ6kx1ljpbnaPOVeep89UF6kJ1kbpYXaIuVZepy9UV6kp1lbpaXaOuVdep69UN6kZ1k7pZ3aJuVbep29Ud6k51l7pb3aPuVfep8ep+9YB6UD2kHlaPqEfVY+px9YR6Uj2lnlbPUGfVBPWcel69oF5UL6mX1SvqVfWael29od5Ub6m31TvqXfWeel99oD5UH6mP1SfqU/WZ+lx9ob5UX6mv1TdqovpWfae+Vz+oH9VP6mf1i/pV/aZ+V3+oP9Vf6m81Sf2j/lX/qXEgGUgOUoCUIBVIDdKAtCAdSA8ygIwgE8gMsoCsIBvIDnKAnCAXyA1iAAEowAAOCEACCtCAASzgAA8EIAIJyEABKgBAAzowAAQmsIANHOACD/ggACGIQB6QF+QD+UEBUBAUAoVBEVAUFAPFQQlQEpQCpUEZUBaUA+VBBVARVAKVQRVQFVQD1UENUBPUArVBHVAX1AP1QQPQEDQCjUET0BQ0A81BC9AStAKtQRvQFrQD7UEH0BF0Ap1BF9AVdAPdQQ/QE/QCvUEf0Bf0A/3BADAQDAKDwRAwFAwDw8EIMBKMAqPBGDAWjAPjwQQwEUwCk8EUMBVMA9PBDDATzAKzwRwwF8wD88ECsBAsAovBErAULAPLwQqwEqwCq8EasBasA+vBBrARbAKbwRawFWwD28EOsBPsArvBHrAX7APxYD84AA6CQ+AwOAKOgmPgODgBToJT4DQ4A86CBHAOnAcXwEVwCVwGV8BVcA1cBzfATXAL3AZ3wF1wD9wHD8BD8Ag8Bk/AU/AMPAcvwEvwCrwGb0AieAvegffgA/gIPoHP4Av4Cr6B7+AH+Al+gd8gCfwBf8E/EKcl05JrKbSUWiottZZGS6ul09JrGbSMWiYts5ZFy6pl07JrObScWi4ttxbTEA3VMA3XCI3UKI3WGI3VOI3XBE3UJE3WFE3VgKZpumZoUDM1S7M1R3M1T/O1QAu1SMuj5dXyafm1AlpBrZBWWCuiFdWKacW1ElpJrZRWWiujldXKaeW1ClpFrZJWWauiVdWqadW1GlpNrZZWW6uj1dXqafW1BlpDrZHWWGuiNdWaac21FlpLrZXWWmujtdXaae21DlpHrZPWWeuiddW6ad21HlpPrZfWW+uj9dX6af21AdpAbZA2WBuiDdWGacO1EdpIbZQ2WhujjdXGaeO1CdpEbZI2WZuiTdWmadO1GdpMbZY2W5ujzdXmafO1BdpCbZG2WFuiLdWWacu1FdpKbZW2WlujrdXWaeu1DdpGbZO2WduibdW2adu1HdpObZe2W9uj7dX2afHafu2AdlA7pB3WjmhHtWPace2EdlI7pZ3WzmhntQTtnHZeu6Bd1C5pl7Ur2lXtmnZdu6Hd1G5pt7U72l3tnnZfe6A91B5pj7Un2lPtmfZce6G91F5pr7U3WqL2Vnunvdc+aB+1T9pn7Yv2Vfumfdd+aD+1X9pvLUn7o/3V/mlxejI9uZ5CT6mn0lPrafS0ejo9vZ5Bz6hn0jPrWfSsejY9u55Dz6nn0nPrMR3RUR3TcZ3QSZ3SaZ3RWZ3TeV3QRV3SZV3RVR3omq7rhg51U///9/5GemO9sd5Ub6Y31/MmL5i8ld5Kb6O30dvp7fQOeke9k95Z76J31bvq3fUeeg+9l95b76P31fvp/fUB+kB9kD5YH6wP1Yfqw/Xh+kh9pD5aH62P1cfq4/Xx+kR9oj5Zn6xP1afq0/Xp+kx9pj5bn63P1efq8/X5+kJ9ob5YX6wv1Zfqy/Xl+kp9pb5aX62v1dfq6/X1+kZ9o75Z36xv1bfq2/Xt+k59p75b363v1ffq8Xq8fkA/oB/SD+lH9CP6Mf2YfkI/oZ/ST+ln9DN6gp6gn9fP6xf1i/pl/bJ+Vb+qX9ev6zf1m/pt/bZ+V7+r39fv6w/1h/pj/bH+VH+mP9df6C/1V/pr/Y2eqL/V3+nv9Q/6R/2T/ln/on/Vv+nf9R/6T/2X/ltP0v/of/V/+v+X7xclQzYUQzWAoRm6YRjQMA3LsA3HcA3P8I3ACI3IyGPkNfIZ+Y0CRkGjkFHYKGIUNYoZxY0SRkmjlFHaKGOUNcoZ5Y0KRkWjklHZqGJUNaoZ1Y0aRk2jllHbqGPUNeoZ9Y0GRkOjkdHYaGI0NZoZzY0WRkujldHaaGO0NdoZ7Y0ORkejk9HZ6GJ0NboZ3Y0eRk+jl9Hb6GP0NfoZ/Y0BxkBjkDHYGGIMNYYZw40RxkhjlDHaGGOMNcYZ440JxkRjkjHZmGJMNaYZ040ZxkxjljHbmGPMNeYZ840FxkJjkbHYWGIsNZYZy40VxkpjlbHaWGOsNdYZ640NxkZjk7HZ2GJsNbYZ240dxk5jl7Hb2GPsNfYZ8cZ+44Bx0DhkHDaOGEeNY8Zx44Rx0jhlnDbOGGeNBOOccd64YFw0LhmXjSvGVeOacd24Ydw0bhm3jTvGXeOecd94YDw0HhmPjSfGU+OZ8dx4Ybw0XhmvjTdGovHWeGe8Nz4YH41Pxmfji/HV+GZ8N34YP41fxm8jyfhj/DX+GXEwGUwOU8CUMBVMDdPAtDAdTA8zwIwwE8wMs8CsMBvMDnPAnDAXzA1jEIEoxCAOCUhCCtKQgSzkIA8FKEIJylCBKgRQgzo0IIQmtKANHehCD/owgCGMYB6YF+aD+WEBWBAWgoVhEVgUFoPFYQlYEpaCpWEZWBaWg+VhBVgRVoKVYRVYFVaD1WENWBPWgrVhHVgX1oP1YQPYEDaCjWET2BQ2g81hC9gStoKtYRvYFraD7WEH2BF2gp1hF9gVdoPdYQ/YE/aCvWEf2Bf2g/3hADgQDoKD4RA4FA6Dw+EIOBKOgqPhGDgWjoPj4QQ4EU6Ck+EUOBVOg9PhDDgTzoKz4Rw4F86D8+ECuBAugovhErgULoPL4Qq4Eq6Cq+EauBaug+vhBrgRboKb4Ra4FW6D2+EOuBPugrvhHrgX7oPxcD88AA/CQ/AwPAKPwmPwODwBT8JT8DQ8A8/CBHgOnocX4EV4CV6GV+BVeA1ehzfgTXgL3oZ34F14D96HD+BD+Ag+hk/gU/gMPocv4Ev4Cr6Gb2AifAvfwffwA/wIP8HP8Av8Cr/B7/AH/Al/wd8wCf6Bf+E/GGcmM5ObKcyUZioztZnGTGumM9ObGcyMZiYzs5nFzGpmM7ObOcycZi4ztxkzERM1MRM3CZM0KZM2GZM1OZM3BVM0JVM2FVM1gamZummY0DRNy7RNx3RNz/TNwAzNyMxj5jXzmfnNAmZBs5BZ2CxiFjWLmcXNEmZJs5RZ2ixjljXLmeXNCmZFs5JZ2axiVjWrmdXNGmZNs5ZZ26xj1jXrmfXNBmZDs5HZ2GxiNjWbmc3NFmZLs5XZ2mxjtjXbme3NDmZHs5PZ2exidjW7md3NHmZPs5fZ2+xj9jX7mf3NAeZAc5A52BxiDjWHmcPNEeZIc5Q52hxjjjXHmePNCeZEc5I52ZxiTjWnmdPNGeZMc5Y525xjzjXnmfPNBeZCc5G52FxiLjWXmcvNFeZKc5W52lxjrjXXmevNDeZGc5O52dxibjW3mdvNHeZOc5e529xj7jX3mfHmfvOAedA8ZB42j5hHzWPmcfOEedI8ZZ42z5hnzQTznHnevGBeNC+Zl80r5lXzmnndvGHeNG+Zt8075l3znnnffGA+NB+Zj80n5lPzmfncfGG+NF+Zr803ZqL51nxnvjc/mB/NT+Zn84v51fxmfjd/mD/NX+ZvM8n8Y/41/5lxVjIruZXCSmmlslJbaay0VjorvZXBymhlsjJbWaysVjYru5XDymnlsnJbMQuxUAuzcIuwSIuyaIuxWIuzeEuwREuyZEuxVAtYmqVbhgUt07Is23Is1/Is3wqs0IqsPFZeK5+V3ypgFbQKWYWtIlZRq5hV3CphlbRKWaWtMlZZq5xV3qpgVbQqWZWtKlZVq5pV3aph1bRqWbWtOlZdq55V32pgNbQaWY2tJlZTq5nV3GphtbRaWa2tNlZbq53V3upgdbQ6WZ2tLlZXq5vV3eph9bR6Wb2tPlZfq5/V3xpgDbQGWYOtIdZQa5g13BphjbRGWaOtMdZYa5w13ppgTbQmWZOtKdZUa5o13ZphzbRmWbOtOdZca54131pgLbQWWYutJdZSa5m13FphrbRWWautNdZaa5213tpgbbQ2WZutLdZWa5u13dph7bR2WbutPdZea58Vb+23DlgHrUPWYeuIddQ6Zh23TlgnrVPWaeuMddZKsM5Z560L1kXrknXZumJdta5Z160b1k3rlnXbumPdte5Z960H1kPrkfXYemI9tZ5Zz60X1kvrlfXaemMlWm+td9Z764P10fpkfba+WF+tb9Z364f10/pl/baSrD/WX+ufFWcns5PbKeyUdio7tZ3GTmuns9PbGeyMdiY7s53Fzmpns7PbOeycdi47tx2zERu1MRu3CZu0KZu2GZu1OZu3BVu0JVu2FVu1ga3Zum3Y0DZty7Ztx3Ztz/btwA7tyM5j57Xz2fntAnZBu5Bd2C5iF7WL2cXtEnZJu5Rd2i5jl7XL2eXtCnZFu5Jd2a5iV7Wr2dXtGnZNu5Zd265j17Xr2fXtBnZDu5Hd2G5iN7Wb2c3tFnZLu5Xd2m5jt7Xb2e3tDnZHu5Pd2e5id7W72d3tHnZPu5fd2+5j97X72f3tAfZAe5A92B5iD7WH2cPtEfZIe5Q92h5jj7XH2ePtCfZEe5I92Z5iT7Wn2dPtGfZMe5Y9255jz7Xn2fPtBfZCe5G92F5iL7WX2cvtFfZKe5W92l5jr7XX2evtDfZGe5O92d5ib7W32dvtHfZOe5e9295j77X32fH2fvuAfdA+ZB+2j9hH7WP2cfuEfdI+ZZ+2z9hn7QT7nH3evmBftC/Zl+0r9lX7mn3dvmHftG/Zt+079l37nn3ffmA/tB/Zj+0ndtq4Z/Zz+4X90n5lv7bf2In2W/ud/d7+YH+0P9mf7S/2V/ub/d3+Yf+0f9m/7ST7j/3X/mfHOcmc5E4KJ6WTykntpHHSOumc9E4GJ6OTycnsZHGyOtmc7E4OJ6eTy8ntxBzEQR3MwR3CIR3KoR3GYR3O4R3BER3JkR3FUR3gaI7uGA50TMdybMdxXMdzfCdwQidy8jh5nXxOfqeAU9Ap5BR2ijhFnWJOcaeEU9Ip5ZR2yjhlnXJOeaeCU9Gp5FR2qjhVnWpOdaeGU9Op5dR26jh1nXpOfaeB09Bp5DR2mjhNnWZOc6eF09Jp5bR22jhtnXZOe6eD09Hp5HR2ujhdnW5Od6eH09Pp5fR2+jh9nX5Of2eAM9AZ5Ax2hjhDnWHOcGeEM9IZ5Yx2xjhjnXHOeGeCM9GZ5Ex2pjhTnWnOdGeGM9OZ5cx25jhznXnOfGeBs9BZ5Cx2ljhLnWXOcmeFs9JZ5ax21jhrnXXOemeDs9HZ5Gx2tjhbnW3OdmeHs9PZ5ex29jh7nX1OvLPfOeAcdA45h50jzlHnmHPcOeGcdE45p50zzlknwTnnnHcuOBedS85l54pz1bnmXHduODedW85t545z17nn3HceOA+dR85j54nz1HnmPHdeOC+dV85r542T6Lx13jnvnQ/OR+eT89n54nx1vjnfnR/OT+eX89tJcv44f51/TpybzE3upnBTuqnc1G4aN62bzk3vZnAzupnczG4WN6ubzc3u5nBzurnc3G7MRVzUxVzcJVzSpVzaZVzW5VzeFVzRlVzZVVzVBa7m6q7hQtd0Ldd2Hdd1Pdd3Azd0IzePm9fN5+Z3C7gF3UJuYbeIW9Qt5hZ3S7gl3VJuabeMW9Yt55Z3K7gV3UpuZbeKW9Wt5lZ3a7g13VpubbeOW9et59Z3G7gN3UZuY7eJ29Rt5jZ3W7gt3VZua7eN29Zt57Z3O7gd3U5uZ7eL29Xt5nZ3e7g93V5ub7eP29ft5/Z3B7gD3UHuYHeIO9Qd5g53R7gj3VHuaHeMO9Yd5453J7gT3UnuZHeKO9Wd5k53Z7gz3VnubHeOO9ed5853F7gL3UXuYneJu9Rd5i53V7gr3VXuaneNu9Zd5653N7gb3U3uZneLu9Xd5m53d7g73V3ubnePu9fd58a7+90D7kH3kHvYPeIedY+5x90T7kn3lHvaPeOedRPcc+5594J70b3kXnavuFfda+5194Z7073l3nbvuHfde+5994H70H3kPnafuE/dZ+5z94X70n3lvnbfuInuW/ed+9794H50P7mf3S/uV/eb+9394f50f7m/3ST3j/vX/efGecm85F4KL6WXykvtpfHSeum89F4GL6OXycvsZfGyetm87F4OL6eXy8vtxTzEQz3Mwz3CIz3Koz3GYz3O4z3BEz3Jkz3FUz3gaZ7uGR70TM/ybM/xXM/zfC/wQi/y8nh5vXxefq+AV9Ar5BX2inhFvWJeca+EV9Ir5ZX2ynhlvXJeea+CV9Gr5FX2qnhVvWpeda+GV9Or5dX26nh1vXpefa+B19Br5DX2mnhNvWZec6+F19Jr5bX22nhtvXZee6+D19Hr5HX2unhdvW5ed6+H19Pr5fX2+nh9vX5ef2+AN9Ab5A32hnhDvWHecG+EN9Ib5Y32xnhjvXHeeG+CN9Gb5E32pnhTvWnedG+GN9Ob5c325nhzvXnefG+Bt9Bb5C32lnhLvWXecm+Ft9Jb5a321nhrvXXeem+Dt9Hb5G32tnhbvW3edm+Ht9Pb5e329nh7vX1evLffO+Ad9A55h70j3lHvmHfcO+Gd9E55p70z3lkvwTvnnfcueBe9S95l74p31bvmXfdueDe9W95t745317vn3fceeA+9R95j74n31HvmPfdeeC+9V95r742X6L313nnvvQ/eR++T99n74n31vnnfvR/eT++X99tL8v54f71/XpyfzE/up/BT+qn81H4aP62fzk/vZ/Az+pn8zH4WP6ufzc/u5/Bz+rn83H7MR3zUx3zcJ3zSp3zaZ3zW53zeF3zRl3zZV3zVB77m677hQ9/0Ld/2Hd/1Pd/3Az/0Iz+Pn9fP5+f3C/gF/UJ+Yb+IX9Qv5hf3S/gl/VJ+qri4uLJ+Ob+8X8Gv6FfyK/tV/Kp+Nb+6X8Ov6dfya/t1/Lp+Pb++38Bv6DfyG/tN/KZ+M7+538Jv6bfyW/tt/LZ+O7+938Hv6HfyO/td/K5+N7+738Pv6ffye/t9/L5+P7+/P8Af6A/yB/tD/KH+MH+4P8If6Y/yR/tj/LH+OH+8P8Gf6E/yJ/tT/Kn+NH+6P8Of6c/yZ/tz/Ln+PH++v8Bf6C/yF/tL/KX+Mn+5v8Jf6a/yV/tr/LX+On+9v8Hf6G/yN/tb/K3+Nn+7v8Pf6e/yd/t7/L3+Pj/e3+8f8A/6h/zD/hH/qH/MP+6f8E/6p/zT/hn/rJ/gn/PP+xf8i/4l/7J/xb/qX/Ov+zf8m/4t/7Z/x7/r3/Pv+w/8h/4j/7H/xH/qP/Of+y/8l/4r/7X/xk/03/rv/Pf+B/+j/8n/7H/xv/rf/O/+D/+n/8v/7Sf5f/y//j8/LkgWJA9SBCmDVEHqIE2QNkgXpA8yBBmDTEHmIEuQNcgWZA9yBDmDXEHuIBYgARpgAR4QARlQAR0wARtwAR8IgRhIgRwogRqAQAv0wAhgYAZWYAdO4AZe4AdBEAZRkCfIG+QL8gcFgoJBoaBwUCQoGhQLigclgpJBqaB0UCYoG5QLygcVgopBpaByUCWoGlQLqgc1gppBraB2UCeoG9QL6gcNgoZBo6Bx0CRoGjQLmgctgpZBq6B10CZoG7QL2gcdgo5Bp6Bz0CXoGnQLugc9gp5Br6B30CfoG/QL+gcDgoHBoGBwMCQYGgwLhgcjgpHBqGB0MCYYG4wLxgcTgonBpGByMCWYGkwLpgczgpnBrGB2MCeYG8wL5gcLgoXBomBxsCRYGiwLlgcrgpXBqmB1sCZYG6wL1gcbgo3BpmBzsCXYGmwLtgc7gp3BrmB3sCfYG+wL4oP9wYHgYHAoOBwcCY4Gx4LjwYngZHAqOB2cCc4GCcG54HxwIbgYXAouB1eCq8G14HpwI7gZ3ApuB3eCu8G94H7wIHgYPAoeB0+Cp8Gz4HnwIngZvApeB2+CxOBt8C54H3wIPgafgs/Bl+Br8C34HvwIfga/gt9BUvAn+Bv8C+LCZGHyMEWYMkwVpg7ThGnDdGH6MEOYMcwUZg6zhFnDbGH2MEeYM8wV5g5jIRKiIRbiIRGSIRXSIROyIRfyoRCKoRTKoRKqIQi1UA+NEIZmaIV26IRu6IV+GIRhGIV5wrxhvjB/WCAsGBYKC4dFwqJhsbB4WCIsGZYKS4dlwrJhubB8WCGsGFYKK4dVwqphtbB6WCOsGdYKa4d1wrphvbB+2CBsGDYKG4dNwqZhs7B52CJsGbYKW4dtwrZhu7B92CHsGHYKO4ddwq5ht7B72CPsGfYKe4d9wr5hv7B/OCAcGA4KB4dDwqHhsHB4OCIcGY4KR4djwrHhuHB8OCGcGE4KJ4dTwqnhtHB6OCOcGc4KZ4dzwrnhvHB+uCBcGC4KF4dLwqXhsnB5uCJcGa4KV4drwrXhunB9uCHcGG4KN4dbwq3htnB7uCPcGe4Kd4d7wr3hvjA+3B8eCA+Gh8LD4ZHwaHgsPB6eCE+Gp8LT4ZnwbJgQngvPhxfCi+Gl8HJ4JbwaXguvhzfCm+Gt8HZ4J7wb3gvvhw/Ch+Gj8HH4JHwaPgufhy/Cl+Gr8HX4JkwM34bvwvfhh/Bj+Cn8HH4Jv4bfwu/hj/Bn+Cv8HSaFf8K/4b8wLkoWJY9SRCmjVFHqKE2UNkoXpY8yRBmjTFHmKEuUNcoWZY9yRDmjXFHuKBYhERphER4RERlRER0xERtxER8JkRhJkRwpkRqBSIv0yIhgZEZWZEdO5EZe5EdBFEZRlCfKG+WL8kcFooJRoahwVCQqGhWLikclopJRqah0VCYqG5WLykcVoopRpahyVCWqGlWLqkc1oppRrah2VCeqG9WL6kcNooZRo6hx1CRqGjWLmkctopZRq6h11CZqG7WL2kcdoo5Rp6hz1CXqGnWLukc9op5Rr6h31CfqG/WL+kcDooHRoGhwNCQaGg2LhkcjopHRqGh0NOb/oBiewsXYEQAAn9q2bXtsW0mmtu321rZt27Zt27bt/fbhx0Zio7DR2BhsLDYOG49NwCZik7DJ2BRsKjYNm47NwGZis7DZ2BxsLjYPm48twBZii7DF2BJsKbYMW46twFZiq7DV2BpsLbYOW49twDZim7DN2BZsK7YN247twHZiu7Dd2B5sL7YP248dwA5ih7DD2BHsKHYMO46dwE5ip7DT2BnsLHYOO49dwC5il7DL2BXsKnYNu47dwG5it7Db2B3sLnYPu489wB5ij7DH2BPsKfYMe469wF5ir7DX2BvsLfYOe499wD5in7DP2BfsK/YN+479wH5iv7Df2B/sL/YPS8AT4YnxJHhSPBmeHE+Bp8RT4anxNHhaPB2eHs+AZ8Qz4ZnxLHhWPBueHc+B58Rz4bnxPHhePB+eHy+AF8QL4YXxInhRvBheHC+Bl8RL4aXxMnhZvBxeHq+AV8Qr4ZXxKnhVvBpeHa+BYziOEziJUziNMziLcziPC7iIS7iMK7iKa7iOG7iJW7iNO7iLe7iPB3iIRzjAIY7wGK+J18Jr43Xwung9vD7eAG+IN8Ib403wpngzvDneAm+Jt8Jb423wtng7vD3eAe+Id8I7413wrng3vDveA++J/4f3wnvjffC+eD+8Pz4AH4gPwgfjQ/Ch+DB8OD4CH4mPwkfjY/Cx+Dh8PD4Bn4hPwifjU/Cp+DR8Oj4Dn4nPwmfjc/C5+Dx8Pr4AX4gvwhfjS/Cl+DJ8Ob4CX4mvwlfja/C1+Dp8Pb4B34hvwjfjW/Ct+DZ8O74D34nvwnfje/C9+D58P34AP4gfwg/jR/Cj+DH8OH4CP4mfwk/jZ/Cz+Dn8PH4Bv4hfwi/jV/Cr+DX8On4Dv4nfwm/jd/C7+D38Pv4Af4g/wh/jT/Cn+DP8Of4Cf4m/wl/jb/C3+Dv8Pf4B/4h/wj/jX/Cv+Df8O/4D/4n/wn/jf/C/+D88gUhEJCaSEEmJZERyIgWRkkhFpCbSEGmJdER6IgORkchEZCayEFmJbER2IgeRk8hF5CbyEHmJfER+ogBRkChEFCaKEEWJYkRxogRRkihFlCbKEGWJckR5ogJRkahEVCaqEFWJakR1ogaBEThBECRBETTBECzBETwhECIhETKhECqhETphECZhETbhEC7hET4RECEREYCABCJioiZRi6hN1CHqEvWI+kQDoiHRiGhMNCGaEs2I5kQLoiXRimhNtCHaEu2I9kQHoiPRiehMdCG6Et2I7kQPoifxH9GL6E30IfoS/Yj+xABiIDGIGEwMIYYSw4jhxAhiJDGKGE2MIcYS44jxxARiIjGJmExMIaYS04jpxAxiJjGLmE3MIeYS84j5xAJiIbGIWEwsIZYSy4jlxApiJbGKWE2sIdYS64j1xAZiI7GJ2ExsIbYS24jtxA5iJ7GL2E3sIfYS+4j9xAHiIHGIOEwcIY4Sx4jjxAniJHGKOE2cIc4S54jzxAXiInGJuExcIa4S14jrxA3iJnGLuE3cIe4S94j7xAPiIfGIeEw8IZ4Sz4jnxAviJfGKeE28Id4S74j3xAfiI/GJ+Ex8Ib4S34jvxA/iJ/GL+E38If4S/4gEMhGZmExCJiWTkcnJFGRKMhWZmkxDpiXTkenJDGRGMhOZmcxCZiWzkdnJHGROMheZm8xD5iXzkfnJAmRBshBZmCxCFiWLkcXJEmRJshRZmixDliXLkeXJCmRFshJZmaxCViWrkdXJGiRG4iRBkiRF0iRDsiRH8qRAiqREyqRCqqRG6qRBmqRF2qRDuqRH+mRAhmREAhKSiIzJmmQtsjZZh6xL1iPrkw3IhmQjsjHZhGxKNiObky3IlmQrsjXZhmxLtiPbkx3IjmQnsjPZhexKdiO7kz3InuR/ZC+yN9mH7Ev2I/uTA8iB5CByMDmEHEoOI4eTI8iR5ChyNDmGHEuOI8eTE8iJ5CRyMjmFnEpOI6eTM8iZ5CxyNjmHnEvOI+eTC8iF5CJyMbmEXEouI5eTK8iV5CpyNbmGXEuuI9eTG8iN5CZyM7mF3EpuI7eTO8id5C5yN7mH3EvuI/eTB8iD5CHyMHmEPEoeI4+TJ8iT5CnyNHmGPEueI8+TF8iL5CXyMnmFvEpeI6+TN8ib5C3yNnmHvEveI++TD8iH5CPyMfmEfEo+I5+TL8iX5CvyNfmGfEu+I9+TH8iP5CfyM/mF/Ep+I7+TP8if5C/yN/mH/Ev+IxOoRFRiKgmVlEpGJadSUCmpVFRqKg2VlkpHpacyUBmpTFRmKguVlcpGZadyUDmpXFRuKg+Vl8pH5acKUAWpQlRhqghVlCpGFadKUCWpUlRpqgxVlipHlacqUBWpSlRlqgpVlapGVadqUBiFUwRFUhRFUwzFUhzFUwIlUhIlUwqlUhqlUwZlUhZlUw7lUh7lUwEVUhEFKEghKqZqUrWo2lQdqi5Vj6pPNaAaUo2oxlQTqinVjGpOtaBaUq2o1lQbqi3VjmpPdaA6Up2ozlQXqivVjepO9aB6Uv9RvajeVB+qL9WP6k8NoAZSg6jB1BBqKDWMGk6NoEZSo6jR1BhqLDWOGk9NoCZSk6jJ1BRqKjWNmk7NoGZSs6jZ1BxqLjWPmk8toBZSi6jF1BJqKbWMWk6toFZSq6jV1BpqLbWOWk9toDZSm6jN1BZqK7WN2k7toHZSu6jd1B5qL7WP2k8doA5Sh6jD1BHqKHWMOk6doE5Sp6jT1BnqLHWOOk9doC5Sl6jL1BXqKnWNuk7doG5St6jb1B3qLnWPuk89oB5Sj6jH1BPqKfWMek69oF5Sr6jX1BvqLfWOek99oD5Sn6jP1BfqK/WN+k79oH5Sv6jf1B/qL/WPSqAT0YnpJHRSOhmdnE5Bp6RT0anpNHRaOh2dns5AZ6Qz0ZnpLHRWOhudnc5B56Rz0bnpPHReOh+dny5AF6QL0YXpInRRuhhdnC5Bl6RL0aXpMnRZuhxdnq5AV6Qr0ZXpKnRVuhpdna5BYzROEzRJUzRNMzRLczRPC7RIS7RMK7RKa7ROG7RJW7RNO7RLe7RPB3RIRzSgIY3omK5J16Jr03XounQ9uj7dgG5IN6Ib003opnQzujndgm5Jt6Jb023otnQ7uj3dge5Id6I7013ornQ3ujvdg+5J/0f3onvTfei+dD+6Pz2AHkgPogfTQ+ih9DB6OD2CHkmPokfTY+ix9Dh6PD2BnkhPoifTU+ip9DR6Oj2DnknPomfTc+i59Dx6Pr2AXkgvohfTS+il9DJ6Ob2CXkmvolfTa+i19Dp6Pb2B3khvojfTW+it9DZ6O72D3knvonfTe+i99D56P32APkgfog/TR+ij9DH6OH2CPkmfok/TZ+iz9Dn6PH2Bvkhfoi/TV+ir9DX6On2Dvknfom/Td+i79D36Pv2Afkg/oh/TT+in9DP6Of2Cfkm/ol/Tb+i39Dv6Pf2B/kh/oj/TX+iv9Df6O/2D/kn/on/Tf+i/9D86gUnEJGaSMEmZZExyJgWTkknFpGbSMGmZdEx6JgOTkcnEZGayMFmZbEx2JgeTk8nF5GbyMHmZfEx+pgBTkCnEFGaKMEWZYkxxpgRTkinFlGbKMGWZckx5pgJTkanEVGaqMFWZakx1pgaDMThDMCRDMTTDMCzDMTwjMCIjMTKjMCqjMTpjMCZjMTbjMC7jMT4TMCETMYCBDGJipiZTi6nN1GHqMvWY+kwDpiHTiGnMNGGaMs2Y5kwLpiXTimnNtGHaMu2Y9kwHpiPTienMdGG6Mt2Y7kwPpifzH9OL6c30Yfoy/Zj+zABmIDOIGcwMYYYyw5jhzAhmJDOKGc2MYcYy45jxzARmIjOJmcxMYaYy05jpzAxmJjOLmc3MYeYy85j5zAJmIbOIWcwsYZYyy5jlzApmJbOKWc2sYdYy65j1zAZmI7OJ2cxsYbYy25jtzA5mJ7OL2c3sYfYy+5j9zAHmIHOIOcwcYY4yx5jjzAnmJHOKOc2cYc4y55jzzAXmInOJucxcYa4y15jrzA3mJnOLuc3cYe4y95j7zAPmIfOIecw8YZ4yz5jnzAvmJfOKec28Yd4y75j3zAfmI/OJ+cx8Yb4y35jvzA/mJ/OL+c38Yf4y/5gENhGbmE3CJmWTscnZFGxKNhWbmk3DpmXTsenZDGxGNhObmc3CZmWzsdnZHGxONhebm83D5mXzsfnZAmxBthBbmC3CFmWLscXZEmxJthRbmi3DlmXLseXZCmxFthJbma3CVmWrsdXZGizG4izBkizF0izDsizH8qzAiqzEyqzCqqzG6qzBmqzF2qzDuqzH+mzAhmzEAhayiI3ZmmwttjZbh63L1mPrsw3YhmwjtjHbhG3KNmObsy3YlmwrtjXbhm3LtmPbsx3YjmwntjPbhe3KdmO7sz3YnmzyhF5sb7YP25ftx/ZnB7AD2UHsYHYIO5Qdxg5nR7Aj2VHsaHYMO5Ydx45nJ7AT2UnsZHYKO5Wdxk5nZ7Az2VnsbHYOO5edx85nF7AL2UXsYnYJu5Rdxi5nV7Ar2VXsanYNu5Zdx65nN7Ab2U3sZnYLu5Xdxm5nd7A72V3sbnYPu5fdx+5nD7AH2UPsYfYIe5Q9xh5nT7An2VPsafYMe5Y9x55nL7AX2UvsZfYKe5W9xl5nb7A32VvsbfYOe5e9x95nH7AP2UfsY/YJ+5R9xj5nX7Av2Vfsa/YN+5Z9x75nP7Af2U/sZ/YL+5X9xn5nf7A/2V/sb/YP+5f9xyZwibjEXBIuKZeMS86l4FJyqbjUXBouLZeOS89l4DJymbjMXBYuK5eNy87l4HJyubjcXB4uL5ePy88V4ApyhbjCXBGuKFeMK86V4EpypbjSXBmuLFeOK89V4CpylbjKXBWuKleNq87V4DAO5wiO5CiO5hiO5TiO5wRO5CRO5hRO5TRO5wzO5CzO5hzO5TzO5wIu5CIOcJBDXMzV5Gpxtbk6XF2uHlefa8A15BpxjbkmXFOuGdeca8G15Fpxrbk2XFuuHdee68B15DpxnbkuXFeuG9ed68H15P7jenG9uT5cX64f158bwA3kBnGDuSHcUG4YN5wbwY3kRnGjuTHcWG4cN56bwE3kJnGTuSncVG4aN52bwc3kZnGzuTncXG4eN59bwC3kFnGLuSXcUm4Zt5xbwa3kVnGruTXcWm4dt57bwG3kNnGbuS3cVm4bt53bwe3kdnG7uT3cXm4ft587wB3kDnGHuSPcUe4Yd5w7wZ3kTnGnuTPcWe4cd567wF3kLnGXuSvcVe4ad527wd3kbnG3uTvcXe4ed597wD3kHnGPuSfcU+4Z95x7wb3kXnGvuTfcW+4d9577wH3kPnGfuS/cV+4b9537wf3kfnG/uT/cX+4fl8An4hPzSfikfDI+OZ+CT8mn4lPzafi0fDo+PZ+Bz8hn4jPzWfisfDY+O5+Dz8nn4nPzefi8fD4+P1+AL8gX4gvzRfiifDG+OF+CL8mX4kvzZfiyfDm+PF+Br8hX4ivzVfiqfDW+Ol+Dx3icJ3iSp3iaZ3iW53ieF3iRl3iZV3iV13idN3iTt3ibd3iX93ifD/iQj3jAQx7xMV+Tr8XX5uvwdfl6fH2+Ad+Qb8Q35pvwTflmfHO+Bd+Sb8W35tvwbfl2fHu+A9+R78R35rvwXflufHe+B9+T/4/vxffm+/B9+X58f34AP5AfxA/mh/BD+WH8cH4EP5IfxY/mx/Bj+XH8eH4CP5GfxE/mp/BT+Wn8dH4GP5Ofxc/m5/Bz+Xn8fH4Bv5BfxC/ml/BL+WX8cn4Fv5Jfxa/m1/Br+XX8en4Dv5HfxG/mt/Bb+W38dn4Hv5Pfxe/m9/B7+X38fv4Af5A/xB/mj/BH+WP8cf4Ef5I/xZ/mz/Bn+XP8ef4Cf5G/xF/mr/BX+Wv8df4Gf5O/xd/m7/B3+Xv8ff4B/5B/xD/mn/BP+Wf8c/4F/5J/xb/m3/Bv+Xf8e/4D/5H/xH/mv/Bf+W/8d/4H/5P/xf/m//B/+X98gpBISCwkEZIKyYTkQgohpZBKSC2kEdIK6YT0QgYho5BJyCxkEbIK2YTsQg4hp5BLyC3kEfIK+YT8QgGhoFBIKCwUEYoKxYTiQgmhpFBKKC2UEcoK5YTyQgWholBJqCxUEaoK1YTqQg0BE3CBEEiBEmiBEViBE3hBEERBEmRBEVRBE3TBEEzBEmzBEVzBE3whEEIhEoAABSTEQk2hllBbqCPUFeoJ9YUGQkOhkdBYaCI0FZoJzYUWQkuhldBaaCO0FdoJ7YUOQkehk9BZ6CJ0FboJ3YUeQk/hP6GX0FvoI/QV+gn9hQHCQGGQMFgYIgwVhgnDhRHCSGGUMFoYI4wVxgnjhQnCRGGSMFmYIkwVpgnThRnCTGGWMFuYI8wV5gnzhQXCQmGRsFhYIiwVlgnLhRXCSmGVsFpYI6wV1gnrhQ3CRmGTsFnYImwVtgnbhR3CTmGXsFvYI+wV9gn7hQPCQeGQcFg4IhwVjgnHhRPCSeGUcFo4I5wVzgnnhQvCReGScFm4IlwVrgnXhRvCTeGWcFu4I9wV7gn3hQfCQ+GR8Fh4IjwVngnPhRfCS+GV8Fp4I7wV3gnvhQ/CR+GT8Fn4InwVvgnfhR/CT+GX8Fv4I/wV/gkJYiIxsZhETComE5OLKcSUYioxtZhGTCumE9OLGcSMYiYxs5hFzCpmE7OLOcScYi4xt5hHzCvmE/OLBcSCYiGxsFhELCoWE4uLJcSSYimxtFhGLCuWE8uLFcSKYiWxslhFrCpWE6uLNURMxEVCJEVKpEVGZEVO5EVBFEVJlEVFVEVN1EVDNEVLtEVHdEVP9MVADMVIBCIUkRiLNcVaYm2xjlhXrCfWFxuIDcVGYmOxidhUbCY2F1uILcVWYmuxjdhWbCe2FzuIHcVOYmexi9hV7CZ2F3uIPcX/xF5ib7GP2FfsJ/YXB4gDxUHiYHGIOFQcJg4XR4gjxVHiaHGMOFYcJ44XJ4gTxUniZHGKOFWcJk4XZ4gzxVnibHGOOFecJ84XF4gLxUXiYnGJuFRcJi4XV4grxVXianGNuFZcJ64XN4gbxU3iZnGLuFXcJm4Xd4g7xV3ibnGPuFfcJ+4XD4gHxUPiYfGIeFQ8Jh4XT4gnxVPiafGMeFY8J54XL4gXxUviZfGKeFW8Jl4Xb4g3xVvibfGOeFe8J94XH4gPxUfiY/GJ+FR8Jj4XX4gvxVfia/GN+FZ8J74XP4gfxU/iZ/GL+FX8Jn4Xf4g/xV/ib/GP+Ff8JyZIiaTEUhIpqZRMSi6lkFJKqaTUUhoprZROSi9lkDJKmaTMUhYpq5RNyi7lkHJKuaTcUh4pr5RPyi8VkApKhaTCUhGpqFRMKi6VkEpKpaTSUhmprFROKi9VkCpKlaTKUhWpqlRNqi7VkDAJlwiJlCiJlhiJlTiJlwRJlCRJlhRJlTRJlwzJlCzJlhzJlTzJlwIplCIJSFBCUizVlGpJtaU6Ul2pnlRfaiA1lBpJjaUmUlOpmdRcaiG1lFpJraU2UlupndRe6iB1lDpJnaUuUlepm9Rd6iH1lP6Tekm9pT5SX6mf1F8aIA2UBkmDpSHSUGmYNFwaIY2URkmjpTHSWGmcNF6aIE2UJkmTpSnSVGmaNF2aIc2UZkmzpTnSXGmeNF9aIC2UFkmLpSXSUmmZtFxaIa2UVkmrpTXSWmmdtF7aIG2UNkmbpS3SVmmbtF3aIe2Udkm7pT3SXmmftF86IB2UDkmHpSPSUemYdFw6IZ2UTkmnpTPSWemcdF66IF2ULkmXpSvSVemadF26Id2Ubkm3pTvSXemedF96ID2UHkmPpSfSU+mZ9Fx6Ib2UXkmvpTfSW+md9F76IH2UPkmfpS/SV+mb9F36If2Ufkm/pT/SX+mflCAnkhPLSeSkcjI5uZxCTimnklPLaeS0cjo5vZxBzihnkjPLWeSscjY5u5xDzinnknPLeeS8cj45v1xALigXkgvLReSicjG5uFxCLimXkkvLZeSycjm5vFxBrihXkivLVeSqcjW5ulxDxmRcJmRSpmRaZmRW5mReFmRRlmRZVmRV1mRdNmRTtmRbdmRX9mRfDuRQjmQgQxnJsVxTriXXluvIdeV6cn25gdxQbiQ3lpvITeVmcnO5hdxSbiW3ltvIbeV2cnu5g9xR7iR3lrvIXeVucne5h9xT/k/uJfeW+8h95X5yf3mAPFAeJA+Wh8hD5WHycHmEPFIeJY+Wx8hj5XHyeHmCPFGeJE+Wp8hT5WnydHmGPFOeJc+W58hz5XnyfHmBvFBeJC+Wl8hL5WXycnmFvFJeJa+W18hr5XXyenmDvFHeJG+Wt8hb5W3ydnmHvFPeJe+W98h75X3yfvmAfFA+JB+Wj8hH5WPycfmEfFI+JZ+Wz8hn5XPyefmCfFG+JF+Wr8hX5WvydfmGfFO+Jd+W78h35XvyffmB/FB+JD+Wn8hP5Wfyc/mF/FJ+Jb+W38hv5Xfye/mD/FH+JH+Wv8hf5W/yd/mH/FP+Jf+W/8h/5X9ygpJISawkUZIqyZTkSgolpZJKSa2kUdIq6ZT0SgYlo5JJyaxkUbIq2ZTsSg4lp5JLya3kUfIq+ZT8SgGloFJIKawUUYoqxZTiSgmlpFJKKa2UUcoq5ZTySgWlolJJqaxUUaoq1ZTqSg0FU3CFUEiFUmiFUViFU3hFUERFUmRFUVRFU3TFUEzFUmzFUVzFU3wlUEIlUoACFaTESk2lllJbqaPUVeop9ZUGSkOlkdJYaaI0VZopzZUWSkulldJaaaO0Vdop7ZUOSkelk9JZ6aJ0Vbop3ZUeSk/lP6WX0lvpo/RV+in9lQHKQGWQMlgZogxVhinDlRHKSGWUMloZo4xVxinjlQnKRGWSMlmZokxVpinTlRnKTGWWMluZo8xV5inzlQXKQmWRslhZoixVlinLlRXKSmWVslpZo6xV1inrlQ3KRmWTslnZomxVtinblR3KTmWXslvZo+xV9in7lQPKQeWQclg5ohxVjinHlRPKSeWUclo5o5xVzinnlQvKReWSclm5olxVrinXlRvKTeWWclu5o9xV7in3lQfKQ+WR8lh5ojxVninPlRfKS+WV8lp5o7xV3invlQ/KR+WT8ln5onxVvinflR/KT+WX8lv5o/xV/ikJaiI1sZpETaomU5OrKdSUaio1tZpGTaumU9OrGdSMaiY1s5pFzapmU7OrOdScai41t5pHzavmU/OrBdSCaiG1sFpELaoWU4urJdSSaim1tFpGLauWU8urFdSKaiW1slpFrapWU6urNVRMxVVCJVVKpVVGZVVO5VVBFVVJlVVFVVVN1VVDNVVLtVVHdVVP9dVADdVIBSpUkRqrNdVaam21jlpXrafWVxuoDdVGamO1idpUbaY2V1uoLdVWamu1jdpWbae2VzuoHdVOame1i9pV7aZ2V3uoPdX/1F5qb7WP2lftp/ZXB6gD1UHqYHWIOlQdpg5XR6gj1VHqaHWMOlYdp45XJ6gT1UnqZHWKOlWdpk5XZ6gz1VnqbHWOOledp85XF6gL1UXqYnWJulRdpi5XV6gr1VXqanWNulZdp65XN6gb1U3qZnWLulXdpm5Xd6g71V3qbnWPulfdp+5XD6gH1UPqYfWIelQ9ph5XT6gn1VPqafWMelY9p55XL6gX1UvqZfWKelW9pl5Xb6g31VvqbfWOele9p95XH6gP1UfqY/WJ+lR9pj5XX6gv1Vfqa/WN+lZ9p75XP6gf1U/qZ/WL+lX9pn5Xf6g/1V/qb/WP+lf9pyZoibTEWhItqZZMS66l0FJqqbTUWhotrZZOS69l0DJqmbTMWhYtq5ZNy67l0HJqubTcWh4tr5ZPy68V0ApqhbTCWhGtqFZMK66V0EpqpbTSWhmtrFZOK69V0CpqlbTKWhWtqlZNq67V0DAN1wiN1CiN1hiN1TiN1wRN1CRN1hRN1TRN1wzN1CzN1hzN1TzN1wIt1CINaFBDWqzV1GpptbU6Wl2tnlZfa6A11BppjbUmWlOtmdZca6G11FpprbU2WlutndZe66B11DppnbUuWletm9Zd66H11P7Temm9tT5aX62f1l8boA3UBmmDtSHaUG2YNlwboY3URmmjtTHaWG2cNl6boE3UJmmTtSnaVG2aNl2boc3UZmmztTnaXG2eNl9boC3UFmmLtSXaUm2Ztlxboa3UVmmrtTXaWm2dtl7boG3UNmmbtS3aVm2btl3boe3Udmm7tT3aXm2ftl87oB3UDmmHtSPaUe2Ydlw7oZ3UTmmntTPaWe2cdl67oF3ULmmXtSvaVe2adl27od3Ubmm3tTvaXe2edl97oD3UHmmPtSfaU+2Z9lx7ob3UXmmvtTfaW+2d9l77oH3UPmmftS/aV+2b9l37of3Ufmm/tT/aX+2flqAn0hPrSfSkejI9uZ5CT6mn0lPrafS0ejo9vZ5Bz6hn0jPrWfSsejY9u55Dz6nn0nPrefS8ej49v15AL6gX0gvrRfSiejG9uF5CL6mX0kvrZfSyejm9vF5Br6hX0ivrVfSqejW9ul5Dx3RcJ3RSp3RaZ3RW53ReF3RRl3RZV3RV13RdN3RTt3Rbd3RX93RfD/RQj3SgQx3psV5Tr6XX1uvodfV6en29gd5Qb6Q31pvoTfVmenO9hd5Sb6W31tvobfV2enu9g95R76R31rvoXfVuene9h95T/0/vpffW++h99X56f32APlAfpA/Wh+hD9WH6cH2EPlIfpY/Wx+hj9XH6eH2CPlGfpE/Wp+hT9Wn6dH2GPlOfpc/W5+hz9Xn6fH2BvlBfpC/Wl+hL9WX6cn2FvlJfpa/W1+hr9XX6en2DvlHfpG/Wt+hb9W36dn2HvlPfpe/W9+h79X36fv2AflA/pB/Wj+hH9WP6cf2EflI/pZ/Wz+hn9XP6ef2CflG/pF/Wr+hX9Wv6df2GflO/pd/W7+h39Xv6ff2B/lB/pD/Wn+hP9Wf6c/2F/lJ/pb/W3+hv9Xf6e/2D/lH/pH/Wv+hf9W/6d/2H/lP/pf/W/+h/9X96gpHISGwkMZIayYzkRgojpZHKSG2kMdIa6Yz0RgYjo5HJyGxkMbIa2YzsRg4jp5HLyG3kMfIa+Yz8RgGjoFHIKGwUMYoaxYziRgmjpFHKKG2UMcoa5YzyRgWjolHJqGxUMaoa1YzqRg0DM3CDMEiDMmiDMViDM3hDMERDMmRDMVRDM3TDMEzDMmzDMVzDM3wjMEIjMoABDWTERk2jllHbqGPUNeoZ9Y0GRkOjkdHYaGI0NZoZzY0WRkujldHaaGO0NdoZ7Y0ORkejk9HZ6GJ0NboZ3Y0eRk/jP6OX0dvoY/Q1+hn9jQHGQGOQMdgYYgw1hhnDjRHGSGOUMdoYY4w1xhnjjQnGRGOSMdmYYkw1phnTjRnGTGOWMduYY8w15hnzjQXGQmORsdhYYiw1lhnLjRXGSmOVsdpYY6w11hnrjQ3GRmOTsdnYYmw1thnbjR3GTmOXsdvYY+w19hn7jQPGQeOQcdg4Yhw1jhnHjRPGSeOUcdo4Y5w1zhnnjQvGReOScdm4Ylw1rhnXjRvGTeOWcdu4Y9w17hn3jQfGQ+OR8dh4Yjw1nhnPjRfGS+OV8dp4Y7w13hnvjQ/GR+OT8dn4Ynw1vhnfjR/GT+OX8dv4Y/w1/hkJZiIzsZnETGomM5ObKcyUZioztZnGTGumM9ObGcyMZiYzs5nFzGpmM7ObOcycZi4zt5nHzGvmM/ObBcyCZiGzsFnELGoWM4ubJcySZimztFnGLGuWM8ubFcyKZiWzslnFrGpWM6ubNUzMxE3CJE3KpE3GZE3O5E3BFE3JlE3FVE3N1E3DNE3LtE3HdE3P9M3ADM3IBCY0kRmbNc1aZm2zjlnXrGfWNxuYDc1GZmOzidnUbGY2N1uYLc1WZmuzjdnWbGe2NzuYHc1OZmezi9nV7GZ2N3uYPc3/zF5mb7OP2dfsZ/Y3B5gDzUHmYHOIOdQcZg43R5gjzVHmaHOMOdYcZ443J5gTzUnmZHOKOdWcZk43Z5gzzVnmbHOOOdecZ843F5gLzUXmYnOJudRcZi43V5grzVXmanONudZcZ643N5gbzU3mZnOLudXcZm43d5g7zV3mbnOPudfcZ+43D5gHzUPmYfOIedQ8Zh43T5gnzVPmafOMedY8Z543L5gXzUvmZfOKedW8Zl43b5g3zVvmbfOOede8Z943H5gPzUfmY/OJ+dR8Zj43X5gvzVfma/ON+dZ8Z743P5gfzU/mZ/OL+dX8Zn43f5g/zV/mb/OP+df8ZyZYiazEVhIrqZXMSm6lsFJaqazUVhorrZXOSm9lsDJamazMVhYrq5XNym7lsHJauazcVh4rr5XPym8VsApahazCVhGrqFXMKm6VsEpapazSVhmrrFXOKm9VsCpalazKVhWrqlXNqm7VsDALtwiLtCiLthiLtTiLtwRLtCRLthRLtTRLtwzLtCzLthzLtTzLtwIrtCILWNBCVmzVtGpZta06Vl2rnlXfamA1tBpZja0mVlOrmdXcamG1tFpZra02VlurndXe6mB1tDpZna0uVlerm9Xd6mH1tP6zelm9rT5WX6uf1d8aYA20BlmDrSHWUGuYNdwaYY20RlmjrTHWWGucNd6aYE20JlmTrSnWVGuaNd2aYc20ZlmzrTnWXGueNd9aYC20FlmLrSXWUmuZtdxaYa20VlmrrTXWWmudtd7aYG20NlmbrS3WVmubtd3aYe20dlm7rT3WXmuftd86YB20DlmHrSPWUeuYddw6YZ20TlmnrTPWWeucdd66YF20LlmXrSvWVeuadd26Yd20blm3rTvWXeuedd96YD20HlmPrSfWU+uZ9dx6Yb20XlmvrTfWW+ud9d76YH20PlmfrS/WV+ub9d36Yf20flm/rT/WX+uflWAnshPbSeykdjI7uZ3CTmmnslPbaey0djo7vZ3BzmhnsjPbWeysdjY7u53DzmnnsnPbeey8dj47v13ALmgXsgvbReyidjG7uF3CLmmXskvbZeyydjm7vF3BrmhXsivbVeyqdjW7ul3DxmzcJmzSpmzaZmzW5mzeFmzRlmzZVmzV1mzdNmzTtmzbdmzX9mzfDuzQjmxgQxvZsV3TrmXXtuvYde16dn27gd3QbmQ3tpvYTe1mdnO7hd3SbmW3ttvYbe12dnu7g93R7mR3trvYXe1udne7h93T/s/uZfe2+9h97X52f3uAPdAeZA+2h9hD7WH2cHuEPdIeZY+2x9hj7XH2eHuCPdGeZE+2p9hT7Wn2dHuGPdOeZc+259hz7Xn2fHuBvdBeZC+2l9hL7WX2cnuFvdJeZa+219hr7XX2enuDvdHeZG+2t9hb7W32dnuHvdPeZe+299h77X32fvuAfdA+ZB+2j9hH7WP2cfuEfdI+ZZ+2z9hn7XP2efuCfdG+ZF+2r9hX7Wv2dfuGfdO+Zd+279h37Xv2ffuB/dB+ZD+2n9hP7Wf2c/uF/dJ+Zb+239hv7Xf2e/uD/dH+ZH+2v9hf7W/2d/uH/dP+Zf+2/9h/7X92gpPISewkcZI6yZzkTgonpZPKSe2kcdI66Zz0TgYno5PJyexkcbI62ZzsTg4np5PLye3kcfI6+Zz8TgGnoFPIKewUcYo6xZziTgmnpFPKKe2Ucco65ZzyTgWnolPJqexUcao61ZzqTg0Hc3CHcEiHcmiHcViHc3hHcERHcmRHcVRHc3THcEzHcmzHcVzHc3wncEIncoADHeTETk2nllPbqePUdeo59Z0GTkOnkdPYaeI0dZo5zZ0WTkunldPaaeO0ddo57Z0OTkenk9PZ6eJ0dbo53Z0eTk/nP6eX09vp4/R1+jn9nQHOQGeQM9gZ4gx1hjnDnRHOSGeUM9oZ44x1xjnjnQnORGeSM9mZ4kx1pjnTnRnOTGeWM9uZ48x15jnznQXOQmeRs9hZ4ix1ljnLnRXOSmeVs9pZ46x11jnrnQ3ORmeTs9nZ4mx1tjnbnR3OTmeXs9vZ4+x19jn7nQPOQeeQc9g54hx1jjnHnRPOSeeUc9o545x1zjnnnQvOReeSc9m54lx1rjnXnRvOTeeWc9u549x17jn3nQfOQ+eR89h54jx1njnPnRfOS+eV89p547x13jnvnQ/OR+eT89n54nx1vjnfnR/OT+eX89v54/x1/jkJbiI3sZvETeomc5O7KdyUbio3tZvGTeumc9O7GdyMbiY3s5vFzepmc7O7Odycbi43t5vHzevmc/O7BdyCbiG3sFvELeoWc4u7JdySbim3tFvGLeuWc8u7FdyKbiW3slvFrepWc6u7NVzMxV3CJV3KpV3GZV3O5V3BFV3JlV3FVV3N1V3DNV3LtV3HdV3P9d3ADd3IBS50kRu7Nd1abm23jlvXrefWdxu4Dd1GbmO3idvUbeY2d1u4Ld1Wbmu3jdvWbee2dzu4Hd1Obme3i9vV7eZ2d3u4Pd3/3F5ub7eP29ft5/Z3B7gD3UHuYHeIO9Qd5g53R7gj3VHuaHeMO9Yd5453J7gT3UnuZHeKO9Wd5k53Z7gz3VnubHeOO9ed5853F7gL3UXuYneJu9Rd5i53V7gr3VXuaneNu9Zd5653N7gb3U3uZneLu9Xd5m53d7g73V3ubnePu9fd5+53D7gH3UPuYfeIe9Q95h53T7gn3VPuafeMe9Y95553L7gX3UvuZfeKe9W95l53b7g33VvubfeOe9e95953H7gP3UfuY/eJ+9R95j53X7gv3Vfua/eN+9Z95753P7gf3U/uZ/eL+9X95n53f7g/3V/ub/eP+9f95yZ4ibzEXhIvqZfMS+6l8FJ6qbzUXhovrZfOS+9l8DJ6mbzMXhYvq5fNy+7l8HJ6ubzcXh4vr5fPy+8V8Ap6hbzCXhGvqFfMK+6V8Ep6pbzSXhmvrFfOK+9V8Cp6lbzKXhWvqlfNq+7V8DAP9wgvUUJCwv+xHufxnuCJnuTJnuKpnubpnuGZnuXZnuO5nuf5XuCFXuQBD3rIi72aXi2vtlfHq+vV8+p7DbyGXiOvsdfEa+o185p7LbyWXiuvtdfGa+u189p7HbyOXievs9fF6+p187p7Pbye3n9eL6+318fr6/Xz+nsDvIHeIG+wN8Qb6g3zhnsjvJHeKG+0N8Yb643zxnsTvIneJG+yN8Wb6k3zpnszvJneLG+2N8eb683z5nsLvIXeIm+xt8Rb6i3zlnsrvJXeKm+1t8Zb663z1nsbvI3eJm+zt8Xb6m3ztns7vJ3eLm+3t8fb6+3z9nsHvIPeIe+wd8Q76h3zjnsnvJPeKe+0d8Y7653zznsXvIveJe+yd8W76l3zrns3vJveLe+2d8e7693z7nsPvIfeI++x98R76j3znnsvvJfeK++198Z7673z3nsfvI/eJ++z98X76n3zvns/vJ/eL++398f76/3zEvxEfmI/iZ/UT+Yn91P4Kf1Ufmo/jZ/WT+en9zP4Gf1MfmY/i5/Vz+Zn93P4Of1cfm4/j5/Xz+fn9wv4Bf1CfmG/iF/UL+YX90v4Jf1Sfmm/jF/WL+eX9yv4Ff1KfmW/il/Vr+ZX92v4mI/7hE/6lE/7jM/6nM/7gi/6ki/7iq/6mq/7hm/6lm/7ju/6nu/7gR/6kQ986CM/9mv6tfzafh2/rl/Pr+838Bv6jfzGfhO/qd/Mb+638Fv6rfzWfhu/rd/Ob+938Dv6nfzOfhe/q9/N7+738Hv6//m9/N5+H7+v38/v7w/wB/qD/MH+EH+oP8wf7o/wR/qj/NH+GH+sP84f70/wJ/qT/Mn+FH+qP82f7s/wZ/qz/Nn+HH+uP8+f7y/wF/qL/MX+En+pv8xf7q/wV/qr/NX+Gn+tv85f72/wN/qb/M3+Fn+rv83f7u/wd/q7/N3+Hn+vv8/f7x/wD/qH/MP+Ef+of8w/7p/wT/qn/NP+Gf+sf84/71/wL/qX/Mv+Ff+qf82/7t/wb/q3/Nv+Hf+uf8+/7z/wH/qP/Mf+E/+p/8x/7r/wX/qv/Nf+G/+t/85/73/wP/qf/M/+F/+r/83/7v/wf/q//N/+H/+v/89PCBIFiYMkQdIgWZA8SBGkDFIFqYM0QdogXZA+yBBkDDIFmYMsQdYgW5A9yBHkDHIFuYM8Qd4gX5A/KBAUDAoFhYMiQdGgWFA8KBGUDEoFpYMyQdmgXFA+qBBUDCoFlYMqQdWgWlA9qBFgAR4QARlQAR0wARtwAR8IgRhIgRwogRpogR4YgRlYgR04gRt4gR8EQRhEAQhggII4qBnUCmoHdYK6Qb2gftAgaBg0ChoHTYKmQbOgedAiaBm0CloHbYK2QbugfdAh6Bh0CjoHXYKuQbege9Aj6Bn8F/QKegd9gr5Bv6B/MCAYGAwKBgdDgqHBsGB4MCIYGYwKRgdjgrHBuGB8MCGYGEwKJgdTgqnBtGB6MCOYGcwKZgdzgrnBvGB+sCBYGCwKFgdLgqXBsmB5sCJYGawKVgdrgrXBumB9sCHYGGwKNgdbgq3BtmB7sCPYGewKdgd7gr3BvmB/cCA4GBwKDgdHgqPBseB4cCI4GZwKTgdngrPBueB8cCG4GFwKLgdXgqvBteB6cCO4GdwKbgd3grvBveB+8CB4GDwKHgdPgqfBs+B58CJ4GbwKXgdvgrfBu+B98CH4GHwKPgdfgq/Bt+B78CP4GfwKfgd/gr/BvyAhTBQmDpOEScNkYfIwRZgyTBWmDtOEacN0YfowQ5gxzBRmDrOEWcNsYfYwR5gzzBXmDvOEecN8Yf6wQFgwLBQWDouERcNiYfGwRFgyLBWWDsuEZcNyYfmwQlgxrBRWDquEVcNqYfWwRoiFeEiEZEiFdMiEbMiFfCiEYiiFcqiEaqiFemiEZmiFduiEbuiFfhiEYRiFIIQhCuOwZlgrrB3WCeuG9cL6YYOwYdgobBw2CZuGzcLmYYuwZdgqbB22CduG7cL2YYewY9gp7Bx2CbuG3cLuYY+wZ/hf2CvsHfYJ+4b9wv7hgHBgOCgcHA4Jh4bDwuHhiHBkOCocHY4Jx4bjwvHhhHBiOCmcHE4Jp4bTwunhjHBmOCucHc4J54bzwvnhgnBhuChcHC4Jl4bLwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4bbwu3hjnBnuCvcHe4J94b7wv3hgfBgeCg8HB4Jj4bHwuPhifBkeCo8HZ4Jz4bnwvPhhfBieCm8HF4Jr4bXwuvhjfBmeCu8Hd4J74b3wvvhg/Bh+Ch8HD4Jn4bPwufhi/Bl+Cp8Hb4J34bvwvfhh/Bj+Cn8HH4Jv4bfwu/hj/Bn+Cv8Hf4J/4b/woQoUZQ4ShIljZJFyaMUUcooVZQ6ShOljdJF6aMMUcYoU5Q5yhJljbJF2aMcUc4oV5Q7yhPljfJF+aMCUcGoUFQ4KhIVjYpFxaMSUcmoVFQ6KhOVjcpF5aMKUcWoUlQ5qhJVjapF1aMaERbhERGRERXREROxERfxkRCJkRTJkRKpkRbpkRGZkRXZkRO5kRf5URCFURSBCEYoiqOaUa2odlQnqhvVi+pHDaKGUaOocdQkaho1i5pHLaKWUauoddQmahu1i9pHHaKOUaeoc9Ql6hp1i7pHPaKe0X9Rr6h31CfqG/WL+kcDooHRoGhwNCQaGg2LhkcjopHRqGh0NCYaG42LxkcToonRpGhyNCWaGk2LpkczopnRrGh2NCeaG82L5kcLooXRomhxtCRaGi2LlkcropXRqmh1tCZaG62L1kcboo3RpmhztCXaGm2Ltkc7op3Rrmh3tCfaG+2L9kcHooPRoehwdCQ6Gh2LjkcnopPRqeh0dCY6G52LzkcXoovRpehydCW6Gl2Lrkc3opvRreh2dCe6G92L7kcPoofRo+hx9CR6Gj2LnkcvopfRq+h19CZ6G72L3kcfoo/Rp+hz9CX6Gn2Lvkc/op/Rr+h39Cf6G/2LEkAikBgkAUlBMpAcpAApQSqQGqQBaUE6kB5kABlBJpAZZAFZQTaQHeQAOUEukBvkAXlBPpAfFAAFQSFQGBQBRUExUByUACVBKVAalAFlQTlQHlQAFUElUBlUAVVBNVAd1AAYwAEBSEABGjCABRzggQBEIAEZKEAFGtCBAUxgARs4wAUe8EEAQhABACBAIAY1QS1QG9QBdUE9UB80AA1BI9AYNAFNQTPQHLQALUEr0Bq0AW1BO9AedAAdQSfQGXQBXUE30B30AD3Bf6AX6A36gL6gH+gPBoCBYBAYDIaAoWAYGA5GgJFgFBgNxoCxYBwYDyaAiWASmAymgKlgGpgOZoCZYBaYDeaAuWAemA8WgIVgEVgMloClYBlYDlaAlWAVWA3WgLVgHVgPNoCNYBPYDLaArWAb2A52gJ1gF9gN9oC9YB/YDw6Ag+AQOAyOgKPgGDgOToCT4BQ4Dc6As+AcOA8ugIvgErgMroCr4Bq4Dm6Am+AWuA3ugLvgHrgPHoCH4BF4DJ6Ap+AZeA5egJfgFXgN3oC34B14Dz6Aj+AT+Ay+gK/gG/gOfoCf4Bf4Df6Av+AfSICJYGKYBCaFyWBymAKmhKlgapgGpoXpYHqYAWaEmWBmmAVmhdlgdpgD5oS5YG6YB+aF+WB+WAAWhIVgYVgEFoXFYHFYApaEpWBpWAaWheVgeVgBVoSVYGVYBVaF1WB1WANiEIcEJCEFachAFnKQhwIUoQRlqEAValCHBjShBW3oQBd60IcBDGEEAYQQwRjWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA/aE/8FesDfsA/vCfrA/HAAHwkFwMBwCh8JhcDgcAUfCUXA0HAPHwnFwPJwAJ8JJcDKcAqfCaXA6nAFnwllwNpwD58J5cD5cABfCRXAxXAKXwmVwOVwBV8JVcDVcA9fCdXA93AA3wk1wM9wCt8JtcDvcAXfCXXA33AP3wn1wPzwAD8JD8DA8Ao/CY/A4PAFPwlPwNDwDz8Jz8Dy8AC/CS/AyvAKvwmvwOrwBb8Jb8Da8A+/Ce/A+fAAfwkfwMXwCn8Jn8Dl8AV/CV/A1fAPfwnfwPfwAP8JP8DP8Ar/Cb/A7/AF/wl/wN/wD/8J/MAElQolREpQUJUPJUQqUEqVCqVEalBalQ+lRBpQRZUKZURaUFWVD2VEOlBPlQrlRHpQX5UP5UQFUEBVChVERVBQVQ8VRCVQSlUKlURlUFpVD5VEFVBFVQpVRFVQVVUPVUQ2EIRwRiEQUohGDWMQhHglIRBKSkYJUpCEdGchEFrKRg1zkIR8FKEQRAggihGJUE9VCtVEdVBfVQ/VRA9QQNUKNURPUFDVDzVEL1BK1Qq1RG9QWtUPtUQfUEXVCnVEX1BV1Q91RD9QT/Yd6od6oD+qL+qH+aAAaiAahwWgIGoqGoeFoBBqJRqHRaAwai8ah8WgCmogmocloCpqKpqHpaAaaiWah2WgOmovmofloAVqIFqHFaAlaipah5WgFWolWodVoDVqL1qH1aAPaiDahzWgL2oq2oe1oB9qJdqHdaA/ai/ah/egAOogOocPoCDqKjqHj6AQ6iU6h0+gMOovOofPoArqILqHL6Aq6iq6h6+gGuoluodvoDrqL7qH76AF6iB6hx+gJeoqeoefoBXqJXqHX6A16i96h9+gD+og+oc/oC/qKvqHv6Af6iX6h3+gP+ov+oYQ4UZw4ThInjZPFyeMUcco4VZw6ThOnjdPF6eMMccY4U5w5zhJnjbPF2eMccc44V5w7zhPnjfPF+eMCccG4UFw4LhIXjYvFxeMSccm4VFw6LhOXjcvF5eMKccW4Ulw5rhJXjavF1eMaMRbjMRGTMRXTMROzMRfzsRCLsRTLsRKrsRbrsRGbsRXbsRO7sRf7cRCHcRSDGMYojuOaca24dlwnrhvXi+vHDeKGcaO4cdwkbho3i5vHLeKWcau4ddwmbhu3i9vHHeKOcae4c9wl7hp3i7vHPeKe8X9xr7h33CfuG/eL+8cD4oHxoHhwPCQeGg+Lh8cj4pHx/0iAp0CxlQQAoLe2bdu2bbexbUxmUtu2bdu2jVfbtrEfe0ZjY7Cx2DhsPDYBm4hNwiZjU7Cp2DRsOjYDm4nNwmZjc7C52DxsPrYAW4gtwhZjS7Cl2DJsObYCW4mtwlZja7C12DpsPbYB24htwjZjW7Ct2DZsO7YD24ntwnZje7C92D5sP3YAO4gdwg5jR7Cj2DHsOHYCO4mdwk5jZ7Cz2DnsPHYBu4hdwi5jV7Cr2DXsP+w6dgO7id3CbmN3sLvYPew+9gB7iD3CHmNPsKfYM+w59gJ7ib3CXmNvsLfYO+w99gH7iH3CPmNfsK/YN+w79gP7if3CfmN/sL/YPywBT4QnxpPgSfFkeHI8BZ4ST4WnxtPgafF0eHo8A54Rz4RnxrPgWfFseHY8B54Tz4XnxvPgefF8eH68AF4QL4QXxovgRfFieHG8BF4SL4WXxsvgZfFyeHm8Al4Rr4RXxqvgVfFqeHW8Bl4Tr4XXxuvgdfF6eH28Ad4Qb4Q3xpvgTfFmeHO8Bd4Sb4W3xtvgbfF2eHu8A94R74R3xrvgXfFueHe8B47hOE7gJE7hNM7gLM7hPC7gIi7hMq7gKq7hOm7gJm7hNu7gLu7hPh7gIQ7wCIc4wmO8J94L7433wfvi/fD++AB8ID4IH4wPwYfiw/Dh+Ah8JD4KH42Pwcfi4/Dx+AR8Ij4Jn4xPwafi0/Dp+Ax8Jj4Ln43Pwefi8/D5+AJ8Ib4IX4wvwZfiy/Dl+Ap8Jb4KX42vwdfi6/D1+AZ8I74J34xvwbfi2/Dt+A58J74L343vwffi+/D9+AH8IH4IP4wfwY/ix/Dj+An8JH4KP42fwc/i5/Dz+AX8In4Jv4xfwa/i1/D/8Ov4Dfwmfgu/jd/B7+L38Pv4A/wh/gh/jD/Bn+LP8Of4C/wl/gp/jb/B3+Lv8Pf4B/wj/gn/jH/Bv+Lf8O/4D/wn/gv/jf/B/+L/8AQiEZGYSEIkJZIRyYkUREoiFZGaSEOkJdIR6YkMREYiE5GZyEJkJbIR2YkcRE4iF5GbyEPkJfIR+YkCREGiEFGYKEIUJYoRxYkSREmiFFGaKEOUJcoR5YkKREWiElGZqEJUJaoR1YkaRE2iFlGbqEPUJeoR9YkGREOiEdGYaEI0JZoRzYkWREuiFdGaaEO0JdoR7YkOREeiE9GZ6EJ0JboR3YkeBEbgBEGQBEXQBEOwBEfwhECIhETIhEKohEbohEGYhEXYhEO4hEf4RECEBCAiAhKIiImeRC+iN9GH6Ev0I/oTA4iBxCBiMDGEGEoMI4YTI4iRxChiNDGGGEuMI8YTE4iJxCRiMjGFmEpMI6YTM4iZxCxiNjGHmEvMI+YTC4iFxCJiMbGEWEosI5YTK4iVxCpiNbGGWEusI9YTG4iNxCZiM7GF2EpsI7YTO4idxC5iN7GH2EvsI/YTB4iDxCHiMHGEOEocI44TJ4iTxCniNHGGOEucI84TF4iLxCXiMnGFuEpcI/4jrhM3iJvELeI2cYe4S9wj7hMPiIfEI+Ix8YR4SjwjnhMviJfEK+I18YZ4S7wj3hMfiI/EJ+Iz8YX4SnwjvhM/iJ/EL+I38Yf4S/wjEshEZGIyCZmUTEYmJ1OQKclUZGoyDZmWTEemJzOQGclMZGYyC5mVzEZmJ3OQOclcZG4yD5mXzEfmJwuQBclCZGGyCFmULEYWJ0uQJclSZGmyDFmWLEeWJyuQFclKZGWyClmVrEZWJ2uQNclaZG2yDlmXrEfWJxuQDclGZGOyCdmUbEY2J1uQLclWZGuyDdmWbEe2JzuQHclOZGeyC9mV7EZ2J3uQGImTBEmSFEmTDMmSHMmTAimSEimTCqmSGqmTBmmSFmmTDumSHumTARmSgIxISCIyJnuSvcjeZB+yL9mP7E8OIAeSg8jB5BByKDmMHE6OIEeSo8jR5BhyLDmOHE9OICeSk8jJ5BRyKjmNnE7OIGeSs8jZ5BxyLjmPnE8uIBeSi8jF5BJyKbmMXE6uIFeSq8jV5BpyLbmOXE9uIDeSm8jN5BZyK7mN3E7uIHeSu8jd5B5yL7mP3E8eIA+Sh8jD5BHyKHmMPE6eIE+Sp8jT5BnyLHmOPE9eIC+Sl8jL5BXyKnmN/I+8Tt4gb5K3yNvkHfIueY+8Tz4gH5KPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kF/Ir+Y38Tv4gf5K/yN/kH/Iv+Y9MoBJRiakkVFIqGZWcSkGlpFJRqak0VFoqHZWeykBlpDJRmaksVFYqG5WdykHlpHJRuak8VF4qH5WfKkAVpApRhakiVFGqGFWcKkGVpEpRpakyVFmqHFWeqkBVpCpRlakqVFWqGlWdqkHVpGpRtak6VF2qHlWfakA1pBpRjakmVFOqGdWcakG1pFpRrak2VFuqHdWe6kB1pDpRnakuVFeqG9Wd6kFhFE4RFElRFE0xFEtxFE8JlEhJlEwplEpplE4ZlElZlE05lEt5lE8FVEgBKqIghaiY6kn1onpTfai+VD+qPzWAGkgNogZTQ6ih1DBqODWCGkmNokZTY6ix1DhqPDWBmkhNoiZTU6ip1DRqOjWDmknNomZTc6i51DxqPrWAWkgtohZTS6il1DJqObWCWkmtolZTa6i11DpqPbWB2khtojZTW6it1DZqO7WD2kntonZTe6i91D5qP3WAOkgdog5TR6ij1DHqOHWCOkmdok5TZ6iz1DnqPHWBukhdoi5TV6ir1DXqP+o6dYO6Sd2iblN3qLvUPeo+9YB6SD2iHlNPqKfUM+o59YJ6Sb2iXlNvqLfUO+o99YH6SH2iPlNfqK/UN+o79YP6Sf2iflN/qL/UPyqBTkQnppPQSelkdHI6BZ2STkWnptPQael0dHo6A52RzkRnprPQWelsdHY6B52TzkXnpvPQeel8dH66AF2QLkQXpovQRelidHG6BF2SLkWXpsvQZelydHm6Al2RrkRXpqvQVelqdHW6Bl2TrkXXpuvQdel6dH26Ad2QbkQ3ppvQTelmdHO6Bd2SbkW3ptvQbel2dHu6A92R7kR3prvQXeludHe6B43ROE3QJE3RNM3QLM3RPC3QIi3RMq3QKq3ROm3QJm3RNu3QLu3RPh3QIQ3oiIY0omO6J92L7k33ofvS/ej+9AB6ID2IHkwPoYfSw+jh9Ah6JD2KHk2PocfS4+jx9AR6Ij2JnkxPoafS0+jp9Ax6Jj2Lnk3PoefS8+j59AJ6Ib2IXkwvoZfSy+jl9Ap6Jb2KXk2vodfS6+j19AZ6I72J3kxvobfS2+jt9A56J72L3k3voffS++j99AH6IH2IPkwfoY/Sx+jj9An6JH2KPk2foc/S5+jz9AX6In2Jvkxfoa/S1+j/6Ov0DfomfYu+Td+h79L36Pv0A/oh/Yh+TD+hn9LP6Of0C/ol/Yp+Tb+h39Lv6Pf0B/oj/Yn+TH+hv9Lf6O/0D/on/Yv+Tf+h/9L/6AQmEZOYScIkZZIxyZkUTEomFZOaScOkZdIx6ZkMTEYmE5OZycJkZbIx2ZkcTE4mF5ObycPkZfIx+ZkCTEGmEFOYKcIUZYoxxZkSTEmmFFOaKcOUZcox5ZkKTEWmElOZqcJUZaox1ZkaTE2mFlObqcPUZeox9ZkGTEOmEdOYacI0ZZoxzZkWTEumFdOaacO0Zdox7ZkOTEemE9OZ6cJ0Zbox3ZkeDMbgDMGQDMXQDMOwDMfwjMCIjMTIjMKojMbojMGYjMXYjMO4jMf4TMCEDGAiBjKIiZmeTC+mN9OH6cv0Y/ozA5iBzCBmMDOEGcoMY4YzI5iRzChmNDOGGcuMY8YzE5iJzCRmMjOFmcpMY6YzM5iZzCxmNjOHmcvMY+YzC5iFzCJmMbOEWcosY5YzK5iVzCpmNbOGWcusY9YzG5iNzCZmM7OF2cpsY7YzO5idzC5mN7OH2cvsY/YzB5iDzCHmMHOEOcocY44zJ5iTzCnmNHOGOcucY84zF5iLzCXmMnOFucpcY/5jrjM3mJvMLeY2c4e5y9xj7jMPmIfMI+Yx84R5yjxjnjMvmJfMK+Y184Z5y7xj3jMfmI/MJ+Yz84X5ynxjvjM/mJ/ML+Y384f5y/xjEthEbGI2CZuUTcYmZ1OwKdlnbGo2DZuWTcemZzOwGdlMbGY2C5uVzcZmZ3OwOdlcbG42D5uXzcfmZwuwBdlCbGG2CFuULcYWZ0uwJdlSbGm2DFuWLceWZyuwFdlKbGW2CluVrcZWZ2uwNdlabG22DluXrcfWZxuwDdlGbGO2CduUbcY2Z1uwLdlWbGu2DduWbce2ZzuwHdlObGe2C9uV7cZ2Z3uwGIuzBEuyFEuzDMuyHMuzAiuyEiuzCquyGquzBmuyFmuzDuuyHuuzARuygI1YyCI2ZnuyvdjebB+2L9uP7c8OYAeyg9jB7BB2KDuMHc6OYEeyo9jR7Bh2LDuOHc9OYCeyk9jJ7BR2KjuNnc7OYGeys9jZ7Bx2LjuPnc8uYBeyi9jF7BJ2KbuMXc6uYFeyq9jV7Bp2LbuOXc9uYDeym9jN7BZ2K7uN3c7uYHeyu9jd7B52L7uP3c8eYA+yh9jD7BH2KHuMPc6eYE+yp9jT7Bn2LHuOPc9eYC+yl9jL7BX2KnuN/Y+9zt5gb7K32NvsHfYue4+9zz5gH7KP2MfsE/Yp+4x9zr5gX7Kv2NfsG/Yt+459z35gP7Kf2M/sF/Yr+439zv5gf7K/2N/sH/Yv+49N4BJxibkkXFIuGZecS8Gl5FJxqbk0XFouHZeey8Bl5DJxmbksXFYuG5edy8Hl5HJxubk8XF4uH5efK8AV5ApxhbkiXFGuGFecK8GV5EpxpbkyXFmuHFeeq8BV5CpxlbkqXFWuGledq8HV5Gpxtbk6XF2uHlefa8A15BpxjbkmXFOuGdeca8G15Fpxrbk2XFuuHdee68B15DpxnbkuXFeuG9ed68FhHM4RHMlRHM0xHMtxHM8JnMhJnMwpnMppnM4ZnMlZnM05nMt5nM8FXMgBLuIgh7iY68n14npzfbi+XD+uPzeAG8gN4gZzQ7ih3DBuODeCG8mN4kZzY7ix3DhuPDeBm8hN4iZzU7ip3DRuOjeDm8nN4mZzc7i53DxuPreAW8gt4hZzS7il3DJuObeCW8mt4lZza7i13DpuPbeB28ht4jZzW7it3DZuO7eD28nt4nZze7i93D5uP3eAO8gd4g5zR7ij3DHuOHeCO8md4k5zZ7iz3DnuPHeBu8hd4i5zV7ir3DXuP+46d4O7yd3ibnN3uLvcPe4+94B7yD3iHnNPuKfcM+4594J7yb3iXnNvuLfcO+4994H7yH3iPnNfuK/cN+4794P7yf3ifnN/uL/cPy6BT8Qn5pPwSflkfHI+BZ+ST8Wn5tPwafl0fHo+A5+Rz8Rn5rPwWflsfHY+B5+Tz8Xn5vPwefl8fH6+AF+QL8QX5ovwRflifHG+BF+SL8WX5svwZflyfHm+Al+Rr8RX5qvwVflqfHW+Bl+Tr8XX5uvwdfl6fH2+Ad+Qb8Q35pvwTflmfHO+Bd+Sb8W35tvwbfl2fHu+A9+R78R35rvwXflufHe+B4/xOE/wJE/xNM/wLM/xPC/wIi/xMq/wKq/xOm/wJm/xNu/wLu/xPh/wIQ/4iIc84mO+J9+L78334fvy/fj+/AB+ID+IH8wP4Yfyw/jh/Ah+JD+KH82P4cfy4/jx/AR+Ij+Jn8xP4afy0/jp/Ax+Jj+Ln83P4efy8/j5/AJ+Ib+IX8wv4Zfyy/jl/Ap+Jb+KX82v4dfy6/j1/AZ+I7+J38xv4bfy2/jt/A5+J7+L383v4ffy+/j9/AH+IH+IP8wf4Y/yx/jj/An+JH+KP82f4c/y5/jz/AX+In+Jv8xf4a/y1/j/+Ov8Df4mf4u/zd/h7/L3+Pv8A/4h/4h/zD/hn/LP+Of8C/4l/4p/zb/h3/Lv+Pf8B/4j/4n/zH/hv/Lf+O/8D/4n/4v/zf/h//L/+AQhkZBYSCIkFZIJyYUUQkohlZBaSCOkFdIJ6YUMQkYhk5BZyCJkFbIJ2YUcQk4hl5BbyCPkFfIJ+YUCQkGhkFBYKCIUFYoJxYUSQkmhlFBaKCOUFcoJ5YUKQkWhklBZqCJUFaoJ1YUaQk2hllBbqCPUFeoJ9YUGQkOhkdBYaCI0FZoJzYUWQkuhldBaaCO0FdoJ7YUOQkehk9BZ6CJ0FboJ3YUeAibgAiGQAiXQAiOwAifwgiCIgiTIgiKogibogiGYgiXYgiO4gif4QiCEAhAiAQpIiIWeQi+ht9BH6Cv0E/oLA4SBwiBhsDBEGCoME4YLI4SRwihhtDBGGCuME8YLE4SJwiRhsjBFmCpME6YLM4SZwixhtjBHmCvME+YLC4SFwiJhsbBEWCosE5YLK4SVwiphtbBGWCusE9YLG4SNwiZhs7BF2CpsE7YLO4Sdwi5ht7BH2CvsE/YLB4SDwiHhsHBEOCocExInnBBOCqeE08IZ4axwTjgvXBAuCpeEy8IV4apwTfhPuC7cEG4Kt4Tbwh3hrnBPuC88EB4Kj4THwhPhqfBMeC68EF4Kr4TXwhvhrfBOeC98ED4Kn4TPwhfhq/BN+C78EH4Kv4Tfwh/hr/BPSBATiYnFJGJSMZmYXEwhphRTianFNGJaMZ2YXswgZhQziZnFLGJWMZuYXcwh5hRzibnFPGJeMZ+YXywgFhQLiYXFImJRsZhYXCwhlhRLiaXFMmJZsZxYXqwgVhQriZXFKmJVsZpYXawh1hRribXFOmJdsZ5YX2wgNhQbiY3FJmJTsZnYXGwhthRbia3FNmJbsZ3YXuwgdhQ7iZ3FLmJXsZvYXewhYiIuEiIpUiItMiIrciIvCqIoSqIsKqIqaqIuGqIpWqItOqIreqIvBmIoAjESoYjEWOwp9hJ7i33EvmI/sb84QBwoDhIHi0PEoeIwcbg4QhwpjhJHi2PEseI4cbw4QZwoThIni1PEqeI0cbo4Q5wpzhJni3PEueI8cb64QFwoLhIXi0vEpeIycbm4QlwprhJXi2vEteI6cb24QdwobhI3i1vEreI2cbu4Q9wp7hJ3i3vEveI+cb94QDwoHhIPi0fEo+Ix8bh4QjwpnhJPi2fEs+I58bx4QbwoXhIvi1fEq+I18T/xunhDvCneEm+Ld8S74j3xvvhAfCg+Eh+LT8Sn4jPxufhCfCm+El+Lb8S34jvxvfhB/Ch+Ej+LX8Sv4jfxu/hD/Cn+En+Lf8S/4j8xQUokJZaSSEmlZFJyKYWUUkolpZbSSGmldFJ6KYOUUcokZZaySFmlbFJ2KYeUU8ol5ZbySHmlfFJ+qYBUUCokFZaKSEWlYlJxqYRUUiollZbKSGWlclJ5qYJUUaokVZaqSFWlalJ1qYZUU6ol1ZbqSHWlelJ9qYHUUGokNZaaSE2lZlJzqYXUUmoltZbaSG2ldlJ7qYPUUeokdZa6SF2lblJ3qYeESbhESKRESbTESKzESbwkSKIkSbKkSKqkSbpkSKZkSbbkSK7kSb4USKEEpEiCEpJiqafUS+ot9ZH6Sv2k/tIAaaA0SBosDZGGSsOk4dIIaaQ0ShotjZHGSuOk8dIEaaI0SZosTZGmStOk6dIMaaY0S5otzZHmSvOk+dICaaG0SFosLZGWSsuk5dIKaaW0SlotrZHWSuuk9dIGaaO0SdosbZG2Stuk7dIOaae0S9ot7ZH2Svuk/dIB6aB0SDosHZGOSsek49IJ6aR0SjotnZHOSuek89IF6aJ0SbosXZGuStek/6Tr0g3ppnRLui3dke5K96T70gPpofRIeiw9kZ5Kz6Tn0gvppfRKei29kd5K76T30gfpo/RJ+ix9kb5K36Tv0g/pp/RL+i39kf5K/6QEOZGcWE4iJ5WTycnlFHJKOZWcWk4jp5XTyenlDHJGOZOcWc4iZ5WzydnlHHJOOZecW84j55XzyfnlAnJBuZBcWC4iF5WLycXlEnJJuZRcWi4jl5XLyeXlCnJFuZJcWa4iV5WrydXlGnJNuZZcW64j15XryfXlBnJDuZHcWG4iN5Wbyc3lFnJLuZXcWm4jt5Xbye3lDnJHuZPcWe4id5W7yd3lHjIm4zIhkzIl0zIjszIn87Igi7Iky7Iiq7Im67Ihm7Il27Iju7In+3IghzKQIxnKSI7lnnIvubfcR+4r95P7ywPkgfIgebA8RB4qD5OHyyPkkfIoebQ8Rh4rj5PHyxPkifIkebI8RZ4qT5OnyzPkmfIsebY8R54rz5PnywvkhfIiebG8RF4qL5OXyyvklfIqebW8Rl4rr5PXyxvkjfImebO8Rd4qb5O3yzvknfIuebe8R94r75P3ywfkg/Ih+bB8RD4qH5OPyyfkk/Ip+bR8Rj4rn5PPyxfki/Il+bJ8Rb4qX5P/k6/LN+Sb8i35tnxHvivfk+/LD+SH8iP5sfxEfio/k5/LL+SX8iv5tfxGfiu/k9/LH+SP8if5s/xF/ip/k7/LP+Sf8i/5t/xH/iv/kxOUREpiJYmSVEmmJFdSKCmVVEpqJY2SVkmnpFcyKBmVTEpmJYuSVcmmZFdyKDmVXEpuJY+SV8mn5FcKKAWVQkphpYhSVCmmFFdKKCWVUkpppYxSVimnlFcqKBWVSkplpYpSVammVFdqKDWVWkptpY5SV6mn1FcaKA2VRkpjpYnSVGmmNFdaKC2VVkprpY3SVmmntFc6KB2VTkpnpYvSVemmdFd6KJiCK4RCKpRCK4zCKpzCK4IiKpIiK4qiKpqiK4ZiKpZiK47iKp7iK4ESKkCJFKggJVZ6Kr2U3kofpa/ST+mvDFAGKoOUwcoQZagyTBmujFBGKqOU0coYZawyThmvTFAmKpOUycoUZaoyTZmuzFBmKrOU2cocZa4yT5mvLFAWKouUxcoSZamyTFmurFBWKquU1coaZa2yTlmvbFA2KpuUzcoWZauyTdmu7FB2KruU3coeZa+yT9mvHFAOKoeUw8oR5ahyTDmunFBOKqeU08oZ5axyTjmvXFAuKpeUy8oV5apyTflPua7cUG4qt5Tbyh3lrnJPua88UB4qj5THyhPlqfJMea68UF4qr5TXyhvlrfJOea98UD4qn5TPyhflq/JN+a78UH4qv5Tfyh/lr/JPSVATqYnVJGpSNZmaXE2hplRTqanVNGpaNZ2aXs2gZlQzqZnVLGpWNZuaXc2h5lRzqbnVPGpeNZ+aXy2gFlQLqYXVImpRtZhaXC2hllRLqaXVMmpZtZxaXq2gVlQrqZXVKmpVtZpaXa2h1lRrqbXVOmpdtZ5aX22gNlQbqY3VJmpTtZnaXG2htlRbqa3VNmpbtZ3aXu2gdlQ7qZ3VLmpXtZvaXe2hYiquEiqpUiqtMiqrciqvCqqoSqqsKqqqaqquGqqpWqqtOqqreqqvBmqoAjVSoYrUWO2p9lJ7q33Uvmo/tb86QB2oDlIHq0PUoeowdbg6Qh2pjlJHq2PUseo4dbw6QZ2oTlInq1PUqeo0dbo6Q52pzlJnq3PUueo8db66QF2oLlIXq0vUpeoydbm6Ql2prlJXq2vUteo6db26Qd2oblI3q1vUreo2dbu6Q92p7lJ3q3vUveo+db96QD2oHlIPq0fUo+ox9bh6Qj2pnlJPq2fUs+o59bx6Qb2oXlIvq1fUq+o19T/1unpDvaneUm+rd9S76j31vvpAfag+Uh+rT9Sn6jP1ufpCfam+Ul+rb9S36jv1vfpB/ah+Uj+rX9Sv6jf1u/pD/an+Un+rf9S/6j81QUukJdaSaEm1ZFpyLYWWUkulpdbSaGm1dFp6LYOWUcukZdayaFm1bFp2LYeWU8ul5dbyaHm1fFp+rYBWUCukFdaKaEW1YlpxrYRWUiulldbKaGW1clp5rYJWUaukVdaqaFW1alp1rYZWU6ul1dbqaHW1elp9rYHWUGukNdaaaE21ZlpzrYXWUmultdbaaG21dlp7rYPWUeukdda6aF21blp3rYeGabhGaKRGabTGaKzGabwmaKImabKmaKqmabpmaKZmabbmaK7mab4WaKEGtEiDGtJirafWS+ut9dH6av20/toAbaA2SBusDdGGasO04doIbaQ2ShutjdHGauO08doEbaI2SZusTdGmatO06doMbaY2S5utzdHmavO0+doCbaG2SFusLdGWasu05doKbaW2SlutrdHWauu09doGbaO2SdusbdG2atu07doObae2S9ut7dH2avu0/doB7aB2SDusHdGOase049oJ7aR2SjutndHOaue089oF7aJ2SbusXdGuate0/7Tr2g3tpnZLu63d0e5q97T72gPtofZIe6w90Z5qz7Tn2gvtpfZKe6290d5q77T32gfto/ZJ+6x90b5q37Tv2g/tp/ZL+6390f5q/7QEPZGeWE+iJ9WT6cn1FHpKPZWeWk+jp9XT6en1DHpGPZOeWc+iZ9Wz6dn1HHpOPZeeW8+j59Xz6fn1AnpBvZBeWC+iF9WL6cX1EnpJvZReWi+jl9XL6eX1CnpFvZJeWa+iV9Wr6dX1GnpNvZZeW6+j19Xr6fX1BnpDvZHeWG+iN9Wb6c31FnpLvZXeWm+jt9Xb6e31DnpHvZPeWe+id9W76d31Hjqm4zqhkzql0zqjszqn87qgi7qky7qiq7qm67qhm7ql27qju7qn+3qghzrQIx3qSI/1nnovvbfeR++r99P76wP0gfogfbA+RB+qD9OH6yP0kfoofbQ+Rh+rj9PH6xP0ifokfbI+RZ+qT9On6zP0mfosfbY+R5+rz9Pn6wv0hfoifbG+RF+qL9OX6yv0lfoqfbW+Rl+rr9PX6xv0jfomfbO+Rd+qb9O36zv0nfoufbe+R9+r79P36wf0g/oh/bB+RD+qH9OP6yf0k/op/bR+Rj+rn9PP6xf0i/ol/bJ+Rb+qX9P/06/rN/Sb+i39tn5Hv6vf0+/rD/SH+iP9sf5Ef6o/05/rL/SX+iv9tf5Gf6u/09/rH/SP+if9s/5F/6p/07/rP/Sf+i/9t/5H/6v/0xOMREZiI4mR1EhmJDdSGCmNVEZqI42R1khnpDcyGBmNTEZmI4uR1chmZDdyGDmNXEZuI4+R18hn5DcKGAWNQkZho4hR1ChmFDdKGCWNUkZpo4xR1ihnlDcqGBWNSkZlo4pR1ahmVDdqGDWNWkZto45R16hn1DcaGA2NRkZjo4nR1GhmNDdaGC2NVkZro43R1mhntDc6GB2NTkZno4vR1ehmdDd6GJiBG4RBGpRBG4zBGpzBG4IhGpIhG4qhGpqhG4ZhGpZhG47hGp7hG4ERGsCIDGggIzZ6Gr2M3kYfo6/Rz+hvDDAGGoOMwcYQY6gxzBhujDBGGqOM0cYYY6wxzhhvTDAmGpOMycYUY6oxzZhuzDBmGrOM2cYcY64xz5hvLDAWGouMxcYSY6mxzFhurDBWGquM1cYaY62xzlhvbDA2GpuMzcYWY6uxzdhu7DB2GruM3cYeY6+xz9hvHDAOGoeMw8YR46hxzDhunDBOGqeM08YZ46xxzjhvXDAuGpeMy8YV46pxzfjPuG7cMG4at4zbxh3jrnHPuG88MB4aj4zHxhPjqfHMeG68MF4ar4zXxhvjrfHOeG98MD4an4zPxhfjq/HN+G78MH4av4zfxh/jr/HPSDATmYnNJGZSM5mZ3ExhpjRTmanNNGZaM52Z3sxgZjQzmZnNLGZWM5uZ3cxh5jRzmbnNPGZeM5+Z3yxgFjQLmYXNImZRs5hZ3CxhljRLmaXNMmZZs5xZ3qxgVjQrmZXNKmZVs5pZ3axh1jRrmbXNOmZds55Z32xgNjQbmY3NJmZTs5nZ3GxhtjRbma3NNmZbs53Z3uxgdjQ7mZ3NLmZXs5vZ3exhYiZuEiZpUiZtMiZrciZvCqZoSqZsKqZqaqZuGqZpWqZtOqZreqZvBmZoAjMyoYnM2Oxp9jJ7m33MvmY/s785wBxoDjIHm0PMoeYwc7g5whxpjjJHm2PMseY4c7w5wZxoTjInm1PMqeY0c7o5w5xpzjJnm3PMueY8c765wFxoLjIXm0vMpeYyc7m5wlxprjJXm2vMteY6c725wdxobjI3m1vMreY2c7u5w9xp7jJ3m3vMveY+c795wDxoHjIPm0fMo+Yx87h5wjxpnjJPm2fMs+Y587x5wbxoXjIvm1fMq+Y18z/zunnDvGneMm+bd8y75j3zvvnAfGg+Mh+bT8yn5jPzufnCfGm+Ml+bb8y35jvzvfnB/Gh+Mj+bX8yv5jfzu/nD/Gn+Mn+bf8y/5j8zwUpkJbaSWEmtZFZyK4WV0kplpbbSWGmtdFZ6K4OV0cpkZbayWFmtbFZ2K4eV08pl5bbyWHmtfFZ+q4BV0CpkFbaKWEWtYlZxq4RV0ipllbbKWGWtclZ5q4JV0apkVbaqWFWtalZ1q4ZV06pl1bbqWHWtelZ9q4HV0GpkNbaaWE2tZlZzq4XV0mpltbbaWG2tdlZ7q4PV0epkdba6WF2tblZ3q4eFWbhFWKRFWbTFWKzFWbwlWKIlWbKlWKqlWbplWKZlWbblWK7lWb4VWKEFrMiCFrJiq6fVy+pt9bH6Wv2s/tYAa6A1yBpsDbGGWsOs4dYIa6Q1yhptjbHGWuOs8dYEa6I1yZpsTbGmWtOs6dYMa6Y1y5ptzbHmWvOs+dYCa6G1yFpsLbGWWsus5dYKa6W1ylptrbHWWuus9dYGa6O1ydpsbbG2Wtus7dYOa6e1y9pt7bH2Wvus/dYB66B1yDpsHbGOWses49YJ66R1yjptnbHOWues89YF66J1ybpsXbGuWtemDLauWzesm9Yt67Z1x7pr3bPuWw+sh9Yj67H1xHpqPbOeWy+sl9Yr67X1xnprvbPeWx+sj9Yn67P1xfpqfbO+Wz+sn9Yv67f1x/pr/bMS7ER2YjuJndROZie3U9gp7VR2ajuNndZOZ6e3M9gZ7Ux2ZjuLndXOZme3c9g57Vx2bjuPndfOZ+e3C9gF7UJ2YbuIXdQuZhe3S9gl7VJ2abuMXdYuZ5e3K9gV7Up2ZbuKXdWuZle3a9g17Vp2bbuOXdeuZ9e3G9gN7UZ2Y7uJ3dRuZje3W9gt7VZ2a7uN3dZuZ7e3O9gd7U52Z7uL3dXuZne3e9iYjduETdqUTduMzdqczduCLdqSLduKrdqarduGbdqWbduO7dqe7duBHdrAjmxoIzu2e9q97N52H7uv3c/ubw+wB9qD7MH2EHuoPcwebo+wR9qj7NH2GHusPc4eb0+wJ9qT7Mn2FHuqPc2ebs+wZ9qz7Nn2HHuuPc+eby+wF9qL7MX2Enupvcxebq+wV9qr7NX2Gnutvc5eb2+wN9qb7M32Fnurvc3ebu+wd9q77N32Hnuvvc/ebx+wD9qH7MP2Efuofcw+bp+wT9qn7NP2Gfusfc4+b1+wL9qX7Mv2Ffuqfc3+z75u37Bv2rfs2/Yd+659z75vP7Af2o/sx/YT+6n9zH5uv7Bf2q/s1/Yb+639zn5vf7A/2p/sz/YX+6v9zf5u/7B/2r/s3/Yf+6/9z05wEjmJnSROUieZk9xJ4aR0UjmpnTROWiedk97J4GR0MjmZnSxOViebk93J4eR0cjm5nTxOXiefk98p4BR0CjmFnSJOUaeYU9wp4ZR0SjmlnTJOWaecU96p4FR0KjmVnSpOVaeaU92p4dR0ajm1nTpOXaeeU99p4DR0GjmNnSZOU6eZ09xp4bR0WjmtnTZOW6ed097p4HR0OjmdnS5OV6eb093p4WAO7hAO6VAO7TAO63AO7wiO6EiO7CiO6miO7hiO6ViO7TiO63iO7wRO6AAncqCDnNjp6fRyejt9nL5OP6e/M8AZ6AxyBjtDnKHOMGe4M8IZ6YxyRjtjnLHOOGe8M8GZ6ExyJjtTnKnONGe6M8OZ6cxyZjtznLnOPGe+s8BZ6CxyFjtLnKXOMme5s8JZ6axyVjtrnLXOOme9s8HZ6GxyNjtbnK3ONme7s8PZ6exydjt7nL3OPme/c8A56BxyDjtHnKPOMee4c8I56ZxyTjtnnLPOOee8c8G56FxyLif8X3rnunPDuenccm47d5y7zj3nvvPAeeg8ch47T5ynzjPnufPCeem8cl47b5y3zjvnvfPB+eh8cj47X5yvzjfnu/PD+en8cn47f5y/zj8nwU3kJnaTuEndZG5yN4Wb0k3lpnbTuGnddG56N4Ob0c3kZnazuFndbG52N4eb083l5nbzuHndfG5+t4Bb0C3kFnaLuEXdYm5xt4Rb0i3llnbLuGXdcm55t4Jb0a3kVnaruFXdam51t2FCTbeWW9ut49Z167n13QZuQ7eR29ht4jZ1m7nN3RZuS7eV29pt47Z127nt3Q5uR7eT29nt4nZ1u7nd3R4u5uIu4ZIu5dIu47Iu5/Ku4Iqu5Mqu4qqu5uqu4Zqu5dqu47qu5/pu4IYucCMXusiN3Z5uL7e328ft6/Zz+7sD3IHuIHewO8Qd6g5zh7sj3JHuKHe0O8Yd645zx7sT3InuJHeyO8Wd6k5zp7sz3JnuLHe2O8ed685z57sL3IXuInexu8Rd6i5zl7sr3JXuKne1u8Zd665z17sb3I3uJnezu8Xd6m5zt7s73J3uLne3u8fd6+5z97sH3IPuIfewe8Q96h5zj7sn3JPuKfe0e8Y9655zz7sX3IvuJfeye8W96l5z/3Ovuzfcm+4t97Z7x73r3nPvuw/ch+4j97H7xH3qPnOfuy/cl+4r97X7xn3rvnPfux/cj+4n97P7xf3qfnO/uz/cn+4v97f7x/3r/nMTvEReYi+Jl9RL5iX3UngpvVReai+Nl9ZL56X3MngZvUxeZi+Ll9XL5mX3cng5vVxebi+Pl9fL5+X3CngFvUJeYa+IV9Qr5hX3SnglvVJeaa+MV9Yr55X3KngVvUpeZa+KV9Wr5lX3ang1vVpeba+OV9er59X3GngNvUZeY6+J19Rr5jX3WngtvVZea6+N19Zr57X3OngdvU5eZ6+L19Xr5nX3eniYh3uER3qUR3uMx3qcx3uCJ3qSJ3uKp3qap3uGZ3qWZ3uO53qe53uBF3rAizzoIS/2enq9vN5eH6+v18/r7w3wBnqDvMHeEG+oN8wb7o3wRnqjvNHeGG+sN84b703wJnqTvMneFG+qN82b7s3wZnqzvNneHG+uN8+b7y3wFnqLvMXeEm+pt8xb7q3wVnqrvNXeGm+tt85b723wNnqbvM3eFm+rt83b7u3wdnq7vN3eHm+vt8/b7x3wDnqHvMPeEe+od8w77p3wTnqnvNPeGe+sd847713wLnqXvMveFe+qd837z7vu3fBuere8294d7653z7vvPfAeeo+8x94T76n3zHvuvfBeeq+8194b7633znvvffA+ep+8z94X76v3zfvu/fB+er+8394f76/3z0vwE/mJ/SR+Uj+Zn9xP4af0U/mp/TR+Wj+dn97P4Gf0M/mZ/Sx+Vj+bn93P4ef0c/m5/Tx+Xj+fn98v4Bf0C/mF/SJ+Ub+YX9wv4Zf0S/ml/TJ+Wb+cX96v4Ff0K/mV/Sp+Vb+aX92v4df0a/m1/Tp+Xb+eX99v4Df0G/mN/SZ+U7+Z39xv4bf0W/mt/TZ+W7+d397v4Hf0O/md/S5+V7+b393v4WM+7hM+6VM+7TM+63M+7wu+6Eu+7Cu+6mu+7hu+6Vu+7Tu+63u+7wd+6AM/8qGP/Njv6ffye/t9/L5+P7+/P8Af6A/yB/tD/KH+MH+4P8If6Y/yR/tj/LH+OH+8P8Gf6E/yJ/tT/Kn+NH+6P8Of6c/yZ/tz/Ln+PH++v8Bf6C/yF/tL/KX+Mn+5v8Jf6a/yV/tr/LX+On+9v8Hf6G/yN/tb/K3+Nn+7v8Pf6e/yd/t7/L3+Pn+/f8A/6B/yD/tH/KP+Mf+4f8I/6Z/yT/tn/LP+Of+8f8G/6F/yL/tX/Kv+Nf8//7p/w7/p3/Jv+3f8u/49/77/wH/oP/If+0/8p/4z/7n/wn/pv/Jf+2/8t/47/73/wf/of/I/+1/8r/43/7v/w//p//J/+3/8v/4/PyFIFCQOkgRJg2RB8iBFkDJIFaQO0gRpg3RB+iBDkDHIFGQOsgRZg2xB9iBHkDPIFeQO8gR5g3xB/qBAUDAoFBQOigRFg2JB8aBEUDIoFZQOygRlg3JB+aBCUDGoFFQOqgRVg2pB9aBGUDOoFdQO6gR1g3pB/aBB0DBoFDQOmgRNg2ZB86BF0DJoFbQO2gRtg3ZB+6BD0DHoFHQOugRdg25B96BHgAV4QARkQAV0wARswAV8IARiIAVyoARqoAV6YARmYAV24ARu4AV+EARhAIIogAEK4qBn0CvoHfQJ+gb9gv7BgGBgMCgYHAwJhgbDguHBiGBkMCoYHYwJxgbjgvHBhGBiMCmYHEwJpgbTgunBjGBmMCuYHcwJ5gbzgvnBgmBhsChYHCwJlgbLguXBimBlsCpYHawJ1gbrgvXBhmBjsCnYHGwJtgbbgu3BjmBnsCvYHewJ9gb7gv3BgeBgcCg4HBwJjgbHguPBieBkcCo4HZwJzgbngvPBheBicCm4HFwJrgbXgv+C68GN4GZwK7gd3AnuBveC+8GD4GHwKHgcPAmeBs+C58GL4GXwKngdvAneBu+C98GH4GPwKfgcfAm+Bt+C78GP4GfwK/gd/An+Bv+ChDBRmDhMEiYNk4XJwxRhyjBVmDpME6YN04XpwwxhxjBTmDnMEmYNs4XZwxxhzjBXmDvME+YN84X5wwJhwbBQWDgsEhYNi4XFwxJhybBUWDosE5YNy4XlwwphxbBSWDmsElYNq4XVwxphzbBWWDusE9YN64X1wwZhw7BR2DhsEjYNm4XNwxZhy7BV2DpsE7YN24Xtww5hx7BT2DnsEnYNu4Xdwx4hFuIhEZIhFdIhE7IhF/KhEIqhFMqhEqqhFuqhEZqhFdqhE7qhF/phEIYhCKMQhiiMw55hr7B32CfsG/YL+4cDwoHhoHBwOCQcGg4Lh4cjwpHhqHB0OCYcG44Lx4cTwonhpHByOCWcGk4Lp4czwpnhrHB2OCecG84L54cLwoXhonBxuCRcGi4Ll4crwpXhqnB1uCZcG64L14cbwo3hpnBzuCXcGm4Lt4c7wp3hrnB3uCfcG+4L94cHwoPhofBweCQ8Gh4Lj4cnwpPhqfB0eCY8G54Lz4cXwovhpfByeCW8Gl4L/wuvhzfCm+Gt8HZ4J7wb3gvvhw/Ch+Gj8HH4JHwaPgufhy/Cl+Gr8HX4Jnwbvgvfhx/Cj+Gn8HP4Jfwafgu/hz/Cn+Gv8Hf4J/wb/gsTQCKQGCQBSUEykBykAClBKpAapAFpQTqQHmQAGUEmkBlkAVlBNpAd5AA5QS6QG+QBeUE+kB8UAAVBIVAYFAFFQTFQHJQAJUEpUBqUAWVBOVAeVAAVQSVQGVQBVUE1UB3UADVBLVAb1AF1QT1QHzQADUEj0Bg0AU1BM9ActAAtQSvQGrQBbUE70B50AB1BJ9AZdAFdQTfQHfQAGMABAUhAARowgAUc4IEARCABGShABRrQgQFMYAEbOMAFHvBBAEIAQAQgQCAGPUEv0Bv0AX1BP9AfDAADwSAwGAwBQ8EwMByMACPBKDAajAFjwTgwHkwAE8EkMBlMAVPBNDAdzAAzwSwwG8wBc8E8MB8sAAvBIrAYLAFLwTKwHKwAK8EqsBqsAWvBOrAebAAbwSawGWwBW8E2sB3sADvBLrAb7AF7wT6wHxwAB8EhcBgcAUfBMXAcnAAnwSlwGpwBZ8E5cB5cABfBJXAZXAFXwTXwH7gOboCb4Ba4De6Au+AeuA8egIfgEXgMnoCn4Bl4Dl6Al+AVeA3egLfgHXgPPoCP4BP4DL6Ar+Ab+A5+gJ/gF/gN/oC/4B9IiBJFiaMkUdIoWZQ8ShGljFJFqaM0UdooXZQ+yhBljDJFmaMsUdYoW5Q9yhHljHJFuaM8Ud4oX5Q/KhAVjApFhaMiUdGoWFQ8KhGVjAYmJCSUicpG5aLyUYWoYlQpqhxViapG1aLqUY2oZlQrqh3ViepG9aL6UYOoYdQoahw1iZpGzaLmUYuoZdQqah21idpG7aL2UYeoY9Qp6hx1ibpG3aLuUY8Ii/CIiMiIiuiIidiIi/hIiMRIiuRIidRIi/TIiMzIiuzIidzIi/woiMIIRFEEIxTFUc+oV9Q76hP1jfpF/aMB0cBoUDQ4GhINjYZFw6MR0choVDQ6GhONjcZF46MJ0cRoUjQ5mhJNjaZF06MZ0cxoVjQ7mhPNjeZF86MF0cJoUbQ4WhItjZZFy6MV0cpoVbQ6WhOtjdZF66MN0cZoU7Q52hJtjbZF26Md0c5oV7Q72hPtjfZF+6MD0cHoUHQ4OhIdjY5Fx6MT0cnoVHQ6OhOdjc5F56ML0cXoUnQ5uhJdja5F/0XXoxvRzehWdDu6E92N7kX3owfRw+hR9Dh6Ej2NnkXPoxfRy+hV9Dp6E72N3kXvow/Rx+hT9Dn6En2NvkXfox/Rz+hX9Dv6E/2N/kUJMBFMDJPApDAZTA5TwJQwFUwN08C0MB1MDzPAjDATzAyzwKwwG8wOc8CcMBfMDfPAvDAfzA8LwIKwECwMi8CisBgsDkvAkrAULA3LwLKwHCwPK8CKsBKsDKvAqrAarA5rwJqwFqwN68C6sB6sDxvAhrARbAybwKawGWwOW8CWsBVsDdvAtrAdbA87wI6wE+wMu8CusBvsDntADOKQgCSkIA0ZyEIO8lCAIpSgDBWoQg3q0IAmtKANHehCD/owgCEEMIIQIhjDnrAX7A37wL6wH+wPB8CBcBAcDIfAoXAYHA5HwJFwFBwNx8CxcBwcDyfAiXASnAynwKlwGpwOZ8CZcBacDefAuXAenA8XwIVwEVwMl8ClcBlcDlfAlXAVXA3XwLVwHVwPN8CNcBPcDLfArXAb3A53wJ1wF9wN98C9cB/cDw/Ag/AQPAyPwKPwGDwOT8CT8BQ8Dc/As/AcPA8vwIvwErwMr8Cr8Br8D16HN+BNeAvehnfgXXgP3ocP4EP4CD6GT+BT+Aw+hy/gS/gKvoZv4Fv4Dr6HH+BH+Al+hl/gV/gNfoc/4E/4C/6Gf+Bf+A8moEQoMUqCkqJkKDlKgVKiVCg1SoPSonQoPcqAMqJMKDPKgrKibCg7yoFyolwoN8qD8qJ8KD8qgAqiQqgwKoKKomKoOCqBSqJSqDQqg8qicqg8qoAqokqoMqqCqqJqqDqqgWqiWqg2qoPqonqoPmqAGqJGqDFqgpqiZqg5aoFaolaoNWqD2qJ2qD3qgDqiTqgz6oK6om6oO+qBMIQjApGIQjRiEIs4xCMBiUhCMlKQijSkIwOZyEI2cpCLPOSjAIUIoAhBhFCMeqJeqDfqg/qifqg/GoAGokFoMBqChqJhaDgagUaiUWg0GoPGonFoPJqAJqJJaDKagqaiaWg6moFmolloNpqD5qJ5aD5agBaiRWgxWoKWomVoOVqBVqJVaDVag9aidWg92oA2ok1oM9qCtqJtaDvagXaiXWg32oP2on1oPzqADqJD6DA6go6iY+g4OoFOolPoNDqDzqJz6Dy6gC6iS+gyuoKuomvoP3Qd3UA30S10G91Bd9E9dB89QA/RI/QYPUFP0TP0HL1AL9Er9Bq9QW/RO/QefUAf0Sf0GX1BX9E39B39QD/RL/Qb/UF/0T+UECeKE8dJ4qRxsjh5nCJOGaeKU8dp4rRxujh9nCHOGGeKM8dZ4qxxtjh7nCPOGeeKc8d54rxxvjh/XCAuGBeKC8dF4qJxsbh4XCIuGZeKS8dl4rJxubh8XCGuGFeKK8dV4qpxtbh6XCOuGdeKa8d14rpxvbh+3CBuGDeKG8dN4qZxs7h53CJuGbeKW8dt4rZxu7h93CHuGHeKO8dd4q5xt7h73CPGYjwmYjKmYjpmYjbmYj4WYjGWYjlWYjXWYj02YjO2Yjt2Yjf2Yj8O4jAGcRTDGMVx3DPuFfeO+8R9435x/3hAPDAeFA+Oh8RD42Hx8HhEPDIeFY+Ox8Rj/0cAPACKcQMAAP3Fatu2bdu2bfNsW0mutm3btm3b3sMczMU8zMcCLMQiDGAQQ1iMzcBmYrOw2dgcbC42D5uPLcAWYouwxdgSbCm2DFuOrcBWYquw1dgabC22DluPbcA2YpuwzdgWbCu2DduO7cB2Yruw3dgebC+2D9uPHcAOYoeww9gR7Ch2DDuOncBOYqew09gZ7Cx2DjuPXcAuYpewy9gV7Cp2DbuO3cBuYrew29gd7C52D7uPPcAeYo+wx9gT7Cn2DHuOvcBeYq+w19gb7C32DnuPfcA+Yp+wz9gX7Cv2DfuO/cB+Yr+w39gf7C/2D0vAE+GJ8SR4Uvw/PBmeHE+Bp8RT4anxNHhaPB2eHs+AZ8Qz4ZnxLHhWPBueHc+B58Rz4bnxPHhePB+eHy+AF8QL4YXxInhRvBheHC+Bl8RL4aXxMnhZvBxeHq+AV8Qr4ZXxKnhVvBpeHa+B18Rr4bXxOnhdvB5eH2+AN8Qb4Y3xJnhTvBneHG+Bt8Rb4a3xNnhbvB3eHu+Ad8Q74Z3xLnhXvBveHe+B98R74b3xPnhfvB/eHx+AD8QH4YPxIfhQfBg+HB+Bj8RH4aPxMfhYfBw+Hp+AT8Qn4ZPxKfhUfBo+HcdwHCdwEqdwGmdwFudwHhdwEZdwGVdwFddwHTdwE7dwG3dwF/dwHw/wEI9wgEMc4TE+A5+Jz8Jn43Pwufg8fD6+AF+IL8IX40vwpfgyfDm+Al+Jr8JX42vwtfg6fD2+Ad+Ib8I341vwrfg2fDu+A9+J78J343vwvfg+fD9+AD+IH8IP40fwo/gx/Dh+Aj+Jn8JP42fws/g5/Dx+Ab+IX8Iv41fwq/g1/Dp+A7+J38Jv43fwu/g9/D7+AH+IP8If40/wp/gz/Dn+An+Jv8Jf42/wt/g7/D3+Af+If8I/41/wr/g3/Dv+A/+J/8J/43/wv/g/PIFIRCQmkhBJif+IZERyIgWRkkhFpCbSEGmJdER6IgORkchEZCayEFmJbER2IgeRk8hF5CbyEHmJfER+ogBRkChEFCaKEEWJYkRxogRRkihFlCbKEGWJckR5ogJRkahEVCaqEFWJakR1ogZRk6hF1CbqEHWJekR9ogHRkGhENCaaEE2JZkRzogXRkmhFtCbaEG2JdkR7ogPRkehEdCa6EF2JbkR3ogfRk+hF9Cb6EH2JfkR/YgAxkBhEDCaGEEOJYcRwYgQxkhhFjCbGEGOJccR4YgIxkZhETCamEFOJacR0AiNwgiBIgiJogiFYgiN4QiBEQiJkQiFUQiN0wiBMwiJswiFcwiN8IiBCIiIAAQlExMQMYiYxi5hNzCHmEvOI+cQCYiGxiFhMLCGWEsuI5cQKYiWxilhNrCHWEuuI9cQGYiOxidhMbCG2EtuI7cQOYiexi9hN7CH2EvuI/cQB4iBxiDhMHCGOEseI48QJ4iRxijhNnCHOEueI88QF4iJxibhMXCGuEteI68QN4iZxi7hN3CHuEveI+8QD4iHxiHhMPCGeEs+I58QL4iXxinhNvCHeEu+I98QH4iPxifhMfCG+Et+I78QP4ifxi/hN/CH+Ev+IBDIRmZhMQiYl/yOTkcnJFGRKMhWZmkxDpiXTkenJDGRGMhOZmcxCZiWzkdnJHGROMheZm8xD5iXzkfnJAmRBshBZmCxCFiWLkcXJEmRJshRZmixDliXLkeXJCmRFshJZmaxCViWrkdXJGmRNshZZm6xD1iXrkfXJBmRDshHZmGxCNiWbkc3JFmRLshXZmmxDtiXbke3JDmRHshPZmexCdiW7kd3JHmRPshfZm+xD9iX7kf3JAeRAchA5mBxCDiWHkcPJEeRIchQ5mhxDjiXHkePJCeREchI5mZxCTiWnkdNJjMRJgiRJiqRJhmRJjuRJgRRJiZRJhVRJjdRJgzRJi7RJh3RJj/TJgAzJiAQkJBEZkzPImeQscjY5h5xLziPnkwvIheQicjG5hFxKLiOXkyvIleQqcjW5hlxLriPXkxvIjeQmcjO5hdxKbiO3kzvIneQucje5h9xL7iP3kwfIg+Qh8jB5hDxKHiOPkyfIk+Qp8jR5hjxLniPPkxfIi+Ql8jJ5hbxKXiOvkzfIm+Qt8jZ5h7xL3iPvkw/Ih+Qj8jH5hHxKPiOfky/Il+Qr8jX5hnxLviPfkx/Ij+Qn8jP5hfxKfiO/kz/In+Qv8jf5h/xL/iMTqERUYioJlZT6j0pGJadSUCmpVFRqKg2VlkpHpacyUBmpTFRmKguVlcpGZadyUDmpXFRuKg+Vl8pH5acKUAWpQlRhqghVlCpGFadKUCWpUlRpqgxVlipHlacqUBWpSlRlqgpVlapGVadqUDWpWlRtqg5Vl6pH1acaUA2pRlRjqgnVlGpGNadaUC2pVlRrqg3VlmpHtac6UB2pTlRnqgvVlepGdad6UD2pXlRvqg/Vl+pH9acGUAOpQdRgagg1lBpGDadGUCOpUdRoagw1lhpHjacmUBOpSdRkago1lZpGTacwCqcIiqQoiqYYiqU4iqcESqQkSqYUSqU0SqcMyqQsyqYcyqU8yqcCKqQiClCQQlRMzaBmUrOo2dQcai41j5pPLaAWUouoxdQSaim1jFpOraBWUquo1dQaai21jlpPbaA2UpuozdQWaiu1jdpO7aB2Uruo3dQeai+1j9pPHaAOUoeow9QR6ih1jDpOnaBOUqeo09QZ6ix1jjpPXaAuUpeoy9QV6ip1jbpO3aBuUreo29Qd6i51j7pPPaAeUo+ox9QT6in1jHpOvaBeUq+o19Qb6i31jnpPfaA+Up+oz9QX6iv1jfpO/aB+Ur+o39Qf6i/1j0qgE9GJ6SR0Uvo/OhmdnE5Bp6RT0anpNHRaOh2dns5AZ6Qz0ZnpLHRWOhudnc5B56Rz0bnpPHReOh+dny5AF6QL0YXpInRRuhhdnC5Bl6RL0aXpMnRZuhxdnq5AV6Qr0ZXpKnRVutqc9AkJdE26Fl2brkPXpevR9ekGdEO6Ed2YbkI3pZvRzekWdEu6Fd2abkO3pdvR7ekOdEe6E92Z7kJ3pbvR3ekedE+6F92b7kP3pfvR/ekB9EB6ED2YHkIPpYfRw+kR9Eh6FD2aHkOPpcfR4+kJ9ER6Ej2ZnkJPpafR02mMxmmCJmmKpmmGZmmO5mmBFmmJlmmFVmmN1mmDNmmLtmmHdmmP9umADumIBjSkER3TM+iZ9Cx6Nj2HnkvPo+fTC+iF9CJ6Mb2EXkovo5fTK+iV9Cp6Nb2GXkuvo9fTG+iN9CZ6M72F3kpvo7fTO+id9C56N72H3kvvo/fTB+iD9CH6MH2EPkofo4/TJ+iT9Cn6NH2GPkufo8/TF+iL9CX6Mn2Fvkpfo6/TN+ib9C36Nn2Hvkvfo+/TD+iH9CP6Mf2Efko/o5/TL+iX9Cv6Nf2Gfku/o9/TH+iP9Cf6M/2F/kp/o7/TP+if9C/6N/2H/kv/oxOYRExiJgmTlPmPScYkZ1IwKZlUTGomDZOWScekZzIwGZlMTGYmC5OVycZkZ3IwOZlcTG4mD5OXycfkZwowBZlCTGGmCFOUKcYUZ0owJZlSTGmmDFOWKceUZyowFZlKTGWmClOVqcZUZ2owNZlaTG2mDlOXqcfUZxowDZlGTGOmCdOUacY0Z1owLZlWTGumDdOWace0ZzowHZlOTGemC9OV6cZ0Z3owPZleTG+mD9OX6cf0ZwYwA5lBzGBmCDOUGcYMZ0YwI5lRzGhmDDOWGceMZyYwE5lJzGRmCjOVmcZMZzAGZwiGZCiGZhiGZTiGZwRGZCRGZhRGZTRGZwzGZCzGZhzGZTzGZwImZCIGMJBBTMzMYGYys5jZzBxmLjOPmc8sYBYyi5jFzBJmKbOMWc6sYFYyq5jVzBpmLbOOWc9sYDYym5jNzBZmK7ON2c7sYHYyu5jdzB5mL7OP2c8cYA4yh5jDzBHmKHOMOc6cYE4yp5jTzBnmLHOOOc9cYC4yl5jLzBXmKnONuc7cYG4yt5jbzB3mLnOPuc88YB4yj5jHzBPmKfOMec68YF4yr5jXzBvmLfOOec98YD4yn5jPzBfmK/ON+c78uHc8IYH5zfxh/jL/mAQ2EZuYTcImZf9jk7HJ2RRsSjYVm5pNw6Zl07Hp2QxsRjYTm5nNwmZls7HZ2RxsTjYXm5vNw+Zl87H52QJsQbYQW5gtwhZli7HF2RJsSbYUW5otw5Zly7Hl2QpsRbYSW5mtwlZlq7HV2RpsTbYWW5utw9Zl67H12QZsQ7YR25htwjZlm7HN2RZsS7YV25ptw7Zl27Ht2Q5sR7YT25ntwnZlu7Hd2R5sT7YX25vtw/Zl+7H92QHsQHYQO5gdwg5lh7HD2RHsSHYUO5odw45lx7Hj2QnsRHYSO5mdwk5lp7HTWYzFWYIlWYqlWYZlWY7lWYEVWYmVWYVVWY3VWYM1WYu1WYd1WY/12YAN2YgFLGQRG7Mz2JnsLHY2O4edy85j57ML2IXsInYxu4Rdyi5jl7Mr2JXsKnY1u4Zdy65j17Mb2I3sJnYzu4Xdym5jt7M72J3sLnY3u4fdy+5j97MH2IPsIfYwe4Q9yh5jj7Mn2JPsKfY0e4Y9y55jz7MX2IvsJfYye4W9yl5jr7M32JvsLfY2e4e9y95j77MP2IfsI/Yx+4R9yj5jn7Mv2JfsK/Y1+4Z9y75j37Mf2I/sJ/Yz+4X9yn5jv7M/2J/sL/Y3+4f9y/5jE7hEXGIuCZeU+49LxiXnUnApuVRcai4Nl5ZLx6XnMnAZuUxcZi4Ll5XLxmXncnA5uVxcbi4Pl5fLx+XnCnAFuUJcYa4IV5QrxhXnSnAluVJcaa4MV5Yrx5XnKnAVuUpcZa4KV5WrxlXnanA1uVpcba4OV5erx9XnGnANuUZcY64J15RrxjXnWnAtuVZca64N15Zrx7XnOnAduU5cZ64L15XrxnXnenA9uV5cb64P15frx/XnBnADuUHcYG4IN5Qbxg3nRnAjuVHcaG4MN5Ybx43nJnATuUncZG4KN5Wbxk3nMA7nCI7kKI7mGI7lOI7nBE7kJE7mFE7lNE7nDM7kLM7mHM7lPM7nAi7kIg5wkENczM3gZnKzuNncHG4uN4+bzy3gFnKLuMXcEm4pt4xbzq3gVnKruNXcGm4tt45bz23gNnKbuM3cFm4rt43bzu3gdnK7uN3cHm4vt4/bzx3gDnKHuMPcEe4od4w7zp3gTnKnuNPcGe4sd447z13gLnKXuMvcFe4qd427zt3gbnK3uNvcHe4ud4+7zz3gHnKPuMfcE+4p94x7zr3gXnKvuNfcG+4t9457z33gPnKfuM/cF+4r9437zv3gfnK/uN/cH+4v949L4BPxifkkfFL+Pz4Zn5xPwafkU/Gp+TR8Wj4dn57PwGfkM/GZ+Sx8Vj4bn53Pwefkc/G5+Tx8Xj4fn58vwBfkC/GF+SJ8Ub4YX5wvwZfkS/Gl+TJ8Wb4cX56vwFfkK/GV+Sp8Vb4aX52vwdfka/G1+Tp8Xb4eX59vwDfkG/GN+SZ8U74Z35xvwbfkW/Gt+TZ8W74d357vwHfkO/Gd+S58V74b353vwffke/G9+T58X74f358fwA/kB/GD+SH8UH4YP5wfwY/kR/Gj+TH8WH4cP56fwE/kJ/GT+Sn8VH4aP53HeJwneJKneJpneJbneJ4XeJGXeJlXeJXXeJ03eJO3eJt3eJf3eJ8P+JCPeMBDHvExP4Ofyc/iZ/Nz+Ln8PH4+v4BfyC/iF/NL+KX8Mn45v4Jfya/iV/Nr+LX8On49v4HfyG/iN/Nb+K38Nn47v4Pfye/id/N7+L38Pn4/f4A/yB/iD/NH+KP8Mf44f4I/yZ/iT/Nn+LP8Of48f4G/yF/iL/NX+Kv8Nf46f4O/yd/ib/N3+Lv8Pf4+/4B/yD/iH/NP+Kf8M/45/4J/yb/iX/Nv+Lf8O/49/4H/yH/iP/Nf+K/8N/47/4P/yf/if/N/+L/8Pz5BSCQkFpIISYX/hGRCciGFkFJIJaQW0ghphXRCeiGDkFHIJGQWsghZhWxCdiGHkFPIJeQW8gh5hXxCfqGAUFAoJBQWighFhWJCcaGEUFIoJZQWyghlhXJCeaGCUFGoJFQWqghVhWpCdaGGUFOoJdQW6gh1hXpCfaGB0FBoJDQWmghNhWZCc6GF0FJoJbQW2ghthXZCe6GD0FHoJHQWughdhW5Cd6GH0FPoJfQW+gh9hX5Cf2GAMFAYJAwWhghDhWHCcGGEMFIYJYwWxghjhXHCeGGCMFGYJEwWpghThWnCdAETcIEQSIESaIERWIETeEEQREESZEERVEETdMEQTMESbMERXMETfCEQQiESgAAFJMTCDGGmMEuYLcwR5grzhPnCAmGhsEhYLCwRlgrLhOXCCmGlsEpYLawR1grrhPXCBmGjsEnYLGwRtgrbhO3CDmGnsEvYLewR9gr7hP3CAeGgcEg4LBwRjgrHhOPCCeGkcEo4LZwRzgrnhPPCBeGicEm4LFwRrgrXhOvCDeGmcEu4LdwR7gr3hPvCA+Gh8Eh4LDwRngrPhOfCC+Gl8Ep4LbwR3grvhPfCB+Gj8En4LHwRvgrfhO/CD+Gn8Ev4LfwR/gr/hAQxkZhYTCImFf8Tk4nJxRRiSjGVmFpMI6YV04npxQxiRjGTmFnMImYVs4nZxRxiTjGXmFvMI+YV84n5xQJiQbGQWFgsIhYVi4nFxRJiSbGUWFosI5YVy4nlxQpiRbGSWFmsIlYVq4nVxRpiTbGWWFusI9YV64n1xQZiQ7GR2FhsIjYVm4nNxRZiS7GV2FpsI7YV24ntxQ5iR7GT2FnsInYVu4ndxR5iT7GX2FvsI/YV+4n9xQHiQHGQOFgcIg4Vh4nDxRHiSHGUOFocI44Vx4njxQniRHGSOFmcIk4Vp4nTRUzERUIkRUqkRUZkRU7kRUEURUmURUVURU3URUM0RUu0RUd0RU/0xUAMxUgEIhSRGIszxJniLHG2OEecK84T54sLxIXiInGxuERcKi4Tl4srxJXiKnG1uEZcK64T14sbxI3iJnGzuEXcKm4Tt4s7xJ3iLnG3uEfcK+4T94sHxIPiIfGweEQ8Kh4Tj4snxJPiKfG0eEY8K54Tz4sXxIviJfGyeEW8Kl4Tr4s3xJviLfG2eEe8K94T74sPxIfiI/Gx+ER8Kj4Tn4svxJfiK/G1+EZ8K74T34sfxI/iJ/Gz+EX8Kn4Tv4s/xJ/iL/G3+Ef8K/4TE6REUmIpiZRU+k9KJiWXUkgppVRSaimNlFZKJ6WXMkgZpUxSZimLlFXKJmWXckg5pVxSbimPlFfKJ+WXCkgFpUJSYamIVFQqJhWXSkglpVJSaamMVFYqJ5WXKkgVpUpSZamKVFWqJlWXakg1pVpSbamOVFeqJ9WXGkgNpUZSY6mJ1FRqJjWXWkgtpVZSa6mN1FZqJ7WXOkgdpU5SZ6mL1FXqJnWXekg9pV5Sb6mP1FfqJ/WXBkgDpUHSYGmINFQaJg2XRkgjpVHSaGmMNFYaJ42XJkgTpUnSZGmKNFWaJk2XMAmXCImUKImWGImVOImXBEmUJEmWFEmVNEmXDMmULMmWHMmVPMmXAimUIglIUEJSLM2QZkqzpNnSHGmuNE+aLy2QFkqLpMXSEmmptExaLq2QVkqrpNXSGmmttE5aL22QNkqbpM3SFmmrtE3aLu2Qdkq7pN3SHmmvtE/aLx2QDkqHpMPSEemodEw6Lp2QTkqnpNPSGemsdE46L12QLkqXpMvSFemqdE26Lt2Qbkq3pNvSHemudE+6Lz2QHkqPpMfSE+mp9Ex6Lr2QXkqvpNfSG+mt9E56L32QPkqfpM/SF+mr9E36Lv2Qfkq/pN/SH+mv9E9KkBPJieUkclL5PzmZnFxOIaeUU8mp5TRyWjmdnF7OIGeUM8mZ5SxyVjmbnF3OIeeUc8m55TxyXjmfnF8uIBeUC8mF5SJyUbmYXFwuIZeUS8ml5TJyWbmcXF6uIFeUK8mV5SpyVbmaXF2uIdeUa8m15TpyXbmeXF9uIDeUG8mN5SZyU7mZ3FxuIbeUW8mt5TZyW7md3F7uIHeUO8md5S5yV7mb3F3uIfeUe8m95T5yX7mf3F8eIA+UB8mD5SHyUHmYPFweIY+UR8mj5THyWHmcPF6eIE+UJ8mT5SnyVHmaPF3GZFwmZFKmZFpmZFbmZF4WZFGWZFlWZFXWZF02ZFO2ZFt2ZFf2ZF8O5FCOZCBDGcmxPEOeKc+SZ8tz5LnyPHm+vEBeKC+SF8tL5KXyMnm5vEJeKa+SV8tr5LXyOnm9vEHeKG+SN8tb5K3yNnm7vEPeKe+Sd8t75L3yPnm/fEA+KB+SD8tH5KPyMfm4fEI+KZ+ST8tn5LPyOfm8fEG+KF+SL8tX5KvyNfm6fEO+Kd+Sb8t35LvyPfm+/EB+KD+SH8tP5KfyM/m5/EJ+Kb+SX8tv5LfyO/m9/EH+KH+SP8tf5K/yN/m7/EP+Kf+Sf8t/5L/yPzlBSaQkVpIoSZX/lGRKciWFklJJpaRW0ihplXRKeiWDklHJpGRWsihZlWxKdiWHklPJpeRW8ih5lXxKfqWAUlAppBRWiihFlWJKcaWEUlIppZRWyihllXJKeaWCUlGppFRWqihVlWpKdaWGUlOppdRW6ih1lXpKfaWB0lBppDRWmihNlWZKc6WF0lJppbRW2ihtlXZKe6WD0lHppHRWuihdlW5Kd6WH0lPppfRW+ih9lX5Kf2WAMlAZpAxWhihDlWHKcGWEMlIZpYxWxihjlXHKeGWCMlGZpExWpihTlWnKdAVTcIVQSIVSaIVRWIVTeEVQREVSZEVRVEVTdMVQTMVSbMVRXMVTfCVQQiVSgAIVpMTKDGWmMkuZrcxR5irzlPnKAmWhskhZrCxRlirLlOXKCmWlskpZraxR1irrlPXKBmWjsknZrGxRtirblO3KDmWnskvZrexR9ir7lP3KAeWgckg5rBxRjirHlOPKCeWkcko5rZxRzirnlPPKBeWickm5rFxRrirXlOvKDeWmcku5rdxR7ir3lPvKA+Wh8kh5rDxRnirPlOfKC+Wl8kp5rbxR3irvlPfKB+Wj8kn5rHxRvirflO/KD+Wn8kv5rfxR/ir/lAQ1kZpYTaImVf9Tk6nJ1RRqSjWVmlpNo6ZV06np1QxqRjWTmlnNomZVs6nZ1RxqTjWXmlvNo+ZV86n51QJqQbWQWlgtohZVi6nF1RJqSbWUWloto5ZVy6nl1QpqRbWSWlmtolZVq6nV1RpqTbWWWluto9ZV66n11QZqQ7WR2lhtojZVm6nN1RZqS7WV2lpto7ZV26nt1Q5qR7WT2lntonZVu6nd1R5qT7WX2lvto/ZV+6n91QHqQHWQOlgdog5Vh6nD1RHqSHWUOlodo45Vx6nj1QnqRHWSOlmdok5Vp6nTVUzFVUIlVUqlVUZlVU7lVUEVVUmVVUVVVU3VVUM1VUu1VUd1VU/11UAN1UgFKlSRGqsz1JnqLHW2Okedq85T56sL1IXqInWxukRdqi5Tl6sr1JXqKnW1ukZdq65T16sb1I3qJnWzukXdqm5Tt6s71J3qLnW3ukfdq+5T96sH1IPqIfWwekQ9qh5Tj6sn1JPqKfW0ekY9q55Tz6sX1IvqJfWyekW9ql5Tr6s31JvqLfW2eke9q95T76sP1IfqI/Wx+kR9qj5Tn6sv1JfqK/W1+kZ9q75T36sf1I/qJ/Wz+kX9qn5Tv6s/1J/qL/W3+kf9q/5TE7REWmItiZZU+09LpiXXUmgptVRaai2NllZLp6XXMmgZtUxaZi2LllXLpmXXcmg5tVxabi2PllfLp+XXCmgFtUJaYa2IVlQrphXXSmgltVJaaa2MVlYrp5XXKmgVtUpaZa2KVlWrplXXamg1tVpaba2OVlerp9XXGmgNtUZaY62J1lRrpjXXWmgttVZaa62N1lZrp7XXOmgdtU5aZ62L1lXrpnXXemg9tV5ab62P1lfrp/XXBmgDtUHaYG2INlQbpg3XRmgjtVHaaG2MNlYbp43XJmgTtUnaZG2KNlWbpk3XMA3XCI3UKI3WGI3VOI3XBE3UJE3WFE3VNE3XDM3ULM3WHM3VPM3XAi3UIg1oUENarM3QZmqztNnaHG2uNk+bry3QFmqLtMXaEm2ptkxbrq3QVmqrtNXaGm2ttk5br23QNmqbtM3aFm2rtk3bru3Qdmq7tN3aHm2vtk/brx3QDmqHtMPaEe2odkw7rp3QTmqntNPaGe2sdk47r13QLmqXtMvaFe2qdk27rt3Qbmq3tNvaHe2udk+7rz3QHmqPtMfaE+2p9kx7rr3QXmqvtNfaG+2t9k57r33QPmqftM/aF+2r9k37rv3Qfmq/tN/aH+2v9k9L0BPpifUkelL9Pz2ZnlxPoafUU+mp9TR6Wj2dnl7PoGfUM+mZ9Sx6Vj2bnl3PoefUc+m59Tx6Xj2fnl8voBfUC+mF9SJ6Ub2YXlwvoZfUS+ml9TJ6Wb2cXl6voFfUK+mV9Sp6Vb2aXl2vodfUa+m19Tp6Xb2eXl9voDfUG+mN9SZ6U72Z3lxvobfUW+mt9TZ6W72d3l7voHfUO+md9S56V72b3l3voffUe+m99T56X72f3l8foA/UB+mD9SH6UH2YPlwfoY/UR+mj9TH6WH2cPl6foE/UJ+mT9Sn6VH2aPl3HdFwndFKndFpndFbndF4XdFGXdFlXdFXXdF03dFO3dFt3dFf3dF8P9FCPdKBDHemxPkOfqc/SZ+tz9Ln6PH2+vkBfqC/SF+tL9KX6Mn25vkJfqa/SV+tr9LX6On29vkHfqG/SN+tb9K36Nn27vkPfqe/Sd+t79L36Pn2/fkA/qB/SD+tH9KP6Mf24fkI/qZ/ST+tn9LP6Of28fkG/qF/SL+tX9Kv6Nf26fkO/qd/Sb+t39Lv6Pf2+/kB/qD/SH+tP9Kf6M/25/kJ/qb/SX+tv9Lf6O/29/kH/qH/SP+tf9K/6N/27/kP/qf/Sf+t/9L/6Pz3BSGQkNpIYSY3/jGRGciOFkdJIZaQ20hhpjXRGeiODkdHIZGQ2shhZjWxGdiOHkdPIZeQ28hh5jXxGfqOAUdAoZBQ2ihhFjWJGcaOEUdIoZZQ2yhhljXJGeaOCUdGoZFQ2qhhVjWpGdaOGUdOoZdQ26hh1jXpGfaOB0dBoZDQ2mhhNjWZGc6OF0dJoZbQ22hhtjXZGe6OD0dHoZHQ2uhhdjW5Gd6OH0dPoZfQ2+hh9jX5Gf2OAMdAYZAw2hhhDjWHGcGOEMdIYZYw2xhhjjXHGeGOCMdGYZEw2phhTjWnGdAMzcIMwSIMyaIMxWIMzeEMwREMyZEMxVEMzdMMwTMMybMMxXMMzfCMwQiMygAENZMTGDGOmMcuYbcwx5hrzjPnGAmOhschYbCwxlhrLjOXGCmOlscpYbawx1hrrjPXGBmOjscnYbGwxthrbjO3GDmOnscvYbewx9hr7jP3GAeOgccg4bBwxjhrHjOPGCeOkcco4bZwxzhrnjPPGBeOiccm4bFwxrhrXjOvGDeOmccu4bdwx7hr3jPvGA+Oh8ch4bDwxnhrPjOfGC+Ol8cp4bbwx3hrvjPfGB+Oj8cn4bHwxvhrfjO/GD+On8cv4bfwx/hr/jAQzkZnYTGImNf8zk5nJzRRmSjOVmdpMY6Y105npzQxmRjOTmdnMYmY1s5nZzRxmTjOXmdvMY+Y185n5zQJmQbOQWdgsYhY1i5nFzRJmSbOUWdosY5Y1y5nlzQpmRbOSWdmsYlY1q5nVzRpmTbOWWdusY9Y165n1zQZmQ7OR2dhsYjY1m5nNzRZmS7OV2dpsY7Y125ntzQ5mR7OT2dnsYnY1u5ndzR5mT7OX2dvsY/Y1+5n9zQHmQHOQOdgcYg41h5nDzRHmSHOUOdocY441x5njzQnmRHOSOdmcYk41p5nTTczETcIkTcqkTcZkTc7kTcEUTcmUTcVUTc3UTcM0Tcu0Tcd0Tc/0zcAMzcgEJjSRGZszzJnmLHO2Oceca84z55sLzIXmInOxucRcai4zl5srzJXmKnO1ucZca64z15sbzI3mJnOzucXcam4zt5s7zJ3mLnO3ucfca+4z95sHzIPmIfOwecQ8ah4zj5snzJPmKfO0ecY8a54zz5sXzIvmJfOyecW8al4zr5s3zJvmLfO2ece8a94z75sPzIfmI/Ox+cR8aj4zn5svzJfmK/O1+cZ8a74z35sfzI/mJ/Oz+cX8an4zv5s/zJ/mL/O3+cf8a/4zE6xEVmIriZXU+s9KZiW3UlgprVRWaiuNldZKZ6W3MlgZrUxWZiuLldXKZmW3clg5rVxWbiuPldfKZ+W3ClgFrUJWYauIVdQqZhW3SlglrVJWaauMVdYqZ5W3KlgVrUpWZauKVdWqZlW3alg1rVpWbauOVdeqZ9W3GlgNrUZWY6uJ1dRqZjW3WlgtrVZWa6uN1dZqZ7W3OlgdrU5WZ6uL1dXqZnW3elg9rV5Wb6uP1dfqZ/W3BlgDrUHWYGuINdQaZg23RlgjrVHWaGuMNdYaZ423JlgTrUnWZGuKNdWaZk23MAu3CIu0KIu2GIu1OIu3BEu0JEu2FEu1NEu3DMu0LMu2HMu1PMu3Aiu0IgtY0EJWbM2wZlqzrNnWHGuuNc+aby2wFlqLrMXWEmuptcxabq2wVlqrrNXWGmuttc5ab22wNlqbrM3WFmurtc3abu2wdlq7rN3WHmuvtc/abx2wDlqHrMPWEeuodcw6bp2wTlqnrNPWGeusdc46b12wLlqXrMvWFeuqdc26bt2wblq3rNvWHeuudc+6bz2wHlqPrMfWE+up9cx6br2wXlqvrNfWG+ut9c56b32wPlqfrM/WF+ur9c36bv2wflq/rN/WH+uv9c9KsBPZie0kdlL7PzuZndxOYae0U9mp7TR2Wjudnd7OYGe0M9mZ7Sx2Vjubnd3OYee0c9m57Tx2Xjufnd8uYBe0C9mF7SJ2UbuYXdwuYZe0S9ml7TJ2WbucXd6uYFe0K9mV7Sp2VbuaXd2uYde0a9m17Tp2XbueXd9uYDe0G9mN7SZ2U7uZ3dxuYbe0W9mt7TZ2W7ud3d7uYHe0O9md7S52V7ub3d3uYfe0e9m97T52X7uf3d8eYA+0B9mD7SH2UHuYPdweYY+0R9mj7TH2WHucPd6eYE+0J9mT7Sn2VHuaPd3GbNwmbNKmbNpmbNbmbN4WbNGWbNlWbNXWbN02bNO2bNt2bNf2bN8O7NCObGBDG9mxPcOeac+yZ9tz7Ln2PHu+vcBeaC+yF9tL7KX2Mnu5vcJeaa+yV9tr7LX2Onu9vcHeaG+yN9tb7K32Nnu7vcPeae+yd9t77L32Pnu/fcA+aB+yD9tH7KP2Mfu4fcI+aZ+yT9tn7LP2Ofu8fcG+aF+yL9tX7Kv2Nfu6fcO+ad+yb9t37Lv2Pfu+/cB+aD+yH9tP7Kf2M/u5/cJ+ab+yX9tv7Lf2O/u9/cH+aH+yP9tf7K/2N/u7/cP+af+yf9t/7L/2PzvBSeQkdpI4SZ3/nGROcieFk9JJ5aR20jhpnXROeieDk9HJ5GR2sjhZnWxOdieHk9PJ5eR28jh5nXxOfqeAU9Ap5BR2ijhFnWJOcaeEU9Ip5ZR2yjhlnXJOeaeCU9Gp5FR2qjhVnWpOdaeGU9Op5dR26jh1nXpOfaeB09Bp5DR2mjhNnWZOc6eF09Jp5bR22jhtnXZOe6eD09Hp5HR2ujhdnW5Od6eH09Pp5fR2+jh9nX5Of2eAM9AZ5Ax2hjhDnWHOcGeEM9IZ5Yx2xjhjnXHOeGeCM9GZ5Ex2pjhTnWnOdAdzcIdwSIdyaIdxWIdzeEdwREdyZEdxVEdzdMdwTMdybMdxXMdzfCdwQidygAMd5MTODGemM8uZ7cxx5jrznPnOAmehs8hZ7CxxljrLnOXOCmels8pZ7axx1jrrnPXOBmejs8nZ7GxxtjrbnO3ODmens8vZ7exx9jr7nP3OAeegc8g57BxxjjrHnOPOCeekc8o57ZxxzjrnnPPOBeeic8m57FxxrjrXnOvODeemc8u57dxx7jr3nPvOA+eh88h57DxxnjrPnOfOC+el88p57bxx3jrvnPfOB+ej88n57HxxvjrfnO/OD+en88v57fxx/jr/nAQ3kZvYTeImdRMSkrnJ3RRuSjeVm9pN46Z107np3QxuRjeTm9nN4mZ1s7nZ3RxuTjeXm9vN4+Z187n53QJuQbeQW9gt4hZ1i7nF3RJuSbeUW9ot45Z1y7nl3QpuRbeSW9mt4lZ1q7nV3RpuTbeWW9ut49Z167n13QZuQ7eR29ht4jZ1m7nN3RZuS7eV29pt47Z127nt3Q5uR7eT29nt4nZ1u7nd3R5uT7eX29vt4/Z1+7n93QHuQHeQO9gd4g51h7nD3RHuSHeUO9od4451x7nj3QnuRHeSO9md4k51p7nTXczFXcIlXcqlXcZlXc7lXcEVXcmVXcVVXc3VXcM1Xcu1Xcd1Xc/13cAN3cgFLnSRG7sz3JnuLHe2O8ed685z57sL3IXuInexu8Rd6i5zl7sr3JXuKne1u8Zd665z17sb3I3uJnezu8Xd6m5zt7s73J3uLne3u8fd6+5z97sH3IPuIfewe8Q96h5zj7sn3JPuKfe0e8Y9655zz7sX3IvuJfeye8W96l5zr7s33JvuLfe2e8e9695z77sP3IfuI/ex+8R96j5zn7sv3JfuK/e1+8Z9675z37sf3I/uJ/ez+8X96n5zv7s/3J/uL/e3+8f96/5zE7xEXmIviZfU+89L5iX3UngpvVReai+Nl9ZL56X3MngZvUxeZi+Ll9XL5mX3cng5vVxebi+Pl9fL5+X3CngFvUJe4URFvKJeMa+4V8Ir6ZXySntlvLJeOa+8V8Gr6FXyKntVvKpeNa+6V8Or6dXyant1vLpePa++18Br6DXyGntNvKZeM6+518Jr6bXyWnttvLZeO6+918Hr6HXyOntdvK5eN6+718Pr6fXyent9vL5eP6+/N8Ab6A3yBntDvKHeMG+4N8Ib6Y3yRntjvLHeOG+8N8Gb6E3yJntTvKneNG+6h3m4R3ikR3m0x3isx3m8J3iiJ3myp3iqp3m6Z3imZ3m253iu53m+F3ihF3nAgx7yYm+GN9Ob5c325nhzvXnefG+Bt9Bb5C32lnhLvWXecm+Ft9Jb5a321nhrvXXeem+Dt9Hb5G32tnhbvW3edm+Ht9Pb5e329nh7vX3efu+Ad9A75B32jnhHvWPece+Ed9I75Z32znhnvXPeee+Cd9G75F32rnhXvWvede+Gd9O75d327nh3vXvefe+B99B75D32nnhPvWfec++F99J75b323nhvvXfee++D99H75H32vnhfvW/ed++H99P75f32/nh/vX9egp/IT+wn8ZP6//nJ/OR+Cj+ln8pP7afx0/rp/PR+Bj+jn8nP7Gfxs/rZ/Ox+Dj+nn8vP7efx8/r5/Px+Ab+gX8gv7Bfxi/rF/OJ+Cb+kX8ov7Zfxy/rl/PJ+Bb+iX8mv7Ffxq/rV/Op+Db+mX8uv7dfx6/r1/Pp+g8QN/UZ+Y7+J39Rv5jf3W/gt/VZ+a7+N39Zv57f3O/gd/U5+Z7+L39Xv5nf3e/g9/V5+b7+P39fv5/f3B/gD/UH+YH+IP9Qf5g/3R/gj/VH+aH+MP9Yf54/3J/gT/Un+ZH+KP9Wf5k/3MR/3CZ/0KZ/2GZ/1OZ/3BV/0JV/2FV/1NV/3Dd/0Ld/2Hd/1Pd/3Az/0Ix/40Ed+7M/wZ/qz/Nn+HH+uP8+f7y/wF/qL/MX+En+pv8xf7q/wV/qr/NX+Gn+tv85f72/wN/qb/M3+Fn+rv83f7u/wd/q7/N3+Hn+vv8/f7x/wD/qH/MP+Ef+of8w/7p/wT/qn/NP+Gf+sf84/71/wL/qX/Mv+Ff+qf82/7t/wb/q3/Nv+Hf+uf8+/7z/wH/qP/Mf+E/+p/8x/7r/wX/qv/Nf+G/+t/85/73/wP/qf/M/+F/+r/83/7v/wf/q//N/+H/+v/89PCBIFiYMkQdLgvyBZkDxIEaQMUgWpgzRB2iBdkD7IEGQMMgWZgyxB1iBbkD3IEeQMcgW5gzxB3iBfkD8oEBQMCgWFgyJB0aBYUDwoEZQMSgWlgzJB2aBcUD6oEFQMKgWVgypB1aBaUD2oEdQMagW1gzpB3aBeUD9oEDQMGgWNgyZB06BZ0DxoEbQMWgWtgzZB26Bd0D7oEHQMOgWdgy5B16Bb0D3oEfQMegW9gz5B36Bf0D8YEAwMBgWDgyHB0GBYMDwYEYwMRgWjgzHB2GBcMD6YEEwMJgWTgynB1GBaMD3AAjwgAjKgAjpgAjbgAj4QAjGQAjlQAjXQAj0wAjOwAjtwAjfwAj8IgjCIAhDAAAVxMCOYGcwKZgdzgrnBvGB+sCBYGCwKFgdLgqXBsmB5sCJYGawKVgdrgrXBumB9sCHYGGwKNgdbgq3BtmB7sCPYGewKdgd7gr3BvmB/cCA4GBwKDgdHgqPBseB4cCI4GZwKTgdngrPBueB8cCG4GFwKLgdXgqvBteB6cCO4GdwKbgd3grvBveB+8CB4GDwKHgdPgqfBs+B58CJ4GbwKXgdvgrfBu+B98CH4GHwKPgdfgq/Bt+B78CP4GfwKfgd/gr/BvyAhTBQmDpOEScP/wmRh8jBFmDJMFaYO04Rpw3Rh+jBDmDHMFGYOs4RZw2xh9jBHmDPMFeYO84R5w3xh/rBAWDAsFBYOi4RFw2Jh8bBEWDIsFZYOy4Rlw3Jh+bBCWDGsFFYOq4RVw2ph9bBGWDOsFdYO64R1w3ph/bBB2DBsFDYOm4RNw2Zh87BF2DJsFbYO24Rtw3Zh+7BD2DHsFHYOu4Rdw25h97BH2DPsFfYO+4R9w35h/3BAODAcFA4Oh4RDw2Hh8HBEODIcFY4Ox4Rjw3Hh+HBCODGcFE4Op4RTw2nh9BAL8ZAIyZAK6ZAJ2ZAL+VAIxVAK5VAJ1VAL9dAIzdAK7dAJ3dAL/TAIwzAKQQhDFMbhjHBmOCucHc4J54bzwvnhgnBhuChcHC4Jl4bLwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4bbwu3hjnBnuCvcHe4J94b7wv3hgfBgeCg8HB4Jj4bHwuPhifBkeCo8HZ4Jz4bnwvPhhfBieCm8HF4Jr4bXwuvhjfBmeCu8Hd4J74b3wvvhg/Bh+Ch8HD4Jn4bPwufhi/Bl+Cp8Hb4J34bvwvfhh/Bj+Cn8HH4Jv4bfwu/hj/Bn+Cv8Hf4J/4b/woQoUZQ4ShIljf6LkkXJoxRRyihVlDpKE6WN0kXpowxRxihTlDnKEmWNskXZoxxRzihXlDvKE+WN8kX5owJRwahQVDgqEhWNikXFoxJRyahUVDoqE5WNykXlowpRxahSVDmqElWNqkXVoxpRzahWVDuqE9WN6kX1owZRw6hR1DhqEjWNmkXNoxZRy6hV1DpqE7WN2kXtow5Rx6hT1DnqEnWNukXdox5Rz6hX1DvqE/WN+kX9owHRwGhQNDgaEg2NhkXDoxHRyGhUNDoaE42NxkXjownRxGhSNDmaEk2NpkXTIyzCIyIiIyqiIyZiIy7iIyESIymSIyVSIy3SIyMyIyuyIydyIy/yoyAKoygCEYxQFEczopnRrGh2NCeaG82L5kcLooXRomhxtCRaGi2LlkcropXRqmh1tCZaG62L1kcboo3RpmhztCXaGm2Ltkc7op3Rrmh3tCfaG+2L9kcHooPRoehwdCQ6Gh2LjkcnopPRqeh0dCY6G52LzkcXoovRpehydCW6Gl2Lrkc3opvRreh2dCe6G92L7kcPoofRo+hx9CR6Gj2LnkcvopfRq+h19CZ6G72L3kcfoo/Rp+hz9CX6Gn2Lvkc/op/Rr+h39Cf6G/2LEkAikBgkAUnBfyAZSA5SgJQgFUgN0oC0IB1IDzKAjCATyAyygKwgG8gOcoCcIBfIDfKAvCAfyA8KgIKgECgMioCioBgoDkqAkqAUKA3KgLKgHCgPKoCKoBKoDKqAqqAaqA5qgJqgFqgN6oC6oB6oDxqAhqARaAyagKagGWgOWoCWoBVoDdqAtqAdaA86gI6gE+gMuoCuoBvoDnqAnqAX6A36gL6gH+gPBoCBYBAYDIaAoWAYGA5GgJFgFBgNxoCxYBwYDyaAiWASmAymgKlgGpgOMIADApCAAjRgAAs4wAMBiEACMlCACjSgAwOYwAI2cIALPOCDAIQgAgBAgEAMZoCZYBaYDeaAuWAemA8WgIVgEVgMloClYBlYDlaAlWAVWA3WgLVgHVgPNoCNYBPYDLaArWAb2A52gJ1gF9gN9oC9YB/YDw6Ag+AQOAyOgKPgGDgOToCT4BQ4Dc6As+AcOA8ugIvgErgMroCr4Bq4Dm6Am+AWuA3ugLvgHrgPHoCHIBF4DJ6Ap+AZeA5egJfgFXgN3oC34B14Dz6Aj+AT+Ay+gK/gG/gOfoCf4Bf4Df6Av+AfSICJYGKYBCaF/8FkMDlMAVPCVDA1TAPTwnQwPcwAM8JMMDPMArPCbDA7zAFzwlwwN8wD88J8MD8sAAvCQrAwLAKLwmKwOCwBS8JSsDQsA8vCcrA8rAArwkqwMqwCq8JqsDqsAWvCWrA2rAPrwnqwPmwAG8JGsDFsApvCZrA5bAFbwlawNWwD28J2sD3sADvCTrAz7AK7wm6wO+wBe8JesDfsA/vCfrA/HAAHwkFwMBwCh8JhcDgcAUfCUXA0HAPHwnFwPJwAJ8JJcDKcAqfCaXA6xCAOCUhCCtKQgSzkIA8FKEIJylCBKtSgDg1oQgva0IEu9KAPAxjCCAIIIYIxnAFnwllwNpwD58J5cD5cABfCRXAxXAKXwmVwOVwBV8JVcDVcA9fCdXA93AA3wk1wM9wCt8JtcDvcAXfCXXA33AP3wn1wPzwAD8JD8DA8Ao/CY/A4PAFPwlPwNDwDz8Jz8Dy8AC/CS/AyvAKvwmvwOrwBb8Jb8Da8A+/Ce/A+fAAfwkfwMXwCn8Jn8Dl8AV/CV/A1fAPfwnfwPfwAP8JP8DP8Ar/Cb/A7/AF/wl/wN/wD/8J/MAElQolREpQU/YeSoeQoBUqJUqHUKA1Ki9Kh9CgDyogyocwoC8qKsqHsKAfKiXKh3CgPyovyofyoACqICqHCqAgqioqh4qgEKolKodKoDCqLyqHyqAKqiCqhyqgKqoqqoeqoBqqJaqHaqA6qi+qh+qgBaogaocaoCWqKmqHmqAVqiVqh1qgNaovaofaoA+qIOqHOqAvqirqh7qgH6ol6od6oD+qL+qH+aAAaiAahwWgIGoqGoeFoBBqJRqHRaAwai8ah8WgCmogmocloCpqKpqHpCEM4IhCJKEQjBrGIQzwSkIgkJCMFqUhDOjKQiSxkIwe5yEM+ClCIIgQQRAjFaAaaiWah2WgOmovmofloAVqIFqHFaAlaipah5WgFWolWodVoDVqL1qH1aAPaiDahzWgL2oq2oe1oB9qJdqHdaA/ai/ah/egAOogOocPoCDqKjqHj6AQ6iU6h0+gMOovOofPoArqILqHL6Aq6iq6h6+gGuoluodvoDrqL7qH76AF6iB6hx+gJeoqeoefoBXqJXqHX6A16i96h9+gD+og+oc/oC/qKvqHv6Af6iX6h3+gP+ov+oYQ4UZw4ThInjf+Lk8XJ4xRxyjhVnDpOE6eN08Xp4wxxxjhTnDnOEmeNs8XZ4xxxzjhXnDvOE+eN88X54wJxwbhQXDguEheNi8XF4xJxybhUXDouE5eNy8Xl4wpxxbhSXDmuEleNq8XV4xpxzbhWXDuuE9eN68X14wZxw7hR3DhuEjeNm8XN4xZxy7hV3DpuE7eN28Xt4w5xx7hT3DnuEneNu8Xd4x5xz7hX3DvuE/eN+8X94wHxwHhQPDgeEg+Nh8XD4xHxyHhUPDoeE4+Nx8Xj4wnxxHhSPDmeEk+Np8XTYyzGYyImYyqmYyZmYy7mYyEWYymWYyVWYy3WYyM2Yyu2/ycAHgDFxgEAgM62bdu2fbNt2+afrdo2krSzbdu2rXvYOmw9tgHbiG3CNmNbsK3YNmw7hmE4RmAkRmE0xmAsxmE8JmAiJmEypmAqpmE6ZmAmZmE25mAu5mE+FmAhBjCIISzCYmwHthPbhe3G9mB7sX3YfuwAdhA7hB3GjmBHsWPYcewEdhI7hZ3GzmBnsXPYeewCdhG7hF3GrmBXsWvYdewGdhO7hd3G7mB3sXvYfewB9hB7hD3GnmBPsWfYc+wF9hJ7hb3G3mBvsXfYe+wD9hH7hH3GvmBfsW/Yd+wH9hP7hf3G/mB/sX9YIjwxngRPiifDk+Mp8JR4Kjw1ngZPi6fD0+MZ8Ix4JjwzngXPimfDs+M58Jx4Ljw3ngfPi+fD8+MF8IJ4IbwwXgQvihfDi+Ml8JJ4Kbw0XgYvi5fDy+MV8Ip4JbwyXgWvilfDq+M18Jp4Lbw2Xgevi9fD6+MN8IZ4I7wx3gRvijfDm+Mt8JZ4K7w13gZvi7fD2+MdUibCO+Kd8M54F7wr3g3vjvfAe+K98N54H7wv3g/vjw/AB+KD8MH4EHwoPgwfjo/AR+Kj8NH4GHwsPg4fj0/AJ+KT8Mn4FHwqPg2fjs/AZ+Kz8Nn4HHwuPg+fjy/AF+KL8MX4EnwpvgxPwJfjK/CV+Cp8Nb4GX4uvw9fjG/CN+CZ8M74F34pvw7fjGI7jBE7iFE7jDM7iHM7jAi7iEi7jCq7iGq7jBm7iFm7jDu7iHu7jAR7iAIc4wiM8xnfgO/Fd+G58D74X34fvxw/gB/FD+GH8CH4UP4Yfx0/gJ/FT+Gn8DH4WP4efxy/gF/FL+GX8Cn4Vv4Zfx2/gN/Fb+G38Dn4Xv4ffxx/gD/FH+GP8Cf4Uf4Y/x1/gL/FX+Gv8Df4Wf4e/xz/gH/FP+Gf8C/4V/4Z/x3/gP/Ff+G/8D/4X/4cnIhITSYikRDIiOZGCSEmkIlITaYi0RDoiPZGByEhkIjITWYisRDYiO5GDyEnkInITeYi8RD4iP1GAKEgUIgoTRYiiRDGiOFGCKEmUIkoTZYiyRDmiPFGBqEhUIioTVYiqRDWiOlGDqEnUImoTdYi6RD2iPtGAaEg0IhoTTYimRDOiOdGCaEm0IloTbYi2RDuiPdGB+I/oSHQiOhNdiK5EN6I70YPoSfQiehN9iL5EP6I/MYAYSAwiBhNDiKHEMGI4MYIYSYwiRhNjiLHEOGI8MYGYSEwiJhNTiKnENGI6MYOYScwiZhNziLnEPGI+sYBYSCwiFhNLiKXEMiKBWE6sIFYSq4jVxBpiLbGOWE9sIDYSm4jNxBZiK7GN2E5gBE4QBElQBE0wBEtwBE8IhEhIhEwohEpohE4YhElYhE04hEt4hE8EREgAAhKIiIiY2EHsJHYRu4k9xF5iH7GfOEAcJA4Rh4kjxFHiGHGcOEGcJE4Rp4kzxFniHHGeuEBcJC4Rl4krxFXiGnGduEHcJG4Rt4k7xF3iHnGfeEA8JB4Rj4knxFPiGfGceEG8JF4Rr4k3xFviHfGe+EB8JD4Rn4kvxFfiG/Gd+EH8JH4Rv4k/xF/iH5GITEwmIZOSycjkZAoyJZmKTE2mIdOS6cj0ZAYyI5mJzExmIbOS2cjsZA4yJ5mLzE3mIfOS+cj8ZAGyIFmILEwWIYuSxcjiZAmyJFmKLE2WIcuS5cjyZAWyIlmJrExWIauS1cjqZA2yJlmLrE3WIeuS9cj6ZAOyIdmIbEw2IZuSzcjmZAuyJdmKbE22IduS7cj2ZAfyP7Ij2YnsTHYhu5LdyO5kD7In2YvsTfYh+5L9yP7kAHIgOYgcTA4hh5LDyOHkCHIkOYocTY4hx5LjyPHkBHIiOYmcTE4hp5LTyOnkDHImOYucTc4h55LzyPnkAnIhuYhcTC4hl5LLyARyObmCXEmuIleTa8i15DpyPbmB3EhuIjeTW8it5DZyO4mROEmQJEmRNMmQLMmRPCmQIimRMqmQKqmROmmQJmmRNumQLumRPhmQIQlISCIyImNyB7mT3EXuJveQe8l95H7yAHmQPEQeJo+QR8lj5HHyBHmSPEWeJs+QZ8lz5HnyAnmRvEReJq+QV8lr5HXyBnmTvEXeJu+Qd8l75H3yAfmQfEQ+Jp+QT8ln5HPyBfmSfEW+Jt+Qb8l35HvyA/mR/ER+Jr+QX8lv5HfyB/mT/EX+Jv+Qf8l/ZCIqMZWESkolo5JTKaiUVCoqNZWGSkulo9JTGaiMVCYqM5WFykplo7JTOaicVC4qN5WHykvlo/JTBaiCVCGqMFWEKkoVo4pTJaiSVCmqNFWGKkuVo8pTFaiKVCWqMlWFqkpVo6pTNaiaVC2qNlWHqkvVo+pTDaiGVCOqMdWEako1o5pTLaiWVCuqNdWGaku1o9pTHaj/qI5UJ6oz1YXqSnWjulM9qJ5UL6o31YfqS/Wj+lMDqIHUIGowNYQaSg2jhlMjqJHUKGo0NYYaS42jxlMTqInUJGoyNYWaSk2jplMzqJnULGo2NYeaS82j5lMLqIXUImoxtYRaSi2jEqjl1ApqJbWKWk2todZS66j11AZqI7WJ2kxtobZS26jtFEbhFEGRFEXRFEOxFEfxlECJlETJlEKplEbplEGZlEXZlEO5lEf5VECFFKAghaiIiqkd1E5qF7Wb2kPtpfZR+6kD1EHqEHWYOkIdpY5Rx6kT1EnqFHWaOkOdpc5R56kL1EXqEnWZukJdpa5R16kb1E3qFnWbukPdpe5R96kH1EPqEfWYekI9pZ5Rz6kX1EvqFfWaekO9pd5R76kP1EfqE/WZ+kJ9pb5R36kf1E/qF/Wb+kP9pf5RiejEdBI6KZ2MTk6noFPSqejUdBo6LZ2OTk9noDPSmejMdBY6K52Nzk7noHPSuejcdB46L52Pzk8XoAvShejCdBG6KF2MLk6XoEvSpejSdBm6LF2OLk9XoCvSlejKdBW6Kl2Nrk7XoGvStejadB26Ll2Prk83oBvSjejGdBO6Kd2Mbk63oFvSrejWdBu6Ld2Obk93oP+jO9Kd6M50F7or3Y3uTvege9K96N50H7ov3Y/uTw+gB9KD6MH0EHooPYweTo+gR9Kj6NH0GHosPY4eT0+gJ9KT6Mn0FHoqPY2eTs+gZ9Kz6Nn0HHouPY+eTy+gF9KL6MX0EnopvYxOoJfTK+iV9Cp6Nb2GXkuvo9fTG+iN9CZ6M72F3kpvo7fTGI3TBE3SFE3TDM3SHM3TAi3SEi3TCq3SGq3TBm3SFm3TDu3SHu3TAR3SgIY0oiM6pnfQO+ld9G56D72X3kfvpw/QB+lD9GH6CH2UPkYfp0/QJ+lT9Gn6DH2WPkefpy/QF+lL9GX6Cn2VvkZfp2/QN+lb9G36Dn2Xvkffpx/QD+lH9GP6Cf2UfkY/p1/QL+lX9Gv6Df2Wfke/pz/QH+lP9Gf6C/2V/kZ/p3/QP+lf9G/6D/2X/kcnYhIzSZikTDImOZOCScmkYlIzaZi0TDomPZOBychkYjIzWZisTDYmO5ODycnkYnIzeZi8TD4mP1OAKcgUYgozRZiiTDGmOFOCKcmUYkozZZiyTDmmPFOBqchUYiozVZiqTDWmOlODqcnUYmozdZi6TD2mPtOAacg0YhozTZimTDOmOdOCacm0YlozbZi2TDumPdOB+Y/pyHRiOjNdmK5MN6Y704PpyfRiejN9mL5MP6Y/M4AZyAxiBjNDmKHMMGY4M4IZyYxiRjNjmLHMOGY8M4GZyExiJjNTmKnMNGY6M4OZycxiZjNzmLnMPGY+s4BZyCxiFjNLmKXMMiaBWc6sYFYyq5jVzBpmLbOOWc9sYDYym5jNzBZmK7ON2c5gDM4QDMlQDM0wDMtwDM8IjMhIjMwojMpojM4YjMlYjM04jMt4jM8ETMgABjKIiZiY2cHsZHYxu5k9zF5mH7OfOcAcZA4xh5kjzFHmGHOcOcGcZE4xp5kzzFnmHHOeucBcZC4xl5krzFXmGnOducHcZG4xt5k7zF3mHnOfecA8ZB4xj5knzFPmGfOcecG8ZF4xr5k3zFvmHfOe+cB8ZD4xn5kvzFfmG/Od+cH8ZH4xv5k/zF/mH5OITcwmYZOyydjkbAo2JZuKTc2mYdOy6dj0bAY2I5uJzcxmYbOy2djsbA42J5uLzc3mYfOy+dj8bAG2IFuILcwWYYuyxdjibAm2JFuKLc2WYcuy5djybAW2IluJrcxWYauy1djqbA22JluLrc3WYeuy9dj6bAO2IduIbcw2YZuyzdjmbAu2JduKbc22Yduy7dj2bAf2P7Yj24ntzHZhu7Ld2O5sD7Yn24vtzfZh+7L92P7sAHYgO4gdzA5hh7LD2OHsCHYkO4odzY5hx7Lj2PHsBHYiO4mdzE5hp7LT2OnsDHYmO4udzc5h57Lz2PnsAnYhu4hdzC5hl7LL2AR2ObuCXcmuYleza9i17Dp2PbuB3chuYjezW9it7DZ2O4uxOEuwJEuxNMuwLMuxPCuwIiuxMquwKquxOmuwJmuxNuuwLuuxPhuwIQtYyCI2YmN2B7uT3cXuZvewe9l97H72AHuQPcQeZo+wR9lj7HH2BHuSPcWeZs+wZ9lz7Hn2AnuRvcReZq+wV9lr7HX2BnuTvcXeZu+wd9l77H32AfuQfcQ+Zp+wT9ln7HP2BfuSfcW+Zt+wb9l37Hv2A/uR/cR+Zr+wX9lv7Hf2B/uT/cX+Zv+wf9l/bCIuMZeES8ol45JzKbiUXCouNZeGS8ul49JzGbiMXCYuM5eFy8pl47JzObicXC4uN5eHy8vl4/JzBbiCXCGuMFeEK8oV44pzJbiSXCmuNFeGK8uV48pzFbiKXCWuMleFq8pV46pzNbiaXC2uNleHq8vV4+pzDbiGXCOuMdeEa8o145pzLbiWXCuuNdeGa8u149pzHbj/uI5cJ64z14XrynXjunM9uJ5cL64314fry/Xj+nMDuIHcIG4wN4Qbyg3jhnMjuJHcKG40N4Yby43jxnMTuIncJG4yN4Wbyk3jpnMzuJncLG42N4eby83j5nMLuIXcIm4xt4Rbyi3jErjl3ApuJbeKW82t4dZy67j13AZuI7eJ28xt4bZy27jtHMbhHMGRHMXRHMOxHMfxnMCJnMTJnMKpnMbpnMGZnMXZnMO5nMf5XMCFHOAgh7iIi7kd3E5uF7eb28Pt5fZx+7kD3EHuEHeYO8Id5Y5xx7kT3EnuFHeaO8Od5c5x57kL3EXuEneZu8Jd5a5x17kb3E3uFnebu8Pd5e5x97kH3EPuEfeYe8I95Z5xz7kX3EvuFfeae8O95d5x77kP3EfuE/eZ+8J95b5x37kf3E/uF/eb+8P95f5xifjEfBI+KZ+MT86n4FPyqfjUfBo+LZ+OT89n4DPymfjMfBY+K5+Nz87n4HPyufjcfB4+L5+Pz88X4AvyhfjCfBG+KF+ML86X4EvypfjSfBm+LF+OL89X4CvylfjKfBW+Kl+Nr87X4GvytfjafB2+Ll+Pr8834BvyjfjGfBO+Kd+Mb8634FvyrfjWfBu+Ld+Ob8934P/jO/Kd+M58F74r343vzvfge/K9+N58H74v34/vzw/gB/KD+MH8EH4oP4wfzo/gR/Kj+NH8GH4sP44fz0/gJ/KT+Mn8FH4qP42fzs/gZ/Kz+Nn8HH4uP4+fzy/gF/KL+MX8En4pv4xP4JfzK/iV/Cp+Nb+GX8uv49fzG/iN/CZ+M7+F38pv47fzGI/zBE/yFE/zDM/yHM/zAi/yEi/zCq/yGq/zBm/yFm/zDu/yHu/zAR/ygIc84iM+5nfwO/ld/G5+D7+X38fv5w/wB/lD/GH+CH+UP8Yf50/wJ/lT/Gn+DH+WP8ef5y/wF/lL/GX+Cn+Vv8Zf52/wN/lb/G3+Dn+Xv8ff5x/wD/lH/GP+Cf+Uf8Y/51/wL/lX/Gv+Df+Wf8e/5z/wH/lP/Gf+C/+V/8Z/53/wP/lf/G/+D/+X/8cnEhILSYSkQjIhuZBCSCmkElILaYS0QjohvZBByChkEjILWYSsQjYhu5BDyCnkEnILeYS8Qj4hv1BAKCgUEgoLRYSiQjGhuFBCKCmUEkoLZYSyQjmhvFBBqChUEioLVYSqQjWhulBDqCnUEmoLdYS6Qj2hvtBAaCg0EhoLTYSmQjOhudBCaCm0EloLbYS2QjuhvdBB+E/oKHQSOgtdhK5CN6G70EPoKfQSegt9hL5CP6G/MEAYKAwSBgtDhKHCMGG4MEIYKYwSRgtjhLHCOGG8MEGYKEwSJgtThKnCNGG6MEOYKcwSZgtzhLnCPGG+sEBYKCwSFgtLhKXCMiFBWC6sEFYKq4TVwhphrbBOWC9sEDYKm4TNwhZhq7BN2C5gAi4QAilQAi0wAitwAi8IgihIgiwogipogi4YgilYgi04git4gi8EQigAAQpIiIRY2CHsFHYJu4U9wl5hn7BfOCAcFA4Jh4UjwlHhmHBcOCGcFE4Jp4UzwlnhnHBeuCBcFC4Jl4UrwlXhmnBduCHcFG4Jt4U7wl3hnnBfeCA8FB4Jj4UnwlPhmfBceCG8FF4Jr4U3wlvhnfBe+CB8FD4Jn4Uvwlfhm/Bd+CH8FH4Jv4U/wl/hn5BITCwmEZOKycTkYgoxpZhKTC2mEdOK6cT0YgYxo5hJzCxmEbOK2cTsYg4xp5hLzC3mEfOK+cT8YgGxoFhILCwWEYuKxcTiYgmxpFhKLC2WEcuK5cTyYgWxolhJrCxWEauK1cTqYg2xplhLrC3WEeuK9cT6YgOxodhIbCw2EZuKzcTmYguxpdhKbC22EduK7cT2YgfxP7Gj2EnsLHYRu4rdxO5iD7Gn2EvsLfYR+4r9xP7iAHGgOEgcLA4Rh4rDxOHiCHGkOEocLY4Rx4rjxPHiBHGiOEmcLE4Rp4rTxOniDHGmOEucLc4R54rzxPniAnGhuEhcLC4Rl4rLxARxubhCXCmuEleLa8S14jpxvbhB3ChuEjeLW8St4jZxu4iJuEiIpEiJtMiIrMiJvCiIoiiJsqiIqqiJumiIpmiJtuiIruiJvhiIoQhEKCIxEmNxh7hT3CXuFveIe8V94n7xgHhQPCQeFo+IR8Vj4nHxhHhSPCWeFs+IZ8Vz4nnxgnhRvCReFq+IV8Vr4nXxhnhTvCXeFu+Id8V74n3xgfhQfCQ+Fp+IT8Vn4nPxhfhSfCW+Ft+Ib8V34nvxg/hR/CR+Fr+IX8Vv4nfxh/hT/CX+Fv+If8V/YiIpsZRESiolk5JLKaSUUioptZRGSiulk9JLGaSMUiYps5RFyiplk7JLOaScUi4pt5RHyivlk/JLBaSCUiGpsFREKioVk4pLJaSSUimptFRGKiuVk8pLFaSKUiWpslRFqipVk6pLNaSaUi2ptlRHqivVk+pLDaSGUiOpsdREaio1k5pLLaSWUiuptdRGaiu1k9pLHaT/pI5SJ6mz1EXqKnWTuks9pJ5SL6m31EfqK/WT+ksDpIHSIGmwNEQaKg2ThksjpJHSKGm0NEYaK42TxksTpInSJGmyNEWaKk2TpkszpJnSLGm2NEeaK82T5ksLpIXSImmxtERaKi2TEqTl0gpppbRKWi2tkdZK66T10gZpo7RJ2ixtkbZK26TtEibhEiGREiXREiOxEifxkiCJkiTJkiKpkibpkiGZkiXZkiO5kif5UiCFEpCghKRIiqUd0k5pl7Rb2iPtlfZJ+6UD0kHpkHRYOiIdlY5Jx6UT0knplHRaOiOdlc5J56UL0kXpknRZuiJdla5J16Ub0k3plnRbuiPdle5J96UH0kPpkfRYeiI9lZ5Jz6UX0kvplfRaeiO9ld5J76UP0kfpk/RZ+iJ9lb5J36Uf0k/pl/Rb+iP9lf5JieTEchI5qZxMTi6nkFPKqeTUcho5rZxOTi9nkDPKmeTMchY5q5xNzi7nkHPKueTcch45r5xPzi8XkAvKheTCchG5qFxMLi6XkEvKpeTSchk5lVxOLi9XkCvKleTKchW5qlxNri7XkGvKteTach25rlxPri83kBvKjeTGchO5qdxMbi63kFvKreTWchu5rdxObi93kP+TO8qd5M5yF7mr3E3uLveQe8q95N5yH7mv3E/uLw+QB8qD5MHyEHmoPEweLo+QR8qj5NHyGHmsPE4eL0+QJ8qT5MnyFHmqPE2eLs+QZ8qz5NnyHHmuPE+eLy+QF8qL5MXyEnmpvExOkJfLK+SV8ip5tbxGXiuvk9fLG+SN8iZ5s7xF3ipvk7fLmIzLhEzKlEzLjMzKnMzLgizKkizLiqzKmqzLhmzKlmzLjuzKnuzLgRzKQIYykiM5lnfIO+Vd8m55j7xX3ifvlw/IB+VD8mH5iHxUPiYfl0/IJ+VT8mn5jHxWPiefly/IF+VL8mX5inxVviZfl2/IN+Vb8m35jnxXvifflx/ID+VH8mP5ifxUfiY/l1/IL+VX8mv5jfxWfie/lz/IH+VP8mf5i/xV/iZ/l3/IP+Vf8m/5j/xX/icnUhIrSZSkSjIluZJCSamkUlIraZS0SjolvZJByahkUjIrWZSsSjYlu5JDyankUnIreZS8Sj4lv1JAKagUUgorRZSiSjGluFJCKamUUkorZZSySjmlvFJBqahUUiorVZSqSjWlulJDqanUUmordZS6Sj2lvtJAaag0UhopTZQmSjOlmdJCaaG0UlopbZQ2SjulndJB6aB0VDoqnZXOSlelq9Jd6a70VHoqvZXeSl+lr9Jf6a8MVAYpg5XBylBlqDJcGa6MVEYqo5XRylhlrDJemaBMVCYpk5UpylRlmjJdmaHMVGYps5U5ylxlnjJfWaAsVBYqi5XFylJlqZKgJCgrlBXKKmWVskZZo6xT1ikblA3KJmWTskXZomxTtimYgiuEQiqUQiuMwiqcwiuCIiqSIiuKoiqaoiuGYiqWYiuO4iqe4iuBEipAgQpSIiVWdig7lV3KbmWPslfZp+xXDigHlUPKYeWIclQ5phxXTignlVPKaeWMclY5p5xXLigXlUvKZeWKclW5plxXbig3lVvKbeWOcle5p9xXHigPlUfKY+WJ8lR5pjxXXigvlVfKa+WN8lZ5p7xXPigflU/KZ+WL8lX5pnxXfig/lV/Kb+WP8lf5pyRSE6tJ1KRqMjW5mkJNqaZSU6tp1LRqOjW9mkHNqGZSM6tZ1KxqNjW7mkPNqeZSc6t51LxqPjW/WkAtqBZSC6tF1CJqMbWYWkItoZZSS6ll1DJqObWcWkGtoFZSK6tV1CpqNbWaWkOtodZSa6l11DpqPbWe2kBtoDZSG6lN1CZqM7WZ2kJtobZSW6lt1DZqO7Wd2kHtoHZUO6qd1c5qV7Wr2l3trvZUe6q91d5qX7Wv2l/trw5UB6qD1cHqUHWoOlwdro5UR6qj1dHqWHWsOl4dr05UJ6mT1SnqVHWaOl2doc5UZ6mz1DnqHHWeOl+dry5UF6qL1cXqUnWpmqAmqCvUleoqdbW6Wl2rrlPXqxvUjeomdbO6Rd2qblO3q5iKq4RKqpRKq4zKqpzKq4IqqpIqq4qqqpqqq4ZqqpZqq47qqp7qq4EaqkCFKlIjNVZ3qDvVXepudY+6V92n7lcPqAfVQ+ph9Yh6VD2mHldPqCfVU+pp9Yx6Vj2nnlcvqBfVS+pl9Yp6Vb2mXldvqDfVW+pt9Y56V72n3lcfqA/VR+pj9Yn6VH2mPldfqC/VV+pr9Y36Vn2nvlc/qB/VT+pn9Yv6Vf2mfld/qD/VX+pv9Y/6V/2nJtISa0m0pFoyLbmWQkuppdJSa2m0tFo6Lb2WQcuoZdIya1m0rFo2LbuWQ8up5dJya3m0vFo+Lb9WQCuoFdIKa0W0oloxrbhWQiupldJKa2W0slo5rbxWQauoVdIqa1W0qlo1rbpWQ6up1dJqa3W0ulo9rb7WQGuoNdIaa020plozrbnWQmuptdJaa220tlo7rb3WQftP66h10jprXbSuWjetu9ZD66n10nprfbS+Wj+tvzZAG6gN0gZrQ7Sh2jBtuDZCG6mN0kZrY7Sx2jhtvDZBm6hN0iZrU7Sp2jRtujZDm6nN0mZrc7S52jxtvrZAW6gt0hZrS7Sl2jItQVuurdBWaqu01doaba22TluvbdA2apu0zdoWbau2TduuYRquERqpURqtMRqrcRqvCZqoSZqsKZqqaZquGZqpWZqtOZqreZqvBVqoAQ1qSIu0WNuh7dR2abu1PdpebZ+2XzugHdQOaYe1I9pR7Zh2XDuhndROaae1M9pZ7Zx2XrugXdQuaZe1K9pV7Zp2Xbuh3dRuabe1O9pd7Z52X3ugPdQeaY+1J9pT7Zn2XHuhvdReaa+1N9pb7Z32XvugfdQ+aZ+1L9pX7Zv2Xfuh/dR+ab+1P9pf7Z+WSE+sJ9GT6sn05HoKPaWeSk+tp9HT6un09HoGPaOeSc+sZ9Gz6tn07HoOPaeeS8+t59Hz6vn0/HoBvaBeSC+sF9GL6sX04noJvaReSi+tl9HL6uX08noFvaJeSa+sV9Gr6tX06noNvaZeS6+t19Hr6vX0+noDvaHeSG+sN9Gb6s305noLvaXeSm+tt9Hb6u309noH/T+9o95J76x30bvq3fTueg+9p95L76330fvq/fT++gB9oD5IH6wP0Yfqw/Th+gh9pD5KH62P0cfq4/Tx+gR9oj5Jn6xP0afq0/Tp+gx9pj5Ln63P0efq8/T5+gJ9ob5IX6wv0Zfqy/QEfbm+Ql+pr9JX62v0tfo6fb2+Qd+ob9I361v0rfo2fbuO6bhO6KRO6bTO6KzO6bwu6KIu6bKu6Kqu6bpu6KZu6bbu6K7u6b4e6KEOdKgjPdJjfYe+U9+l79b36Hv1ffp+/YB+UD+kH9aP6Ef1Y/px/YR+Uj+ln9bP6Gf1c/p5/YJ+Ub+kX9av6Ff1a/p1/YZ+U7+l39bv6Hf1e/p9/YH+UH+kP9af6E/1Z/pz/YX+Un+lv9bf6G/1d/p7/YP+Uf+kf9a/6F/1b/p3/Yf+U/+l/9b/6H/1f3oiI7GRxEhqJDOSGymMlEYqI7WRxkhrpDPSGxmMjEYmI7ORxchqZDOyGzmMnEYuI7eRx8hr5DPyGwWMgkYho7BRxChqFDOKGyWMkkYpo7RRxihrlDPKGxWMikYlo7JRxahqVDOqGzWMmkYto7ZRx6hr1DPqGw2MhkYjo7HRxGhqNDOaGy2MlkYro7XRxmhrtDPaGx2M/4yORiejs9HF6Gp0M7obPYyeRi+jt9HH6Gv0M/obA4yBxiBjsDHEGGoMM4YbI4yRxihjtDHGGGuMM8YbE4yJxiRjsjHFmGpMM6YbM4yZxixjtjHHmGvMM+YbC4yFxiJjsbHEWGosMxKM5cYKY6WxylhtrDHWGuuM9cYGY6OxydhsbDG2GtuM7QZm4AZhkAZl0AZjsAZn8IZgiIZkyIZiqIZm6IZhmIZl2IZjuIZn+EZghAYwoIGMyIiNHcZOY5ex29hj7DX2GfuNA8ZB45Bx2DhiHDWOGceNE8ZJ45Rx2jhjnDXOGeeNC8ZF45Jx2bhiXDWuGdeNG8ZN45Zx27hj3DXuGfeNB8ZD45Hx2HhiPDWeGc+NF8ZL45Xx2nhjvDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx2/hj/DX+GYnMxGYSM6mZzExupjBTmqnM1GYaM62ZzkxvZjAzmpnMzGYWM6uZzcxu5jBzmrnM3GYeM6+Zz8xvFjALmoXMwmYRs6hZzCxuljBLmqXM0mYZs6xZzixvVjArmpXMymYVs6pZzaxu1jBrmrXM2mYds65Zz6xvNjAbmo3MxmYTs6nZzGxutjBbmq3M1mYbs63ZzmxvdjD/MzuanczOZhezq9nN7G72MHuavczeZh+zr9nP7G8OMAeag8zB5hBzqDnMHG6OMEeao8zR5hhzrDnOHG9OMCeak8zJ5hRzqjnNnG7OMGeas8zZ5hxzrjnPnG8uMBeai8zF5hJzqbnMTDCXmyvMleYqc7W5xlxrrjPXmxvMjeYmc7O5xdxqbjO3m5iJm4RJmpRJm4zJmpzJm4IpmpIpm4qpmpqpm4ZpmpZpm47pmp7pm4EZmsCEJjIjMzZ3mDvNXeZuc4+519xn7jcPmAfNQ+Zh84h51DxmHjdPmCfNU+Zp84x51jxnnjcvmBfNS+Zl84p51bxmXjdvmDfNW+Zt845517xn3jcfmA/NR+Zj84n51HxmPjdfmC/NV+Zr84351nxnvjc/mB/NT+Zn84v51fxmfjd/mD/NX+Zv84/51/xnJrISW0mspFYyK7mVwkpppbJSW2mstFY6K72VwcpoZbIyW1msrFY2K7uVw8pp5bJyW3msvFY+K79VwCpoFbIKW0WsolYxq7hVwipplbJKW2WsslY5q7xVwapoVbIqW1WsqlY1q7pVw6pp1bJqW3WsulY9q77VwGpoNbIaW02splYzq7nVwmpptbJaW22stlY7q73VwfrP6mh1sjpbXayuVjeru9XD6mn1snpbfay+Vj+rvzXAGmgNsgZbQ6yh1jBruDXCGmmNskZbY6yx1jhrvDXBmmhNsiZbU6yp1jRrujXDmmnNsmZbc6y51jxrvrXAWmgtshZbS6yl1jIrwVpurbBWWqus1dYaa621zlpvbbA2WpuszdYWa6u1zdpuYRZuERZpURZtMRZrcRZvCZZoSZZsKZZqaZZuGZZpWZZtOZZreZZvBVZoAQtayIqs2Nph7bR2WbutPdZea5+13zpgHbQOWYetI9ZR65h13DphnbROWaetM9ZZ65x13rpgXbQuWZetK9ZV65p13bph3bRuWbetO9Zd655133pgPbQeWY+tJ9ZT65n13HphvbReWa+tN9Zb65313vpgfbQ+WZ+tL9ZX65v13fph/bR+Wb+tP9Zf65+VyE5sJ7GT2sns5HYKO6Wdyk5tp7HT2uns9HYGO6Odyc5sZ7Gz2tns7HYOO6edy85t57Hz2vns/HYBu6BdyC5sF7GL2sXs4nYJu6Rdyi5tl7HL2uXs8nYFu6Jdya5sV7Gr2tXs6nYNu6Zdy65t17Hr2vXs+nYDu6HdyG5sN7Gb2s3s5nYLu6Xdym5tt7Hb2u3s9nYH+z+7o93J7mx3sbva3ezudg+7p93L7m33sfva/ez+9gB7oD3IHmwPsYfaw+zh9gh7pD3KHm2Pscfa4+zx9gR7oj3JnmxPsafa0+zp9gx7pj3Lnm3Psefa8+z59gJ7ob3IXmwvsZfay+wEe7m9wl5pr7JX22vstfY6e729wd5ob7I321vsrfY2e7uN2bhN2KRN2bTN2KzN2bwt2KIt2bKt2Kqt2bpt2KZt2bbt2K7t2b4d2KENbGgjO7Jje4e9095l77b32HvtffZ++4B90D5kH7aP2EftY/Zx+4R90j5ln7bP2Gftc/Z5+4J90b5kX7av2Ffta/Z1+4Z9075l37bv2Hfte/Z9+4H90H5kP7af2E/tZ/Zz+4X90n5lv7bf2G/td/Z7+4P90f5kf7a/2F/tb/Z3+4f90/5l/7b/2H/tf3YiJ7GTxEnqJHOSOymclE4qJ7WTxknrpHPSOxmcjE4mJ7OTxcnqZHOyOzmcnE4uJ7eTx8nr5HPyOwWcgk4hp7BTxCnqFHOKOyWckk4pp7RTxinrlHPKOxWcik4lp7JTxanqVHOqOzWcmk4tp7ZTx6nr1HPqOw2chk4jp7HTxGnqNHOaOy2clk4rp7XTxmnrtHPaOx2c/5yOTiens9PF6ep0c7o7PZyeTi+nt9PH6ev0c/o7A5yBziBnsDPEGeoMc4Y7I5yRzihntDPGGeuMc8Y7E5yJziRnsjPFmepMc6Y7M5yZzixntjPHmevMc+Y7C5yFziJnsbPEWeoscxKc5c4KZ6WzylntrHHWOuuc9c4GZ6OzydnsbHG2Otuc7Q7m4A7hkA7l0A7jsA7n8I7giI7kyI7iqI7m6I7hmI7l2I7juI7n+E7ghA5woIOcyImdHc5OZ5ez29nj7HX2OfudA85B55Bz2DniHHWOOcedE85J55Rz2jnjnHXOOeedC85F55Jz2bniXHWuOdedG85N55Zz27nj3HXuOfedB85D55Hz2HniPHWeOc+dF85L55Xz2nnjvHXeOe+dD85H55Pz2fnifHW+Od+dH85P55fz2/nj/HX+OYncxG4SN6mbzE3upnBTuqnc1G4aN62bzk3vZnAzupnczG4WN6ubzc3u5nBzurnc3G4eN6+bz83vFnALuoXcwm4Rt6hbzC3ulnBLuqXc0m4Zt6xbzi3vVnArupXcym4Vt6pbza3u1nBrurXc2m4dt65bz63vNnAbuo3cxm4Tt6nbzG3utnBbuq3c1m4bt63bzm3vdnD/czu6ndzObhe3q9vN7e72cHu6vdzebh+3r9vP7e8OcAe6g9zB7hB3qDvMHe6OcEe6o9zR7hh3rDvOHe9OcCe6k9zJ7hR3qjvNne7OcGe6s9zZ7hx3rjvPne8ucBe6i9zF7hJ3qbvMTXCXuyvcle4qd7W7xl3rrnPXuxvcje4md7O7xd3qbnO3u5iLu4RLupRLu4zLupzLu4IrupIru4qrupqru4ZrupZru47rup7ru4EbusCFLnIjN3Z3uDvdXe5ud4+7193n7ncPuAfdQ+5h94h71D3mHndPuCfdU+5p94x71j3nnncvuBfdS+5l94p71b3mXndvuDfdW+5t9457173n3ncfuA/dR+5j94n71H3mPndfuC/dV+5r94371n3nvnc/uB/dT+5n94v71f3mfnd/uD/dX+5v94/71/3nJvISe0m8pF4yL7mXwkvppfJSe2m8tF46L72XwcvoZfIye1m8rF42L7uXw8vp5fJye3m8vF4+L79XwCvoFfIKe0W8ol4xr7hXwivplfJKe2W8sl45r7xXwavoVfIqe1W8ql41r7pXw6vp1fJqe3W8ul49r77XwGvoNfIae028pl4zr7nXwmvptfJae228tl47r73XwfvP6+h18jp7XbyuXjevu9fD6+n18np7fby+Xj+vvzfAG+gN8gZ7Q7yh3jBvuDfCG+mN8kZ7Y7yx3jhvvDfBm+hN8iZ7U7yp3jRvujfDm+nN8mZ7c7y53jxvvrfAW+gt8hZ7S7yl3jIvwVvurfBWequ81d4ab623zlvvbfA2epu8zd4Wb6u3zdvuYR7uER7pUR7tMR7rcR7vCZ7oSZ7sKZ7qaZ7uGZ7pWZ7tOZ7reZ7vBV7oAQ96yIu82Nvh7fR2ebu9Pd5eb5+33zvgHfQOeYe9I95R75h33DvhnfROeae9M95Z75x33rvgXfQueZe9K95V75p33bvh3fRuebe9O95d755333vgPfQeeY+9J95T75n33HvhvfReea+9N95b75333vvgffQ+eZ+9L95X75v33fvh/fR+eb+9P95f75+XyE/sJ/GT+sn85H4KP6Wfyk/tp/HT+un89H4GP6Ofyc/sZ/Gz+tn87H4OP6efy8/t5/Hz+vn8/H4Bv6BfyC/sF/GL+sX84n4Jv6Rfyi/tl/HL+uX88n4Fv6Jfya/sV/Gr+tX86n4Nv6Zfy6/t1/Hr+vX8+n4Dv6HfyG/sN/Gb+s385n4Lv6Xfym/tt/Hb+u389n4H/z+/o9/J7+x38bv63fzufg+/p9/L7+338fv6/fz+/gB/oD/IH+wP8Yf6w/zh/gh/pD/KH+2P8cf64/zx/gR/oj/Jn+xP8af60/zp/gx/pj/Ln+3P8ef68/z5/gJ/ob/IX+wv8Zf6y/wEf7m/wl/pr/JX+2v8tf46f72/wd/ob/I3+1v8rf42f7uP+bhP+KRP+bTP+KzP+bwv+KIv+bKv+Kqv+bpv+KZv+bbv+K7v+b4f+KEPfOgjP/Jjf4e/09/l7/b3+Hv9ff5+/4B/0D/kH/aP+Ef9Y/5x/4R/0j/ln/bP+Gf9c/55/4J/0b/kX/av+Ff9a/51/4Z/07/l3/bv+Hf9e/59/4H/0H/kP/af+E/9Z/5z/4X/0n/lv/bf+G/9d/57/4P/0f/kf/a/+F/9b/53/4f/0//l//b/+H/9f36iIHGQJEgaJAuSBymClEGqIHWQJkgbpAvSBxmCjEGmIHOQJcgaZAuyBzmCnEGuIHeQJ8gb5AvyBwWCgkGhoHBQJCgaFAuKByWCkkGpoHRQJigblAvKBxWCikGloHJQJagaVAuqBzWCmkGtoHZQJ6gb1AvqBw2ChkGjoHHQJGgaNAuaBy2ClkGroHXQJmgbtAvaBx2C/4KOQaegc9Al6Bp0C7oHPYKeQa+gd9An6Bv0C/oHA4KBwaBgcDAkGBoMC4YHI4KRwahgdDAmGBuMC8YHE4KJwaRgcjAlmBpMC6YHM4KZwaxgdjAnmBvMC+YHC4KFwaJgcbAkWBosCxKC5cGKYGWwKlgdrAnWBuuC9cGGYGOwKdgcbAm2BtuC7QEW4AERkAEV0AETsAEX8IEQiIEUyIESqIEW6IERmIEV2IETuIEX+EEQhAEIYICCKIiDHcHOYFewO9gT7A32BfuDA8HB4FBwODgSHA2OBceDE8HJ4FRwOjgTnA3OBeeDC8HF4FJwObgSXA2uBdeDG8HN4FZwO7gT3A3uBfeDB8HD4FHwOHgSPA2eBc+DF8HL4FXwOngTvA3eBe+DD8HH4FPwOfgSfA2+Bd+DH8HP4FfwO/gT/A3+BYnCxGGSMGmYLEwepghThqnC1GGaMG2YLkwfZggzhpnCzGGWMGuYLcwe5ghzhrnC3GGeMG+YL8wfFggLhoXCwmGRsGhYLCwelghLhqXC0mGZsGxYLiwfVggrhpXCymGVsGpYLawe1ghrhrXC2mGdsG5YL6wfNggbho3CxmGTsGnYLGwetghbhq3C1mGbsG3YLmwfdgj/CzuGncLOYZewa9gt7B72CHuGvcLeYZ+wb9gv7B8OCAeGg8LB4ZBwaDgsHB6OCEeGo8LR4ZhwbDguHB9OCCeGk8LJ4ZRwajgtnB7OCGeGs8LZ4ZxwbjgvnB8uCBeGi8LF4ZJwabgsTAiXhyvCleGqcHW4JlwbrgvXhxvCjeGmcHO4Jdwabgu3h1iIh0RIhlRIh0zIhlzIh0IohlIoh0qohlqoh0ZohlZoh07ohl7oh0EYhiCEIQqjMA53hDvDXeHucE+4N9wX7g8PhAfDQ+Hh8Eh4NDwWHg9PhCfDU+Hp8Ex4NjwXng8vhBfDS+Hl8Ep4NbwWXg9vhDfDW+Ht8E54N7wX3g8fhA/DR+Hj8En4NHwWPg9fhC/DV+Hr8E34NnwXvg8/hB/DT+Hn8Ev4NfwWfg9/hD/DX+Hv8E/4N/wXJgKJQRKQFCQDyUEKkBKkAqlBGpAWpAPpQQaQEWQCmUEWkBVkA9lBDpAT5AK5QR6QF+QD+UEBUBAUAoVBEVAUFAPFQQlQEpQCpUEZUBaUA+VBBVARVAKVQRVQFVQD1UENUBPUArVBHVAX1AP1QQPQEDQCjUET0BQ0A81BC9AStAKtQRvQFrQD7UEH8B/oCDqBzqAL6Aq6ge6gB+gJeoHeoA/oC/qB/mAAGAgGgcFgCBgKhoHhYAQYCUaB0WAMGAvGgfFgApgIJoHJYAqYCqaB6WAGmAlmgdlgDpgL5oH5YAFYCBaBxWAJWAqWgQSwHKwAK8EqsBqsAWvBOrAebAAbwSawGWwBW8E2sB1gAAcEIAEFaMAAFnCABwIQgQRkoAAVaEAHBjCBBWzgABd4wAcBCAEAECAQgRjsADvBLrAb7AF7wT6wHxwAB8EhcBgcAUfBMXAcnAAnwSlwGpwBZ8E5cB5cABfBJXAZXAFXwTVwHdwAN8EtcBvcAXfBPXAfPAAPwSPwGDwBT8Ez8By8AC/BK/AavAFvwTvwHnwAH8En8Bl8AV/BN/Ad/AA/wS/wG/wBf8E/kAgmhklgUpgMJocpYEqYCqaGaWBamA6mhxlgRpgJZoZZYFaYDWaHOWBOmAvmhnlgXpgP5ocFYEFYCBaGRWBRWAwWhyVgSVgKloZlYFlYDpaHFWBFWAlWhlVgVVgNVoc1YE1YC9aGdWBdWA/Whw1gQ9gINoZNYFPYDDaHLWBL2Aq2hm1gW9gOtocd4H+wI+wEO8MusCvsBrvDHrAn7AV7wz6wL+wH+8MBcCAcBAfDIXAoHAaHwxFwJBwFR8MxcCwcB8fDCXAinAQnwylwKpwGp8MZcCacBWfDOXAunAfnwwVwIVwEF8MlcClcBhPgcrgCroSr4Gq4Bq6F6+B6uAFuhJvgZrgFboXb4HaIQRwSkIQUpCEDWchBHgpQhBKUoQJVqEEdGtCEFrShA13oQR8GMIQAQohgBGO4A+6Eu+BuuAfuhfvgfngAHoSH4GF4BB6Fx+BxeAKehKfgaXgGnoXn4Hl4AV6El+BleAVehdfgdXgD3oS34G14B96F9+B9+AA+hI/gY/gEPoXP4HP4Ar6Er+Br+Aa+he/ge/gBfoSf4Gf4BX6F3+B3+AP+hL/gb/gH/oX/YCKUGCVBSVEylBylQClRKpQapUFpUTqUHmVAGVEmlBllQVlRNpQd5UA5US6UG+VBeVE+lB8VQAVRIVQYFUFFUTFUHJVAJVEpVBqVQWVROVQeVUAVUSVUGVVBVVE1VB3VQDVRLVQb1UF1UT1UHzVADVEj1Bg1QU1RM9QctUAtUSvUGrVBbVE71B51QP+hjqgT6oy6oK6oG+qOeqCeqBfqjfqgvqgf6o8GoIFoEBqMhqChaBgajkagkWgUGo3GoLFoHBqPJqCJaBKajKagqWgamo5moJloFpqN5qC5aB6ajxaghWgRWoyWoKVoGUpAy9EKtBKtQqvRGrQWrUPr0Qa0EW1Cm9EWtBVtQ9sRhnBEIBJRiEYMYhGHeCQgEUlIRgpSkYZ0ZCATWchGDnKRh3wUoBABBBFCEYrRDrQT7UK70R60F+1D+9EBdBAdQofREXQUHUPH0Ql0Ep1Cp9EZdBadQ+fRBXQRXUKX0RV0FV1D19ENdBPdQrfRHXQX3UP30QP0ED1Cj9ET9BQ9Q8/RC/QSvUKv0Rv0Fr1D79EH9BF9Qp/RF/QVfUPf0Q/0E/1Cv9Ef9Bf9Q4mixFGSKGmULEoepYhSRqmi1FGaKG2ULkofZYgyRpmizFGWKGuULcoe5YhyRrmi3FGeKG+UL8ofFYgKRoWiwlGRqGhULCoelYhKRqWi0lGZqGxULiofVYgqRpWiylGVqGpULaoe1YhqRrWi2lGdqG5UL6ofNYgaRo2ixlGTqGnULGoetYhaRq2i1lGbqG3ULmofdYj+izpGnaLOUZeoa9Qt6h71iHpGvaLeUZ+ob9Qv6h8NiAZGg6LB0ZBoaDQsGh6NiEZGo6LR0ZhobDQuGh9NiCZGk6LJ0ZRoajQtmh7NiGZGs6LZ0ZxobjQvmh8tiBZGi6LF0ZJoabQsSoiWRyuildGqaHW0JlobrYvWRxuijdGmaHO0JdoabYu2R1iER0RERlRER0zERlzER0IkRlIkR0qkRlqkR0ZkRlZkR07kRl7kR0EURiCCEYqiKI52RDujXdHuaE+0N9oX7Y8ORAejQ9Hh6Eh0NDoWHY9ORCejU9Hp6Ex0NjoXnY8uRBejS9Hl6Ep0NboWXY9uRDejW9Ht6E50N7oX3Y8eRA+jR9Hj6En0NHoWPY9eRC+jV9Hr6E30NnoXvY8+RB+jT9Hn6Ev0NfoWfY9+JE4U/Yp+R3+iv9G/KFGcOE4SJ42TxcnjFHHKOFWcOk4Tp43TxenjDHHGOFOcOc4SZ42zxdnjHHHOOFecO84T543zxfnjAnHBuFBcOC4SF42LxcXjEnHJuFRcOi4Tl43LxeXjCnHFuFJcOa4SV42rxdXjGnHNuFZcO64T143rxfXjBnHDuFHcOG4SN42bxc3jFnHLuFXcOm4Tt43bxe3jDvF/cce4U9w57hJ3jbvF3eMecc+4V9w77hP3jfvF/eMB8cB4UDw4HhIPjYfFw+MR8ch4VDw6HhOPjcfF4+MJ8cR4Ujw5nhJPjafF0+MZ8cx4Vjw7nhPPjefF8+MF8cJ4Ubw4XhIvjZfFCfHyeEW8Ml4Vr47XxGv/JwAeAIZWAgAA92fbNl62bdu2bdu2bbtm29vddsu27Xoftg5bj23ANmKbsM3YFmwrtg3bju3AdmK7sN3YHmwvtg/bjx3ADmKHsMPYEewodgw7jp3ATmKnsNPYGewsdg47j13ALmKXsMvYFewqdg27jmEYjhEYiVEYjTEYi3EYjwmYiEmYjCmYimmYjhmYiVmYjTmYi3mYjwUYwCAWYhGGsBi7gd3EbmG3sTvYXewedh97gD3EHmGPsSfYU+wZ9hx7gb3EXmGvsTfYW+wd9h77gH3EPmGfsS/YV+wb9h37gf3EfmG/sT/YX+wflghPwBPjSfCkeDI8OZ4CT4mnwlPjafC0eDo8PZ4Bz4hnwjPjWfCseDY8O54Dz4nnwnPjefC8eD48P14AL4gXwgvjRfCieDG8OF4CL4mXwv/DS+Nl8LJ4Obw8XgGviFfCK+NV8Kp4Nbw6XgOvidfCa+N18Lp4Pbw+3gBviDfCG+NN8KZ4M7w53gJvibfCW+Nt8LZ4O7w93gHviHfCO+Nd8K54N7w73gPviffCe+N98L54P7w/PgAfiA/CB+ND8KH4MHw4PgIfiY/CR+Nj8LH4OHw8PgGfiE/CJ+NT8Kn4NHw6PgOfic/CZ+Nz8Ln4PHw+vgBfiC/CF+NL8KX4Mnw5vgJfia/CV+Nr8LX4Onw9vgHfiG/CN+Nb8K34Nnw7vgPfie/Cd+N78L34Pnw/fgA/iB/CD+NH8KP4Mfw4fgI/iZ/CT+Nn8LP4Ofw8fgG/iF/CL+NX8Kv4Nfw6juE4TuAkTuE0zuAszuE8LuAiLuEyruAqruE6buAmbuE27uAu7uE+HuAAh3iIRzjCY/wGfhO/hd/G7+B38Xv4ffwB/hB/hD/Gn+BP8Wf4c/wF/hJ/hb/G3+Bv8Xf4e/wD/hH/hH/Gv+Bf8W/4d/wH/hP/hf/G/+B/8X94IiKBSEwkIZISyYjkRAoiJZGKSE2kIdIS6Yj0RAYiI5GJyExkIbIS2YjsRA4iJ5GLyE3kIfIS+Yj8RAGiIFGIKEwUIYoSxYjiRAmiJFGK+I8oTZQhyhLliPJEBaIiUYmoTFQhqhLViOpEDaImUYuoTdQh6hL1iPpEA6Ih0YhoTDQhmhLNiOZEC6Il0YpoTbQh2hLtiPZEB6Ij0YnoTHQhuhLdiO5ED6In0YvoTfQh+hL9iP7EAGIgMYgYTAwhhhLDiOHECGIkMYoYTYwhxhLjiPHEBGIiMYmYTEwhphLTiOnEDGImMYuYTcwh5hLziPnEAmIhsYhYTCwhlhLLiOXECmIlsYpYTawh1hLriPXEBmIjsYnYTGwhthLbiO3EDmInsYvYTewh9hL7iP3EAeIgcYg4TBwhjhLHiOPECeIkcYo4TZwhzhLniPPEBeIicYm4TFwhrhLXiOsERuAEQZAERdAEQ7AER/CEQIiERMiEQqiERuiEQZiERdiEQ7iER/hEQAACEiEREYiIiRvETeIWcZu4Q9wl7hH3iQfEQ+IR8Zh4QjwlnhHPiRfES+IV8Zp4Q7wl3hHviQ/ER+IT8Zn4QnwlvhHfiR/ET+IX8Zv4Q/wl/hGJyAQyMZmETEomI5OTKciUZCoyNZmGTEumI9OTGciMZCYyM5mFzEpmI7OTOcicZC4yN5mHzEvmI/OTBciCZCGyMFmELEoWI4uTJciSZCnyP7I0WYYsS5Yjy5MVyIpkJbIyWYWsSlYjq5M1yJpkLbI2WYesS9Yj65MNyIZkI7Ix2YRsSjYjm5MtyJZkK7I12YZsS7Yj25MdyI5kJ7Iz2YXsSnYju5M9yJ5kL7I32YfsS/Yj+5MDyIHkIHIwOYQcSg4jh5MjyJHkKHI0OYYcS44jx5MTyInkJHIyOYWcSk4jp5MzyJnkLHI2OYecS84j55MLyIXkInIxuYRcSi4jl5MryJXkKnI1uYZcS64j15MbyI3kJnIzuYXcSm4jt5M7yJ3kLnI3uYfcS+4j95MHyIPkIfIweYQ8Sh4jj5MnyJPkKfI0eYY8S54jz5MXyIvkJfIyeYW8Sl4jr5MYiZMESZIUSZMMyZIcyZMCKZISKZMKqZIaqZMGaZIWaZMO6ZIe6ZMBCUhIhmREIjImb5A3yVvkbfIOeZe8R94nH5APyUfkY/IJ+ZR8Rj4nX5AvyVfka/IN+ZZ8R74nP5AfyU/kZ/IL+ZX8Rn4nf5A/yV/kb/IP+Zf8RyaiEqjEVBIqKZWMSk6loFJSqajUVBoqLZWOSk9loDJSmajMVBYqK5WNyk7loHJSuajcVB4qL5WPyk8VoApShajCVBGqKFWMKk6VoEpSpaj/qNJUGaosVY4qT1WgKlKVqMpUFaoqVY2qTtWgalK1qNpUHaouVY+qTzWgGlKNqMZUE6op1YxqTrWgWlKtqNZUG6ot1Y5qT3WgOlKdqM5UF6or1Y3qTvWgelK9qN5UH6ov1Y/qTw2gBlKDqMHUEGooNYwaTo2gRlKjqNHUGGosNY4aT02gJlKTqMnUFGoqNY2aTs2gZlKzqNnUHGouNY+aTy2gFlKLqMXUEmoptYxaTq2gVlKrqNXUGmottY5aT22gNlKbqM3UFmortY3aTu2gdlK7qN3UHmovtY/aTx2gDlKHqMPUEeoodYw6Tp2gTlKnqNPUGeosdY46T12gLlKXqMvUFeoqdY26TmEUThEUSVEUTTEUS3EUTwmUSEmUTCmUSmmUThmUSVmUTTmUS3mUTwUUoCAVUhGFqJi6Qd2kblG3qTvUXeoedZ96QD2kHlGPqSfUU+oZ9Zx6Qb2kXlGvqTfUW+od9Z76QH2kPlGfqS/UV+ob9Z36Qf2kflG/qT/UX+oflYhOoBPTSeikdDI6OZ2CTkmnolPTaei0dDo6PZ2BzkhnojPTWeisdDY6O52DzknnonPTeei8dD46P12ALkgXogvTReiidDG6OF2CLkmXov+jS9Nl6LJ0Obo8XYGuSFeiK9NV6Kp0Nbo6XYOuSdeia9N16Lp0Pbo+3YBuSDeiG9NN6KZ0M7o53YJuSbeiW9Nt6LZ0O7o93YHuSHeiO9Nd6K50N7o73YPuSfeie9N96L50P7o/PYAeSA+iB9ND6KH0MHo4PYIeSY+iR9Nj6LH0OHo8PYGeSE+iJ9NT6Kn0NHo6PYOeSc+iZ9Nz6Ln0PHo+vYBeSC+iF9NL6KX0Mno5vYJeSa+iV9Nr6LX0Ono9vYHeSG+iN9Nb6K30Nno7vYPeSe+id9N76L30Pno/fYA+SB+iD9NH6KP0Mfo4fYI+SZ+iT9Nn6LP0Ofo8fYG+SF+iL9NX6Kv0Nfo6jdE4TdAkTdE0zdAszdE8LdAiLdEyrdAqrdE6bdAmbdE27dAu7dE+HdCAhnRIRzSiY/oGfZO+Rd+m79B36Xv0ffoB/ZB+RD+mn9BP6Wf0c/oF/ZJ+Rb+m39Bv6Xf0e/oD/ZH+RH+mv9Bf6W/0d/oH/ZP+Rf+m/9B/6X90IiaBScwkYZIyyZjkTAomJZOKSc2kYdIy6Zj0TAYmI5OJycxkYbIy2ZjsTA4mJ5OLyc3kYfIy+Zj8TAGmIFOIKcwUYYoyxZjiTAmmJFOK+Y8pzZRhyjLlmPJMBaYiU4mpzFRhqjLVmOpMDaYmU4upzdRh6jL1mPpMA6Yh04hpzDRhmjLNmOZMC6Yl04ppzbRh2jLtmPZMB6Yj04npzHRhujLdmO5MD6Yn04vpzfRh+jL9mP7MAGYgM4gZzAxhhjLDmOHMCGYkM4oZzYxhxjLjmPHMBGYiM4mZzExhpjLTmOnMDGYmM4uZzcxh5jLzmPnMAmYhs4hZzCxhljLLmOXMCmYls4pZzaxh1jLrmPXMBmYjs4nZzGxhtjLbmO3MDmYns4vZzexh9jL7mP3MAeYgc4g5zBxhjjLHmOPMCeYkc4o5zZxhzjLnmPPMBeYic4m5zFxhrjLXmOsMxuAMwZAMxdAMw7AMx/CMwIiMxMiMwqiMxuiMwZiMxdiMw7iMx/hMwAAGMiETMYiJmRvMTeYWc5u5w9xl7jH3mQfMQ+YR85h5wjxlnjHPmRfMS+YV85p5w7xl3jHvmQ/MR+YT85n5wnxlvjHfmR/MT+YX85v5w/xl/jGJ2AQ2MZuETcomY5OzKdiUbCo2NZuGTcumY9OzGdiMbCY2M5uFzcpmY7OzOdicbC42N5uHzcvmY/OzBdiCbCG2MFuELcoWY4uzJdiSbCn2P7Y0W4Yty5Zjy7MV2IpsJbYyW4WtylZjq7M12JpsLbY2W4ety9Zj67MN2IZsI7Yx24RtyjZjm7Mt2JZsK7Y124Zty7Zj27Md2I5sJ7Yz24XtynZju7M92J5sL7Y324fty/Zj+7MD2IHsIHYwO4Qdyg5jh7Mj2JHsKHY0O4Ydy45jx7MT2InsJHYyO4Wdyk5jp7Mz2JnsLHY2O4edy85j57ML2IXsInYxu4Rdyi5jl7Mr2JXsKnY1u4Zdy65j17Mb2I3sJnYzu4Xdym5jt7M72J3sLnY3u4fdy+5j97MH2IPsIfYwe4Q9yh5jj7Mn2JPsKfY0e4Y9y55jz7MX2IvsJfYye4W9yl5jr7MYi7MES7IUS7MMy7Icy7MCK7ISK7MKq7Iaq7MGa7IWa7MO67Ie67MBC1jIhmzEIjZmb7A32VvsbfYOe5e9x95nH7AP2UfsY/YJ+5R9xj5nX7Av2Vfsa/YN+5Z9x75nP7Af2U/sZ/YL+5X9xn5nf7A/2V/sb/YP+5f9xybiErjEXBIuKZeMS86l4FJyqbjUXBouLZeOS89l4DJymbjMXBYuK5eNy87l4HJyubjcXB4uL5ePy88V4ApyhbjCXBGuKFeMK86V4Epypbj/uNJcGa4sV44rz1XgKnKVuMpcFa4qV42rztXganK1uNpcHa4uV4+rzzXgGnKNuMZcE64p14xrzrXgWnKtuNZcG64t145rz3XgOnKduM5cF64r143rzvXgenK9uN5cH64v14/rzw3gBnKDuMHcEG4oN4wbzo3gRnKjuNHcGG4sN44bz03gJnKTuMncFG4qN42bzs3gZnKzuNncHG4uN4+bzy3gFnKLuMXcEm4pt4xbzq3gVnKruNXcGm4tt45bz23gNnKbuM3cFm4rt43bzu3gdnK7uN3cHm4vt4/bzx3gDnKHuMPcEe4od4w7zp3gTnKnuNPcGe4sd447z13gLnKXuMvcFe4qd427zmEczhEcyVEczTEcy3EczwmcyEmczCmcymmczhmcyVmczTmcy3mczwUc4CAXchGHuJi7wd3kbnG3uTvcXe4ed597wD3kHnGPuSfcU+4Z95x7wb3kXnGvuTfcW+4d9577wH3kPnGfuS/cV+4b9537wf3kfnG/uT/cX+4fl4hP4BPzSfikfDI+OZ+CT8mn4lPzafi0fDo+PZ+Bz8hn4jPzWfisfDY+O5+Dz8nn4nPzefi8fD4+P1+AL8gX4gvzRfiifDG+OF+CL8mX4v/jS/Nl+LJ8Ob48X4GvyFfiK/NV+Kp8Nb46X4Ovydfia/N1+Lp8Pb4+34BvyDfiG/NN+KZ8M74534JvybfiW/Nt+LZ8O74934HvyHfiO/Nd+K58N74734Pvyffie/N9+L58P74/P4AfyA/iB/ND+KH8MH44P4IfyY/iR/Nj+LH8OH48P4GfyE/iJ/NT+Kn8NH46P4Ofyc/iZ/Nz+Ln8PH4+v4BfyC/iF/NL+KX8Mn45v4Jfya/iV/Nr+LX8On49v4HfyG/iN/Nb+K38Nn47v4Pfye/id/N7+L38Pn4/f4A/yB/iD/NH+KP8Mf44f4I/yZ/iT/Nn+LP8Of48f4G/yF/iL/NX+Kv8Nf46j/E4T/AkT/E0z/Asz/E8L/AiL/Eyr/Aqr/E6b/Amb/E27/Au7/E+H/CAh3zIRzziY/4Gf5O/xd/m7/B3+Xv8ff4B/5B/xD/mn/BP+Wf8c/4F/5J/xb/m3/Bv+Xf8e/4D/5H/xH/mv/Bf+W/8d/4H/5P/xf/m//B/+X98IiFBSCwkEZIKyYTkQgohpZBKSC2kEdIK6YT0QgYho5BJyCxkEbIK2YTsQg4hp5BLyC3kEfIK+YT8QgGhoFBIKCwUEYoKxYTiQgmhpFAqUSKhtFBGKCuUE8oLFYSKQiWhslBFqCpUE6oLNYSaQi2htlBHqCvUE+oLDYSGQiOhsdBEaCo0E5oLLYSWQiuhtdBGaCu0E9oLHYSOQiehs9BF6Cp0E7oLPYSeQi+ht9BH6Cv0E/oLA4SBwiBhsDBEGCoME4YLI4SRwihhtDBGGCuME8YLE4SJwiRhsjBFmCpME6YLM4SZwixhtjBHmCvME+YLC4SFwiJhsbBEWCosE5YLK4SVwiphtbBGWCusE9YLG4SNwiZhs7BF2CpsE7YLO4Sdwi5ht7BH2CvsE/YLB4SDwiHhsHBEOCocE44LJ4STwinhtHBGOCucE84LF4SLwiXhsnBFuCpcE64LmIALhEAKlEALjMAKnMALgiAKkiALiqAKmqALhmAKlmALjuAKnuALgQAEKIRCJCAhFm4IN4Vbwm3hjnBXuCfcFx4ID4VHwmPhifBUeCY8F14IL4VXwmvhjfBWeCe8Fz4IH4VPwmfhi/BV+CZ8F34IP4Vfwm/hj/BX+CckEhPExGISMamYTEwuphBTiqnE1GIaMa2YTkwvZhAzipnEzGIWMauYTcwu5hBzirnE3GIeMa+YT8wvFhALioXEwmIRsahYTCwulhBLiqXE/8TSYhmxrFhOLC9WECuKlcTKYhWxqlhNrC7WEGuKtcTaYh2xrlhPrC82EBuKjcTGYhOxqdhMbC62EFuKrcTWYhuxrdhObC92EDuKncTOYhexq9hN7C72EHuKvcTeYh+xr9hP7C8OEAeKg8TB4hBxqDhMHC6OEEeKo8TR4hhxrDhOHC9OECeKk8TJ4hRxqjhNnC7OEGeKs8TZ4hxxrjhPnC8uEBeKi8TF4hJxqbhMXC6uEFeKq8TV4hpxrbhOXC9uEDeKm8TN4hZxq7hN3C7uEHeKu8Td4h5xr7hP3C8eEA+Kh8TD4hHxaLJE4nHxhHhSPCWeFs+IZ8Vz4nnxgnhRvCReFq+IV8Vr4nURE3GREEmREmmREVmRE3lREEVREmVREVVRE3XREE3REm3REV3RE30xEIEIxVCMRCTG4g3xpnhLvC3eEe+K98T74gPxofhIfCw+EZ+Kz8Tn4gvxpfhKfC2+Ed+K78T34gfxo/hJ/Cx+Eb+K38Tv4g/xp/hL/C3+Ef+K/8REUoKUWEoiJZWSScmlFFJKKZWUWkojpZXSSemlDFJGKZOUWcoiZZWySdmlHFJOKZeUW8oj5ZXySfmlAlJBqZBUWCoiFZWKScWlElJJqZT0n1RaKiOVlcpJ5aUKUkWpklRZqiJVlapJ1aUaUk2pllRbqiPVlepJ9aUGUkOpkdRYaiI1lZpJzaUWUkupldRaaiO1ldpJ7aUOUkepk9RZ6iJ1lbpJ3aUeUk+pl9Rb6iP1lfpJ/aUB0kBpkDRYGiINlYZJw6UR0khplDRaGiONlcZJ46UJ0kRpkjRZmiJNlaZJ06UZ0kxpljRbmiPNleZJ86UF0kJpkbRYWiItlZZJy6UV0kpplbRaWiOtldZJ66UN0kZpk7RZ2iJtlbZJ26Ud0k5pl7Rb2iPtlfZJ+6UD0kHpkHRYOiIdlY5Jx6UT0knplHRaOiOdlc5J56UL0kXpknRZuiJdla5J1yVMwiVCIiVKoiVGYiVO4iVBEiVJkiVFUiVN0iVDMiVLsiVHciVP8qVAAhKUQimSkBRLN6Sb0i3ptnRHuivdk+5LD6SH0iPpsfREeio9k55LL6SX0ivptfRGeiu9k95LH6SP0ifps/RF+ip9k75LP6Sf0i/pt/RH+iv9kxLJCXJiOYmcVE4mJ5dTyCnlVHJqOY2cVk4np5czyBnlTHJmOYucVc4mZ5dzyDnlXHJuOY+cV84n55cLyAXlQnJhuYhcVC4mF5dLyCXlUvJ/cmm5jFxWLieXlyvIFeVKcmW5ilxVriZXl2vINeVacm25jlxXrifXlxvIDeVGcmO5idxUbiY3l1vILeVWcmu5jdxWbie3lzvIHeVOcme5i9xV7iZ3l3vIPeVecm+5j9xX7if3lwfIA+VB8mB5iDxUHiYPl0fII+VR8mh5jDxWHiePlyfIE+VJ8mR5ijxVniZPl2fIM+VZ8mx5jjxXnifPlxfIC+VF8mJ5ibxUXiYvl1fIK+VV8mp5jbxWXievlzfIG+VN8mZ5i7xV3iZvl3fIO+Vd8m55j7xX3ifvlw/IB+VD8mH5iHxUPiYfl0/IJ+VT8mn5jHxWPiefly/IF+VL8mX5inxVviZflzEZlwmZlCmZlhmZlTmZlwVZlCVZlhVZlTVZlw3ZlC3Zlh3ZlT3ZlwMZyFAO5UhGcizfkG/Kt+Tb8h35rnxPvi8/kB/Kj+TH8hP5qfxMfi6/kF/Kr+TX8hv5rfxOfi9/kD/Kn+TP8hf5q/xN/i7/kH/Kv+Tf8h/5r/xPTqQkKImVJEpSJZmSXEmhpFRSKamVNEpaJZ2SXsmgZFQyKZmVLEpWJZuSXcmh5FRyKbmVPEpeJZ+SXymgFFQKKYWVIkpRpZhSXCmhlFRKKf8ppZUySlmlnFJeqaBUVCoplZUqSlWlmlJdqaHUVGoptZU6Sl2lnlJfaaA0VBopjZUmSlOlmdJcaaG0VFoprZU2SlulndJe6aB0VDopnZUuSlelm9Jd6aH0VHopvZU+Sl+ln9JfGaAMVAYpg5UhylBlmDJcGaGMVEYpo5UxylhlnDJemaBMVCYpk5UpylRlmjJdmaHMVGYps5U5ylxlnjJfWaAsVBYpi5UlylJlmbJcWaGsVFYpq5U1ylplnbJe2aBsVDYpm5UtylZlm7Jd2aHsVHYpu5U9yl5ln7JfOaAcVA4ph5UjylHlmHJcOaGcVE4pp5UzylnlnHJeuaBcVC4pl5UrylXlmnJdwRRcIRRSoRRaYRRW4RReERRRkRRZURRV0RRdMRRTsRRbcRRX8RRfCRSgQCVUIgUpsXJDuancUm4rd5S7yj3lvvJAeag8Uh4rT5SnyjPlufJCeam8Ul4rb5S3yjvlvfJB+ah8Uj4rX5Svyjflu/JD+an8Un4rf5S/yj8lkZqgJlaTqEnVZGpyNYWaUk2lplbTqGnVdGp6NYOaUc2kZlazqFnVbGp2NYeaU82l5lbzqHnVfGp+tYBaUC2kFlaLqEXVYmpxtYRaUi2l/qeWVsuoZdVyanm1glpRraRWVquoVdVqanW1hlpTraXWVuuoddV6an21gdpQbaQ2VpuoTdVmanO1hdpSbaW2VtuobdV2anu1g9pR7aR2VruoXdVuane1h9pT7aX2VvuofdV+an91gDpQHaQOVoeoQ9Vh6nB1hDpSHaWOVseoY9Vx6nh1gjpRnaROVqeoU9Vp6nR1hjpTnaXOVueoc9V56nx1gbpQXaQuVpeoS9Vl6nJ1hbpSXaWuVteoa9V16np1g7pR3aRuVreoW9Vt6nZ1h7pT3aXuVveoe9V96n71gHpQPaQeVo+oR9Vj6nH1hHpSPaWeVs+oZ9Vz6nn1gnpRvaReVq+oV9Vr6nUVU3GVUEmVUmmVUVmVU3lVUEVVUmVVUVVVU3XVUE3VUm3VUV3VU301UIEK1VCNVKTG6g31pnpLva3eUe+q99T76gP1ofpIfaw+UZ+qz9Tn6gv1pfpKfa2+Ud+q79T36gf1o/pJ/ax+Ub+q39Tv6g/1p/pL/a3+Uf+q/9REWoKWWEuiJdWSacm1FFpKLZWWWkujpdXSaem1DFpGLZOWWcuiZdWyadm1HFpOLZeWW8uj5dXyafm1AlpBrZBWWCuiFdWKacW1ElpJrZT2n1ZaK6OV1cpp5bUKWkWtklZZq6JV1app1bUaWk2tllZbq6PV1epp9bUGWkOtkdZYa6I11ZppzbUWWkutldZaa6O11dpp7bUOWketk9ZZ66J11bpp3bUeWk+tl9Zb66P11fpp/bUB2kBtkDZYG6IN1YZpw7UR2khtlDZaG6ON1cZp47UJ2kRtkjZZm6JN1aZp07UZ2kxtljZbm6PN1eZp87UF2kJtkbZYW6It1ZZpy7UV2kptlbZaW6Ot1dZp67UN2kZtk7ZZ26Jt1bZp27Ud2k5tl7Zb26Pt1fZp+7UD2kHtkHZYO6Id1Y5px7UT2kntlHZaO6Od1c5p57UL2kXtknZZu6Jd1a5p1zVMwzVCIzVKozVGYzVO4zVBEzVJkzVFUzVN0zVDMzVLszVHczVP87VAAxrUQi3SkBZrN7Sb2i3ttnZHu6vd0+5rD7SH2iPtsfZEe6o9055rL7SX2ivttfZGe6u9095rH7SP2ifts/ZF+6p9075rP7Sf2i/tt/ZH+6v90xLpCXpiPYmeVE+mJ9dT6Cn1VHpqPY2eVk+np9cz6Bn1THpmPYueVc+mZ9dz6Dn1XHpuPY+eV8+n59cL6AX1QnphvYheVC+mF9dL6CX1Uvp/emm9jF5WL6eX1yvoFfVKemW9il5Vr6ZX12voNfVaem29jl5Xr6fX1xvoDfVGemO9id5Ub6Y311voLfVWemu9jd5Wb6e31zvoHfVOeme9i95V76Z313voPfVeem+9j95X76f31wfoA/VB+mB9iD5UH6YP10foI/VR+mh9jD5WH6eP1yfoE/VJ+mR9ij5Vn6ZP12foM/VZ+mx9jj5Xn6fP1xfoC/VF+mJ9ib5UX6Yv11foK/VV+mp9jb5WX6ev1zfoG/VN+mZ9i75V36Zv13foO/Vd+m59j75X36fv1w/oB/VD+mH9iH5UP6Yf10/oJ/VT+mn9jH5WP6ef1y/oF/VL+mX9in5Vv6Zf1zEd1wmd1Cmd1hmd1Tmd1wVd1CVd1hVd1TVd1w3d1C3d1h3d1T3d1wMd6FAP9UhHeqzf0G/qt/Tb+h39rn5Pv68/0B/qj/TH+hP9qf5Mf66/0F/qr/TX+hv9rf5Of69/0D/qn/TP+hf9q/5N/67/0H/qv/Tf+h/9r/5PT2QkGImNJEZSI5mR3EhhpDRSGamNNEZaI52R3shgZDQyGZmNLEZWI5uR3chh5DRyGbmNPEZeI5+R3yhgFDQKGYWNIkZRo5hR3ChhlDRKGf8ZpY0yRlmjnFHeqGBUNCoZlY0qRlWjmlHdqGHUNGoZtY06Rl2jnlHfaGA0NBoZjY0mRlOjmdHcaGG0NFoZrY02RlujndHe6GB0NDoZnY0uRlejm9Hd6GH0NHoZvY0+Rl+jn9HfGGAMNAYZg40hxlBjmDHcGGGMNEYZo40xxlhjnDHemGBMNCYZk40pxlRjmjHdmGHMNGYZs405xlxjnjHfWGAsNBYZi40lxlJjmbHcWGGsNFYZq401xlpjnbHe2GBsNDYZm40txlZjm7Hd2GHsNHYZu409xl5jn7HfOGAcNA4Zh40jxlHjmHHcOGGcNE4Zp40zxlnjnHHeuGBcNC4Zl40rxlXjmnHdwAzcIAzSoAzaYAzW4AzeEAzRkAzZUAzV0AzdMAzTsAzbcAzX8AzfCAxgQCM0IgMZsXHDuGncMm4bd4y7xj3jvvHAeGg8Mh4bT4ynxjPjufHCeGm8Ml4bb4y3xjvjvfHB+Gh8Mj4bX4yvxjfju/HD+Gn8Mn4bf4y/xj8jkZlgJjaTmEnNZGZyM4WZ0kxlpjbTmGnNdGZ6M4OZ0cxkZjazmFnNbGZ2M4eZ08xl5jbzmHnNfGZ+s4BZ0CxkFjaLmEXNYmZxs4RZ0ixl/meWNsuYZc1yZnmzglnRrGRWNquYVc1qZnWzhlnTrGXWNuuYdc16Zn2zgdnQbGQ2NpuYTc1mZnOzhdnSbGW2NtuYbc12Znuzg9nR7GR2NruYXc1uZnezh9nT7GX2NvuYfc1+Zn9zgDnQHGQONoeYQ81h5nBzhDnSHGWONseYY81x5nhzgjnRnGRONqeYU81p5nRzhjnTnGXONueYc8155nxzgbnQXGQuNpeYS81l5nJzhbnSXGWuNteYa8115npzg7nR3GRuNreYW81t5nZzh7nT3GXuNveYe8195n7zgHnQPGQeNo+YR81j5nHzhHnSPGWeNs+YZ81z5nnzgnnRvGReNq+YV81r5nUTM3GTMEmTMmmTMVmTM3lTMEVTMmVTMVVTM3XTME3TMm3TMV3TM30zMIEJzdCMTGTG5g3zpnnLvG3eMe+a98z75gPzofnIfGw+MZ+az8zn5gvzpfnKfG2+Md+a78z35gfzo/nJ/Gx+Mb+a38zv5g/zp/nL/G3+Mf+a/8xEVoKV2EpiJbWSWcmtFFZKK5WV2kpjpbXSWemtDFZGK5OV2cpiZbWyWdmtHFZOK5eV28pj5bXyWfmtAlZBq5BV2CpiFbWKWcWtElZJq5T1n1XaKmOVtcpZ5a0KVkWrklXZqmJVtapZ1a0aVk2rllXbqmPVtepZ9a0GVkOrkdXYamI1tZpZza0WVkurldXaamO1tdpZ7a0OVkerk9XZ6mJ1tbpZ3a0eVk+rl9Xb6mP1tfpZ/a0B1kBrkDXYGmINtYZZw60R1khrlDXaGmONtcZZ460J1kRrkjXZmmJNtaZZ060Z1kxrljXbmmPNteZZ860F1kJrkbXYWmIttZZZy60V1kprlbXaWmOttdZZ660N1kZrk7XZ2mJttbZZ260d1k5rl7Xb2mPttfZZ+60D1kHrkHXYOmIdtY5Zx60T1knrlHXaOmOdtc5Z560L1kXrknXZumJdta5Z1y3Mwi3CIi3Koi3GYi3O4i3BEi3Jki3FUi3N0i3DMi3Lsi3Hci3P8q3AAha0QiuykBVbN6yb1i3rtnXHumvds+5bD6yH1iPrsfXEemo9s55bL6yX1ivrtfXGemu9s95bH6yP1ifrs/XF+mp9s75bP6yf1i/rt/XH+mv9sxLZCXZiO4md1E5mJ7dT2CntVHZqO42d1k5np7cz2BntTHZmO4ud1c5mZ7dz2DntXHZuO4+d185n57cL2AXtQnZhu4hd1C5mF7dL2CXtUvZ/dmm7jF3WLmeXtyvYFe1KdmW7il3VrmZXt2vYNe1adm27jl3XrmfXtxvYDe1GdmO7id3UbmY3t1vYLe1Wdmu7jd3Wbme3tzvYHe1Odme7i93V7mZ3t3vYPe1edm+7j93X7mf3twfYA+1B9mB7iD3UHmYPt0fYI+1R9mh7jD3WHmePtyfYE+1J9mR7ij3VnmZPt2fYM+1Z9mx7jj3XnmfPtxfYC+1F9mJ7ib3UXmYvt1fYK+1V9mp7jb3WXmevtzfYG+1N9mZ7i73V3mZvt3fYO+1d9m57j73X3mfvtw/YB+1D9mH7iH3UPmYft0/YJ+1T9mn7jH3WPmefty/YF+1L9mX7in3VvmZftzEbtwmbtCmbthmbtTmbtwVbtCVbthVbtTVbtw3btC3bth3btT3btwMb2NAO7chGdmzfsG/at+zb9h37rn3Pvm8/sB/aj+zH9hP7qf3Mfm6/sF/ar+zX9hv7rf3Ofm9/sD/an+zP9hf7q/3N/m7/sH/av+zf9h/7r/3PTuQkOImdJE5SJ5mT3EnhpHRSOamdNE5aJ52T3sngZHQyOZmdLE5WJ5uT3cnh5HRyObmdPE5eJ5+T3yngFHQKOYWdIk5Rp5hT3CnhlHRKOf85pZ0yTlmnnFPeqeBUdCo5lZ0qTlWnmlPdqeHUdGo5tZ06Tl2nnlPfaeA0dBo5jZ0mTlOnmdPcaeG0dFo5rZ02TlunndPe6eB0dDo5nZ0uTlenm9Pd6eH0dHo5vZ0+Tl+nn9PfGeAMdAY5g50hzlBnmDPcGeGMdEY5o50xzlhnnDPemeBMdCY5k50pzlRnmjPdmeHMdGY5s505zlxnnjPfWeAsdBY5i50lzlJnmbPcWeGsdFY5q501zlpnnbPe2eBsdDY5m50tzlZnm7Pd2eHsdHY5u509zl5nn7PfOeAcdA45h50jzlHnmHPcOeGcdE45p50zzlnnnHPeueBcdC45l50rzlXnmnPdwRzcIRzSoRzaYRzW4RzeERzRkRzZURzV0RzdMRzTsRzbcRzX8RzfCRzgQCd0Igc5sXPDuenccm47d5y7zj3nvvPAeeg8ch47T5ynzjPnufPCeem8cl47b5y3zjvnvfPB+eh8cj47X5yvzjfnu/PD+en8cn47f5y/zj8nkZvgJnaTuEndZG5yN4Wb0k3lpnbTuGnddG56N4Ob0c3kZnazuFndbG52N4eb083l5nbzuHndfG5+t4Bb0C3kFnaLuEXdYm5xt4Rb0i3l/ueWdsu4Zd1ybnm3glvRreRWdqu4Vd1qbnW3hlvTreXWduu4dd16bn23gdvQbeQ2dpu4Td1mbnO3hdvSbeW2dtu4bd12bnu3g9vR7eR2dru4Xd1ubne3h9vT7eX2dvu4fd1+bn93gDvQHeQOdoe4Q91h7nB3hDvSHeWOdse4Y91x7nh3gjvRneROdqe4U91p7nR3hjvTneXOdue4c9157nx3gbvQXeQudpe4S91l7nJ3hbvSXeWudte4a9117np3g7vR3eRudre4W91t7nZ3h7vT3eXudve4e9197n73gHvQPeQedo+4R91j7nH3hHvSPeWeds+4Z91z7nn3gnvRveRedq+4V91r7nUXc3GXcEmXcmmXcVmXc3lXcEVXcmVXcVVXc3XXcE3Xcm3XcV3Xc303cIEL3dCNXOTG7g33pnvLve3ece+699z77gP3ofvIfew+cZ+6z9zn7gv3pfvKfe2+cd+679z37gf3o/vJ/ex+cb+639zv7g/3p/vL/e3+cf+6/9xEXoKX2EviJfWSecm9FF5KL5WX2kvjpfXSeem9DF5GL5OX2cviZfWyedm9HF5OL5eX28vj5fXyefm9Al5Br5BX2CviFfWKecW9El5Jr5T3n1faK+OV9cp55b0KXkWvklfZq+JV9ap51b0aXk2vllfbq+PV9ep59b0GXkOvkdfYa+I19Zp5zb0WXkuvldfaa+O19dp57b0OXkevk9fZ6+J19bp53b0eXk+vl9fb6+P19fp5/b0B3kBvkDfYG+IN9YZ5w70R3khvlDfaG+ON9cZ5470J3kRvkjfZm+JN9aZ5070Z3kxvljfbm+PN9eZ5870F3kJvkbfYW+It9ZZ5y70V3kpvlbfaW+Ot9dZ5670N3kZvk7fZ2+Jt9bZ5270d3k5vl7fb2+Pt9fZ5+70D3kHvkHfYO+Id9Y55x70T3knvlHfaO+Od9c55570L3kXvknfZu+Jd9a551z3Mwz3CIz3Koz3GYz3O4z3BEz3Jkz3FUz3N0z3DMz3Lsz3Hcz3P873AAx70Qi/ykBd7N7yb3i3vtnfHu+vd8+57D7yH3iPvsffEe+o98557L7yX3ivvtffGe+u98957H7yP3ifvs/fF++p98757P7yf3i/vt/fH++v98xL5CX5iP4mf1E/mJ/dT+Cn9VH5qP42f1k/np/cz+Bn9TH5mP4uf1c/mZ/dz+Dn9XH5uP4+f18/n5/cL+AX9Qn5hv4hf1C/mF/dL+CX9Uv5/fmm/jF/WL+eX9yv4Ff1KfmW/il/Vr+ZX92v4Nf1afm2/jl/Xr+fX9xv4Df1GfmO/id/Ub+Y391v4Lf1Wfmu/jd/Wb+e39zv4Hf1Ofme/i9/V7+Z393v4Pf1efm+/j9/X7+f39wf4A/1B/mB/iD/UH+YP90f4I/1R/mh/jD/WH+eP9yf4E/1J/mR/ij/Vn+ZP92f4M/1Z/mx/jj/Xn+fP9xf4C/1F/mJ/ib/UX+Yv91f4K/1V/mp/jb/WX+ev9zf4G/1N/mZ/i7/V3+Zv93f4O/1d/m5/j7/X3+fv9w/4B/1D/mH/iH/UP+Yf90/4J/1T/mn/jH/WP+ef9y/4F/1L/mX/in/Vv+Zf9zEf9wmf9Cmf9hmf9Tmf9wVf9CVf9hVf9TVf9w3f9C3f9h3f9T3f9wMf+NAP/chHfuzf8G/6t/zb/h3/rn/Pv+8/8B/6j/zH/hP/qf/Mf+6/8F/6r/zX/hv/rf/Of+9/8D/6n/zP/hf/q//N/+7/8H/6v/zf/h//r//PTxQkBImDJEHSIFmQPEgRpAxSBamDNEHaIF2QPsgQZAwyBZmDLEHWIFuQPcgR5AxyBbmDPEHeIF+QPygQFAwKBYWDIkHRoFhQPCgRlAxKBf8FpYMyQdmgXFA+qBBUDCoFlYMqQdWgWlA9qBHUDGoFtYM6Qd2gXlA/aBA0DBoFjYMmQdOgWdA8aBG0DFoFrYM2QdugXdA+6BB0DDoFnYMuQdegW9A96BH0DHoFvYM+Qd+gX9A/GBAMDAYFg4MhwdBgWDA8GBGMDEYFo4MxwdhgXDA+mBBMDCYFk4MpwdRgWjA9mBHMDGYFs4M5wdxgXjA/WBAsDBYFi4MlwdJgWbA8WBGsDFYFq4M1wdpgXbA+2BBsDDYFm4MtwdZgW7A92BHsDHYFu4M9wd5gX7A/OBAcDA4Fh4MjwdHgWHA8OBGcDE4Fp4MzwdngXHA+uBBcDC4Fl4MrwdXgWnA9wAI8IAIyoAI6YAI24AI+EAIxkAI5UAI10AI9MAIzsAI7cAI38AI/CAIQwCAMogAFcXAjuBncCm4Hd4K7wb3gfvAgeBg8Ch4HT4KnwbPgefAieBm8Cl4Hb4K3wbvgffAh+Bh8Cj4HX4Kvwbfge/Aj+Bn8Cn4Hf4K/wb8gEUgAiUESkBQkA8lBCpASpAKpQRqQFqQD6UEGkBFkAplBFpAVZAPZQQ6QE+QCuUEekBfkA/lBAVAQFAKFQRFQFBQDxUEJUBKUAv+B0qAMKAvKgfKgAqgIKoHKoAqoCqqB6qAGqAlqgdqgDqgL6oH6oAFoCBqBxqAJaAqageagBWgJWoHWoA1oC9qB9qAD6Ag6gc6gC+gKuoHuoAfoCXqB3qAP6Av6gf5gABgIBoHBYAgYCoaB4WAEGAlGgdFgDBgLxoHxYAKYCCaByWAKmAqmgelgBpgJZoHZYA6YC+aB+WABWAgWgcVgCVgKloHlYAVYCVaB1WANWAvWgfVgA9gINoHNYAvYCraB7WAH2Al2gd1gD9gL9oH94AA4CA6Bw+AIOAqOgePgBDgJToHT4Aw4C86B8+ACuAgugcvgCrgKroHrAAM4IAAJKEADBrCAAzwQgAgkIAMFqEADOjCACSxgAwe4wAM+CAAAEIQgAgjE4Aa4CW6B2+AOuAvugfvgAXgIHoHH4Al4Cp6B5+AFeAlegdfgDXgL3oH34AP4CD6Bz+AL+Aq+ge/gB/gJfoHf4A/4C/6BRDABJoZJYFKYDCaHKWBKmAqmhmlgWpgOpocZYEaYCWaGWWBWmA1mhzlgTpgL5oZ5YF6YD+aHBWBBWAgWhkVgUVgMFoclYElYCv4HS8MysCwsB8vDCrAirAQrwyqwKqwGq8MasCasBWvDOrAurAfrwwawIWwEG8MmsClsBpvDFrAlbAVbwzawLWwH28MOsCPsBDvDLrAr7Aa7wx6wJ+wFe8M+sC/sB/vDAXAgHAQHwyFwKBwGh8MRcCQcBUfDMXAsHAfHwwlwIpwEJ8MpcCqcBqfDGXAmnAVnwzlwLpwH58MFcCFcBBfDJXApXAaXwxVwJVwFV8M1cC1cB9fDDXAj3AQ3wy1wK9wGt8MdcCfcBXfDPXAv3Af3wwPwIDwED8Mj8Cg8Bo/DE/AkPAVPwzPwLDwHz8ML8CK8BC/DK/AqvAavQwzikIAkpCANGchCDvJQgCKUoAwVqEIN6tCAJrSgDR3oQg/6MIAAQhjCCCIYwxvwJrwFb8M78C68B+/DB/AhfAQfwyfwKXwGn8MX8CV8BV/DN/AtfAffww/wI/wEP8Mv8Cv8Br/DH/An/AV/wz/wL/wHE4UJYeIwSZg0TBYmD1OEKcNUYeowTZg2TBemDzOEGcNMYeYwS5g1zBZmD3OEOcNcYe4wT5g3zBfmDwuEBcNCYeGwSFg0LBYWD0uEJcNS4X9h6bBMWDYsF5YPK4QVw0ph5bBKWDWsFlYPa4Q1w1ph7bBOWDesF9YPG4QNw0Zh47BJ2DRsFjYPW4Qtw1Zh67BN2DZsF7YPO4Qdw05h57BL2DXsFnYPe4Q9w15h77BP2DfsF/ZPSAgHhoPCweGQcGg4LBwejghHhqPC0eGYcGw4LhwfTggnhpPCyeGUcGo4LZwezghnhrPC2eGccG44L5wfLggXhovCxeGScGm4LFwerghXhqvC1eGacG24Llwfbgg3hpvCzeGWcGu4Ldwe7gh3hrvC3eGecG+4L9wfHggPhofCw+GR8Gh4LDwenghPhqfC0+GZ8Gx4LjwfXggvhpfCy+GV8Gp4LbweYiEeEiEZUiEdMiEbciEfCqEYSqEcKqEaaqEeGqEZWqEdOqEbeqEfBiEIYRiGUYjCOLwR3gxvhbfDO+Hd8F54P3wQPgwfhY/DJ+HT8Fn4PHwRvgxfha/DN+Hb8F34PvwQfgw/hZ/DL+HX8Fv4PfwR/gx/hb/DP+Hf8F+YKEqIEkdJoqRRsih5lCJKGaWKUkdporRRuih9lCHKGGWKMkdZoqxRtih7lCPKGeWKckd5orxRvih/VCAqGBWKCkdFoqJRsah4VCIqGZWK/otKR2WislG5qHxUIaoYVYoqR1WiqlG1qHpUI6oZ1YpqR3WiulG9qH7UIGoYNYoaR02iplGzqHnUImoZtYpaR22itlG7qH3UIeoYdYo6R12irlG3qHtCj6hn1CvqHfWJ+kb9ov7RgGhgNCgaHA2JhkbDouHRiGhkNCoaHY2JxkbjovHRhGhiNCmaHE2JpkbTounRjGhmNCuaHc2J5kbzovnRgmhhtChaHC2JlkbLouXRimhltCpaHa2J1kbrovXRhmhjtCnaHG2Jtkbbou3RjmhntCvaHe2J9kb7ov3RgehgdCg6HB2JjkbHouPRiehkdCo6HZ2JzkbnovPRhehidCm6HF2JrkbXousRFuEREZERFdERE7ERF/GREImRFMmREqmRFumREZmRFdmRE7mRF/lREIEIRmEURSiKoxvRzehWdDu6E92N7kX3owfRw+hR9Dh6Ej2NnkXPoxfRy+hV9Dp6E72N3kXvow/Rx+hT9Dn6En2NvkXfox/Rz+hX9Dv6E/2N/kWJUAJKjJKgpCgZSo5SoJQoFUqN0qC0KB1KjzKgjCgTyoyyoKwoG8qOcqCcKBfKjfKgvCgfyo8KoIKoECqMiqCiqBgqjkqgkqgU+g+VRmVQWVQOlUcVUEVUCVVGVVBVVA1VRzVQTVQL1UZ1UF1UD9VHDVBD1Ag1Rk1QU9QMNUctUEvUCrVGbVBb1A61Rx1QR9QJdUZdUFfUDXVHPVBP1Av1Rn1QX9QP9UcD0EA0CA1GQ9BQNAwNRyPQSDQKjUZj0Fg0Do1HE9BENAlNRlPQVDQNTUcz0Ew0C81Gc9BcNA/NRwvQQrQILUZL0FK0DC1HK9BKtAqtRmvQWrQOrUcb0Ea0CW1GW9BWtA1tRzvQTrQL7UZ70F60D+1HB9BBdAgdRkfQUXQMHUcn0El0Cp1GZ9BZdA6dRxfQRXQJXUZX0FV0DV1HGMIRgUhEIRoxiEUc4pGARCQhGSlIRRrSkYFMZCEbOchFHvJRgACCKEQRQihGN9BNdAvdRnfQXXQP3UcP0EP0CD1GT9BT9Aw9Ry/QS/QKvUZv0Fv0Dr1HH9BH9Al9Rl/QV/QNfUc/0E/0C/1Gf9Bf9A8lihPixHGSOGmcLE4ep4hTxqni1HGaOG2cLk4fZ4gzxpnizHGWOGucLc4e54hzxrni3HGeOG+cL84fF4gLxoXiwnGRuGhcLC4el4hLxqXi/+LScZm4bFwuLh9XiCvGleLKcZW4alwtrh7XiGvGteLacZ24blwvrh83iBvGjeLGcZO4adwsbh63iFvGreLWcZu4bdwubh93iDvGneLOcZe4a9wt7h73iHvGveLecZ+4b9wv7h8PiAfGg+LB8ZB4aDwsHh6PiEfGo+LR8Zh4bDwuHh9PiCfGk+LJ8ZR4ajwtnh7PiGfGs+LZ8Zx4bjwvnh8viBfGi+LF8ZJ4abwsXh6viFfGq+LV8Zp47f8EwAOgEEkAANCfbdu2bdvusm3btm3btu3WtjUzm+9h67D12AZsI7YJ24xtwbZi27Dt2A5sJ7YL243twfZi+7D92AHsIHYIO4wdwY5ix7Dj2AnsJHYKO42dwc5i57Dz2AXsInYJu4xdwa5i17Dr2A3sJnYLu43dwe5i97D72APsIfYIe4w9wZ5iz7Dn2AvsJfYKe429wd5i77D32AfsI/YJ+4x9wb5i37DvGIbhGIGRGIXRGIOxGIfxmICJmITJmIKpmIbpmIGZmIXZmIO5mIf5WICFWIQBDGIIi7Ef2E/sF/Yb+4P9xf5hCXgiPDGeBE+KJ8OT4ynwlHgqPDWeBk+Lp8PT4xnwjHgmPDOeBc+KZ8Oz4znwnHguPDeeB8+L58Pz4wXwgnghvDBeBC+KF8OL4yXwkngpvDReBi+Ll8PL4xXwinglvDJeBa+KV8Or4zXwmngtvDZeB6+L18Pr4w3whngjvDHeBG+KN8Ob4y3wlngrvDXeBm+Lt8Pb4x3wjngnvDPeBe+Kd8O74z3wnngvvDfeB++L/4f3w/vjA/CB+CB8MD4EH4oPw4fjI/CR+Ch8ND4GH4uPw8fjE/CJ+CR8Mj4Fn4pPw6fjM/CZ+Cx8Nj4Hn4vPw+fjC/CF+CJ8Mb4EX4ovw5fjK/CV+Cp8Nb4GX4uvw9fjG/CN+CZ8M74F34pvw7fjO/Cd+C58N74H34vvw/fjB/CD+CH8MH4EP4ofw4/jJ/CT+Cn8NH4GP4ufw8/jF/CL+CX8Mn4Fv4pfw6/jN/Cb+C38Nn4Hv4vfw+/jD/CH+CP8Mf4Ef4o/w5/jL/CX+Cv8Nf4Gf4u/w9/jH/CP+Cf8M/4F/4p/w7/jGI7jBE7iFE7jDM7iHM7jAi7iEi7jCq7iGq7jBm7iFm7jDu7iHu7jAR7iEQ5wiCM8xn/gP/Ff+G/8D/4X/4cnEImIxEQSIimRjEhOpCBSEqmI1EQaIi2RjkhPZCAyEpmIzEQWIiuRjchO5CByErmI3EQeIi+Rj8hPFCAKEoWIwkQRoihRjChOlCBKEqWI0kQZoixRjihPVCAqEpWIykQVoipRjahO1CBqErWI2kQdoi5Rj6hPNCAaEo2IxkQToinRjGhOtCBaEq2I1kQboi3RjmhPdCA6Ep2IzkQXoivRjehO9CB6Er2I3kQfoi/xH9GP6E8MIAYSg4jBxBBiKDGMGE6MIEYSo4jRxBhiLDGOGE9MICYSk4jJxBRiKjGNmE7MIGYSs4jZxBxiLjGPmE8sIBYSi4jFxBJiKbGMWE6sIFYSq4jVxBpiLbGOWE9sIDYSm4jNxBZiK7GN2E7sIHYSu4jdxB5iL7GP2E8cIA4Sh4jDxBHiKHGMOE6cIE4Sp4jTxBniLHGOOE9cIC4Sl4jLxBXiKnGNuE7cIG4St4jbxB3iLnGPuE88IB4Sj4jHxBPiKfGMeE68IF4Sr4jXxBviLfGOeE98ID4Sn4jPxBfiK/GN+E5gBE4QBElQBE0wBEtwBE8IhEhIhEwohEpohE4YhElYhE04hEt4hE8EREhEBCAggYiY+EH8JH4Rv4k/xF/iH5FAJiITk0nIpGQyMjmZgkxJpiJTk2nItGQ6Mj2ZgcxIZiIzk1nIrGQ2MjuZg8xJ5iJzk3nIvGQ+Mj9ZgCxIFiILk0XIomQxsjhZgixJliJLk2XIsmQ5sjxZgaxIViIrk1XIqmQ1sjpZg6xJ1iJrk3XIumQ9sj7ZgGxINiIbk03IpmQzsjnZgmxJtiJbk23ItmQ7sj3ZgexIdiI7k13IrmQ3sjvZg+xJ9iJ7k33IvuR/ZD+yPzmAHEgOIgeTQ8ih5DByODmCHEmOIkeTY8ix5DhyPDmBnEhOIieTU8ip5DRyOjmDnEnOImeTc8i55DxyPrmAXEguIheTS8il5DJyObmCXEmuIleTa8i15DpyPbmB3EhuIjeTW8it5DZyO7mD3EnuIneTe8i95D5yP3mAPEgeIg+TR8ij5DHyOHmCPEmeIk+TZ8iz5DnyPHmBvEheIi+TV8ir5DXyOnmDvEneIm+Td8i75D3yPvmAfEg+Ih+TT8in5DPyOfmCfEm+Il+Tb8i35DvyPfmB/Eh+Ij+TX8iv5DfyO4mROEmQJEmRNMmQLMmRPCmQIimRMqmQKqmROmmQJmmRNumQLumRPhmQIRmRgIQkImPyB/mT/EX+Jv+Qf8l/ZAKViEpMJaGSUsmo5FQKKiWVikpNpaHSUumo9FQGKiOVicpMZaGyUtmo7FQOKieVi8pN5aHyUvmo/FQBqiBViCpMFaGKUsWo4lQJqiRViipNlaHKUuWo8lQFqiJViapMVaGqUtWo6lQNqiZVi6pN1aHqUvWo+lQDqiHViGpMNaGaUs2o5lQLqiXVimpNtaHaUu2o9lQHqiPViepMdaG6Ut2o7lQPqifVi+pN9aH6Uv9R/aj+1ABqIDWIGkwNoYZSw6jh1AhqJDWKGk2NocZS46jx1ARqIjWJmkxNoaZS06jp1AxqJjWLmk3NoeZS86j51AJqIbWIWkwtoZZSy6jl1ApqJbWKWk2todZS66j11AZqI7WJ2kxtobZS26jt1A5qJ7WL2k3tofZS+6j91AHqIHWIOkwdoY5Sx6jj1AnqJHWKOk2doc5S56jz1AXqInWJukxdoa5S16jr1A3qJnWLuk3doe5S96j71APqIfWIekw9oZ5Sz6jn1AvqJfWKek29od5S76j31AfqI/WJ+kx9ob5S36jvFEbhFEGRFEXRFEOxFEfxlECJlETJlEKplEbplEGZlEXZlEO5lEf5VECFVEQBClKIiqkf1E/qF/Wb+kP9pf5RCXQiOjGdhE5KJ6OT0ynolHQqOjWdhk5Lp6PT0xnojHQmOjOdhc5KZ6Oz0znonHQuOjedh85L56Pz0wXognQhujBdhC5KF6OL0yXoknQpujRdhi5Ll6PL0xXoinQlujJdha5KV6Or0zXomnQtujZdh65L16Pr0w3ohnQjujHdhG5KN6Ob0y3olnQrujXdhm5Lt6Pb0x3ojnQnujPdhe5Kd6O70z3onnQvujfdh+5L/0f3o/vTA+iB9CB6MD2EHkoPo4fTI+iR9Ch6ND2GHkuPo8fTE+iJ9CR6Mj2FnkpPo6fTM+iZ9Cx6Nj2HnkvPo+fTC+iF9CJ6Mb2EXkovo5fTK+iV9Cp6Nb2GXkuvo9fTG+iN9CZ6M72F3kpvo7fTO+id9C56N72H3kvvo/fTB+iD9CH6MH2EPkofo4/TJ+iT9Cn6NH2GPkufo8/TF+iL9CX6Mn2Fvkpfo6/TN+ib9C36Nn2Hvkvfo+/TD+iH9CP6Mf2Efko/o5/TL+iX9Cv6Nf2Gfku/o9/TH+iP9Cf6M/2F/kp/o7/TGI3TBE3SFE3TDM3SHM3TAi3SEi3TCq3SGq3TBm3SFm3TDu3SHu3TAR3SEQ1oSCM6pn/QP+lf9G/6D/2X/kcnMImYxEwSJimTjEnOpGBSMqmY1EwaJi2TjknPZGAyMpmYzEwWJiuTjcnO5GByMrmY3EweJi+Tj8nPFGAKMoWYwkwRpihTjCnOlGBKMqWY0kwZpixTjinPVGAqMpWYykwVpipTjanO1GBqMrWY2kwdpi5Tj6nPNGAaMo2YxkwTpinTjGnOtGBaMq2Y1kwbpi3TjmnPdGA6Mp2YzkwXpivTjenO9GB6Mr2Y3kwfpi/zH9OP6c8MYAYyg5jBzBBmKDOMGc6MYEYyo5jRzBhmLDOOGc9MYCYyk5jJzBRmKjONmc7MYGYys5jZzBxmLjOPmc8sYBYyi5jFzBJmKbOMWc6sYFYyq5jVzBpmLbOOWc9sYDYym5jNzBZmK7ON2c7sYHYyu5jdzB5mL7OP2c8cYA4yh5jDzBHmKHOMOc6cYE4yp5jTzBnmLHOOOc9cYC4yl5jLzBXmKnONuc7cYG4yt5jbzB3mLnOPuc88YB4yj5jHzBPmKfOMec68YF4yr5jXzBvmLfOOec98YD4yn5jPzBfmK/ON+c5gDM4QDMlQDM0wDMtwDM8IjMhIjMwojMpojM4YjMlYjM04jMt4jM8ETMhEDGAgg5iY+cH8ZH4xv5k/zF/mH5PAJmITs0nYpGwyNjmbgk3JpmJTs2nYtGw6Nj2bgc3IZmIzs1nYrGw2Njubg83J5mJzs3nYvGw+Nj9bgC3IFmILs0XYomwxtjhbgi3JlmJLs2XYsmw5tjxbga3IVmIrs1XYqmw1tjpbg63J1mJrs3XYumw9tj7bgG3INmIbs03Ypmwztjnbgm3JtmJbs23Ytmw7tj3bge3IdmI7s13Yrmw3tjvbg+3J9mJ7s33Yvux/bD+2PzuAHcgOYgezQ9ih7DB2ODuCHcmOYkezY9ix7Dh2PDuBnchOYiezU9ip7DR2OjuDncnOYmezc9i57Dx2PruAXcguYhezS9il7DJ2ObuCXcmuYleza9i17Dp2PbuB3chuYjezW9it7DZ2O7uD3cnuYneze9i97D52P3uAPcgeYg+zR9ij7DH2OHuCPcmeYk+zZ9iz7Dn2PHuBvcheYi+zV9ir7DX2OnuDvcneYm+zd9i77D32PvuAfcg+Yh+zT9in7DP2OfuCfcm+Yl+zb9i37Dv2PfuB/ch+Yj+zX9iv7Df2O4uxOEuwJEuxNMuwLMuxPCuwIiuxMquwKquxOmuwJmuxNuuwLuuxPhuwIRuxgIUsYmP2B/uT/cX+Zv+wf9l/bAKXiEvMJeGScsm45FwKLiWXikvNpeHScum49FwGLiOXicvMZeGyctm47FwOLieXi8vN5eHycvm4/FwBriBXiCvMFeGKcsW44lwJriRXiivNleHKcuW48lwFriJXiavMVeGqctW46lwNriZXi6vN1eHqcvW4+lwDriHXiGvMNeGacs245lwLriXXimvNteHacu249lwHriPXievMdeG6ct247lwPrifXi+vN9eH6cv9x/bj+3ABuIDeIG8wN4YZyw7jh3AhuJDeKG82N4cZy47jx3ARuIjeJm8xN4aZy07jp3AxuJjeLm83N4eZy87j53AJuIbeIW8wt4ZZyy7jl3ApuJbeKW82t4dZy67j13AZuI7eJ28xt4bZy27jt3A5uJ7eL283t4fZy+7j93AHuIHeIO8wd4Y5yx7jj3AnuJHeKO82d4c5y57jz3AXuIneJu8xd4a5y17jr3A3uJneLu83d4e5y97j73APuIfeIe8w94Z5yz7jn3AvuJfeKe8294d5y77j33AfuI/eJ+8x94b5y37jvHMbhHMGRHMXRHMOxHMfxnMCJnMTJnMKpnMbpnMGZnMXZnMO5nMf5XMCFXMQBDnKIi7kf3E/uF/eb+8P95f5xCXwiPjGfhE/KJ+OT8yn4lHwqPjWfhk/Lp+PT8xn4jHwmPjOfhc/KZ+Oz8zn4nHwuPjefh8/L5+Pz8wX4gnwhvjBfhC/KF+OL8yX4knwpvjRfhi/Ll+PL8xX4inwlvjJfha/KV+Or8zX4mnwtvjZfh6/L1+Pr8w34hnwjvjHfhG/KN+Ob8y34lnwrvjXfhm/Lt+Pb8x34jnwnvjPfhe/Kd+O78z34nnwvvjffh+/L/8f34/vzA/iB/CB+MD+EH8oP44fzI/iR/Ch+ND+GH8uP48fzE/iJ/CR+Mj+Fn8pP46fzM/iZ/Cx+Nj+Hn8vP4+fzC/iF/CJ+Mb+EX8ov45fzK/iV/Cp+Nb+GX8uv49fzG/iN/CZ+M7+F38pv47fzO/id/C5+N7+H38vv4/fzB/iD/CH+MH+EP8of44/zJ/iT/Cn+NH+GP8uf48/zF/iL/CX+Mn+Fv8pf46/zN/ib/C3+Nn+Hv8vf4+/zD/iH/CP+Mf+Ef8o/45/zL/iX/Cv+Nf+Gf8u/49/zH/iP/Cf+M/+F/8p/47/zGI/zBE/yFE/zDM/yHM/zAi/yEi/zCq/yGq/zBm/yFm/zDu/yHu/zAR/yEQ94yCM+5n/wP/lf/G/+D/+X/8cnCImExEISIamQTEgupBBSCqmE1EIaIa2QTkgvZBAyCpmEzEIWIauQTcgu5BByCrmE3EIeIa+QT8gvFBAKCoWEwkIRoahQTCgulBBKCqWE0kIZoaxQTigvVBAqCpWEykIVoapQTagu1BBqCrWE2kIdoa5QT6gvNBAaCo2ExkIToanQTGgutBBaCq2E1kIboa3QTmgvdBA6Cp2EzkIXoavQTegu9BB6Cr2E3kIfoa/wn9BP6C8MEAYKg4TBwhBhqDBMGC6MEEYKo4TRwhhhrDBOGC9MECYKk4TJwhRhqjBNmC7MEGYKs4TZwhxhrjBPmC8sEBYKi4TFwhJhqbBMWC6sEFYKq4TVwhphrbBOWC9sEDYKm4TNwhZhq7BN2C7sEHYKu4Tdwh5hr7BP2C8cEA4Kh4TDwhHhqHBMOC6cEE4Kp4TTwhnhrHBOOC9cEC4Kl4TLwhXhqnBNuC7cEG4Kt4Tbwh3hrnBPuC88EB4Kj4THwhPhqfBMeC68EF4Kr4TXwhvhrfBOeC98ED4Kn4TPwhfhq/BN+C5gAi4QAilQAi0wAitwAi8IgihIgiwogipogi4YgilYgi04git4gi8EQihEAhCggIRY+CH8FH4Jv4U/wl/hn5AgJhITi0nEpGIyMbmYQkwpphJTi2nEtGI6Mb2YQcwoZhIzi1nErGI2MbuYQ8wp5hJzi3nEvGI+Mb9YQCwoFhILi0XEomIxsbhYQiwplhJLi2XEsmI5sbxYQawoVhIri1XEqmI1sbpYQ6wp1hJri3XEumI9sb7YQGwoNhIbi03EpmIzsbnYQmwpthJbi23EtmI7sb3YQewodhI7i13ErmI3sbvYQ+wp9hJ7i33EvuJ/Yj+xvzhAHCgOEgeLQ8Sh4jBxuDhCHCmOEkeLY8Sx4jhxvDhBnChOEieLU8Sp4jRxujhDnCnOEmeLc8S54jxxvrhAXCguEheLS8Sl4jJxubhCXCmuEleLa8S14jpxvbhB3ChuEjeLW8St4jZxu7hD3CnuEneLe8S94j5xv3hAPCgeEg+LR8Sj4jHxuHhCPCmeEk+LZ8Sz4jnxvHhBvCheEi+LV8Sr4jXxunhDvCneEm+Ld8S74j3xvvhAfCg+Eh+LT8Sn4jPxufhCfCm+El+Lb8S34jvxvfhB/Ch+Ej+LX8Sv4jfxu4iJuEiIpEiJtMiIrMiJvCiIoiiJsqiIqqiJumiIpmiJtuiIruiJvhiIoRiJQIQiEmPxh/hT/CX+Fv+If8V/YoKUSEosJZGSSsmk5FIKKaWUSkotpZHSSumk9FIGKaOUScosZZGyStmk7FIOKaeUS8ot5ZHySvmk/FIBqaBUSCosFZGKSsWk4lIJqaRUSiotlZHKSuWk8lIFqaJUSaosVZGqStWk6lINqaZUS6ot1ZHqSvWk+lIDqaHUSGosNZGaSs2k5lILqaXUSmottZHaSu2k9lIHqaPUSeosdZG6St2k7lIPqafUS+ot9ZH6Sv9J/aT+0gBpoDRIGiwNkYZKw6Th0ghppDRKGi2NkcZK46Tx0gRpojRJmixNkaZK06Tp0gxppjRLmi3NkeZK86T50gJpobRIWiwtkZZKy6Tl0gpppbRKWi2tkdZK66T10gZpo7RJ2ixtkbZK26Tt0g5pp7RL2i3tkfZK+6T90gHpoHRIOiwdkY5Kx6Tj0gnppHRKOi2dkc5K56Tz0gXponRJuixdka5K16Tr0g3ppnRLui3dke5K96T70gPpofRIeiw9kZ5Kz6Tn0gvppfRKei29kd5K76T30gfpo/RJ+ix9kb5K36TvEibhEiGREiXREiOxEifxkiCJkiTJkiKpkibpkiGZkiXZkiO5kif5UiCFUiQBCUpIiqUf0k/pl/Rb+iP9lf5JCXIiObGcRE4qJ5OTyynklHIqObWcRk4rp5PTyxnkjHImObOcRc4qZ5OzyznknHIuObecR84r55PzywXkgnIhubBcRC4qF5OLyyXkknIpubRcRi4rl5PLyxXkinIlubJcRa4qV5OryzXkmnItubZcR64r15Pryw3khnIjubHcRG4qN5Obyy3klnIrubXcRm4rt5Pbyx3kjnInubPcRe4qd5O7yz3knnIvubfcR+4r/yf3k/vLA+SB8iB5sDxEHioPk4fLI+SR8ih5tDxGHiuPk8fLE+SJ8iR5sjxFnipPk6fLM+SZ8ix5tjxHnivPk+fLC+SF8iJ5sbxEXiovk5fLK+SV8ip5tbxGXiuvk9fLG+SN8iZ5s7xF3ipvk7fLO+Sd8i55t7xH3ivvk/fLB+SD8iH5sHxEPiofk4/LJ+ST8in5tHxGPiufk8/LF+SL8iX5snxFvipfk6/LN+Sb8i35tnxHvivfk+/LD+SH8iP5sfxEfio/k5/LL+SX8iv5tfxGfiu/k9/LH+SP8if5s/xF/ip/k7/LmIzLhEzKlEzLjMzKnMzLgizKkizLiqzKmqzLhmzKlmzLjuzKnuzLgRzKkQxkKCM5ln/IP+Vf8m/5j/xX/icnKImUxEoSJamSTEmupFBSKqmU1EoaJa2STkmvZFAyKpmUzEoWJauSTcmu5FByKrmU3EoeJa+ST8mvFFAKKoWUwkoRpahSTCmulFBKKqWU0koZpaxSTimvVFAqKpWUykoVpapSTamu1FBqKrWU2kodpa5ST6mvNFAaKo2UxkoTpanSTGmutFBaKq2U1kobpa3STmmvdFA6Kp2UzkoXpavSTemu9FB6Kr2U3kofpa/yn9JP6a8MUAYqg5TByhBlqDJMGa6MUEYqo5TRyhhlrDJOGa9MUCYqk5TJyhRlqjJNma7MUGYqs5TZyhxlrjJPma8sUBYqi5TFyhJlqbJMWa6sUFYqq5TVyhplrbJOWa9sUDYqm5TNyhZlq7JN2a7sUHYqu5Tdyh5lr7JP2a8cUA4qh5TDyhHlqHJMOa6cUE4qp5TTyhnlrHJOOa9cUC4ql5TLyhXlqnJNua7cUG4qt5Tbyh3lrnJPua88UB4qj5THyhPlqfJMea68UF4qr5TXyhvlrfJOea98UD4qn5TPyhflq/JN+a5gCq4QCqlQCq0wCqtwCq8IiqhIiqwoiqpoiq4YiqlYiq04iqt4iq8ESqhEClCggpRY+aH8VH4pv5U/yl/ln5KgJlITq0nUpGoyNbmaQk2pplJTq2nUtGo6Nb2aQc2oZlIzq1nUrGo2NbuaQ82p5lJzq3nUvGo+Nb9aQC2oFlILq0XUomoxtbhaQi2pllJLq2XUsmo5tbxaQa2oVlIrq1XUqmo1tbpaQ62p1lJrq3XUumo9tb7aQG2oNlIbq03UpmoztbnaQm2ptlJbq23Utmo7tb3aQe2odlI7q13Urmo3tbvaQ+2p9lJ7q33Uvup/aj+1vzpAHagOUgerQ9Sh6jB1uDpCHamOUkerY9Sx6jh1vDpBnahOUierU9Sp6jR1ujpDnanOUmerc9S56jx1vrpAXaguUherS9Sl6jJ1ubpCXamuUlera9S16jp1vbpB3ahuUjerW9St6jZ1u7pD3anuUnere9S96j51v3pAPageUg+rR9Sj6jH1uHpCPameUk+rZ9Sz6jn1vHpBvaheUi+rV9Sr6jX1unpDvaneUm+rd9S76j31vvpAfag+Uh+rT9Sn6jP1ufpCfam+Ul+rb9S36jv1vfpB/ah+Uj+rX9Sv6jf1u4qpuEqopEqptMqorMqpvCqooiqpsqqoqqqpumqopmqptuqoruqpvhqooRqpQIUqUmP1h/pT/aX+Vv+of9V/aoKWSEusJdGSasm05FoKLaWWSkutpdHSaum09FoGLaOWScusZdGyatm07FoOLaeWS8ut5dHyavm0/FoBraBWSCusFdGKasW04loJraRWSiutldHKauW08loFraJWSausVdGqatW06loNraZWS6ut1dHqavW0+loDraHWSGusNdGaas205loLraXWSmuttdHaau209loHraPWSeusddG6at207loPrafWS+ut9dH6av9p/bT+2gBtoDZIG6wN0YZqw7Th2ghtpDZKG62N0cZq47Tx2gRtojZJm6xN0aZq07Tp2gxtpjZLm63N0eZq87T52gJtobZIW6wt0ZZqy7Tl2gptpbZKW62t0dZq67T12gZto7ZJ26xt0bZq27Tt2g5tp7ZL263t0fZq+7T92gHtoHZIO6wd0Y5qx7Tj2gntpHZKO62d0c5q57Tz2gXtonZJu6xd0a5q17Tr2g3tpnZLu63d0e5q97T72gPtofZIe6w90Z5qz7Tn2gvtpfZKe6290d5q77T32gfto/ZJ+6x90b5q37TvGqbhGqGRGqXRGqOxGqfxmqCJmqTJmqKpmqbpmqGZmqXZmqO5mqf5WqCFWqQBDWpIi7Uf2k/tl/Zb+6P91f5pCXoiPbGeRE+qJ9OT6yn0lHoqPbWeRk+rp9PT6xn0jHomPbOeRc+qZ9Oz6zn0nHouPbeeR8+r59Pz6wX0gnohvbBeRC+qF9OL6yX0knopvbReRi+rl9PL6xX0inolvbJeRa+qV9Or6zX0mnotvbZeR6+r19Pr6w30hnojvbHeRG+qN9Ob6y30lnorvbXeRm+rt9Pb6x30jnonvbPeRe+qd9O76z30nnovvbfeR++r/6f30/vrA/SB+iB9sD5EH6oP04frI/SR+ih9tD5GH6uP08frE/SJ+iR9sj5Fn6pP06frM/SZ+ix9tj5Hn6vP0+frC/SF+iJ9sb5EX6ov05frK/SV+ip9tb5GX6uv09frG/SN+iZ9s75F36pv07frO/Sd+i59t75H36vv0/frB/SD+iH9sH5EP6of04/rJ/ST+in9tH5GP6uf08/rF/SL+iX9sn5Fv6pf06/rN/Sb+i39tn5Hv6vf0+/rD/SH+iP9sf5Ef6o/05/rL/SX+iv9tf5Gf6u/09/rH/SP+if9s/5F/6p/07/rmI7rhE7qlE7rjM7qnM7rgi7qki7riq7qmq7rhm7qlm7rju7qnu7rgR7qkQ50qCM91n/oP/Vf+m/9j/5X/6cnGImMxEYSI6mRzEhupDBSGqmM1EYaI62RzkhvZDAyGpmMzEYWI6uRzchu5DByGrmM3EYeI6+Rz8hvFDAKGoWMwkYRo6hRzChulDBKGqWM0kYZo6xRzihvVDAqGpWMykYVo6pRzahu1DBqGrWM2kYdo65Rz6hvNDAaGo2MxkYTo6nRzGhutDBaGq2M1kYbo63RzmhvdDA6Gp2MzkYXo6vRzehu9DB6Gr2M3kYfo6/xn9HP6G8MMAYag4zBxhBjqDHMGG6MMEYao4zRxhhjrDHOGG9MMCYak4zJxhRjqjHNmG7MMGYas4zZxhxjrjHPmG8sMBYai4zFxhJjqbHMWG6sMFYaq4zVxhpjrbHOWG9sMDYam4zNxhZjq7HN2G7sMHYau4zdxh5jr7HP2G8cMA4ah4zDxhHjqHHMOG6cME4ap4zTxhnjrHHOOG9cMC4al4zLxhXjqnHNuG7cMG4at4zbxh3jrnHPuG88MB4aj4zHxhPjqfHMeG68MF4ar4zXxhvjrfHOeG98MD4an4zPxhfjq/HN+G5gBm4QBmlQBm0wBmtwBm8IhmhIhmwohmpohm4YhmlYhm04hmt4hm8ERmhEBjCggYzY+GH8NH4Zv40/xl/jn5FgJjITm0nMpGYyM7mZwkxppjJTm2nMtGY6M72ZwcxoZjIzm1nMrGY2M7uZw8xp5jJzm3nMvGY+M79ZwCxoFjILm0XMomYxs7hZwixpljJLm2XMsmY5s7xZwaxoVjIrm1XMqmY1s7pZw6xp1jJrm3XMumY9s77ZwGxoNjIbm03MpmYzs7nZwmxptjJbm23MtmY7s73ZwexodjI7m13MrmY3s7vZw+xp9jJ7m33MvuZ/Zj+zvznAHGgOMgebQ8yh5jBzuDnCHGmOMkebY8yx5jhzvDnBnGhOMiebU8yp5jRzujnDnGnOMmebc8y55jxzvrnAXGguMhebS8yl5jJzubnCXGmuMleba8y15jpzvbnB3GhuMjebW8yt5jZzu7nD3GnuMnebe8y95j5zv3nAPGgeMg+bR8yj5jHzuHnCPGmeMk+bZ8yz5jnzvHnBvGheMi+bV8yr5jXzunnDvGneMm+bd8y75j3zvvnAfGg+Mh+bT8yn5jPzufnCfGm+Ml+bb8y35jvzvfnB/Gh+Mj+bX8yv5jfzu4mZuEmYpEmZtMmYrMmZvCmYoimZsqmYqqmZummYpmmZtumYrumZvhmYoRmZwIQmMmPzh/nT/GX+Nv+Yf81/ZoKVyEpsJbGSWsms5FYKK6WVykptpbHSWums9FYGK6OVycpsZbGyWtms7FYOK6eVy8pt5bHyWvms/FYBq6BVyCpsFbGKWsWs4lYJq6RVyiptlbHKWuWs8lYFq6JVyapsVbGqWtWs6lYNq6ZVy6pt1bHqWvWs+lYDq6HVyGpsNbGaWs2s5lYLq6XVympttbHaWu2s9lYHq6PVyepsdbG6Wt2s7lYPq6fVy+pt9bH6Wv9Z/az+1gBroDXIGmwNsYZaw6zh1ghrpDXKGm2NscZa46zx1gRrojXJmmxNsaZa06zp1gxrpjXLmm3NseZa86z51gJrobXIWmwtsZZay6zl1gprpbXKWm2tsdZa66z11gZro7XJ2mxtsbZa26zt1g5rp7XL2m3tsfZa+6z91gHroHXIOmwdsY5ax6zj1gnrpHXKOm2dsc5a56zz1gXronXJumxdsa5a16zr1g3rpnXLum3dse5a96z71gProfXIemw9sZ5az6zn1gvrpfXKem29sd5a76z31gfro/XJ+mx9sb5a36zvFmbhFmGRFmXRFmOxFmfxlmCJlmTJlmKplmbplmGZlmXZlmO5lmf5VmCFVmQBC1rIiq0f1k/rl/Xb+mP9tf5ZCXYiO7GdxE5qJ7OT2ynslHYqO7Wdxk5rp7PT2xnsjHYmO7Odxc5qZ7Oz2znsnHYuO7edx85r57Pz2wXsgnYhu7BdxC5qF7OL2yXsknYpu7Rdxi5rl7PL2xXsinYlu7Jdxa5qV7Or2zXsmnYtu7Zdx65r17Pr2w3shnYju7HdxG5qN7Ob2y3slnYru7Xdxm5rt7Pb2x3sjnYnu7Pdxe5qd7O72z3snnYvu7fdx+5r/2f3s/vbA+yB9iB7sD3EHmoPs4fbI+yR9ih7tD3GHmuPs8fbE+yJ9iR7sj3FnmpPs6fbM+yZ9ix7tj3HnmvPs+fbC+yF9iJ7sb3EXmovs5fbK+yV9ip7tb3GXmuvs9fbG+yN9iZ7s73F3mpvs7fbO+yd9i57t73H3mvvs/fbB+yD9iH7sH3EPmofs4/bJ+yT9in7tH3GPmufs8/bF+yL9iX7sn3Fvmpfs6/bN+yb9i37tn3Hvmvfs+/bD+yH9iP7sf3Efmo/s5/bL+yX9iv7tf3Gfmu/s9/bH+yP9if7s/3F/mp/s7/bmI3bhE3alE3bjM3anM3bgi3aki3biq3amq3bhm3alm3bju3anu3bgR3akQ1saCM7tn/YP+1f9m/7j/3X/mcnOImcxE4SJ6mTzEnupHBSOqmc1E4aJ62TzknvZHAyOpmczE4WJ6uTzcnu5HByOrmc3E4eJ6+Tz8nvFHAKOoWcwk4Rp6hTzCnulHBKOqWc0k4Zp6xTzinvVHAqOpWcyk4Vp6pTzanu1HBqOrWc2k4dp65Tz6nvNHAaOo2cxk4Tp6nTzGnutHBaOq2c1k4bp63TzmnvdHA6Op2czk4Xp6vTzenu9HB6Or2c3k4fp6/zn9PP6e8McAY6g5zBzhBnqDPMGe6McEY6o5zRzhhnrDPOGe9McCY6k5zJzhRnqjPNme7McGY6s5zZzhxnrjPPme8scBY6i5zFzhJnqbPMWe6scFY6q5zVzhpnrbPOWe9scDY6m5zNzhZnq7PN2e7scHY6u5zdzh5nr7PP2e8ccA46h5zDzhHnqHPMOe6ccE46p5zTzhnnrHPOOe9ccC46l5zLzhXnqnPNue7ccG46t5zbzh3nrnPPue88cB46j5zHzhPnqfPMee68cF46r5zXzhvnrfPOee98cD46n5zPzhfnq/PN+e5gDu4QDulQDu0wDutwDu8IjuhIjuwojupoju4YjulYju04jut4ju8ETuhEDnCgg5zY+eH8dH45v50/zl/nn5PgJnITu0ncpG4yN7mbwk3ppnJTu2nctG46N72bwc3oZnIzu1ncrG42N7ubw83p5nJzu3ncvG4+N79bwC3oFnILu0Xcom4xt7hbwi3plnJLu2Xcsm45t7xbwa3oVnIru1Xcqm41t7pbw63p1nJru3Xcum49t77bwG3oNnIbu03cpm4zt7nbwm3ptnJbu23ctm47t73bwe3odnI7u13crm43t7vbw+3p9nJ7u33cvu5/bj+3vzvAHegOcge7Q9yh7jB3uDvCHemOcke7Y9yx7jh3vDvBnehOcie7U9yp7jR3ujvDnenOcme7c9y57jx3vrvAXeguche7S9yl7jJ3ubvCXemucle7a9y17jp3vbvB3ehucje7W9yt7jZ3u7vD3enucne7e9y97j53v3vAPegecg+7R9yj7jH3uHvCPemeck+7Z9yz7jn3vHvBveheci+7V9yr7jX3unvDvenecm+7d9y77j33vvvAfeg+ch+7T9yn7jP3ufvCfem+cl+7b9y37jv3vfvB/eh+cj+7X9yv7jf3u4u5uEu4pEu5tMu4rMu5vCu4oiu5squ4qqu5umu4pmu5tuu4ruu5vhu4oRu5wIUucmP3h/vT/eX+dv+4f91/boKXyEvsJfGSesm85F4KL6WXykvtpfHSeum89F4GL6OXycvsZfGyetm87F4OL6eXy8vt5fHyevm8/F4Br6BXyCvsFfGKesW84l4Jr6RXyivtlfHKeuW88l4Fr6JXyavsVfGqetW86l4Nr6ZXy6vt1fHqevW8+l4Dr6HXyGvsNfGaes285l4Lr6XXymvttfHaeu289l4Hr6PXyevsdfG6et287l4Pr6fXy+vt9fH6ev95/bz+3gBvoDfIG+wN8YZ6w7zh3ghvpDfKG+2N8cZ647zx3gRvojfJm+xN8aZ607zp3gxvpjfLm+3N8eZ687z53gJvobfIW+wt8ZZ6y7zl3gpvpbfKW+2t8dZ667z13gZvo7fJ2+xt8bZ627zt3g5vp7fL2+3t8fZ6+7z93gHvoHfIO+wd8Y56x7zj3gnvpHfKO+2d8c5657zz3gXvonfJu+xd8a5617zr3g3vpnfLu+3d8e5697z73gPvoffIe+w98Z56z7zn3gvvpffKe+298d5677z33gfvo/fJ++x98b5637zvHubhHuGRHuXRHuOxHufxnuCJnuTJnuKpnubpnuGZnuXZnuO5nuf5XuCFXuQBD3rIi70f3k/vl/fb++P99f55CX4iP7GfxE/qJ/OT+yn8lH4qP7Wfxk/rp/PT+xn8jH4mP7Ofxc/qZ/Oz+zn8nH4uP7efx8/r5/Pz+wX8gn4hv7BfxC/qF/OL+yX8kn4pv7Rfxi/rl/PL+xX8in4lv7Jfxa/qV/Or+zX8mn4tv7Zfx6/r1/Pr+w38hn4jv7HfxG/qN/Ob+y38ln4rv7Xfxm/rt/Pb+x38jn4nv7Pfxe/qd/O7+z38nn4vv7ffx+/r/+f38/v7A/yB/iB/sD/EH+oP84f7I/yR/ih/tD/GH+uP88f7E/yJ/iR/sj/Fn+pP86f7M/yZ/ix/tj/Hn+vP8+f7C/yF/iJ/sb/EX+ov85f7K/yV/ip/tb/GX+uv89f7G/yN/iZ/s7/F3+pv87f7O/yd/i5/t7/H3+vv8/f7B/yD/iH/sH/EP+of84/7J/yT/in/tH/GP+uf88/7F/yL/iX/sn/Fv+pf86/7N/yb/i3/tn/Hv+vf8+/7D/yH/iP/sf/Ef+o/85/7L/yX/iv/tf/Gf+u/89/7H/yP/if/s//F/+p/87/7mI/7hE/6lE/7jM/6nM/7gi/6ki/7iq/6mq/7hm/6lm/7ju/6nu/7gR/6kQ986CM/9n/4P/1f/m//j//X/+cnBImCxEGSIGmQLEgepAhSBqmC1EGaIG2QLkgfZAgyBpmCzEGWIGuQLcge5AhyBrmC3EGeIG+QL8gfFAgKBoWCwkGRoGhQLCgelAhKBqWC0kGZoGxQLigfVAgqBpWCykGVoGpQLage1AhqBrWC2kGdoG5QL6gfNAgaBo2CxkGToGnQLGgetAhaBq2C1kGboG3QLmgfdAg6Bp2CzkGXoGvQLege9Ah6Br2C3kGfoG/wX9Av6B8MCAYGg4LBwZBgaDAsGB6MCEYGo4LRwZhgbDAuGB9MCCYGk4LJwZRgajAtmB7MCGYGs4LZwZxgbjAvmB8sCBYGi4LFwZJgabAsWB6sCFYGq4LVwZpgbbAuWB9sCDYGm4LNwZZga7At2B7sCHYGu4LdwZ5gb7Av2B8cCA4Gh4LDwZHgaHAsOB6cCE4Gp4LTwZngbHAuOB9cCC4Gl4LLwZXganAtuB7cCG4Gt4LbwZ3gbnAvuB88CB4Gj4LHwZPgafAseB68CF4Gr4LXwZvgbfAueB98CD4Gn4LPwZfga/At+B5gAR4QARlQAR0wARtwAR8IgRhIgRwogRpogR4YgRlYgR04gRt4gR8EQRhEAQhggII4+BH8DH4Fv4M/wd/gX5AQJgoTh0nCpGGyMHmYIkwZpgpTh2nCtGG6MH2YIcwYZgozh1nCrGG2MHuYI8wZ5gpzh3nCvGG+MH9YICwYFgoLh0XComGxsHhYIiwZlgpLh2XCsmG5sHxYIawYVgorh1XCqmG1sHpYI6wZ1gprh3XCumG9sH7YIGwYNgobh03CpmGzsHnYImwZtgpbh23CtmG7sH3YIewYdgo7h13CrmG3sHvYI+wZ9gp7h33CvgkJCQlh/3BAODAcFA4Oh4RDw2Hh8HBEODIcFY4Ox4Rjw3Hh+HBCODGcFE4Op4RTw2nh9HBGODOcFc4O54Rzw3nh/HBBuDBcFC4Ol4RLw2Xh8nBFuDJcFa4O14Rrw3Xh+nBDuDHcFG4Ot4Rbw23h9nBHuDPcFe4O94R7w33h/vBAeDA8FB4Oj4RHw2Ph8fBEeDI8FZ4Oz4Rnw3Ph+fBCeDG8FF4Or4RXw2vh9fBGeDO8Fd4O74R3w3vh/fBB+DB8FD4On4RPw2fh8/BF+DJ8Fb4O34Rvw3fh+/BD+DH8FH4Ov4Rfw2/h9xAL8ZAIyZAK6ZAJ2ZAL+VAIxVAK5VAJ1VAL9dAIzdAK7dAJ3dAL/TAIwzAKQQhDFMbhj/Bn+Cv8Hf4J/4b/woQoUZQ4ShIljZJFyaMUUcooVZQ6ShOljdJF6aMMUcYoU5Q5yhJljbJF2aMcUc4oV5Q7yhPljfJF+aMCUcGoUFQ4KhIVjYpFxaMSUcmoVFQ6KhOVjcpF5aMKUcWoUlQ5qhJVjapF1aMaUc2oVlQ7qhPVjepF9aMGUcOoUdQ4ahI1jZpFzaMWUcuoVdQ6ahO1jdpF7aMOUceoU9Q56hJ1jbpF3aMeUc+oV9Q76hP1jf6L+kX9owHRwGhQNDgaEg2NhkXDoxHRyGhUNDoaE42NxkXjownRxGhSNDmaEk2NpkXToxnRzGhWNDuaE82N5kXzowXRwmhRtDhaEi2NlkXLoxXRymhVtDpaE62N1kXrow3RxmhTtDnaEm2NtkXbox3RzmhXtDvaE+2N9kX7owPRwehQdDg6Eh2NjkXHoxPRyehUdDo6E52NzkXnowvRxehSdDm6El2NrkUDohvRzehWdDu6E92N7kX3owfRw+hR9Dh6Ej2NnkXPoxfRy+hV9Dp6E72N3kXvow/Rx+hT9Dn6En2NvkXfIyzCIyIiIyqiIyZiIy7iIyESIymSIyVSIy3SIyMyIyuyIydyIy/yoyAKoygCEYxQFEc/op/Rr+h39Cf6G/2LEkAikBgkAUlBMpAcpAApQSqQGqQBaUE6kB5kABlBJpAZZAFZQTaQHeQAOUEukBvkAXlBPpAfFAAFQSFQGBQBRUExUByUACVBKVAalAFlQTlQHlQAFUElUBlUAVVBNVAd1AA1QS1QG9QBdUE9UB80AA1BI9AYNAFNQTPQHLQALUEr0Bq0AW1BO9AedAAdQSfQGXQBXUE30B30AD1BL9Ab9AF9wX+gH+gPBoCBYBAYDIaAoWAYGA5GgJFgFBgNxoCxYBwYDyaAiWASmAymgKlgGpgOZoCZYBaYDeaAuWAemA8WgIVgEVgMloClYBlYDlaAlWAVWA3WgLVgHVgPNoCNYBPYDLaArWAb2A52gJ1gF9gN9oC9YB/YDw6Ag+AQOAyOgKPgGDgOToCT4BQ4Dc6As+AcOA8ugIvgErgMroCr4Bq4Dm6Am+AWuA3ugLvgHrgPHoCH4BF4DJ6Ap+AZeA5egJfgFXgN3oC34B14Dz6Aj+AT+Ay+gK/gG/gOMIADApCAAjRgAAs4wAMBiEACMlCACjSgAwOYwAI2cIALPOCDAIQgAgBAgEAMfoCf4Bf4Df6Av+AfSICJYGKYBCaFyWBymAKmhKlgapgGpoXpYHqYAWaEmWBmmAVmhdlgdpgD5oS5YG6YB+aF+WB+WAAWhIVgYVgEFoXFYHFYApaEpWBpWAaWheVgeVgBVoSVYGVYBVaF1WB1WAPWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA/aEvWBv2Af2hf/BfrA/HAAHwkFwMBwCh8JhcDgcAUfCUXA0HAPHwnFwPJwAJ8JJcDKcAqfCaXA6nAFnwllwNpwD58J5cD5cABfCRXAxXAKXwmVwOVwBV8JVcDVcA9fCdXA93AA3wk1wM9wCt8JtcDvcAXfCXXA33AP3wn1wPzwAD8JD8DA8Ao/CY/A4PAFPwlPwNDwDz8Jz8Dy8AC/CS/AyvAKvwmvwOrwBb8Jb8Da8A+/Ce/A+fAAfwkfwMXwCn8Jn8Dl8AV/CV/A1fAPfwnfwPfwAP8JP8DP8Ar/Cb/A7xCAOCUhCCtKQgSzkIA8FKEIJylCBKtSgDg1oQgva0IEu9KAPAxjCCAIIIYIx/AF/wl/wN/wD/8J/MAElQolREpQUJUPJUQqUEqVCqVEalBalQ+lRBpQRZUKZURaUFWVD2VEOlBPlQrlRHpQX5UP5UQFUEBVChVERVBQVQ8VRCVQSlUKlURlUFpVD5VEFVBFVQpVRFVQVVUPVUQ1UE9VCtVEdVBfVQ/VRA9QQNUKNURPUFDVDzVEL1BK1Qq1RG9QWtUPtUQfUEXVCnVEX1BV1Q91RD9QT9UK9UR/UF/2H+qH+aAAaiAahwWgIGoqGoeFoBBqJRqHRaAwai8ah8WgCmogmocloCpqKpqHpaAaaiWah2WgOmovmofloAVqIFqHFaAlaipah5WgFWolWodVoDVqL1qH1aAPaiDahzWgL2oq2oe1oB9qJdqHdaA/ai/ah/egAOogOocPoCDqKjqHj6AQ6iU6h0+gMOovOofPoArqILqHL6Aq6iq6h6+gGuoluodvoDrqL7qH76AF6iB6hx+gJeoqeoefoBXqJXqHX6A16i96h9+gD+og+oc/oC/qKvqHvCEM4IhCJKEQjBrGIQzwSkIgkJCMFqUhDOjKQiSxkIwe5yEM+ClCIIgQQRAjF6Af6iX6h3+gP+ov+oYQ4UZw4ThInjZPFyeMUcco4VZw6ThOnjdPF6eMMccY4U5w5zhJnjbPF2eMccc44V5w7zhPnjfPF+eMCccG4UFw4LhIXjYvFxeMSccm4VFw6LhOXjcvF5eMKccW4Ulw5rhJXjavF1eMacc24Vlw7rhPXjevF9eMGccO4Udw4bhI3jZvFzeMWccu4Vdw6bhO3jdvF7eMOcce4U9w57hJ3jbvF3eMecc+4V9w77hP3jf+L+8X94wHxwHhQPDgeEg+Nh8XD4xHxyHhUPDoeE4+Nx8Xj4wnxxHhSPDmeEk+Np8XT4xnxzHhWPDueE8+N58Xz4wXxwnhRvDheEi+Nl8XL4xXxynhVvDpeE6/9nz27jrqsuPOFf7obCxYghECMB4K7uyUEDRCCRdAGGmisgca1cXd3d3d3d3d3d9vl7wKafgO5uWNrZu4Mn88f51endu3ae59az/rWc053QHdgd1B3cHdId2h3WHd4d0R3ZHdUd3R3THdsd1x3fHdCd2J3Undyd0p3andad3p3Rndmd1Z3dndOd253Xnd+d0F3YXdRd3F3SXdpd1l3eXdFd2V3VXd1d013bXddd313Q3djd1N3c3dLd2t3W3d7d0d3Z3dXd3d3T3dvd193f/dA92D3UPdw90j3aPdY93j3RPdk91T3dPdM92z3XPd890L3YvdS93L3Svdq91r3evdG92b3Vvd29073bvde9373Qfdh91H3cfdJ92n3Wfd590X3Zdd1oYtd6nJXutq1rhf6hf5hQBgpjBxGCaOG0cKPwuhhjDBmGCuMHX4cxgnjhvHCT8L44adhgvCzMGGYKPw8/CL8Mvwq/DpMHPrCJGHS8JswWZg8TBGmDFOFqcM0YdowXZg+zBBmDDOFmcMsYdYwW5g9zBHmDHOFucM8Yd4wX5g/LBAWDAuF34bfhYXD78MiYdGwWFg8LBGWDH8IS4WlwzLhj2HZ8KewXFg+rBBWDCuFP4e/hL+Gv4WVwyph1bBaWD2sEQaGNcNaYe0wKKwT1g3rhcFh/bBB2DBsFDYOQ8ImYdOwWRgaNg9bhC3DVmHrsE3YNmwXtg87hB3DTmFY2DnsEnYNu4Xdwx5hz7BX2DvsE/YN+4X9wwHhwHBQODgcEg4Nh4XDwxHhyHBUODocE44Nx4XjwwnhxHBSODmcEk4Np4XTwxnhzHBWODucE84N54XzwwXhwnBRuDhcEi4Nl4XLwxXhynBVuDpcE64N14Xrww3hxnBTuDncEm4Nt4Xbwx3hznBXuDvcE+4N94X7wwPhwfBQeDg8Eh4Nj4XHwxPhyfBUeDo8E54Nz4XnwwvhxfBSeDm8El4Nr4XXwxvhzfBWeDu8E94N74X3wwfhw/BR+Dh8Ej4Nn4XPwxfhy9CFEGJIIYcSamihF/vF/nFAHCmOHEeJo8bR4o/i6HGMOGYcK44dfxzHiePG8eJP4vjxp3GC+LM4YZwo/jz+Iv4y/ir+Ok4c++IkcdL4mzhZnDxOEaeMU8Wp4zRx2jhdnD7OEGeMM8WZ4yxx1jhbnD3OEeeMc8W54zxx3jhfnD8uEBeMC8Xfxt/FhePv4yJx0bhYXDwuEZeMf4hLxaXjMvGPcdn4p7hcXD6uEFeMK8U/x7/Ev8a/xZXjKnHVuFpcPa4RB8Y141px7TgorhPXjevFwXH9uEHcMG4UN45D4iZx07hZHBo3j1vELeNWceu4Tdw2bhe3jzvEHeNOcVjcOe4Sd427xd3jHnHPuFfcO+4T9437xf3jAfHAeFA8OB4SD42HxcPjEfHIeFQ8Oh4Tj43HxePjCfHEeFI8OZ4ST42nxdPjGfHMeFY8O54Tz43nxfPjBfHCeFG8OF4SL42XxcvjFfHKeFW8Ol4Tr43XxevjDfHGeFO8Od4Sb423xdvjHfHOeFe8O94T7433xfvjA/HB+FB8OD4SH42PxcfjE/HJ+FR8Oj4Tn43PxefjC/HF+FJ8Ob4SX42vxdfjG/HN+FZ8O74T343vxffjB/HD+FH8OH4SP42fxc/jF/HL2MUQY0wxxxJrbLGX+qX+aUAaKY2cRkmjptHSj9LoaYw0ZhorjZ1+nMZJ46bx0k/S+OmnaYL0szRhmij9PP0i/TL9Kv06TZz60iRp0vSbNFmaPE2RpkxTpanTNGnaNF2aPs2QZkwzpZnTLGnWNFuaPc2R5kxzpbnTPGneNF+aPy2QFkwLpd+m36WF0+/TImnRtFhaPC2Rlkx/SEulpdMy6Y9p2fSntFxaPq2QVkwrpT+nv6S/pr+lldMqadW0Wlo9rZEGpjXTWmntNCitk9ZN66XBaf20QdowbZQ2TkPSJmnTtFkamjZPW6Qt01Zp67RN2jZtl7ZPO6Qd005pWNo57ZJ2Tbul3dMeac+0V9o77ZP2Tful/dMB6cB0UDo4HZIOTYelw9MR6ch0VDo6HZOOTcel49MJ6cR0Ujo5nZJOTael09MZ6cx0Vjo7nZPOTeel89MF6cJ0Ubo4XZIuTZely9MV6cp0Vbo6XZOuTdel69MN6cZ0U7o53ZJuTbel29Md6c50V7o73ZPuTfel+9MD6cH0UHo4PZIeTY+lx9MT6cn0VHo6PZOeTc+l59ML6cX0Uno5vZJeTa+l19Mb6c30Vno7vZPeTe+l99MH6cP0Ufo4fZI+TZ+lz9MX6cvUpZBiSimnkmpqqZf75f55QB4pj5xHyaPm0fKP8uh5jDxmHiuPnX+cx8nj5vHyT/L4+ad5gvyzPGGeKP88/yL/Mv8q/zpPnPvyJHnS/Js8WZ48T5GnzFPlqfM0edo8XZ4+z5BnzDPlmfMsedY8W549z5HnzHPlufM8ed48X54/L5AXzAvl3+bf5YXz7/MiedG8WF48L5GXzH/IS+Wl8zL5j3nZ/Ke8XF4+r5BXzCvlP+e/5L/mv+WV8yp51bxaXj2vkQfmNfNaee08KK+T183r5cF5/bxB3jBvlDfOQ/ImedO8WR6aN89b5C3zVnnrvE3eNm+Xt8875B3zTnlY3jnvknfNu+Xd8x55z7xX3jvvk/fN++X98wH5wHxQPjgfkg/Nh+XD8xH5yHxUPjofk4/Nx+Xj8wn5xHxSPjmfkk/Np+XT8xn5zHxWPjufk8/N5+Xz8wX5wnxRvjhfki/Nl+XL8xX5ynxVvjpfk6/N1+Xr8w35xnxTvjnfkm/Nt+Xb8x35znxXvjvfk+/N9+X78wP5wfxQfjg/kh/Nj+XH8xP5yfxUfjo/k5/Nz+Xn8wv5xfxSfjm/kl/Nr+XX8xv5zfxWfju/k9/N7+X38wf5w/xR/jh/kj/Nn+XP8xf5y9zlkGNOOeeSa265V/qV/mVAGamMXEYpo5bRyo/K6GWMMmYZq4xdflzGKeOW8cpPyvjlp2WC8rMyYZmo/Lz8ovyy/Kr8ukxc+sokZdLymzJZmbxMUaYsU5WpyzRl2jJdmb7MUGYsM5WZyyxl1jJbmb3MUeYsc5W5yzxl3jJfmb8sUBYsC5Xflt+VhcvvyyJl0bJYWbwsUZYsfyhLlaXLMuWPZdnyp7JcWb6sUFYsK5U/l7+Uv5a/lZXLKmXVslpZvaxRBpY1y1pl7TKorFPWLeuVwWX9skHZsGxUNi5DyiZl07JZGVo2L1uULctWZeuyTdm2bFe2LzuUHctOZVjZuexSdi27ld3LHmXPslfZu+xT9i37lf3LAeXAclA5uBxSDi2HlcPLEeXIclQ5uhxTji3HlePLCeXEclI5uZxSTi2nldPLGeXMclY5u5xTzi3nlfPLBeXCclG5uFxSLi2XlcvLFeXKclW5ulxTri3XlevLDeXGclO5udxSbi23ldvLHeXOcle5u9xT7i33lfvLA+XB8lB5uDxSHi2PlcfLE+XJ8lR5ujxTni3PlefLC+XF8lJ5ubxSXi2vldfLG+XN8lZ5u7xT3i3vlffLB+XD8lH5uHxSPi2flc/LF+XL0pVQYkkll1JqaaVX+9X+dUAdqY5cR6mj1tHqj+rodYw6Zh2rjl1/XMep49bx6k/q+PWndYL6szphnaj+vP6i/rL+qv66Tlz76iR10vqbOlmdvE5Rp6xT1anrNHXaOl2dvs5QZ6wz1ZnrLHXWOludvc5R56xz1bnrPHXeOl+dvy5QF6wL1d/W39WF6+/rInXRulhdvC5Rl6x/qEvVpesy9Y912fqnulxdvq5QV6wr1T/Xv9S/1r/VlesqddW6Wl29rlEH1jXrWnXtOqiuU9et69XBdf26Qd2wblQ3rkPqJnXTulkdWjevW9Qt61Z167pN3bZuV7evO9Qd6051WN257lJ3rbvV3esedc+6V9277lP3rfvV/esB9cB6UD24HlIPrYfVw+sR9ch6VD26HlOPrcfV4+sJ9cR6Uj25nlJPrafV0+sZ9cx6Vj27nlPPrefV8+sF9cJ6Ub24XlIvrZfVy+sV9cp6Vb26XlOvrdfV6+sN9cZ6U7253lJvrbfV2+sd9c56V7273lPvrffV++sD9cH6UH24PlIfrY/Vx+sT9cn6VH26PlOfrc/V5+sL9cX6Un25vlJfra/V1+sb9c36Vn27vlPfre/V9+sH9cP6Uf24flI/rZ/Vz+sX9cva1VBjTTXXUmtttdf6tf5tQBupjdxGaaO20dqP2uhtjDZmG6uN3X7cxmnjtvHaT9r47adtgvazNmGbqP28/aL9sv2q/bpN3PraJG3S9ps2WZu8TdGmbFO1qds0bdo2XZu+zdBmbDO1mdssbdY2W5u9zdHmbHO1uds8bd42X5u/LdAWbAv9u85fua3SVm2rtdXbGm1gW7Ot1dZug9o6bd22Xhvc1m8btA3bRm3jNqRt0jZtm7WhbfO2RduybdW2btu0bdt2bfu2Q9ux7dSGtZ3bLm3Xtlvbve3R9mx7tb3bPm3ftl/bvx3QDmwHtYPbIe3Qdlg7vB3RjmxHtaPbMe3Ydlw7vp3QTmwntZPbKe3Udlo7vZ3RzmxntbPbOe3cdl47v13QLmwXtYvbJe3Sdlm7vF3RrmxXtavbNe3adl27vt3Qbmw3tZvbLe3Wdlu7vd3R7mx3tbvbPe3edl+7vz3QHmwPtYfbI+3R9lh7vD3RnmxPtafbM+3Z9lx7vr3QXmwvtZfbK+3V9lp7vb3R3mxvtbfbO+3d9l57v33QPmwftY/bJ+3T9ln7vH3RvmxdCy221HIrrbbWegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/KdYdImlFpmpN/KI9/16/XoL9fr1TurX6/VG+//HjTS8jva988fp9XprfN2a8OvXxUe0/u9G+Vfe30y9Xm+9EfP37y35davf8DseuTdshZk23rc+1e+f1d5Lwyd66rvXHWnAZL2le4v2Vhj+ftjwe//q6b96/dbkw+tC33as0X/4jX23jjvFN5/QRd+ZZ8A/PM+Iecb5ThlRx+33zXyttfav/Ij+A76/mvywWP8fNuv/wzbaP83/Nb6X/wOGp2L/783wz/L/X8rl/2P+9/vHrq/yf5MR8/fvLfdvzf++4RMNr99ed7QR+b90b3Bvs95mw/v/2T7g29aI/O77P9dJ+n8T2/81+f0f9f3V5H+jUf/pEev/w2b9f9j6/0P+9/+/5H///4n5P+Kbi2/q3+f/Ur0hvXV7i/YG9zbsDRre/8/yf8HhdUT+f2/eb+skC/X7+iT5z//7rP8Pm/X/YfvH/B8wPP/f+l7+j/J3e4C/N87wvPw2/2f6d+b/d7/n79db9t+c89/17fyjDpist1JvSG/D3ha9jXqDvp532Ijr9O+tPeKKIw376jm+/T1g/K+Pzjb8ecfvndhvvN43yd4bebzh53/d982Akb/697+vf+87Y75/rDd8rzTTiOuP1BtveGtob5vetr0NegN7G369G/n2+4iv9j5TjRg/cm/M7/2+MmD4kw8b0T/hiN8dJvwX9yH+/n/YrP//asP+pQHW/4et/9f5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw93oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/yd5d7qBlVlh0+b6+vr7eaP2Hd3bfHTOsN6zXBnzTHml4XxteP+/1ev16vd6Xx+y82LRDH1z4q76xJ75h0+3Pm/SmzcdY6bKxrx21d/84q7370Syv3T/B/RO9W1dYb/DQvsFD+zYesnnfwL41hwzZfOCaGw7qW3vw0A1m6Ft2w0EDhw7qG7zx0EGbfefwOhsO2WSTbfoGbrz2WKNvstmgoUP7Bm68Td8Gg7bp23xI3+abbdM3cN2Bgzfum2GGGfrGGv2/6rP7n2/Fc/677wCA/x7/XwAAAP//ZSXofg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) open_by_handle_at(r0, 0x0, 0x0) 22:26:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) 22:26:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 955.384165][T21350] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 955.466214][T21350] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 955.493669][T21350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 82: padding at end of block bitmap is not set 22:26:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) [ 955.525081][T21350] EXT4-fs (loop4): 1 truncate cleaned up 22:26:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 955.567688][T21350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 955.664604][T21360] loop5: detected capacity change from 0 to 4096 [ 955.678773][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.766322][ T5034] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 955.853839][T21360] ntfs: (device loop5): parse_options(): NLS character set iso8859 not found. Using previous one euc-jp. [ 955.874713][T21372] loop4: detected capacity change from 0 to 512 [ 955.892901][T21372] EXT4-fs: Ignoring removed mblk_io_submit option [ 955.902522][T21372] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 955.929591][T21360] ntfs: volume version 3.1. [ 955.946456][T21372] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 955.969325][T21372] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 83: padding at end of block bitmap is not set [ 955.998412][T21372] EXT4-fs (loop4): 1 truncate cleaned up [ 956.004144][T21372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.006140][ T5034] usb 3-1: Using ep0 maxpacket: 32 [ 956.092150][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.186348][ T5034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 956.356130][ T5034] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 956.376033][ T5034] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 956.384541][ T5034] usb 3-1: Product: syz [ 956.389527][ T5034] usb 3-1: Manufacturer: syz [ 956.394169][ T5034] usb 3-1: SerialNumber: syz [ 956.405526][ T5034] usb 3-1: config 0 descriptor?? [ 956.458126][ T5034] ldusb 3-1:0.0: Interrupt in endpoint not found 22:26:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') 22:26:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x24004004) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x40a}, 0x1c) 22:26:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:46 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d03"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 958.348364][ T5034] usb 3-1: USB disconnect, device number 60 22:26:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 958.410942][T21378] tls_set_device_offload: netdev not found [ 958.444489][T21381] loop4: detected capacity change from 0 to 512 22:26:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 958.472456][T21381] EXT4-fs: Ignoring removed mblk_io_submit option [ 958.491636][T21381] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 958.604995][T21381] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 958.624819][T21381] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 84: padding at end of block bitmap is not set [ 958.648797][T21381] EXT4-fs (loop4): 1 truncate cleaned up 22:26:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 958.662720][T21381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:47 executing program 3: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 958.724238][T21397] tls_set_device_offload: netdev not found [ 958.741604][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.866326][ T5034] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 958.954847][T21403] loop4: detected capacity change from 0 to 512 [ 958.989456][T21403] EXT4-fs: Ignoring removed mblk_io_submit option [ 958.999601][T21403] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 959.016799][T21403] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 959.032315][T21403] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 85: padding at end of block bitmap is not set [ 959.048700][T21403] EXT4-fs (loop4): 1 truncate cleaned up [ 959.054546][T21403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.116123][ T5034] usb 3-1: Using ep0 maxpacket: 32 22:26:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') [ 959.142513][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.236418][ T5034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 22:26:47 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='}\x00', 0x2) 22:26:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:47 executing program 3: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 959.277434][ T5034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 959.368468][T21417] tls_set_device_offload: netdev not found [ 959.476379][ T5034] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 959.485500][ T5034] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 959.531635][ T5034] usb 3-1: Product: syz [ 959.547207][ T5034] usb 3-1: Manufacturer: syz [ 959.551864][ T5034] usb 3-1: SerialNumber: syz [ 959.587053][ T5034] usb 3-1: config 0 descriptor?? [ 959.630654][ T5034] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 959.657390][ T5034] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 959.832234][T21385] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 22:26:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281rXFUbAPDn3knS921tU7V+tFaNFjH4kTRp1S7cKAouKgoK1mWcpKV02kgTwZZio0jdCFLQtbgU/AvcuRF1JbjVvRSKBqHV1ciduTedTGfy0UxmYuf3g0vOuffcnPPMuWfm3HtmAuhbIxHxVkTcERG/RsRwRCTNBUbqf64vXij/vXihnES1+sYfSa3ctcUL5aJocd6OPDOaRqQfJ/WTm8ydO39qqlKZOZvnx+dPvzs+d+780ydPT52YOTFzZvLIkcOHJp57dvKZjsSZxXdt3wez+/e+8vblV8vHLr/z4zdJvj+a4uiUkSzwP6vVpMWxxzpdWY/tbEgnAz1sCOtSioisuwZr4384SnGj84bj5Y962jhgU1Wr1eq29ocXqsBtLIletwDojeKDPrv/LbYuTT22hKsv1G+Asriv51v9yECkeZnBpvvbThqJiGML/3yZbbFJzyEAABp9Wv7iaDzVav6Xxr0N5Xbla0O7I+LOiLgrIu6OiD0RcU9Erex9EXH/OutvXhq6ef6TXrmlwNYom/89n69tLZ//FbO/4b9KeW5nLf7B5PjJyszB/DUZjcFtWX5ihTq+e+mXz9oda5z/ZVtWfzEXzNtxZaDpAd301PxUbVLaAVc/jNg30Cr+ZGklIImIvRGxb33/eleROPnE1/vbFVo9/hV0YJ2p+lXE4/X+X4im+AvJyuuT4/+LyszB8eKquNlPP196vV39G4q/A7L+3778+m8usjtpXK+dW38dl377pO09za1e/0PJm7UxOZTve39qfv7sRMRQcrSWX7Z/8sa5Rb4on8U/eqD1+H8gPyeLP0tnF/GDEfFQRDyct/2RiHg0Ig6sEP8PL7Y/thX6f7rl+9/S9d/U/+tPlE59/227+tfW/4drqdF8T+39bxVrbeBGXjsAAAD4r0hr34FP0rGldJqOjdW/w78ntqeV2bn5J4/Pvndmuv5d+d0xmBZPuoYbnodOJAv5f6znJ/NnxcXxQ/lz489L/6/lx8qzlekexw79bkeb8Z/5vdTr1gGbrtU62uRQDxoCdF3z+E+XZy++1s3GAF3l99rQv1YZ/2m32gF0n89/6F+txv/Fpry1ALg9+fyH/mX8Q/8y/qF/Gf/Qlzbyu36Jfk5EuiWaIbFJiV6/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTGvwEAAP//b8PsIg==") 22:26:49 executing program 3: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x282a}]}, 0x24}}, 0x0) 22:26:49 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d03"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) [ 961.446193][ T5034] usb 3-1: USB disconnect, device number 61 22:26:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 961.537137][T21428] tls_set_device_offload: netdev not found [ 961.544950][T21430] loop4: detected capacity change from 0 to 512 [ 961.568817][ T5034] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 961.570209][T21430] EXT4-fs: Ignoring removed mblk_io_submit option 22:26:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 961.622894][T21430] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:26:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:50 executing program 0: syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000010280)='./bus\x00', 0x10, &(0x7f0000007f80)=ANY=[], 0x1, 0x7e64, &(0x7f0000000100)="$eJzs3M1uG1UUAODjhEZAS4kQC3aMxI8ciVhjO6mgbCKqqgtIFdGy7MKxHcttYkdx4oSuuuHnIdjBinfgAdix6aJvgMQOiU2FGuSZiYTKTyNinMb5Pml8fI9vzr3XmizOKEoA59Z88tuvpbgcL0XEbERcisjel4ors5KHNyLizYiY+dNVKvKjwZ1RYi4iXo6Iy6Piec1SMffbH768893PH7/zzfc/zqZff/XL6Z0aOE27EfF2RGxt5+P9rTz2O3m8W+Qbw24Wt5aGRcw/2LpXjPt53G+vZxX2G0fzGlmsd/L5/e29wShubDaao9jpbmT57V6+4GDYOaqT/cDdxk42brXXs9gd9LPYuZ/v66CI9we7eZ1WUe/zZn6+3aOY59sH7fw82/ey2OztFvm8br/VPhjFYRGL5aK1/t+/47Pik25v7yAZtncG3X4vWa5U00q6uNO8spim1Q/qi51WY6N5pV1bajU2lpJye2XQ31xIyp1mMynfuHZtIammlVolfS+5cfOzZLOVlEfxo25vb7e7OVhIapX6cqW6kLxVTW6triVrn16/vrp2O1nt95Kb/WFST5Nq/epy7Wr9/WTt1u2kltZS55+o0oTXY8r88w10+OQwM9HtAJwF4+z/Q/8PHNP56v+L8+j//+LE/e+7Z7v/1f/DCbiBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrYs/fbiXvZnPxzNF/pUi9VoxLhWfHf6N0lM1Z0d1I+LCMed/UYqYK9Y4ul6IiJXi+v3V//c7AAAAgGn26HH5YSnr1vOX+X+fPnNhMtvihB7k4ckzps1lr6VLD8a0bPZY5xn30PFlD6JeH1e12Wx/4zrpxSieUI1F9mv14riqHcvsRFcDAACeDzoBAAAAmGpP/xk+AAAAMH30/wAAADD9sv7f//8DAACA6fbocfnhae8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOfuTRCGggAAX/xrgihO4Q42juAILuEIDuJGNhaZw05ELXKCiIgQQyB8HxzHJeHyrnzNAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN+Vx9WuuixPTfvc7s38ZxoAAADgq3mdBllO89Ei6yLffbq7F2+thhFRRsT4x+/3RcQk//GMUUSsM66ztocHAACA/qoO503XZwAAAAAAAAAAAAAAAAAAAABedLH/b1sn+/8AAACgPfb/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwYHdeTgCAQRiA9rNA95+2CLqB4OU9SMgxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH12Zp0aN+pN/wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPDhwUAQCAIACjmv2L+LGDPbgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC63ST77NcxCoAwEARAk3wglT+z9rd+S5FcIWLtIc7AEtg0214bqWfRR1/jf9m39em9K28N/qo5ewAAAAB/0CLT5VYvPXEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwe4cWgEAg0AUa+k+7D9eBQ+PwySGLxAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDIG33cE51RCQBAyb65PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAABDkb73CAAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUwEAAP//bbMf7Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000000)="19", 0x1, 0x0) 22:26:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 961.740911][T21430] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 961.821774][T21430] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 86: padding at end of block bitmap is not set [ 961.902469][T21430] EXT4-fs (loop4): 1 truncate cleaned up [ 961.925616][T21430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.926184][ T5034] usb 3-1: new high-speed USB device number 62 using dummy_hcd 22:26:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 962.062681][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.212618][ T5034] usb 3-1: Using ep0 maxpacket: 32 [ 962.304834][T21460] loop4: detected capacity change from 0 to 512 [ 962.330523][T21460] EXT4-fs: Ignoring removed mblk_io_submit option [ 962.338198][ T5034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.365531][ T5034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 962.385611][T21460] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 962.426336][T21460] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 962.448081][T21460] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 87: padding at end of block bitmap is not set [ 962.469796][T21460] EXT4-fs (loop4): 1 truncate cleaned up [ 962.481498][T21460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.556092][ T5034] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 962.565217][ T5034] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 962.574115][ T5034] usb 3-1: Product: syz [ 962.586088][ T5034] usb 3-1: Manufacturer: syz [ 962.590757][ T5034] usb 3-1: SerialNumber: syz [ 962.607360][ T5034] usb 3-1: config 0 descriptor?? [ 962.632933][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.648046][ T5034] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 962.674874][ T5034] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 962.849272][T21433] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 963.018815][T21448] loop0: detected capacity change from 0 to 63271 [ 963.031990][T21448] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 963.040965][T21448] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 963.056766][T21448] F2FS-fs (loop0): invalid crc value [ 963.064944][T21448] F2FS-fs (loop0): Found nat_bits in checkpoint [ 963.119789][T21448] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 963.127002][T21448] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b 22:26:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 22:26:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:52 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d03"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x21, &(0x7f0000002280)=""/4077, &(0x7f0000000100)=0xfed) [ 964.565684][ T5123] usb 3-1: USB disconnect, device number 62 [ 964.658540][ T5123] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 964.665876][T21477] loop4: detected capacity change from 0 to 512 22:26:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 964.705259][T21477] EXT4-fs: Ignoring removed mblk_io_submit option [ 964.724563][T21477] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:26:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 964.801752][T21477] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 964.880488][T21477] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 88: padding at end of block bitmap is not set 22:26:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 964.954672][T21477] EXT4-fs (loop4): 1 truncate cleaned up [ 964.984193][T21477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:26:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 965.126225][ T5123] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 965.140014][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.260041][T21502] loop4: detected capacity change from 0 to 512 [ 965.282413][T21502] EXT4-fs: Ignoring removed mblk_io_submit option [ 965.300485][T21502] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 965.334762][T21502] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 965.359666][T21502] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 89: padding at end of block bitmap is not set [ 965.386074][ T5123] usb 3-1: Using ep0 maxpacket: 32 [ 965.391756][T21502] EXT4-fs (loop4): 1 truncate cleaned up [ 965.409392][T21502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.494539][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.523936][ T5123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 22:26:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f22d80f3a0f4100f20f01ca0f01f8260f221cf0ff0366b8aa008ee866baf80cb85ca29e8aef66bafc0ced66430fc734ca0f20e035002000000f22e0", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 22:26:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 965.552214][ T5123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 965.796315][ T5123] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 965.805475][ T5123] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 965.823249][ T5123] usb 3-1: Product: syz [ 965.827793][ T5123] usb 3-1: Manufacturer: syz [ 965.832596][ T5123] usb 3-1: SerialNumber: syz [ 965.846811][ T5123] usb 3-1: config 0 descriptor?? [ 965.898292][ T5123] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 965.920947][ T5123] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 966.101928][T21481] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 22:26:56 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281rXFUbAPDn3knS921tU7V+tFaNFjH4kTRp1S7cKAouKgq6qLiKk7SUThtpIthSbBSpG0EKuhaXgn+BOzeirgS3updC0SC0uhq5M/emk+lMPprJTOz8fnDJOfeem3OeOffMnHvPTAB9ayQi3o6IOyLi14gYjoikucBI/c/1xQvlvxcvlJOoVt/4I6mVu7Z4oVwULc7bkWdG04j046R+cpO5c+dPTVUqM2fz/Pj86XfH586df/rk6akTMydmzkweOXL40MRzz04+05E4s/iu7ftgdv/eV966/Gr52OV3fvwmyfdHUxydMpIF/me1mrQ49linK+uxnQ3pZKCHDWFdShGRdddgbfwPRyludN5wvPxRTxsHbKpqtVrd1v7wQhW4jSXR6xYAvVF80Gf3v8XWpanHlnD1hfoNUBb39XyrHxmINC8z2HR/20kjEXFs4Z8vsy026TkEAECjT8tfHI2nWs3/0ri3odyufG1od0TcGRF3RcTdEbEnIu6JqJW9LyLuX2f9zUtDN89/0iu3FNgaZfO/5/O1reXzv2L2N/xXKc/trMU/mBw/WZk5mL8mozG4LctPrFDHdy/98lm7Y43zv2zL6i/mgnk7rgw0PaCbnpqfqk1KO+DqhxH7BlrFnyytBCQRsTci9q3vX+8qEief+Hp/u0Krx7+CDqwzVb+KeLze/wvRFH8hWXl9cvx/UZk5OF5cFTf76edLr7erf0Pxd0DW/9uXX//NRXYnjeu1c+uv49Jvn7S9p7nV638oebM2Jofyfe9Pzc+fnYgYSo7W8sv2T944t8gX5bP4Rw+0Hv8P5Odk8Wfp7CJ+MCIeioiH87Y/EhGPRsSBFeL/4cX2x7ZC/0+3fP9buv6b+n/9idKp779tV//a+v9wLTWa76m9/61irQ3cyGsHAAAA/xVp7TvwSTq2lE7TsbH6d/j3xPa0Mjs3/+Tx2ffOTNe/K787BtPiSddww/PQiWQh/4/1/GT+rLg4fih/bvx56f+1/Fh5tjLd49ih3+1oM/4zv5d63Tpg07VaR5sc6kFDgK5rHv/p8uzF17rZGKCr/F4b+tcq4z/tVjuA7vP5D/2r1fi/2JS3FgC3J5//0L+Mf+hfxj/0L+Mf+tJGftcv0c+JSLdEMyQ2KdHrdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDO+DcAAP//YKPsJg==") 22:26:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:56 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x41001500, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 22:26:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) [ 967.717680][ T5034] usb 3-1: USB disconnect, device number 63 22:26:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 967.818720][ T5034] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 967.835777][T21522] loop4: detected capacity change from 0 to 512 22:26:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:56 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @random="f87573dab34d", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3fd3", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) [ 967.872211][T21522] EXT4-fs: Ignoring removed mblk_io_submit option [ 967.915589][T21522] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:26:56 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 968.055734][T21522] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:26:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x23, 0x0, &(0x7f0000000100)) [ 968.100324][T21522] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 90: padding at end of block bitmap is not set [ 968.139667][T21522] EXT4-fs (loop4): 1 truncate cleaned up [ 968.170065][T21522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.256188][ T5034] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 968.324113][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.516127][ T5034] usb 3-1: Using ep0 maxpacket: 32 [ 968.646255][ T5034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 968.816329][ T5034] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 968.825443][ T5034] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 968.844072][ T5034] usb 3-1: Product: syz [ 968.851112][ T5034] usb 3-1: Manufacturer: syz [ 968.865734][ T5034] usb 3-1: SerialNumber: syz [ 968.891390][ T5034] usb 3-1: config 0 descriptor?? [ 968.938587][ T5034] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 968.973108][ T5034] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:26:59 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:26:59 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:59 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}}}, 0x0) 22:26:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:26:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='\'[/\x00') syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) [ 970.858954][ T5123] usb 3-1: USB disconnect, device number 64 [ 970.911705][ T5123] ldusb 3-1:0.0: LD USB Device #0 now disconnected 22:26:59 executing program 0: syz_clone(0x80, &(0x7f0000000000)="7cf1fb77fc10bc42277544ffeb982f34c2c71b787bbf8a18ea2c58d30bca5ec5a65464b5d86c1a7adfd8f230df5ed89482717fed3e147c79580630fb4461676c3c22523d41d1ec3a5968d1bfd674367dcd0d88a8ba9cadf8d09f6bf038432dd1d429f0f8a658e18e016513276c387790e79fb315582e42212f3b0d41a03b043aa900dad8b76f67858817e8cebfe98b712991ed1954fa617b36a82287634289b8ba8063315a4d8c6e5e005e1510dd4add1b09ccbfa91f2787503abfca59f605cd10818fe34e8dc28f1238947a352365a360a48f", 0xd3, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="9e466f37fb750f515bc4cde3221c58e08045e72c3d44681e5e35488936708d403f11a28f7012b57b85fa67cd979f995be7486878867ed15c4d1403c17b9606b845546560d5c2b97f4e6735fcdd7f8e690471401e07d03941233dfb87c61640f867244afe3eb20280db66d0eb4aba0f970718fd9848f8470122f013ae1fe814b1bc1b8adda46c30c1f06d16032f9d12c8c77fdbb6a25a757833719f92d96f0f99551da81654e13da982c7c9c37ae2002c8c4ccebb62ca810fee34c18fb3124a898526629d3a8f3374d0e643ace476735b3b0f1ceb4b2a5ff91d6283416765ffcbf37ca2") syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 22:26:59 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:26:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:26:59 executing program 1: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x200000, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@nobarrier}, {@noacl}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) [ 971.007825][T21554] loop4: detected capacity change from 0 to 512 [ 971.039383][T21554] EXT4-fs: Ignoring removed mblk_io_submit option 22:26:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 971.086261][T21554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:26:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 971.177978][T21554] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 971.204409][T21554] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 91: padding at end of block bitmap is not set [ 971.228464][T21554] EXT4-fs (loop4): 1 truncate cleaned up [ 971.237645][T21554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.357155][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.376201][ T5123] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 971.646127][ T5123] usb 3-1: Using ep0 maxpacket: 32 [ 971.766329][ T5123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 971.894611][T21563] loop1: detected capacity change from 0 to 32768 [ 971.903744][T21563] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (21563) [ 971.920985][T21563] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 971.940479][T21563] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 971.955835][ T5123] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 971.965079][ T5123] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 971.978667][T21563] BTRFS info (device loop1): turning off barriers [ 971.986193][T21563] BTRFS info (device loop1): use zlib compression, level 3 [ 971.990568][ T5123] usb 3-1: Product: syz [ 971.993452][T21563] BTRFS info (device loop1): enabling ssd optimizations [ 971.993482][T21563] BTRFS info (device loop1): using spread ssd allocation scheme [ 972.000575][ T5123] usb 3-1: Manufacturer: syz [ 972.025285][ T5123] usb 3-1: SerialNumber: syz [ 972.027594][T21563] BTRFS info (device loop1): using free space tree [ 972.040305][ T5123] usb 3-1: config 0 descriptor?? [ 972.078233][ T5123] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 972.104260][ T5123] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 972.171733][T21563] BTRFS info (device loop1): auto enabling async discard [ 972.204014][ T27] audit: type=1800 audit(1107296820.500:56): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 22:27:02 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(r0, 0x0, 0x0) 22:27:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000003b40)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 22:27:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:02 executing program 1: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x200000, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@nobarrier}, {@noacl}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) [ 973.962538][T21596] usb 3-1: USB disconnect, device number 65 22:27:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:02 executing program 0: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x200000, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@nobarrier}, {@noacl}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) [ 974.074819][T21596] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 974.087585][T21603] loop4: detected capacity change from 0 to 512 [ 974.099109][T21603] EXT4-fs: Ignoring removed mblk_io_submit option [ 974.140252][T21603] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 974.249778][T21603] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:27:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 974.359235][T21603] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 92: padding at end of block bitmap is not set [ 974.396843][T21603] EXT4-fs (loop4): 1 truncate cleaned up [ 974.416171][T21603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:27:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 974.513717][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.536276][T21596] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 974.676376][T21622] loop4: detected capacity change from 0 to 512 [ 974.684374][T21622] EXT4-fs: Ignoring removed mblk_io_submit option [ 974.707075][T21622] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 974.738818][T21622] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 974.769065][T21622] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 93: padding at end of block bitmap is not set [ 974.776294][T21596] usb 3-1: Using ep0 maxpacket: 32 [ 974.796293][T21622] EXT4-fs (loop4): 1 truncate cleaned up [ 974.802034][T21622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.890058][T21602] loop1: detected capacity change from 0 to 32768 [ 974.924254][T21602] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (21602) [ 974.942414][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.956685][T21596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 974.973193][T21602] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 974.985470][T21602] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 975.001074][T21602] BTRFS info (device loop1): turning off barriers [ 975.022257][T21602] BTRFS info (device loop1): use zlib compression, level 3 [ 975.036092][T21602] BTRFS info (device loop1): enabling ssd optimizations [ 975.043335][T21602] BTRFS info (device loop1): using spread ssd allocation scheme [ 975.053999][T21602] BTRFS info (device loop1): using free space tree [ 975.101341][T21602] BTRFS info (device loop1): auto enabling async discard [ 975.136254][T21596] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 975.148905][T21596] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 975.165387][T21611] loop0: detected capacity change from 0 to 32768 [ 975.172454][T21596] usb 3-1: Product: syz [ 975.176973][T21596] usb 3-1: Manufacturer: syz [ 975.184006][T21596] usb 3-1: SerialNumber: syz [ 975.188924][T21611] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (21611) [ 975.196030][ T27] audit: type=1800 audit(1107296823.490:57): pid=21602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 975.203333][T21596] usb 3-1: config 0 descriptor?? [ 975.268192][T21596] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 975.317653][T21596] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:27:05 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:27:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:05 executing program 1: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x200000, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@nobarrier}, {@noacl}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 22:27:05 executing program 0: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x200000, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@nobarrier}, {@noacl}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) [ 977.133970][T21643] usb 3-1: USB disconnect, device number 66 22:27:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 977.237761][T21654] loop4: detected capacity change from 0 to 512 [ 977.250241][T21643] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 977.277646][T21654] EXT4-fs: Ignoring removed mblk_io_submit option 22:27:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 977.329130][T21654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 977.399288][T21654] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:27:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 977.560202][T21654] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 94: padding at end of block bitmap is not set 22:27:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 977.629313][T21654] EXT4-fs (loop4): 1 truncate cleaned up [ 977.648379][T21654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.661702][T21643] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 977.795202][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.955974][T21643] usb 3-1: Using ep0 maxpacket: 32 [ 977.977573][T21653] loop1: detected capacity change from 0 to 32768 [ 977.991413][T21653] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (21653) [ 978.019411][T21653] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 978.028934][T21653] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 978.042001][T21653] BTRFS info (device loop1): turning off barriers [ 978.049437][T21653] BTRFS info (device loop1): use zlib compression, level 3 [ 978.058918][T21653] BTRFS info (device loop1): enabling ssd optimizations [ 978.066666][T21653] BTRFS info (device loop1): using spread ssd allocation scheme [ 978.076955][T21653] BTRFS info (device loop1): using free space tree [ 978.086445][T21643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 978.121599][T21653] BTRFS info (device loop1): auto enabling async discard [ 978.177950][T21652] loop0: detected capacity change from 0 to 32768 [ 978.199240][ T27] audit: type=1800 audit(1107296826.500:58): pid=21653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 978.229789][T21652] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (21652) [ 978.279742][T21643] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 978.293244][T21643] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 978.308162][T21643] usb 3-1: Product: syz [ 978.312445][T21643] usb 3-1: Manufacturer: syz [ 978.318100][T21643] usb 3-1: SerialNumber: syz [ 978.325757][T21643] usb 3-1: config 0 descriptor?? [ 978.377913][T21643] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 978.419110][T21643] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:27:08 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:27:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:08 executing program 1: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x200000, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@nobarrier}, {@noacl}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 22:27:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:08 executing program 0: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x200000, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@nobarrier}, {@noacl}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) [ 980.242791][T21592] usb 3-1: USB disconnect, device number 67 22:27:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 980.356296][T21592] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 980.365114][T21695] loop4: detected capacity change from 0 to 512 [ 980.410533][T21695] EXT4-fs: Ignoring removed mblk_io_submit option [ 980.454214][T21695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 980.499807][T21695] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:27:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 980.586372][T21695] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 95: padding at end of block bitmap is not set 22:27:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 980.689925][T21695] EXT4-fs (loop4): 1 truncate cleaned up [ 980.695783][T21695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:27:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 980.746212][T21592] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 980.813353][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.986242][T21592] usb 3-1: Using ep0 maxpacket: 32 [ 981.112259][T21690] loop0: detected capacity change from 0 to 32768 [ 981.112500][T21592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 981.131004][T21690] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (21690) [ 981.156104][T21690] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 981.165244][T21690] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 981.176718][T21690] BTRFS info (device loop0): turning off barriers [ 981.183525][T21690] BTRFS info (device loop0): use zlib compression, level 3 [ 981.191084][T21690] BTRFS info (device loop0): enabling ssd optimizations [ 981.200972][T21690] BTRFS info (device loop0): using spread ssd allocation scheme [ 981.208911][T21690] BTRFS info (device loop0): using free space tree [ 981.254654][T21690] BTRFS info (device loop0): auto enabling async discard [ 981.296250][T21592] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 981.305582][T21592] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 981.316924][T21592] usb 3-1: Product: syz [ 981.321173][ T27] audit: type=1800 audit(1107296829.620:59): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 981.345139][T21592] usb 3-1: Manufacturer: syz [ 981.356056][T21592] usb 3-1: SerialNumber: syz [ 981.372362][T21592] usb 3-1: config 0 descriptor?? [ 981.389130][T21693] loop1: detected capacity change from 0 to 32768 [ 981.410348][T21693] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (21693) [ 981.423322][T21592] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 981.448912][T21592] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:27:11 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:27:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:11 executing program 0: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x200000, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@nobarrier}, {@noacl}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PPurte7G4KUhyJiXob8JK/XdhysX0A4qSIQSMlaRP0HhayxN6njDTZ+FBxZqmNQUYoQLrgiCn3YElGdSiCrtOURSiyqBKFaNII2fxji0gJClaAoxXWJgurq3pkzO/fM3ocfa3vD5yN577n3e86ZOefeO54zM/cMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8drj2azd/pl38Td/+wudu7X3Xi9/89cH1n75/6kchTDde78nCPe84+4OzN3zkrg1fv+uLT5yZuOexwbxcHg/L6n968ycfj7X+ZHkIX+kJoT8NrBrNAgP589FY302jIVwT5gNFidmRrES64PDscAhHwnygqOprwyGMlgL3fu9bz3yqnjg8HMKbQwi1dBkv1rJlDKeBlYNZYCQN7OjPAv9zLlMEvtqbBeCixS9D8aE/Pt2cYWLhci0+fwOXbMWurLR5fTEx0TrfL+5Y5JUqGUxfmL6ot61SHYui8vU44du2BL5tlX4+5G0r70jleyjn5kO10Lt19oHNe+f2xFd6w+RkX6uaFul9PvXS/i3nk14yn8O4AhOX5HP40OHbXhj8wN2nn/jN0/vP1D5/08WuZqvuXWy1kH/mlsz7GG20PVkCX7/KXtIKO10hhDMnTu5vF6+M/yfaj//jxzk+9jbljrW+MpaNzeMrozHxy7FsbA4AAABLxlI4ajq44l9+3K6+yvh/RXfn/+Mp/3wwn7X2RAgbG4mPjYdwfeP1LPBUXNwHx0N4fSM13Ry4IwmcCOGGRuKWoqqkxFAssSIJ/GwsD2xMAs/FwHQSeDIGDiWBj8fA8SSwJQZOJIE7YyBsa27H/xvL29F1YDgGZrJOPB6vQvjVWFxa0lc/KKoCAAC4RPLR4UDz09K1DhebIQ4vjw93yhCvwG6ZoZbUkI5gi2FVyxr6O9XQ26mGot0H2je/UnNPp5orl2H0NGf471PX7QhtVMb/U+3H/7UFVqSncv4/TG1qPMTcvXlkrsgwM92UAQAAALgIv/famc3t4pXx/8burv+Px0T6SpnDyXgYYvt4CFPNgaza26uB7Kz3sjwAAAAAS0FxPr44F74tf8wu0U7H09X80+eZP57437hg/h3f/een261vZfw/3d31/yPNj9lKPBfX4rPjIQyVAt+Oa1kPNKyIgR+9szmQt/+52AGfjFXlFyYUVX0ylpiJgakkcKRVieeLEtc3B/I3q1j4x4p2bMtLlAIAAABw2cXDAfG8fLz+f83f/uGz7cpVxv8z53f9f2McXLm8f25ZCKv7Q+hLfxhwciSbGDAGRnvyxN+PZHX1pVUdHAnh9nrD0qr+PZ//vz+dY/D7w1lVMXD9G469tLKe+MJwCKvLgRfef3R9PbE3CRQL/93hEG6utzZd+N8NZQsfSBf++FAIrysFiqq2DIVQX9hgWtU/1PL7GKRVHa+FcG0pUFT1tloI+wIAS1X8v3Rr+cXd+x7ZvnlubnbXIibiQfzh8MC2udnJLTvmttZarNPWZJ2b5jF6tNqmbm9988M4R9F9x8a7SRc/FJwqLys/kF+5cjB/HneGBhrtXDvQ9HRd2uS3vrG6iFDalWrV5N5FbvJIuZL5N7FSf8w/GJaFob27Z3dNfnTznj271mR/u82+NvsbzzNlfbUm7auRhdati49Hy+myEhfaVyvLlaze8/DO1bv3PbJq28ObH5x9cPZDG6bWrd1w29T6t62uN2oq+9uhpSsXqjlp6bmjXTbrErb0xv5SJZdjoyEhIbHUEoMD95xqt/mpjP93th//x61O3PDn8zO0Ov8/EU/zZ6/Pn+afiYEj3Z7/n2h1Nr+4MGBFEjgQAwec5gcAAODVIR6OjEcz40HpA2958R3tylXG/we6+/3/JZr/v5i6/j2tpvm/JZaYajX/fzrNfzH//4FW8/+n0/wX8/8fuQLz/+8tAkmX/Mr8/wAAwKvB5Zv/v+P0/ukNAioZOk7vn94goJKh4zT+3d4g4Lzn//+bn69ZH9qojP8PdTf+N3E/AAAAXD2uu/Pm77aLV8b/R7ob/1/++f9Cq+v/V7QKTLeaGND8fwAAACxRreb/+977dr6zXbnK+P94d+P/eNlFb1PuWOsrY9mcdiGd0+6XY8VPBgAAAGBp6A2TkwNd5m2aGPWOC1/mqTgVaJt02aFPHDu/3/+f6G783/S7jIcO3/bC4AfuPv3KE795ev+Z2udvmj//DwAAACyebo9LAAAAAAAAAAAAAAAAV96T1355wXkBosrv/8Omxuutfv8f7/vXdNPEs/lkgAfizPqfHjfNHwAAACyux+54+fH478HP/NF/tstbGf9PdDf+j/cXyO+Dl91670S8/9/HxkNo3FpvIgs8FRf3wfEQXt9ITccS2Q313hNLTGWBp+KEibfEEjPTzVUNxcDxJPCzsTxwIgk8FwP5UYpj8caAfzwWwvpGalNziZ2xxEQSuCcGViSByRiYSgLLY2BjEvj58jwwnQT+MQbymw8WffXl5XlfAQAAnI98nDXQ/DSk47zj/Z0y9HTK0HERI50y9HbKUGuRIT7/67gOA+X5+PMM8aWBtNbhpJZKhngzvAtvejFd3/PNOdOClUX3xYITzTljhp3/dOtnQxuV8f+K7sb/F3j//0dPf+d/G4mLuP9/ejf/jTGwIgnsjIGNSWBmUx44cl1zwP3/AQAAuLq1uv//2Ov+6lC7cpXx/1R34/94IOK1TbljrZ3v/58/v/e9X9rXWOWTYyG8sRzYfnD7NfXEk2MhvKUceOa+Wxqj9oNpiW+cvvOn9cT9aeDdq15ztp54exKYiZ10QxqIR1XOLk8CsXu/nwZifxxPA4N54LHlWTt60r76j9Gsr3rSvjo1ml1e0ZP21VdGs2X0pA08nASKBn44DcQG3p0HetO1+tKybK1iYDQW/YtlxUUfAABcneJe4EB4YNvc7FT6E94b+5sfo6Zblj9arbany8X/MN6a/L5j492k+9J90VpR1UCo1ZuwprK7Ws7S02jlpamlQ9e9tkWTO93tvbdFudT5dt1g6xYNZy2a3LJjbutAx4av65xlbX/HLGsqg51ylt5Gl3ZRSxfr0kWLuuybLlY5Pu8Nk5N9Sa7/H4MToUmnT0S39+sr3+e/1aegnOfoJ/7t5Xb1Vcb/G7sb/8f2LAulj/PHY60/WR7CV3rmj0YUgVWjWSA2dzQOj28aDeGaUj8UJWZHshKDyYLDs8PZCHUwreprw9kxhvj83u9965lP1ROHh0N4c+m9KpbxYi1bxnAaWDmYBUbSwI7+LBCv/CgCX+3NAnDRio1C/EDlP3UpTCxcrsXn79VyT9C0eZVroBbIt9A2d7HU0hfya6oK5/e2VapjUVS+Hid825bity34tpV3pPI9lHPzoVro3Tr7wOa9c3viK+U92YpFep/Le6ndpC/B5/DAha9tZ7V0BaaSzcfUwuUW/hz2xOoeOnzbC4MfuPv0E795ev+Z2udv6no1WogDhWf/6zXXlLt3sdVC/plbctuT6YvZngy9WrYnS+5tm/DfQAjh0J8Pf7hdvDL+n+5u/N+fPDa8HDtz93gIby117snY/b8znm0HS4FsK3ltNZBdcv/jsZZbTgAAALjUisMdxfGCbflj9oPwdJxczT99nvnj8YqNC+bvdr33P/v7T7WLV8b/M+3H/0PJajr/7/w/i8T5/wVd7Yeih9IXDlzUoehKdSwK5/8XdLV/25z/X5Dz/87/L8T5/w4u7fn/V8325Gp/2yp7STvtdIUQzt048Hi7eGX8v7O78f9v2fz/6Wz+xfz/6aT9xfz/M63m/9/Zav7/A+b/BwAAFlWLiebTcV5lcv5KhnRy/kqGniTD+d9ioOM0+ub/T+f/P/hnt+8JbVTG/we6G//Hj8Noeemd5/8vpvm/ovP/T2xqUWLjpubVLQKHYmCnOwYAAABwBcUDBPGi925nmAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBx3f3y2c3t4m/69hc+d2vvu1785q8Prv/0/VM/CmFb4/WeLNzzjrM/OHvDR+7a8PW7vvjEmYl7Hqvl5Qbyx5uacsdaXxkL4UjpldGY+OVY/cl84N73fmlffz1xciyEN5YD2w9uv6aeeHIshLeUA8/cd8t19cTBtMQ3Tt/503ri/jTw7lWvOVtPvD0P9KSr+6fLs9XtSVf3U8tDGC8FitV9aHlzVcUy3pUHetNl/OVotowYGI1FHx/NlhEDc7HEtqEQVveH0JdW9Z1aVlVfWtXXa1lVfWlVf1AL4fYQQn9a1b8OZlX1py1/fjCrKgauf8Oxl1bWE0cHQ1hdDrzw/qPr64ldSaBY+PsGQ7i5/pFJF/7lgWzhA+nC/2QghNeVAkVVMwMh1Bc2mFZ1oj+rajCt6ov9IVxbChRV3dofwr7AlRI3JFvLL+7e98j2zXNzs7sWMTGYL2s4PLBtbnZyy465rbVknVrpKaXPPXrhbf/hS/u3NBL3HRvvJl2s11R5XZ6frrxYft6fPx1otHPtQNPTdUulySPlSubfxEr9Mf9gWBaG9u6e3TX50c179uxak/3tNvva7G9fHs36as1S6auV5UpW73l45+rd+x5Zte3hzQ/OPjj7oQ1T69ZuuG1q/dtW1xs1lf29FC09evlbemN/qZLLsdGQkJBYaonepq3b1NW+Ha/s6M+v6ECoNTbQlWFFOUtPo5WXotF3XEBrc+fb6MqQpNKiNZWBQyXL2s5Z1lXGDPNZhrMsjX3ByuCwXFNvo0vj894wOdnXqh8mmp+Wu/cXF9G9p2LXdZkGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/o8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbh9GzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCkAAP//AtvxeQ==") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 22:27:11 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x1eb602) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) [ 983.392994][T11666] usb 3-1: USB disconnect, device number 68 22:27:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:11 executing program 1: sync() socket$inet6_tcp(0xa, 0x1, 0x0) 22:27:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 983.459131][T21733] loop4: detected capacity change from 0 to 512 [ 983.513414][T11666] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 983.531277][T21733] EXT4-fs: Ignoring removed mblk_io_submit option [ 983.584665][T21733] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:27:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 983.666369][T21733] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:27:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 983.764467][T21733] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 96: padding at end of block bitmap is not set [ 983.861762][T21733] EXT4-fs (loop4): 1 truncate cleaned up [ 983.898758][T11666] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 983.909423][T21733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.027116][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.156268][T11666] usb 3-1: Using ep0 maxpacket: 32 [ 984.201219][T21737] loop0: detected capacity change from 0 to 32768 [ 984.210010][T21737] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (21737) [ 984.233289][T21737] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 984.244299][T21737] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 984.255456][T21737] BTRFS info (device loop0): turning off barriers [ 984.262403][T21737] BTRFS info (device loop0): use zlib compression, level 3 [ 984.270280][T21737] BTRFS info (device loop0): enabling ssd optimizations [ 984.278036][T11666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 984.289121][T21737] BTRFS info (device loop0): using spread ssd allocation scheme [ 984.297568][T21737] BTRFS info (device loop0): using free space tree [ 984.323098][T21737] BTRFS info (device loop0): auto enabling async discard [ 984.353319][ T27] audit: type=1800 audit(1107296832.650:60): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 984.469270][T11666] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 984.519112][T11666] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 984.580774][T11666] usb 3-1: Product: syz [ 984.585032][T11666] usb 3-1: Manufacturer: syz [ 984.624847][T11666] usb 3-1: SerialNumber: syz [ 984.642509][T11666] usb 3-1: config 0 descriptor?? [ 984.687963][T11666] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 984.700305][T11666] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:27:14 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200), 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:27:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:14 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000700)="3ffc2cba9f33df11f14dfbd3e914e5db", 0x10) 22:27:14 executing program 0: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x200000, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@nobarrier}, {@noacl}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PPurte7G4KUhyJiXob8JK/XdhysX0A4qSIQSMlaRP0HhayxN6njDTZ+FBxZqmNQUYoQLrgiCn3YElGdSiCrtOURSiyqBKFaNII2fxji0gJClaAoxXWJgurq3pkzO/fM3ocfa3vD5yN577n3e86ZOefeO54zM/cMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8drj2azd/pl38Td/+wudu7X3Xi9/89cH1n75/6kchTDde78nCPe84+4OzN3zkrg1fv+uLT5yZuOexwbxcHg/L6n968ycfj7X+ZHkIX+kJoT8NrBrNAgP589FY302jIVwT5gNFidmRrES64PDscAhHwnygqOprwyGMlgL3fu9bz3yqnjg8HMKbQwi1dBkv1rJlDKeBlYNZYCQN7OjPAv9zLlMEvtqbBeCixS9D8aE/Pt2cYWLhci0+fwOXbMWurLR5fTEx0TrfL+5Y5JUqGUxfmL6ot61SHYui8vU44du2BL5tlX4+5G0r70jleyjn5kO10Lt19oHNe+f2xFd6w+RkX6uaFul9PvXS/i3nk14yn8O4AhOX5HP40OHbXhj8wN2nn/jN0/vP1D5/08WuZqvuXWy1kH/mlsz7GG20PVkCX7/KXtIKO10hhDMnTu5vF6+M/yfaj//jxzk+9jbljrW+MpaNzeMrozHxy7FsbA4AAABLxlI4ajq44l9+3K6+yvh/RXfn/+Mp/3wwn7X2RAgbG4mPjYdwfeP1LPBUXNwHx0N4fSM13Ry4IwmcCOGGRuKWoqqkxFAssSIJ/GwsD2xMAs/FwHQSeDIGDiWBj8fA8SSwJQZOJIE7YyBsa27H/xvL29F1YDgGZrJOPB6vQvjVWFxa0lc/KKoCAAC4RPLR4UDz09K1DhebIQ4vjw93yhCvwG6ZoZbUkI5gi2FVyxr6O9XQ26mGot0H2je/UnNPp5orl2H0NGf471PX7QhtVMb/U+3H/7UFVqSncv4/TG1qPMTcvXlkrsgwM92UAQAAALgIv/famc3t4pXx/8burv+Px0T6SpnDyXgYYvt4CFPNgaza26uB7Kz3sjwAAAAAS0FxPr44F74tf8wu0U7H09X80+eZP57437hg/h3f/een261vZfw/3d31/yPNj9lKPBfX4rPjIQyVAt+Oa1kPNKyIgR+9szmQt/+52AGfjFXlFyYUVX0ylpiJgakkcKRVieeLEtc3B/I3q1j4x4p2bMtLlAIAAABw2cXDAfG8fLz+f83f/uGz7cpVxv8z53f9f2McXLm8f25ZCKv7Q+hLfxhwciSbGDAGRnvyxN+PZHX1pVUdHAnh9nrD0qr+PZ//vz+dY/D7w1lVMXD9G469tLKe+MJwCKvLgRfef3R9PbE3CRQL/93hEG6utzZd+N8NZQsfSBf++FAIrysFiqq2DIVQX9hgWtU/1PL7GKRVHa+FcG0pUFT1tloI+wIAS1X8v3Rr+cXd+x7ZvnlubnbXIibiQfzh8MC2udnJLTvmttZarNPWZJ2b5jF6tNqmbm9988M4R9F9x8a7SRc/FJwqLys/kF+5cjB/HneGBhrtXDvQ9HRd2uS3vrG6iFDalWrV5N5FbvJIuZL5N7FSf8w/GJaFob27Z3dNfnTznj271mR/u82+NvsbzzNlfbUm7auRhdati49Hy+myEhfaVyvLlaze8/DO1bv3PbJq28ObH5x9cPZDG6bWrd1w29T6t62uN2oq+9uhpSsXqjlp6bmjXTbrErb0xv5SJZdjoyEhIbHUEoMD95xqt/mpjP93th//x61O3PDn8zO0Ov8/EU/zZ6/Pn+afiYEj3Z7/n2h1Nr+4MGBFEjgQAwec5gcAAODVIR6OjEcz40HpA2958R3tylXG/we6+/3/JZr/v5i6/j2tpvm/JZaYajX/fzrNfzH//4FW8/+n0/wX8/8fuQLz/+8tAkmX/Mr8/wAAwKvB5Zv/v+P0/ukNAioZOk7vn94goJKh4zT+3d4g4Lzn//+bn69ZH9qojP8PdTf+N3E/AAAAXD2uu/Pm77aLV8b/R7ob/1/++f9Cq+v/V7QKTLeaGND8fwAAACxRreb/+977dr6zXbnK+P94d+P/eNlFb1PuWOsrY9mcdiGd0+6XY8VPBgAAAGBp6A2TkwNd5m2aGPWOC1/mqTgVaJt02aFPHDu/3/+f6G783/S7jIcO3/bC4AfuPv3KE795ev+Z2udvmj//DwAAACyebo9LAAAAAAAAAAAAAAAAV96T1355wXkBosrv/8Omxuutfv8f7/vXdNPEs/lkgAfizPqfHjfNHwAAACyux+54+fH478HP/NF/tstbGf9PdDf+j/cXyO+Dl91670S8/9/HxkNo3FpvIgs8FRf3wfEQXt9ITccS2Q313hNLTGWBp+KEibfEEjPTzVUNxcDxJPCzsTxwIgk8FwP5UYpj8caAfzwWwvpGalNziZ2xxEQSuCcGViSByRiYSgLLY2BjEvj58jwwnQT+MQbymw8WffXl5XlfAQAAnI98nDXQ/DSk47zj/Z0y9HTK0HERI50y9HbKUGuRIT7/67gOA+X5+PMM8aWBtNbhpJZKhngzvAtvejFd3/PNOdOClUX3xYITzTljhp3/dOtnQxuV8f+K7sb/F3j//0dPf+d/G4mLuP9/ejf/jTGwIgnsjIGNSWBmUx44cl1zwP3/AQAAuLq1uv//2Ov+6lC7cpXx/1R34/94IOK1TbljrZ3v/58/v/e9X9rXWOWTYyG8sRzYfnD7NfXEk2MhvKUceOa+Wxqj9oNpiW+cvvOn9cT9aeDdq15ztp54exKYiZ10QxqIR1XOLk8CsXu/nwZifxxPA4N54LHlWTt60r76j9Gsr3rSvjo1ml1e0ZP21VdGs2X0pA08nASKBn44DcQG3p0HetO1+tKybK1iYDQW/YtlxUUfAABcneJe4EB4YNvc7FT6E94b+5sfo6Zblj9arbany8X/MN6a/L5j492k+9J90VpR1UCo1ZuwprK7Ws7S02jlpamlQ9e9tkWTO93tvbdFudT5dt1g6xYNZy2a3LJjbutAx4av65xlbX/HLGsqg51ylt5Gl3ZRSxfr0kWLuuybLlY5Pu8Nk5N9Sa7/H4MToUmnT0S39+sr3+e/1aegnOfoJ/7t5Xb1Vcb/G7sb/8f2LAulj/PHY60/WR7CV3rmj0YUgVWjWSA2dzQOj28aDeGaUj8UJWZHshKDyYLDs8PZCHUwreprw9kxhvj83u9965lP1ROHh0N4c+m9KpbxYi1bxnAaWDmYBUbSwI7+LBCv/CgCX+3NAnDRio1C/EDlP3UpTCxcrsXn79VyT9C0eZVroBbIt9A2d7HU0hfya6oK5/e2VapjUVS+Hid825bity34tpV3pPI9lHPzoVro3Tr7wOa9c3viK+U92YpFep/Le6ndpC/B5/DAha9tZ7V0BaaSzcfUwuUW/hz2xOoeOnzbC4MfuPv0E795ev+Z2udv6no1WogDhWf/6zXXlLt3sdVC/plbctuT6YvZngy9WrYnS+5tm/DfQAjh0J8Pf7hdvDL+n+5u/N+fPDa8HDtz93gIby117snY/b8znm0HS4FsK3ltNZBdcv/jsZZbTgAAALjUisMdxfGCbflj9oPwdJxczT99nvnj8YqNC+bvdr33P/v7T7WLV8b/M+3H/0PJajr/7/w/i8T5/wVd7Yeih9IXDlzUoehKdSwK5/8XdLV/25z/X5Dz/87/L8T5/w4u7fn/V8325Gp/2yp7STvtdIUQzt048Hi7eGX8v7O78f9v2fz/6Wz+xfz/6aT9xfz/M63m/9/Zav7/A+b/BwAAFlWLiebTcV5lcv5KhnRy/kqGniTD+d9ioOM0+ub/T+f/P/hnt+8JbVTG/we6G//Hj8Noeemd5/8vpvm/ovP/T2xqUWLjpubVLQKHYmCnOwYAAABwBcUDBPGi925nmAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBx3f3y2c3t4m/69hc+d2vvu1785q8Prv/0/VM/CmFb4/WeLNzzjrM/OHvDR+7a8PW7vvjEmYl7Hqvl5Qbyx5uacsdaXxkL4UjpldGY+OVY/cl84N73fmlffz1xciyEN5YD2w9uv6aeeHIshLeUA8/cd8t19cTBtMQ3Tt/503ri/jTw7lWvOVtPvD0P9KSr+6fLs9XtSVf3U8tDGC8FitV9aHlzVcUy3pUHetNl/OVotowYGI1FHx/NlhEDc7HEtqEQVveH0JdW9Z1aVlVfWtXXa1lVfWlVf1AL4fYQQn9a1b8OZlX1py1/fjCrKgauf8Oxl1bWE0cHQ1hdDrzw/qPr64ldSaBY+PsGQ7i5/pFJF/7lgWzhA+nC/2QghNeVAkVVMwMh1Bc2mFZ1oj+rajCt6ov9IVxbChRV3dofwr7AlRI3JFvLL+7e98j2zXNzs7sWMTGYL2s4PLBtbnZyy465rbVknVrpKaXPPXrhbf/hS/u3NBL3HRvvJl2s11R5XZ6frrxYft6fPx1otHPtQNPTdUulySPlSubfxEr9Mf9gWBaG9u6e3TX50c179uxak/3tNvva7G9fHs36as1S6auV5UpW73l45+rd+x5Zte3hzQ/OPjj7oQ1T69ZuuG1q/dtW1xs1lf29FC09evlbemN/qZLLsdGQkJBYaonepq3b1NW+Ha/s6M+v6ECoNTbQlWFFOUtPo5WXotF3XEBrc+fb6MqQpNKiNZWBQyXL2s5Z1lXGDPNZhrMsjX3ByuCwXFNvo0vj894wOdnXqh8mmp+Wu/cXF9G9p2LXdZkGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/o8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbh9GzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCkAAP//AtvxeQ==") [ 986.543790][ T5126] usb 3-1: USB disconnect, device number 69 22:27:14 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) 22:27:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 986.645236][T21780] loop4: detected capacity change from 0 to 512 [ 986.651917][ T5126] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 986.740515][T21780] EXT4-fs: Ignoring removed mblk_io_submit option [ 986.766799][T21780] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:27:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:15 executing program 1: syz_clone(0x50006000, 0x0, 0x0, 0x0, 0x0, 0x0) 22:27:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 986.883789][T21780] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 986.944812][T21780] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 97: padding at end of block bitmap is not set [ 987.035308][T21780] EXT4-fs (loop4): 1 truncate cleaned up [ 987.053089][T21780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.065669][ T5126] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 987.197805][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.336237][ T5126] usb 3-1: Using ep0 maxpacket: 32 [ 987.400934][T21773] loop0: detected capacity change from 0 to 32768 [ 987.458570][T21773] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (21773) [ 987.466751][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 987.497759][T21773] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 987.512501][T21773] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 987.523851][T21773] BTRFS info (device loop0): turning off barriers [ 987.536162][T21773] BTRFS info (device loop0): use zlib compression, level 3 [ 987.543499][T21773] BTRFS info (device loop0): enabling ssd optimizations [ 987.558063][T21773] BTRFS info (device loop0): using spread ssd allocation scheme [ 987.565772][T21773] BTRFS info (device loop0): using free space tree [ 987.606169][T21773] BTRFS info (device loop0): auto enabling async discard [ 987.636587][ T5126] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 987.652065][ T5126] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 987.661394][ T5126] usb 3-1: Product: syz [ 987.665636][ T5126] usb 3-1: Manufacturer: syz [ 987.672311][ T5126] usb 3-1: SerialNumber: syz [ 987.717405][ T5126] usb 3-1: config 0 descriptor?? [ 987.768670][ T5126] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 987.790207][ T5126] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:27:17 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200), 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:27:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs289rHFUcAPDvzCaptrapWn+0Vo0WMfgjadKqPXhRFDxUFPRQj3GTltJtI00EW4qNIvUiSEHP4lHwL/DmRdST4FXvUigahFZPK7M7k262u/nRbHZj9/OBIe/NvMl7333zdt/M2w2gb41ERDki7oqI3yJiOCKS5gIj9T/XFy+U/1m8UE6iWn3rz6RW7trihXJRtDhvR54ZTSPST5L6yU3mzp0/NVWpzJzN8+Pzp98bnzt3/tmTp6dOzJyYOTN55MjhQxMvPD/5XEfizOK7tu/D2f17X3vn8uvlY5ff/enbJN8fTXF0ykgW+F/VatLi2BOdrqzHdjakk4EeNoR1KUVE1l2DtfE/HKW40XnD8erHPW0csKmq1Wp1W/vDC1XgNpZEr1sA9EbxQZ/d/xZbl6YeW8LVl+o3QFnc1/OtfmQg0rzMYNP9bSeNRMSxhX+/yrbYpOcQAACNPit/eTSeaTX/S+P+hnK78rWh3RFxd0TcExH3RsSeiLgvolb2gYh4cJ31Ny8N3Tz/Sa/cUmBrlM3/XszXtpbP/4rZ3/DfpTy3sxb/YHL8ZGXmYP6ajMbgtiw/sUId37/y6+ftjjXO/7Itq7+YC+btuDLQ9IBuemp+qjYp7YCrH0XsG2gVf7K0EpBExN6I2Le+f72rSJx86pv97QqtHv8KOrDOVP064sl6/y9EU/yFZOX1yfE7ojJzcLy4Km728y+X3mxX/4bi74Cs/7cvv/6bi+xOGtdr59Zfx6XfP217T3Or1/9Q8nZtTA7l+z6Ymp8/OxExlByt5Zftn7xxbpEvymfxjx5oPf4fys/J4s/S2UX8cEQ8EhGP5m1/LCIej4gDK8T/48vtj22F/p9u+f63dP039f/6E6VTP3zXrv619f/hWmo031N7/1vFWhu4kdcOAAAA/i/S2nfgk3RsKZ2mY2P17/Dvie1pZXZu/unjs++fma5/V353DKbFk67hhuehE8lC/h/r+cn8WXFx/FD+3PiL0p21/Fh5tjLd49ih3+1oM/4zf5R63Tpg07VaR5sc6kFDgK5rHv/p8uzFN7rZGKCr/F4b+tcq4z/tVjuA7vP5D/2r1fi/2JS3FgC3J5//0L+Mf+hfxj/0L+Mf+tJGftcv0c+JSLdEMyQ2KdHrdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDO+C8AAP//QmPsLg==") 22:27:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) dup(r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 22:27:17 executing program 0: socket$inet(0x2, 0x2, 0x4) [ 989.657872][ T5126] usb 3-1: USB disconnect, device number 70 22:27:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 989.755132][T21823] loop4: detected capacity change from 0 to 512 [ 989.793598][T21823] EXT4-fs: Ignoring removed mblk_io_submit option 22:27:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 989.835697][T21823] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 989.873275][ T5126] ldusb 3-1:0.0: LD USB Device #0 now disconnected 22:27:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) [ 989.968142][T21823] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 990.004729][T21823] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 98: padding at end of block bitmap is not set 22:27:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 990.057063][T21823] EXT4-fs (loop4): 1 truncate cleaned up [ 990.062977][T21823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:27:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10, 0x11a}}], 0xf}, 0x0) 22:27:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 990.179908][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.296107][ T5126] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 990.407025][T21844] loop4: detected capacity change from 0 to 512 [ 990.451957][T21844] EXT4-fs: Ignoring removed mblk_io_submit option [ 990.494663][T21844] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 990.566009][ T5126] usb 3-1: Using ep0 maxpacket: 32 [ 990.597803][T21844] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 990.619425][T21844] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 99: padding at end of block bitmap is not set [ 990.638383][T21844] EXT4-fs (loop4): 1 truncate cleaned up [ 990.659509][T21844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.696159][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 990.753813][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.886187][ T5126] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 990.895367][ T5126] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 990.904020][ T5126] usb 3-1: Product: syz [ 990.908465][ T5126] usb 3-1: Manufacturer: syz [ 990.913186][ T5126] usb 3-1: SerialNumber: syz [ 990.927748][ T5126] usb 3-1: config 0 descriptor?? [ 990.988227][ T5126] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 990.999840][ T5126] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:27:21 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200), 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:27:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 22:27:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, 0x0, 0x0) 22:27:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:21 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) dup(r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 22:27:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 992.851434][T13375] usb 3-1: USB disconnect, device number 71 22:27:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:21 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980508b5192100c7980000000109021b000120000000090400000107000000090585b3"], 0x0) [ 992.976241][T21853] loop4: detected capacity change from 0 to 512 [ 992.999038][T21853] EXT4-fs: Ignoring removed mblk_io_submit option [ 993.018624][T13375] ldusb 3-1:0.0: LD USB Device #0 now disconnected 22:27:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, 0x0, 0x0) [ 993.050197][T21853] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:27:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, 0x0, 0x0) [ 993.197637][T21853] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 993.233944][T21853] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 100: padding at end of block bitmap is not set 22:27:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 993.270226][T21853] EXT4-fs (loop4): 1 truncate cleaned up [ 993.285131][T21853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.346256][ T5121] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 993.403610][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.446790][T13375] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 993.616067][ T5121] usb 1-1: Using ep0 maxpacket: 8 [ 993.706201][T13375] usb 3-1: Using ep0 maxpacket: 32 [ 993.756282][ T5121] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 993.767437][ T5121] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 993.779213][ T5121] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 993.788583][ T5121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.836451][T13375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 993.856905][ T5121] hub 1-1:32.0: USB hub found [ 994.016156][T13375] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 994.033291][T13375] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 994.043327][T13375] usb 3-1: Product: syz [ 994.048046][T13375] usb 3-1: Manufacturer: syz [ 994.052789][T13375] usb 3-1: SerialNumber: syz [ 994.065013][T13375] usb 3-1: config 0 descriptor?? [ 994.108425][T13375] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 994.124051][T13375] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 994.126101][ T5121] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 994.220390][ T5121] usb 1-1: USB disconnect, device number 8 22:27:24 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:27:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 22:27:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r0, &(0x7f0000000000)=""/7, 0x7) 22:27:24 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980508b5192100c7980000000109021b000120000000090400000107000000090585b3"], 0x0) [ 996.019989][ T5121] usb 3-1: USB disconnect, device number 72 22:27:24 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/36, 0x24}], 0x1) [ 996.086198][ T5121] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 996.108175][T21877] loop4: detected capacity change from 0 to 512 22:27:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 22:27:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 996.164221][T21877] EXT4-fs: Ignoring removed mblk_io_submit option [ 996.194604][T21877] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:27:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 996.263506][T21877] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:27:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 996.316514][T21877] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 101: padding at end of block bitmap is not set [ 996.355774][T21877] EXT4-fs (loop4): 1 truncate cleaned up [ 996.365244][T21877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.392548][T13375] usb 1-1: new high-speed USB device number 9 using dummy_hcd 22:27:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 996.477505][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.536373][ T5121] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 996.582661][T21900] loop4: detected capacity change from 0 to 512 [ 996.600697][T21900] EXT4-fs: Ignoring removed mblk_io_submit option [ 996.609812][T21900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 996.627882][T21900] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 996.641089][T13375] usb 1-1: Using ep0 maxpacket: 8 [ 996.648866][T21900] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 102: padding at end of block bitmap is not set [ 996.679228][T21900] EXT4-fs (loop4): 1 truncate cleaned up [ 996.685336][T21900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.763608][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.776296][T13375] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 996.794492][T13375] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 996.806037][ T5121] usb 3-1: Using ep0 maxpacket: 32 [ 996.831497][T13375] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 996.845830][T13375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.907011][T13375] hub 1-1:32.0: USB hub found [ 996.946234][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 997.176426][ T5121] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 997.186100][T13375] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 997.187723][ T5121] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 997.203418][ T5121] usb 3-1: Product: syz [ 997.208233][ T5121] usb 3-1: Manufacturer: syz [ 997.214478][ T5121] usb 3-1: SerialNumber: syz [ 997.227009][ T5121] usb 3-1: config 0 descriptor?? [ 997.268098][ T5121] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 997.277096][T13375] usb 1-1: USB disconnect, device number 9 [ 997.280807][ T5121] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 998.117939][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.124305][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 22:27:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0) 22:27:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:30 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 22:27:30 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:27:30 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/575], 0x5, 0x5f8, &(0x7f0000001280)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) [ 1002.516151][T21883] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1002.536976][T13375] usb 3-1: USB disconnect, device number 73 22:27:30 executing program 1: prctl$PR_SET_VMA(0x27, 0x0, &(0x7f000051a000/0x3000)=nil, 0x3000, 0x0) [ 1002.629695][T21908] loop4: detected capacity change from 0 to 512 [ 1002.659375][T13375] ldusb 3-1:0.0: LD USB Device #0 now disconnected 22:27:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0) [ 1002.692955][T21908] EXT4-fs: Ignoring removed mblk_io_submit option [ 1002.735163][T21908] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:27:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0) 22:27:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 22:27:31 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3c, &(0x7f0000000080)={{{@in6=@empty}}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) 22:27:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000001e40), 0x800, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1002.857630][T21908] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:27:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"244b23aebfa2e90a4ee6972bb5d11968"}}}}, 0x90) [ 1002.920038][T21908] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 103: padding at end of block bitmap is not set [ 1002.957055][T21908] EXT4-fs (loop4): 1 truncate cleaned up 22:27:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") [ 1002.964012][T21908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.001366][T21926] loop0: detected capacity change from 0 to 1024 22:27:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1003.018548][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.106277][T13375] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1003.139146][T21939] loop4: detected capacity change from 0 to 512 [ 1003.148900][T21939] EXT4-fs: Ignoring removed mblk_io_submit option [ 1003.158471][T21939] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1003.201800][T21939] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 1003.231495][T21939] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 104: padding at end of block bitmap is not set [ 1003.315089][T21939] EXT4-fs (loop4): 1 truncate cleaned up [ 1003.322193][T21939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.356051][T13375] usb 3-1: Using ep0 maxpacket: 32 [ 1003.415299][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.486495][T13375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1003.656083][T13375] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 1003.665358][T13375] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 1003.675365][T13375] usb 3-1: Product: syz [ 1003.679956][T13375] usb 3-1: Manufacturer: syz [ 1003.684577][T13375] usb 3-1: SerialNumber: syz [ 1003.699993][T13375] usb 3-1: config 0 descriptor?? [ 1003.741018][T13375] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1003.763855][T13375] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1009.006220][T21917] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1009.027005][T13375] usb 3-1: USB disconnect, device number 74 22:27:37 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ac0b620110f211066a65578960109021b0001000000000904000001c6cbe80009058d0301"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="f1", 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:27:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x2c}}, 0x0) 22:27:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 22:27:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/182, 0xb6}], 0x1) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/31, 0x1f}], 0x1) 22:27:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x935, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1009.063844][T13375] ldusb 3-1:0.0: LD USB Device #0 now disconnected 22:27:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 22:27:37 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="00100000325e5f062926a89e12c44362b1dd90a3f134", @ANYRES16=r0], 0x12c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) 22:27:37 executing program 0: prctl$PR_SET_VMA(0x2, 0xf0ff1f00000000, &(0x7f000051a000/0x3000)=nil, 0x3000, 0x0) 22:27:37 executing program 1: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x103203) [ 1009.163204][T21958] loop4: detected capacity change from 0 to 512 [ 1009.212102][T21958] EXT4-fs: Ignoring removed mblk_io_submit option 22:27:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) [ 1009.257420][T21958] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:27:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) [ 1009.379490][T21958] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 1009.493756][T21958] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 105: padding at end of block bitmap is not set [ 1009.526038][T13375] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1009.537995][T21958] EXT4-fs (loop4): 1 truncate cleaned up [ 1009.563728][T21958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.693965][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.806319][T13375] usb 3-1: Using ep0 maxpacket: 32 [ 1009.926138][T13375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1010.126818][T13375] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a6.66 [ 1010.136933][T13375] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 1010.145520][T13375] usb 3-1: Product: syz [ 1010.150429][T13375] usb 3-1: Manufacturer: syz [ 1010.155282][T13375] usb 3-1: SerialNumber: syz [ 1010.163630][T13375] usb 3-1: config 0 descriptor?? [ 1010.208970][T13375] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1010.247563][T13375] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 22:27:43 executing program 1: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="00100000325e5f062926a89e12c44362b1dd90a3f134", @ANYRES16=r0], 0x12c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) 22:27:43 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$can_j1939(r0, &(0x7f0000000400), 0x18) 22:27:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:43 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="00100000325e5f062926a89e12c44362b1dd90a3f134", @ANYRES16=r0], 0x12c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) 22:27:43 executing program 2: r0 = eventfd2(0x1ff, 0x1) read$eventfd(r0, &(0x7f0000000000), 0x8) [ 1015.496158][T21962] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1015.530119][T11666] usb 3-1: USB disconnect, device number 75 [ 1015.622010][T21988] loop4: detected capacity change from 0 to 512 22:27:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc1205531, &(0x7f0000000040)) [ 1015.669804][T11666] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1015.680967][T21988] EXT4-fs: Ignoring removed mblk_io_submit option 22:27:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x38) 22:27:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000180), 0xff14, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff}, 0x4, 0x80000000}) recvmmsg(r0, &(0x7f0000000080), 0x10, 0x0, 0x0) [ 1015.715589][T21988] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 22:27:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x0, 0x12244109, 0x2, {0x1, @win={{}, 0x0, 0x401, 0x0, 0x0, 0x0}}}) [ 1015.883872][T21988] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:27:44 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x89, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1016.008364][T21988] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 106: padding at end of block bitmap is not set 22:27:44 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 1016.219107][T21988] EXT4-fs (loop4): 1 truncate cleaned up [ 1016.237095][T21988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.299182][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:27:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}]}, 0x28}}, 0x0) 22:27:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000200)={r1, r0}) 22:27:45 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="00100000325e5f062926a89e12c44362b1dd90a3f134", @ANYRES16=r0], 0x12c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) 22:27:45 executing program 5: prctl$PR_SET_VMA(0x29, 0x0, &(0x7f000051a000/0x3000)=nil, 0x3000, 0x0) 22:27:45 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 22:27:45 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x43, &(0x7f0000000080)={{{@in6=@empty}}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) [ 1016.849267][T22021] loop4: detected capacity change from 0 to 512 22:27:45 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xcb, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1016.891959][T22021] EXT4-fs: Ignoring removed mblk_io_submit option [ 1016.918826][T22021] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1016.981587][T22021] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature 22:27:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 1017.069613][T22021] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 107: padding at end of block bitmap is not set 22:27:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), 0x4) [ 1017.178479][T22021] EXT4-fs (loop4): 1 truncate cleaned up [ 1017.202276][ T27] audit: type=1326 audit(1107296865.500:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22b688c389 code=0x0 [ 1017.245753][T22021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 22:27:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1, 0x3b1}]}]}}, &(0x7f0000000780)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 22:27:45 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x3014}}) 22:27:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [ 1017.430917][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:27:45 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000140)) [ 1017.556077][ T5121] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1017.837670][T22050] loop4: detected capacity change from 0 to 512 [ 1017.857783][ T5121] usb 1-1: Using ep0 maxpacket: 16 [ 1017.872083][T22050] EXT4-fs: Ignoring removed mblk_io_submit option [ 1017.900592][T22050] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1017.978177][T22050] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 1018.002916][T22050] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 108: padding at end of block bitmap is not set [ 1018.020181][ T5121] usb 1-1: config 1 interface 0 altsetting 129 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1018.033914][T22050] EXT4-fs (loop4): 1 truncate cleaned up [ 1018.039114][ T5121] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 0 [ 1018.040887][T22050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.060755][ T5121] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 32 [ 1018.101358][ T5121] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1018.118812][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:27:46 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="00100000325e5f062926a89e12c44362b1dd90a3f134", @ANYRES16=r0], 0x12c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) 22:27:46 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_buf(r0, 0x1, 0x28, 0x0, &(0x7f0000000140)) 22:27:46 executing program 5: syz_io_uring_setup(0x2138, &(0x7f0000000240)={0x0, 0xb9d2, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 22:27:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) [ 1018.426433][ T5121] usb 1-1: string descriptor 0 read error: -22 [ 1018.456555][ T5121] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.473656][ T5121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.556456][T22038] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1018.577482][ T5121] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1018.812232][ T5121] usb 1-1: USB disconnect, device number 10 22:27:47 executing program 0: socketpair(0x1d, 0x0, 0x289, &(0x7f0000000000)) 22:27:47 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}}], 0x1, 0x0) 22:27:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$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") 22:27:47 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @broadcast}}) 22:27:47 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xc18ada0ecb889975, 0x4) 22:27:47 executing program 3: syz_open_dev$mouse(&(0x7f0000000740), 0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) [ 1019.439728][T22068] ================================================================== [ 1019.448538][T22068] BUG: KASAN: stack-out-of-bounds in ipmr_ioctl+0xb12/0xbd0 [ 1019.456129][T22068] Read of size 4 at addr ffffc900033dfae4 by task syz-executor.1/22068 [ 1019.463963][T22071] loop4: detected capacity change from 0 to 512 [ 1019.465799][T22068] [ 1019.465809][T22068] CPU: 1 PID: 22068 Comm: syz-executor.1 Not tainted 6.4.0-rc7-next-20230621-syzkaller #0 [ 1019.489844][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 1019.500832][T22068] Call Trace: [ 1019.505247][T22068] [ 1019.509712][T22068] dump_stack_lvl+0xd9/0x150 [ 1019.515844][T22068] print_address_description.constprop.0+0x2c/0x3c0 [ 1019.516768][T22071] EXT4-fs: Ignoring removed mblk_io_submit option [ 1019.524434][T22068] kasan_report+0x11d/0x130 [ 1019.524490][T22068] ? ipmr_ioctl+0xb12/0xbd0 [ 1019.541472][T22068] ipmr_ioctl+0xb12/0xbd0 [ 1019.545895][T22068] ? ip_mroute_getsockopt+0x530/0x530 [ 1019.551547][T22068] raw_ioctl+0x4e/0x1e0 [ 1019.556126][T22068] sk_ioctl+0x151/0x440 [ 1019.560738][T22068] ? sock_ioctl_inout+0x150/0x150 [ 1019.567418][T22068] ? mark_held_locks+0x9f/0xe0 [ 1019.572803][T22068] ? kasan_quarantine_put+0xf9/0x220 [ 1019.579349][T22068] ? find_held_lock+0x2d/0x110 [ 1019.584500][T22068] inet_ioctl+0x18c/0x380 [ 1019.590421][T22068] ? ipip_gro_complete+0x140/0x140 [ 1019.596874][T22068] ? lock_downgrade+0x690/0x690 [ 1019.602729][T22068] ? tomoyo_path_number_perm+0x43b/0x570 [ 1019.609247][T22068] ? __kmem_cache_free+0xb8/0x2d0 [ 1019.615577][T22068] ? tomoyo_path_number_perm+0x166/0x570 [ 1019.622564][T22068] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1019.629147][T22068] sock_do_ioctl+0xcc/0x230 [ 1019.633814][T22068] ? get_user_ifreq+0x250/0x250 [ 1019.639200][T22068] ? vfs_fileattr_set+0xc40/0xc40 [ 1019.644871][T22068] sock_ioctl+0x1f8/0x680 [ 1019.650159][T22068] ? br_ioctl_call+0xb0/0xb0 [ 1019.655659][T22068] ? receive_fd+0x110/0x110 [ 1019.661324][T22068] ? __fget_files+0x261/0x470 [ 1019.667107][T22068] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1019.673159][T22068] ? br_ioctl_call+0xb0/0xb0 [ 1019.680090][T22068] __x64_sys_ioctl+0x19d/0x210 [ 1019.685600][T22068] do_syscall_64+0x39/0xb0 [ 1019.690391][T22068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1019.697599][T22068] RIP: 0033:0x7f22b688c389 [ 1019.702538][T22068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1019.724142][T22068] RSP: 002b:00007f22b7553168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.733462][T22068] RAX: ffffffffffffffda RBX: 00007f22b69abf80 RCX: 00007f22b688c389 [ 1019.741580][T22068] RDX: 0000000020000200 RSI: 00000000000089e1 RDI: 0000000000000003 [ 1019.750315][T22068] RBP: 00007f22b68d7493 R08: 0000000000000000 R09: 0000000000000000 [ 1019.758886][T22068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.768212][T22068] R13: 00007ffe206eff9f R14: 00007f22b7553300 R15: 0000000000022000 [ 1019.777131][T22068] [ 1019.780380][T22068] [ 1019.783911][T22068] The buggy address belongs to stack of task syz-executor.1/22068 [ 1019.793817][T22068] and is located at offset 36 in frame: [ 1019.801373][T22068] sk_ioctl+0x0/0x440 [ 1019.805869][T22068] [ 1019.808315][T22068] This frame has 2 objects: [ 1019.813304][T22068] [32, 36) 'karg' [ 1019.813325][T22068] [48, 88) 'buffer' [ 1019.817175][T22068] [ 1019.824352][T22068] The buggy address belongs to the virtual mapping at [ 1019.824352][T22068] [ffffc900033d8000, ffffc900033e1000) created by: [ 1019.824352][T22068] kernel_clone+0xeb/0x890 [ 1019.842519][T22068] [ 1019.844872][T22068] The buggy address belongs to the physical page: [ 1019.851324][T22068] page:ffffea00007f29c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fca7 [ 1019.869248][T22068] memcg:ffff8880278b8702 [ 1019.875166][T22068] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1019.883965][T22068] page_type: 0xffffffff() [ 1019.889704][T22068] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1019.900440][T22068] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff8880278b8702 [ 1019.910471][T22068] page dumped because: kasan: bad access detected [ 1019.917103][T22068] page_owner tracks the page as allocated [ 1019.923368][T22068] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 21991, tgid 21991 (syz-executor.5), ts 1015619774538, free_ts 999306329796 [ 1019.944375][T22068] post_alloc_hook+0x2db/0x350 [ 1019.951403][T22068] get_page_from_freelist+0xfc2/0x2b00 [ 1019.957850][T22068] __alloc_pages+0x1cb/0x4a0 [ 1019.962786][T22068] alloc_pages+0x1aa/0x270 [ 1019.967693][T22068] __vmalloc_node_range+0xb73/0x14b0 [ 1019.974300][T22068] copy_process+0x13bb/0x75c0 [ 1019.979380][T22068] kernel_clone+0xeb/0x890 [ 1019.984767][T22068] __do_sys_clone+0xba/0x100 [ 1019.990273][T22068] do_syscall_64+0x39/0xb0 [ 1019.995291][T22068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1020.004476][T22068] page last free stack trace: [ 1020.010534][T22068] free_unref_page_prepare+0x4dd/0xb90 [ 1020.017108][T22068] free_unref_page+0x33/0x370 [ 1020.022700][T22068] kasan_depopulate_vmalloc_pte+0x62/0x80 [ 1020.028875][T22068] __apply_to_page_range+0x5d2/0xe00 [ 1020.034346][T22068] kasan_release_vmalloc+0xab/0xc0 [ 1020.039875][T22068] __purge_vmap_area_lazy+0x886/0x1e60 [ 1020.045674][T22068] drain_vmap_area_work+0x54/0xd0 [ 1020.050921][T22068] process_one_work+0xa34/0x16f0 [ 1020.056183][T22068] worker_thread+0x67d/0x10c0 [ 1020.061329][T22068] kthread+0x344/0x440 [ 1020.067066][T22068] ret_from_fork+0x1f/0x30 [ 1020.072215][T22068] [ 1020.075256][T22068] Memory state around the buggy address: [ 1020.082054][T22068] ffffc900033df980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 1020.091906][T22068] ffffc900033dfa00: f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 [ 1020.102042][T22068] >ffffc900033dfa80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 04 f2 00 00 [ 1020.110858][T22068] ^ [ 1020.118548][T22068] ffffc900033dfb00: 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 1020.128160][T22068] ffffc900033dfb80: 00 00 00 f1 f1 f1 f1 f1 f1 00 00 00 00 00 f2 f2 [ 1020.137116][T22068] ================================================================== 22:27:48 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000040)) 22:27:48 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) io_setup(0x6, &(0x7f0000001180)=0x0) io_submit(r1, 0x2, &(0x7f0000001640)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x0]) [ 1020.164439][T22071] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1020.216057][T22068] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1020.224289][T22068] CPU: 0 PID: 22068 Comm: syz-executor.1 Not tainted 6.4.0-rc7-next-20230621-syzkaller #0 [ 1020.234875][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 1020.245859][T22068] Call Trace: [ 1020.249188][T22068] [ 1020.252269][T22068] dump_stack_lvl+0xd9/0x150 [ 1020.257041][T22068] panic+0x686/0x730 [ 1020.261696][T22068] ? panic_smp_self_stop+0xa0/0xa0 [ 1020.268041][T22068] ? preempt_schedule_thunk+0x1a/0x30 [ 1020.274629][T22068] ? preempt_schedule_common+0x45/0xb0 [ 1020.282778][T22068] check_panic_on_warn+0xb1/0xc0 [ 1020.289572][T22068] end_report+0x108/0x150 [ 1020.294822][T22068] kasan_report+0xfa/0x130 [ 1020.300334][T22068] ? ipmr_ioctl+0xb12/0xbd0 [ 1020.305252][T22068] ipmr_ioctl+0xb12/0xbd0 [ 1020.310120][T22068] ? ip_mroute_getsockopt+0x530/0x530 [ 1020.316659][T22068] raw_ioctl+0x4e/0x1e0 [ 1020.321165][T22068] sk_ioctl+0x151/0x440 [ 1020.325570][T22068] ? sock_ioctl_inout+0x150/0x150 [ 1020.331531][T22068] ? mark_held_locks+0x9f/0xe0 [ 1020.336634][T22068] ? kasan_quarantine_put+0xf9/0x220 [ 1020.342427][T22068] ? find_held_lock+0x2d/0x110 [ 1020.348029][T22068] inet_ioctl+0x18c/0x380 [ 1020.352512][T22068] ? ipip_gro_complete+0x140/0x140 [ 1020.358182][T22068] ? lock_downgrade+0x690/0x690 [ 1020.363484][T22068] ? tomoyo_path_number_perm+0x43b/0x570 [ 1020.373903][T22068] ? __kmem_cache_free+0xb8/0x2d0 [ 1020.379876][T22068] ? tomoyo_path_number_perm+0x166/0x570 [ 1020.386986][T22068] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1020.393953][T22068] sock_do_ioctl+0xcc/0x230 [ 1020.399339][T22068] ? get_user_ifreq+0x250/0x250 [ 1020.406482][T22068] ? vfs_fileattr_set+0xc40/0xc40 [ 1020.412305][T22068] sock_ioctl+0x1f8/0x680 22:27:48 executing program 5: socketpair(0x22, 0x0, 0x22, &(0x7f0000000080)) [ 1020.416850][T22068] ? br_ioctl_call+0xb0/0xb0 [ 1020.421912][T22068] ? receive_fd+0x110/0x110 [ 1020.427447][T22068] ? __fget_files+0x261/0x470 [ 1020.433749][T22068] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1020.441112][T22068] ? br_ioctl_call+0xb0/0xb0 [ 1020.446484][T22068] __x64_sys_ioctl+0x19d/0x210 [ 1020.451367][T22068] do_syscall_64+0x39/0xb0 [ 1020.455985][T22068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1020.462676][T22068] RIP: 0033:0x7f22b688c389 [ 1020.468127][T22068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1020.495377][T22068] RSP: 002b:00007f22b7553168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1020.507513][T22068] RAX: ffffffffffffffda RBX: 00007f22b69abf80 RCX: 00007f22b688c389 [ 1020.518727][T22068] RDX: 0000000020000200 RSI: 00000000000089e1 RDI: 0000000000000003 [ 1020.528127][T22068] RBP: 00007f22b68d7493 R08: 0000000000000000 R09: 0000000000000000 [ 1020.536787][T22068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.545196][T22068] R13: 00007ffe206eff9f R14: 00007f22b7553300 R15: 0000000000022000 [ 1020.553523][T22068] [ 1020.556764][T22068] Kernel Offset: disabled [ 1020.561203][T22068] Rebooting in 86400 seconds..