last executing test programs: 4m51.558918049s ago: executing program 2 (id=300): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ff"], 0xa0}}, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0xf000, 0x0) 4m49.998986483s ago: executing program 2 (id=301): syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000280), 0x1, 0x9798, &(0x7f0000005680)="$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") creat(&(0x7f000000ee40)='./file1\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000ee80)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f000000eec0)={@desc={0x1, 0x0, @desc4}}) truncate(&(0x7f0000005640)='./file1\x00', 0x1bf8) 4m46.299804359s ago: executing program 2 (id=309): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2000c16, &(0x7f00000007c0)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x101042, 0x65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000b00)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000b40)) 4m43.869871411s ago: executing program 2 (id=319): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[], 0xfb, 0x1501, &(0x7f0000000700)="$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") creat(&(0x7f000000b500)='./bus\x00', 0x4a) mount(&(0x7f000000b540)=@loop={'/dev/loop', 0x0}, &(0x7f000000b580)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f000000b5c0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f000000b600)={0x0, 0x0, 0x0, 0x1, 0x100000000, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) 4m41.93165498s ago: executing program 2 (id=329): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000200)=0x9, 0x4) socket$inet6(0xa, 0x80003, 0xff) close_range(r0, 0xffffffffffffffff, 0x0) 4m41.235111817s ago: executing program 2 (id=335): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000200000040ba124b0700000000000109022400010000102c0904004cce030001000921008009012218000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x13, 0x0, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fff29c"}) 4m37.25318738s ago: executing program 32 (id=335): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000200000040ba124b0700000000000109022400010000102c0904004cce030001000921008009012218000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x13, 0x0, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fff29c"}) 2m44.320150005s ago: executing program 5 (id=649): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0xf, &(0x7f0000000540)=[{&(0x7f0000000580)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 2m41.176883977s ago: executing program 5 (id=654): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xffffffff, "42fce3753785050006be000000000000000000560000000000000800"}) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m40.67373922s ago: executing program 5 (id=658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 2m40.000690164s ago: executing program 5 (id=661): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800700, &(0x7f0000000100)={[{@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@test_dummy_encryption_v1}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000b80)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") mount(&(0x7f0000001000)=@filename='mtd0\x00', &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)='jffs2\x00', 0x1, 0x0) chdir(&(0x7f00000010c0)='./file0\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f000000f8c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m36.520332012s ago: executing program 5 (id=667): socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000001040)="$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") chdir(&(0x7f0000000240)='./file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file1\x00') 2m35.587181687s ago: executing program 5 (id=671): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2m34.844599219s ago: executing program 33 (id=671): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 40.180795931s ago: executing program 3 (id=1011): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000140)='8', 0x1) write(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 40.089721854s ago: executing program 3 (id=1012): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x7f}, 0x0, 0x2}) 39.583979793s ago: executing program 3 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1bf) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x24) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) r0 = open$dir(&(0x7f0000000580)='./mnt\x00', 0x0, 0x42) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000400)={@desc={0x1, 0x0, @desc4}}) 37.932518994s ago: executing program 3 (id=1024): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040641122060000000000010902"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040980c401100010000000109021900010100803209040000010300000007058103"], 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x4e, 0x8e, 0xd0, 0x40, 0x1199, 0x9053, 0xbf1c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0xe8, 0xf0, 0x48, "", [{{0x9, 0x4, 0x8, 0x9, 0x0, 0xc9, 0xe5, 0x1f, 0xe7}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) 33.660972882s ago: executing program 3 (id=1040): pread64(0xffffffffffffffff, &(0x7f0000000240)=""/185, 0xb9, 0x13c) syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4, 0x38}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f00000003c0)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") syz_usb_ep_write(r0, 0x6, 0x0, 0x0) 29.089687746s ago: executing program 3 (id=1061): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x800) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x141102) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mount(&(0x7f0000000640)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000680)='./bus\x00', &(0x7f00000006c0)='exfat\x00', 0x8080, &(0x7f0000000700)='discard') syz_open_dev$sg(&(0x7f0000000740), 0xa, 0x28102) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000780), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000007c0)=0x200) write$dsp(r5, &(0x7f0000000800)="5cba91a4", 0xffffffd9) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000300)=ANY=[@ANYBLOB]) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000100)={r1, 0x0, 0x8, 0x8, 0x8001, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r6) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044020}, 0x20040010) mount(0x0, &(0x7f0000000380)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) 16.593406117s ago: executing program 0 (id=1110): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f00000000c0)="d3", 0x1, 0xc899) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) 15.125957036s ago: executing program 0 (id=1123): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @mcast2, 0x7}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0x10001, 0x4) 13.91265677s ago: executing program 34 (id=1061): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x800) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x141102) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mount(&(0x7f0000000640)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000680)='./bus\x00', &(0x7f00000006c0)='exfat\x00', 0x8080, &(0x7f0000000700)='discard') syz_open_dev$sg(&(0x7f0000000740), 0xa, 0x28102) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000780), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000007c0)=0x200) write$dsp(r5, &(0x7f0000000800)="5cba91a4", 0xffffffd9) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000300)=ANY=[@ANYBLOB]) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000100)={r1, 0x0, 0x8, 0x8, 0x8001, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r6) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044020}, 0x20040010) mount(0x0, &(0x7f0000000380)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) 13.897562645s ago: executing program 0 (id=1115): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x40) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x6, 0x8, 0x3, 0x2ff, "2a00000000000000441d220fe0bd40edb4b62483d1c87e95d93f18520c4f24b3"}) 10.30080893s ago: executing program 0 (id=1121): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x180c8, &(0x7f0000000180)=ANY=[], 0x1, 0x242, &(0x7f00000001c0)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") open(&(0x7f00000008c0)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000900)=@loop={'/dev/loop', 0x0}, &(0x7f0000000940)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000f00)='./bus\x00', 0x8000, 0xe0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f00000010c0)='./file1\x00', 0x14927e, 0x20) 9.872259935s ago: executing program 0 (id=1122): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x850ce, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 9.694899429s ago: executing program 1 (id=1125): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='3', 0x1) mlock(&(0x7f0000341000/0x4000)=nil, 0x4000) 8.669742678s ago: executing program 1 (id=1127): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "ca384a10fc3661f2"}, 0x10}, 0x2, 0x0, 0x0, 0x200008d5}, 0x10044009) 7.997483455s ago: executing program 0 (id=1132): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x6, &(0x7f0000000000)={0xc, 0xfffffffd, 0x3}) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 7.375051282s ago: executing program 35 (id=1132): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x6, &(0x7f0000000000)={0xc, 0xfffffffd, 0x3}) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 7.345621088s ago: executing program 1 (id=1134): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000840), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000880)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000900)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000940)={r4}) 7.342094166s ago: executing program 6 (id=1135): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xf72, 0x30, 0x2, 0x7, 0x20d, 0xe, 0xa, 0xaf, 0x200, 0x8, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 7.336753336s ago: executing program 7 (id=1137): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) write(r0, &(0x7f0000000000)='9', 0x1) syz_open_dev$video4linux(&(0x7f00000001c0), 0x4, 0x0) 6.907942146s ago: executing program 7 (id=1138): r0 = syz_open_procfs(0x0, &(0x7f0000001d80)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001dc0)='.\x00', &(0x7f0000001e00)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000001e40)='coredump_filter\x00') pread64(r2, 0x0, 0x0, 0x4) 6.815195063s ago: executing program 1 (id=1139): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x2000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) 6.15008997s ago: executing program 7 (id=1141): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 5.384828323s ago: executing program 1 (id=1144): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.8664735s ago: executing program 4 (id=1146): socket$pppl2tp(0x18, 0x1, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x80, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x2, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdfefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 4.659676955s ago: executing program 6 (id=1147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) write(r0, &(0x7f0000000240)='100', 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x18, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], 0x0}, 0x94) 4.364868044s ago: executing program 4 (id=1148): close(0x3) r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x20, 0x1405, 0xa09, 0x70bd2b, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004090}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) 4.125976425s ago: executing program 6 (id=1149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.060582464s ago: executing program 1 (id=1150): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001100)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000001280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xc, @f={0x2, 0x3, 0x0, 0x2, 0x2, 0xa, 0x2, {0x6}, 0x0, 0xc8, 0x2, 0xf0}}, 0x11) 3.312063989s ago: executing program 4 (id=1151): rseq(&(0x7f00000000c0), 0x6c, 0x2000000000000000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2.847942487s ago: executing program 7 (id=1152): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x4) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1', 0x4a) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001") 2.778196974s ago: executing program 4 (id=1153): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x2000028, 0x0) 2.523092818s ago: executing program 7 (id=1154): r0 = socket$can_raw(0x1d, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read(r0, &(0x7f0000002fc0)=""/52, 0x34) 2.268822774s ago: executing program 4 (id=1155): syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1, 0x12588, &(0x7f0000024ac0)="$eJzs/Xv8cHO9Lvze43yXc0ghkkNFKHIq5FxRhETOUQ6hSAchEUpUpFJCOZSQCikkOYUUoiSRyDmJkkjIfq1nXveaY69nPHM8e6299h6vvd/vP+ZnrHvynf5Yva7r+oV7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyYMaN44Yv3/m+n90vv/o/TPW/GjG7P//ie+7/9j9l7f0z5H2fmi/4vns0f+7wl9nz/znvs8L73/7fzP/XXt+9H93/dvh/d/3/qz/2/4zUr7b3hea/d+Jjzqhdc8dS66x/4v+3/EAAAAPx/UfZ/2fuln/0Pf0g1Y8bM5/8Pv/aCGTNmzpwxoyyP+M0n5v9f+b+/5Rb8/7V//K/8/x4AAAD+78r+r3u/ckz/f537ghkzDjn4//Tr//1XZrb/7X/ufODfHh+6PQvkj1/gP3+p/D99/G80b+58ubN+dvHC/+e/PgAAAPj/Ldn/Te9X+pt91t/f/+LcBXMXyl049yW5i+QumvvS3MVyX5a7eO4SuUvmLpX78txX5L4yd+ncZXJflbts7nK5y/8Pf/5rclfIXTH3tbkr5a6cu0ruqrmr5b4u9/W5q+eukbtm7hty18pdO3ed3HVz18tdP3eD3Dfmvin3zbkb5m6U+5bct+ZunLtJ7ttyN83dLHfz3LfnbpH7jtwtc7fKfWfu1rnb5G6bu13u9rk75O6Y+67cnXJ3zs0/azLjPbm75O6au1vu7rnvzZ31D5Pkn0+ZsVfu+3Lfn7t37j65H8jdN/eDuR/K/XDuR3L3y/1o7qx/EOWA3Fn/vMjHcg/K/XjurJ+QHZL7idxDcw/LPTz3k7mfyj0i99O5R+YelfuZ3M/mfi736NxZP8v7fO6xuV/I/WLul3KPy/1y7ldyj8/9au4JuSfmnpT7tdyv556ce0ruqbmn5X4j95u5p+d+K/eM3DNzz8r9du7Zud/J/W7u93LPyT0397zc7+een/uD3B/mXpB7Ye5FuT/KvTj3x7mX5P4k99Lcy3Ivz70i98rcn+ZelXt17jW5s/5erGtzf577i9zrcq/PvSH3l7k35t6U+6vcX+fenPub3Ftyf5t7a+7vcm/LvT3397l35P4h987cu3L/mHt37j259+bel3t/7gO5D+b+Kfeh3D/nPpz7l9xHch/N/Wvu33Ify/177qysm/V3IT2R+2TuP3Ofyv1X7tO5z+Q+m/vv3Of+48z68XmRjyI/4y6q3PzcvUj+Fm1ulzsz93m5+fvwitly88/ZFXPkzpk7V+7cufPkviA3Pwcv8nPwIj8HL/Jz8CI/By+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S30Xyv0j+F8n/IvlfJP+L5H+R/C9enZv8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/2f9d3lF8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/1lbt0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/Ivk/67/SLpP/ZX6hTP6Xyf8y+V8m/8vkf5n8L5P/ZfK/TP6Xyf8y+V8m/8vkf5n8L5P/ZfK/TP6X8/3X+79MLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMhlYpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpB4n9GlV5QpRdU+V9U6QVVcrlKL6jSC6r0giq9oEovqNILqvSCKr2gSi+o0guq9IIqvaBKL6jSC6r8XKBK/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5P+tvt6+T/3Xyv07+1/kD6uR/nfyvk/918r9O/tfJ/zr5Xyf/6+R/nfyvk/918r+e57/e/3V6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlAnG+v0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL5gVw016QZNe0KQXNOkFTf7AJr2gSS9o0gua9IImvaBJL2jSC5r0gia9oEkvaNILmvxcoEn+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G8O/o//4DfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8j9xPqNN/rfJ/zb53yb/2+R/mz+hTf63yf82+d8m/9vkf5v8b5P/7Zz/9f5v0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r8XKBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva/6MX/Oe/eKNNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNpn53/M7vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9IvM/o0gu6/Ee2Sy/o0gu65HiXv5Auf2KXXtClF3TpBV16QZde0KUXdPm5QJf875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf/uP/J/1t8WMaNL/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvZv2eVcn/LvnfJf+75H+X/O+S/13yf9bvc9Ul/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53+blAl58LdMn/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d/m5QJf875L/XfK/S/53yf8u+d8l/7vkf5f875L/ie8ZM5P/M2f9/ntJzJnJ/5nJ/5nJ/5nJ/5l5YGbyf9a/z3/mbP/1/p+ZXjAzvWBmesHM9IKZ6QUz0wtmphfMTC+YmV4wM71gZnrBTP+ePQAAAPj/oOz/mf/5K7P+2bz/wzkH/+e/xGjG48+/aIuz57roxoFnZv17Al/wv/EvFQAAAPifNLL/z+3t/2Lj67Y5fe8btvrAwDOzfn8A+x8AAAAmaGT/n9fb/+XWT+z/2Nw7zv6egWdm/b6A9j8AAABM0Mj+/35v/1d3vforxXWn/OWagWfy7/Gx/wEAAGCKRvb/+b39X3/gE6tufdPq39ho4Jn8+/vtfwAAAJiikf3/g97+b3623m1nzvHs+n8aeCa/b5/9DwAAAFM0sv9/2Nv/7e8PevrZvTaf598Dz+T367X/AQAAYIpG9v8Fvf3f7XLhi+c899i/bjvwzKK59j8AAABM0Mj+v7C3/2e+7L2XPH+t+/5xzsAzs/4c+x8AAAAmaGT/X9Tb/8/7ytk7PHXiEvMNbfzFcu1/AAAAmKCR/f+j3v5//meOO+g7zxy5VjPwzMty7X8AAACYoJH9f3Fv/8+28ttO3P6lG53yrYFnFs+1/wEAAGCCRvb/j3v7f/Zv3L16s8YtDy4z8MwSufY/AAAATNDI/r+kt//nWGSJPzzxxwWe9+mBZ5bMtf8BAABggkb2/096+3/O5y/y3KmHXLTd1waeWSrX/gcAAIAJGtn/l/b2/1zn3PqSTbfb78erDzzz8lz7HwAAACZoZP9f1tv/c/91+7u+8aNDb/jkwDOvyLX/AQAAYIJG9v/lvf0/z4ZfKbfcZZ3llxh45pW59j8AAABM0Mj+v6K3/1+w/e8Wr9qHD1hx4JmlZ/0x/zv/WgEAAID/OSP7/8re/p/33ndf/tfblv3q5weemfV7Atr/AAAAMEEj+/+nvf0/34dvede3rznn1y8ZeOZVufY/AAAATNDI/r+qt//nv27uQ7daaJ8VLh14Ztlc+x8AAAAmaGT/X93b/y+8delTZz/gzl3OGHhmuVz7HwAAACZoZP9f09v/C+z08FrPfWuRTz3/P/6fbzls2w3/+x+3fK79DwAAABM0sv9/1tv/L1pqzXufPveqfyw78Myrc+1/AAAAmKCR/X9tb/+/+MR/tjP3quc7euCZ1+Ta/wAAADBBI/v/5739v+ARV7x82znOWusrA8+skGv/AwAAwASN7P9f9Pb/QivUV33vpj1Oed3AMyvm2v8AAAAwQSP7/7re/l/45B++5/HrnnjwhwPPvDbX/gcAAIAJGtn/1/f2/0sW3PtT3dyrPG++gWdWyrX/AQAAYIJG9v8Nvf2/yJwbnr753sdvVw08s3Ku/Q8AAAATNLL/f9nb/4ue/5n1Tj57qx+fMvDMKrn2PwAAAEzQyP6/sbf/X7rBcpfvsNFpNyw08MyqufY/AAAATNDI/r+pt/8Xe+bBxc/+8k7LXzTwzGq59j8AAABM0Mj+/1Vv/7/swV+V/3zyugO+O/DMrN8T0P4HAACACRrZ/7/u7f/FN5vvrtmWmeOrsw888/pc+x8AAAAmaGT/39zb/0tcdvpab1v5mF8fPPDM6rn2PwAAAEzQyP7/TW//L7n/jqee9tCmK7xs4Jk1cu1/AAAAmKCR/X9Lb/8v9b6tD33yyOd2WWngmTVz7X8AAACYoJH9/9ve/n/5zSe+q37Hmp/68sAzb8i1/wEAAGCCRvb/rb39/4pjNr5qxl7PLrTwwDNr5dr/AAAAMEEj+/93vf3/yqWPePnfz139Xz8ZeGbtXPsfAAAAJmhk/9/W2/9Lr3le+62bjv3umQPPrJNr/wMAAMAEjez/23v7f5nDPnjv2+fYfJPZBp5ZN9f+BwAAgAka2f+/7+3/V73w6vXmmvuG9lMDz6yXa/8DAADABI3s/zt6+3/Zs2ec/sx1cz2w5MAz6+fa/wAAADBBI/v/D739v9yFr/vUGWef8v0VBp7ZINf+BwAAgAka2f939vb/8uUz79lm7x03O2bgmTfm2v8AAAAwQSP7/67e/n/1oqs/u/WXT3jp0gPPvCnX/gcAAIAJGtn/f+zt/9d881+LnrnR1pcfMfDMm3PtfwAAAJigkf1/d2//r3DuZWs+u8zjX/r6wDMb5tr/AAAAMEEj+/+e3v5fcbb293M+udIH1xh4ZqNc+x8AAAAmaGT/39vb/689/vwDt3jojDXOHXjmLbn2PwAAAEzQyP6/r7f/V1r8A187feXdfz/vwDNvzbX/AQAAYIJG9v/9vf2/8ipvuvSxd1xzRD3wzMa59j8AAABM0Mj+f6C3/1f57Oe2K45sdz994JlNcu1/AAAAmKCR/f9gb/+veu22TzUn3rHQIQPPvC3X/gcAAIAJGtn/f+rt/9X2/epCT6y18L8WH3hm01z7HwAAACZoZP8/1Nv/r9v15Ned+tLzvvvagWc2y7X/AQAAYIJG9v+fe/v/9Xfscuumz+y7yXEDz2yea/8DAADABI3s/4d7+3/1TW7e7/l/fKRdcOCZt+fa/wAAADBBI/v/L739v8Y/XvDVp9ZY/oELB57ZItf+BwAAgAka2f+P9Pb/mn98xcXf2e6Q739v4Jl35Nr/AAAAMEEj+//R3v5/wzaPvHP7Q9babI6BZ7bMtf8BAABggkb2/197+3+tv1162IO7XPzSCwae2SrX/gcAAIAJGtn/f+vt/7U3+uguC/1o/8vnH3jmnbn2PwAAAEzQyP5/rLf/19lh3TductvNXyoHntk61/4HAACACRrZ/3/v7f917zv8mz9u5//gyQPPbJNr/wMAAMAEjez/x3v7f72PrNI8sNARa7xq4Jltc+1/AAAAmKCR/f+P3v5f//q/PTDfNW/+/ecGntku1/4HAACACRrZ/0/09v8Gv/vF1Wt964Ejjh94Zvtc+x8AAAAmaGT/P9nb/2/ceY4lvn/AUru/fuCZHXLtfwAAAJigkf3/z97+f9PL7zz4giM33fO3A8/smGv/AwAAwASN7P+nevv/zSe9eKf13nHMZz808My7cu1/AAAAmKCR/f+v3v7f8NOLrzv3ymv+bqeBZ2b9mv0PAAAAEzSy/5/u7f+NVrzvlHseem7Vywae2TnX/gcAAIAJGtn/z/T2/1tO2bK48Mmd9nnLwDPvzrX/AQAAYIJG9v+zvf3/1oU+f89Gy5x2zCMDz7wn1/4HAACACRrZ///u7f+N5/r2FYtuNMdPnxp4Zpdc+x8AAAAmaGT/P9fb/5v8YK+XPvzl65bcZuCZXXPtfwAAAJig/3r/FzN6+/9tJ6908tx7r7LlHwee2S3X/gcAAIAJGtn/RW//b7rg39e55+wnfrjuwDO759r/AAAAMEEj+7/s7f/N5rx25wuu2+rutw88895c+x8AAAAmaGT/V739v/n5cx2y3tzHV08MPLNHrv0PAAAAEzSy/+ve/n/7Upcstugc9Yb7DzyzZ679DwAAABM0sv+b3v7f4sQDrnz4pqu+fevAM3vl2v8AAAAwQSP7v+3t/3ccsfbdF567x3O/HHjmfbn2PwAAAEzQyP7vevt/yxU+NWOjvc5aZK+BZ96fa/8DAADABI3s/5m9/b/Vh7f4xiYH7LPnhgPP7J1r/wMAAMAEjez/5/X2/zuv+8IGP/7WOZ99cOCZfXLtfwAAAJigkf3//N7+3/rWM3d98JpFfvfcwDMfyLX/AQAAYIJG9v9svf2/zU7vP3yhhe5cdbuBZ/bNtf8BAABggkb2/+y9/b/tX+9Ycq12nX1uGnjmg7n2PwAAAEzQyP6fo7f/t9twoWu+f9uhx+w78MyHcu1/AAAAmKCR/T9nb/9vv/1i9z/wo2V/+u6BZz6ca/8DAADABI3s/7l6+3+Hex+o59vl4SWvHnjmI7n2PwAAAEzQyP6fu7f/d3zh+of8+ZAFtjxw4Jn9cu1/AAAAmKCR/T9Pb/+/6+xDd37Rdrf88A8Dz3w01/4HAACACRrZ/y/o7f+dLrxonbessd/d1w48s3+u/Q8AAAATNLL/5+3t/53Lj5986R8vqvYYeOaAXPsfAAAAJmhk/8/X2//vPub6Gfc+s8SGDww8M+vfCWD/AwAAwASN7P/5e/v/PUvPdvcCL73v2+sPPPOxXPsfAAAAJmhk/7+wt/93WfM1V6671kbPbTbwzEG59j8AAABM0Mj+X6C3/3c97MnFzjnxyEX+OvDMx3PtfwAAAJigkf3/ot7+3+2yJQ8/f5Xrrl5v4JmDc+1/AAAAmKCR/f/i3v7fff97dn3jn+d4+f0DzxySa/8DAADABI3s/wV7+/+97/vdBvMeddq+fxt45hO59j8AAABM0Mj+X6i3//e4edFv3LXlTsduPvDMobn2PwAAAEzQyP5fuLf/99zgO/XFGz53+50DzxyWa/8DAADABI3s/5f09v9ez+xx/5uOW/N1Hxt45vBc+x8AAAAmaGT/L9Lb/+97cNNrFn7imPe9d+CZT+ba/wAAADBBI/t/0d7+f/9mX17y0aU3PfpnA898Ktf+BwAAgAka2f8v7e3/vTfZ8pJHrj/r2Q8MPHNErv0PAAAAEzSy/xfr7f99/vH5HV4yzx4L3zjwzKdz7X8AAACYoJH9/7Le/v/AH7990Jv3uepN1ww8c2Su/Q8AAAATNLL/F+/t/3232evEH32nPvM9A88clWv/AwAAwASN7P8levv/g9feufofzzn+rj8NPPOZXPsfAAAAJmhk/y/Z2/8f2vfFf3jBnlsVGw0889lc+x8AAAAmaGT/L9Xb/x/edfHnNpj9iS22HXjmc7n2PwAAAEzQyP5/eW//f+SO+17ygxtXOf/fA88cnWv/AwAAwASN7P9X9Pb/fsevctG5Vz989e8Gnjkm1/4HAACACRrZ/6/s7f+PLv63bdZZcNmXHzDwzOdz7X8AAACYoJH9v3Rv/++/yi/2f+H+h+6758Azx+ba/wAAADBBI/t/md7+P+Czc3zlvtPXOfaGgWe+kGv/AwAAwASN7P9X9fb/gYteuupPLr7z9nUGnvlirv0PAAAAEzSy/5ft7f+PffOjt71110Ved9fAM1/Ktf8BAABggkb2/3K9/X/Ques+/eLunPc9OfDMcbn2PwAAAEzQyP5fvrf/Pz7b4S9+6PZ9jt5i4Jkv59r/AAAAMEEj+//Vvf1/8NwrfPCG1Y989tGBZ76Sa/8DAADABI3s/9f09v8hZz1+3Bp3bbTwWweeOT7X/gcAAIAJGtn/K/T2/yd+csMFux9835u2Hnjmq7n2PwAAAEzQyP5fsbf/D61nbvHVbZc4858Dz5yQa/8DAADABI3s/9f29v9hx/3oH5evfdFdHxx45sRc+x8AAAAmaGT/r9Tb/4e/6sAFVjhpv+KWgWdOyrX/AQAAYIJG9v/Kvf3/yVU3WHmXZ2/Z4vKBZ76Wa/8DAADABI3s/1V6+/9Tnzj45i8ttsD5Ow888/Vc+x8AAAAmaGT/r9rb/0dcvdnen79xx3OPHnjm5Fz7HwAAACZoZP+v1tv/nz7wi8fuNPspb1t24JlTcu1/AAAAmKCR/f+63v4/crfvfn/lPeeqXzfwzKm59j8AAABM0Mj+f31v/x/1q902veqcG+77ysAzp+Xa/wAAADBBI/t/9d7+/8xat/3ta9/Z/Oz5Bp75Rq79DwAAABM0sv/X6O3/z/5r4Xn32ufYt/5w4Jlv5tr/AAAAMEEj+3/N3v7/3CNLrbDaPKu/+JSBZ07Ptf8BAABggkb2/xt6+//ot99148+vf/af1cAz38q1/wEAAGCCRvb/Wr39f8x8uyz7hqXbIy8aeOaMXPsfAAAAJmhk/6/d2/+f/+7Jv7zuiWv2WGjgmTNz7X8AAACYoJH9v05v/x/7o68+8pXjdn/D7APPnJVr/wMAAMAEjez/dXv7/wsztp19jw3P+MN3B575dq79DwAAABM0sv/X6+3/Lx77yNmv3nKlL79s4Jmzc+1/AAAAmKCR/b9+b/9/6RWv2PjKox7/8MEDz3wn1/4HAACACRrZ/xv09v9xq7/g/V/+89Yv+/LAM7P+mQD7HwAAACZoZP+/sbf/v/zJmz/77lVOuHKlgWe+l2v/AwAAwASN7P839fb/V65oX7njYmudO7Txz8m1/wEAAGCCRvb/m3v7//j9LvvFF5495G3nDDxzbq79DwAAABM0sv837O3/r+75r4euOWn5+lsDz5yXa/8DAADABI3s/416+/+EW1af+dq1H7mvGXjm+7n2PwAAAEzQyP5/S2//n7je5854/7b7nv3pgWfOz7X/AQAAYIJG9v9be/v/pH+/acMTDz7vrcsMPPODXPsfAAAAJmhk/2/c2/9fe+gDe/zsroVfvPrAMz/Mtf8BAABggkb2/ya9/f/1t53/6devfsc/vzbwzAW59j8AAABM0Mj+f1tv/5986gtn/+ntSx25xMAzF+ba/wAAADBBI/t/097+P+VFNz6ySvfAHp8ceOaiXPsfAAAAJmhk/2/W2/+nzv7QL3fe9c1v+PzAMz/Ktf8BAABggkb2/+a9/X/aD1+17DEXH/GHFQeeuTjX/gcAAIAJGtn/b+/t/28s8bXP/uL0+b986cAzP861/wEAAGCCRvb/Fr39/82vbfX+Vfe/+cMvGXjmklz7HwAAACZoZP+/o7f/Tz9yp433XHD/lz1/4Jmf5Nr/AAAAMEEj+3/L3v7/1qu/cfbXr774yjMGnpn1zwTY/wAAADBBI/t/q97+P+ODH555wrP77bD4wDOX5dr/AAAAMEEj+/+dvf1/5g3nPLTbYhf95JCBZy7Ptf8BAABggkb2/9a9/X/WbUf+YvW1F3jouIFnrsi1/wEAAGCCRvb/Nr39/+0d3/LKX550y2yvHXjmylz7HwAAACZoZP9v29v/Zz/2709/8eCN1rlw4Jmf5tr/AAAAMEEj+3+73v7/zptW3WPXbY88bcGBZ67Ktf8BAABggkb2//a9/f/dbcsNV1x9iSfnGHjm6lz7HwAAACZoZP/v0Nv/37v/p2dcdtd9L/zewDPX5Nr/AAAAMEEj+3/H3v4/5+n61Zd3i7x7/oFnfpZr/wMAAMAEjez/d/X2/7lrX/GrFW6/8/ALBp65Ntf+BwAAgAka2f879fb/eVv88++7XLzPTScPPPPzXPsfAAAAJmhk/+/c2//ff3TNeb606zmvLgee+UWu/Q8AAAATNLL/393b/+d/7DPn3rD/sh/93MAz1+Xa/wAAADBBI/v/Pb39/4NrNtx8jdMf/sqrBp65Ptf+BwAAgAka2f+79Pb/D3+99wd2v3qd614/8MwNufY/AAAATNDI/t+1t/8v2P2Hx3x1wUOXPX7gmV/m2v8AAAAwQSP7f7fe/r9w2Xe/9muzb7XDTwaeuTHX/gcAAIAJGtn/u/f2/0VfPvWWvW48/icLDzxzU679DwAAABM0sv/f29v/Pzr0K0+uds4qD8028Myvcu1/AAAAmKCR/b9Hb/9fvNr28/98zydmO3PgmV/n2v8AAAAwQSP7f8/e/v/xtx/+wef32WOdJQeeuTnX/gcAAIAJGtn/e/X2/yXzLL3lTt8567RPDTzzm1z7HwAAACZoZP+/r7f/f9LM/eGVr6+fPGbgmVty7X8AAACYoJH9//7e/r/00lu+eNU8V71whYFnfptr/wMAAMAEjez/vXv7/7L5P/XmfZ9Y891HDDxza679DwAAABM0sv/36e3/y7+39rcPXvq5w5ceeOZ3ufY/AAAATNDI/v9Ab/9fcfEBR9684aY3rTHwzG259j8AAABM0Mj+37e3/68sLtnt5ccd8+qvDzxze679DwAAABM0sv8/2Nv/P/3CXD878Kg5PjrvwDO/z7X/AQAAYIJG9v+Hevv/qldeu/TRW173lXMHnrkj1/4HAACACRrZ/x/u7f+r1/j7bLevstN1pw8884dc+x8AAAAmaGT/f6S3/6/51Ep/esWfT1u2Hnjmzlz7HwAAACZoZP/v19v/P7vygbe+asGbX/HgwDN35dr/AAAAMEEj+/+jvf1/7UcX+96dV89/7YYDz/wx1/4HAACACRrZ//v39v/P91roc0edfvFJ2w08c3eu/Q8AAAATNLL/D+jt/1/89o4999t//wOfG3jmnlz7HwAAACZoZP8f2Nv/163//usW3/WBlfYdeObeXPsfAAAAJmhk/3+st/+vf+7M5W68eKmbbxp45r5c+x8AAAAmaGT/H9Tb/zf8+QtzHXb7EQdfPfDM/bn2PwAAAEzQyP7/eG///3LTLf7yke7N73r3wDMP5Nr/AAAAMEEj+//g3v6/8ds73P7eu86b9w8DzzyYa/8DAADABI3s/0N6+/+meY5f7fjV933swIFn/pRr/wMAAMAEjez/T/T2/6+a0150/bZ3nL7HwDMP5dr/AAAAMEEj+//Q3v7/9aXv+deaBy/8xmsHnvlzrv0PAAAAEzSy/w/r7f+bl/3t1u856ZA51x945uFc+x8AAAAmaGT/H97b/7/58jwXHrf2Wo8+MPDMX3LtfwAAAJigkf3/yd7+v+XQZY6/YrFHLv7rwDOP5Nr/AAAAMEEj+/9Tvf3/29X+csBrnl1+680Gnnk01/4HAACACRrZ/0f09v+tH3vDnSv9+fFXfGjgmVl/T4D9DwAAABM0sv8/3dv/v7vmqTWuXmWla3878Mzfcu1/AAAAmKCR/X9kb//f9usrFz52yxNOumzgmcdy7X8AAACYoJH9f1Rv/9++e/Pvdx219YE7DTzz91z7HwAAACZoZP9/prf/f//0Bdu/7rhrVnpk4JnHc+1/AAAAmKCR/f/Z3v6/Y+19fnzthu3Nbxl45h+59j8AAABM0Mj+/1xv//9hi41OOmnpMw7eZuCZJ3LtfwAAAJigkf1/dG//3/noZz/+vid2f9dTA888mWv/AwAAwASN7P9jevv/rpcs/6/Pz3PsvOsOPPPPXPsfAAAAJmhk/3++t///+K0/vWin6zd/7I8Dz8z6ewLsfwAAAJigkf1/bG//3/39X6+28neePf2JgWf+lWv/AwAAwASN7P8v9Pb/Pc+b//ar9ln9jW8feObpXPsfAAAAJmhk/3+xt//vPeFbB3xtz1PmvHXgmWdy7X8AAACYoJH9/6Xe/r9vsXcdv9c5Oz66/8Azz+ba/wAAADBBI/v/uN7+v3+lbS5c7cYbLt5r4Jl/59r/AAAAMEEj+//Lvf3/wNEnbf3z2efa+pcDzzyXa/8DAADABI3s/6/09v+Dv9jk3zfce98nfzHwyqwP+x8AAAAmaGT/H9/b/3/a59MLr7HqErvuPvDKrD/G/gcAAIAJGtn/X+3t/4fe8/01dt/qyBUPGnilzIf9DwAAABM0sv9P6O3/P9/5oTu/ethGv/r9wCtVPux/AAAAmKCR/X9ib/8//NZrPn758bec8LaBV+p82P8AAAAwQSP7/6Te/v/Lk8VJK6y/wP6PDbzS5MP+BwAAgAka2f9f6+3/R+55/Y93WfKi5e4beKXNh/0PAAAAEzSy/7/e2/+PvvPZ7b/01H6/fOPAK10+7H8AAACYoJH9f3Jv//91vTWu/uIih17y7MArs/58+x8AAAAmaGT/n9Lb/3/799NL7HrFOtvuMPDK8/Jh/wMAAMAEjez/U3v7/7GHLm9WPPXhmW8aeOX5+bD/AQAAYIJG9v9pvf3/97d1D1x20LJ/emjgldnyYf8DAADABI3s/2/09v/jV/zgjSfsfM7Juwy8Mns+7H8AAACYoJH9/83e/v/Hfvt+c7dL91n7pwOvzJEP+x8AAAAmaGT/n97b/0/s+ebDVr/zzvl/PfDKnPmw/wEAAGCCRvb/t3r7/8lbjt7ll9Uij+8z8Mpc+bD/AQAAYIJG9v8Zvf3/z2O3u+IX81/1yXcMvDJ3Pux/AAAAmKCR/X9mb/8/9YoTXrrqtfWujw+8Mk8+7H8AAACYoJH9f1Zv//9r9VOKPc88a8V7Bl6ZtfvtfwAAAJigkf3/7d7+f/qTu97z9Q/t8au1B16ZNx/2PwAAAEzQyP4/u7f/n5nvN+v+dLcnTrh+4JX58mH/AwAAwASN7P/v9Pb/s9+d95RVzl9l//cPvDJ/Pux/AAAAmKCR/f/d3v7/949eefDONx+/3H5Dr+TD/gcAAIAJGtn/3+vt/+dmPLrTMTO3+uVtA68skA/7HwAAACZoZP+f85/7v5hxY/37eR497ZIdB155UT7sfwAAAJigkf1/bm//F++9Ys27V9xp2ysGXnlxPux/AAAAmKCR/X9eb/+XB/1z0R9uft3M3wy8smA+7H8AAACYoJH9//3e/q9+uuaz6x89x58+MvDKQvmw/wEAAGCCRvb/+b39X7/jM9stcuwxJz898MrC+bD/AQAAYIJG9v8Pevu/eXjDS/+y8aZrv3PglZfkw/4HAACACRrZ/z/s7f/2n3t/7aLlnpt/44FXFsmH/Q8AAAATNLL/L+jt/26dHx644WNrPv7wwCuL5sP+BwAAgAka2f8X9vb/zHbG3P9Xr8z6c+x/AAAAmKCR/X9Rb/8/78envu6SO4+Y+9SBVxbLh/0PAAAAEzSy/3/U2//PP+MrC/3p0qXW+8HAKy/Lh/0PAAAAEzSy/y/u7f/ZXrD9Uwvu/MA3Fxh4ZfF82P8AAAAwQSP7/8e9/T/7wQ+/c+2D9n/4hIFXlsiH/Q8AAAATNLL/L+nt/zlet/TF55168RyrDbyyZD7sfwAAAJigkf3/k97+n3O5ub96/xXzv3O5gVeWyof9DwAAABM0sv8v7e3/ub54y37zL3LzhZ8ZeOXl+bD/AQAAYIJG9v9lvf0/981vO/yup5b/+coDr7wiH/Y/AAAATNDI/r+8t//ned9xu8675CPLfHHglVfmw/4HAACACRrZ/1f09v8L9j97gzeuv9bHDx14Zel82P8AAAAwQSP7/8re/p/3svd+4/zjD/naYgOvLJMP+x8AAAAmaGT//7S3/+fb7Nb60cMW/u13Bl55VT7sfwAAAJigkf1/VW//z//gIvcvvNUdK8818Mqy+bD/AQAAYIJG9v/Vvf3/wmeWuOZNq+6704sGXlkuH/Y/AAAATNDI/r+mt/8X2ODuJS++97xDfzTwyvL5sP8BAABggkb2/896+/9F5asPufSx3f920sArr86H/Q8AAAATNLL/r+3t/xdf+MTOb1nujLnfMPDKa/Jh/wMAAMAEjez/n/f2/4JnX7fOizZu13vFwCsr5MP+BwAAgAka2f+/6O3/hV74/JP/fOw13zxy4JUV82H/AwAAwASN7P/revt/4cMunHHO0Vs/3A688tp82P8AAAAwQSP7//re/n/Jmgfdve7mJ8zxjYFXVsqH/Q8AAAATNLL/b+jt/0WWXu/KBVZc6Z3fH3hl5XzY/wAAADBBI/v/l739v+gxn1js3kcfv3CegVdWyYf9DwAAABM0sv9v7O3/l+700m8sNHOun3974JVV82H/AwAAwASN7P+bevt/sVvv3+DBm29Y5nkDr6yWD/sfAAAAJmhk//+qt/9fdt3vd/3x+Tt+fJGBV16XD/sfAAAAJmhk//+6t/8X//CCh2+y2ylf+/HAK6/Ph/0PAAAAEzSy/2/u7f8l7j1jyfk+tPpvXz3wyur5sP8BAABggkb2/296+3/J7d93zQNnPrvysQOvrJEP+x8AAAAmaGT/39Lb/0tt+Pb7v3/t5jsdPvDKmvmw/wEAAGCCRvb/b3v7/+V/PbZea/5jD335wCtvyIf9DwAAABM0sv9v7e3/V5y/1snrLbfpomcPvLJWPux/AAAAmKCR/f+73v5/5ZyfXOeCx47595wDr6ydD/sfAAAAJmhk/9/W2/9LL/jjne85ds2zXjzwyjr5sP8BAABggkb2/+29/b/MyfsfMvfGz2108cAr6+bD/gcAAIAJGtn/v+/t/1et8LPFNtp8p3KVgVfWy4f9DwAAABM0sv/v6O3/ZY+Y88oLjz7tni8NvLJ+Pux/AAAAmKCR/f+H3v5f7sTX3v3wo3Nc8ImBVzbIh/0PAAAAEzSy/+/s7f/ll3psxqIrXveOlw688sZ82P8AAAAwQSP7/67e/n/161f4yiI3r7LEVwdeeVM+7H8AAACYoJH9/8fe/n/NIY/v/5eZT1y16sArb86H/Q8AAAATNLL/7+7t/xW+dMM2F+221eeXH3hlw3wM7f/nqv83/zUDAAAA/68Z2f/39Pb/isvPvGjD84/f+7MDr2yUD//9PwAAAEzQyP6/t7f/X3vJj148z5n1asXAK2/Jh/0PAAAAEzSy/+/r7f+VugOfvvtDV9162sArb82H/Q8AAAATNLL/7+/t/5Xn3eC2H86/x2fOH3hl43zY/wAAADBBI/v/gd7+X+XMg1dd/9qz9nrhwCub5MP+BwAAgAka2f8P9vb/qn/Z7MS179xn0dcMvPK2fNj/AAAAMEEj+/9Pvf2/2pZfPOi86px/f2HglU3zYf8DAADABI3s/4d6+/916353h/t3XuSswwZe2Swf9j8AAABM0Mj+/3Nv/7/+qd0umf/SOzdaauCVzfNh/wMAAMAEjez/h3v7f/U9bnvJxqeuU5418Mrb82H/AwAAwASN7P+/9Pb/Gjct/NwlBx16z8yBV7bIh/0PAAAAEzSy/x/p7f81r1rqD39aZNkLFh145R35sP8BAABggkb2/6O9/f+Gj9+1+oJXPPyOSwZe2TIf9j8AAABM0Mj+/2tv/6/1m3P/ePaSCyzRDbyyVT7sfwAAAJigkf3/t97+X/v9H6l2eOqWq7458Mo782H/AwAAwASN7P/Hevt/nQPe+rLZjt/v8+cNvLJ1Pux/AAAAmKCR/f/33v5f9/KjLvvn+hftPffAK9vkw/4HAACACRrZ/4/39v96m6+242lbLbHaiQOvbJsP+x8AAAAmaGT//6O3/9f/03OfeNth99265sAr2+XD/gcAAIAJGtn/T/T2/wbPXnVafe9Gn3nlwCvb58P+BwAAgAka2f9P9vb/G99Yrf3kqkfuddTAKzvkw/4HAACACRrZ///s7f83VTfd9/drn91t14FXdsyH/Q8AAAATNLL/n+rt/zdftEA3Y/7VP33VwCvvyof9DwAAABM0sv//1dv/G35n2aXe/qFj7/jVwCs75cP+BwAAgAka2f9P9/b/Rgv8+affOnPz1fceeGXnfNj/AAAAMEEj+/+Z3v5/y+HvfPcz59/woWcGXnl3Pux/AAAAmKCR/f9sb/+/9Q1f/+Rcu831xe0HXnlPPux/AAAAmKCR/f/v3v7feJlvfmubmadc9uaBV3bJh/0PAAAAEzSy/5/r7f9NPr/z+mfcvONifx54ZdbvCWj/AwAAwAT91/u/nNHb/2875NHv/nbFEzbfdOCV3fJh/wMAAMAEjez/orf/N339K9+yxKNbn/f3gVd2z4f9DwAAABM0sv/L3v7fbPl599r76Mfvv3fglffmw/4HAACACRrZ/1Vv/2/+pd8cfejmK3UbDLyyRz7sfwAAAJigkf1f9/b/27tdl7914zM2/vnAK3vmw/4HAACACRrZ/01v/29xySnXL3Ps7t/bbeCVvfJh/wMAAMAEjez/trf/33HmCQ9//LFrnv74wCvvy4f9DwAAABM0sv+73v7fct7t5vzMcu2Cdwy88v582P8AAAAwQSP7f2Zv/2+15dFnHbHqHbv9a+CVvfNh/wMAAMAEjez/5/X2/zv/8uY3HXDvwp/eauCVffJh/wMAAMAEjez/5/f2/9ZP7bv78oedd8cmA698IB/2PwAAAEzQyP6frbf/t1n3B0f9fqt9V//LwCv75sP+BwAAgAka2f+z9/b/tjd1y3xq/Uc+9K6BVz6YD/sfAAAAJmhk/8/R2//b7XH5tR88fvkvXjnwyofyYf8DAADABI3s/zl7+3/7jz/94EufOuSymwde+XA+7H8AAACYoJH9P1dv/+9w1RrP//WSay324YFXPpIP+x8AAAAmaGT/z93b/zuu8vWjX3XFxZtfN/DKfvmw/wEAAGCCRvb/PL39/67PvnOvOxfZ/7z3Dbzy0XzY/wAAADBBI/v/Bb39v9PxO7/lqINuvv+jA6/snw/7HwAAACZoZP/P29v/Oy/+ze/ud+r83e0DrxyQD/sfAAAAJmhk/8/X2//vPneBORe/9IiNtxx45cB82P8AAAAwQSP7f/7e/n/PbDc9fOPOb/7ePwZe+Vg+7H8AAACYoJH9/8Le/t9l0T9ff1j1wNN3D7xyUD7sfwAAAJigkf2/QG//7/rNZZf/yJ1LLbjWwCsfz4f9DwAAABM0sv9f1Nv/u/3xuaP2/eCOVzw+8MrB+bD/AQAAYIJG9v+Le/t/921W2/3gM05Z/B0DrxySD/sfAAAAJmhk/y/Y2//v3aR6080/m+sjaw+88ol82P8AAAAwQSP7f6He/t/jH1ed9fL5bjjunoFXDs2H/Q8AAAATNLL/F+7t/z13/cjzD3ze5ne+f+CVw/Jh/wMAAMAEjez/l/T2/153nPvg0b85ds3rB145PB/2PwAAAEzQyP5fpLf/33ftUdfe/oPV33vbwCufzIf9DwAAABM0sv8X7e3/9+/71mVesfuzR+038Mqn8mH/AwAAwASN7P+X9vb/3u/77Pdf+bn2qSsGXjkiH/Y/AAAATNDI/l+st//3uXmjTW/b7JoX7TjwyqfzYf8DAADABI3s/5f19v8HLttn78+tsPtbPjLwypH5sP8BAABggkb2/+K9/b/v/hcc+7FHzvjObwZeOSof9j8AAABM0Mj+X6K3/z/4YLPCUn9f6d53DrzymXzY/wAAADBBI/t/yd7+/9BmV974m+Ufb54eeOWz+bD/AQAAYIJG9v9Svf3/4Q2e+tshm2y96cMDr3wuH/Y/AAAATNDI/n95b/9/5Jk3zPuBL5xwzsYDrxydD/sfAAAAJmhk/7+it//3u/AvF3z48LWu2H3glWPyYf8DAADABI3s/1f29v9Hy2W2OPydhyz+i4FXPp8P+x8AAAAmaGT/L93b//u/cJ4P3rTa8h/5/cArx+bD/gcAAIAJGtn/y/T2/wFn//a4l933yHEHDbzyhXzY/wAAADBBI/v/Vb39f+Ca71n5o//c987HBl75Yj7sfwAAAJigkf2/bG//f+yw024+conz1nzbwCtfyof9DwAAABM0sv+X6+3/g445/h9/WG/h975x4JXj8mH/AwDw/2DvTqOvHuP/3/PZpigkQzKFjJmSeR4yy0yGTJmHJMoQMpUhhKJEGSKFECpkCBmSkHnIFJkKJUQKZ51zrs7/Wuva53+t/1q/G9eNx+PWe+3ar9Xd53d/2l8ACpTp/42j/r90/WNX2PC2z6/7ts5K/3DofwAAAChQpv83ifr/slY/dGtw6dpzjq2zcls49D8AAAAUKNP/raL+v/y6jW77+97vm/5TZ2VAOPQ/AAAAFCjT/5tG/X/FXcs+/ci4vfadVmfl9nDofwAAAChQpv9bR/1/5VrvHnX0atc8vGedlTvCof8BAACgQJn+3yzq/x5PHjd3kWq5qS/XWRkYDv0PAAAABcr0/+ZR//dsdP+Kf3zx/sIn11kZFA79DwAAAAXK9P8WUf9fteLAre55vtuBneus3BkO/Q8AAAAFyvT/llH/X33vkZ8e1OGZEe/VWbkrHPofAAAACpTp/62i/r/m+2u6H9Z34qgd66zcHQ79DwAAAAXK9P/WUf9fe/R+A4fs3+iQQXVW7gmH/gcAAIACZfp/m6j/e+3V5blfN753gV51VgaHQ/8DAABAgTL9v23U/9f99vix1W8dpqxbZ+XecOh/AAAAKFCm/7eL+v/64xf474hf/ht2X52V+a/pfwAAAChQpv+3j/r/hsmvrvLgpjvstUidlSHh0P8AAABQoEz/7xD1f++3523370E3rdK4zsr94dD/AAAAUKBM/+8Y9f+NXbf5olHvA+c9UWdlaDj0PwAAABQo0/87Rf1/0+bPrvnXaQ/2blBnZVg49D8AAAAUKNP/O0f9f/ON3V5cYtQZnR6qs/JAOPQ/AAAAFCjT/7tE/d/njp2+OvaDV7Z9ts7Kg+HQ/wAAAFCgTP/vGvV/39WvqoY3WOjTVeuszH8mQP8DAABAgTL93ybq/1ue2Gzwn8sO6NunzsrwcOh/AAAAKFCm/3eL+v/WBrN2Wmj84edsUmfl4XDofwAAAChQpv93j/q/3yrjjz9g2Oy116mz8kg49D8AAAAUKNP/e0T933/oklfe22XL13rWWXk0HPofAAAACpTp/z2j/r/tm8/WGdrhp1GD66yMCIf+BwAAgAJl+n+vqP8HHNHslUOe3/CQeiuPhUP/AwAAQIEy/b931P+3t20+dYEvrlxghTorj4dD/wMAAECBMv2/T9T/d/z53SK/VbtMGVVn5Ylw6H8AAAAoUKb/9436f+BJh9w/bLUvh21dZ2VkOPQ/AAAAFCjT/22j/h/0ZZ82R41bda876qzMfyZA/wMAAECBMv2/X9T/d74x7KSl7h2xyvV1VkaHQ/8DAABAgTL9v3/U/3d1PuvqeZd2nrdRnZUnw6H/AQAAoECZ/j8g6v+7r5xY1W7r1fuWOitPhUP/AwAAQIEy/X9g1P/3bL34VzPb7NNpizorT4dD/wMAAECBMv1/UNT/gzfc5MX7Wny77ep1VsaEQ/8DAABAgTL9f3DU//f2n71mu79afHplnZVnwqH/AQAAoECZ/j8k6v/7Fm5zZcNvn+67VJ2VZ8Oh/wEAAKBAmf4/NOr/IWOvOP6/rS845+E6K8+FQ/8DAABAgTL9f1jU//c/9NRODx3x4dpj6qw8Hw79DwAAAAXK9H+7qP+HNu4++PCeK7zWtM7K2HDofwAAAChQpv8Pj/p/2KHDF2n//PtH9a2z8kI49D8AAAAUKNP/R0T9/8CM06c+2mG5Ma3qrLwYDv0PAAAABcr0/5FR/z8494BX5lbP/LJ2nZWXwqH/AQAAoECZ/j8q6v+Hdu63zmJfdFuqR52VceHQ/wAAAFCgTP+3j/p/+Hstrj543Pe7L1Zn5eVw6H8AAAAoUKb/j476/+HTvj7p7tXWHvpgnZVXwqH/AQAAoECZ/j8m6v9HLvm4ze+XXvPbc3VWXg2H/gcAAIACZfr/2Kj/H31t1fsXvXevZVars/JaOPQ/AAAAFCjT/8dF/T/i0y92WKTN48cNqbMyPhz6HwAAAAqU6f/jo/5/7Limn/1x27mXL1pn5fVw6H8AAAAoUKb/O0T9/3iXNf6556/PP1i6zsqEcOh/AAAAKFCm/0+I+v+Jt6audlCLlTd7vM7KG+HQ/wAAAFCgTP+fGPX/yPaHjW2w9eWX7FBnZWI49D8AAAAUKNP/J0X9P+q7m47++9udBg6ss/JmOPQ/AAAAFCjT/ydH/T961oMXP9Lzl/HX1Vl5Kxz6HwAAAAqU6f9Tov5/cs8z7zz6iI3XW6/Oytvh0P8AAABQoEz/nxr1/1MNn9/miP1/P2rJOiuTwqH/AQAAoECZ/j8t6v+nR1/w8YN9Nx8zvM7KO+HQ/wAAAFCgTP+fHvX/mMG7zPn3tzt+eabOyrvh0P8AAABQoEz/nxH1/zNNe6zUaOMjl1qxzsp74dD/AAAAUKBM/58Z9f+zvbZ45rBNX9v91jor74dD/wMAAECBMv3fMer/5zaZecSQXxYZumWdlQ/Cof8BAACgQJn+Pyvq/+dbTLjg197DfmteZ+XDcOh/AAAAKFCm/ztF/T/2zoa3VwedtswVdVY+Cof+BwAAgAJl+v/sqP9f2OzoPUaO6nPcVnVWPg6H/gcAAIACZfq/c9T/L/a+Y8gepx18+e11Vj4Jh/4HAACAAmX6/5yo/1+6/Z4eTRr888ENdVY+DUem/+f99z/xbwYAAAD+z2T6/9yo/8c1P+Xkrz7YbrON66xMDofP/wEAAKBAmf7vEvX/y49/8Ooz4++55N46K5+FQ/8DAABAgTL93zXq/1cWa9Jiz2WPG7hgnZXPw6H/AQAAoEBp/78e/Wl1XtT/r6683sIrd3lr/PJ1Vr4Ih/4HAACAAmU+/z8/6v/X7p/x/YxhS603ss7Kl+HQ/wAAAFCgTP9fEPX/+K+333X6ERdscHidla/Cof8BAACgQJn+vzDq/9cPn3tP055Pv/l3nZUp4dD/AAAAUKBM/3eL+n/Cvi9etu+3Kwz4uc7K1+HQ/wAAAFCgTP9fFPX/G7MX7TB26w8v2L/Oyjfh0P8AAABQoEz/Xxz1/8QTR700tcU+rcbVWZkaDv0PAAAABcr0/yVR/7/5xbnNV/ir16Tj66x8Gw79DwAAAAXK9H/3qP/fmrDXgrve1qLHeXVWvguH/gcAAIACZfr/0qj/3z77xm9GtPn2pPfrrHwfDv0PAAAABcr0/2VR/0/q1fODh+9ddYWz6qz8EA79DwAAAAXK9P/lUf+/s8muWx5z6ZezJ9ZZ+TEc+h8AAAAKlOn/K6L+f7fFhcsvvlrnwZPrrEwLh/4HAACAAmX6/8qo/9+7c+zvc8aN2PXCOivTw6H/AQAAoECZ/u8R9f/7DRsdMviLDRf/o87KT+HQ/wAAAFCgTP/3jPr/g9FvjD6w+ml6uzorP4dD/wMAAECBMv1/VdT/Hw7+tf/CHXYZu1OdlV/Cof8BAACgQJn+vzrq/4+abtl19vNXHvN1nZUZ4dD/AAAAUKBM/18T9f/H7b99Z9awwzd4pc7KzHDofwAAAChQpv+vjfr/k+/WbL1glwFvnlJn5ddw6H8AAAAoUKb/e0X9/+msFZc5dNktB5xdZ2VWOPQ/AAAAFCjT/9dF/T95zy9n3j9+9gXv1ln5LRz6HwAAAAqU6f/ro/7/7NOOB/zzwRmtjqmz8ns49D8AAAAUKNP/N0T9//lxDz2+ZIMHJ82rs/JHOPQ/AAAAFCjT/72j/v+iy819jzxtoR7T66zMDof+BwAAgAJl+v/GqP+/fKtd5wdGvXLSXnVW/gyH/gcAAIACZfr/pqj/v9ruj98PO2iHFX6rs/JXOPQ/AAAAFCjT/zdH/T/lqtbLD+n93+wD66zMCYf+BwAAgAJl+r9P1P9f92mw5a+/HDh49zorf4dD/wMAAECBMv3fN+r/b9Z9+4Nq05t2nVpnZW449D8AAAAUKNP/t0T9P3XMJV2P2LjR4qfWWZn/OwH1PwAAABQo0/+3Rv3/7QLP9H/wt4nTJ9RZ+Scc+h8AAAAKlOn/flH/f7fs5aP/7dth7Od1Vv4Nh/4HAACAAmX6v3/U/98/sschjfa/95hL66z8Fw79DwAAAAXK9P9tUf//MO3WmQ2aN75upXSlmn/ofwAAAChQpv8HRP3/4wEHL/P3vEmnP52uVOHv6H8AAAAoUab/b4/6f1qb01o/MrD7Do+kK9X8BwD0PwAAABQo0/93RP0//d9H3zl6p7FfNkxXqlo49D8AAAAUKNP/A6P+/+nMVTovcvQa/S5LV6qFwqH/AQAAoECZ/h8U9f/PH07u+8fl35y/RrpSLRwO/Q8AAAAFyvT/nVH///LSlMfvmdJ2zc3TlWqRcOh/AAAAKFCm/++K+n/GBesccND217/UP12pFg2H/gcAAIACZfr/7qj/Z570/fiDPz1/xIbpSjX//fofAAAACpTp/3ui/v/1y9XXv3uR0QfemK5UDcKh/wEAAKBAmf4fHPX/rDdWWuL3k5sufFu6Ui0eDv0PAAAABcr0/71R///W+fMfFx3zydRt0pVqiXDofwAAAChQpv/vi/r/92867dV+aJuHR6crVcNw6H8AAAAoUKb/h0T9/8cRDzz06EU99102XakahUP/AwAAQIEy/X9/1P+z2/btNXellk1r6Uq1ZDj0PwAAABQo0/9Do/7/889DT13stWlz7klXqqXCof8BAACgQJn+Hxb1/19PXD2x4TutrrsqXamWDof+BwAAgAJl+v+BqP/nNNh5o/8azTy9RbpSNQ6H/gcAAIACZfr/waj//17loqUe6njMDq3TlWp+9+t/AAAAKFCm/x+K+n/u0Od+Pvyxu768OV2pmoRD/wMAAECBMv0/POr/eZsv1bY2vOq3SrpSzf+dgPofAAAACpTp/4ej/v/nxtcfnXn2uPPHpivVcuHQ/wAAAFCgTP8/EvX/v3f81vu+pTuuOSxdqZYPh/4HAACAAmX6/9Go//9bffMz200c/tLi6Uq1Qjj0PwAAABQo0/8j/lf/Vws8u/y5n7dsN2JEulI1DYf+BwAAgAJl+v+xqP8XXGTSzRv92e/AOo1frRgO/Q8AAAAFyvT/41H/V8tMG9Gt/1YLL5yuVM3Cof8BAACgQJn+fyLq/9qwDQ66dp85U4emK9VK4dD/AAAAUKBM/4+M+n+hbe6c9e5hJz7cMl2pVg6H/gcAAIACZfp/VNT/C192+NKr9xqy77XpSrVKOPQ/AAAAFCjT/6Oj/l/klg6tuk5boumd6Uq1ajj0PwAAABQo0/9PRv2/6Eb3vXfVFhPmbJeuVKuFQ/8DAABAgTL9/1TU/4udft75V7z23LxJ6Uo1/z36HwAAAAqU6f+no/5vMGnErZ1XuniVc9KVavVw6H8AAAAoUKb/x0T9v/jLvUauddG7e52UrlRrhEP/AwAAQIEy/f9M1P9LdN/3sA+HNhn2WrpSrRkO/Q8AAAAFyvT/s1H/N/zp39k3jOk9ZZ90pWoRDv0PAAAABcr0/3NR/zc6bKtlu5+8/wI/pivVWuHQ/wAAAFCgTP8/H/X/krtUm6+/yJRD/k1XqrXDof8BAACgQJn+Hxv1/1J/vfzRJ582H9U+XanWCYf+BwAAgAJl+v+FqP+XfmqX9TfYfvJr36Ur1brh0P8AAABQoEz/vxj1f+Oqx/gvpzRbu026Uq0XDv0PAAAABcr0/0tR/y+z/PM/Xnf5yHMOTleq9cOh/wEAAKBAmf4fF/V/k+EXLHHB0V37/pquVC3Dof8BAACgQJn+fznq/2V3mPDQmjv98Okl6Uq1QTj0PwAAABQo0/+vRP2/XI+Ge00auN62X6Yr1Ybh0P8AAABQoEz/vxr1//I3bXFqj3lXdxqfrlQbhUP/AwAAQIEy/f9a1P8rrD+z1/nNd+99erpSbRwO/Q8AAAAFyvT/+Kj/m561xkbnbjFoXtt0pdokHPofAAAACpTp/9ej/l/x/akTL5vWfpUZ6UrVKhz6HwAAAAqU6f8JUf83e+GLn9/vNWuvv9KVatNw6H8AAAAoUKb/34j6f6VuTZda57DWw45MV6rW4dD/AAAAUKBM/0+M+n/lHx589OJ9HpnyYbpSbRYO/Q8AAAAFyvT/m1H/r3LQmW1v7N9pgS7pSrV5OPQ/AAAAFGjB/7f8///6/62o/1fd/bAzJ//54iEnpCvVFuHQ/wAAAFCgzOf/b0f9v9q8m3qv23KBUS+mK9WW4dD/AAAAUKBM/0+K+r/5kpsu8dHEua9dlK5UW4VD/wMAAECBMv3/TtT/q4/8/ccWS2+z9ifpSrV1OPQ/AAAAFCjT/+9G/b/G3W+NP/vsW855K12ptgmH/gcAAIACZfr/vaj/12y22PpXDj+075npSrVtOPQ/AAAAFCjT/+9H/d/imjG9Pn5s/KdfpSvVduHQ/wAAAFCgTP9/EPX/WptefGrLjg223SVdqbYPh/4HAACAAmX6/8Oo/9dee/e9Lm00tNOh6Uq1Qzj0PwAAABQo0/8fRf2/zsDLHrr+nZN7/5muVDuGQ/8DAABAgTL9/3HU/+t+fNBS10wbsszF6Uq1Uzj0PwAAABQo0/+fRP2/Xodbfr5oixN/+yJdqXYOh/4HAACAAmX6/9Oo/9c/75GJGx82Yejr6Uo1/zsB9T8AAAAUKNP/k6P+bznx1I0+67XE7mekK9Wu4ajX/wv+D/+TAQAAgP9Dmf7/LOr/DY75tPfV/fst9X26UrUJh8//AQAAoECZ/v886v8Np658Zpd92v2yW7pSzX9N/wMAAECBMv3/RdT/G81cu23zlnPGHJSuVLuHQ/8DAABAgTL9/2XU/xvv/dWj7/251VEz05Vqj3DofwAAAChQpv+/ivp/k3bNt3x36XHr7Z2uVHuGQ/8DAABAgTL9PyXq/1Y/f/fB6hOr8T+kK9Ve4dD/AAAAUKBM/38d9f+mcz77vevw4QP/S1eq+c8E6H8AAAAoUKb/v4n6v/WuzZa/6uyOlxydrlT7hEP/AwAAQIEy/T816v/N3hk2+vOOMzd7J12p9g2H/gcAAIACZfr/26j/Nz/jrEM2eqzVB+emK1XbcOh/AAAAKFCm/7+L+n+LSw/p2u2duy4/MV2p9guH/gcAAIACZfr/+6j/t3ylT/9rGx1z3KvpSrV/OPQ/AAAAFCjT/z9E/b/V5Tu1vmGlnstMSVeqA8Kh/wEAAKBAmf7/Mer/rbe96p3ur7X5bdd0pTowHPofAAAACpTp/2lR/2+z8bMz1x86begh6Up1UDj0PwAAABQo0//To/7f9tZuy3xyUcvdZ6cr1cHh0P8AAABQoEz//xT1/3aLjn/8ipNHL9UtXanmPxOg/wEAAKBAmf7/Oer/7Z9b8oDOY87/5eN0pTo0HPofAAAACpTp/1+i/t/hgc06r/XpJ2PeTleqw8Kh/wEAAKBAmf6fEfX/jk1m9f1wkaZHdUxXqnbh0P8AAABQoEz/z4z6f6en793vuCnfrPdRulIdHg79DwAAAAXK9P+vUf/vXDtpeN/t1xjfNV2pjgiH/gcAAIACZfp/VtT/u6xw7A2vHX39wA7pSnVkOPQ/AAAAFCjT/79F/b/rwwM6bXZ520teSFeqo8Kh/wEAAKBAmf7/Per/Nju2fLvTwEmb7ZuuVO3Dof8BAACgQJn+/yPq/916/rzhwJ0af/BLulIdHQ79DwAAAAXK9P/sqP93v/mjhuObj718TrpSHRMO/Q8AAAAFyvT/n1H/79Gy8S/bzut+3FHpSnVsOPQ/AAAAFCjT/39F/b9np3F779iowUlPpivVceHQ/wAAAFCgTP/Pifp/rw8WHjbxnfE9lktXquPDof8BAACgQJn+/zvq/71f3PHa2x47eVKVrlQdwqH/AQAAoECZ/p8b9f8+F80544yOQ1vdna5UJ4RD/wMAAECBMv0/L+r/fX/c541Nzt7mgg3SlerEcOh/AAAAKFCm//+J+r/twTesN2743AG905XqpHDofwAAAChQpv//jfp/vz2eXKz/xEPfHJCuVCeHQ/8DAABAgTL9/1/U//v/03naiUvfssG26Up1Sjj0PwAAABTof9//tQWi/j/gh/VOv+3PTsdcnq5Up4ZD/wMAAECBMv2/YNT/Bx4045ozWj4yds10pTotHPofAAAACpTp/yrq/4N2/+CBHfdZYPpm6Up1ejj0PwAAABQo0/+1qP8Pntdkn4n9X1y8X7pSnREO/Q8AAAAFyvT/QlH/H3LWPdP792q/a7N0pTozHPofAAAACpTp/4Wj/j/0/VManHjYoMFPpStVx3DofwAAAChQpv8Xifr/sBeOXneTLVrPfjRdqc4Kh/4HAACAAmX6f9Go/9t1u2PCuGmzVmiUrlSdwqH/AQAAoECZ/l8s6v/Dd9jrrNfmrXfS+ulKdXY49D8AAAAUKNP/DaL+P6LHjddv1vyHHtekK1XncOh/AAAAKFCm/xeP+v/Im0Y9fNxOu0+6K12pzgmH/gcAAIACZfp/iaj/j1r/3P37Dry61fbpSnVuOPQ/AAAAFCjT/w2j/m//1Iszxl/e7ILH0pWqSzj0PwAAABQo0/+Nov4/ulq00bZHTx7QJF2puoZD/wMAAECBMv2/ZNT/xyy//Qadtu/65kLpSnVeOPQ/AAAAFCjT/0tF/X/s8LlvDZwycoP705Xq/HDofwAAAChQpv+Xjvr/uGOO2OeERfY/ZuV0pbogHPofAAAACpTp/8ZR/x8/9a4Hbvq099jn05XqwnDofwAAAChQpv+Xifq/w8wh17w8pvn0B9KVqls49D8AAAAUKNP/TaL+P2HvE07f8uQpiy+RrlQXhUP/AwAAQIEy/b9s1P8nfvzOhDMvunjXq9OV6uJw6H8AAAAoUKb/l4v6/6QOK6x719DnBq+VrlSXhEP/AwAAQIEy/b981P8nn7dhgzdeazJ703Sl6h4O/Q8AAAAFyvT/ClH/nzJx+vStVnp3hZvSlerScOh/AAAAKFCm/5tG/X/qNVvvv92IW95uka5Ul4VD/wMAAECBMv2/YtT/p23638Nvn3noRlelK9Xl4dD/AAAAUKBM/zeL+v/0tV+5/o6Gc7vdnK5UV4RD/wMAAECBMv2/UtT/ZwysnXXqpG3uaJ2uVFeGQ/8DAABAgTL9v3LU/2cu+dhbrd8c+u7YdKXqEQ79DwAAAAXK9P8qUf93HHn+Bi80Prn1KulK1TMc+h8AAAAKlOn/VaP+P+vuto1u6Tz+lMXTlWr+dwLqfwAAAChQpv9Xi/q/U7PrZpzycIOrhqUr1dXh0P8AAABQoEz/N4/6/+xF9zn/5L1n/V6n8atrwqH/AQAAoECZ/l896v/Oz91w6639Wi83Il2prg2H/gcAAIACZfp/jaj/z3ngyZEvzh6089B0peoVDv0PAAAABcr0/5pR/5/bpPNhm67f/u6F05XqunDofwAAAChQpv9bRP3f5fJxs0/b8sUfr01XquvDof8BAACgQJn+Xyvq/67bLrzs7dMXWKxlulLdEA79DwAAAAXK9P/aUf+ft/GOm7913SPtt0tXqt7h0P8AAABQoEz/rxP1//m3zvlo+3adnrszXaluDIf+BwAAgAJl+n/dqP8veKfluVvvPPLtp9OV6qZw6H8AAAAoUKb/14v6/8Izfr55wqCuG62UrlQ3h0P/AwAAQIEy/b9+1P/dLv1oxJ3/TO7WMF2p+oRD/wMAAECBMv3fMur/i15pfFDH1Zvd8Ui6UvUNh/4HAACAAmX6f4Oo/y9ud++sLba7+t010pXqlnDofwAAAChQpv83jPr/kp9PWvqVr3ZvfVm6Ut0aDv0PAAAABcr0/0ZR/3efc2yrmy/74ZT+6UrVLxz6HwAAAAqU6f+No/6/dNcB73Vov95Vm6cr1fyfCeh/AAAAKFCm/zeJ+v+ywzd6fvdn3v39xnSlui0c+h8AAAAKlOn/VlH/X/71D+1HndJkuQ3TlWpAOPQ/AAAAFCjT/5tG/X/F7HcvmbLocztvk65Ut4dD/wMAAECBMv3fOur/K/dd9q5lJl98923pSnVHOPQ/AAAAFCjT/5tF/d/ji/t33OvVKT8um65UA8Oh/wEAAKBAmf7fPOr/nice9/mYZs0XG52uVIPCof8BAACgQJn+3yLq/6vOPnLeL916t78nXanuDIf+BwAAgAJl+n/LqP+vnjBw1VXu3/+5WrpS3RUO/Q8AAAAFyvT/VlH/X9N7vzErttvqqRnpSnV3OPQ/AAAAFCjT/1tH/X/tZtccPu26OUe0TVeq+f8nQP8DAABAgTL9v03U/72aP37h89PbNToyXakGh0P/AwAAQIEy/b9t1P/X3d7ljrZb9vvpr3Slujcc+h8AAAAKlOn/7aL+v36xV7ddfv0lhnRJV6r7FvjrvwX0PwAAAJQp0//bR/1/w+MLfPLt7AltPkxXqiHh0P8AAABQoEz/7xD1f+/7t/nrsX4nLv1iulLdHw79DwAAAAXK9P+OUf/fuPK8ZrvsPeTXE9KVamg49D8AAAAUKNP/O0X9f1P7bt8/+fAxV36SrlTDwqH/AQAAoECZ/t856v+bv3t24Tad7+pwUbpSPRAO/Q8AAAAFyvT/LlH/95l1VYulG7fa4sx0pXowHPofAAAACpTp/12j/u+7506vfvPmzI/eSleqh8Kh/wEAAKBAmf5vE/X/LZ/OOvmpSR3v3CVdqYaHQ/8DAABAgTL9v1vU/7cet1mPfRoOv/SrdKV6OBz6HwAAAAqU6f/do/7v12XJIaudWbX8M12pHgmH/gcAAIACZfp/j6j/+781fo+fRoybcGi6Uj0aDv0PAAAABcr0/55R/9/Wq9k3P9zf9Klz0pVqRDj0PwAAABQo0/97Rf0/YJPPFlyp2ydHTEpXqsfCof8BAACgQJn+3zvq/9tbfNd8/2bnN3otXakeD4f+BwAAgAJl+n+fqP/vuLP5S8++Ovqnk9KV6olw6H8AAAAoUKb/9436f2DDPh2+n9xyyI/pSjUyHPofAAAACpTp/7ZR/w8afchlyy46rc0+6Uo1Khz6HwAAAAqU6f/9ov6/c/BZ9+x0Spul26cr1ehw6H8AAAAoUKb/94/6/66mw3Z94pmev/6brlRPhkP/AwAAQIEy/X9A1P93T1v81X3bd7+yTbpSPRUO/Q8AAAAFyvT/gVH/33PAxBZjLxvb4bt0pXo6HPofAAAACpTp/4Oi/h/cZvbC079qvMWv6Uo1Jhz6HwAAAAqU6f+Do/6/999Nvm+63aSPDk5XqmfCof8BAACgQJn+PyTq//vOvGKPXVdve+eX6Ur1bDj0PwAAABQo0/+HRv0/5MM2Q0b8c/2ll6Qr1XPh0P8AAABQoEz/Hxb1//0vde8xddAaLU9PV6rnw6H/AQAAoECZ/m8X9f/QC546eYWdv5kwPl2pxoZD/wMAAECBMv1/eNT/w7Y7/aUm3Zoftmu6Ur0QDv0PAAAABcr0/xFR/z9w1fDmX90/5ckp6Ur1Yjj0PwAAABQo0/9HRv3/YJ9+C458df9vZqcr1Uvh0P8AAABQoEz/HxX1/0PrHvDNHs16V4ekK9W4cOh/AAAAKFCm/9tH/T98zNe7rrxok30+Tleql8Oh/wEAAKBAmf4/Our/hxdocc+Mye8+2C1dqV4Jh/4HAACAAmX6/5io/x9ZdtXLnnnm4n87pivVq+HQ/wAAAFCgTP8fG/X/o4983GHPU55b7e10pXotHPofAAAACpTp/+Oi/h/xRNO/97ps945d05VqfDj0PwAAABQo0//HR/3/WIMvmo5pf/X1H6Ur1evh0P8AAABQoEz/d4j6//FVpm79y3brffxCulJNCIf+BwAAgAJl+v+EqP+fGLrG5FW++mHrDulK9UY49D8AAAAUKNP/J0b9P3Lzmy7a/Z+uZ/+SrlQTw6H/AQAAoECZ/j8p6v9RNx42YNTqI2/eN12p3gyH/gcAAIACZfr/5Kj/R99x5lNTdm72ylHpSvVWOPQ/AAAAFCjT/6dE/f/k6g8eucygyS3mpCvV2+HQ/wAAAFCgTP+fGvX/Uydd8O/y1y1w2BfpSjUpHPofAAAACpTp/9Oi/n/6y+dX/rbdi09enK5U74RD/wMAAECBMv1/etT/Y97osf1jW3b65ox0pXo3HPofAAAACpTp/zOi/n+m8y5f7jL9ker1dKV6Lxz6HwAAAAqU6f8zo/5/9puZl644u/U+u6Ur1fvh0P8AAABQoEz/d4z6/7kjthg0bf1ZD36frlQfhEP/AwAAQIEy/X9W1P/Pt2347PN7t/93ZrpSfRgO/Q8AAAAFyvR/p6j/x/454Zi2/QatdlC6Un0UDv0PAAAABcr0/9lR/79w9B1Xzu18cscf0pXq43DofwAAAChQpv87R/3/4vdHH7/Yw0Ov3ztdqT4Jh/4HAACAAmX6/5yo/1/67ZSd2r/Z4OOj05Xq03DofwAAAChQpv/Pjfp/3F73DH608fit/0tXqsnh0P8AAABQoEz/d4n6/+XJTarfGx569rnpSvVZOPQ/AAAAFCjT/12j/n/l+A++WnTSLTe/k65Un4dD/wMAAECBMv1/XtT/r3ad8eLBI7Z55dV0pfoiHPofAAAACpTp//Oj/n/t7fXWvPvMuS1OTFeqL8Oh/wEAAKBAmf6/IOr/8dfNvfq+Qdevfk26Un0VDv0PAAAABcr0/4VR/7/eavuT2u3c9oX105VqSjj0PwAAABQo0//dov6fsNaibWqrf3PL9ulK9XU49D8AAAAUKNP/F0X9/8ZdL94/8581ut6VrlTfhEP/AwAAQIEy/X9x1P8TG527yENfjd2uSbpSTQ2H/gcAAIACZfr/kqj/33xy1NTDt+v++WPpSvVtOPQ/AAAAFCjT/92j/n/r3htfadh+0rX3pyvVd+HQ/wAAAFCgTP9fGvX/2yvutc5/lzU+daF0pfo+HPofAAAACpTp/8ui/p/0za6Nvz5lWrPn05Xqh3DofwAAAChQpv8vj/r/nSN6/tb4mZZzV05Xqh/Dof8BAACgQJn+vyLq/3fbjn13t8k9H10iXammhUP/AwAAQIEy/X9l1P/v/XnhJqMXbbPfA+lKNT0c+h8AAAAKlOn/HlH/v3/SGzf93OyTRddKV6qfwqH/AQAAoECZ/u8Z9f8HXzY6Z9VXm353dbpS/RwO/Q8AAAAFyvT/VVH/f/jGlgfvff/ox29KV6pfwqH/AQAAoECZ/r866v+POv/62NPdzj9403SlmhEO/Q8AAAAFyvT/NVH/f7z5mss9d+bw1ZdLV6qZ4dD/AAAAUKBM/18b9f8nN377534jOr7wZLpS/RoO/Q8AAAAFyvR/r6j/P73jyw+bTRp3y93pSjUrHPofAAAACpTp/+ui/p+8+oqb/diw6lqlK9Vv4dD/AAAAUKBM/18f9f9nTzx0y+ON79qud7pS/R4O/Q8AAAAFyvT/DVH/f96g43k7v3nM5xukK9Uf4dD/AAAAUKBM//eO+v+LVdq1W+7hmddum65Us8Oh/wEAAKBAmf6/Mer/L4fePOq7zq1OHZCuVH+GQ/8DAABAgTL9f1PU/18d2nqTFftNaLZmulL9FQ79DwAAAAXK9P/NUf9PmfHHu9P2XmLu5elKNScc+h8AAAAKlOn/PlH/fz337d+eX3/Io/3SlervcOh/AAAAKFCm//tG/f/Nzg0at5194n6bpSvV3HDofwAAAChQpv9vifp/6nvPPLb89DmLPpWuVPPCof8BAACgQJn+vzXq/29Pu+Tgb7fc6rtm6Ur1Tzj0PwAAABQo0//9ov7/7pI9znmsXb/HG6Ur1b/h0P8AAABQoEz/94/6//vXLr9pl+vaHfxoulL9Fw79DwAAAAXK9P9tUf//cOXBm+1+wnM3PpSu1OYf+h8AAAAKlOn/AVH//7j1rR+OGnvxWQ3SlVr4O/ofAAAASpTp/9uj/p+24aN/Tvny3W1WTVdqVTj0PwAAABQo0/93RP0/vf9pyy1TazL52XSlNv8/AOh/AAAAKFCm/wdG/f/TwpNH7bVq7z6bpCu1hcKh/wEAAKBAmf4fFPX/z2NXaTfmpf3P7ZOu1BYOh/4HAACAAmX6/86o/395aJ3zfhk8ZZ2e6UptkXDofwAAAChQpv/vivp/RuMpt6zSvfmr66QrtUXDof8BAACgQJn+vzvq/5kNV2+48oDJIwelK7X579f/AAAAUKBM/98T9f+vo7//ZcZuzQ7dMV2pNQiH/gcAAIACZfp/cNT/swZ//vYza41ccN10pbZ4OPQ/AAAAFCjT//dG/f9b05U23HNO1696pSu1JcKh/wEAAKBAmf6/L+r/33s9cEOTqT88sEi6UmsYDv0PAAAABcr0/5Co///YpFOnr7Zab8/70pVao3DofwAAAChQpv/vj/p/dotD9xt5+NUrP5Gu1JYMh/4HAACAAmX6f2jU/3/e2Xf4Hj12/6dxulJbKhz6HwAAAAqU6f9hUf//9enOi+3aZ9CNW6QrtaXDof8BAACgQJn+fyDq/znHXT1txH7tz7olXanNfyZA/wMAAECBMv3/YNT/f3d57o2pG83a5sp0pTa/+/U/AAAAFCjT/w9F/T/3rYvWW2FW68mrpyu1JuHQ/wAAAFCgTP8Pj/p/XvvXr913xiN9Hk5XasuGQ/8DAABAgTL9/3DU//98t9QZY1t3OnepdKW2XDj0PwAAABQo0/+PRP3/76zN955+8IvrNE1XasuHQ/8DAABAgTL9/2jU///t+duwpjcu8OqYdKW2Qjj0PwAAABQo0/8j/lf/1xa4renyA06dO7LOSm3+MwH6HwAAAAqU6f/Hov5fcI0vfj995DaHDk5XaiuGQ/8DAABAgTL9/3jU/9UWUz/Y4f1bFhyVrtSahUP/AwAAQIEy/f9E1P+169fY8s3FDv1qhXSltlI49D8AAAAUKNP/I6P+X2jVm/r3W278A3ekK7WVw6H/AQAAoECZ/h8V9f/C9x3W9aTXG+y5dbpSWyUc+h8AAAAKlOn/0VH/LzLizENaPTB05Y3Sldqq4dD/AAAAUKBM/z8Z9f+iiz84+qWuJ/9zfbpSWy0c+h8AAAAKlOn/p6L+X2y/C5Z5tUfjv45LV/6/9+h/AAAAKFCm/5+O+r/B78/P3PzwSSu+lK7UVg+H/gcAAIACZfp/TNT/i3/V453jt+re9oN0pbZGOPQ/AAAAFCjT/89E/b/Ekbu07jN17PDz05XamuHQ/wAAAFCgTP8/G/V/w/Ez+74+Z41v56YrtRbh0P8AAABQoEz/Pxf1f6Nztui8zVrfLHREulJbKxz6HwAAAAqU6f/no/5f8uSGB5y1W9sD9ktXamuHQ/8DAABAgTL9Pzbq/6U+m/D4oAHXP/ZTulJbJxz6HwAAAAqU6f8Xov5feuC++5/a/fxxh6UrtXXDof8BAACgQJn+fzHq/8Zr93r4jsGj1/g9XamtFw79DwAAAAXK9P9LUf8vs+mI699+qel536QrtfXDof8BAACgQJn+Hxf1f5Nrzjtru1U/6b9zulJrGQ79DwAAAAXK9P/LUf8v2+zlt06ptfnizXSltkE49D8AAAAUKNP/r0T9v9zd1Qa3fNlzx07pSm3DcOh/AAAAKFCm/1+N+n/5kVs1emFsyzMuSFdqG4VD/wMAAECBMv3/WtT/Kyz574zWJ0zr9Wm6Uts4HPofAAAACpTp//FR/zfde4N9tuza6q9/0pXaJuHQ/wAAAFCgTP+/HvX/ijOnPfDyAzNXPDZdqbUKh/4HAACAAmX6f0LU/82mTrrmptePabtnulLbNBz6HwAAAAqU6f83ov5f6ZjlTz9hubuGT0tXaq3Dof8BAACgQJn+nxj1/8oT75uw1WLVtyenK7XNwqH/AQAAoECZ/n8z6v9Vzuuw7hvvj1vo5XSltnk49D8AAAAUKNP/b0X9v2qHwxvcNbLjAe+lK7UtwqH/AQAAoECZ/n876v/VPr5z+pmnDn+sc7pS2zIc+h8AAAAKlOn/SVH/N19/u7P63thu3BvpSm2rcOh/AAAAKFCm/9+J+n/1m/6+/riD+61xWrpS2zoc+h8AAAAKlOn/d6P+X6PHCw9v1nqr87qnK7VtwqH/AQAAoECZ/n8v6v81d1hk/9dmzOn/WbpS2zYc+h8AAAAKlOn/96P+bzF85IyBs0784oB0pbZdOPQ/AAAAFCjT/x9E/b/W8uc06rTRkB1npSu17cOh/wEAAKBAmf7/MOr/tas9N9h2vyXO+DZdqe0QDv0PAAAABcr0/0dR/6/zVO+3xveZ0GuPdKW2Yzj0PwAAABQo0/8fR/2/7rz2p098oMHyE9OV2k7h0P8AAABQoEz/fxL1/3q7337Njl3H/3lWulLbORz6HwAAAAqU6f9Po/5f/6C7HzhjuZPvvTBdqe0SDv0PAAAABcr0/+So/1v+cPI+t70+dJfJ6Upt13DofwAAAChQpv8/i/p/g27vTx/3/jZLtEtXam3Cof8BAACgQJn+/zzq/w1fWKbBJovNnfZHulLbLRz6HwAAAAqU6f8vov7f6P111z3x1EOf/zpdqe0eDv0PAAAABcr0/5dR/2981i8T+o+85did0pXaHuHQ/wAAAFCgTP9/FfX/JududFC/gztt+He6UtszHPofAAAACpTp/ylR/7d6/YcRJ934yMTD05XaXuHQ/wAAAFCgTP9/HfX/pp+/e3OrGQvctn+6Uts7HPofAAAACpTp/2+i/m99yrLnvtT6xQt/Tldq+4RD/wMAAECBMv0/Ner/zf64/70BG7Xf5Ph0pbZvOPQ/AAAAFCjT/99G/b/5/se1On3WoHfGpSu1tuHQ/wAAAFCgTP9/F/X/FkcdufQOfVr3fD9dqe0XDv0PAAAABcr0//dR/285ZeCsN/ebdeJ56Upt/ncC6n8AAAAoUKb/f4j6f6sh+x32+uHrLX9gulI7IBz6HwAAAAqU6f8fo/7ferVrRm7T44c/f0tXavN/JqD/AQAAoECZ/p8W9f82Szx+61lTd793arpSOygc+h8AAAAKlOn/6VH/b/tYl/MHbXX1LrunK7WDw6H/AQAAoECZ/v8p6v/t1nz1o1fXarbEhHSldkg49D8AAAAUKNP/P0f9v/2ABTbffM7kaaemK7VDw6H/AQAAoECZ/v8l6v8dbthm2eMHdH3+0nSldlg49D8AAAAUKNP/M6L+33HLebP77Dby2M/TlVq7cOh/AAAAKFCm/2dG/b/ToIdbthi8/4anpCu1w8Oh/wEAAKBAmf7/Ner/ndc54/WPuvee+Eq6UjsiHPofAAAACpTp/1lR/+/S+sAfrly1+W3vpiu1I8Oh/wEAAKBAmf7/Ler/Xa/tv/jZL0258Ox0pXZUOPQ/AAAAFCjT/79H/d9mpbUebPnlxZvMS1dq7cOh/wEAAKBAmf7/I+r/3e75Zs+Pa8+9c0y6Ujs6HPofAAAACpTp/9lR/+8+6pPTrj+hSc+90pXa/J8J6H8AAAAoUKb//4z6f4+lVrvu0rHvnjg9XakdGw79DwAAAAXK9P9fUf/vuc+bG1+035DjF01XaseFQ/8DAABAgTL9Pyfq/71+XeLNa/qceNmQdKV2fDj0PwAAABQo0/9/R/2/97etfvps1oT3H09Xah3Cof8BAACgQJn+nxv1/z7H/rnkxhstsfnS6UrthHDofwAAAChQpv/nRf2/75u7PdKldb+LB6YrtRPDof8BAACgQJn+/yfq/7bnX7nv1TPaDdohXamdFA79DwAAAAXK9P+/Uf/vd8LTHd+7cc7r66UrtZPDof8BAACgQJn+/y/q//0/ufTG5gdvte516UrtlHDofwAAACjQ/77/F1og6v8DXjrqiSNGjjuyVbpSOzUc+h8AAAAKlOn/BaP+P/CCQQc+eGr1TN90pXZaOPQ/AAAAFCjT/1XU/wedOfTsfxcbPqNHulI7PRz6HwAAAAqU6f9a1P8Hf3h8n0bvd1xy7XSldkY49D8AAAAUKNP/C0X9f0ib9zY97PWZezyYrtTODIf+BwAAgAJl+n/hqP8P/Xe5SUOWa3X/YulKrWM49D8AAAAUKNP/i0T9f9i0jX/9tetds1ZLV2pnhUP/AwAAQIEy/b9o1P/tDvixSfXAMU2eS1dqncKh/wEAAKBAmf5fLOr/w5fd9slFxvY8/vZ0pXZ2OPQ/AAAAFCjT/w2i/j/ikX8O/eOENpdtla7UOodD/wMAAECBMv2/eNT/R455rcs9tWnvb5yu1M4Jh/4HAACAAmX6f4mo/49aYMF+B33ZcvMb0pXaueHQ/wAAAFCgTP83jPq/fZ8ntmjw0uiLF0xXal3Cof8BAACgQJn+bxT1/9Hrdn3/71XPH3RvulLrGg79DwAAAAXK9P+SUf8fs93+fzzS/ZPXR6YrtfPCof8BAACgQJn+X+r/7v//av/P68dede0KRw9uuu7y6Urt/HDofwAAAChQpv+Xjj7/P65Lyz6Dd/vmyOHpSu2CcOh/AAAAKFC9/m+y+Px7ocZR/x//1s9nHzhgjWeWTFdqF4ZD/wMAAECBMp//LxP1f4dPPzpw4TnXz1gxXal1C4f+BwAAgAJl+r9J1P8nHNf4idlrtV3ymXSldlE49D8AAAAUKNP/y0b9f+Kse5s8vNWkPbZMV2oXh0P/AwAAQIEy/b9c1P8n7XnSr8dMbXz/relK7ZJw6H8AAAAoUKb/l4/6/+T2x05avMfYWVekK7Xu4dD/AAAAUKBM/68Q9f8p3w3YdM7h3Zs0T1dql4ZD/wMAAECBMv3fNOr/Uwfv0++f37Z645Z0pXZZOPQ/AAAAFCjT/ytG/X9a0xu6LLnxnPW3SFdql4dD/wMAAECBMv3fLOr/0xs+eeiR+7frvnq6Upv/nQD6HwAAAAqU6f+Vov4/Y3TnJx/o2++uK9OV2vzX9D8AAAAUKNP/K0f9f2aLcSvM6r3Eh0ulK7Ue4dD/AAAAUKBM/68S9X/HOxf+Y8GDJmz5cLpS6xkO/Q8AAAAFyvT/qlH/n9Vrx/cP3fTEE8akK7WrwqH/AQAAoECZ/l8t6v9Om8zZ4v5fhlzRNF2pXR0O/Q8AAAAFyvR/86j/z95w60eGNjhm5uB0pXZNOPQ/AAAAFCjT/6tH/d+5/3/7HvLBXY3rrNSuDYf+BwAAgAJl+n+NqP/PufKVjguMarXbCulKrVc49D8AAAAUKNP/a0b9f+7WtRt/O23mfaPSldp14dD/AAAAUKBM/7eI+r/LQ49tPKxLx5+3Tldq14dD/wMAAECBMv2/VtT/XRuf/+ZRw4Y3vCNdqd0QDv0PAAAABcr0/9pR/5+3cNuflhpfHX59ulLrHQ79DwAAAAXK9P86Uf+fP/a6JectO+7pjdKV2o3h0P8AAABQoEz/rxv1/wVzj3jwr6rpGw3SldpN4dD/AAAAUKBM/68X9f+FO9+15xJffLL+Q+lK7eZw6H8AAAAoUKb/14/6v9uhQ0479vnzuz+brtT6hEP/AwAAQIEy/d8y6v+LZpxw3fAOo+9aNV2p9Q2H/gcAAIACZfp/g6j/L77knZZ/Xtrywz7pSu2WcOh/AAAAKFCm/zeM+v+S11Z4faF7p225SbpSuzUc+h8AAAAKlOn/jaL+7/7ehj8cMK7NCeukK7V+4dD/AAAAUKBM/28c9f+lp01f/N7Vel7RM12p9Q+H/gcAAIACZfp/k6j/Lzun/SlX/9V95o7pSu22cOh/AAAAKFCm/1tF/X/5+Nt7dmkxtvGgdKU2IBz6HwAAAAqU6f9No/6/4rO772vepvFuvdKV2v/F3p9GbT3+/d8/9s8eIRkKX0OmhAyZM4TMQ4hCSUjGyJBECkmGhCRjMiWUOcmYecqQTMmQZJ6FJKL4r/9am3Vu57Wd129b51rXb63txuNx613Hsb/Wcfe59mP/HNeHQ/8DAABAgTL9v1nU/4OOOWa3d65787Z105XayHDofwAAAChQpv83j/r//DlTvxp8wT4/3pau1G4Ih/4HAACAAmX6f4uo/y/Yd9mq/8GXLtkgXan9+0wA/Q8AAAAFyvT/llH/X9hl3bVbbb1m52XSldpN4dD/AAAAUKBM/7eO+v+iT2ZN+ujLzx97MF2p3RyO/97/1f+VHxkAAAD4X8r0/1ZR/w++rc2R7ze56onD05XaLeHw/j8AAAAUKNP/W0f9f3GzPweu//KBhy5IV2qjwqH/AQAAoECZ/t8m6v8hiz9zy4CxfzX8Ll2p3RoO/Q8AAAAFyvT/tlH/XzKuwU6XnrbNN3ukK7XR4dD/AAAAUKBM/7eJ+v/SNSd89l6PMaNeSFdqt4VD/wMAAECBMv2/XdT/l1136kLNHzqm7THpSu32cOh/AAAAKFCm/7eP+n/opXusccq7Lzfpla7U7giH/gcAAIACZfp/h6j/L99y6PODGjb87Z10pTYmHPofAAAACpTp/7ZR/w87fbHtT581+6Ie6UptbDj0PwAAABQo0/87Rv1/xeQpH12w6WbHvJau1O4Mh/4HAACAAmX6f6eo/4e/P2fBWx1u3PSjdKV2Vzj0PwAAABQo0/87R/1/ZfdNV1tzaNd3zklXaneHQ/8DAABAgTL9v0vU/1f9fO7TZ1757PWz05XaPeHQ/wAAAFCgTP/vGvX/1XvtduiQ9gv13y9dqd0bDv0PAAAABcr0/25R/19z2Flnfdzqvla7pyu1+8Kh/wEAAKBAmf7fPer/a794/KYNfz15ypfpSu3+cOh/AAAAKFCm//eI+v+6W47bZr0vJzzxXLpSGxcO/Q8AAAAFyvT/nlH/j1jpvvc/3LrPod3SldoD4dD/AAAAUKBM/+8V9f/1S101b+jB0xueka7UxodD/wMAAECBMv3fLur/kRM6rHz2BSt98266UnswHPofAAAACpTp/72j/r+hxScTW1x30aiD05XahHDofwAAAChQpv/3ifr/xhtaHPzuLru1/StdqT0UDv0PAAAABcr0/75R/980eJW+A5t/0+SHdKX2cDj0PwAAABQo0//to/6/edMPrz/1j/V+2zddqT0SDv0PAAAABcr0/35R/9/yTN/VLlvt7YvmpCu1R8Oh/wEAAKBAmf7fP+r/Uf2eWnDO88sdc1C6UnssHPofAAAACpTp/w5R/9960vkftRz95KY7piu1x8Oh/wEAAKBAmf7vGPX/6Kk7bf/BgLPe+TxdqU0Mh/4HAACAAmX6/4Co/2/b7eebzuv+6fUnpyu1J8Kh/wEAAKBAmf4/MOr/2+dveVavp1bv/3q6UnsyHPofAAAACpTp/4Oi/r/jmyUPXfvjoa0+TFdqT4VD/wMAAECBMv3fKer/MR1efXraIu2n9E1Xak+HQ/8DAABAgTL93znq/7HLr7jy21tf2uHXdKX2TDj0PwAAABQo0/8HR/1/5z0fz1vjy30e3D9dqT0bDv0PAAAABcr0f5eo/+969Iv3+1zw+de7pSu158Kh/wEAAKBAmf4/JOr/uxdZc5sLD16zwRfpSu35cOh/AAAAKFCm/7tG/X/PsGHXz9jl6fbHpSu1F8Kh/wEAAKBAmf4/NOr/e1se1Hej686579V0pfZiOPQ/AAAAFCjT/4dF/X/f9j0P7vfHm3/OSFdqL4VD/wMAAECBMv1/eNT/959/18SLmy+z8oB0pTYpHPofAAAACpTp/25R/48bcfxag5//rseL6Urt5XDofwAAAChQpv+PiPr/gbXuebb/ausPPjZdqb0SDv0PAAAABcr0f/eo/8e3vuaTVgMu+OiUdKX27zMB9T8AAAAUKNP/R0b9/+Bl+y3y0ehdtns7Xam9Fg79DwAAAAXK9P9RUf9P+H9fqU0Oh/4HAACAAmX6/+io/x+6vXnb07qvePX8dKX2ejj0PwAAABQo0//HRP3/8APNjlh9kYef/T5dqU0Jh/4HAACAAmX6/9io/x9Z4v1B73x8xup7piu1N8Kh/wEAAKBAmf4/Lur/R9svvs57L9/T4aR0pfZmOPQ/AAAAFCjT/z2i/n/st8kvNm9y4oOT05XaW+HQ/wAAAFCgTP8fH/X/45/O/eKU057/enq6Uvv3bwLqfwAAAChQpv9PiPp/4iEbNxg0dpEGZ6YrtXfCof8BAACgQJn+7xn1/xOvnHfH+w/d3P63dKU2NRz6HwAAAAqU6f8To/5/svcuu6zf47D7OqUrtXfDof8BAACgQJn+Pynq/6eOPefoAQ1//rNtulKbFg79DwAAAAXK9P/JUf8/PePRiy59d5OVP0tXau+FQ/8DAABAgTL9f0rU/8+c8W2XbTZ9tUfndKX2fjj0PwAAABQo0/+9ov5/9vVWj74ya4nBf6YrtQ/Cof8BAACgQJn+PzXq/+c+aDrixqG3f/RjulL7MBz6HwAAAAqU6f/eUf8/f+Q7/U/qcNR27dOV2vRw6H8AAAAoUKb/T4v6/4Vfjpi+Rft5pz2frtQ+Cof+BwAAgAJl+r9P1P8vthuz9UtXbnX1EelKbUY49D8AAAAUKNP/p0f9/9LhN644/Ndrnj09Xal9HA79DwAAAAVaePlNG/33//lv/X9G1P+TvjzkzyNadVp9arpSmxkO/Q8AAAAFyrz/3zfq/5dHXXzY0R+vvvZW6Urtk3DofwAAAChQpv/PjPr/lZXbP3HNIp++cH26Uvs0HPofAAAACpTp/35R/7/auM+Nz3VvP+yydKX2WTj0PwAAABQo0//9o/5/7aEHB2zy1NBerdKV2ufh0P8AAABQoEz/nxX1/+R1Fp55/OjlthqdrtS+CIf+BwAAgAJl+v/sqP9fv3HSdiMGvP3BwulK7ctw6H8AAAAoUKb/z4n6f8rFC1Z5fbWzLls+Xal9FQ79DwAAAAXK9P+AqP/f2Gzbv7d//smeE9KV2tfh0P8AAABQoEz/nxv1/5uvbPLyWs13a7ZUulL7Jhz6HwAAAAqU6f+BUf+/1fv3lm/+cdE/96QrtW/Dof8BAACgQJn+Py/q/7ePfX2J869b7+6J6Urtu3DofwAAAChQpv8HRf3/zowlvj1jl2/2+k+6Uvs+HPofAAAACpTp//Oj/p/a/rE9Nzi4T+3qdKX2Qzj0PwAAABQo0/8XRP3/7m8D7p55wYTPWqcrtR/Dof8BAACgQJn+vzDq/2mf7jrkki9Xenj1dKU2Kxz6HwAAAAqU6f+Lov5/75BBx/Xdenqn89KV2k/h0P8AAABQoEz/D476//3V9p98VquF1r49Xan9HA79DwAAAAXK9P/FUf9/cPu1G13+67MvLJqu1H4Jh/4HAACAAmX6f0jU/x8+cG/j6VeePGzpdKU2Oxz6HwAAAAqU6f9Lov6fvsQJP67b/r5e49OV2q/h0P8AAABQoEz/Xxr1/0cjPtind4fNtto+XanNCYf+BwAAgAJl+v+yqP9nrLXa/ecOnf3BDelK7bdw6H8AAAAoUKb/h0b9/3HrtYdOndX1skvSldrccOh/AAAAKFCm/y+P+n/mZZ/3XGfTG3uul67Ufg+H/gcAAIACZfp/WNT/nwzY8dv33z2m2ZXpSu2PcOh/AAAAKFCm/6+I+v/TFy9aYv2GY/7ZJF2pzQuH/gcAAIACZfp/eNT/n731ZMsBPRre3SJdqf0ZDv0PAAAABcr0/5VR/39+Qv+XL33o5b3OT1dqf4VD/wMAAECBMv1/VdT/X8x75bj3xh5YWyxdqc0Px/+//8cu8X/5ZwYAAAD+dzL9f3XU/1/u3HhI89Ou+uyudKW2IBze/wcAAIACZfr/mqj/v+q0xd2nNNnm4SfTldrf4dD/AAAAUKBM/18b9f/XP/6656CX/+q0WrpS+ycc+h8AAAAKlOn/66L+/+bONX686J6mX+2VrlT/HvofAAAACpTp/xFR/3+73NeNTztl6qLfpCtV+B79DwAAACXK9P/1Uf9/t+iMjVZful/Hf9KVapFw6H8AAAAoUKb/R0b9//2TK09+Z/LE8YemK1UtHPofAAAACpTp/xui/v+h1Z09B7/V4q+30pXq3wcA6H8AAAAoUKb/b4z6/8erTx7av9HXK/VOV6p6OPQ/AAAAFCjT/zdF/T9r4IH3tzpxz32PSleqBuHQ/wAAAFCgTP/fHPX/T9teuc9HDwy+/6V0pVo0HPofAAAACpTp/1ui/v+5Rcd3ZxzUe8ZZ6Ur17+v1PwAAABQo0/+jov7/5YarW280ZHybj9OVqmE49D8AAAAUKNP/t0b9P3vw/cv3+26V415JV6rFw6H/AQAAoECZ/h8d9f+vm/aYc/GWMy4+IV2plgiH/gcAAIACZfr/tqj/59wy/YC312/7zNfpSrVkOPQ/AAAAFCjT/7dH/f/bSqs+vMbvA9fYNV2pGoVD/wMAAECBMv1/R9T/c5da59o+17bq0yF88Z+F/+v7lgqH/gcAAIACZfp/TNT/v0/4tM+F7WZd9XO6UjUOh/4HAACAAmX6f2zU/3/8vNlb5x26xVfvpSvV0uHQ/wAAAFCgTP/fGfX/vL1+26zXwDmL9klXqmXCof8BAACgQJn+vyvq/z8Pe2PZtT/t0rF7ulL92/36HwAAAAqU6f+7o/7/64uGP0/bbuT4Z9KVarlw6H8AAAAoUKb/74n6f/7pE/e7bPUGf+2drlRNwqH/AQAAoECZ/r836v8Fk88ef878SSvNSleqpuHQ/wAAAFCgTP/fF/X/3+/vfmXLG3rsOy9dqZYPh/4HAACAAmX6//6o///pPrDXB23H3n9IulKtEA79DwAAAAXK9P+4/+r/aqGjNttg1zEdZ3yarlQrhkP/AwAAQIEy/f9A1P8Lf/zblIf7D2+zc7pS/Scc+h8AAAAKlOn/8VH/L/LqGz99tnKb4w5IV6qVwqH/AQAAoECZ/n8w6v/aKQ0bLTNpwcVz05Vq5XDofwAAAChQpv8nRP1ffTbx3r0+7PZMv3SlWiUc+h8AAAAKlOn/h6L+r3c+u/1jDUat8X66Uq0aDv0PAAAABcr0/8NR/zfYe/eTfjymcZ830pWqWTj0PwAAABQo0/+PRP2/6NyBlzZ7fMpVJ6Yr1Wrh0P8AAABQoEz/Pxr1/2LjO667UrvHrhiYrlT/vkb/AwAAQIEy/f9Y1P8NF7v61W+v7XvKWulKtUY49D8AAAAUKNP/j0f9v/gq93//5O/Tmm+erlRrhkP/AwAAQIEy/T8x6v8l7ujRcN/1V3jxmnSl+vd3AvQ/AAAAFCjT/09E/b/k5tPvbLrlkEtXSleq5uHQ/wAAAFCgTP8/GfV/o6Grtvvqu3YnPpquVGuHQ/8DAABAgTL9/1TU/0tdv87x44d8ufX96UrVIhz6HwAAAAqU6f+no/5vvPqng3c8qPn7jdKVap1w6H8AAAAoUKb/n4n6f+lux/aZ8MDMux5JV6p1w6H/AQAAoECZ/n826v9lPhx17e4nNmvXNF2p1guH/gcAAIACZfr/uaj/l50y8uHlGo1bbZF0pWoZDv0PAAAABcr0//NR/y932qEHfPJWr79vSVeq9cOh/wEAAKBAmf5/Ier/Jl/9NGfi5B8e2SBdqf79P/0PAAAABcr0/4tR/zftut7yeyy94UFD05Vqw3DofwAAAChQpv9fivp/+T2Wa73KKYMWGZGuVBuFQ/8DAABAgTL9Pynq/xVmv/vuT/fs9Pm26UrVKhz6HwAAAAqU6f+Xo/5f8eFFe33/+IgrVklXqo3Dof8BAACgQJn+fyXq//8s+eyVKx7T+ZSn0pVqk3DofwAAAChQpv9fjfp/pRX/Gr93g7nN70xXqk3Dof8BAACgQJn+fy3q/5Vv3W6/pz9s/eIS6Uq1WTj0PwAAABQo0/+To/5fZePLf/5i0l2XXpSuVJuHQ/8DAABAgTL9/3rU/6sO2XPZFVY+4cS105Vqi3DofwAAAChQpv+nRP3f7Kbem+3c/8WtN01Xqi3Dof8BAACgQJn+fyPq/9WaP/TWuDHV+8PSlap1OPQ/AAAAFCjT/29G/b/6tBUOaN/2n7tapivVVuHQ/wAAAFCgTP+/FfX/Gj3feviJG7ZvNzhdqbYOh/4HAACAAmX6/+2o/9fs+/2138wfttrN6Uq1TTj0PwAAABQo0//vRP2/1nMb9ll59f3/3i5dqbYNh/4HAACAAmX6f2rU/833u/ndtttNfuSBdKVqEw79DwAAAAXK9P+7Uf+v/d3BrR/8tNFBy6Ur1b+/E6D/AQAAoECZ/p8W9X+Lv49c/uuBoxep0pVq+3DofwAAAChQpv/fi/p/nV1un9Pk0O6f35GuVDuEQ/8DAABAgTL9/37U/+sudMZ+Sx8zasCG6UrVNhz6HwAAAAqU6f8Pov5f7/EHxn/+eLebLk9Xqh3Dof8BAACgQJn+/zDq/5b3XXLlIx9OefW6dKXaKRz6HwAAAAqU6f/pUf+v32SfXrs0aLz+NulKtXM49D8AAAAUKNP/H0X9v8GF/7y12srDuz+crlS7hEP/AwAAQIEy/T8j6v8N22y92Q+TOg5qkq5Uu4ZD/wMAAECBMv3/cdT/G61bW/bRMQveq6Ur1W7h0P8AAABQoEz/z4z6v9XwF39u17/NlqPSlWr3cOh/AAAAKFCm/z+J+n/jy+vH7XXDpF1WTleqPcKh/wEAAKBAmf7/NOr/TbZ4fshjbRvc/li6Uu0ZDv0PAAAABcr0/2dR/2+6xry7f1x97C/3pSvVXuHQ/wAAAFCgTP9/HvX/ZiN32LPZ/B5LL5muVO3Cof8BAACgQJn+/yLq/80bXvbtrp/OOfjcdKXaOxz6HwAAAAqU6f8vo/7f4sF2Szy83RaPrpmuVPuEQ/8DAABAgTL9/1XU/1uO6dXys0NH/rBFulLtGw79DwAAAAXK9P/XUf+3XvWRl5cZ2KXRtelK1T4c+h8AAAAKlOn/b6L+3+rgo3s2vXbggHHpSrVfOPQ/AAAAFCjT/99G/b/156OHftWu7U3/Q+NX+4dD/wMAAECBMv3/XdT/2/w+4v7x6896tZ6uVB3Cof8BAACgQJn+/z7q/233OXyfHX9vtf6YdKXqGA79DwAAAAXK9P8PUf+3mfnjjyt9N777+ulKdUA49D8AAAAUKNP/P0b9v93R6zf+dsvegy5OV6oDw6H/AQAAoECZ/p8V9f/2vZbZ6MmDZrx3U7pSHRQO/Q8AAAAFyvT/T1H/7/Dae5P3HbLKlm3SlapTOPQ/AAAAFCjT/z9H/d/2iAuX+ePEr3e5MF2pOodD/wMAAECBMv3/S9T/O05v++sSD7S4vXm6Uh0cDv0PAAAABcr0/+yo/3d6o9/bh781+JfN0pWqSzj0PwAAABQo0/+/Rv2/c58nNr6n0Z5LX5GuVIeEQ/8DAABAgTL9Pyfq/12+XmrY70tPPXjVdKXqGg79DwAAAAXK9P9vUf/veujLp1aTmz76dLpSHRoO/Q8AAAAFyvT/3Kj/d9tzdsf97pn4w9h0pTosHPofAAAACpTp/9+j/t/9180fGH1Kv0aLpyvV4eHQ/wAAAFCgTP//EfX/Ho981XTMwEaLfZWuVN3Cof8BAACgQJn+nxf1/56NVv/9gEMnf7tLulIdEQ79DwAAAAXK9P+fUf/v9Z+Vpi20XfcnO6YrVfdw6H8AAAAoUKb//4r6v93ojzb/9dPRXX9JV6ojw6H/AQAAoECZ/p8f9f/em5x01dj52zc9O12pjgqH/gcAAIACZfp/QdT/+1wy9vRDVv9nzsx0pTo6HPofAAAACpTp/7+j/t/35uGdGrfd/5aX05XqmHDofwAAAChQpv//ifq//doHPDT/hmE7Hp+uVMeGQ/8DAABAgf7P/V9fKOr//TZecouF+p+w2ZvpSnVcOPQ/AAAAFCjT/wtH/b//kFff+3XMXW+fmq5UPcKh/wEAAKBAmf5fJOr/Djf9PHfMpOrCo9OV6t/PBOh/AAAAKFCm/2tR/3dsvmWTA1Z+8dhJ6Up1Qjj0PwAAABQo0/9V1P8HPHz+hMYNOm/ULl2peoZD/wMAAECBMv1fj/r/wCV3Omj+hyPe+DZdqU4Mh/4HAACAAmX6v0HU/wet2PeMsY+3Hvl3ulKdFA79DwAAAAXK9P+iUf93uvWpqw85Zm6/rulKdXI49D8AAAAUKNP/i0X93/mrnpscfsqGi/VPV6pTwqH/AQAAoECZ/m8Y9f/BXe965557fvj2g3Sl6hUO/Q8AAAAFyvT/4lH/d9lj2Ow/Ju/05JR0pTo1HPofAAAACpTp/yWi/j9k9kFLL7H0oK4905Wqdzj0PwAAABQo0/9LRv3ftdsX4/Zr1KzpJ+lKdVo49D8AAAAUKNP/jaL+P/TDNTuMfmvmnJ3SlapPOPQ/AAAAFCjT/0tF/X/YlBV7//5Ar1sOTFeq08Oh/wEAAKBAmf5vHPX/4ad9fEV14rgdf09XqjPCof8BAACgQJn+Xzrq/24XntXkryHtNtsnXan6hkP/AwAAQIEy/b9M1P9HtHl87mIHDXn7p3SlOjMc+h8AAAAKlOn/ZaP+777uue913bL5hX+kK1W/cOh/AAAAKFCm/5eL+v/I4bttcf93Xx7bJV2p+odD/wMAAECBMv3fJOr/oxaac/Wc3/tuNC1dqc4Kh/4HAACAAmX6v2nU/0c/vukZi67/2BunpSvV2eHQ/wAAAFCgTP8vH/X/MfctdlDHdiuMPDJdqc4Jh/4HAACAAmX6f4Wo/49tMmXCLddO6/dsulINCIf+BwAAgAJl+n/FqP+P22+VpW9rM+zWPulKdW449D8AAAAUKNP//4n6v8d3H87u9Mn+O7+XrlQDw6H/AQAAoECZ/l8p6v/j//7kndq5/6zwTLpSnRcO/Q8AAAAFyvT/ylH/n7BLi01+7rr93O7pSjUoHPofAAAACpTp/1Wi/u857aor7t5x9NOz0pXq/HDofwAAAChQpv9Xjfr/xJ4dene+sfthe6cr1QXh0P8AAABQoEz/N4v6/6S+x3VYcsHkxQ9JV6oLw6H/AQAAoECZ/l8t6v+Tn7tv3D9rNPp+XrpSXRQO/Q8AAAAFyvT/6lH/nzLzpHX/fmnuiJ3TlWpwOPQ/AAAAFCjT/2tE/d/r6LGvNlqpdd9P05Xq4nDofwAAAChQpv/XjPr/1F7Dvz+434gN5qYr1ZBw6H8AAAAoUKb/14r6v/drBzS8647Orx+QrlSXhEP/AwAAQIEy/d886v/TDv7qzl8mvnj+++lKdWk49D8AAAAUKNP/a0f93+fz1dstcmx1dL90pbosHPofAAAACpTp/xZR/5/++0rHH7ToXZucmK5UQ8Oh/wEAAKBAmf5fJ+r/M/b5aPDt00948410pbo8HPofAAAACpTp/3Wj/u/bcKkNRr0+7tZv0pVqWDj0PwAAABQo0//rRf1/5oMvT+mwTK+d90pXqivCof8BAACgQJn+bxn1f78xs39q0GvmCoemK9XwcOh/AAAAKFCm/9eP+r//qps3+u3eZnP/SVeqK8Oh/wEAAKBAmf7fIOr/sy6/8N77xg16une6Ul0VDv0PAAAABcr0/4ZR/5+9Rdv2h/bc6bC30pXq6nDofwAAAChQpv83ivr/nDX6ndRwyR8Wfyldqa4Jh/4HAACAAmX6v1XU/wNGPnHpn29u+P1R6Up1bTj0PwAAABQo0/8bR/1/7rlLfPpx62kjPk5XquvCof8BAACgQJn+3yTq/4HbvF7b8PsV+p6VrlQjwqH/AQAAoECZ/t806v/zNvp9zTMveWyDE9KV6vpw6H8AAAAoUKb/N4v6f9BVmzwzpFPf119JV6qR4dD/AAAAUKBM/28e9f/5DQZ1e2uvL8/fNV2pbgiH/gcAAIACZfp/i6j/L3hi1/PWvKb50V+nK9WN4dD/AAAAUKBM/28Z9f+FYweMPn3ukE1+Tleqm8Kh/wEAAKBAmf5vHfX/Rcs+tuMFLdu92SFdqW4Oh/4HAACAAmX6f6uo/wcfdMKXA6e3efepdKW6JRz6HwAAAAqU6f+to/6/+Id7Fz110QWbr5KuVKPCof8BAACgQJn+3ybq/yF/XNuixbEduy2RrlS3hkP/AwAAQIEy/b9t1P+X7LT/C+9OHD7wznSlGh0O/Q8AAAAFyvR/m6j/L33z86OG3tH45bXTleq2cOh/AAAAKFCm/7eL+v+y49e+8Ox+U9a7KF2pbg+H/gcAAIACZfp/+6j/h56z2pj1Vup29rB0pbojHPofAAAACpTp/x2i/r/8hQ92/fClUTdsmq5UY8Kh/wEAAKBAmf5vG/X/sPMPf7TVGl1mDU5XqrHh0P8AAABQoEz/7xj1/xXbj+jy0YKRjVumK9W/fxNA/wMAAECBMv2/U9T/w1uO7j/4xi0O2S5dqe4Kh/4HAACAAmX6f+eo/68cdvSI/jvOefzmdKW6Oxz6HwAAAAqU6f9dov6/apH3tl69a49fl0tXqnvCof8BAACgQJn+3zXq/6sfXWb6O+eOXfaBdKW6Nxz6HwAAAAqU6f/dov6/5p71/7zokwa73ZGuVPeFQ/8DAABAgTL9v3vU/9cu/+OKp7WZNKZKV6r7w6H/AQAAoECZ/t8j6v/rOuzwxCktV3l3rXSlGhcO/Q8AAAAFyvT/nlH/j/hm3mGD5s7YfGC6Uv37TAD9DwAAAAXK9P9eUf9fP//5Ae9d07vbNelKNT4c+h8AAAAKlOn/dlH/j9ytfmPzvcYP3DxdqR4Mh/4HAACAAmX6f++o/2+Y+sh2Azq1evnRdKWaEA79DwAAAAXK9P8+Uf/feFKvmZdeMmu9ldKV6qFw6H8AAAAoUKb/9436/6Z+7f5+//u2ZzdKV6qHw6H/AQAAoECZ/m8f9f/Nz1y2yvqtB95wf7pSPRIO/Q8AAAAFyvT/flH/37JpqxFT3+w3q2m6Uv37TAD9DwAAAAXK9P/+Uf+PGvxt/3WWnNj4kXSleiwc+h8AAAAKlOn/DlH/33rDO11692x6yC3pSvV4OPQ/AAAAFCjT/x2j/h/doumj546b+vgi6Uo1MRz6HwAAAAqU6f8Dov6/bcKYFaffu+evQ9OV6olw6H8AAAAoUKb/D4z6//aljvhz3V6Dl90gXameDIf+BwAAgAJl+v+gqP/vWOmQ6Wct02K3bdOV6qlw6H8AAAAoUKb/O0X9P+aWG7e+/PWvx4xIV6qnw6H/AQAAoECZ/u8c9f/YL9rfeMnc5tv+D41fPRMO/Q8AAAAFyvT/wVH/33nYxQP6tvzyw3HpSvVsOPQ/AAAAFCjT/12i/r9rrwcP22CvdkPHpCvVc+HQ/wAAAFCgTP8fEvX/3T/3eWLmNUNOrqcr1fPh0P8AAABQoEz/d436/57uk1Y5/5IVWlycrlQvhEP/AwAAQIEy/X9o1P/3vr/w32d0mjZp/XSlejEc+h8AAAAKlOn/w6L+v2/ytjPXat33yjbpSvVSOPQ/AAAAFCjT/4dH/X//6Qu2e/P7x069KV2pJoVD/wMAAECBMv3fLer/cSdsd/tbS+60UPN0pXo5HPofAAAACpTp/yOi/n/grb92X/PNQZ9emK5Ur4RD/wMAAECBMv3fPer/8S8+e8zp4zZ86Ip0pXo1HPofAAAACpTp/yOj/n9wwKLnX9DzhwM2S1eq18Kh/wEAAKBAmf4/Kur/CT8+1PzjXr1WfTpdqSaHQ/8DAABAgTL9f3TU/w916v3ShveOm79qulK9Hg79DwAAAAXK9P8xUf8/vPOeX5/5erOxi6cr1ZRw6H8AAAAoUKb/j436/5F5l9eHLDNzz7HpSvVGOPQ/AAAAFCjT/8dF/f/ok4eOGrpote3l6Ur1Zjj0PwAAABQo0/89ov5/bNGRO589/cUPN0xXqrfCof8BAACgQJn+Pz7q/8eXG9V9vYknDN0mXaneDof+BwAAgAJl+v+EqP8n3nnsuR8ee9fJ16Ur1Tvh0P8AAABQoEz/94z6/4lt3119YL/WLZqkK9XUcOh/AAAAKFCm/0+M+v/Jgcs9d+odcyc9nK5U74ZD/wMAAECBMv1/UtT/T1293uctXup85ah0pZoWDv0PAAAABcr0/8lR/z/d6qeF311pxKm1dKV6Lxz6HwAAAAqU6f9Tov5/5oKnPjpyQfeFHktXqvfDof8BAACgQJn+7xX1/7M79N1+2BqjP105Xak+CIf+BwAAgAJl+v/UqP+fW3+n1V7YsdFDS6Yr1Yfh0P8AAABQoEz/9476//krzl/Q+sbJB9yXrlTTw6H/AQAAoECZ/j8t6v8Xalse2vPc/VddM12pPgqH/gcAAIACZfq/T9T/Lz7289M3dx02/9x0pZoRDv0PAAAABcr0/+lR/79076s3vdZm+7HXpivVx+HQ/wAAAFCgTP+fEfX/pBWWPGurT/7Zc4t0pZoZDv0PAAAABcr0f9+o/1/u+PH7bZYZvPcH6Ur1STj0PwAAABQo0/9nRv3/yrcrbvPG63ve2z9dqT4Nh/4HAACAAmX6v1/U/68uWHPlkfd+Pa9nulJ9Fg79DwAAAAXK9H//qP9f2/2Lecf1arHilHSl+jwc+h8AAAAKlOn/s6L+n/zuQQdv1nPi/julK9UX4dD/AAAAUKD/R/8v8t+/Wj876v/XTx428Zlx/cZ9kq5UX4ZD/wMAAECBMu//nxP1/5T+d11/1ZtTv/g9Xam+Cof+BwAAgAJl+n9A1P9vPNuz77FLNq0fmK5UX4dD/wMAAECBMv1/7rkLLbRo+Meb2x6zb7/vZ53xU7pSfRMO/Q8AAAAFyvT/wOj9/7cG3nLPxa1bXbNPulJ9Gw79DwAAAAXK9P95Uf+/ffX1l83oNPC5LulK9V049D8AAAAUKNP/g6L+f6dV15M3uqTtWn+kK9X34dD/AAAAUKBM/58f9f/UJ2e90eeaGceflq5UP4RD/wMAAECBMv1/QdT/7y667oYX7rXKJdPSlerHcOh/AAAAKFCm/y+M+n/acssu+XbL8TOfTVeqWeHQ/wAAAFCgTP9fFPX/e3dOnbXG3N7bH5muVP/+TUD9DwAAAAXK9P/gqP/f/7HBXmt/MnbvXdKV6udw6H8AAAAoUKb/L476/4NOz4yd1qbHvV+lK9Uv4dD/AAAAUKBM/w+J+v/Dnf+8+Lyuk+b9kq5Us8Oh/wEAAKBAmf6/JOr/6fPanNDr3AYrdkxXql/Dof8BAACgQJn+vzTq/49OGPpayxtH7j8zXanmhEP/AwAAQIEy/X9Z1P8z3tpjvQ927DLu7HSl+i0c+h8AAAAKlOn/oVH/f/ziqYtdtsacL45PV6q54dD/AAAAUKBM/18e9f/MARO+O2fBFvWX05Xq93DofwAAAChQpv+HRf3/yWXLnzxwpSlnnJquVH+EQ/8DAABAgTL9f0XU/5+2fvOyU19qfM2b6Uo1Lxz6HwAAAAqU6f/hUf9/ttZ397S4Y9Rzk9KV6s9w6H8AAAAoUKb/r4z6//MRG+z7br9uax2drlR/hUP/AwAAQIEy/X9V1P9fLHHTrKHHLjj+23Slmh8O/Q8AAAAFyvT/1VH/f/lA5yXPntjmknbpSrUgHPofAAAACpTp/2ui/v/q9u4brjd9+Myu6Ur1dzj0PwAAABQo0//XRv3/9Wq3vfHhoh23/ztdqf4Jh/4HAACAAmX6/7qo/7855PQTPv7psc/+TFfq/x76HwAAAAqU6f8RUf9/++m4izfcrG+tc7pSD9+j/wEAAKBEmf6/Pur/734bMvbMjtM6tU9X6ouE43/q/wb/H//IAAAAwP9Spv9HRv3/ffu99xpy+QoP/5iu1Gvh8P4/AAAAFCjT/zdE/f/DjL+/e2v4kH+OSFfqVTj0PwAAABQo0/83Rv3/47FbLbbmvu2aPZ+u1P99AKD+BwAAgAJl+v+mqP9n9V5kvdM3+nKvqelK/d/P+Ot/AAAAKFCm/2+O+v+nV1547YLZze8+PV2pLxoO/Q8AAAAFyvT/LVH//zy16nh+05kfTE5X6v++Xv8DAABAgTL9Pyrq/19Oeu6BM15pttVJ6Uq9YTj0PwAAABQo0/+3Rv0/u98fw9a6c1zPM9OV+uLh0P8AAABQoEz/j476/9dntj/1zT69LpuertSXCIf+BwAAgAJl+v+2qP/ndLj07UuO++GFTulKfclw6H8AAAAoUKb/b4/6/7dv9tq474QN1/4tXak3Cof+BwAAgAJl+v+OqP/nzj9lmQ2mDur1WbpSXyoc+h8AAAAKlOn/MVH//77bw7/OXGynYW3TlXrjcOh/AAAAKFCm/8dG/f/HIkd1mt5sxGfHpiv1pcOh/wEAAKBAmf6/M+r/eY/e+tC6z3WuvZiu1JcJh/4HAACAAmX6/66o//+857qrzrp1bqe305X6v92v/wEAAKBAmf6/O+r/v5Y/7PTLz2n98CnpSn25cOh/AAAAKFCm/++J+n/++T9Mm3rkXf/MT1fqTcKh/wEAAKBAmf6/N+r/Bdu33Hydp09odli6Um8aDv0PAAAABcr0/31R///dcummvWe+uNee6Up9+XDofwAAAChQpv/vj/r/n2HTfj+3Vt39fbpSXyEc+h8AAAAKlOn/cf/V//WF2m6358Jf/PPB/ulKfcVw6H8AAAAoUKb/H4j6f+E//7p79lbbb/VrulL/Tzj0PwAAABQo0//jo/5fZNazQ+7oPKznF+lKfaVw6H8AAAAoUKb/H4z6v3bAoscdeP7+l+2WrtRXDof+BwAAgAJl+n9C1P/VSw+9vNSIyS+8mq7UVwmH/gcAAIACZfr/oaj/62f1brlg10ZrH5eu1FcNh/4HAACAAmX6/+Go/xsct+cSd649uteAdKXeLBz6HwAAAAqU6f9Hov5f9O3Lv+0yr/uwGelKfbVw6H8AAAAoUKb/H436f7FrDt3nsMWaXr1JulL/9zX6HwAAAAqU6f/Hov5vuMHI+++dOvW0K9OV+hrh0P8AAABQoEz/Px71/+JbjRo6b0K/1c9PV+prhkP/AwAAQIEy/T8x6v8lzju25+LHTXy2RbpSXysc+h8AAAAKlOn/J6L+X3Lpdyfv36fF4LvSlXrzcOh/AAAAKFCm/5+M+r/RXcttdOudX/dYLF2prx0O/Q8AAAAFyvT/U1H/L/XUeo3nvrLndqulK/V/PxOg/wEAAKBAmf5/Our/xtVPP9abDv7oyXSlvk449D8AAAAUKNP/z0T9v/QuPZb+eXbv+xZNV+rrhkP/AwAAQIEy/f9s1P/L/H3/7NpG49vfnq7U1wuH/gcAAIACZfr/uaj/l/3u6nc67bvKyuPTlXrLcOh/AAAAKFCm/5+P+n+5/TpuctvwGX8una7U1w+H/gcAAIACZfr/haj/mzz36RX/XN72wRvSlfoG4dD/AAAAUKBM/78Y9X/Tvuv0XrLjwA7bpyv1DcOh/wEAAKBAmf5/Ker/5Xuu2qHzZq0arJeu1DcKh/4HAACAAmX6f1LU/ytMmz7u7p9mfX1JulJvFQ79DwAAAAXK9P/LUf+vOLxhk/vnbXH1PelKfeNw6H8AAAAoUKb/X4n6/z/rvjG369pzTlsqXalvEg79DwAAAAXK9P+rUf+v1Oa39xbbtcvq/0lX6puGQ/8DAABAgTL9/1rU/ytfuNkWf40Y+ezEdKW+WTj0PwAAABQo0/+To/5fpcnAq285v8Hg1ulKffNw6H8AAAAoUKb/X4/6f9X7dj+jY+dJPa5OV+pbhEP/AwAAQIEy/T8l6v9mj5990KJb9djuvHSlvmU49D8AAAAUKNP/b0T9v9pCEyfM+WLsR6unK/V/PxOg/wEAAKBAmf5/M+r/1Wf/Z5Mlah3vuz5dqW8VDv0PAAAABcr0/1tR/6+xx8x3/pg5vP1W6Up963DofwAAAChQpv/fjvp/za5fzr7n6TYrt0pX6tuEQ/8DAABAgTL9/07U/2t9tdbShx+54M/L0pX6tuHQ/wAAAFCgTP9Pjfq/+WlXjKvO6fbgwulKvU049D8AAAAUKNP/70b9v/aUTh1+v3VUh9HpSn27cOh/AAAAKFCm/6dF/d/iwxN7j36ucYMJ6Up9+3DofwAAAChQpv/fi/p/nW53X7FfsylfL5+u1HcIh/4HAACAAmX6//2o/9dtfuYWB6zdqP+N6Uq9bTj0PwAAABQo0/8fRP2/3k1Pvzdm3uTrd0hX6juGQ/8DAABAgTL9/2HU/y2HXDD31xHdp6ybrtR3Cof+BwAAgAJl+n961P/rb7xzk4V2Hd1qSLpS3zkc+h8AAAAKlOn/j6L+3+DWXyYc0nn7YxqkK/VdwqH/AQAAoECZ/p8R9f+GK7Y+aOz5/1x0W7pS3zUc+h8AAAAKlOn/j6P+32jJRmfM/2L/dx5MV+q7hUP/AwAAQIEy/T8z6v9WD792deOthm26TLpS3z0c+h8AAAAKlOn/T6L+3/juJRotNfOEtnenK/U9wqH/AQAAoECZ/v806v9Nlnn9pwW1u0Y1TFfqe4ZD/wMAAECBMv3/WdT/m9Z/n3LnkdVvzdKV+l7h0P8AAABQoEz/fx71/2ZPb7JBl6dfbPJEulJvFw79DwAAAAXK9P8XUf9vvuGgSxe+tfOhG6cr9b3Dof8BAACgQJn+/zLq/y2u3fWk2eeMeGJ4ulLfJxz6HwAAAAqU6f+vov7fctCA9nc0a/3NBelKfd9w6H8AAAAoUKb/v476v/XWj9174HNzG66TrtTbh0P/AwAAQIEy/f9N1P9bnX1Cw/2nbtj/f1ip7xcO/Q8AAAAFyvT/t1H/bz3p3u9vXeyH629NV+r7h0P/AwAAQIEy/f9d1P/bvHPtq3OP22nKQ+lKvUM49D8AAAAUKNP/30f9v22P/detTxjUaoV0pd4xHPofAAAACpTp/x+i/m/z1+eDD7uz2TEj05X6AeHQ/wAAAFCgTP//GPX/djuuffy9fWZetHW6Uj8wHPofAAAACpTp/1lR/29/4Grt5jXt9c5G6Ur9oHDofwAAAChQpv9/ivp/h58+uHPxV8Ztemm6Uu8UDv0PAAAABcr0/89R/7fddfBpT2zUru2W6Uq9czj0PwAAABQo0/+/RP2/4z/7XtN+9pBRV6Ur9YPDof8BAACgQJn+nx31/07fn/bIysOb/zYoXal3CYf+BwAAgAJl+v/XqP933n/8gd/s+2WTNdKV+iHh0P8AAABQoEz/z4n6f5fnF/rtwY59D703Xal3DYf+BwAAgAJl+v+3qP93PfOlFdpe/tgTjdOV+qHh0P8AAABQoEz/z436f7cT52/Z5KcVvlkxXakfFg79DwAAAAXK9P/vUf/v/t42U7/ebFrDx9OV+uHh0P8AAABQoEz//xH1/x5XfnPK58+NWvKgdKXeLRz6HwAAAAqU6f95Uf/vud5Gw5du1u3HOelK/Yhw6H8AAAAoUKb//4z6f6/tmjy4yzlTHvs8Xal3D4f+BwAAgAJl+v+vqP/bXfT2/o/c2rjzjulK/chw6H8AAAAoUKb/50f9v3fTbr/88PTwZV5PV+pHhUP/AwAAQIEy/b8g6v997r9judWO7PjzyelK/ehw6H8AAAAoUKb//476f9+JN2zarrbgtr7pSv2YcOh/AAAAKFCm//+J+r/9wl3efHRmm10/TFfqx4ZD/wMAAECB/s/932ChqP/3W2batpO2mtS6W7pSPy4c+h8AAAAKlOn/haP+3//upT/Y/IsG055LV+o9wqH/AQAAoECZ/l8k6v8OT7f8o9v5Y897N12pHx8O/Q8AAAAFyvR/Ler/jvUfVrqyc48jz0hX6ieEQ/8DAABAgTL9X0X9f8C1hz3+8q5zWv6VrtR7hkP/AwAAQIEy/V+P+v/ADa/rvO2ILV47OF2pnxgO/Q8AAAAFyvR/g6j/D9r61jNPnjfy5n3TlfpJ4dD/AAAAUKBM/y8a9X+nQUeNvGHtLuf8kK7UTw6H/gcAAIACZfp/saj/O096eIfrNhu45GvpSv2UcOh/AAAAKFCm/xtG/X/w2afMOOGntj/2SFfqvcKh/wEAAKBAmf5fPOr/Lj32mr/D5bMeOyddqZ8aDv0PAAAABcr0/xJR/x/yzqXNJnds1fmjdKXeOxz6HwAAAAqU6f8lo/7vuuP2T1277/hl9ktX6qeFQ/8DAABAgTL93yjq/0P/+qPrUcN7/zw7Xan3CYf+BwAAgAJl+n+pqP8P++m5szeePeO2L9OV+unh0P8AAABQoEz/N476//ADq5uf32iVXXdPV+pnhEP/AwAAQIEy/b901P/dxtyxUptXvm69IF2p9w2H/gcAAIACZfp/maj/j1i12x9vNG0x7fB0pX5mOPQ/AAAAFCjT/8tG/d+9YZcPRvYZfN4e6Uq9Xzj0PwAAABQo0//LRf1/5IM3bHvcnXse+V26Uu8fDv0PAAAABcr0f5Oo/49aY6ORm02Y2vKYdKV+Vjj0PwAAABQo0/9No/4/euQ3Zz5zXNPXXkhX6meHQ/8DAABAgTL9v3zU/8dc/nbnqxabePM76Ur9nHDofwAAAChQpv9XiPr/2C2aPH7s1H7n9EpX6gPCof8BAACgQJn+XzHq/+N6vdTsyAFt7ngxXamfGw79DwAAAAXK9P9/ov7v8dpC84eNXrD7selKfWA49D8AAAAUKNP/K0X9f/zMbWa88HzH5U5JV+rnhUP/AwAAQIEy/b9y1P8nHD1/h9arDZ/9drpSHxQO/Q8AAAAFyvT/KlH/9/x935t7LtJ44mHpSv38cOh/AAAAKFCm/1eN+v/EfQafffPHU7rMT1fqF4RD/wMAAECBMv3fLOr/kw4e3/W1p7ot9X26Ur8wHPofAAAACpTp/9Wi/j/589Oe2qr7qJ/2TFfqF4VD/wMAAECBMv2/etT/p/w9ocXWF3S58dd0pT44HPofAAAACpTp/zWi/u+1y6kvvHrwyLP2T1fqF4dD/wMAAECBMv2/ZtT/p+63x5c3bb3FurulK/Uh4dD/AAAAUKBM/68V9X/v74YueuKXc175Il2pXxIO/Q8AAAAFyvR/86j/T+vbZsyWf/Q497h0pX5pOPQ/AAAAFCjT/2tH/d/nuT93fbH52CNeTVfql4VD/wMAAECBMv3fIur/06c9c9QVuzTYYka6Uh8aDv0PAAAABcr0/zpR/5/Rs8GF3a+bNHVAulK/PBz6HwAAAAqU6f91o/7vu+7UNY8ZusodndOV+rBw6H8AAAAoUKb/14v6/8zhyz5zdYcZu/+ZrtSvCIf+BwAAgAJl+r9l1P/9Llz302c37b3cj+lKfXg49D8AAAAUKNP/60f937/NrNqms8bPbp+u1K8Mh/4HAACAAmX6f4Oo/8+6r+voHr+2mvh8ulK/Khz6HwAAAAqU6f8No/4/u8n1O17falaXI9KV+tXh0P8AAABQoEz/bxT1/zkL3dJtSvu2S52ertSvCYf+BwAAgAJl+r9V1P8DHj/mvO2uHPjT1HSlfm049D8AAAAUKNP/G0f9f+6ot376z2n9bjwpXalfFw79DwAAAAXK9P8mUf8PXHmFRt+NnXjW5HSlPiIc+h8AAAAKlOn/TaP+P6/xhhs89XLTdaenK/Xrw6H/AeD/x96fRm89/v/+f+J8nZIpYzIl8xhCSeaESOYMyZTMs8wyJmN8DA2UoSSRIZIhCRmKDJnJUBTJlIzJ8F///Tv67WP/ju/ax/rutfZax4Xb7dKzt/f5WOfV+/tcXicAQIEy/d8q6v/LH//2jU7LvTvpvHSldns49D8AAAAUKNP/W0T9f8W6B5+yQqPdL/k1XakNCof+BwAAgAJl+n/LqP97D77zupnvXXVkl3SlNjgc+h8AAAAKlOn/raL+v/LqYQ+OenydLXdIV2p3hEP/AwAAQIEy/d866v8+rY7uvNPxX7/7RbpSuzMc+h8AAAAKlOn/NlH/X3XOqG87DLhxypLpSu2ucOh/AAAAKFCm/7eO+v/q189p9Hj7fTYdma7U7g6H/gcAAIACZfq/bdT/13zUab3pa/3bfWy6UhsSDv0PAAAABcr0/zZR/1979LWvLvPHdr1XSldqQ8Oh/wEAAKBAmf5vF/X/dT9tfcLuM4dOvjVdqd0TDv0PAAAABcr0/7ZR/1+/x79XPb31URu3Tldqw8Kh/wEAAKBAmf7fLur/voe/NOKHgyef1zxdqd0bDv0PAAAABcr0//ZR/98wc+E9Vu29xIDL0pXa8HDofwAAAChQpv93iPr/xmG9x8w66rfZbdKV2n3h0P8AAABQoEz/7xj1/39W33n/lZ9t3fi2dKU2Ihz6HwAAAAqU6f+dov6/qfF5PTt/NvDw69OV2v3h0P8AAABQoEz/7xz1/82jxvd/puFBz7ZMV2oPhEP/AwAAQIEy/d8+6v9b1lyi9derv/T70HSlNjIc+h8AAAAKlOn/XaL+v3Xga+8tN2GRFRZKV2oPhkP/AwAAQIEy/d8h6v9+1//0yw5D799phXSl9lA49D8AAAAUKNP/u0b937916xUeu/jEoaPTldrD4dD/AAAAUKBM/+8W9f+AM2c++sTxj0y5OV2pPRIO/Q8AAAAFyvT/7lH/D5y05t7tHz99083SldqocOh/AAAAKFCm/ztG/X/bpyudvvR7n3dfJ12pPRoO/Q8AAAAFyvT/HlH/337s5zd/2Wi13lekK7XHwqH/AQAAoECZ/t8z6v9Bv57c6snlLp+8aLpSW/BMQP0PAAAABcr0f6eo/wd3fmDKHhN32vj+dKX2eDj0PwAAABQo0/97Rf1/x6H/mbP6fd+dNy5dqY0Jh/4HAACAAmX6v3PU/3dO77LMd2dtPGD1dKX2RDj0PwAAABQo0/97R/1/17K/9l/25vdnD0tXak+GQ/8DAABAgTL9v0/U/3ePaNVzWucVG9fTldpT4dD/AAAAUKBM/+8b9f+QcY32H93yqcOXTldqT4dD/wMAAECBMv2/X9T/Q+tvjtn153OffTRdqY0Nh/4HAACAAmX6f/+o/++59aIVVvlh5u/bpSu1Z8Kh/wEAAKBAmf4/IOr/YS3H/vLj5mutMChdqS34TkD9DwAAAAXK9P+BUf/fu82l743d95qdrk1Xas+GQ/8DAABAgTL93yXq/+GX7tp6t757DF0/XamND4f+BwAAgAJl+v+gqP/ve+nWm/d8/Krth6QrtefCof8BAACgQJn+Pzjq/xEX73f6+ON3/+y/WKk9Hw79DwAAAAXK9P8hUf/ff+Lxe3/b6OtrVkxXai+EQ/8DAABAgTL9f2jU/w9MefjRpu+tc+Lj6UptQjj0PwAAABQo0/9do/4fufOqy+w8cWyLrdOV2ovh0P8AAABQoEz/Hxb1/4Pzps55ZLnzJ9yertReCof+BwAAgAJl+r9b1P8PfT99yoyz3u1/XbpSezkc+h8AAAAKlOn/w6P+f7jLuq1WvG/5szdJV2qvhEP/AwAAQIEy/X9E1P+PdPz6gRU6/7DILelKbWI49D8AAAAUKNP/R0b9P2rOGrvPvLnlzK3SldqkcOh/AAAAKFCm/4+K+v/RGSsfN+rnS0etka7UXg2H/gcAAIACZfr/6Kj/H+v26TU7tdxh78vTldpr4dD/AAAAUKBM/3eP+n/05FM3WGnzT1daKl2pTQ6H/gcAAIACZfr/mKj/Hz97xMTZP6zyx4PpSu31cOh/AAAAKFCm/3tE/T/mqJu/ebbvoyOfTldqb4RD/wMAAECBMv1/bNT/T3x4QONO+57ZqWm6UnszHPofAAAACpTp/+Oi/n9yUJ+Hd29/3/bbpyu1t8Kh/wEAAKBAmf4/Pur/p9bZsdPTA47/bHC6UpsSDv0PAAAABcr0/wlR/z+9+QUn/fDHK9dck67U3g6H/gcAAIACZfr/xKj/x141ru+qa1Unrpeu1N4Jh/4HAACAAmX6/6So/59pttQmHba+vcU96Urt3XDofwAAAChQpv9Pjvp/3F2TJj8+85AJVbpSey8c+h8AAAAKlOn/U6L+f3b0z99P7/1L/ybpSu39cOh/AAAAKFCm/0+N+n/8klsutczBW579WLpS+yAc+h8AAAAKlOn/06L+f+6e7m/f8+wbizRKV2ofhkP/AwAAQIEy/X961P/PrzZk0y5HLTXzgXSl9lE49D8AAAAUKNP/Z0T9/8JiA5os3PDuUc+kK7WPw6H/AQAAoECZ/j8z6v8Jj3T7ec5nR+y9WrpSmxoO/Q8AAAAFyvT/WVH/v9jiu/0emPD3Sjc1aNCg4f+6UvskHPofAAAACpTp/55R/780YINRB63e7o9N05Xap+HQ/wAAAFCgTP+fHfX/y9ctfePiF980ct10pfZZOPQ/AAAAFCjT/+dE/f/KVu+f8e/Q/Tr1Tldqn4dD/wMAAECBMv1/btT/E89Y5P35+6612/HpSm1aOPQ/AAAAFCjT/+dF/T9p4gtbLNp35ojX0pXa9HDofwAAAChQpv/Pj/r/1U/+WL7rD3v8/Um6UvsiHPofAAAACpTp/wui/n+tx3a/P7z5Nav0SldqX4ZD/wMAAECBMv1/YdT/k3+5rssvLVc8YG66UpsRDv0PAAAABcr0/0VR/7++V8fH6z+/P3rvdKU2Mxz6HwAAAAqU6f9eUf+/cchpt+x387nTdk1Xal+FQ/8DAABAgTL9f3HU/29OG3P2XZ2fWmhmulL7Ohz6HwAAAAqU6f9Lov5/q9kzO4y7b6czD09XarPCof8BAACgQJn+vzTq/yl3nT9kr7Muv+nvdKX2TTj0PwAAABQo0/+XRf3/9ugdLm+23MYvz05Xagt+pv8BAACgQJn+vzzq/3eWvPLIbyZ+t+5u6Urt23DofwAAAChQpv+viPr/3UFbPP/oe6ef8mK6UvsuHPofAAAACpTp/95R/7+3ztw1d2z0yA090pXa9+HQ/wAAAFCgTP9fGfX/+5tPbLj88atNPT1dqf0QDv0PAAAABcr0f5+o/z+4aslpXz3+edt30pXaj+HQ/wAAAFCgTP9fFfX/h5M/af/F0EV2+yVdqc0Jh/4HAACAAsX93/B//OR/6f+ro/7/6Oxm9za5+KURB6YrtZ/Cof8BAACgQJnP/6+J+v/jo5r32WX1E//eMV2pzQ2H/gcAAIACZfr/2qj/p3741TFjJty/ypfpSu3ncOh/AAAAKFCm/6+L+v+Tjvu/9P1nrQ84NV2pLXgmgP4HAACAAmX6//qo/z+dc9O6qzX8bfTr6Urt13DofwAAAChQpv/7Rv3/2Yz7qo5HHTTt43Sl9ls49D8AAAAUKNP/N0T9/3m3U2Y89ezAhc5NV2q/h0P/AwAAQIEy/X9j1P/TRk4+ssPBR535QrpS+yMc+h8AAAAKlOn//0T9P32FxS5/vPfQm45IV2rzwqH/AQAAoECZ/r8p6v8vGm46ZPrMJV4+J12p/RkO/Q8AAAAFyvT/zVH/f/nkbzsss/Xkdd9LV2rzw6H/AQAAoECZ/r8l6v8ZG7Sftvta+5xycLpS+ysc+h8AAAAKlOn/W6P+n3njZQ2f/uPGG+anK7W/w6H/AQAAoECZ/u8X9f9XVzy55g8Dtpv6XbpS+ycc+h8AAAAKlOn//lH/f71dr+dXbf9v273Sldq/4dD/AAAAUKBM/w+I+n/W+SOPWWnDTj9ukK5UCw79DwAAAAXK9P/AqP+/ee6EPrN/v27Jq9KVKvyO/gcAAIASZfr/tqj/Z7+7973P9m9xyJ3pStUwHPofAAAACpTp/9uj/v/2lH7tO+3x5dht05Vq4XDofwAAAChQpv8HRf3/3V9rzVjhwF5zR6Ur1SLh0P8AAABQoEz/D476//sOX1Qzrxm/7LLpSlULh/4HAACAAmX6/46o/3/Y98N1R81ususi6Uq14AsA9D8AAAAUKNP/d0b9/+Os1V7aaau37r03Xanq4dD/AAAAUKBM/98V9f+cXz87bOcpG767SrpSLXi9/gcAAIACZfr/7qj/f+rcdPwjS8ze8tl0pWoUDv0PAAAABcr0/5Co/+ce2uKOGSe3P3JEulItFg79DwAAAAXK9P/QqP9/nj7jwhVH9b6kcbpSLfiZ/gcAAIACZfr/nqj/fznzwE/2HNl0Up90pVo8HPofAAAACpTp/2FR//866cbtxp/20XprpyvVEuHQ/wAAAFCgTP/fG/X/b5/ev/q3S59z4ebpSrVkOPQ/AAAAFCjT/8Oj/v/92JP+bjp5zOAb05VqqXDofwAAAChQpv/vi/r/jzWfPXiVj0/+8Yl0pVo6HPofAAAACpTp/xFR/88beO7YH6uRSy6frlRNwqH/AQAAoECZ/r8/6v8/r9/ptrE9Gh7SMF2pFnS//gcAAIACZfr/gaj/57e+4tzdnp4w9q50pVo2HPofAAAACpTp/5FR//81bKsPlx3ebe5G6Uq1XDj0PwAAABQo0/8PRv3/9+pz2k674M5l+6Yr1YJnAuh/AAAAKFCm/x+K+v+fxq+uPHrlzXYdmK5UK4RD/wMAAECBMv3/cNT//45afN6ur8y5d5t0pVoxHPofAAAACpTp/0f+Z/9XDTZq+dXrzRu/e2m6UjUNh/4HAACAAmX6f1TU/wv1+2aR7f56dcs105VqpXDofwAAAChQpv8fjfq/4WXvrH3CoO5HbpGuVM3Cof8BAACgQJn+fyzq/4XbLP/KwB2GXdIvXalWDof+BwAAgAJl+n901P+L3D/82BcOazOpWbpSrRIO/Q8AAAAFyvT/41H/15Y+svdml85b78l0pVo1HPofAAAACpTp/zFR/1eLHHrPMdO7XPhwulKtFg79DwAAAAXK9P8TUf/Xnx3cod+2/QYvka5Uq4dD/wMAAECBMv3/ZNT/i/7Z+YubJk8fMD1dqRa8Rv8DAABAgTL9/1TU/412uLrBkUs3P2/ndKVaIxz6HwAAAAqU6f+no/5fbP/H1tjytL4b75+uVC3Cof8BAACgQJn+Hxv1f+Mfek54eWTnyb+lK9Wa4dD/AAAAUKBM/z8T9f/iF75y9OBRb/c+P12p1gqH/gcAAIACZfp/XNT/S7y80KWnnLxs9w/TlWrtcOh/AAAAKFCm/5+N+n/Jt7e5q+0S4zZ9M12p1gmH/gcAAIACZfp/fNT/Sx33906Tplw45eR0pVo3HPofAAAACpTp/+ei/l96vQvGt9uqz9AP0pVqvXD8z/6/5P/aWwYAAAD+mzL9/3zU/01uGnfYm7M77NQzXanWD4fP/wEAAKBAmf5/Ier/Za7sc+Ht18xa4ah0pdogHPofAAAACpTp/wlR/y/bbsc7jjtw/d+fS1eqDcOh/wEAAKBAmf5/Mer/5R76ebtWe4x+ds90pdooHPofAAAACpTp/5ei/l9+uS0/ea5/z8N/SFeqjcOh/wEAAKBAmf5/Oer/FRos9fctv09tPC9dqTYJh/4HAACAAmX6/5Wo/1d8etLqx27YbPah6UrVMhz6HwAAAAqU6f+JUf83/WflsUdv+/yAC9OVatNw6H8AAAAoUKb/J0X9v1L7Tw++cXqD8z5LV6rNwqH/AQAAoECZ/n816v9me3997ouXPrTxpHSl2jwc+h8AAAAKlOn/16L+X3n2Gre1PuzUySemK1WrcOh/AAAAKFCm/ydH/b/KuTe3PWmHub2/TleqLcKh/wEAAKBAmf5/Per/VV844MM7B7Xqvku6Um0ZDv0PAAAABcr0/xtR/6/2/qnzXvtr8Kb7pivVVuHQ/wAAAFCgTP+/GfX/6ieNWLlN865T5qQrVetw6H8AAAAoUKb/34r6v/kdje945ZXhQzumK1WbcOh/AAAAKFCm/6dE/b/GWq9fuMXKPXaala5UW4dD/wMAAECBMv3/dtT/LTb9/bAjLpi4wr/pStU2HPofAAAACpTp/3ei/l/zms3G3zy80e+HpSvVNuHQ/wAAAFCgTP+/G/X/Wk0vX33i07c8OyVdqdqFQ/8DAABAgTL9/17U/2sP2eXvbXoccPiZ6Uq1bTj0PwAAABQo0//vR/2/zpiLPzm1mt+4e7pSbRcO/Q8AAAAFyvT/B1H/r7v4U9sN+rjt7JfTlWr7cOh/AAAAKFCm/z+M+n+93U68bcD0eWd3SleqHcKh/wEAAKBAmf7/KOr/9ec+eO6J27bp/2O6Uu0YDv0PAAAABcr0/8dR/2/wVf+Dtz+s34Q/0pVqp3DofwAAAChQpv+nRv2/Ydd9xk6+tEuLQ9KVaudw6H8AAAAoUKb/P4n6f6M3vly5/6BXT3w/Xanah0P/AwAAQIEy/f9p1P8bn7X2vO47NL7mrHSl2iUc+h8AAAAKlOn/z6L+3+SI1T/ctPmwz45OV6oO4dD/AAAAUKBM/38e9X/Ljz9qO+Gv7ts/n65Uu4ZD/wMAAECBMv0/Ler/TV9ZacgLK9/Z6YJ0pdotHPofAAAACpTp/+lR/2920ec7bPZKt5EfpSvV7uHQ/wAAAFCgTP9/EfX/5sfPPPKY4XP+eCNdqTqGQ/8DAABAgTL9/2XU/63eWfPyfhdsttJJ6Uq1Rzj0PwAAABQo0/8zov7fYsf/rPl6j5F7T0tXqj3Dof8BAACgQJn+nxn1/5bzuzy/3dMnj9opXak6hUP/AwAAQIEy/f9V1P9b/XjytBM+njDzgHSl2isc+h8AAAAKlOn/r6P+b33AAw0HVg0X+T1dqTqHQ/8DAABAgTL9Pyvq/zZNzrt38NIfnf1WulLtHQ79DwAAAAXK9P83Uf9v/cD49qdMbtr/jHSl2icc+h8AAAAKlOn/2VH/tx3f+5i2I8dMOCZdqfYNh/4HAACAAmX6/9uo/7ep7dxn0mnntHglXan2C4f+BwAAgAJl+v+7qP/b9f9p3ZtOnn3iHulKtX849D8AAAAUKNP/30f9v+3GrV86ctSG13yTrlQLvhNQ/wMAAECBMv3/Q9T/2229xIwtp/T+7J90pTowHPofAAAACpTp/x+j/t/+8teql5dov33XdKXqEg79DwAAAAXK9P+cqP93WP+2qafNHt/pq3SlOigc+h8AAAAKlOn/n6L+3/HmrltfvlWvke3TlergcOh/AAAAKFCm/+dG/b9Tnx5NPzjwrT/2S1eqQ8Kh/wEAAKBAmf7/Oer/nbe968+1rmmy0k/pSnVoOPQ/AAAAFCjT/79E/d/+4WUOubj/dXtflK5UC54JqP8BAACgQJn+/zXq/12Wf/fJ6/boNOrzdKU6LBz6HwAAAAqU6f/fov7vsNAPAz/c8MuZE9OVqls49D8AAAAUKNP/v0f9v+vY9S7Y8PcWi5yQrlSHh0P/AwAAQIEy/f9H1P+7/fvn5y2rAxa6Ml2pjgiH/gcAAIACZfp/XtT/u+/SbttPPr5l2lrpSnVkOPQ/AAAAFCjT/39G/d9xn2qVq55uO7pVulIdFQ79DwAAAAXK9P/8qP/3+Pa5fy7oMf+A/6Qr1dHh0P8AAABQoEz//xX1/57nndGt+QU9Vlk1Xam6h0P/AwAAQIEy/f931P+dJox+5p3hw/8en65Ux4RD/wMAAECBMv3/T9T/e33Qd3CfVxqNuC9dqXqEQ/8DAABAgTL9/2/U/51P3u3is1aeuNti6Up1bDj0PwAAABTof9//9QZR/+997tL/XvVXq7aPpCvVceHQ/wAAAFCgTP8vFPX/Pi+8v+oFzedO/S8avzo+HPofAAAACpTp/4ZR/+/7/nftWu7Q9YZaulKdEA79DwAAAAXK9P/CUf/vd9IGn30yaPApw9OV6sRw6H8AAAAoUKb/F4n6f/9/BvTqc2mDdTdMV6qTwqH/AQAAoECZ/q9F/X9A+26Dzjrs+ZevTleqk8Oh/wEAAKBAmf6vov4/cO/u45pve+pNd6Qr1Snh0P8AAABQoEz/16P+7zJ7yOHvTH/ozHbpSnVqOPQ/AAAAFCjT/4tG/X/QQ6fN/+D3ngutnK5Up4VD/wMAAECBMv3fKOr/g5cbs9JaG46e9lS6Up0eDv0PAAAABcr0/2JR/x/S4Lo2p+3RbPRD6Up1Rjj0PwAAABQo0/+No/4/9OmOH1/ef+oBi6cr1Znh0P8AAABQoEz/Lx71f9f1/jj/w2s6rHJJulKdFQ79DwAAAAXK9P8SUf8fdtN2AzY8sM/fLdKVqmc49D8AAAAUKNP/S0b93+3KRZ66eKv1R2yZrlRnh0P/AwAAQIEy/b9U1P+Ht3vh0Otmz9qtf7pSnRMO/Q8AAAAFyvT/0lH/H/HGEZ+ducSybTdOV6pzw6H/AQAAoECZ/m8S9f+RZ93b7pIpb0+9IV2pzguH/gcAAIACZfp/maj/jzpi0KrvjrrwhgHpSnV+OPQ/AAAAFCjT/8tG/X/0x4f8u+7J405pm65UF4RD/wMAAECBMv2/XNT/3XebdfiFpzVfd0y6Ul0YDv0PAAAABcr0//JR/x8zd5NxN4yc/vJy6Up1UTj0PwAAABQo0/8rRP3f46vlBk2d3PmmhdOVqlc49D8AAAAUKNP/K0b9f2zXt3utt3TfM+9OV6qLw6H/AQAAoECZ/m8a9f9xTRt8vNHYiQ8sn65Ul4RD/wMAAECBMv2/UtT/xw95uc3nxzbq+ES6Ul0aDv0PAAAABcr0f7Oo/08Y89dK19aHr3ZXulJdFg79DwAAAAXK9P/KUf+fuHjb+edO7fFvw3Slujwc+h8AAAAKlOn/VaL+P+mOqw5d8+X5Y/qmK9UV4dD/AAAAUKBM/68a9f/Ja+311FvN2nbZKF2peodD/wMAAECBMv2/WtT/p2x61oArzr9l4W3SlerKcOh/AAAAKFCm/1eP+v/Uax49/5x7D/hiYLpS9QmH/gcAAIACZfq/edT/p/U/44uzd3zoxjXTleqqcOh/AAAAKFCm/9eI+v/0jUc36D341NMvTVeqq8Oh/wEAAKBAmf5vEfX/GVv3XWPK38+v3S9dqa4Jh/4HAACAAmX6f82o/8+8fLcJLdZo8OIW6Up1bTj0PwAAABQo0/9rRf1/VpM/jz6v3eDrn0xXquvCof8BAACgQJn+Xzvq/54PtLv0mmldT2qWrlTXh0P/AwAAQIEy/b9O1P9nj6/u+uySuW2WSFeqvuHQ/wAAAFCgTP+vG/X/ObXndtq4a6uPHk5XqhvCof8BAACgQJn+Xy/q/3N3XOar9TvOeuCqdKW6MRz6HwAAAAqU6f/1o/4/b/67i3zcb/2OG6Qr1X/Cof8BAACgQJn+3yDq//N//GHtvr/1WW3bdKW6KRz6HwAAAAqU6f8No/6/4ID1Xrlogw7/3pmuVDeHQ/8DAABAgTL9v1HU/xe+ctux67SeOmbZdKW6JRz6HwAAAAqU6f+No/6/6KKuvd/7tlmXUelKdWs49D8AAAAUKNP/m0T93+v4Hvdceu3ohe9NV6p+4dD/AAAAUKBM/7eM+v/id+7qcEaXnl8skq5U/cOh/wEAAKBAmf7fNOr/SyauuOGBj/S98dl0pRoQDv0PAAAABcr0/2ZR/196xpRJw07qfPoq6Uo1MBz6HwAAAAqU6f/No/6/rMe3s35afPrajdOV6rZw6H8AAAAoUKb/W0X9f/knGy/W8K3mL45IV6rbw6H/AQAAoECZ/t8i6v8r9rrz/oNfH3f92ulKNSgc+h8AAAAKlOn/LaP+7/3Lwbvd3+TCk/qkK9XgcOh/AAAAKFCm/7eK+v/KaUcf/8/pb7e5MV2p7giH/gcAAIACZfq/ddT/fQ4Zdu0SDy770ebpSnVnOPQ/AAAAFCjT/22i/r9qtXNaNura/ZPP0pXqrnDofwAAAChQpv+3jvr/6ntGvf7nJcO2vTBdqe4Oh/4HAACAAmX6v23U/9c8cu13D01rfPyJ6Uo1JBz6HwAAAAqU6f9tov6/drFOSx7W7tWrJqUr1dBw6H8AAAAoUKb/20X9f92Afx+q1ujy/C7pSnVPOPQ/AAAAFCjT/9tG/X99i633/PXvfs2/TleqYeHQ/wAAAFCgTP9vF/V/360WPvnuwW3OmpOuVPeGQ/8DAABAgTL9v33U/zdc99IN++4479Z905VqeDj0PwAAABQo0/87RP1/4+Sdzxh+b8OvZ6Ur1X3h0P8AAABQoEz/7xj1/3/O7n3j/udPqDqmK9WIcOh/AAAAKFCm/3eK+v+mo8aPatDs5H0PS1eq+8Oh/wEAAKBAmf7fOer/mz88b7+fXx752L/pSvVAOPQ/AAAAFCjT/+2j/r+l42s/3zd1sz/PTFeqkeHQ/wAAAFCgTP/vEvX/rXOWaHJofc7KU9KV6sFw6H8AAAAoUKb/O0T9329G602XOrZb55fTleqhcOh/AAAAKFCm/3eN+r9/t5/e/mvsnQ91T1eqh8Oh/wEAAKBAmf7fLer/Ac3WPPuPB9t/snO6Uj0SDv0PAAAABcr0/+5R/w+8a+YtjU/vve30dKUaFQ79DwAAAAXK9H/HqP9vG/3544c32fD439KV6tFw6H8AAAAoUKb/94j6//YlV+oy8vXZV+2frlSPhUP/AwAAQIEy/b9n1P+DBj3w++9vnfP8h+lKNToc+h8AAAAKlOn/TlH/D17n5OUXWXxM8/PTlerxcOh/AAAAKFCm//eK+v+OzbtssfdJTc86OV2pxoRD/wMAAECBMv3fOer/O6/6z/tDH/no1jfTleqJcOh/AAAAKFCm//eO+v+u81vt17VLi697pivVk+HQ/wAAAFCgTP/vE/X/3c/9Ourha7+sPkhXqqfCof8BAACgQJn+3zfq/yHvvnnj/G877ftculI9HQ79DwAAAAXK9P9+Uf8PPaXRGYu2vu6xo9KVamw49D8AAAAUKNP/+0f9f89fY9/eb4Mmf/6QrlTPhEP/AwAAQIEy/X9A1P/DOly06V2/vbXynulKNS4c+h8AAAAKlOn/A6P+v3ffXZv80q9X50PTlerZcOh/AAAAKFCm/7tE/T981qU/1zuOf2heulKND4f+BwAAgAJl+v+gqP/vG7lfl4VPv3DzM9KVasF3Auh/AAAAKFCm/w+O+n/ECrc+PufBce+8la5Uz4dD/wMAAECBMv1/SNT/9zd8+JZ7Xl+2zyvpSvVCOPQ/AAAAFCjT/4dG/f/Ak8ef3aXJ2z2OSVeqCeHQ/wAAAFCgTP93jfp/5AZT31988c4tv0lXqhfDof8BAACgQJn+Pyzq/wdvXHWLf9/q+8Ye6Ur1Ujj0PwAAABQo0//dov5/6Ip1l3/gkea3df1//n1CtFK9HA79DwAAAAXK9P/hUf8/vN303w86afoF/6Qr1YJnAup/AAAAKFCm/4+I+v+RNdc49eBrmzVqn65UE8Oh/wEAAKBAmf4/Mur/UQO/vv7+LlNnfZWuVJPCof8BAACgQGn/N4r+a/2oqP8fvf7Tkf+07vnMT+lK9Wo49D8AAAAUKPP5/9FR/z/WeuW9lvh29GH7pSvVa+HQ/wAAAFCgTP93j/p/9LARPxz42/rLfZ6uVJPDof8BAACgQJn+Pybq/8dXP3XxYRvM+vWidKV6PRz6HwAAAAqU6f8eUf+PaXzAxj917HD3CelK9UY49D8AAAAUKNP/x0b9/8Som99s2K/PDhPTlerNcOh/AAAAKFCm/4+L+v/JX3c8sbqk6+Y/pivVW+HQ/wAAAFCgTP8fH/X/U537XP1r18HvdEpXqinh0P8AAABQoEz/nxD1/9OHjrvv7nat+hySrlRvh0P/AwAAQIEy/X9i1P9jp1/Qcd9pc3v8ka5U74RD/wMAAECBMv1/UtT/z5w5aXajv09teVa6Ur0bDv0PAAAABcr0/8lR/4+btNSif67x0BvvpyvVe+HQ/wAAAFCgTP+fEvX/s59uuf5DOza47fl0pVrwNwH9DwAAAAXK9P+pUf+PP/bn1w4b/PwFR6cr1Qfh0P8AAABQoEz/nxb1/3OvD1nh2/PbNvooXak+DIf+BwAAgAJl+v/0qP+fP6f7L03vnT/rgnSlWvA3Af0PAAAABcr0/xlR/79wdLf39nz5gGdOSleqj8Oh/wEAAKBAmf4/M+r/CR8NaD2+2S2HvZGuVFPDof8BAACgQJn+Pyvq/xf32KD/jHqj5XZKV6pPwqH/AQAAoECZ/u8Z9f9LP33Xc8WpE3+dlq5Un4ZD/wMAAECBMv1/dtT/L898f/+dx/a4+/d0pfosHPofAAAACpTp/3Oi/n/l8KXHPHLs8B0OSFeqz8Oh/wEAAKBAmf4/N+r/iSu/sMzofm/t8lS6Ui34fwL0PwAAABQo0//nRf0/6e5F5uzasck9K6cr1fRw6H8AAAAoUKb/z4/6/9XHt5uy7Abj5yyerlRfhEP/AwAAQIEy/X9B1P+vLfVHq2m/9WryULpSfRkO/Q8AAAAFyvT/hVH/Tx7c8eax3355UIt0pZoRDv0PAAAABcr0/0VR/7++7nWn79a6xVOXpCvVzHDofwAAAChQpv97Rf3/Rqsxe6/S5brv+6cr1Vfh0P8AAABQoEz/Xxz1/5tXn/boj9d2WnzLdKX6Ohz6HwAAAAqU6f9Lov5/68zzr5h70pheN6Qr1axw6H8AAAAoUKb/L436f8qkZ3os9Mg5d26crlTfhEP/AwAAQIEy/X9Z1P9vf3rlrge89dFrbdOVanY49D8AAAAUKNP/l0f9/86xOwy7d/GmGwxIV6pvw6H/AQAAoECZ/r8i6v93f51b+7tJ76OXS1eq78Kh/wEAAKBAmf7vHfX/e523+HrJ19tfNiZdqb4Ph/4HAACAAmX6/8qo/98/dMmXD3lw9vt3pyvVD+HQ/wAAAFCgTP/3ifr/g+kT1xpx+oatF05Xqh/Dof8BAACgQJn+vyrq/w+HNbvkwWPn7LJWulLNCYf+BwAAgAJl+v/qqP8/Wv2To7qN3eyeK9OV6qdw/P/7f4n/y28ZAAAA+G/K9P81Uf9/3PirnRebeuec/6Qr1dxw+PwfAAAACpTp/2uj/p86qvnd8+rdmrRKV6qfw6H/AQAAoECZ/r8u6v9P1rxpoSHNJhw0Pl2pfgmH/gcAAIACZfr/+qj/Px24/5f7vNzwqVXTlerXcOh/AAAAKFCm//tG/f/Z9ae8ULt35PeLpSvVb+HQ/wAAAFCgTP/fEPX/563va/7b+Scvfl+6Uv0eDv0PAAAABcr0/41R/097abFhjQb36/VfNH71Rzj0PwAAABQo0///ifp/+sWTd/1zxy53PpKuVPPCof8BAACgQJn+vynq/y9O/K3HQ2vMe214ulL9GQ79DwAAAAXK9P/NUf9/OWXTKw77u80GtXSlmh8O/Q8AAAAFyvT/LVH/z9j5srWqacOOvjpdqf4Kh/4HAACAAmX6/9ao/2fOa//yr+26X7ZhulL9HQ79DwAAAAXK9H+/qP+/+r7X13d3ffX9dulK9U849D8AAAAUKNP//aP+/7rLk7V9L2nc+o50pfo3HPofAAAACpTp/wFR/89a9oS7Dzxu+re3pSv1BYf+BwAAgAJl+n9g1P/fjBi587DRzRdrk67Uw+/ofwAAAChRpv9vi/p/9rh+R/30bt9uLdOVesNw6H8AAAAoUKb/b4/6/9v63pc0XLTz+OvTlfrC4dD/AAAAUKBM/w+K+v+7W79ofvDyb/+2ULpSXyQc+h8AAAAKlOn/wVH/f99yrRfun7TsikPTlXotHPofAAAACpTp/zui/v9hm9W+/GfEuJ1Hpyv1Khz6HwAAAAqU6f87o/7/8dIPF1qi54VDVkhX6gu+AFD/AwAAQIEy/X9X1P9zBjUduPhNfd4ama7UF7xe/wMAAECBMv1/d9T/P63z2QX/7tVhsyXTlXqjcOh/AAAAKFCm/4dE/T938xmHPLDJrGNWSlfqi4VD/wMAAECBMv0/NOr/n69q8eRBc9e/Ymy6Um8cDv0PAAAABcr0/z1R///S7MamC/84+vXW6Up98XDofwAAAChQpv+HRf3/610H/jmnVc+Nbk1X6kuEQ/8DAABAgTL9f2/U/7+NPmnqPftNPfeydKW+4JmA+h8AAAAKlOn/4VH//77k/Vt3uaHZwOYNPt7k/7NSXyoc+h8AAAAKlOn/+6L+/6PjuYP3G/j8t/V0pb50OPQ/AAAAFCjT/yOi/p8359mL79qlwWLD0pV6k3DofwAAAChQpv/vj/r/zxlXdPtl7Ye6PZqu1Bd0v/4HAACAAmX6/4Go/+d32+mZ+rxTxy+drtSXDYf+BwAAgAJl+n9k1P9/TZ6zStcZc38blK7UlwuH/gcAAIACZfr/waj//z57q38ebtNqxe3Slfry4dD/AAAAUKBM/z8U9f8/Ry3++fyDBu+8frpSXyEc+h8AAAAKlOn/h6P+//fDV7dd9IquQ65NV+orhkP/AwAAQIEy/f/I/+z/eoNF17j86qOHv7VZulJvGg79DwAAAAXK9P+oqP8XevTrI88f32Ozm9OV+krh0P8AAABQoEz/Pxr1f8N7P91hk88nHnNFulJvFg79DwAAAAXK9P9jUf8vvMrKQz5duNEV66Qr9ZXDof8BAACgQJn+Hx31/yJ9RzS8crVbXr8/XamvEg79DwAAAAXK9P/jUf/Xtjh1Ws8XDtho0XSlvmo49D8AAAAUKNP/Y6L+r5of8PwaQ+afu3q6Ul8tHPofAAAACpTp/yei/q/fdvOab/dqO3BculJf8DcB/Q8AAAAFyvT/k1H/L/rZjn3ev6HToH3SlfqC1+h/AAAAKFCm/5+K+r9R9z7HrL3fdRf9nK7U1wiH/gcAAIACZfr/6aj/FzttXPvTW7VYf0a6Um8RDv0PAAAABcr0/9io/xu/esG9l/345cQO6Up9zXDofwAAAChQpv+fifp/8YMmVR/N7XXpq+lKfa1w6H8AAAAoUKb/x0X9v8QXS83YYJPxRxyXrtTXDof+BwAAgAJl+v/ZqP+X/G3Ll3rt1WSLi9OV+jrh0P8AAABQoEz/j4/6f6k9f173+pveeu/TdKW+bjj0PwAAABQo0//PRf2/9OI9Pz6354bDj01X6uuFQ/8DAABAgTL9/3zU/03GPNbm2hGzO7yUrtTXD4f+BwAAgAJl+v+FqP+XGXL1Sp9Par/M2+lKfYNw6H8AAAAoUKb/J0T9v2zTzvM3Wr73z6elK/UNw6H/AQAAoECZ/n8x6v/lrvn70HMWbfr0X+lKfaNw6H8AAAAoUKb/X4r6f/lNt3nqinc/OrRbulLfOBz6HwAAAAqU6f+Xo/5fYa2FBrw1+pyldk9X6puEQ/8DAABAgTL9/0rU/yve8cr5ax435odv05V6y3DofwAAAChQpv8nRv3f9OPlP1u318mDJqcr9U3Dof8BAACgQJn+nxT1/0pHvNPu3SEjLzolXalvFg79DwAAAAXK9P+rUf83O+ubVS95oeH656Ur9c3Dof8BAACgQJn+fy3q/5XfaPnvmatNmDg1Xam3Cof+BwAAgAJl+n9y1P+rdB18+HoLd7u0S7pS3yIc+h8AAAAKlOn/16P+X/WrQ8dN/fzOI35NV+pbhkP/AwAAQIEy/f9G1P+rzT1y0A3jN9vii3SlvlU49D8AAAAUKNP/b0b9v/puw3tdePSc93ZIV+qtw6H/AQAAoECZ/n8r6v/mT9fmX35F4+F/piv1NuHQ/wAAAFCgTP9Pifp/jQYTVjrtoFc7HJSu1LcOh/4HAACAAmX6/+2o/1ssN6/NWm26L9M5Xam3DYf+BwAAgAJl+v+dqP/XfGj7jz+YMezn79OV+jbh0P8AAABQoEz/vxv1/1rtrj//unltnj4yXam3C4f+BwAAgAJl+v+9qP/XvnKPARevPe/QCelKfdtw6H8AAAAoUKb/34/6f52bTn9qw126LPVuulLfLhz6HwAAAAqU6f8Pov5fd70nDv1wYL8fzk5X6tuHQ/8DAABAgTL9/2HU/+uddMy/nww54Iy/05X6DuHQ/wAAAFCgTP9/FPX/+u8PXbVlr1tuPjxdqe8YDv0PAAAABcr0/8dR/2/wwsB2F6zW9pXd0pX6TuHQ/wAAAFCgTP9Pjfp/w3MP/+yqF+avMztdqe8cDv0PAAAABcr0/ydR/280+/te73ze49Qe6Uq9fTj0PwAAABQo0/+fRv2/8d4bDmq+8PC+L6Yr9V3Cof8BAACgQJn+/yzq/03aNxl31tGNPn4nXal3CIf+BwAAgAJl+v/zqP9b/vPB4X3GT9zm9HSlvms49D8AAAAUKNP/06L+3/TLFV+58qBWu7+WrtQXfCeA/gcAAIACZfp/etT/mx08Ze2eV8y97/h0pb57OPQ/AAAAFCjT/19E/b95p28XWWNG1796pSv1juHQ/wAAAFCgTP9/GfV/q983/urtNoNX/SRdqe8RDv0PAAAABcr0/4yo/7c45s4OV6/dYP+905X6nuHQ/wAAAFCgTP/PjPp/y88Pvuf8ec8/PjddqXcKh/4HAACAAmX6/6uo/7d67ejemww8dfrMdKW+Vzj0PwAAABQo0/9fR/3f+vRhx366y0MNdk1X6p3Dof8BAACgQJn+nxX1f5stz5nw0X49zzgiXakveCaA/gcAAIACZfr/m6j/t75h1Bob3DD65hfSlfo+4dD/AAAAUKBM/8+O+r/t7dc26PVjs1feS1fq+4ZD/wMAAECBMv3/bdT/26zR6YvrW01d55x0pb5fOPQ/AAAAFCjT/99F/d/usX93en+TDqfOT1fq+4dD/wMAAECBMv3/fdT/2zba+q615/bpe3C6Uj8gHPofAAAACpTp/x+i/t9u1YUvPf2m9T/eK12pHxgO/Q8AAAAFyvT/j1H/bz/8paMv22vWNt+lK/Uu4dD/AAAAUKBM/8+J+n+HJW55dosRy+5+YLpSPygc+h8AAAAKlOn/n6L+3/GJfbu+0vPt+35JV+oLngmg/wEAAKBAmf6fG/X/TkOPu+jm5S/868t0pX5IOPQ/AAAAFCjT/z9H/b/zSg/decSkcavumK7UDw2H/gcAAIACZfr/l6j/21+7yvbbvNt8/9fTlXrXcOh/AAAAKFCm/3+N+n+XzT7+dOKi0x8/NV2pHxYO/Q8AAAAFyvT/b1H/d1h72l+Djus8/dx0pd4tHPofAAAACpTp/9+j/t/1znVWO3V03wYfpyv1w8Oh/wEAAKBAmf7/I+r/3ab+8vSJu8yrbZWu1I8Ih/4HAACAAmX6f17U/7sfuflBAwa2mXFLulI/Mhz6HwAAAAqU6f8/o/7v2HPR8ybP6/fI5elK/ahw6H8AAAAoUKb/50f9v8ebb9y+/dpd9lkjXakfHQ79DwAAAAXK9P9fUf/vediF23Rv82rTB9OVevdw6H8AAAAoUKb//476v9PXT3/Uf0bjeUulK/VjwqH/AQAAoECZ/v8n6v+9fr7kjwlXDHuwabpS7xEO/Q8AAAAFyvT/v1H/d969Q7NND+q+59PpSv3YcOh/AAAAKND/vv8bNIj6f+99j1pn9/F3bvdfrNSPC4f+BwAAgAJl+n+hqP/3mXXPi08f3e3zIelK/fhw6H8AAAAoUKb/G0b9v+9fd8z8YeE51z6ertRPCMd/q//r/0fvGAAAAPjvyvT/wlH/79fhoPqqn292worpSv3EcPj8HwAAAAqU6f9Fov7f/93Zwzu8MHLN29OV+knh0P8AAABQoEz/16L+P+CUjXZ5fLWTX9g6XamfHA79DwAAAAXK9H8V9f+B56/QfXqvCf02SVfqp4RD/wMAAECBMv1fj/q/y3NvXbnMkIbnXJeu1E8Nh/4HAACAAmX6f9Go/w+6omGLFUZ/VHsgXamfFg79DwAAAAXK9H+jqP8P3u7F52Ye13RGo3Slfno49D8AAAAUKNP/i0X9f8gG/0wfteiYR1ZLV+pnhEP/AwAAQIEy/d846v9Db2yz8E7vnrPPM+lK/cxw6H8AAAAoUKb/F4/6v2vDa4auNGl2003TlfpZ4dD/AAAAUKBM/y8R9f9hT+654+zlN5x3U7pS7xkO/Q8AAAAFyvT/klH/dxt59hHP9uz9YO90pX52OPQ/AAAAFCjT/0tF/X/4Co9c1mlE+z3XTVfq54RD/wMAAECBMv2/dNT/R8xYpv7oXuO3G5yu1M8Nh/4HAACAAmX6v0nU/0d2e3fmjjf1+nz7dKV+Xjj0PwAAABQo0//LRP1/VMcfXlx+7lvXrpeu1M9f8Pv/d98tAAAA8H8i0//LRv1/9Jz11vlqkyYnXJOu1C8Ih/4HAACAAmX6f7mo/7sfdduV41pdt2aVrtQvDIf+BwAAgAJl+n/5qP+P+bBr971+7PTCPelK/aJw6H8AAAAoUKb/V4j6v8fkHrs0u+HLfo/9j382ilfqvcKh/wEAAKBAmf5fMer/Y8++a/g3+7U4p0m6Ur84HPofAAAACpTp/6ZR/x+3+RkLf/9H94eHpSv1S8Kh/wEAAKBAmf5fKer/468aPX21tYbtVU9X6peGQ/8DAABAgTL93yzq/xMG9X2uY/vGzZZOV+qXhUP/AwAAQIEy/b9y1P8nrrNbi6cGvDr/0XSlfnk49D8AAAAUKNP/q0T9f9LoPy/7oneXR7dLV+pXhEP/AwAAQIEy/b9q1P8nL9nuiCYH99tvULpS7x0O/Q8AAAAFyvT/alH/n9Ks2nGXrdvUr01X6leGQ/8DAABAgTL9v3rU/6fe9dzQMTPnfbV+ulLvEw79DwAAAAXK9H/zqP9PG9dgmycaNrzl5nSlflU49D8AAAAUKNP/a0T9f3r95Y/afzah52bpSv3qcOh/AAAAKFCm/1tE/X/Gsn/9sfSzJ6+xTrpSvyYc+h8AAAAKlOn/NaP+P3NE22ZfHjXyuSvSlf/3mYD6HwAAAAqU6f+1ov4/a5urnn7y4s2uXjRdqV8XDv0PAAAABcr0/9pR//e8dK+D9hg657j705X69eHQ/wAAAFCgTP+vE/X/2beedd7qE7q1G5eu1PuGQ/8DAABAgTL9v27U/+e0fPT271a/89PV05X6DeHQ/wAAAFCgTP+vF/X/uScesf2sRu0fbpOu1G8Mh/4HAACAAmX6f/2o/8+bcu+nK7/Xe6/b0pX6f8Kh/wEAAKBAmf7fIOr/818a9Ffnxzdsdn26Ur8pHPofAAAACpTp/w2j/r/g4kNWe+b42fNbpiv1m8Oh/wEAAKBAmf7fKOr/C7+f9ezXZ53z6NB0pX5LOPQ/AAAAFCjT/xtH/X9Rl026LnffmP0WSlfqt4ZD/wMAAECBMv2/SdT/vXZe7qIdJjatr5Cu1PuFQ/8DAABAgTL93zLq/4vnvX3nY8t99NXodKXePxz6HwAAAAqU6f9No/6/5Itj5vb/ucUtS6Yr9QHh0P8AAABQoEz/bxb1/6UHDV26e8sve45MV+oDw6H/AQAAoECZ/t886v/L9hy42aadO60xNl2p3xYO/Q8AAPz/2LvzcDvnc+HjSwzP2oaEFqWGGKKTU0JMQREnVWMNrSHnmIIgRCKa1FCkxFApMQQxJdRMzHNNQQwRMc8ziTEkhgQxvxfuxC8eOY+20T7X7/18/uh975217+zlus6Rr712NlBDFf3fIen//u9v9/CIQUfesmD5SnFqLPofAAAAaqii/1dI+v+Qncb/4aSB8xxxQvlKcVos+h8AAABqqKL/V0z6/9Dnlj52980e2HXl8pViSCz6HwAAAGqoov9XSvr/sFHzXLbm8geuvlj5SjE0Fv0PAAAANVTR/ysn/X/4no9vNnrC8GcPLl8pTo9F/wMAAEANVfT/Kkn//2WFWd8f2XbkEz3LV4ozYtH/AAAAUEMV/d8x6f8jBo6Yd7URLR1Hl68Uf4tF/wMAAEANVfT/qkn/DzjlwxV7nXXeHk+XrxRnxqL/AQAAoIYq+n+1pP//utiaj5/Wb+cj9y1fKc6KRf8DAABADVX0/+pJ/x95xVF737XDx3e8V75SnB2L/gcAAIAaquj/XyX9f1RzgxNWuHnVdluWrxTnxKL/AQAAoIYq+n+NpP8HLtz7qu2fO37PtcpXinNj0f8AAABQQxX9v2bS/0efe+0Wg1ptfuyY8pXivFj0PwAAANRQRf+vlfT/Ma8sN2znly8Zu1X5SnF+LPofAAAAaqii/zsl/X/s1h+sd0LHXq0+Kl8pLohF/wMAAEANVfT/2kn/H7fuvbve2uXWLcaXrxQXxqL/AQAAoIYq+v+/k/4f9O4cA5Y/tHHtxuUrxbBY9D8AAADUUEX/d076//jt//6L7icN+WxE+UpxUSz6HwAAAGqoov9/nfT/CU/1G3lK563bdi1fKS6ORf8DAABADVX0/zpJ/594369fv6/duxv8sXyluCQW/Q8AAAA1VNH/v0n6f3Cf/nP8anKHCx8pXykujUX/AwAAQA1V9P+6Sf+f1H7TSztOeO2JieUrxWWx6H8AAACooYr+Xy/p/5MHDN5o1PI/77hp+UpxeSz6HwAAAGqoov/XT/r/lKEX9xi62eF7rFO+UlwRi/4HAACAGqro/w2S/j+13e4D9xi4zpEvla8UV8ai/wEAAKCGKvp/w6T/T7vmyWVWGvT0HbuWrxRXxaL/AQAAoIYq+n+jpP+HzNl29B0b/7jdqPKV4upY9D8AAADUUEX//zbp/6ELLDX+2GWv2vPZ8pXimlj0PwAAANRQRf9vnPT/6WeObbPDxL7H9itfKa6NRf8DAABADVX0/yZJ/5+xSacBQ+YdOPaO8pXiulj0PwAAANRQRf9vmvT/38YdvmvPkRu32qV8pfh7LPofAAAAaqii/zdL+v/Mz25ab9XzX9xiz/KV4vpY9D8AAADUUEX//y7p/7M6/2nY3X0Wu/ah8pXihlj0PwAAANRQRf//Pun/sx+7e47jut/02bblK8WNseh/AAAAqKGK/t886f9zerR5vevV+7f9pHyluCkW/Q8AAAA1VNH/WyT9f+4+K45c8dGHNnijfKW4ORb9DwAAADVU0f9bJv1/3m0Tf3Fnyw8vXK98pRgei/4HAACAGqro/62S/j//sMUH3rb8AyvdVr5S3BKL/gcAAIAaquj/Lkn/X7D6qz2WmzDP49uXrxS3xqL/AQAAoIYq+v9/kv6/8GfPbtRt4PD+e5evFFNeE6D/AQAAoIYq+v9/k/4fdtxCl5642YE7PFq+UoyIRf8DAABADVX0/9ZJ/1/UuKDNvRuPXbpL+Upxeyz6HwAAAGqoov+3Sfr/4ut7jV9j0BKjPi5fKe6IRf8DAABADVX0/7ZJ/19yyeajd5t45NA3y1eKO2PR/wAAAFBDFf2/XdL/l847aJmTl92o32/LV4q7YtH/AAAAUEMV/b990v+XtfzumpNGXjPXpPKVYmQs+h8AAABqqKL/uyb9f/mVJ/x+93n3fnOL8pXi7lj0PwAAANRQRf/vkPT/Fedd2nfNPk9e16l8pRgVi/4HAACAGqro/x2T/r9yke6DR5+/QJex5SvFPbHofwAAAKihiv7fKen/q45+euXBVx86d6/ylWJ0LPofAAAAaqii/7sl/X/1ios8ulP3zu/cW75STHmf/gcAAIAaquj/nZP+v2bxn05q3zLunKfKV4r7YtH/AAAAUEMV/b9L0v/Xnvri/CMeXbrzPuUrxf2x6H8AAACooYr+3zXp/+ue73DFXSPeXmm78pXigVj0PwAAANRQRf93T/r/793e22SFtss9/mn5SvFgLPofAAAAaqii/3dL+v/63vf33r7f6f3Hla8UD8Wi/wEAAKCGKvp/96T/b7inZdCgs7bdYd3yleLhWPQ/AAAA1FBF//dI+v/GLjd0GHnziKVvL18pHolF/wMAAEANVfT/Hkn/3zT2gAdX26HVqJ3LV4pHY9H/AAAAUEMV/d8z6f+bP/jN271aXTS0d/lK8Vgs+h8AAABqqKL/eyX9P3yjg35w2nN79Hu4fKV4PBb9DwAAADVU0f97Jv1/y6sP3P+LjifO1b18pXgiFv0PAAAANVTR/72T/r91m/l/+eTLW755T/lK8WQs+h8AAABqqKL/90r6/7b1/mvOow798LpnyleKp2LR/wAAAFBDFf3/h6T/R0wcN+HALqt0ObB8pXg6Fv0PAAAANVTR/32S/r+961a/XarzOXO/W75STHlNgP4HAACAGqro/75J/9/x9NCLHjtpp3c2KV8pno1F/wMAAEANVfT/H5P+v/P+s486ePKoc35TvlI8F4v+BwAAgBqq6P+9k/6/q+8OvXq3m6Pzy+UrxfOx6H8AAACooYr+3yfp/5HLXXZP30f379RSvlK8EIv+BwAAgBqq6P99k/6/+69//PlhLTedMax8pXgxFv0PAAAANVTR//sl/T/q9A2bD3X/4aQby1eKMbHofwAAAKihiv7/U9L/9yw1YNziVz8036LlK8XYWPQ/AAAA1FBF/++f9P/oa1dZf7/zN976uNKRYuqm/wEAAKCGKvr/gKT/753rs/OP6DPwpvblK8WUnwmg/wEAAKCGKvr/wKT/71vw9iOenXex139avlK8Eov+BwAAgBqq6P9+Sf/ff1ar3ZcZ+WLz0PKV4tVY9D8AAADUUEX//znp/we6NLfpsOyP91uzfKV4LRb9DwAAADVU0f8HJf3/4Nj7ht8y8elTh5SvFK/Hov8BAACghir6/+Ck/x/6YNLQ4wf1vX9A+UoxLhb9DwAAADVU0f/9k/5/eKPl999l46uW+Vn5SvFGLPofAAAAaqii/w9J+v+R5//8zOqb/XyXs8tXijdj0f8AAABQQxX9f2jS/492W2eN+we+dths5SvF+Fj0PwAAANRQRf8flvT/Y733b3vqhHUemqd8pZgQi/4HAACAGqro/8OT/n/8nus/3XX5wztcWb5SvBWL/gcAAIAaquj/vyT9/8TRu3bp0W7rTseXrxRvx6L/AQAAoIYq+v+IpP+fXPGSG06fPOSMlcpXindi0f8AAABQQxX9PyDp/6cWP/6Ue07qMGnx8pXi3Vj0PwAAANRQRf//Nen/p0/dbJ9VOr87X//ylWJiLPofAAAAaqii/49M+v+Zlhee2LFLr63blK8Uk2LR/wAAAFBDFf1/VNL/z175k1WPOfSSmy4uXynei0X/AwAAQA1V9P/ApP+fO2/hhW5/ufH69eUrxfux6H8AAACooYr+Pzrp/+cXeerDlTve2lygfKX4IBb9DwAAADVU0f/HJP3/wlv77D/yuVX3O7N8pZgci/4HAACAGqro/2OT/n9x85uHrtbq41O/5UrxYSz6HwAAAGqoov+PS/p/TKdDhvfaYfP7f1S+UnwUi/4HAACAGqro/0FJ/4/9eO1tTrv5+GWuLl8pPo5F/wMAAEANVfT/8Un/v9T97U/vOqtll47lK8Unseh/AAAAqKGK/j8h6f+XH16p7Qr9Rh72LX8BQPFpLPofAAAAaqii/09M+v+Vu+ZcY/u2Oz90ZPlK8Vks+h8AAABqqKL/Byf9/+oBo54ZNOK8DsuUrxSfx6L/AQAAoIYq+v+kpP9f67jAPoMvf2f9BctXpn64/gcAAIAaquj/k5P+f73/c6fstEf7YTeUrzTjMfofAAAA6qii/09J+n/c4JduaD/X0M8vKl9ptopF/wMAAEANVfT/qUn/v/HLJbqMeHC7RVuXrzRnjkX/AwAAQA1V9P9pSf+/OfyYD08afduWB5evNGeJRf8DAABADVX0/5Ck/8fPusVCu8898zWLla80Z41F/wMAAEANVfT/0KT/J8zTY9U197x4zMrlK83ZYtH/AAAAUEMV/X960v9vDbvwidEX9Zj5hPKVZhGL/gcAAIAaquj/M5L+f/ua3da6d4PBvZctX2lO+Xj9DwAAADVU0f9/S/r/nTkvOnONwVscc1T5SrMlFv0PAAAANVTR/2cm/f/uAif23+2DybefUr7SnD0W/Q8AAAA1VNH/ZyX9P/HMTbqevHTHpVYpX2nOEYv+BwAAgBqq6P+zk/6f1H7MrbetdHaPq8pXmnPGov8BAACghir6/5yk/98b0G7J5cZ1O2r+8pXmXLHofwAAAKihiv4/N+n/94cu2qrbgHuenKl8pdk6Fv0PAAAANVTR/+cl/f9BuydeOHGL2Vc5q3yl2SYW/Q8AAAA1VNH/5yf9P3n72Tsft9aD6x9SvtKcOxb9DwAAADVU0f8XJP3/4VOjz+162tzDflK+0pwnFv0PAAAANVTR/xcm/f/Rfe8fvuInN3++XPlKc0r3638AAACooYr+H5b0/8d92ne7c7F+iw4qX2n+MBb9DwAAADVU0f8XJf3/ySsH3zHkV2O2bFu+0pw3Fv0PAAAANVTR/xcn/f/p1p1/2vPFJa+5qXylOV8s+h8AAABqqKL/L0n6/7N1D5xt1YOOGnNh+Upz/lj0PwAAANRQRf9fmvT/5+9e99Ld22w4c7N8pfmjWPQ/AAAA1FD0/yzJe45JfrnVV6O5QKPRaXzy/nh8mwWmfNAX/7Pj/u9M+rb5teYC084vf4uZGo1ZLvvGp/Ut/41hhpj6fFo/MmbtRvvGTOkz/8Iy03n8ic35F260b7QqPX7aD5g5Hr/gtp8s0r/RvjHbNx+/W/eeO3XbZ+qb8avNhdftOWH5RvtG85uP37PbXtv17LVTt3gz/rm0LHb5vkP6Nto3ZvnmP6nuPfvukbzZEmPxH7/VbuCXn883Hv+HPl377PyHqW/OHo9fIu6XHr/XtJ//HPH4JXss3Gb8XCMbsy447cMbvfv26tO1AQAAwH9aRf9P7dlGo9Mtyfuji//h/l9w2tmYXv/P/K89q+ma+ny+p/6P10o0fvDJ3r9+o/V1jeY3+3m3Xn336tm1R/sZ8FwAAAAAAAAAYKr4+n+r5F0jv15ne/zr15Cnmgs3GsULjcZMk7d6+aNn/pXf//PN/0Wff18vFQAAAIB8VLz+f+r3p8+g1/8vPO1sTO/1/7P+a89quqY+n+/p9f/xeTcXefHTwx9orNKY49u+P3+7vbr23KXbNN8CMFt83KJz3Pjyvo1VGq2//fv0t9tx12k/tIiPa3vA+5ue3nrdxlzf/Lgvv/++9GEAAAD8/6ai/6f2bKNx0J/TD4s5d/r2d+j/Raadjeh/AAAA4PtU0f9Tvy49nf7/R7/+v+i0s/F/9P9s/9wTAgAAAEoq+n/q68u/tf/nnvrmd+z/lrZf35ui1bQ3v1fNxWIuHnOJmEvGbBdzqZg/ifnTmD+L+fOYv4i5dMz/ivnLmPHdAc1lY8ZL8JvLxVw+ZoeYK8RcMeZKMVeOuUrMjjFXjblazNVj/irmGjHXjLlWzE4x14753zE7x/x1zHVi/ibmujHXi7l+zA1ibhhzo5i/jblxzE1ibhpzs5i/i/n7mJvH3CLmljG3itkl5v/E/N+YW8fcJua2MbeLuX3M+JGEzR1i7hhzp5jx8xabO8fcJeauMbvH3C3m7jF7xIyfwdjsGbNXzD1j9o65V8z4CYzNPjH7xvxjzL1jxk9ebO4bc7+Yf4q5f8wDYh4Ys1/M+L/h5kExD47ZP+YhMQ+NeVjMw2P+JeYRMQfE/GvMI2MeFXNgzKNjxv9vaR4b87iYg2IeH/OEmCfGHBzzpJgnxzwl5qkxT4s5JObQmKfHPCPm32KeGfOsmGfHPCfmuTHPi3l+zAtiXhhzWMyLYl4c85KYl8aM73NqXh7ziphXxrwq5tUxr4l5bczrYv495vUxb4h5Y8ybYt4cc3jM+B6u5q0xb4s5IubtMe+IeWfMu2LG3w3TvDvmqJj3xBwd896Y98W8P+YDMR+M+VDMh2M+EvPRmI/FfDzmEzGfjPlUzKdjxt9F03w25nMxn4/5QswXY46JOTbmSzFfjvlKzFdjvhbz9ZjjYr4R882Y8bNymxNivhXz7ZjvxHw35sSY8e/L5nsx34/5QczJMT+M+VHMj2N+EvPTmJ/F/PyrOeWv8mmJf9e2xL98W+Iv0WmJPwe0xOv+WuI/wrfEnwNapvz82Sk/V3bKz4ud8nNg54w5V8zWMdvEjD8xtMwT8wcxfxhz3pjzxZw/5o9ixtcbWuLnB7X8OOZCMeP7Clvi9YUt8XWGluTPGwBA9H/rr98z6z7/yc8HAAAAmPH0PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+pvZ/7ynv0f8AAACQG1//BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMjf9Pt/5v/Y5wQAAADMWL7+DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD5i/6fJXnPMckvN78aLYs1Ggf9Of2waX/9q7d33P+dSd82v/bFnXR+odVMM+zJVJvr3/h7AQAAQG1U9H9LjMWn0/8LpG9/h/5ffNrZ+Df3f5vXvpqzPR7vmPPf93sDAADAf05F/8/+1WhZYjr9f0v69nfo/yWmnY3o/1k2nGFP6P82T/K5f+EHjUaz2Wi0ajVjzjcXSu5/cXPhRqN4odGYafKMuQ8AAAD/nIr+n+PL/21pWXI6/X9Z+vZ36P8lp52N6P9Zn5lxz+gfMlOXWc5/tHO/RmP7LYd/OV97+bwv51Svb3Zrh36ju015c8rjXphv+LSP+/fcBQAAgH9KRf/H6+Nb2jUancYn74+vl7f5R1//327aOeVjZ7nsG5/WDPp6fMnU59P6kTFrN9o3Zkqf+ReWmc7jT2zOv3Dr1xqtSo9f5nv6TAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/8cOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzBQAA///fNc5N") syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f0000000cc0)='./bus\x00', 0x8000a0, 0x0, 0x3, 0x0, &(0x7f0000000d00)) rmdir(&(0x7f0000000d40)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x299c454, 0x0, 0x0, 0x0, &(0x7f0000000ec0)) 1.797814367s ago: executing program 6 (id=1156): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000009c0)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000540)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) write$P9_RREAD(r1, &(0x7f0000000800)={0xb, 0x75, 0x1}, 0xb) 1.490478155s ago: executing program 6 (id=1157): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) r2 = open(&(0x7f0000000600)='.\x00', 0x0, 0x14b) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000500)={@id={0x2, 0x0, @c}}) sendfile(r0, r1, 0x0, 0x20fffe82) 92.921074ms ago: executing program 6 (id=1158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001400)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 43.967456ms ago: executing program 4 (id=1159): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 7 (id=1160): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a310000000009000171c5797a3100000000801400008004000180080003c000000001040002801400000011"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) kernel console output (not intermixed with test programs): ][ T9448] do_syscall_64+0x123/0x790 [ 409.811933][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.811973][ T9448] RIP: 0033:0x7faed619f559 [ 409.812003][ T9448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.812040][ T9448] RSP: 002b:00007faed702e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.812076][ T9448] RAX: ffffffffffffffda RBX: 00007faed6425fa0 RCX: 00007faed619f559 [ 409.812102][ T9448] RDX: 0000200000000180 RSI: 00000000400454ca RDI: 0000000000000004 [ 409.812127][ T9448] RBP: 00007faed6236b20 R08: 0000000000000000 R09: 0000000000000000 [ 409.812150][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.812173][ T9448] R13: 00007faed6426038 R14: 00007faed6425fa0 R15: 00007ffee745b7c8 [ 409.812226][ T9448] [ 410.089164][ T9452] loop0: detected capacity change from 0 to 512 [ 410.111709][ T9452] EXT4-fs: Ignoring removed nobh option [ 410.160926][ T9452] EXT4-fs (loop0): 1 truncate cleaned up [ 410.172640][ T9452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.198869][ T5630] playstation 0003:054C:0DF2.001E: Failed to retrieve feature with reportID 9: -71 [ 410.198915][ T5630] playstation 0003:054C:0DF2.001E: Failed to retrieve DualSense pairing info: -71 [ 410.198986][ T5630] playstation 0003:054C:0DF2.001E: Failed to get MAC address from DualSense [ 410.199017][ T5630] playstation 0003:054C:0DF2.001E: Failed to create dualsense. [ 410.227147][ T5630] playstation 0003:054C:0DF2.001E: probe with driver playstation failed with error -71 [ 410.258362][ T5630] usb 4-1: USB disconnect, device number 30 [ 410.365062][ T9458] loop3: detected capacity change from 0 to 1024 [ 410.506242][ T9458] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 410.530191][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.775689][ T9468] loop0: detected capacity change from 0 to 64 [ 410.848603][ T9458] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 410.851146][ T9458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.037379][ T30] audit: type=1800 audit(1792513402.226:13): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.987" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 411.066819][ T5901] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 411.067278][ T5901] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 411.093075][ T10] usb 8-1: USB disconnect, device number 6 [ 411.093443][ T5901] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 411.109321][ T5901] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 411.187092][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.413265][ T5901] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 411.649232][ T5901] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 411.736257][ T5901] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.736434][ T5901] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.736537][ T5901] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 411.736604][ T5901] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.736688][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.882201][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 412.120442][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 412.218490][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 412.218803][ T9] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=66.41 [ 412.310772][ T9] usb 2-1: config 10 has an invalid interface number: 45 but max is 0 [ 412.310819][ T9] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 412.310884][ T9] usb 2-1: config 10 has no interface number 0 [ 412.310939][ T9] usb 2-1: config 10 interface 45 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 412.310989][ T9] usb 2-1: config 10 interface 45 has no altsetting 0 [ 412.510167][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.510228][ T9] usb 2-1: Product: syz [ 412.510299][ T9] usb 2-1: Manufacturer: syz [ 412.510368][ T9] usb 2-1: SerialNumber: syz [ 414.032757][ T9] s2255 2-1:10.45: Could not find bulk-in endpoint [ 414.032880][ T9] Sensoray 2255 driver load failed: 0xfffffff4 [ 414.032904][ T9] s2255 2-1:10.45: probe with driver s2255 failed with error -12 [ 414.080029][ T9] usb 2-1: USB disconnect, device number 23 [ 414.273016][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.994'. [ 414.273115][ T9481] bridge_slave_1: left allmulticast mode [ 414.273147][ T9481] bridge_slave_1: left promiscuous mode [ 414.273414][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.313820][ T5901] [drm] Initialized gud 1.0.0 for 7-1:1.0 on minor 1 [ 414.342213][ T9481] bridge_slave_0: left allmulticast mode [ 414.342252][ T9481] bridge_slave_0: left promiscuous mode [ 414.342579][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.744828][ T29] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 414.915811][ T29] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 414.917380][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.917424][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 414.917484][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.721526][ T5901] Console: switching to colour frame buffer device 128x48 [ 415.735652][ T29] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 415.795869][ T9489] loop1: detected capacity change from 0 to 131072 [ 415.808299][ T9489] F2FS-fs (loop1): invalid crc value [ 415.908537][ T5901] gud 7-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 415.913129][ T9489] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 415.933519][ T5901] usb 7-1: USB disconnect, device number 15 [ 415.943859][ T9489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 415.990070][ T5901] Console: switching to colour VGA+ 80x25 [ 417.064088][ T9483] FAULT_INJECTION: forcing a failure. [ 417.064088][ T9483] name failslab, interval 1, probability 0, space 0, times 0 [ 417.064157][ T9483] CPU: 1 UID: 0 PID: 9483 Comm: syz.0.995 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.064213][ T9483] Tainted: [L]=SOFTLOCKUP [ 417.064227][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 417.064250][ T9483] Call Trace: [ 417.064263][ T9483] [ 417.064278][ T9483] dump_stack_lvl+0x100/0x190 [ 417.064340][ T9483] should_fail_ex.cold+0x5/0xa [ 417.064384][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.064439][ T9483] should_failslab+0xc2/0x120 [ 417.064488][ T9483] __kmalloc_cache_noprof+0x91/0x6d0 [ 417.064546][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.064593][ T9483] ? kasan_save_stack+0x3f/0x50 [ 417.064634][ T9483] ? dummy_urb_enqueue+0xa3/0x880 [ 417.064685][ T9483] dummy_urb_enqueue+0xa3/0x880 [ 417.064725][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.064772][ T9483] ? usb_hcd_map_urb_for_dma+0x28a/0x1190 [ 417.064838][ T9483] ? do_syscall_64+0x123/0x790 [ 417.064883][ T9483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.064932][ T9483] usb_hcd_submit_urb+0x268/0x2150 [ 417.064981][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.065037][ T9483] usb_submit_urb+0x827/0x19b0 [ 417.065091][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.065148][ T9483] ? __init_swait_queue_head+0xca/0x150 [ 417.065206][ T9483] usb_start_wait_urb+0x10e/0x580 [ 417.065259][ T9483] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 417.065305][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.065371][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.065420][ T9483] ? __asan_memset+0x23/0x50 [ 417.065483][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.065540][ T9483] usb_control_msg+0x328/0x4b0 [ 417.065590][ T9483] ? __pfx_usb_control_msg+0x10/0x10 [ 417.065636][ T9483] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 417.065704][ T9483] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.065746][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.065794][ T9483] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 417.065861][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.065918][ T9483] idmouse_open+0x902/0xe00 [ 417.065992][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.066045][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.066094][ T9483] ? down_read+0x13b/0x4c0 [ 417.066149][ T9483] ? __pfx_idmouse_open+0x10/0x10 [ 417.066211][ T9483] ? do_raw_spin_lock+0x128/0x260 [ 417.066262][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.066310][ T9483] ? find_held_lock+0x2b/0x80 [ 417.066368][ T9483] ? chrdev_open+0x589/0x6a0 [ 417.066415][ T9483] ? __pfx_idmouse_open+0x10/0x10 [ 417.066481][ T9483] usb_open+0x189/0x220 [ 417.066520][ T9483] ? __pfx_usb_open+0x10/0x10 [ 417.066558][ T9483] chrdev_open+0x234/0x6a0 [ 417.066607][ T9483] ? __pfx_chrdev_open+0x10/0x10 [ 417.066656][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.066703][ T9483] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 417.066780][ T9483] do_dentry_open+0x674/0x1470 [ 417.066821][ T9483] ? __pfx_chrdev_open+0x10/0x10 [ 417.066869][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.066924][ T9483] vfs_open_consume+0xcc/0x460 [ 417.066975][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.067032][ T9483] path_openat+0x1551/0x2430 [ 417.067091][ T9483] ? __pfx_path_openat+0x10/0x10 [ 417.067162][ T9483] do_file_open+0x20e/0x430 [ 417.067215][ T9483] ? __pfx_do_file_open+0x10/0x10 [ 417.067300][ T9483] ? _raw_spin_unlock+0x28/0x50 [ 417.067360][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.067408][ T9483] ? alloc_fd+0x471/0x7a0 [ 417.067473][ T9483] do_sys_openat2+0x163/0x1d0 [ 417.067528][ T9483] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.067585][ T9483] ? __pfx_get_timespec64+0x10/0x10 [ 417.067641][ T9483] __x64_sys_openat+0x12d/0x210 [ 417.067697][ T9483] ? __pfx___x64_sys_openat+0x10/0x10 [ 417.067762][ T9483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.067820][ T9483] do_syscall_64+0x123/0x790 [ 417.067867][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.067907][ T9483] RIP: 0033:0x7fb11bd5fd8e [ 417.067938][ T9483] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 417.067977][ T9483] RSP: 002b:00007fb11cc22b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 417.068016][ T9483] RAX: ffffffffffffffda RBX: 00007fb11cc236c0 RCX: 00007fb11bd5fd8e [ 417.068043][ T9483] RDX: 0000000000000002 RSI: 00007fb11cc22c00 RDI: ffffffffffffff9c [ 417.068070][ T9483] RBP: 00007fb11be36b20 R08: 0000000000000000 R09: 0000000000000000 [ 417.068095][ T9483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.068130][ T9483] R13: 00007fb11c026038 R14: 00007fb11c025fa0 R15: 00007ffc8a55a428 [ 417.068184][ T9483] [ 417.265956][ T5733] usb 1-1: USB disconnect, device number 22 [ 417.364469][ T5733] idmouse 1-1:1.0: disconnected [ 417.614705][ T9523] input: syz0 as /devices/virtual/input/input32 [ 417.793841][ T10] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 417.949734][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 417.949785][ T10] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 417.952391][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 417.952459][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.972593][ T9521] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 417.979458][ T10] cyberjack 8-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 417.993893][ T5901] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 417.999155][ T10] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 418.145869][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 418.146844][ T5901] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 418.148434][ T5901] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 418.148475][ T5901] usb 7-1: config 0 has no interface number 0 [ 418.148572][ T5901] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 418.148615][ T5901] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 418.148695][ T5901] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.148745][ T5901] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.148846][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.164728][ T5901] usb 7-1: config 0 descriptor?? [ 418.213633][ T5901] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 418.352400][ T5901] usb 8-1: USB disconnect, device number 7 [ 418.379814][ T5901] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 418.382023][ T5901] cyberjack 8-1:1.0: device disconnected [ 418.583202][ T9529] loop1: detected capacity change from 0 to 32768 [ 418.594934][ T9529] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1005 (9529) [ 418.601862][ T9529] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 418.601913][ T9529] BTRFS info (device loop1): using crc32c checksum algorithm [ 418.653450][ T9542] overlayfs: upper fs does not support file handles, falling back to index=off. [ 418.653475][ T9542] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 418.739027][ T9529] BTRFS info (device loop1): enabling ssd optimizations [ 418.739159][ T9529] BTRFS info (device loop1): turning on flush-on-commit [ 418.739192][ T9529] BTRFS info (device loop1): enabling free space tree [ 418.739406][ T9529] BTRFS info (device loop1): enabling auto defrag [ 418.739439][ T9529] BTRFS info (device loop1): use lzo compression, level 1 [ 418.739577][ T9529] BTRFS info (device loop1): max_inline set to 4096 [ 418.852987][ T30] audit: type=1800 audit(1792513410.036:14): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1005" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 418.856208][ T9529] BTRFS critical (device loop1 state E): emergency shutdown [ 418.885130][ T9501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.977779][ T5622] BTRFS info (device loop1 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 419.303876][ T5769] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 419.464339][ T5769] usb 5-1: Using ep0 maxpacket: 32 [ 419.465579][ T5769] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 419.468040][ T5769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.468082][ T5769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.468207][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.533366][ T5769] usb 5-1: config 0 descriptor?? [ 419.948009][ T9572] loop7: detected capacity change from 0 to 32768 [ 419.990194][ T9572] JBD2: Ignoring recovery information on journal [ 420.037268][ T9572] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 420.124097][ T5769] savu 0003:1E7D:2D5A.001F: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 420.184607][ T30] audit: type=1800 audit(1792513411.376:15): pid=9572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1022" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 420.192475][ T5769] usb 5-1: USB disconnect, device number 24 [ 420.275857][ T5901] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 420.452852][ T5901] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 420.471314][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.471387][ T5901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 420.471429][ T5901] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 420.471475][ T5901] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.471546][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.745001][ T5733] usb 7-1: USB disconnect, device number 16 [ 420.783835][ T5733] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 420.826426][ T9577] fido_id[9577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 420.967030][ T8213] ocfs2: Unmounting device (7,7) on (node local) [ 421.314001][ T5769] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 421.364885][ T5630] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 421.423799][ T5767] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 421.463783][ T5769] usb 7-1: Using ep0 maxpacket: 8 [ 421.464532][ T5769] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.467768][ T5769] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 421.467836][ T5769] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.467877][ T5769] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.467922][ T5769] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.467966][ T5769] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.468031][ T5769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.578194][ T5630] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 421.580102][ T5630] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.609258][ T5630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 421.609337][ T5630] usb 5-1: Product: syz [ 421.609365][ T5630] usb 5-1: Manufacturer: syz [ 421.609393][ T5630] usb 5-1: SerialNumber: syz [ 421.644287][ T5767] usb 4-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 421.645042][ T5767] usb 4-1: config 0 has no interfaces? [ 421.645088][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.653312][ T5767] usb 4-1: config 0 descriptor?? [ 421.667625][ T5901] [drm] Initialized gud 1.0.0 for 1-1:1.0 on minor 1 [ 421.761925][ T5769] usb 7-1: usb_control_msg returned -32 [ 421.761989][ T5769] usbtmc 7-1:16.0: can't read capabilities [ 421.821292][ T5901] gud 1-1:1.0: [drm] Cannot find any crtc or sizes [ 421.836442][ T5901] usb 1-1: USB disconnect, device number 23 [ 421.862050][ T5630] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 422.025603][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.027329][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.030971][ T5796] usb 4-1: USB disconnect, device number 31 [ 422.060412][ T9596] FAULT_INJECTION: forcing a failure. [ 422.060412][ T9596] name failslab, interval 1, probability 0, space 0, times 0 [ 422.060469][ T9596] CPU: 0 UID: 0 PID: 9596 Comm: syz.1.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.060525][ T9596] Tainted: [L]=SOFTLOCKUP [ 422.060540][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 422.060564][ T9596] Call Trace: [ 422.060577][ T9596] [ 422.060591][ T9596] dump_stack_lvl+0x100/0x190 [ 422.060653][ T9596] should_fail_ex.cold+0x5/0xa [ 422.060698][ T9596] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.060754][ T9596] should_failslab+0xc2/0x120 [ 422.060803][ T9596] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 422.060847][ T9596] ? __d_alloc+0x34/0xad0 [ 422.060909][ T9596] __d_alloc+0x34/0xad0 [ 422.060960][ T9596] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.061015][ T9596] d_alloc_pseudo+0x1c/0xc0 [ 422.061053][ T9596] alloc_file_pseudo+0x118/0x290 [ 422.061117][ T9596] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 422.061169][ T9596] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.061220][ T9596] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.061266][ T9596] ? _raw_spin_unlock+0x28/0x50 [ 422.061324][ T9596] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.061373][ T9596] ? alloc_fd+0x471/0x7a0 [ 422.061426][ T9596] __anon_inode_getfile+0xe8/0x280 [ 422.061476][ T9596] anon_inode_getfd+0x68/0xc0 [ 422.061521][ T9596] __x64_sys_fsopen+0x190/0x220 [ 422.061565][ T9596] do_syscall_64+0x123/0x790 [ 422.061612][ T9596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.061653][ T9596] RIP: 0033:0x7f840799f559 [ 422.061683][ T9596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.061722][ T9596] RSP: 002b:00007f84088b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 422.061761][ T9596] RAX: ffffffffffffffda RBX: 00007f8407c25fa0 RCX: 00007f840799f559 [ 422.061788][ T9596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 422.061813][ T9596] RBP: 00007f8407a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 422.061837][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.061862][ T9596] R13: 00007f8407c26038 R14: 00007f8407c25fa0 R15: 00007ffef96cae58 [ 422.061912][ T9596] [ 422.212725][ T5901] usb 5-1: USB disconnect, device number 25 [ 422.246252][ T5901] usblp1: removed [ 422.470862][ T9605] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1034'. [ 422.513941][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 422.565610][ T9606] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 422.603806][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 422.623839][ T5733] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 422.666887][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 422.666934][ T9] usb 8-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 422.670731][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.670772][ T9] usb 8-1: Product: syz [ 422.670799][ T9] usb 8-1: Manufacturer: syz [ 422.670821][ T9] usb 8-1: SerialNumber: syz [ 422.712517][ T5901] usb 7-1: USB disconnect, device number 17 [ 422.755270][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 422.755976][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 422.757296][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.757615][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.761387][ T10] usb 2-1: config 0 descriptor?? [ 422.771587][ T10] hub 2-1:0.0: USB hub found [ 422.776274][ T5733] usb 4-1: not running at top speed; connect to a high speed hub [ 422.776317][ T5733] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00 [ 422.778240][ T5733] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 422.778328][ T5733] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.778384][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.877854][ T5733] pcwd_usb: Problem registering interrupt URB [ 422.878009][ T5733] pcwd_usb 4-1:1.0: probe with driver pcwd_usb failed with error -5 [ 422.930672][ T9600] smpboot: CPU 1 is now offline [ 422.995411][ T9610] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 422.997418][ T10] hub 2-1:0.0: 1 port detected [ 423.062742][ T9] usb 8-1: failed waiting for Axe-Fx III to boot: -71 [ 423.062867][ T9] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 423.089752][ T5796] usb 4-1: USB disconnect, device number 32 [ 423.111775][ T9] usb 8-1: USB disconnect, device number 8 [ 423.376275][ T9612] loop6: detected capacity change from 0 to 4096 [ 423.377760][ T9612] EXT4-fs: Ignoring removed orlov option [ 423.382378][ T9612] EXT4-fs (loop6): Test dummy encryption mode enabled [ 423.409626][ T9612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.033779][ T9621] syzkaller1: entered promiscuous mode [ 424.033813][ T9621] syzkaller1: entered allmulticast mode [ 424.034281][ T9] usb 2-1: USB disconnect, device number 24 [ 424.252265][ T6868] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.454805][ T5769] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 424.632312][ T5769] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 424.634965][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.653848][ T5769] usb 5-1: config 0 descriptor?? [ 424.802614][ T9] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 424.901449][ T9633] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1043'. [ 425.019684][ T9635] FAULT_INJECTION: forcing a failure. [ 425.019684][ T9635] name failslab, interval 1, probability 0, space 0, times 0 [ 425.019741][ T9635] CPU: 1 UID: 0 PID: 9635 Comm: syz.1.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.019796][ T9635] Tainted: [L]=SOFTLOCKUP [ 425.019814][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 425.019838][ T9635] Call Trace: [ 425.019850][ T9635] [ 425.019866][ T9635] dump_stack_lvl+0x100/0x190 [ 425.019927][ T9635] should_fail_ex.cold+0x5/0xa [ 425.019971][ T9635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.020026][ T9635] should_failslab+0xc2/0x120 [ 425.020106][ T9635] __kmalloc_noprof+0xfc/0x840 [ 425.020148][ T9635] ? pneigh_create+0x183/0x510 [ 425.020196][ T9635] pneigh_create+0x183/0x510 [ 425.020244][ T9635] arp_ioctl+0xb7b/0xcb0 [ 425.020292][ T9635] ? __pfx_arp_ioctl+0x10/0x10 [ 425.020372][ T9635] inet_ioctl+0x1a4/0x3f0 [ 425.020440][ T9635] ? __pfx_inet_ioctl+0x10/0x10 [ 425.020503][ T9635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.020558][ T9635] ? lockdep_hardirqs_on+0x7d/0x110 [ 425.020600][ T9635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.020650][ T9635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.020715][ T9635] ? tomoyo_path_number_perm+0x188/0x580 [ 425.020771][ T9635] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 425.020831][ T9635] sock_do_ioctl+0x118/0x280 [ 425.020894][ T9635] ? __pfx_sock_do_ioctl+0x10/0x10 [ 425.020954][ T9635] ? __entry_text_end+0x102035/0x102039 [ 425.021001][ T9635] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.021060][ T9635] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 425.021139][ T9635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.021191][ T9635] ? irqentry_exit+0x2c9/0xa90 [ 425.021232][ T9635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.021287][ T9635] sock_ioctl+0x599/0x6b0 [ 425.021328][ T9635] ? __pfx_sock_ioctl+0x10/0x10 [ 425.021374][ T9635] ? security_file_ioctl+0x106/0x230 [ 425.021427][ T9635] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 425.021472][ T9635] ? __pfx_sock_ioctl+0x10/0x10 [ 425.021508][ T9635] __x64_sys_ioctl+0x18e/0x210 [ 425.021542][ T9635] do_syscall_64+0x123/0x790 [ 425.021583][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.021617][ T9635] RIP: 0033:0x7f840799f559 [ 425.021644][ T9635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.021676][ T9635] RSP: 002b:00007f84088b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.021709][ T9635] RAX: ffffffffffffffda RBX: 00007f8407c25fa0 RCX: 00007f840799f559 [ 425.021731][ T9635] RDX: 0000200000000240 RSI: 0000000000008955 RDI: 0000000000000003 [ 425.021752][ T9635] RBP: 00007f8407a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 425.021773][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.021793][ T9635] R13: 00007f8407c26038 R14: 00007f8407c25fa0 R15: 00007ffef96cae58 [ 425.021838][ T9635] [ 425.143070][ T5769] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 425.148188][ T5769] [drm:udl_init] *ERROR* Selecting channel failed [ 425.230078][ T5769] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 425.230116][ T5769] [drm] Initialized udl on minor 1 [ 425.246997][ T5769] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 425.247447][ T5769] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 425.271803][ T5767] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 425.272375][ T5769] usb 5-1: USB disconnect, device number 26 [ 425.273959][ T5767] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 425.274200][ T5767] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 425.425981][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 425.426029][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 425.472465][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.472510][ T9] usb 4-1: Product: syz [ 425.472538][ T9] usb 4-1: Manufacturer: syz [ 425.472565][ T9] usb 4-1: SerialNumber: syz [ 425.523843][ T5767] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 425.544627][ T9] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 425.562436][ T9] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 425.582678][ T9] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 425.597514][ T9] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 425.621104][ T9] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 425.694171][ T5767] usb 7-1: Using ep0 maxpacket: 8 [ 425.698166][ T5767] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 425.701899][ T5767] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 425.701941][ T5767] usb 7-1: config 0 has no interface number 0 [ 425.701994][ T5767] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.702033][ T5767] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 425.702076][ T5767] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 425.702122][ T5767] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 425.702171][ T5767] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.719365][ T5767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.719408][ T5767] usb 7-1: Product: syz [ 425.719434][ T5767] usb 7-1: Manufacturer: syz [ 425.719460][ T5767] usb 7-1: SerialNumber: syz [ 425.739469][ T5767] usb 7-1: config 0 descriptor?? [ 425.782676][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 426.069999][ T5767] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 426.285206][ T9647] loop4: detected capacity change from 0 to 256 [ 426.293992][ T9645] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1048'. [ 426.311991][ T9647] exfat: Deprecated parameter 'namecase' [ 426.312085][ T9647] exfat: Deprecated parameter 'namecase' [ 426.312178][ T9647] exfat: Deprecated parameter 'namecase' [ 426.387860][ T9647] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 426.427592][ T5769] usb 7-1: USB disconnect, device number 18 [ 426.563446][ C0] usb 4-1: malformed indat packet [ 426.653928][ T4934] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 427.095382][ T9655] loop4: detected capacity change from 0 to 64 [ 427.287781][ T30] audit: type=1804 audit(1792513418.476:16): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1051" name="/newroot/56/bus/bus" dev="loop4" ino=21 res=1 errno=0 [ 427.308774][ T30] audit: type=1800 audit(1792513418.486:17): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1051" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 427.383133][ T30] audit: type=1804 audit(1792513418.556:18): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1051" name="/newroot/56/bus/bus" dev="loop4" ino=21 res=1 errno=0 [ 427.473867][ T5733] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 427.628332][ T5733] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 427.628397][ T5733] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 427.630426][ T5733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.630524][ T5733] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.630575][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.633190][ T5733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.633254][ T5733] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.633331][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.659355][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1067'. [ 427.659455][ T9666] bridge_slave_1: left allmulticast mode [ 427.659485][ T9666] bridge_slave_1: left promiscuous mode [ 427.659746][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.673828][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 427.745047][ T5733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.745118][ T5733] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.745197][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.746588][ T5733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.746687][ T5733] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.746734][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.748030][ T5733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.748094][ T5733] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.748175][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.752901][ T5733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.752998][ T5733] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.753049][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.762948][ T9666] bridge_slave_0: left allmulticast mode [ 427.762985][ T9666] bridge_slave_0: left promiscuous mode [ 427.763263][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.822648][ T9670] loop7: detected capacity change from 0 to 512 [ 427.837712][ T9670] EXT4-fs error (device loop7): ext4_get_journal_inode:5937: comm syz.7.1057: inode #83886080: comm syz.7.1057: iget: illegal inode # [ 427.837764][ T9670] loop7: lost filesystem error report for type 5 error -117 [ 427.842068][ T9670] EXT4-fs (loop7): Remounting filesystem read-only [ 427.842104][ T9670] EXT4-fs (loop7): no journal found [ 427.842125][ T9670] EXT4-fs (loop7): can't get journal size [ 427.845413][ T5733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.845512][ T5733] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.845562][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.853690][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 427.853723][ C1] EXT4-fs (loop7): initial error at time 1792513419: ext4_get_journal_inode:5937 [ 427.853762][ C1] EXT4-fs (loop7): last error at time 1792513419: ext4_get_journal_inode:5937 [ 427.857941][ T9670] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 427.861978][ T9670] EXT4-fs (loop7): failed to initialize system zone (-22) [ 427.862165][ T9670] EXT4-fs (loop7): mount failed [ 427.874181][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 427.887418][ T5733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.887520][ T5733] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.887563][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.922835][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 427.922885][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 427.922960][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.982134][ T5733] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 427.982181][ T5733] usb 1-1: Product: syz [ 427.982207][ T5733] usb 1-1: Manufacturer: syz [ 427.982290][ T5733] usb 1-1: SerialNumber: syz [ 428.010114][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.010188][ T9] usb 2-1: Product: syz [ 428.010214][ T9] usb 2-1: Manufacturer: syz [ 428.010240][ T9] usb 2-1: SerialNumber: syz [ 428.148458][ T9668] loop4: detected capacity change from 0 to 4096 [ 428.150808][ T5733] usb 1-1: config 0 descriptor?? [ 428.152590][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 428.153209][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 428.463445][ T5733] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 428.486218][ T9] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 428.509486][ T5733] usb 1-1: USB disconnect, device number 24 [ 428.538813][ T5733] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 428.612157][ T5901] usb 4-1: USB disconnect, device number 33 [ 428.645697][ T5901] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 428.674775][ T5901] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 428.681701][ T5901] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 428.723361][ T5901] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 428.740808][ T5901] keyspan 4-1:1.0: device disconnected [ 429.090545][ T9680] loop0: detected capacity change from 0 to 256 [ 429.100359][ T9680] exfat: Deprecated parameter 'utf8' [ 429.124661][ T5769] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 429.168320][ T9680] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 429.191241][ T5901] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 429.233181][ T30] audit: type=1800 audit(1792513420.416:19): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1062" name="file1" dev="loop0" ino=1048797 res=0 errno=0 [ 429.255617][ T5733] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 429.354480][ T5901] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.356034][ T5901] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.356110][ T5901] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 429.359640][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.359681][ T5901] usb 7-1: Product: syz [ 429.359709][ T5901] usb 7-1: Manufacturer: syz [ 429.359736][ T5901] usb 7-1: SerialNumber: syz [ 429.449157][ T5733] usb 5-1: unable to get BOS descriptor or descriptor too short [ 429.449221][ T5733] usb 5-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 429.449310][ T5733] usb 5-1: no configurations [ 429.449334][ T5733] usb 5-1: can't read configurations, error -22 [ 429.645279][ T9676] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 429.647449][ T5769] usb 2-1: USB disconnect, device number 25 [ 429.656059][ T5769] usblp1: removed [ 430.079339][ T9693] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1066'. [ 430.392193][ T9676] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 430.638085][ T5901] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 430.638122][ T5901] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 430.638148][ T5901] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 430.884173][ T5901] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 434.140129][ T5901] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 434.148575][ T5901] usb 7-1: USB disconnect, device number 19 [ 434.150733][ T5901] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 434.394830][ T9713] FAULT_INJECTION: forcing a failure. [ 434.394830][ T9713] name failslab, interval 1, probability 0, space 0, times 0 [ 434.394918][ T9713] CPU: 0 UID: 0 PID: 9713 Comm: syz.0.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.394973][ T9713] Tainted: [L]=SOFTLOCKUP [ 434.394988][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 434.395011][ T9713] Call Trace: [ 434.395024][ T9713] [ 434.395039][ T9713] dump_stack_lvl+0x100/0x190 [ 434.395108][ T9713] should_fail_ex.cold+0x5/0xa [ 434.395152][ T9713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.395203][ T9713] should_failslab+0xc2/0x120 [ 434.395250][ T9713] __kmalloc_cache_noprof+0x91/0x6d0 [ 434.395316][ T9713] ? alloc_tty_struct+0x96/0x8e0 [ 434.395375][ T9713] alloc_tty_struct+0x96/0x8e0 [ 434.395420][ T9713] ? __kasan_kmalloc+0xaa/0xb0 [ 434.395463][ T9713] ? __pfx_alloc_tty_struct+0x10/0x10 [ 434.395511][ T9713] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 434.395571][ T9713] ? pty_common_install+0x10e/0xb30 [ 434.395646][ T9713] pty_common_install+0x1c7/0xb30 [ 434.395718][ T9713] ? __pfx_pty_unix98_install+0x10/0x10 [ 434.395786][ T9713] tty_init_dev.part.0+0x9e/0x470 [ 434.395841][ T9713] tty_init_dev+0x60/0x80 [ 434.395895][ T9713] ? __pfx_ptmx_open+0x10/0x10 [ 434.395954][ T9713] ptmx_open+0x128/0x360 [ 434.396016][ T9713] ? __pfx_ptmx_open+0x10/0x10 [ 434.396077][ T9713] chrdev_open+0x234/0x6a0 [ 434.396130][ T9713] ? __pfx_apparmor_file_open+0x10/0x10 [ 434.396187][ T9713] ? __pfx_chrdev_open+0x10/0x10 [ 434.396235][ T9713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.396283][ T9713] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 434.396358][ T9713] do_dentry_open+0x674/0x1470 [ 434.396397][ T9713] ? __pfx_chrdev_open+0x10/0x10 [ 434.396444][ T9713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.396498][ T9713] vfs_open_consume+0xcc/0x460 [ 434.396549][ T9713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.396604][ T9713] path_openat+0x1551/0x2430 [ 434.396662][ T9713] ? __pfx_path_openat+0x10/0x10 [ 434.396726][ T9713] do_file_open+0x20e/0x430 [ 434.396778][ T9713] ? __pfx_do_file_open+0x10/0x10 [ 434.396863][ T9713] ? _raw_spin_unlock+0x28/0x50 [ 434.396925][ T9713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.396971][ T9713] ? alloc_fd+0x471/0x7a0 [ 434.397036][ T9713] do_sys_openat2+0x163/0x1d0 [ 434.397095][ T9713] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.397150][ T9713] ? lock_acquire+0x1d1/0x380 [ 434.397191][ T9713] ? fd_install+0xa2/0x580 [ 434.397249][ T9713] __x64_sys_openat+0x12d/0x210 [ 434.397304][ T9713] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.397368][ T9713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.397424][ T9713] do_syscall_64+0x123/0x790 [ 434.397472][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.397513][ T9713] RIP: 0033:0x7fb11bd9f559 [ 434.397544][ T9713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.397583][ T9713] RSP: 002b:00007fb11cc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.397620][ T9713] RAX: ffffffffffffffda RBX: 00007fb11c025fa0 RCX: 00007fb11bd9f559 [ 434.397647][ T9713] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 434.397672][ T9713] RBP: 00007fb11be36b20 R08: 0000000000000000 R09: 0000000000000000 [ 434.397697][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.397722][ T9713] R13: 00007fb11c026038 R14: 00007fb11c025fa0 R15: 00007ffc8a55a428 [ 434.397774][ T9713] [ 434.410268][ T9714] loop4: detected capacity change from 0 to 256 [ 434.419541][ T9714] exfat: Deprecated parameter 'utf8' [ 434.419625][ T9714] exfat: Deprecated parameter 'namecase' [ 434.419704][ T9714] exfat: Deprecated parameter 'namecase' [ 434.527575][ T9714] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 434.922030][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1077'. [ 435.013817][ T5817] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 435.174564][ T5817] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 435.175794][ T5817] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 435.175880][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.175916][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.175946][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 435.177263][ T5817] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 435.177302][ T5817] usb 2-1: Manufacturer: syz [ 435.182543][ T5817] usb 2-1: config 0 descriptor?? [ 436.280208][ T9726] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1078'. [ 436.299715][ T5817] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 436.327934][ T5817] appleir 0003:05AC:8243.0020: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 436.347777][ T9728] capability: warning: `syz.0.1076' uses deprecated v2 capabilities in a way that may be insecure [ 436.361435][ T9728] loop0: detected capacity change from 0 to 512 [ 436.418217][ T9728] EXT4-fs error (device loop0): ext4_validate_block_bitmap:435: comm syz.0.1076: bg 0: block 5: invalid block bitmap [ 436.418281][ T9728] loop0: lost filesystem error report for type 5 error -117 [ 436.423720][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 436.423750][ C0] EXT4-fs (loop0): initial error at time 1792513427: ext4_validate_block_bitmap:435 [ 436.423791][ C0] EXT4-fs (loop0): last error at time 1792513427: ext4_validate_block_bitmap:435 [ 436.425424][ T9728] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 436.425455][ T9728] loop0: lost filesystem error report for type 5 error -117 [ 436.466248][ T9728] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.1076: invalid indirect mapped block 3 (level 2) [ 436.466308][ T9728] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 436.480666][ T9728] EXT4-fs (loop0): 1 orphan inode deleted [ 436.480700][ T9728] EXT4-fs (loop0): 1 truncate cleaned up [ 436.491178][ T9728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.594433][ T9732] FAULT_INJECTION: forcing a failure. [ 436.594433][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 436.594489][ T9732] CPU: 0 UID: 0 PID: 9732 Comm: syz.7.1080 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.594543][ T9732] Tainted: [L]=SOFTLOCKUP [ 436.594557][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 436.594581][ T9732] Call Trace: [ 436.594593][ T9732] [ 436.594608][ T9732] dump_stack_lvl+0x100/0x190 [ 436.594671][ T9732] should_fail_ex.cold+0x5/0xa [ 436.594715][ T9732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.594769][ T9732] should_failslab+0xc2/0x120 [ 436.594817][ T9732] __kmalloc_cache_noprof+0x91/0x6d0 [ 436.594879][ T9732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.594930][ T9732] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 436.595002][ T9732] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 436.595064][ T9732] ? trace_contention_end+0x126/0x160 [ 436.595113][ T9732] ? __mutex_lock+0x26c/0x1c20 [ 436.595157][ T9732] ? snd_pcm_oss_make_ready+0xcb/0x1b0 [ 436.595218][ T9732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.595271][ T9732] ? find_held_lock+0x2b/0x80 [ 436.595328][ T9732] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 436.595388][ T9732] ? __pfx___mutex_lock+0x10/0x10 [ 436.595429][ T9732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.595478][ T9732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.595536][ T9732] ? __fsnotify_parent+0x2b4/0xd00 [ 436.595595][ T9732] ? __pfx_futex_wait+0x10/0x10 [ 436.595647][ T9732] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 436.595710][ T9732] snd_pcm_oss_sync+0x1de/0x840 [ 436.595776][ T9732] snd_pcm_oss_release+0x238/0x300 [ 436.595836][ T9732] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 436.595895][ T9732] __fput+0x400/0xb60 [ 436.595959][ T9732] fput_close_sync+0x118/0x250 [ 436.596013][ T9732] ? __pfx_fput_close_sync+0x10/0x10 [ 436.596080][ T9732] filp_close_sync+0x75/0xa0 [ 436.596135][ T9732] __x64_sys_close+0x81/0x110 [ 436.596190][ T9732] do_syscall_64+0x123/0x790 [ 436.596237][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.596281][ T9732] RIP: 0033:0x7f6dae59f559 [ 436.596310][ T9732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.596348][ T9732] RSP: 002b:00007f6daf442028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 436.596385][ T9732] RAX: ffffffffffffffda RBX: 00007f6dae825fa0 RCX: 00007f6dae59f559 [ 436.596411][ T9732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 436.596435][ T9732] RBP: 00007f6dae636b20 R08: 0000000000000000 R09: 0000000000000000 [ 436.596459][ T9732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.596482][ T9732] R13: 00007f6dae826038 R14: 00007f6dae825fa0 R15: 00007fffc01a1278 [ 436.596534][ T9732] [ 436.947022][ T5817] usb 2-1: USB disconnect, device number 26 [ 437.026175][ T9738] FAULT_INJECTION: forcing a failure. [ 437.026175][ T9738] name failslab, interval 1, probability 0, space 0, times 0 [ 437.026232][ T9738] CPU: 1 UID: 0 PID: 9738 Comm: syz.6.1084 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.026291][ T9738] Tainted: [L]=SOFTLOCKUP [ 437.026307][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 437.026332][ T9738] Call Trace: [ 437.026346][ T9738] [ 437.026362][ T9738] dump_stack_lvl+0x100/0x190 [ 437.026429][ T9738] should_fail_ex.cold+0x5/0xa [ 437.026477][ T9738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.026538][ T9738] should_failslab+0xc2/0x120 [ 437.026596][ T9738] __kmalloc_cache_noprof+0x91/0x6d0 [ 437.026662][ T9738] ? alloc_netdev_mqs+0xea8/0x15c0 [ 437.026731][ T9738] alloc_netdev_mqs+0xea8/0x15c0 [ 437.026799][ T9738] vlan_ioctl_handler+0x724/0xa70 [ 437.026852][ T9738] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 437.026915][ T9738] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 437.026990][ T9738] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 437.027039][ T9738] sock_ioctl+0x5e9/0x6b0 [ 437.027079][ T9738] ? __pfx_sock_ioctl+0x10/0x10 [ 437.027125][ T9738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.027173][ T9738] ? __fget_files+0x21f/0x3d0 [ 437.027230][ T9738] ? __pfx_sock_ioctl+0x10/0x10 [ 437.027270][ T9738] __x64_sys_ioctl+0x18e/0x210 [ 437.027312][ T9738] do_syscall_64+0x123/0x790 [ 437.027361][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.027401][ T9738] RIP: 0033:0x7f80f759f559 [ 437.027432][ T9738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.027471][ T9738] RSP: 002b:00007f80f842f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.027509][ T9738] RAX: ffffffffffffffda RBX: 00007f80f7825fa0 RCX: 00007f80f759f559 [ 437.027536][ T9738] RDX: 0000200000000000 RSI: 0000000000008983 RDI: 0000000000000004 [ 437.027561][ T9738] RBP: 00007f80f7636b20 R08: 0000000000000000 R09: 0000000000000000 [ 437.027586][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.027611][ T9738] R13: 00007f80f7826038 R14: 00007f80f7825fa0 R15: 00007fff61dffcc8 [ 437.027664][ T9738] [ 437.270142][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.553252][ T9747] FAULT_INJECTION: forcing a failure. [ 437.553252][ T9747] name fail_futex, interval 1, probability 0, space 0, times 0 [ 437.553318][ T9747] CPU: 0 UID: 0 PID: 9747 Comm: syz.0.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.553375][ T9747] Tainted: [L]=SOFTLOCKUP [ 437.553390][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 437.553413][ T9747] Call Trace: [ 437.553426][ T9747] [ 437.553441][ T9747] dump_stack_lvl+0x100/0x190 [ 437.553504][ T9747] should_fail_ex.cold+0x5/0xa [ 437.553557][ T9747] get_futex_key+0x1c9/0x13e0 [ 437.553617][ T9747] ? __pfx_get_futex_key+0x10/0x10 [ 437.553687][ T9747] futex_wake+0xf4/0x5e0 [ 437.553753][ T9747] ? lockdep_hardirqs_on+0x7d/0x110 [ 437.553796][ T9747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.553848][ T9747] ? __pfx_futex_wake+0x10/0x10 [ 437.553918][ T9747] ? lock_acquire+0x1d1/0x380 [ 437.553966][ T9747] ? __might_fault+0xc5/0x140 [ 437.554022][ T9747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.554070][ T9747] ? find_held_lock+0x2b/0x80 [ 437.554135][ T9747] do_futex+0x2b2/0x440 [ 437.554193][ T9747] ? __pfx_do_futex+0x10/0x10 [ 437.554254][ T9747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.554307][ T9747] ? security_getselfattr+0x3bf/0x500 [ 437.554358][ T9747] __x64_sys_futex+0x34f/0x4d0 [ 437.554418][ T9747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.554469][ T9747] ? __pfx___x64_sys_futex+0x10/0x10 [ 437.554537][ T9747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.554595][ T9747] do_syscall_64+0x123/0x790 [ 437.554643][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.554684][ T9747] RIP: 0033:0x7fb11bd9f559 [ 437.554714][ T9747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.554753][ T9747] RSP: 002b:00007fb11cc230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 437.554790][ T9747] RAX: ffffffffffffffda RBX: 00007fb11c025fa8 RCX: 00007fb11bd9f559 [ 437.554816][ T9747] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb11c025fac [ 437.554842][ T9747] RBP: 00007fb11c025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 437.554866][ T9747] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 437.554891][ T9747] R13: 00007fb11c026038 R14: 00007ffc8a55a340 R15: 00007ffc8a55a428 [ 437.554945][ T9747] [ 437.812511][ T9749] FAULT_INJECTION: forcing a failure. [ 437.812511][ T9749] name failslab, interval 1, probability 0, space 0, times 0 [ 437.812571][ T9749] CPU: 1 UID: 0 PID: 9749 Comm: syz.1.1087 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.812630][ T9749] Tainted: [L]=SOFTLOCKUP [ 437.812645][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 437.812670][ T9749] Call Trace: [ 437.812683][ T9749] [ 437.812699][ T9749] dump_stack_lvl+0x100/0x190 [ 437.812774][ T9749] should_fail_ex.cold+0x5/0xa [ 437.812822][ T9749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.812881][ T9749] should_failslab+0xc2/0x120 [ 437.812933][ T9749] __kmalloc_cache_noprof+0x91/0x6d0 [ 437.812998][ T9749] ? sw_sync_debugfs_open+0x177/0x3d0 [ 437.813065][ T9749] sw_sync_debugfs_open+0x177/0x3d0 [ 437.813123][ T9749] ? __debugfs_file_get+0x1fc/0x860 [ 437.813181][ T9749] ? __pfx_sw_sync_debugfs_open+0x10/0x10 [ 437.813238][ T9749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.813288][ T9749] ? lockdown_is_locked_down+0x3d/0x140 [ 437.813330][ T9749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.813380][ T9749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.813436][ T9749] ? __pfx_sw_sync_debugfs_open+0x10/0x10 [ 437.813492][ T9749] open_proxy_open+0x220/0x330 [ 437.813559][ T9749] do_dentry_open+0x674/0x1470 [ 437.813601][ T9749] ? __pfx_open_proxy_open+0x10/0x10 [ 437.813670][ T9749] vfs_open_consume+0xcc/0x460 [ 437.813724][ T9749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.813788][ T9749] path_openat+0x1551/0x2430 [ 437.813850][ T9749] ? __pfx_path_openat+0x10/0x10 [ 437.813916][ T9749] do_file_open+0x20e/0x430 [ 437.813972][ T9749] ? __pfx_do_file_open+0x10/0x10 [ 437.814061][ T9749] ? _raw_spin_unlock+0x28/0x50 [ 437.814125][ T9749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.814175][ T9749] ? alloc_fd+0x471/0x7a0 [ 437.814243][ T9749] do_sys_openat2+0x163/0x1d0 [ 437.814299][ T9749] ? __pfx_do_sys_openat2+0x10/0x10 [ 437.814358][ T9749] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 437.814422][ T9749] __x64_sys_openat+0x12d/0x210 [ 437.814480][ T9749] ? __pfx___x64_sys_openat+0x10/0x10 [ 437.814547][ T9749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.814606][ T9749] do_syscall_64+0x123/0x790 [ 437.814657][ T9749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.814699][ T9749] RIP: 0033:0x7f840799f559 [ 437.814732][ T9749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.814779][ T9749] RSP: 002b:00007f84088b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 437.814818][ T9749] RAX: ffffffffffffffda RBX: 00007f8407c25fa0 RCX: 00007f840799f559 [ 437.814846][ T9749] RDX: 00000000000c8c00 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 437.814876][ T9749] RBP: 00007f8407a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 437.814903][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.814930][ T9749] R13: 00007f8407c26038 R14: 00007f8407c25fa0 R15: 00007ffef96cae58 [ 437.814987][ T9749] [ 437.998918][ T9753] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 438.346273][ T9763] FAULT_INJECTION: forcing a failure. [ 438.346273][ T9763] name failslab, interval 1, probability 0, space 0, times 0 [ 438.346333][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.1.1090 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.346392][ T9763] Tainted: [L]=SOFTLOCKUP [ 438.346408][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 438.346435][ T9763] Call Trace: [ 438.346449][ T9763] [ 438.346465][ T9763] dump_stack_lvl+0x100/0x190 [ 438.346531][ T9763] should_fail_ex.cold+0x5/0xa [ 438.346578][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.346641][ T9763] should_failslab+0xc2/0x120 [ 438.346694][ T9763] __kmalloc_cache_noprof+0x91/0x6d0 [ 438.346756][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.346815][ T9763] ? device_create_groups_vargs+0x8a/0x270 [ 438.346888][ T9763] device_create_groups_vargs+0x8a/0x270 [ 438.346956][ T9763] device_create+0xed/0x130 [ 438.347017][ T9763] ? __pfx_device_create+0x10/0x10 [ 438.347084][ T9763] ? __pfx_vsnprintf+0x10/0x10 [ 438.347129][ T9763] ? __pfx___debug_object_init+0x10/0x10 [ 438.347178][ T9763] ? mark_held_locks+0x40/0x70 [ 438.347235][ T9763] bdi_register_va+0x114/0x820 [ 438.347281][ T9763] ? __pfx_bdi_register_va+0x10/0x10 [ 438.347324][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.347374][ T9763] ? lockdep_init_map_type+0x5c/0x250 [ 438.347423][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.347473][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.347532][ T9763] super_setup_bdi_name+0xff/0x250 [ 438.347596][ T9763] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 438.347663][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.347718][ T9763] ? do_raw_spin_unlock+0x145/0x1e0 [ 438.347779][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.347829][ T9763] ? _raw_spin_unlock+0x28/0x50 [ 438.347891][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.347956][ T9763] v9fs_get_tree+0x33f/0xb50 [ 438.347999][ T9763] ? __pfx_v9fs_get_tree+0x10/0x10 [ 438.348042][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.348091][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.348141][ T9763] ? security_capable+0x80/0x260 [ 438.348187][ T9763] vfs_get_tree+0x92/0x320 [ 438.348243][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.348296][ T9763] path_mount+0x7d0/0x2850 [ 438.348367][ T9763] ? __pfx_path_mount+0x10/0x10 [ 438.348425][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.348474][ T9763] ? lockdep_hardirqs_on+0x7d/0x110 [ 438.348524][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.348573][ T9763] ? kmem_cache_free+0x127/0x6c0 [ 438.348653][ T9763] ? __x64_sys_mount+0x293/0x310 [ 438.348712][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.348767][ T9763] __x64_sys_mount+0x293/0x310 [ 438.348830][ T9763] ? __pfx___x64_sys_mount+0x10/0x10 [ 438.348899][ T9763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.348957][ T9763] do_syscall_64+0x123/0x790 [ 438.349007][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.349050][ T9763] RIP: 0033:0x7f840799f559 [ 438.349083][ T9763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.349123][ T9763] RSP: 002b:00007f84088b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 438.349164][ T9763] RAX: ffffffffffffffda RBX: 00007f8407c25fa0 RCX: 00007f840799f559 [ 438.349193][ T9763] RDX: 0000200000000600 RSI: 00002000000005c0 RDI: 0000000000000000 [ 438.349220][ T9763] RBP: 00007f8407a36b20 R08: 0000200000000640 R09: 0000000000000000 [ 438.349247][ T9763] R10: 0000000002204c83 R11: 0000000000000246 R12: 0000000000000000 [ 438.349273][ T9763] R13: 00007f8407c26038 R14: 00007f8407c25fa0 R15: 00007ffef96cae58 [ 438.349328][ T9763] [ 438.753550][ T9767] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1093'. [ 438.798260][ T9745] loop4: detected capacity change from 0 to 32768 [ 438.813197][ T9745] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1081 (9745) [ 438.857580][ T9745] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 438.857645][ T9745] BTRFS info (device loop4): using blake2b checksum algorithm [ 438.952798][ T9745] BTRFS info (device loop4): enabling ssd optimizations [ 438.952850][ T9745] BTRFS info (device loop4): turning on async discard [ 438.952886][ T9745] BTRFS info (device loop4): enabling free space tree [ 439.150649][ T9760] loop6: detected capacity change from 0 to 32768 [ 439.196599][ T9760] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 439.240058][ T9760] XFS (loop6): Ending clean mount [ 439.363007][ T9798] bond0: invalid ARP target specified [ 439.383439][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.383522][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.594540][ T6868] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 439.652573][ T9806] FAULT_INJECTION: forcing a failure. [ 439.652573][ T9806] name failslab, interval 1, probability 0, space 0, times 0 [ 439.652638][ T9806] CPU: 0 UID: 0 PID: 9806 Comm: syz.0.1099 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.652691][ T9806] Tainted: [L]=SOFTLOCKUP [ 439.652706][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 439.652730][ T9806] Call Trace: [ 439.652743][ T9806] [ 439.652759][ T9806] dump_stack_lvl+0x100/0x190 [ 439.652820][ T9806] should_fail_ex.cold+0x5/0xa [ 439.652865][ T9806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.652922][ T9806] should_failslab+0xc2/0x120 [ 439.652970][ T9806] __kmalloc_noprof+0xfc/0x840 [ 439.653012][ T9806] ? load_msg+0x118/0x4a0 [ 439.653076][ T9806] load_msg+0x118/0x4a0 [ 439.653138][ T9806] do_msgsnd+0x1ad/0x17f0 [ 439.653206][ T9806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.653270][ T9806] ? __pfx_do_msgsnd+0x10/0x10 [ 439.653334][ T9806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.653383][ T9806] ? find_held_lock+0x2b/0x80 [ 439.653452][ T9806] ? __might_fault+0xc5/0x140 [ 439.653522][ T9806] ? __might_fault+0xc5/0x140 [ 439.653577][ T9806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.653654][ T9806] ? __x64_sys_msgsnd+0xe5/0x130 [ 439.653715][ T9806] __x64_sys_msgsnd+0xe5/0x130 [ 439.653782][ T9806] do_syscall_64+0x123/0x790 [ 439.653831][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.653873][ T9806] RIP: 0033:0x7fb11bd9f559 [ 439.653905][ T9806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.653945][ T9806] RSP: 002b:00007fb11cc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 439.653984][ T9806] RAX: ffffffffffffffda RBX: 00007fb11c025fa0 RCX: 00007fb11bd9f559 [ 439.654011][ T9806] RDX: 0000000000002000 RSI: 0000200000000180 RDI: 0000000000000000 [ 439.654037][ T9806] RBP: 00007fb11be36b20 R08: 0000000000000000 R09: 0000000000000000 [ 439.654064][ T9806] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 439.654090][ T9806] R13: 00007fb11c026038 R14: 00007fb11c025fa0 R15: 00007ffc8a55a428 [ 439.654144][ T9806] [ 440.070482][ T7949] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 440.124423][ T9812] FAULT_INJECTION: forcing a failure. [ 440.124423][ T9812] name failslab, interval 1, probability 0, space 0, times 0 [ 440.124481][ T9812] CPU: 1 UID: 0 PID: 9812 Comm: syz.6.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.124538][ T9812] Tainted: [L]=SOFTLOCKUP [ 440.124553][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 440.124588][ T9812] Call Trace: [ 440.124601][ T9812] [ 440.124617][ T9812] dump_stack_lvl+0x100/0x190 [ 440.124685][ T9812] should_fail_ex.cold+0x5/0xa [ 440.124730][ T9812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.124788][ T9812] should_failslab+0xc2/0x120 [ 440.124838][ T9812] __kmalloc_node_noprof+0xff/0x880 [ 440.124887][ T9812] ? load_msg+0x43/0x4a0 [ 440.124951][ T9812] load_msg+0x43/0x4a0 [ 440.125013][ T9812] do_msgrcv+0x209/0x1760 [ 440.125073][ T9812] ? __pfx_do_msg_fill+0x10/0x10 [ 440.125135][ T9812] ? strncpy_from_user+0x19d/0x2d0 [ 440.125187][ T9812] ? __pfx_do_msgrcv+0x10/0x10 [ 440.125244][ T9812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.125303][ T9812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.125351][ T9812] ? xfd_validate_state+0x129/0x190 [ 440.125410][ T9812] ? do_syscall_64+0x123/0x790 [ 440.125454][ T9812] do_syscall_64+0x123/0x790 [ 440.125502][ T9812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.125545][ T9812] RIP: 0033:0x7f80f759f559 [ 440.125583][ T9812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.125624][ T9812] RSP: 002b:00007f80f842f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 440.125664][ T9812] RAX: ffffffffffffffda RBX: 00007f80f7825fa0 RCX: 00007f80f759f559 [ 440.125692][ T9812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.125718][ T9812] RBP: 00007f80f7636b20 R08: 0000000000004800 R09: 0000000000000000 [ 440.125744][ T9812] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 440.125770][ T9812] R13: 00007f80f7826038 R14: 00007f80f7825fa0 R15: 00007fff61dffcc8 [ 440.125824][ T9812] [ 440.465708][ T9817] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1104'. [ 441.024872][ T9823] loop1: detected capacity change from 0 to 40427 [ 441.026433][ T9823] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 441.026468][ T9823] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 441.085021][ T5630] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 441.169405][ T9823] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 441.179088][ T9823] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 441.179127][ T9823] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 441.253796][ T5630] usb 7-1: Using ep0 maxpacket: 16 [ 441.259213][ T5630] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 441.262283][ T5630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.279525][ T5630] usb 7-1: config 0 descriptor?? [ 441.316365][ T5767] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 441.321410][ T5630] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 441.848557][ T9823] syz.1.1107: attempt to access beyond end of device [ 441.848557][ T9823] loop1: rw=2049, sector=45096, nr_sectors = 4984 limit=40427 [ 441.876534][ T9823] syz.1.1107: attempt to access beyond end of device [ 441.876534][ T9823] loop1: rw=2049, sector=50080, nr_sectors = 3168 limit=40427 [ 441.879522][ T9823] syz.1.1107: attempt to access beyond end of device [ 441.879522][ T9823] loop1: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 441.938587][ T9823] syz.1.1107: attempt to access beyond end of device [ 441.938587][ T9823] loop1: rw=2049, sector=57344, nr_sectors = 8488 limit=40427 [ 441.960536][ T9823] syz.1.1107: attempt to access beyond end of device [ 441.960536][ T9823] loop1: rw=2049, sector=65832, nr_sectors = 2048 limit=40427 [ 442.004958][ T9823] syz.1.1107: attempt to access beyond end of device [ 442.004958][ T9823] loop1: rw=2049, sector=67880, nr_sectors = 5848 limit=40427 [ 442.013349][ T9823] syz.1.1107: attempt to access beyond end of device [ 442.013349][ T9823] loop1: rw=2049, sector=73728, nr_sectors = 8 limit=40427 [ 442.013627][ T9823] syz.1.1107: attempt to access beyond end of device [ 442.013627][ T9823] loop1: rw=2049, sector=73736, nr_sectors = 8 limit=40427 [ 442.013939][ T9823] syz.1.1107: attempt to access beyond end of device [ 442.013939][ T9823] loop1: rw=2049, sector=73744, nr_sectors = 8 limit=40427 [ 442.014207][ T9823] syz.1.1107: attempt to access beyond end of device [ 442.014207][ T9823] loop1: rw=2049, sector=73752, nr_sectors = 8 limit=40427 [ 442.453787][ T5767] usb 8-1: Using ep0 maxpacket: 16 [ 442.454816][ T5767] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 442.456614][ T5767] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 442.456698][ T5767] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 442.460199][ T5767] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.460274][ T5767] usb 8-1: Product: syz [ 442.460304][ T5767] usb 8-1: Manufacturer: syz [ 442.460333][ T5767] usb 8-1: SerialNumber: syz [ 442.532653][ T5767] usb 8-1: config 0 descriptor?? [ 442.570339][ T5767] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 442.570428][ T5767] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 442.778455][ T9836] loop4: detected capacity change from 0 to 131072 [ 442.799177][ T9836] F2FS-fs (loop4): invalid crc value [ 442.890763][ T9836] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 442.908677][ T9836] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 442.920668][ T9836] F2FS-fs (loop4): access invalid blkaddr:36 [ 442.920713][ T9836] CPU: 0 UID: 0 PID: 9836 Comm: syz.4.1109 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.920768][ T9836] Tainted: [L]=SOFTLOCKUP [ 442.920783][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 442.920807][ T9836] Call Trace: [ 442.920821][ T9836] [ 442.920840][ T9836] dump_stack_lvl+0x100/0x190 [ 442.920902][ T9836] __f2fs_is_valid_blkaddr+0xad0/0x13c0 [ 442.920974][ T9836] ? f2fs_get_read_data_folio+0x971/0xff0 [ 442.921018][ T9836] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 442.921061][ T9836] ? f2fs_put_dnode+0x1ce/0x3f0 [ 442.921133][ T9836] f2fs_get_read_data_folio+0x971/0xff0 [ 442.921193][ T9836] ? __pfx_f2fs_get_read_data_folio+0x10/0x10 [ 442.921246][ T9836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.921294][ T9836] ? __filemap_get_folio_mpol+0x369/0x1280 [ 442.921362][ T9836] f2fs_find_data_folio+0x2e4/0x7c0 [ 442.921406][ T9836] ? f2fs_empty_dir+0x15d/0x3c0 [ 442.921449][ T9836] ? vfs_rmdir+0xed/0x8a0 [ 442.921515][ T9836] f2fs_empty_dir+0x15d/0x3c0 [ 442.921565][ T9836] ? __pfx_f2fs_empty_dir+0x10/0x10 [ 442.921610][ T9836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.921657][ T9836] ? down_write+0x146/0x1f0 [ 442.921706][ T9836] ? __pfx_down_write+0x10/0x10 [ 442.921750][ T9836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.921806][ T9836] f2fs_rmdir+0x37/0x80 [ 442.921844][ T9836] vfs_rmdir+0x328/0x8a0 [ 442.921911][ T9836] filename_rmdir+0x31a/0x5c0 [ 442.921967][ T9836] ? __pfx_filename_rmdir+0x10/0x10 [ 442.922037][ T9836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.922091][ T9836] ? do_getname+0x191/0x390 [ 442.922153][ T9836] __x64_sys_unlinkat+0xf5/0x130 [ 442.922210][ T9836] do_syscall_64+0x123/0x790 [ 442.922259][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.922299][ T9836] RIP: 0033:0x7faed619f559 [ 442.922331][ T9836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.922375][ T9836] RSP: 002b:00007faed702e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 442.922414][ T9836] RAX: ffffffffffffffda RBX: 00007faed6425fa0 RCX: 00007faed619f559 [ 442.922441][ T9836] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 442.922468][ T9836] RBP: 00007faed6236b20 R08: 0000000000000000 R09: 0000000000000000 [ 442.922492][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.922516][ T9836] R13: 00007faed6426038 R14: 00007faed6425fa0 R15: 00007ffee745b7c8 [ 442.922570][ T9836] [ 443.072950][ T5630] gspca_sonixj: reg_w1 err -71 [ 443.100533][ T5630] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 443.232700][ T5630] usb 7-1: USB disconnect, device number 20 [ 443.261729][ T5622] CPU: 1 UID: 0 PID: 5622 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 443.261791][ T5622] Tainted: [L]=SOFTLOCKUP [ 443.261805][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 443.261830][ T5622] Call Trace: [ 443.261846][ T5622] [ 443.261862][ T5622] dump_stack_lvl+0x100/0x190 [ 443.261923][ T5622] f2fs_stop_checkpoint+0x5e6/0xb30 [ 443.261985][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.262033][ T5622] ? errseq_set+0xe3/0x150 [ 443.262074][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.262134][ T5622] f2fs_write_end_bio+0xef9/0x12d0 [ 443.262205][ T5622] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 443.262269][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.262323][ T5622] ? find_held_lock+0x2b/0x80 [ 443.262380][ T5622] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 443.262430][ T5622] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 443.262479][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.262535][ T5622] f2fs_write_end_io+0xc8/0x240 [ 443.262596][ T5622] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 443.262661][ T5622] bio_endio+0x7ba/0x9c0 [ 443.262714][ T5622] submit_bio_noacct+0x22a/0x2130 [ 443.262765][ T5622] f2fs_submit_write_bio+0x133/0x330 [ 443.262827][ T5622] __submit_merged_bio+0x330/0x7b0 [ 443.262864][ T5622] ? rcu_is_watching+0x13/0xc0 [ 443.262926][ T5622] __submit_merged_write_cond+0x3fe/0x510 [ 443.262975][ T5622] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 443.263035][ T5622] ? __pfx___might_resched+0x10/0x10 [ 443.263104][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.263151][ T5622] ? folio_clear_dirty_for_io+0x178/0x960 [ 443.263221][ T5622] f2fs_sync_node_pages+0x13c6/0x1690 [ 443.263302][ T5622] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 443.263361][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.263408][ T5622] ? __lock_acquire+0xe8b/0x1f40 [ 443.263499][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.263547][ T5622] ? down_write+0x146/0x1f0 [ 443.263596][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.263646][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.263693][ T5622] ? up_write+0x2dc/0x5b0 [ 443.263746][ T5622] block_operations+0x938/0xfc0 [ 443.263803][ T5622] ? __pfx_block_operations+0x10/0x10 [ 443.263907][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.263957][ T5622] ? ktime_get+0x22c/0x320 [ 443.264002][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.264054][ T5622] ? rcu_is_watching+0x13/0xc0 [ 443.264129][ T5622] f2fs_write_checkpoint+0x58b/0x53e0 [ 443.264181][ T5622] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.264244][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.264291][ T5622] ? _raw_spin_unlock_irq+0x2e/0x50 [ 443.264351][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.264398][ T5622] ? __wait_for_common+0x1f7/0x510 [ 443.264438][ T5622] ? __pfx_schedule_timeout+0x10/0x10 [ 443.264504][ T5622] ? __pfx___wait_for_common+0x10/0x10 [ 443.264548][ T5622] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 443.264604][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.264650][ T5622] ? mark_held_locks+0x40/0x70 [ 443.264698][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.264744][ T5622] ? rcu_is_watching+0x13/0xc0 [ 443.264795][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.264840][ T5622] ? kthread_stop+0x280/0x630 [ 443.264896][ T5622] kill_f2fs_super+0x3f1/0x4a0 [ 443.264944][ T5622] ? __pfx_kill_f2fs_super+0x10/0x10 [ 443.265011][ T5622] ? lockdep_hardirqs_on+0x7d/0x110 [ 443.265051][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.265106][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.265168][ T5622] deactivate_locked_super+0xbd/0x130 [ 443.265234][ T5622] deactivate_super+0xea/0x110 [ 443.265300][ T5622] cleanup_mnt+0xb7/0x160 [ 443.265362][ T5622] task_work_run+0x150/0x240 [ 443.265421][ T5622] ? __pfx_task_work_run+0x10/0x10 [ 443.265482][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.265536][ T5622] exit_to_user_mode_loop+0x1d8/0x700 [ 443.265584][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.265630][ T5622] ? rcu_is_watching+0x13/0xc0 [ 443.265689][ T5622] do_syscall_64+0x661/0x790 [ 443.265737][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.265776][ T5622] RIP: 0033:0x7f84079a0797 [ 443.265806][ T5622] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 443.265845][ T5622] RSP: 002b:00007ffef96ca0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 443.265884][ T5622] RAX: 0000000000000000 RBX: 00007f8407a35f63 RCX: 00007f84079a0797 [ 443.265911][ T5622] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef96ca180 [ 443.265936][ T5622] RBP: 00007ffef96ca180 R08: 00007ffef96cb180 R09: 00000000ffffffff [ 443.265962][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef96cb210 [ 443.265988][ T5622] R13: 00007f8407a35f63 R14: 000000000006c140 R15: 00007ffef96cb250 [ 443.266042][ T5622] [ 443.271909][ T5622] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 443.291390][ T5767] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 443.310943][ T5767] em28xx 8-1:0.0: Config register raw data: 0x10 [ 443.584492][ T5767] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 443.584526][ T5767] em28xx 8-1:0.0: No AC97 audio processor [ 443.621499][ T5767] usb 8-1: USB disconnect, device number 9 [ 443.637541][ T5767] em28xx 8-1:0.0: Disconnecting em28xx [ 443.726603][ T5767] em28xx: Freeing device [ 444.504929][ T5901] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 444.506775][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 444.521485][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 444.538224][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 444.557420][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 444.571335][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 444.653739][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 444.654626][ T5901] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 444.656142][ T5901] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.656195][ T5901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 444.658806][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.658849][ T5901] usb 1-1: Product: syz [ 444.658877][ T5901] usb 1-1: Manufacturer: syz [ 444.658907][ T5901] usb 1-1: SerialNumber: syz [ 444.663896][ T5901] usb 1-1: config 0 descriptor?? [ 444.884725][ T9845] loop6: detected capacity change from 0 to 32768 [ 444.904700][ T9845] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1113 (9845) [ 444.994626][ T5901] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 445.015704][ T9845] BTRFS info (device loop6): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 445.015756][ T9845] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 445.093773][ T5796] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 445.139992][ T9845] BTRFS info (device loop6): enabling ssd optimizations [ 445.140036][ T9845] BTRFS info (device loop6): turning on async discard [ 445.140067][ T9845] BTRFS info (device loop6): enabling free space tree [ 445.245311][ T5796] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 445.248522][ T5796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.248700][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.443802][ T5901] rc_core: IR keymap rc-imon-pad not found [ 445.443829][ T5901] Registered IR keymap rc-empty [ 445.443910][ T5901] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 445.443973][ T5901] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 445.468493][ T5901] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 445.471325][ T5901] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 445.488752][ T5901] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:25> initialized [ 445.536768][ T5796] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 445.598213][ T5796] wwan wwan0: port wwan0qmi0 attached [ 445.628719][ T9851] rxe_eth0 speed is unknown, defaulting to 1000 [ 445.800843][ T5796] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, e2:9f:84:5a:f3:d4 [ 445.999407][ T5767] usb 5-1: USB disconnect, device number 29 [ 446.036894][ T5767] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 446.657139][ T4934] Bluetooth: hci6: command tx timeout [ 446.724000][ T5630] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 446.862966][ T9892] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 446.888053][ T5630] usb 2-1: not running at top speed; connect to a high speed hub [ 446.888110][ T5630] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 446.889445][ T5630] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 446.889505][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.959562][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 446.961213][ T5796] usb 1-1: USB disconnect, device number 25 [ 447.082439][ T5630] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 447.110428][ T5630] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 447.197645][ T5767] wwan wwan0: port wwan0qmi0 disconnected [ 447.414139][ T5630] usb 2-1: USB disconnect, device number 27 [ 447.422990][ T6868] BTRFS info (device loop6): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 447.485976][ T5630] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 447.490392][ T5630] cyberjack 2-1:1.0: device disconnected [ 447.686937][ T981] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 447.734966][ T9902] loop0: detected capacity change from 0 to 512 [ 447.849139][ T9902] loop0: detected capacity change from 512 to 64 [ 447.866948][ T981] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 447.871411][ T981] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 447.871459][ T981] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 447.871505][ T981] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.878848][ T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 447.878891][ T981] usb 8-1: Product: syz [ 447.878918][ T981] usb 8-1: Manufacturer: syz [ 447.878946][ T981] usb 8-1: SerialNumber: syz [ 448.015099][ T9906] FAT-fs (loop0): Directory bread(block 36) failed [ 448.015152][ T9906] FAT-fs (loop0): Directory bread(block 37) failed [ 448.015193][ T9906] FAT-fs (loop0): Directory bread(block 38) failed [ 448.015265][ T9906] FAT-fs (loop0): Directory bread(block 39) failed [ 448.015305][ T9906] FAT-fs (loop0): Directory bread(block 40) failed [ 448.015345][ T9906] FAT-fs (loop0): Directory bread(block 41) failed [ 448.015415][ T9906] FAT-fs (loop0): Directory bread(block 42) failed [ 448.015456][ T9906] FAT-fs (loop0): Directory bread(block 43) failed [ 448.015648][ T9906] FAT-fs (loop0): Directory bread(block 36) failed [ 448.015738][ T9906] FAT-fs (loop0): Directory bread(block 37) failed [ 448.173579][ T981] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 448.544137][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.545941][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.546529][ T9851] bridge_slave_0: entered allmulticast mode [ 448.551648][ T9851] bridge_slave_0: entered promiscuous mode [ 448.557687][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.557808][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.561470][ T9851] bridge_slave_1: entered allmulticast mode [ 448.568183][ T9851] bridge_slave_1: entered promiscuous mode [ 448.619469][ T9924] loop6: detected capacity change from 0 to 512 [ 448.643391][ T9924] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 448.643462][ T9924] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 448.675053][ T9924] EXT4-fs (loop6): 1 truncate cleaned up [ 448.677144][ T9924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.707259][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.722580][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.733854][ T4934] Bluetooth: hci6: command tx timeout [ 448.818245][ T9851] team0: Port device team_slave_0 added [ 448.821514][ T9851] team0: Port device team_slave_1 added [ 448.982080][ T6868] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.181216][ T9932] FAULT_INJECTION: forcing a failure. [ 449.181216][ T9932] name failslab, interval 1, probability 0, space 0, times 0 [ 449.181277][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.1.1125 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.181339][ T9932] Tainted: [L]=SOFTLOCKUP [ 449.181356][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 449.181382][ T9932] Call Trace: [ 449.181397][ T9932] [ 449.181413][ T9932] dump_stack_lvl+0x100/0x190 [ 449.181478][ T9932] should_fail_ex.cold+0x5/0xa [ 449.181527][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.181588][ T9932] should_failslab+0xc2/0x120 [ 449.181650][ T9932] __kmalloc_cache_noprof+0x91/0x6d0 [ 449.181713][ T9932] ? allocate_file_region_entries+0x15d/0x630 [ 449.181761][ T9932] ? allocate_file_region_entries+0x1a0/0x630 [ 449.181819][ T9932] allocate_file_region_entries+0x1a0/0x630 [ 449.181880][ T9932] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 449.181948][ T9932] region_chg+0x85/0x140 [ 449.181995][ T9932] __vma_reservation_common+0x34b/0x6f0 [ 449.182043][ T9932] ? find_held_lock+0x2b/0x80 [ 449.182108][ T9932] ? __pfx___vma_reservation_common+0x10/0x10 [ 449.182155][ T9932] ? filemap_get_entry+0x22d/0x450 [ 449.182211][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.182276][ T9932] alloc_hugetlb_folio+0x594/0x870 [ 449.182342][ T9932] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 449.182401][ T9932] ? rcu_is_watching+0x13/0xc0 [ 449.182464][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.182531][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.182585][ T9932] ? __filemap_get_folio_mpol+0x369/0x1280 [ 449.182650][ T9932] ? lock_acquire+0x1d1/0x380 [ 449.182712][ T9932] hugetlb_no_page+0x1099/0x1c20 [ 449.182791][ T9932] ? __pfx_down_read+0x10/0x10 [ 449.182848][ T9932] ? __pfx_hugetlb_no_page+0x10/0x10 [ 449.182912][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.182961][ T9932] ? huge_pte_alloc+0x39f/0x5a0 [ 449.183026][ T9932] hugetlb_fault+0x5a7/0x1650 [ 449.183096][ T9932] ? __pfx_hugetlb_fault+0x10/0x10 [ 449.183154][ T9932] ? lock_acquire+0x1d1/0x380 [ 449.183196][ T9932] ? hugetlb_vma_lock_read+0xaa/0x120 [ 449.183255][ T9932] ? rcu_is_watching+0x13/0xc0 [ 449.183310][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.183359][ T9932] ? __up_read+0x333/0x980 [ 449.183412][ T9932] ? __pfx___up_read+0x10/0x10 [ 449.183461][ T9932] ? hugetlb_vma_unlock_read+0xaa/0x120 [ 449.183514][ T9932] handle_mm_fault+0x604/0xa20 [ 449.183582][ T9932] __get_user_pages+0x8ae/0x2c30 [ 449.183645][ T9932] ? __pfx_mt_find+0x10/0x10 [ 449.183696][ T9932] ? __pfx___get_user_pages+0x10/0x10 [ 449.183750][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.183810][ T9932] populate_vma_page_range+0x267/0x3f0 [ 449.183862][ T9932] ? __pfx_populate_vma_page_range+0x10/0x10 [ 449.183909][ T9932] ? __pfx_find_vma_intersection+0x10/0x10 [ 449.183970][ T9932] __mm_populate+0x107/0x3a0 [ 449.184020][ T9932] ? __pfx___mm_populate+0x10/0x10 [ 449.184067][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.184117][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.184166][ T9932] ? up_write+0x2dc/0x5b0 [ 449.184224][ T9932] do_mlock+0x3f0/0x800 [ 449.184284][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.184332][ T9932] ? do_futex+0x190/0x440 [ 449.184391][ T9932] ? __pfx_do_mlock+0x10/0x10 [ 449.184446][ T9932] ? __pfx_do_futex+0x10/0x10 [ 449.184507][ T9932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 449.184561][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.184616][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.184664][ T9932] ? __x64_sys_futex+0x358/0x4d0 [ 449.184730][ T9932] __x64_sys_mlock+0xce/0x120 [ 449.184793][ T9932] ? __pfx___x64_sys_mlock+0x10/0x10 [ 449.184860][ T9932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.184918][ T9932] do_syscall_64+0x123/0x790 [ 449.184967][ T9932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.185009][ T9932] RIP: 0033:0x7f840799f559 [ 449.185042][ T9932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.185082][ T9932] RSP: 002b:00007f84088b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 449.185120][ T9932] RAX: ffffffffffffffda RBX: 00007f8407c25fa0 RCX: 00007f840799f559 [ 449.185148][ T9932] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 449.185175][ T9932] RBP: 00007f8407a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 449.185201][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.185225][ T9932] R13: 00007f8407c26038 R14: 00007f8407c25fa0 R15: 00007ffef96cae58 [ 449.185280][ T9932] [ 449.785012][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.785040][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.785089][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.790627][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.790650][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.790709][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.935748][ T9851] hsr_slave_0: entered promiscuous mode [ 449.936942][ T9851] hsr_slave_1: entered promiscuous mode [ 449.937791][ T9851] debugfs: 'hsr0' already exists in 'hsr' [ 449.937821][ T9851] Cannot create hsr debugfs directory [ 450.344282][ T5817] usb 8-1: USB disconnect, device number 10 [ 450.361718][ T5817] usblp0: removed [ 450.604806][ T9851] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 450.737893][ T9952] loop4: detected capacity change from 0 to 512 [ 450.739964][ T9952] EXT4-fs: Ignoring removed oldalloc option [ 450.762006][ T9952] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 450.762034][ T9952] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 450.776010][ T9953] FAULT_INJECTION: forcing a failure. [ 450.776010][ T9953] name failslab, interval 1, probability 0, space 0, times 0 [ 450.776065][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz.7.1137 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.776122][ T9953] Tainted: [L]=SOFTLOCKUP [ 450.776137][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 450.776162][ T9953] Call Trace: [ 450.776175][ T9953] [ 450.776190][ T9953] dump_stack_lvl+0x100/0x190 [ 450.776253][ T9953] should_fail_ex.cold+0x5/0xa [ 450.776298][ T9953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.776354][ T9953] should_failslab+0xc2/0x120 [ 450.776403][ T9953] __kmalloc_cache_noprof+0x91/0x6d0 [ 450.776463][ T9953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 450.776511][ T9953] ? subdev_open+0x7f/0x510 [ 450.776568][ T9953] subdev_open+0x7f/0x510 [ 450.776621][ T9953] v4l2_open+0x1d2/0x490 [ 450.776683][ T9953] ? __pfx_v4l2_open+0x10/0x10 [ 450.776743][ T9953] chrdev_open+0x234/0x6a0 [ 450.776789][ T9953] ? __pfx_apparmor_file_open+0x10/0x10 [ 450.776847][ T9953] ? __pfx_chrdev_open+0x10/0x10 [ 450.776895][ T9953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.776943][ T9953] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 450.777017][ T9953] do_dentry_open+0x674/0x1470 [ 450.777057][ T9953] ? __pfx_chrdev_open+0x10/0x10 [ 450.777105][ T9953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.777159][ T9953] vfs_open_consume+0xcc/0x460 [ 450.777210][ T9953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.777266][ T9953] path_openat+0x1551/0x2430 [ 450.777324][ T9953] ? __pfx_path_openat+0x10/0x10 [ 450.777388][ T9953] do_file_open+0x20e/0x430 [ 450.777441][ T9953] ? __pfx_do_file_open+0x10/0x10 [ 450.777526][ T9953] ? _raw_spin_unlock+0x28/0x50 [ 450.777587][ T9953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.777640][ T9953] ? alloc_fd+0x471/0x7a0 [ 450.777705][ T9953] do_sys_openat2+0x163/0x1d0 [ 450.777759][ T9953] ? __pfx_do_sys_openat2+0x10/0x10 [ 450.777810][ T9953] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 450.777899][ T9953] __x64_sys_openat+0x12d/0x210 [ 450.777955][ T9953] ? __pfx___x64_sys_openat+0x10/0x10 [ 450.778013][ T9953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.778066][ T9953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.778123][ T9953] do_syscall_64+0x123/0x790 [ 450.778171][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.778212][ T9953] RIP: 0033:0x7f6dae55fd8e [ 450.778244][ T9953] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 450.778285][ T9953] RSP: 002b:00007f6daf441b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 450.778323][ T9953] RAX: ffffffffffffffda RBX: 00007f6daf4426c0 RCX: 00007f6dae55fd8e [ 450.778351][ T9953] RDX: 0000000000000000 RSI: 00007f6daf441c00 RDI: ffffffffffffff9c [ 450.778377][ T9953] RBP: 00007f6daf441c00 R08: 0000000000000000 R09: 0000000000000000 [ 450.778402][ T9953] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 450.778428][ T9953] R13: 00007f6dae826038 R14: 00007f6dae825fa0 R15: 00007fffc01a1278 [ 450.778482][ T9953] [ 450.814083][ T4934] Bluetooth: hci6: command tx timeout [ 450.874360][ T9952] EXT4-fs (loop4): 1 truncate cleaned up [ 450.904660][ T9952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.106734][ T5817] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 451.238839][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 451.239986][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 451.241811][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 451.243050][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 451.252459][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.256688][ T5817] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.262164][ T5817] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.278150][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.278194][ T5817] usb 7-1: Product: syz [ 451.278221][ T5817] usb 7-1: Manufacturer: syz [ 451.278248][ T5817] usb 7-1: SerialNumber: syz [ 451.454620][ T9851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.455732][ T9851] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 451.482563][ T7949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.512744][ T9851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.540660][ T9851] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 451.727445][ T9851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.734228][ T9851] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 451.864158][ T9851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.180733][ T9986] loop4: detected capacity change from 0 to 128 [ 452.216969][ T9986] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 452.220238][ T9986] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 452.236469][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 452.297079][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.380807][ T9851] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.385811][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 452.399155][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.399199][ T9] usb 8-1: Product: syz [ 452.399226][ T9] usb 8-1: Manufacturer: syz [ 452.399304][ T9] usb 8-1: SerialNumber: syz [ 452.457510][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.457696][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.464221][ T5817] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 452.464263][ T5817] cdc_ncm 7-1:1.0: dwNtbInMaxSize=2 is too small. Using 2048 [ 452.464296][ T5817] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 452.510224][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.510342][ T8761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.585118][ T7949] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.757675][ T5817] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 452.802359][ T5817] usb 7-1: USB disconnect, device number 21 [ 452.811369][ T5817] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 452.894311][ T5619] Bluetooth: hci6: command tx timeout [ 452.946074][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 452.946152][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 452.946192][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 452.960483][ T9] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 453.001796][ T9959] rxe_eth0 speed is unknown, defaulting to 1000 [ 453.294009][ T5619] Bluetooth: hci0: command tx timeout [ 453.511710][T10010] FAULT_INJECTION: forcing a failure. [ 453.511710][T10010] name failslab, interval 1, probability 0, space 0, times 0 [ 453.511771][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.6.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.511830][T10010] Tainted: [L]=SOFTLOCKUP [ 453.511847][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 453.511872][T10010] Call Trace: [ 453.511886][T10010] [ 453.511902][T10010] dump_stack_lvl+0x100/0x190 [ 453.511965][T10010] should_fail_ex.cold+0x5/0xa [ 453.512012][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.512070][T10010] should_failslab+0xc2/0x120 [ 453.512122][T10010] __kmalloc_cache_node_noprof+0x94/0x720 [ 453.512171][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.512222][T10010] ? __get_vm_area_node+0x124/0x350 [ 453.512279][T10010] __get_vm_area_node+0x124/0x350 [ 453.512327][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.512390][T10010] __vmalloc_node_range_noprof+0x268/0x1420 [ 453.512446][T10010] ? bpf_prog_calc_tag+0x63/0x340 [ 453.512495][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.512545][T10010] ? rcu_is_watching+0x13/0xc0 [ 453.512614][T10010] ? trace_contention_end+0x126/0x160 [ 453.512668][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.512717][T10010] ? __lock_acquire+0x5c0/0x1f40 [ 453.512763][T10010] ? bpf_prog_calc_tag+0x63/0x340 [ 453.512814][T10010] ? __pfx___css_rstat_updated+0x10/0x10 [ 453.512873][T10010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.512932][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.512982][T10010] ? lock_acquire+0x1d1/0x380 [ 453.513027][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.513075][T10010] ? rcu_is_watching+0x13/0xc0 [ 453.513136][T10010] ? bpf_prog_calc_tag+0x63/0x340 [ 453.513181][T10010] __vmalloc_node_noprof+0xad/0xf0 [ 453.513237][T10010] ? bpf_prog_calc_tag+0x63/0x340 [ 453.513290][T10010] __vmalloc_noprof+0xa3/0x120 [ 453.513341][T10010] ? __pfx___vmalloc_noprof+0x10/0x10 [ 453.513392][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.513441][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.513491][T10010] ? lockdep_init_map_type+0x5c/0x250 [ 453.513539][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.513589][T10010] ? mutex_init_lockdep+0xf1/0x120 [ 453.513655][T10010] bpf_prog_calc_tag+0x63/0x340 [ 453.513712][T10010] bpf_jit_subprogs+0x11bf/0x4680 [ 453.513806][T10010] bpf_fixup_call_args+0x2cd/0x340 [ 453.513870][T10010] bpf_check+0x43d8/0xac70 [ 453.513926][T10010] ? down_write_nested+0x1a0/0x200 [ 453.514012][T10010] ? __pfx_bpf_check+0x10/0x10 [ 453.514067][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.514120][T10010] ? lock_acquire+0x1d1/0x380 [ 453.514165][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.514218][T10010] ? find_held_lock+0x2b/0x80 [ 453.514277][T10010] ? bpf_prog_load+0x1a27/0x2ab0 [ 453.514329][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.514383][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.514432][T10010] ? __asan_memset+0x23/0x50 [ 453.514497][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.514556][T10010] ? bpf_prog_load+0x1ae1/0x2ab0 [ 453.514610][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.514655][T10010] bpf_prog_load+0x1ae1/0x2ab0 [ 453.514711][T10010] ? __pfx_bpf_prog_load+0x10/0x10 [ 453.514754][T10010] ? lock_acquire+0x1d1/0x380 [ 453.514799][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.514875][T10010] __sys_bpf+0x1f46/0x4a30 [ 453.514943][T10010] ? __pfx___sys_bpf+0x10/0x10 [ 453.514997][T10010] ? __pfx_futex_hash+0x10/0x10 [ 453.515043][T10010] ? __pfx_get_futex_key+0x10/0x10 [ 453.515094][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.515141][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.515211][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.515255][T10010] ? vm_mmap_pgoff+0x103/0x470 [ 453.515307][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.515373][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.515423][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.515470][T10010] ? __x64_sys_futex+0x358/0x4d0 [ 453.515525][T10010] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 453.515566][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.515616][T10010] ? xfd_validate_state+0x129/0x190 [ 453.515662][T10010] ? __x64_sys_bpf+0xce/0x140 [ 453.515717][T10010] __x64_sys_bpf+0xce/0x140 [ 453.515777][T10010] ? do_syscall_64+0xae/0x790 [ 453.515821][T10010] do_syscall_64+0x123/0x790 [ 453.515866][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.515904][T10010] RIP: 0033:0x7f80f759f559 [ 453.515934][T10010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.515971][T10010] RSP: 002b:00007f80f842f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.516007][T10010] RAX: ffffffffffffffda RBX: 00007f80f7825fa0 RCX: 00007f80f759f559 [ 453.516033][T10010] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 453.516057][T10010] RBP: 00007f80f7636b20 R08: 0000000000000000 R09: 0000000000000000 [ 453.516081][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.516104][T10010] R13: 00007f80f7826038 R14: 00007f80f7825fa0 R15: 00007fff61dffcc8 [ 453.516153][T10010] [ 453.525257][T10010] syz.6.1147: vmalloc error: size 24, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 453.525377][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.6.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.525435][T10010] Tainted: [L]=SOFTLOCKUP [ 453.525449][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 453.525473][T10010] Call Trace: [ 453.525487][T10010] [ 453.525502][T10010] dump_stack_lvl+0x100/0x190 [ 453.525563][T10010] warn_alloc.cold+0x9e/0xb2 [ 453.525616][T10010] ? __pfx_warn_alloc+0x10/0x10 [ 453.525673][T10010] ? __kasan_kmalloc+0x8a/0xb0 [ 453.525716][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.525767][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.525827][T10010] ? __get_vm_area_node+0x22b/0x350 [ 453.525885][T10010] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 453.525938][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.525985][T10010] ? rcu_is_watching+0x13/0xc0 [ 453.526040][T10010] ? trace_contention_end+0x126/0x160 [ 453.526091][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.526136][T10010] ? __lock_acquire+0x5c0/0x1f40 [ 453.526180][T10010] ? bpf_prog_calc_tag+0x63/0x340 [ 453.526230][T10010] ? __pfx___css_rstat_updated+0x10/0x10 [ 453.526285][T10010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.526339][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.526385][T10010] ? lock_acquire+0x1d1/0x380 [ 453.526429][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.526475][T10010] ? rcu_is_watching+0x13/0xc0 [ 453.526533][T10010] ? bpf_prog_calc_tag+0x63/0x340 [ 453.526577][T10010] __vmalloc_node_noprof+0xad/0xf0 [ 453.526637][T10010] ? bpf_prog_calc_tag+0x63/0x340 [ 453.526691][T10010] __vmalloc_noprof+0xa3/0x120 [ 453.526744][T10010] ? __pfx___vmalloc_noprof+0x10/0x10 [ 453.526793][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.526839][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.526885][T10010] ? lockdep_init_map_type+0x5c/0x250 [ 453.526930][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.526977][T10010] ? mutex_init_lockdep+0xf1/0x120 [ 453.527028][T10010] bpf_prog_calc_tag+0x63/0x340 [ 453.527082][T10010] bpf_jit_subprogs+0x11bf/0x4680 [ 453.527172][T10010] bpf_fixup_call_args+0x2cd/0x340 [ 453.527232][T10010] bpf_check+0x43d8/0xac70 [ 453.527287][T10010] ? down_write_nested+0x1a0/0x200 [ 453.527371][T10010] ? __pfx_bpf_check+0x10/0x10 [ 453.527418][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.527464][T10010] ? lock_acquire+0x1d1/0x380 [ 453.527507][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.527553][T10010] ? find_held_lock+0x2b/0x80 [ 453.527614][T10010] ? bpf_prog_load+0x1a27/0x2ab0 [ 453.527663][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.527714][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.527760][T10010] ? __asan_memset+0x23/0x50 [ 453.527821][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.527877][T10010] ? bpf_prog_load+0x1ae1/0x2ab0 [ 453.527922][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.527968][T10010] bpf_prog_load+0x1ae1/0x2ab0 [ 453.528028][T10010] ? __pfx_bpf_prog_load+0x10/0x10 [ 453.528074][T10010] ? lock_acquire+0x1d1/0x380 [ 453.528121][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.528202][T10010] __sys_bpf+0x1f46/0x4a30 [ 453.528274][T10010] ? __pfx___sys_bpf+0x10/0x10 [ 453.528330][T10010] ? __pfx_futex_hash+0x10/0x10 [ 453.528378][T10010] ? __pfx_get_futex_key+0x10/0x10 [ 453.528431][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.528481][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.528556][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.528608][T10010] ? vm_mmap_pgoff+0x103/0x470 [ 453.528659][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.528730][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.528777][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.528823][T10010] ? __x64_sys_futex+0x358/0x4d0 [ 453.528880][T10010] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 453.528923][T10010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.528970][T10010] ? xfd_validate_state+0x129/0x190 [ 453.529017][T10010] ? __x64_sys_bpf+0xce/0x140 [ 453.529075][T10010] __x64_sys_bpf+0xce/0x140 [ 453.529137][T10010] ? do_syscall_64+0xae/0x790 [ 453.529183][T10010] do_syscall_64+0x123/0x790 [ 453.529230][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.529271][T10010] RIP: 0033:0x7f80f759f559 [ 453.529303][T10010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.529340][T10010] RSP: 002b:00007f80f842f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.529376][T10010] RAX: ffffffffffffffda RBX: 00007f80f7825fa0 RCX: 00007f80f759f559 [ 453.529407][T10010] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 453.529432][T10010] RBP: 00007f80f7636b20 R08: 0000000000000000 R09: 0000000000000000 [ 453.529456][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.529480][T10010] R13: 00007f80f7826038 R14: 00007f80f7825fa0 R15: 00007fff61dffcc8 [ 453.529564][T10010] [ 453.567150][T10010] Mem-Info: [ 453.567172][T10010] active_anon:7847 inactive_anon:0 isolated_anon:0 [ 453.567172][T10010] active_file:0 inactive_file:67805 isolated_file:0 [ 453.567172][T10010] unevictable:0 dirty:452 writeback:0 [ 453.567172][T10010] slab_reclaimable:11932 slab_unreclaimable:106021 [ 453.567172][T10010] mapped:42225 shmem:570 pagetables:1590 [ 453.567172][T10010] sec_pagetables:0 bounce:0 [ 453.567172][T10010] kernel_misc_reclaimable:0 [ 453.567172][T10010] free:1218767 free_pcp:11921 free_cma:0 [ 453.567271][T10010] Node 0 active_anon:31388kB inactive_anon:0kB active_file:0kB inactive_file:271016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168900kB dirty:1804kB writeback:0kB shmem:2280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13912kB pagetables:6216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.567377][T10010] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.567481][T10010] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.567591][T10010] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 453.567683][T10010] Node 0 DMA32 free:982756kB boost:0kB min:34088kB low:42608kB high:51128kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31388kB inactive_anon:0kB active_file:0kB inactive_file:271016kB unevictable:0kB writepending:1804kB zspages:0kB present:3129332kB managed:2510956kB mlocked:0kB bounce:0kB free_pcp:47184kB local_pcp:26136kB free_cma:0kB [ 453.567798][T10010] lowmem_reserve[]: 0 0 0 0 0 [ 453.567862][T10010] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.567968][T10010] lowmem_reserve[]: 0 0 0 0 0 [ 453.568033][T10010] Node 1 Normal free:3876952kB boost:0kB min:55812kB low:69764kB high:83716kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 453.568144][T10010] lowmem_reserve[]: 0 0 0 0 0 [ 453.568208][T10010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 453.568424][T10010] Node 0 DMA32: 1827*4kB (ME) 1574*8kB (ME) 950*16kB (ME) 511*32kB (UME) 270*64kB (UME) 164*128kB (UME) 2*256kB (UE) 17*512kB (UM) 15*1024kB (M) 2*2048kB (UM) 211*4096kB (M) = 982652kB [ 453.579998][T10010] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 453.580193][T10010] Node 1 Normal: 4*4kB (UM) 9*8kB (UM) 10*16kB (UM) 7*32kB (UM) 8*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 945*4096kB (M) = 3876952kB [ 453.580490][T10010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.580539][T10010] Node 0 hugepages_total=34 hugepages_free=34 hugepages_surp=0 hugepages_size=2048kB [ 453.580571][T10010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.580607][T10010] Node 1 hugepages_total=33 hugepages_free=33 hugepages_surp=0 hugepages_size=2048kB [ 453.580639][T10010] 68141 total pagecache pages [ 453.580654][T10010] 0 pages in swap cache [ 453.580667][T10010] Free swap = 124996kB [ 453.580681][T10010] Total swap = 124996kB [ 453.580697][T10010] 2097051 pages RAM [ 453.580710][T10010] 0 pages HighMem/MovableOnly [ 453.580723][T10010] 437680 pages reserved [ 453.580737][T10010] 0 pages cma reserved [ 453.687467][ T5619] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 454.227429][T10015] rxe_eth0 speed is unknown, defaulting to 1000 [ 455.127583][ T5817] usb 8-1: USB disconnect, device number 11 [ 455.322304][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.374167][ T5619] Bluetooth: hci0: command tx timeout [ 455.399198][T10039] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 455.553824][T10042] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 455.887358][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.887586][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.887763][ T9959] bridge_slave_0: entered allmulticast mode [ 455.889898][ T9959] bridge_slave_0: entered promiscuous mode [ 455.926759][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.927004][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.927175][ T9959] bridge_slave_1: entered allmulticast mode [ 455.929606][ T9959] bridge_slave_1: entered promiscuous mode [ 455.998619][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.035808][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.093159][ T9959] team0: Port device team_slave_0 added [ 456.102924][ T9959] team0: Port device team_slave_1 added [ 456.144104][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.144132][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.144182][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.146449][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.146472][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.146522][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.441393][ T9959] hsr_slave_0: entered promiscuous mode [ 456.446824][ T9959] hsr_slave_1: entered promiscuous mode [ 456.450893][ T9959] debugfs: 'hsr0' already exists in 'hsr' [ 456.450925][ T9959] Cannot create hsr debugfs directory [ 457.140687][T10064] loop6: detected capacity change from 0 to 32768 [ 457.150619][T10064] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1157 (10064) [ 457.174489][T10064] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 457.174545][T10064] BTRFS info (device loop6): using crc32c checksum algorithm [ 457.217543][T10057] loop4: detected capacity change from 0 to 32768 [ 457.288895][T10064] BTRFS info (device loop6): enabling ssd optimizations [ 457.288938][T10064] BTRFS info (device loop6): turning on flush-on-commit [ 457.288969][T10064] BTRFS info (device loop6): enabling free space tree [ 457.288999][T10064] BTRFS info (device loop6): enabling auto defrag [ 457.289029][T10064] BTRFS info (device loop6): use lzo compression, level 1 [ 457.289066][T10064] BTRFS info (device loop6): max_inline set to 4096 [ 457.368771][T10057] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 457.368803][T10057] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 457.454115][ T5619] Bluetooth: hci0: command tx timeout [ 457.456347][T10057] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 457.480743][ T5796] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 457.480771][ T5796] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 457.548882][ T5796] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms [ 457.549138][ T5796] gfs2: fsid=syz:syz.0: jid=0: Done [ 457.549877][T10057] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 457.773145][T10057] gfs2: fsid=syz:syz.0: found 1 quota changes [ 457.801169][ T30] audit: type=1800 audit(1792513448.986:20): pid=10064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1157" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 457.828175][T10064] BTRFS critical (device loop6 state E): emergency shutdown [ 457.991446][ T6868] BTRFS info (device loop6 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 458.031342][ T7949] bio_check_eod: 1008 callbacks suppressed [ 458.031373][ T7949] syz-executor: attempt to access beyond end of device [ 458.031373][ T7949] loop4: rw=8400897, sector=68719479088, nr_sectors = 8 limit=32768 [ 458.031627][ T7949] Buffer I/O error on dev loop4, logical block 8589934886, lost async page write [ 458.050827][ T9851] veth0_vlan: entered promiscuous mode [ 458.072367][ T7949] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934886, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 458.072426][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 458.072483][ T7949] Tainted: [L]=SOFTLOCKUP [ 458.072498][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 458.072523][ T7949] Call Trace: [ 458.072537][ T7949] [ 458.072554][ T7949] dump_stack_lvl+0x100/0x190 [ 458.072630][ T7949] gfs2_withdraw.cold+0xa/0xed [ 458.072684][ T7949] gfs2_io_error_bh_i.cold+0x49/0x55 [ 458.072741][ T7949] gfs2_ail1_flush+0xa8d/0xf50 [ 458.072798][ T7949] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 458.072838][ T7949] ? __lock_acquire+0x5c0/0x1f40 [ 458.072881][ T7949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.072949][ T7949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.073007][ T7949] gfs2_ail1_start+0xa0/0xe0 [ 458.073044][ T7949] ? __pfx_gfs2_ail1_start+0x10/0x10 [ 458.073080][ T7949] ? __xa_set_mark+0xd1/0x120 [ 458.073183][ T7949] ? __gfs2_log_flush+0x118e/0x2290 [ 458.073226][ T7949] ? __gfs2_log_flush+0x118e/0x2290 [ 458.073266][ T7949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.073321][ T7949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.073371][ T7949] ? do_raw_spin_unlock+0x145/0x1e0 [ 458.073431][ T7949] __gfs2_log_flush+0x19f4/0x2290 [ 458.073490][ T7949] ? __pfx___gfs2_log_flush+0x10/0x10 [ 458.073534][ T7949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.073588][ T7949] ? down_write+0x146/0x1f0 [ 458.073650][ T7949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.073707][ T7949] gfs2_log_flush+0x35/0x50 [ 458.073753][ T7949] gfs2_kill_sb+0x6a/0x590 [ 458.073821][ T7949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.073880][ T7949] deactivate_locked_super+0xbd/0x130 [ 458.073950][ T7949] deactivate_super+0xea/0x110 [ 458.074019][ T7949] cleanup_mnt+0xb7/0x160 [ 458.074085][ T7949] task_work_run+0x150/0x240 [ 458.074150][ T7949] ? __pfx_task_work_run+0x10/0x10 [ 458.074216][ T7949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.074275][ T7949] exit_to_user_mode_loop+0x1d8/0x700 [ 458.074327][ T7949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.074376][ T7949] ? rcu_is_watching+0x13/0xc0 [ 458.074440][ T7949] do_syscall_64+0x661/0x790 [ 458.074490][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.074533][ T7949] RIP: 0033:0x7faed61a0797 [ 458.074567][ T7949] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 458.074607][ T7949] RSP: 002b:00007ffee745aa38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 458.074653][ T7949] RAX: 0000000000000000 RBX: 00007faed6235f63 RCX: 00007faed61a0797 [ 458.074681][ T7949] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee745aaf0 [ 458.074707][ T7949] RBP: 00007ffee745aaf0 R08: 00007ffee745baf0 R09: 00000000ffffffff [ 458.074735][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee745bb80 [ 458.074762][ T7949] R13: 00007faed6235f63 R14: 000000000006fc91 R15: 00007ffee745bbc0 [ 458.074817][ T7949] [ 458.074997][ T7949] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 458.168662][ T9851] veth1_vlan: entered promiscuous mode [ 458.308264][ T5767] ================================================================== [ 458.308288][ T5767] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 458.308343][ T5767] Read of size 8 at addr ffff88807f0a64c0 by task kworker/1:7/5767 [ 458.308374][ T5767] [ 458.308395][ T5767] CPU: 1 UID: 0 PID: 5767 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.308451][ T5767] Tainted: [L]=SOFTLOCKUP [ 458.308467][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 458.308494][ T5767] Workqueue: events gfs2_withdraw_func [ 458.308555][ T5767] Call Trace: [ 458.308568][ T5767] [ 458.308583][ T5767] dump_stack_lvl+0x100/0x190 [ 458.308646][ T5767] print_report+0x13d/0x4b0 [ 458.308709][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.308757][ T5767] ? __virt_addr_valid+0x239/0x430 [ 458.308799][ T5767] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 458.308845][ T5767] kasan_report+0xdf/0x1c0 [ 458.308894][ T5767] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 458.308948][ T5767] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 458.308995][ T5767] gfs2_remove_from_ail+0x138/0x340 [ 458.309064][ T5767] gfs2_ail_drain+0x39c/0x6b0 [ 458.309111][ T5767] do_withdraw+0xeb/0x300 [ 458.309167][ T5767] ? __pfx_do_withdraw+0x10/0x10 [ 458.309231][ T5767] ? lock_acquire+0x5e/0x380 [ 458.309279][ T5767] gfs2_withdraw_func+0x349/0x3d0 [ 458.309342][ T5767] process_one_work+0xac7/0x1b10 [ 458.309413][ T5767] ? __pfx_process_one_work+0x10/0x10 [ 458.309474][ T5767] ? lock_acquire+0x1d1/0x380 [ 458.309527][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.309579][ T5767] worker_thread+0x5ef/0xe50 [ 458.309650][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 458.309710][ T5767] ? kthread+0x13a/0x450 [ 458.309763][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 458.309821][ T5767] kthread+0x373/0x450 [ 458.309877][ T5767] ? __pfx_kthread+0x10/0x10 [ 458.309932][ T5767] ret_from_fork+0x730/0xd60 [ 458.309975][ T5767] ? __pfx_ret_from_fork+0x10/0x10 [ 458.310017][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.310064][ T5767] ? __switch_to+0x800/0x10f0 [ 458.310117][ T5767] ? __switch_to_asm+0x39/0x70 [ 458.310156][ T5767] ? __pfx_kthread+0x10/0x10 [ 458.310211][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.310264][ T5767] [ 458.310278][ T5767] [ 458.310287][ T5767] Allocated by task 10057: [ 458.310305][ T5767] kasan_save_stack+0x30/0x50 [ 458.310343][ T5767] kasan_save_track+0x14/0x30 [ 458.310381][ T5767] __kasan_slab_alloc+0x89/0x90 [ 458.310423][ T5767] kmem_cache_alloc_noprof+0x269/0x6a0 [ 458.310459][ T5767] gfs2_glock_get+0x1e5/0x1260 [ 458.310502][ T5767] gfs2_inode_lookup+0x2e0/0x920 [ 458.310540][ T5767] gfs2_lookup_root+0x57/0xe0 [ 458.310596][ T5767] init_sb+0xa17/0xfd0 [ 458.310661][ T5767] gfs2_fill_super+0x1acb/0x2d00 [ 458.310693][ T5767] get_tree_bdev_flags+0x38c/0x620 [ 458.310728][ T5767] gfs2_get_tree+0x4e/0x280 [ 458.310785][ T5767] vfs_get_tree+0x92/0x320 [ 458.310834][ T5767] path_mount+0x7d0/0x2850 [ 458.310886][ T5767] __x64_sys_mount+0x293/0x310 [ 458.310940][ T5767] do_syscall_64+0x123/0x790 [ 458.310979][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.311017][ T5767] [ 458.311027][ T5767] Freed by task 15: [ 458.311044][ T5767] kasan_save_stack+0x30/0x50 [ 458.311082][ T5767] kasan_save_track+0x14/0x30 [ 458.311119][ T5767] kasan_save_free_info+0x3b/0x70 [ 458.311174][ T5767] __kasan_slab_free+0x5f/0x80 [ 458.311213][ T5767] kmem_cache_free+0x127/0x6c0 [ 458.311268][ T5767] gfs2_glock_dealloc+0xd0/0x160 [ 458.311303][ T5767] rcu_core+0x5f0/0x1260 [ 458.311347][ T5767] handle_softirqs+0x1e6/0x9d0 [ 458.311381][ T5767] run_ksoftirqd+0x38/0x60 [ 458.311418][ T5767] smpboot_thread_fn+0x3d3/0xab0 [ 458.311465][ T5767] kthread+0x373/0x450 [ 458.311513][ T5767] ret_from_fork+0x730/0xd60 [ 458.311548][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.311584][ T5767] [ 458.311593][ T5767] Last potentially related work creation: [ 458.311607][ T5767] kasan_save_stack+0x30/0x50 [ 458.311650][ T5767] kasan_record_aux_stack+0xa7/0xc0 [ 458.311704][ T5767] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 458.311749][ T5767] gfs2_glock_free+0x35/0xa0 [ 458.311790][ T5767] glock_work_func+0x437/0x4d0 [ 458.311841][ T5767] process_one_work+0xac7/0x1b10 [ 458.311895][ T5767] worker_thread+0x5ef/0xe50 [ 458.311948][ T5767] kthread+0x373/0x450 [ 458.311996][ T5767] ret_from_fork+0x730/0xd60 [ 458.312032][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.312068][ T5767] [ 458.312077][ T5767] Second to last potentially related work creation: [ 458.312091][ T5767] kasan_save_stack+0x30/0x50 [ 458.312127][ T5767] kasan_record_aux_stack+0xa7/0xc0 [ 458.312181][ T5767] insert_work+0x36/0x230 [ 458.312230][ T5767] __queue_work+0xa60/0x1370 [ 458.312281][ T5767] __queue_delayed_work+0x357/0x450 [ 458.312336][ T5767] queue_delayed_work_on+0x180/0x1e0 [ 458.312395][ T5767] gfs2_glock_queue_work+0x75/0x120 [ 458.312442][ T5767] do_xmote+0x453/0x680 [ 458.312490][ T5767] run_queue+0x555/0x6a0 [ 458.312539][ T5767] glock_work_func+0x35b/0x4d0 [ 458.312589][ T5767] process_one_work+0xac7/0x1b10 [ 458.312655][ T5767] worker_thread+0x5ef/0xe50 [ 458.312709][ T5767] kthread+0x373/0x450 [ 458.312757][ T5767] ret_from_fork+0x730/0xd60 [ 458.312793][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.312829][ T5767] [ 458.312837][ T5767] The buggy address belongs to the object at ffff88807f0a63a8 [ 458.312837][ T5767] which belongs to the cache gfs2_glock(aspace) of size 1176 [ 458.312870][ T5767] The buggy address is located 280 bytes inside of [ 458.312870][ T5767] freed 1176-byte region [ffff88807f0a63a8, ffff88807f0a6840) [ 458.312908][ T5767] [ 458.312917][ T5767] The buggy address belongs to the physical page: [ 458.312933][ T5767] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f0a4 [ 458.312966][ T5767] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 458.312998][ T5767] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 458.313031][ T5767] page_type: f5(slab) [ 458.313062][ T5767] raw: 00fff00000000040 ffff8881404443c0 dead000000000100 dead000000000122 [ 458.313097][ T5767] raw: 0000000000000000 00000002000c000c 00000000f5000000 0000000000000000 [ 458.313134][ T5767] head: 00fff00000000040 ffff8881404443c0 dead000000000100 dead000000000122 [ 458.313169][ T5767] head: 0000000000000000 00000002000c000c 00000000f5000000 0000000000000000 [ 458.313205][ T5767] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 458.313244][ T5767] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 458.313267][ T5767] page dumped because: kasan: bad access detected [ 458.313285][ T5767] page_owner tracks the page as allocated [ 458.313298][ T5767] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6706, tgid 6705 (syz.5.287), ts 164153393846 [ 458.313363][ T5767] post_alloc_hook+0xfd/0x120 [ 458.313415][ T5767] get_page_from_freelist+0x110d/0x35d0 [ 458.313472][ T5767] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 458.313532][ T5767] new_slab+0xa9/0x6e0 [ 458.313583][ T5767] refill_objects+0xe3/0x410 [ 458.313644][ T5767] __pcs_replace_empty_main+0x35e/0x650 [ 458.313699][ T5767] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 458.313734][ T5767] gfs2_glock_get+0x1e5/0x1260 [ 458.313776][ T5767] gfs2_inode_lookup+0x2e0/0x920 [ 458.313813][ T5767] gfs2_lookup_root+0x57/0xe0 [ 458.313871][ T5767] init_sb+0xa75/0xfd0 [ 458.313926][ T5767] gfs2_fill_super+0x1acb/0x2d00 [ 458.313959][ T5767] get_tree_bdev_flags+0x38c/0x620 [ 458.313992][ T5767] gfs2_get_tree+0x4e/0x280 [ 458.314046][ T5767] vfs_get_tree+0x92/0x320 [ 458.314096][ T5767] path_mount+0x7d0/0x2850 [ 458.314147][ T5767] page last free pid 4972 tgid 4972 ts 153690700258 stack trace: [ 458.314174][ T5767] __free_frozen_pages+0x79f/0x10f0 [ 458.314221][ T5767] qlist_free_all+0x47/0xf0 [ 458.314254][ T5767] kasan_quarantine_reduce+0x1a0/0x1f0 [ 458.314290][ T5767] __kasan_slab_alloc+0x69/0x90 [ 458.314331][ T5767] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 458.314369][ T5767] __alloc_skb+0x140/0x710 [ 458.314411][ T5767] alloc_skb_with_frags+0xdd/0x760 [ 458.314461][ T5767] sock_alloc_send_pskb+0x89f/0xa40 [ 458.314501][ T5767] unix_dgram_sendmsg+0x3f4/0x1a80 [ 458.314553][ T5767] __sys_sendto+0x48b/0x4e0 [ 458.314593][ T5767] __x64_sys_sendto+0xe0/0x1c0 [ 458.314640][ T5767] do_syscall_64+0x123/0x790 [ 458.314680][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.314718][ T5767] [ 458.314727][ T5767] Memory state around the buggy address: [ 458.314746][ T5767] ffff88807f0a6380: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb [ 458.314774][ T5767] ffff88807f0a6400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.314802][ T5767] >ffff88807f0a6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.314824][ T5767] ^ [ 458.314845][ T5767] ffff88807f0a6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.314873][ T5767] ffff88807f0a6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.314895][ T5767] ================================================================== [ 458.314993][ T5767] Disabling lock debugging due to kernel taint [ 458.315009][ T5767] ================================================================== [ 458.315024][ T5767] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1a4/0x1d0 [ 458.315073][ T5767] Read of size 8 at addr ffff88807f0a64c8 by task kworker/1:7/5767 [ 458.315103][ T5767] [ 458.315122][ T5767] CPU: 1 UID: 0 PID: 5767 Comm: kworker/1:7 Tainted: G B L syzkaller #0 PREEMPT(full) [ 458.315180][ T5767] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 458.315197][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 458.315224][ T5767] Workqueue: events gfs2_withdraw_func [ 458.315280][ T5767] Call Trace: [ 458.315293][ T5767] [ 458.315308][ T5767] dump_stack_lvl+0x100/0x190 [ 458.315362][ T5767] print_report+0x13d/0x4b0 [ 458.315420][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.315467][ T5767] ? __virt_addr_valid+0x239/0x430 [ 458.315507][ T5767] ? __list_del_entry_valid_or_report+0x1a4/0x1d0 [ 458.315552][ T5767] kasan_report+0xdf/0x1c0 [ 458.315601][ T5767] ? __list_del_entry_valid_or_report+0x1a4/0x1d0 [ 458.315660][ T5767] __list_del_entry_valid_or_report+0x1a4/0x1d0 [ 458.315707][ T5767] gfs2_remove_from_ail+0x138/0x340 [ 458.315773][ T5767] gfs2_ail_drain+0x39c/0x6b0 [ 458.315817][ T5767] do_withdraw+0xeb/0x300 [ 458.315870][ T5767] ? __pfx_do_withdraw+0x10/0x10 [ 458.315932][ T5767] ? lock_acquire+0x5e/0x380 [ 458.315978][ T5767] gfs2_withdraw_func+0x349/0x3d0 [ 458.316041][ T5767] process_one_work+0xac7/0x1b10 [ 458.316111][ T5767] ? __pfx_process_one_work+0x10/0x10 [ 458.316171][ T5767] ? lock_acquire+0x1d1/0x380 [ 458.316219][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.316267][ T5767] worker_thread+0x5ef/0xe50 [ 458.316332][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 458.316391][ T5767] ? kthread+0x13a/0x450 [ 458.316442][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 458.316500][ T5767] kthread+0x373/0x450 [ 458.316552][ T5767] ? __pfx_kthread+0x10/0x10 [ 458.316607][ T5767] ret_from_fork+0x730/0xd60 [ 458.316656][ T5767] ? __pfx_ret_from_fork+0x10/0x10 [ 458.316698][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.316745][ T5767] ? __switch_to+0x800/0x10f0 [ 458.316795][ T5767] ? __switch_to_asm+0x39/0x70 [ 458.316833][ T5767] ? __pfx_kthread+0x10/0x10 [ 458.316888][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.316945][ T5767] [ 458.316959][ T5767] [ 458.316968][ T5767] Allocated by task 10057: [ 458.316986][ T5767] kasan_save_stack+0x30/0x50 [ 458.317024][ T5767] kasan_save_track+0x14/0x30 [ 458.317061][ T5767] __kasan_slab_alloc+0x89/0x90 [ 458.317103][ T5767] kmem_cache_alloc_noprof+0x269/0x6a0 [ 458.317139][ T5767] gfs2_glock_get+0x1e5/0x1260 [ 458.317182][ T5767] gfs2_inode_lookup+0x2e0/0x920 [ 458.317220][ T5767] gfs2_lookup_root+0x57/0xe0 [ 458.317277][ T5767] init_sb+0xa17/0xfd0 [ 458.317333][ T5767] gfs2_fill_super+0x1acb/0x2d00 [ 458.317366][ T5767] get_tree_bdev_flags+0x38c/0x620 [ 458.317400][ T5767] gfs2_get_tree+0x4e/0x280 [ 458.317453][ T5767] vfs_get_tree+0x92/0x320 [ 458.317499][ T5767] path_mount+0x7d0/0x2850 [ 458.317547][ T5767] __x64_sys_mount+0x293/0x310 [ 458.317597][ T5767] do_syscall_64+0x123/0x790 [ 458.317642][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.317678][ T5767] [ 458.317687][ T5767] Freed by task 15: [ 458.317704][ T5767] kasan_save_stack+0x30/0x50 [ 458.317741][ T5767] kasan_save_track+0x14/0x30 [ 458.317778][ T5767] kasan_save_free_info+0x3b/0x70 [ 458.317831][ T5767] __kasan_slab_free+0x5f/0x80 [ 458.317871][ T5767] kmem_cache_free+0x127/0x6c0 [ 458.317925][ T5767] gfs2_glock_dealloc+0xd0/0x160 [ 458.317960][ T5767] rcu_core+0x5f0/0x1260 [ 458.318003][ T5767] handle_softirqs+0x1e6/0x9d0 [ 458.318037][ T5767] run_ksoftirqd+0x38/0x60 [ 458.318070][ T5767] smpboot_thread_fn+0x3d3/0xab0 [ 458.318116][ T5767] kthread+0x373/0x450 [ 458.318163][ T5767] ret_from_fork+0x730/0xd60 [ 458.318199][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.318234][ T5767] [ 458.318243][ T5767] Last potentially related work creation: [ 458.318257][ T5767] kasan_save_stack+0x30/0x50 [ 458.318297][ T5767] kasan_record_aux_stack+0xa7/0xc0 [ 458.318350][ T5767] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 458.318395][ T5767] gfs2_glock_free+0x35/0xa0 [ 458.318435][ T5767] glock_work_func+0x437/0x4d0 [ 458.318486][ T5767] process_one_work+0xac7/0x1b10 [ 458.318540][ T5767] worker_thread+0x5ef/0xe50 [ 458.318592][ T5767] kthread+0x373/0x450 [ 458.318644][ T5767] ret_from_fork+0x730/0xd60 [ 458.318680][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.318721][ T5767] [ 458.318730][ T5767] Second to last potentially related work creation: [ 458.318743][ T5767] kasan_save_stack+0x30/0x50 [ 458.318780][ T5767] kasan_record_aux_stack+0xa7/0xc0 [ 458.318834][ T5767] insert_work+0x36/0x230 [ 458.318884][ T5767] __queue_work+0xa60/0x1370 [ 458.318935][ T5767] __queue_delayed_work+0x357/0x450 [ 458.318990][ T5767] queue_delayed_work_on+0x180/0x1e0 [ 458.319047][ T5767] gfs2_glock_queue_work+0x75/0x120 [ 458.319092][ T5767] do_xmote+0x453/0x680 [ 458.319139][ T5767] run_queue+0x555/0x6a0 [ 458.319186][ T5767] glock_work_func+0x35b/0x4d0 [ 458.319234][ T5767] process_one_work+0xac7/0x1b10 [ 458.319286][ T5767] worker_thread+0x5ef/0xe50 [ 458.319336][ T5767] kthread+0x373/0x450 [ 458.319381][ T5767] ret_from_fork+0x730/0xd60 [ 458.319416][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.319450][ T5767] [ 458.319459][ T5767] The buggy address belongs to the object at ffff88807f0a63a8 [ 458.319459][ T5767] which belongs to the cache gfs2_glock(aspace) of size 1176 [ 458.319490][ T5767] The buggy address is located 288 bytes inside of [ 458.319490][ T5767] freed 1176-byte region [ffff88807f0a63a8, ffff88807f0a6840) [ 458.319528][ T5767] [ 458.319538][ T5767] The buggy address belongs to the physical page: [ 458.319553][ T5767] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f0a4 [ 458.319586][ T5767] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 458.319624][ T5767] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 458.319657][ T5767] page_type: f5(slab) [ 458.319689][ T5767] raw: 00fff00000000040 ffff8881404443c0 dead000000000100 dead000000000122 [ 458.319725][ T5767] raw: 0000000000000000 00000002000c000c 00000000f5000000 0000000000000000 [ 458.319762][ T5767] head: 00fff00000000040 ffff8881404443c0 dead000000000100 dead000000000122 [ 458.319798][ T5767] head: 0000000000000000 00000002000c000c 00000000f5000000 0000000000000000 [ 458.319835][ T5767] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 458.319871][ T5767] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 458.319894][ T5767] page dumped because: kasan: bad access detected [ 458.319912][ T5767] page_owner tracks the page as allocated [ 458.319925][ T5767] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6706, tgid 6705 (syz.5.287), ts 164153393846 [ 458.319985][ T5767] post_alloc_hook+0xfd/0x120 [ 458.320036][ T5767] get_page_from_freelist+0x110d/0x35d0 [ 458.320113][ T5767] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 458.320175][ T5767] new_slab+0xa9/0x6e0 [ 458.320227][ T5767] refill_objects+0xe3/0x410 [ 458.320282][ T5767] __pcs_replace_empty_main+0x35e/0x650 [ 458.320333][ T5767] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 458.320366][ T5767] gfs2_glock_get+0x1e5/0x1260 [ 458.320409][ T5767] gfs2_inode_lookup+0x2e0/0x920 [ 458.320447][ T5767] gfs2_lookup_root+0x57/0xe0 [ 458.320504][ T5767] init_sb+0xa75/0xfd0 [ 458.320559][ T5767] gfs2_fill_super+0x1acb/0x2d00 [ 458.320593][ T5767] get_tree_bdev_flags+0x38c/0x620 [ 458.320634][ T5767] gfs2_get_tree+0x4e/0x280 [ 458.320691][ T5767] vfs_get_tree+0x92/0x320 [ 458.320741][ T5767] path_mount+0x7d0/0x2850 [ 458.320793][ T5767] page last free pid 4972 tgid 4972 ts 153690700258 stack trace: [ 458.320819][ T5767] __free_frozen_pages+0x79f/0x10f0 [ 458.320867][ T5767] qlist_free_all+0x47/0xf0 [ 458.320900][ T5767] kasan_quarantine_reduce+0x1a0/0x1f0 [ 458.320937][ T5767] __kasan_slab_alloc+0x69/0x90 [ 458.320978][ T5767] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 458.321016][ T5767] __alloc_skb+0x140/0x710 [ 458.321059][ T5767] alloc_skb_with_frags+0xdd/0x760 [ 458.321109][ T5767] sock_alloc_send_pskb+0x89f/0xa40 [ 458.321149][ T5767] unix_dgram_sendmsg+0x3f4/0x1a80 [ 458.321202][ T5767] __sys_sendto+0x48b/0x4e0 [ 458.321242][ T5767] __x64_sys_sendto+0xe0/0x1c0 [ 458.321286][ T5767] do_syscall_64+0x123/0x790 [ 458.321323][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.321362][ T5767] [ 458.321371][ T5767] Memory state around the buggy address: [ 458.321390][ T5767] ffff88807f0a6380: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb [ 458.321417][ T5767] ffff88807f0a6400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.321444][ T5767] >ffff88807f0a6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.321467][ T5767] ^ [ 458.321488][ T5767] ffff88807f0a6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.321515][ T5767] ffff88807f0a6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.321536][ T5767] ================================================================== [ 458.321580][ T5767] ================================================================== [ 458.321596][ T5767] BUG: KASAN: slab-use-after-free in gfs2_remove_from_ail+0x323/0x340 [ 458.321668][ T5767] Write of size 8 at addr ffff88807f0a64c8 by task kworker/1:7/5767 [ 458.321699][ T5767] [ 458.321717][ T5767] CPU: 1 UID: 0 PID: 5767 Comm: kworker/1:7 Tainted: G B L syzkaller #0 PREEMPT(full) [ 458.321775][ T5767] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 458.321792][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 458.321820][ T5767] Workqueue: events gfs2_withdraw_func [ 458.321879][ T5767] Call Trace: [ 458.321891][ T5767] [ 458.321906][ T5767] dump_stack_lvl+0x100/0x190 [ 458.321961][ T5767] print_report+0x13d/0x4b0 [ 458.322024][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.322072][ T5767] ? __virt_addr_valid+0x239/0x430 [ 458.322112][ T5767] ? gfs2_remove_from_ail+0x323/0x340 [ 458.322175][ T5767] kasan_report+0xdf/0x1c0 [ 458.322223][ T5767] ? gfs2_remove_from_ail+0x323/0x340 [ 458.322293][ T5767] gfs2_remove_from_ail+0x323/0x340 [ 458.322360][ T5767] gfs2_ail_drain+0x39c/0x6b0 [ 458.322401][ T5767] do_withdraw+0xeb/0x300 [ 458.322452][ T5767] ? __pfx_do_withdraw+0x10/0x10 [ 458.322509][ T5767] ? lock_acquire+0x5e/0x380 [ 458.322550][ T5767] gfs2_withdraw_func+0x349/0x3d0 [ 458.322608][ T5767] process_one_work+0xac7/0x1b10 [ 458.322677][ T5767] ? __pfx_process_one_work+0x10/0x10 [ 458.322731][ T5767] ? lock_acquire+0x1d1/0x380 [ 458.322774][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.322820][ T5767] worker_thread+0x5ef/0xe50 [ 458.322878][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 458.322931][ T5767] ? kthread+0x13a/0x450 [ 458.322977][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 458.323031][ T5767] kthread+0x373/0x450 [ 458.323077][ T5767] ? __pfx_kthread+0x10/0x10 [ 458.323126][ T5767] ret_from_fork+0x730/0xd60 [ 458.323164][ T5767] ? __pfx_ret_from_fork+0x10/0x10 [ 458.323201][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.323244][ T5767] ? __switch_to+0x800/0x10f0 [ 458.323290][ T5767] ? __switch_to_asm+0x39/0x70 [ 458.323324][ T5767] ? __pfx_kthread+0x10/0x10 [ 458.323373][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.323420][ T5767] [ 458.323432][ T5767] [ 458.323441][ T5767] Allocated by task 10057: [ 458.323456][ T5767] kasan_save_stack+0x30/0x50 [ 458.323490][ T5767] kasan_save_track+0x14/0x30 [ 458.323524][ T5767] __kasan_slab_alloc+0x89/0x90 [ 458.323559][ T5767] kmem_cache_alloc_noprof+0x269/0x6a0 [ 458.323591][ T5767] gfs2_glock_get+0x1e5/0x1260 [ 458.323633][ T5767] gfs2_inode_lookup+0x2e0/0x920 [ 458.323670][ T5767] gfs2_lookup_root+0x57/0xe0 [ 458.323725][ T5767] init_sb+0xa17/0xfd0 [ 458.323779][ T5767] gfs2_fill_super+0x1acb/0x2d00 [ 458.323812][ T5767] get_tree_bdev_flags+0x38c/0x620 [ 458.323846][ T5767] gfs2_get_tree+0x4e/0x280 [ 458.323901][ T5767] vfs_get_tree+0x92/0x320 [ 458.323949][ T5767] path_mount+0x7d0/0x2850 [ 458.324001][ T5767] __x64_sys_mount+0x293/0x310 [ 458.324053][ T5767] do_syscall_64+0x123/0x790 [ 458.324090][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.324126][ T5767] [ 458.324134][ T5767] Freed by task 15: [ 458.324151][ T5767] kasan_save_stack+0x30/0x50 [ 458.324188][ T5767] kasan_save_track+0x14/0x30 [ 458.324224][ T5767] kasan_save_free_info+0x3b/0x70 [ 458.324280][ T5767] __kasan_slab_free+0x5f/0x80 [ 458.324324][ T5767] kmem_cache_free+0x127/0x6c0 [ 458.324377][ T5767] gfs2_glock_dealloc+0xd0/0x160 [ 458.324412][ T5767] rcu_core+0x5f0/0x1260 [ 458.324455][ T5767] handle_softirqs+0x1e6/0x9d0 [ 458.324488][ T5767] run_ksoftirqd+0x38/0x60 [ 458.324520][ T5767] smpboot_thread_fn+0x3d3/0xab0 [ 458.324564][ T5767] kthread+0x373/0x450 [ 458.324612][ T5767] ret_from_fork+0x730/0xd60 [ 458.324653][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.324688][ T5767] [ 458.324697][ T5767] Last potentially related work creation: [ 458.324711][ T5767] kasan_save_stack+0x30/0x50 [ 458.324747][ T5767] kasan_record_aux_stack+0xa7/0xc0 [ 458.324800][ T5767] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 458.324844][ T5767] gfs2_glock_free+0x35/0xa0 [ 458.324884][ T5767] glock_work_func+0x437/0x4d0 [ 458.324935][ T5767] process_one_work+0xac7/0x1b10 [ 458.324989][ T5767] worker_thread+0x5ef/0xe50 [ 458.325044][ T5767] kthread+0x373/0x450 [ 458.325092][ T5767] ret_from_fork+0x730/0xd60 [ 458.325127][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.325167][ T5767] [ 458.325176][ T5767] Second to last potentially related work creation: [ 458.325190][ T5767] kasan_save_stack+0x30/0x50 [ 458.325227][ T5767] kasan_record_aux_stack+0xa7/0xc0 [ 458.325282][ T5767] insert_work+0x36/0x230 [ 458.325332][ T5767] __queue_work+0xa60/0x1370 [ 458.325384][ T5767] __queue_delayed_work+0x357/0x450 [ 458.325439][ T5767] queue_delayed_work_on+0x180/0x1e0 [ 458.325498][ T5767] gfs2_glock_queue_work+0x75/0x120 [ 458.325545][ T5767] do_xmote+0x453/0x680 [ 458.325594][ T5767] run_queue+0x555/0x6a0 [ 458.325650][ T5767] glock_work_func+0x35b/0x4d0 [ 458.325700][ T5767] process_one_work+0xac7/0x1b10 [ 458.325755][ T5767] worker_thread+0x5ef/0xe50 [ 458.325809][ T5767] kthread+0x373/0x450 [ 458.325856][ T5767] ret_from_fork+0x730/0xd60 [ 458.325892][ T5767] ret_from_fork_asm+0x1a/0x30 [ 458.325928][ T5767] [ 458.325937][ T5767] The buggy address belongs to the object at ffff88807f0a63a8 [ 458.325937][ T5767] which belongs to the cache gfs2_glock(aspace) of size 1176 [ 458.325969][ T5767] The buggy address is located 288 bytes inside of [ 458.325969][ T5767] freed 1176-byte region [ffff88807f0a63a8, ffff88807f0a6840) [ 458.326008][ T5767] [ 458.326018][ T5767] The buggy address belongs to the physical page: [ 458.326034][ T5767] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f0a4 [ 458.326068][ T5767] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 458.326099][ T5767] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 458.326130][ T5767] page_type: f5(slab) [ 458.326160][ T5767] raw: 00fff00000000040 ffff8881404443c0 dead000000000100 dead000000000122 [ 458.326199][ T5767] raw: 0000000000000000 00000002000c000c 00000000f5000000 0000000000000000 [ 458.326236][ T5767] head: 00fff00000000040 ffff8881404443c0 dead000000000100 dead000000000122 [ 458.326271][ T5767] head: 0000000000000000 00000002000c000c 00000000f5000000 0000000000000000 [ 458.326306][ T5767] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 458.326340][ T5767] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 458.326362][ T5767] page dumped because: kasan: bad access detected [ 458.326380][ T5767] page_owner tracks the page as allocated [ 458.326393][ T5767] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6706, tgid 6705 (syz.5.287), ts 164153393846 [ 458.326451][ T5767] post_alloc_hook+0xfd/0x120 [ 458.326503][ T5767] get_page_from_freelist+0x110d/0x35d0 [ 458.326559][ T5767] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 458.326627][ T5767] new_slab+0xa9/0x6e0 [ 458.326678][ T5767] refill_objects+0xe3/0x410 [ 458.326733][ T5767] __pcs_replace_empty_main+0x35e/0x650 [ 458.326787][ T5767] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 458.326822][ T5767] gfs2_glock_get+0x1e5/0x1260 [ 458.326864][ T5767] gfs2_inode_lookup+0x2e0/0x920 [ 458.326900][ T5767] gfs2_lookup_root+0x57/0xe0 [ 458.326954][ T5767] init_sb+0xa75/0xfd0 [ 458.327009][ T5767] gfs2_fill_super+0x1acb/0x2d00 [ 458.327042][ T5767] get_tree_bdev_flags+0x38c/0x620 [ 458.327075][ T5767] gfs2_get_tree+0x4e/0x280 [ 458.327129][ T5767] vfs_get_tree+0x92/0x320 [ 458.327175][ T5767] path_mount+0x7d0/0x2850 [ 458.327226][ T5767] page last free pid 4972 tgid 4972 ts 153690700258 stack trace: [ 458.327252][ T5767] __free_frozen_pages+0x79f/0x10f0 [ 458.327299][ T5767] qlist_free_all+0x47/0xf0 [ 458.327330][ T5767] kasan_quarantine_reduce+0x1a0/0x1f0 [ 458.327365][ T5767] __kasan_slab_alloc+0x69/0x90 [ 458.327405][ T5767] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 458.327442][ T5767] __alloc_skb+0x140/0x710 [ 458.327483][ T5767] alloc_skb_with_frags+0xdd/0x760 [ 458.327532][ T5767] sock_alloc_send_pskb+0x89f/0xa40 [ 458.327570][ T5767] unix_dgram_sendmsg+0x3f4/0x1a80 [ 458.327629][ T5767] __sys_sendto+0x48b/0x4e0 [ 458.327669][ T5767] __x64_sys_sendto+0xe0/0x1c0 [ 458.327710][ T5767] do_syscall_64+0x123/0x790 [ 458.327748][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.327785][ T5767] [ 458.327793][ T5767] Memory state around the buggy address: [ 458.327811][ T5767] ffff88807f0a6380: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb [ 458.327840][ T5767] ffff88807f0a6400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.327867][ T5767] >ffff88807f0a6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.327888][ T5767] ^ [ 458.327909][ T5767] ffff88807f0a6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.327937][ T5767] ffff88807f0a6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.327958][ T5767] ================================================================== [ 458.328025][ T5767] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 461.044634][ T5767] CPU: 1 UID: 0 PID: 5767 Comm: kworker/1:7 Tainted: G B L syzkaller #0 PREEMPT(full) [ 461.055632][ T5767] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 461.061178][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 461.071249][ T5767] Workqueue: events gfs2_withdraw_func [ 461.076925][ T5767] Call Trace: [ 461.080240][ T5767] [ 461.083173][ T5767] dump_stack_lvl+0x100/0x190 [ 461.087885][ T5767] vpanic+0x553/0x970 [ 461.091910][ T5767] ? __pfx_vpanic+0x10/0x10 [ 461.096428][ T5767] ? trace_irq_enable.constprop.0+0x122/0x160 [ 461.102528][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.108195][ T5767] ? irqentry_exit+0x2c9/0xa90 [ 461.113068][ T5767] ? gfs2_remove_from_ail+0x323/0x340 [ 461.118608][ T5767] panic+0xd1/0xe0 [ 461.122356][ T5767] ? __pfx_panic+0x10/0x10 [ 461.126788][ T5767] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 461.132824][ T5767] end_report.part.0+0x68/0x90 [ 461.137644][ T5767] kasan_report.cold+0xe/0x18 [ 461.142363][ T5767] ? gfs2_remove_from_ail+0x323/0x340 [ 461.147786][ T5767] gfs2_remove_from_ail+0x323/0x340 [ 461.153023][ T5767] gfs2_ail_drain+0x39c/0x6b0 [ 461.157717][ T5767] do_withdraw+0xeb/0x300 [ 461.162082][ T5767] ? __pfx_do_withdraw+0x10/0x10 [ 461.167070][ T5767] ? lock_acquire+0x5e/0x380 [ 461.171690][ T5767] gfs2_withdraw_func+0x349/0x3d0 [ 461.176754][ T5767] process_one_work+0xac7/0x1b10 [ 461.181770][ T5767] ? __pfx_process_one_work+0x10/0x10 [ 461.187227][ T5767] ? lock_acquire+0x1d1/0x380 [ 461.191928][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.197585][ T5767] worker_thread+0x5ef/0xe50 [ 461.202216][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 461.207364][ T5767] ? kthread+0x13a/0x450 [ 461.211633][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 461.216773][ T5767] kthread+0x373/0x450 [ 461.220870][ T5767] ? __pfx_kthread+0x10/0x10 [ 461.225486][ T5767] ret_from_fork+0x730/0xd60 [ 461.230091][ T5767] ? __pfx_ret_from_fork+0x10/0x10 [ 461.235221][ T5767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.240875][ T5767] ? __switch_to+0x800/0x10f0 [ 461.245665][ T5767] ? __switch_to_asm+0x39/0x70 [ 461.250524][ T5767] ? __pfx_kthread+0x10/0x10 [ 461.255163][ T5767] ret_from_fork_asm+0x1a/0x30 [ 461.259979][ T5767] [ 461.263282][ T5767] Kernel Offset: disabled [ 461.267597][ T5767] Rebooting in 86400 seconds..