last executing test programs: 3m15.90683434s ago: executing program 1 (id=276): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x7, 0x1, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x7, 0x341, 0x5}) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000480)) 3m15.678286125s ago: executing program 1 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x92}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0xf, 0x4, 0xb7, '\x00', 0x8}, {0xff, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x7f, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x8}, {0x7, 0x3, 0x4}]}}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) 3m15.453211301s ago: executing program 1 (id=282): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read(r0, &(0x7f00000002c0)=""/153, 0x99) 3m15.281551045s ago: executing program 1 (id=284): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 3m15.08107244s ago: executing program 1 (id=286): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x20000000, 0x0) syz_open_procfs(r0, 0x0) 3m14.701013339s ago: executing program 1 (id=291): unshare(0x22020600) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) 3m14.427919656s ago: executing program 32 (id=291): unshare(0x22020600) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) 2m37.075025759s ago: executing program 4 (id=566): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000280)={[{@resgid}, {@journal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7b1}}]}, 0x1, 0x571, &(0x7f0000000780)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2a, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m36.852905835s ago: executing program 4 (id=568): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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") r1 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x27841e, 0x0, 0x4, 0x0, &(0x7f0000000280)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) write$cgroup_type(r2, &(0x7f0000000040), 0x9) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000003b00)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES64=r1, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000080)='./bus\x00') 2m35.696168612s ago: executing program 4 (id=583): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="9b", 0x1}], 0x1}}], 0x1, 0x80) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 2m35.253032653s ago: executing program 4 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 2m35.089140147s ago: executing program 4 (id=588): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x8) ptrace$pokeuser(0x6, r0, 0x388, 0xffefffffff7f0504) 2m34.759051495s ago: executing program 4 (id=589): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m34.296537866s ago: executing program 33 (id=589): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m11.823946964s ago: executing program 0 (id=757): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002f000000d40000002000000095000000000000007bac32b25ef8fa1700215c9f0ecae5731ffa5975e80e9efd118a60a86a6afd6e7bb79dc57a0983ca3752"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c) 2m11.59275196s ago: executing program 0 (id=759): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) pread64(r1, &(0x7f0000000300)=""/206, 0xce, 0xdb) 2m11.382314955s ago: executing program 0 (id=760): r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000002, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80002003}) 2m11.17029398s ago: executing program 0 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m11.047617393s ago: executing program 0 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m10.907609216s ago: executing program 0 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m55.747071809s ago: executing program 34 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m20.860763794s ago: executing program 2 (id=1097): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) 1m20.352324736s ago: executing program 2 (id=1102): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1, {0x7, 0x2b, 0x0, 0xffffffff80050202, 0x5, 0xfc, 0x8, 0x0, 0x0, 0x0, 0x1f91affae52e4a1d, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x800f4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m19.76785392s ago: executing program 2 (id=1106): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 1m17.190339502s ago: executing program 2 (id=1108): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1m14.922705506s ago: executing program 2 (id=1123): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x22042, 0x3db) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) 1m14.300032891s ago: executing program 2 (id=1124): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m4.558924445s ago: executing program 3 (id=1192): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m4.412751258s ago: executing program 3 (id=1194): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[], 0xffdd) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) splice(r0, 0x0, r3, 0x0, 0x8001, 0x1) 1m4.383621638s ago: executing program 3 (id=1195): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m4.231076822s ago: executing program 3 (id=1198): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)="17000000020002", 0x7) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m3.336218474s ago: executing program 3 (id=1204): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 1m3.08596992s ago: executing program 3 (id=1205): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x40, 0x30, 0xb, "75675a8f4aa1cfe4b31a4a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 59.059987956s ago: executing program 35 (id=1124): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 47.476828114s ago: executing program 36 (id=1205): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x40, 0x30, 0xb, "75675a8f4aa1cfe4b31a4a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 26.215516772s ago: executing program 6 (id=1477): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 25.996667778s ago: executing program 6 (id=1480): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 25.817176132s ago: executing program 6 (id=1484): socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 25.703463415s ago: executing program 6 (id=1486): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 25.569134948s ago: executing program 6 (id=1489): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00007fd000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 25.255495956s ago: executing program 6 (id=1492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000001c00)=ANY=[], 0x0) 24.768957337s ago: executing program 37 (id=1492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000001c00)=ANY=[], 0x0) 7.51144506s ago: executing program 9 (id=1587): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000021300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d811, 0x0, 0x1, 0x0, &(0x7f0000000140)) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xd40, 0x98) lseek(r0, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000), 0x2, 0x522, &(0x7f00000006c0)="$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") 6.605216701s ago: executing program 9 (id=1589): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) 5.121672377s ago: executing program 8 (id=1593): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) close_range(r0, r1, 0x0) 4.890227393s ago: executing program 8 (id=1595): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) 4.696665057s ago: executing program 8 (id=1598): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 4.044682833s ago: executing program 7 (id=1599): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000021300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d811, 0x0, 0x1, 0x0, &(0x7f0000000140)) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xd40, 0x98) lseek(r0, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000), 0x2, 0x522, &(0x7f00000006c0)="$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") 4.044073233s ago: executing program 9 (id=1607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) close(0x3) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, 0x0) 4.043564442s ago: executing program 8 (id=1608): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0x10, 0xfffd, 0xfffffffffffffffb, 0x8001, 0x1bd, 0x1fe, 0x4a, 0x28, 0x0, 0x2}) 2.764424924s ago: executing program 7 (id=1600): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x101040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000440)="c7d25268", 0x4) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.764282413s ago: executing program 8 (id=1601): unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000180)=[{0x1, 0xbbdd, 0x1000}, {0x0, 0x2, 0x1800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 2.696292325s ago: executing program 5 (id=1602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000002940)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0x6, 0x3, 0x100000001, 0x5, 0x3e, 0x8, 0x10c, 0x40, 0x203, 0x6, 0x6, 0x38, 0x1, 0x1, 0x3, 0x8}, [{0x5, 0xfffffff8, 0xa, 0x3, 0x7, 0x1, 0x7, 0x6}]}, 0x78) 2.434016752s ago: executing program 8 (id=1603): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 2.411899082s ago: executing program 5 (id=1604): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) sendfile(r0, r0, 0x0, 0xfff2) 2.288706445s ago: executing program 5 (id=1605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x13f, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x131, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11d, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 2.135885068s ago: executing program 5 (id=1606): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl(r0, 0x800452d3, 0x0) 1.974301652s ago: executing program 5 (id=1609): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000000000010"]) 1.846299275s ago: executing program 9 (id=1610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x67, 0x0, 0xfc, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x6}}}}}}, 0x0) 1.744353488s ago: executing program 9 (id=1611): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 1.584287642s ago: executing program 9 (id=1612): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$gfs2(&(0x7f00000008c0), &(0x7f0000000100)='./file0\x00', 0x8c1b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x1276f, &(0x7f0000025a00)="$eJzs/XkcqHO9Ln6ve17KPCRCKSQlIqEkYyWRIRlSCYWoCGUoQ0rSQCpjE8qUJEmJUGYhIlIZI4WIJCo8r/3rWmffz9n32fdpn7Of1/16fu/3H/tzb1vfvc55dc51XWtprRkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwY8aM4lkL7fpvp/eXtv/n6WabMaPb5Z/fc//bf5m99/eU/zwzF/pfPJu/d7Yld3n/dju/433v/7fzX/rx7b73Pq/cfe99/kv/2v8dL3p449V+vNCbnnXUa04/c9Erf7TOf9v/IgAAAAAAAAD4b5Rf/y97f+mK/+lv6WbMmDnn//TX5psxY+bsM2aU1VXXfPun/yf/+zffjP9X+8vT/yf/9gEAAOB/U/Z/3fsrh/f/x7nzzZhx4AH/4a//j78ys/23/7rdhx9+dOj2PDt//7P//S+V/+Hjv9H8uQvkPit3wf/vHx8AAAD8/5fs/6b3V/qbfdZ/vn/h3OfkLpK7aO5iuc/NfV7u4rnPz31B7hK5S+YulfvC3KVzX5S7TO6Lc1+Su2zuS3OXy10+92W5K+SumPvy3JVyX5G7cu4quavmvjL3Vbmr5b46d/Xc1+Sukbtm7lq5a+fO+n0G1s19be7rcl+fu17uG3LXz31j7ga5G+a+KXej3I1zN8ndNPfNuZvlviV389wtcrfM3Sr3rblb574t9+2578jdJvedudvmbpeb32Nixrty3527Q+6OuTvlvid31m8ikd+XYsZ7c9+X+/7cXXN3y/1A7u65e+TumfvB3A/l7pW7d+6s34Bi39wP534kd7/c/XNn/czYgbkfzT0o92O5H889OPcTuYfkfjL30NxP5X469zO5n809LHfWz+F9LveI3M/nfiH3i7lH5h6Ve3TuMbnH5h6X+6XcL+d+JferuV/LPT73hNwTc2f9fOM3ck/KPTn3lNxTc0/L/Wbu6bnfyj0j99u5Z+Z+J/es3O/mnp37vdxzcr+f+4Pcc3N/mHte7vm5P8q9IPfC3Ityf5z7k9yLcy/JvTT3stzLc2f9M1hX5l6VO+uftbo695rca3N/lntd7vW5P8+9IffG3F/k3pR7c+4vc2/J/VXur3N/k3tr7m25t+fekXtn7l25v829O/ee3N/l3pv7+9w/5N6Xe3/uA7l/zH0w96HcP+U+nPtI7p9zZ2XcX3Ify/1r7uO5T+T+Lffvuf/IfTL3qdz8w0yzftq8yEeRn9suqtz8+79I7hZtbpc7M3e23GfkPjM3v79OMUdu/vm8Yq7cuXPnyZ03d77c/Dx4kZ8HL/Lz4EV+HrzIz4MXyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfJ/1q/hFcn/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+Lr+cm/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf9ZG7dI/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5P+uXssvkf5m/UCb/y+R/mfwvk/9l8r9M/pfJ/zL5Xyb/y+R/mfwvk/9l8r9M/pfJ/zL5Xyb/y+R/ucB/vv/L9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEz2lekFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZlekPifUaUXVOkFVf4HVXpBlTyu0guq9IIqvaBKL6jSC6r0giq9oEovqNILqvSCKr2gSi+o0guq9IIqvaDKzwtUyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5XF/zz/8FXyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6v7EohRJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/7N+2atO/tfJ/zr5X+dvqJP/dfK/Tv7X+T9unfyvk/918r9O/tfJ/zr5Xyf/6+R/nfyv5/3P93+dXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV+XqBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOj8vUOfnBer0gjq9oE4vqB/6Z/DW6QV1ekGdXlCnF9TJxDq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC2bFb5Ne0KQXNOkFTXpBk7+xSS9o0gua9IImvaBJL2jSC5r0gia9oEkvaNILmvSCJr2gyc8LNMn/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/5t/y/6mnZzTJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53+TnBZrkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/xPnM9rkf5v8b5P/bfK/Tf63+Re0yf82+d8m/9vkf5v8b5P/bfK/Tf63c/3n+79NL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gzc8LtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QXt+lv88x/5TS9o0wva9II2vaBNL2jTC9r0gja9oE0vaJOVbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXJN5ndOkFXXpBl17QpRd0ye8uvaDLv7BLL+jSC7r0gi69oEsv6NILuvSCLj8v0CX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/ncb/vPfUN2/5f/+33hggeR/l/zvkv/dpv/TjzP53yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nez/qzq5H+X/O+S/13yv0v+d8n/Lvk/68+37pL/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf/exf/5/BF3yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d1/9538Er0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O9u+/ct/P/898n/LvnfJf+75H+X/O+S/13yv0v+d8n/Lvnf5ecFuuR/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/s/6pxtmJv9nzvpz95P/M5P/M5P/M/N/eTOT/zPzwMzk/8zk/8zk/8zZ//P9PzO9YNbv/z8zvWBmesHM9IKZ6QUz0wtmphfMTC+YmV4wM71gpt9nDwAAAP5/KPu/9x+jmPWf0Zvx//z63gH//psZzTj51rnvWWL1nVYYeGbW7xM433/njxUAAAD4rxnZ/1/s7f9i0ec88qx1Dn/1kgPPzPrzAex/AAAAmKCR/X9kb/+Xsy1+w1pHb/ybTww8M+vPBbT/AQAAYIJG9v9Rvf1ffffel33n41d/8ZkDz+T38bH/AQAAYIpG9v/Rvf1fX77ubXtsOccepw48k9+/1/4HAACAKRrZ/8f09n/zkYNW+8SqJz7vgoFn8uf22P8AAAAwRSP7/9je/m93OnfRG+7Z9seLDDyTP6/X/gcAAIApGtn/x/X2f3fD/k8/b/4FLvnTwDOz/jX/e/t/5v/BDxgAAAD4l43s/y/19v/M3X40/w+vuHHJTQaeWTzXr/8DAADABI3s/y/39v9sP933sfVO2We3dQeeeX6u/Q8AAAATNLL/v9Lb/8+4fc2bF93jvMPvHXjmBbn2PwAAAEzQyP7/am//P/Ndn1jpwZ2WumXngWeWyLX/AQAAYIJG9v/Xevt/9qVv3u307927ypUDzyyZa/8DAADABI3s/+N7+3+OI+b5/Dt+sd4utw08s1Su/Q8AAAATNLL/T+jt/zkPfvFZz5ztkM98eOCZF+ba/wAAADBBI/v/xN7+n2u1P270+IO7P33ZwDNL59r/AAAAMEEj+//rvf0/91M/e8kdK5y12PYDz7wo1/4HAACACRrZ/9/o7f951pnt2vk2WeQNuw88s0yu/Q8AAAATNLL/T+rt/3k3WvGh13321m9eP/DMi3PtfwAAAJigkf1/cm//z3ffX+Y4+/Nr3PW2gWdeMuvv+W/9wQIAAAD/JSP7/5Te/p//K5vftdubDqyeHnhm2Vz7HwAAACZoZP+f2tv/CyzxuRkfXW65zX8/8MxLc+1/AAAAmKCR/X9ab/8/a/lvLn7Tnx885w0DzyyXa/8DAADABI3s/2/29v+Ch7734iXvWemS9w48s3yu/Q8AAAATNLL/T+/t/2cv/e2lL1z10SV/9u//4//x9bJc+x8AAAAmaGT/f6u3/xc6Yqer3rjlVrv9cuCZFXLtfwAAAJigkf1/Rm//L3zwpvc/++PHHb7PwDMr5tr/AAAAMEEj+//bvf3/nNW+ONv9R7e3PDbwzMtz7X8AAACYoJH9f2Zv/y/yjnfvv+k6l6/y5oFnVsq1/wEAAGCCRvb/d3r7f9F7vvblry2x0y5rDzzzilz7HwAAACZoZP+f1dv/iz187PmPPn7KZ+4ceGblXPsfAAAAJmhk/3+3t/+fu/7Wb++eu+nTbx14ZpVc+x8AAAAmaGT/n93b/897/YVzPOfiIxZ7YuCZVXPtfwAAAJigkf3/vd7+X/yRvR/6/YmrveHBgWdemWv/AwAAwASN7P9zevv/+b9b+9rz93/ym28ceOZVufY/AAAATNDI/v9+b/+/YOuPv+RN225z10UDz6yWa/8DAADABI3s/x/09v8SS7/w4kMvOL7aduCZV+fa/wAAADBBI/v/3N7+X/KIOxff+7a5Nt9z4JnVc+1/AAAAmKCR/f/D3v5f6uBfz1i2vPacmweeeU2u/Q8AAAATNLL/z+vt/xeutuhdt606xzJbDzyzRq79DwAAABM0sv/P7+3/pb9y+2zr3HP1T58aeGbNXPsfAAAAJmhk//+ot/9ftMRC93//49t+9Q8Dz6yVa/8DAADABI3s/wt6+3+Z5V9w1W+3PHG/9QeeWTvX/gcAAIAJGtn/F/b2/4sPvWfpuddZfeXLB55ZJ9f+BwAAgAka2f8X9fb/S47982wnHf30Te8aeGbdXPsfAAAAJmhk//+4t/+Xfd5K92/2+MYf/cDAM6/Ntf8BAABggkb2/096+/+lL5/rqmKJw7e7buCZ1+Xa/wAAADBBI/v/4t7+X+6zVy79yMU7z/OegWden2v/AwAAwASN7P9Levt/+Tfe/+b7nnvan64YeGa9XPsfAAAAJmhk/1/a2/8ve2zZcxbav/767QPPvCHX/gcAAIAJGtn/l/X2/wp3LXjUBideuu5HBp5ZP9f+BwAAgAka2f+X9/b/iltcv+cFF2wx+8MDz7wx1/4HAACACRrZ/1f09v/LX7L7sftue8wfNx14ZoNc+x8AAAAmaGT/X9nb/ysd+b29DilXPnedgWc2zLX/AQAAYIJG9v9Vvf3/io8etuVvbntsi98NPPOmXPsfAAAAJmhk//+0t/9XXmW985a7YtllfjzwzEa59j8AAABM0Mj+v7q3/1c59lMbfW/+B3663cAzG+fa/wAAADBBI/v/mt7+X/V5G5z12j3W+uoeA89skmv/AwAAwASN7P9re/v/lS//0OfnPeWg/W4aeGbWnwlg/wMAAMAEjez/n/X2/6s++53d7vzeYitvNfDMm3PtfwAAAJigkf1/XW//r/bHtbotd7r9pscHntks1/4HAACACRrZ/9f39v+rN//YPafNtttHHxp45i259j8AAABM0Mj+/3lv/6++9gWXPPWLM7fbYOCZzXPtfwAAAJigkf1/Q2//v+aJvZaaY4X15/nrwDNb5Nr/AAAAMEEj+//G3v5f44Qdl93iwUP/tNnAM1vm2v8AAAAwQSP7/xe9/b/ms8/42Tc/u8TX1xp4ZtafCWD/AwAAwASN7P+bevt/rdm/8ODTm9yz7h0Dz7w11/4HAACACRrZ/zf39v/a52wy++xv2mv2XQae2TrX/gcAAIAJGtn/v+zt/3V+8qffXvn5c/947cAzb8u1/wEAAGCCRvb/Lb39v+5eryhe+ecFz71l4Jm359r/AAAAMEEj+/9Xvf3/2l1mf977lrtpi30HnnlHrv0PAAAAEzSy/3/d2/+vu+mqn3z5tuPfdtTAM9vk2v8AAAAwQSP7/ze9/f/6PWa+qCu3OX+lgWfemWv/AwAAwASN7P9be/t/vWuv/emj2177++cPPLNtrv0PAAAAEzSy/2/r7f83/OrR+752wVyzHTDwzHa59j8AAABM0Mj+v723/9ffZoWZm554xBqzDzyzfa79DwAAABM0sv/v6O3/Ny677Rvn2X/T488YeOZdufY/AAAATNDI/r+zt/83OOrrZ9z13Cf/cu7AM+/Otf8BAABggkb2/129/b/hQV857JyLV5v/OQPP7JBr/wMAAMAEjez/3/b2/5tW3eK96y5x+buPH3hmx1z7HwAAACZoZP/f3dv/G/19n3ne9nj7iWrgmZ1y7X8AAACYoJH9f09v/2+85vl/PuPoU26Yf+CZ9+Ta/wAAADBBI/v/dwfMmG3Wf7PJZgf//G/r7LTCOQPP7Jxr/wMAAMAEjez/e3u//r/pQ2ssP9uWj+77yoFndsm1/wEAAGCCRvb/73v7/83H3XX71R9f6dijB555b679DwAAABM0sv//0Nv/my2+xKtfc89x1x428Mz7cu1/AAAAmKCR/X9fb/+/ZaXFFtl51a2WW3bgmffn2v8AAAAwQSP7//7e/t/8sF8+dfRyB77tGQPP7Jpr/wMAAMAEjez/B3r7f4tlF16g/PMa558y8MxuufY/AAAATNDI/v9jb/9vedRv/vrw5x/8/YUDz3wg1/4HAACACRrZ/w/29v9WB/3upm+8abnZFh14Zvdc+x8AAAAmaGT/P9Tb/29d9Xkvf8smZ63xuYFn9si1/wEAAGCCRvb/n3r7f+utbljrwc/ufvyKA8/smWv/AwAAwASN7P+He/v/bXcs8LVFH7z1L0sMPPPBXPsfAAAAJmhk/z/S2/9vf3S5A9dbYZH5Dx545kO59j8AAABM0Mj+/3Nv/79jw+vmmjHj3nevNvDMXrn2PwAAAEzQyP5/tLf/t9ngGcufNNtSn/jKwDN759r/AAAAMEEj+/8vvf3/zr9e/fPNdjrkhk8OPLNPrv0PAAAAEzSy/x/r7f9tf/vYn4vvrbfCiwee2TfX/gcAAIAJGtn/f+3t/+22XH6eR065cd+TB575cK79DwAAABM0sv8f7+3/7Zc94qmV91jg2GbgmY/k2v8AAAAwQSP7/4ne/n/XUW9e5JL5z7t23oFn9su1/wEAAGCCRvb/33r7/90Hve/Vh1+xz3JnDjyzf679DwAAABM0sv//3tv/O6x6yu3bbbfaX+uBZw7Itf8BAABggkb2/z96+3/H497z8icufPJZJw08c2Cu/Q8AAAATNLL/n+zt/50WP/2mZ9y+6VrfGXjmo7n2PwAAAEzQyP5/qrf/37PSkX99e3XEiUMb/6Bc+x8AAAAmaGT/P93b/zsfttEC31psrvu+OvDMx3L/V/v/1f/XfsAAAADAv+w/3//djN7+3+Wqo9ebd+gP/58xY8bHc/36PwAAAEzQyP4vevv/vbu+/Zt3nrDNO5YZeObgXPsfAAAAJmhk/5e9/f++7bc/9Hv7HX/BIQPPfCLX/gcAAIAJGtn/VW//v/+2E3Z87TFbXb3CwDOzfk7A/gcAAIAJGtn/dW//77rIAfO/fd3jlj184JlP5tr/AAAAMEEj+7/p7f/dTnrtY99acqW9PzHwzKG59j8AAABM0Mj+b3v7/wNnffjmJ5549OglB575VK79DwAAABM0sv+73v7ffeYPV3rG3Ttdf+rAM5/Otf8BAABggkb2/8ze/t/jw8/+1c9WOWX5Zw4885lc+x8AAAAmaGT/z9bb/3tedtsqq23Rbr/IwDOfzbX/AQAAYIJG9v8zevv/gz+/e6EdP3b5xy8YeOawXPsfAAAAJmhk/z+zt/8/tOPz/37cEYv89ZiBZ2b9mYD2PwAAAEzQyP6fvbf/97rqjrmLDW991qsGnvlcrv0PAAAAEzSy/+fo7f+9d13qkUdeuvtaLxl45ohc+x8AAAAmaGT/z9nb//tsv8gNJz1y1omfHXjm87n2PwAAAEzQyP6fq7f/973tVy/b7KHl7isHnvlCrv0PAAAAEzSy/+fu7f8P/+hFr/vjig8+82sDz3wx1/4HAACACRrZ//P09v9Huoe+sdima7zj+wPPHJlr/wMAAMAEjez/eXv7f7/5fvGxNxx24AULDDxzVK79DwAAABM0sv/n6+3//U+d793n7rjP1d8eeOboXPsfAAAAJmhk/8/f2/8HrH3Prfudfd6ycww8c0yu/Q8AAAATNLL/F+jt/wOfeMFrPnPjAnsvPPDMsbn2PwAAAEzQyP5/Vm//f/SPCy12y8wbj/7BwDPH5fb2f/vf8wMGAAAA/mUj+3/B3v4/aPPb/7HMAutd//KBZ76U69f/AQAAYIJG9v+ze/v/Yy/4yHwPXXnI8kcOPPPlXPsfAAAAJmhk/y/U2/8fP+a8hxc5dantDxx45iu5/2H/P+v/9g8YAAAA+JeN7P+Fe/v/4M8ceN3r97z34y8YeOaruX79HwAAACZoZP8/p7f/P7Hy61Y472OHH/CzgWe+lmv/AwAAwASN7P9Fevv/kC9+/JbFt9j4ne8deOb4XPsfAAAAJmhk/y/a2/+fXG7tV/18ladX2mfgmRNy7X8AAACYoJH9v1hv/x/6qr0XPvju1W/85cAzJ+ba/wAAADBBI/v/ub39/6kDL3x8zydO/PKb/8Mj+8/4er7sfwAAAJigkf3/vN7+//TVD52/8pLbfvixgWe+kWv/AwAAwASN7P/Fe/v/Mx980dsvWffqpe8ceOakXPsfAAAAJmhk/z+/t/8/u+18+x9+zBxXrj3wzMm59j8AAABM0Mj+f0Fv/x/2y198ebv9HjvviYFnTsm1/wEAAGCCRvb/Er39f/jCf71z3xNW3uqtA8+cmmv/AwAAwASN7P8le/v/c197WXXIT46Z840Dz5yWa/8DAADABI3s/6V6+/+Is5/5/N8stsVDDw48881c+x8AAAAmaGT/v7C3/z8/5zUXLVddetK2A8+cnmv/AwAAwASN7P+le/v/C/u8f7n7bq9fd9HAM9/Ktf8BAABggkb2/4t6+/+LF516zUIXnjbfzQPPnJFr/wMAAMAEjez/ZXr7/8gbP//ABtvt/MieA898O9f+BwAAgAka2f8v7u3/o9632ZwX7HnmAZsMPHNmrv0PAAAAEzSy/1/S2/9HX33UPUucuts7/zTwzHdy7X8AAACYoJH9v2xv/x/zwY27m6+8faV7B545K9f+BwAAgAka2f8v7e3/Y7fdeamDFljsxnUHnvlurv0PAAAAEzSy/5fr7f/jfvmtS3adedCXrxx45uxc+x8AAAAmaGT/L9/b/1867+1nXXHjWh/eeeCZ7+Xa/wAAADBBI/v/Zb39/+Xi6I1edfYDS3944Jlzcu1/AAAAmKCR/b9Cb/9/ZYETdnv/jsteedvAM9/Ptf8BAABggkb2/4q9/f/Vb2//+S8ddtN52w8884Nc+x8AAAAmaGT/v7y3/792+icuOmDTBbe6bOCZc3PtfwAAAJigkf2/Um//H/+sNZ+/+4rnznn9wDM/zLX/AQAAYIJG9v8revv/hHLf6oUP7fXQ7gPPnJdr/wMAAMAEjez/lXv7/8Qf/OjOGx+556SnB545P9f+BwAAgAka2f+r9Pb/169+7pzzvHSJ171t4Jkf5dr/AAAAMEEj+3/V3v7/xgdveeCuDQ+d7w0Dz1yQa/8DAADABI3s/1f29v9J2/72mnOOWP+R3w88c2Gu/Q8AAAATNLL/X9Xb/yf/csnl1j31kPdtN/DMRbn2PwAAAEzQyP5frbf/T9nn3ktu33O9w3488Mysv2b/AwAAwASN7P9X9/b/qRctvtRLFrj31zcNPPOTXPsfAAAAJmhk/6/e2/+n3ficbq8rl3rlHgPPXJxr/wMAAMAEjez/1/T2/zffd+s9n7rxvN0fH3jmklz7HwAAACZoZP+v0dv/p+/300tePXOfI7YaeObSXPsfAAAAJmhk/6/Z2//fumSOpa7d8cbLNhh45rJc+x8AAAAmaGT/r9Xb/2dct3J37NkLvPChgWcuz7X/AQAAYIJG9v/avf3/7fc8fM9Omz642WYDz1yRa/8DAADABI3s/3V6+//MU244ZrfDljv7rwPPXJlr/wMAAMAEjez/dXv7/zvzLrDvRx868I47Bp65Ktf+BwAAgAka2f+v7e3/s9rltrppxTWKtQae+Wmu/Q8AAAATNLL/X9fb/989/w8/WPKlt77+2oFnrs61/wEAAGCCRvb/63v7/+wr1t/8jkcWOXWXgWeuybX/AQAAYIJG9v96vf3/vQ985nvzHXHWk/sOPDPrnwmw/wEAAGCCRvb/G3r7/5x3f/8Lr9tw90VuGXjmZ7n2PwAAAEzQyP5fv7f/v/+b3T549hanvO+pgWeuy7X/AQAAYIJG9v8be/v/B/t998sv/dhOh2098Mz1ufY/AAAATNDI/t+gt//PvWTP/W+9+/Jfrz/wzM9z7X8AAACYoJH9v2Fv///wuje9/ZOrtK/8w8AzN+Ta/wAAADBBI/v/Tb39f957Pnn+Pkset/u7Bp65Mdf+BwAAgAka2f8b9fb/+bPtc9VPntjqiMsHnvlFrv0PAAAAEzSy/zfu7f8ffff8pV92zKOXXTfwzE259j8AAABM0Mj+36S3/y84+eDZ3rXuSi/8wMAzN+fa/wAAADBBI/t/097+v3DRNe4/8oRrN7ti4Jlf5tr/AAAAMEEj+//Nvf1/0Ws3uuPi/eY6+z0Dz9ySa/8DAADABI3s/816+//H/ziyXH6x4+/4yMAzv8q1/wEAAGCCRvb/W3r7/ye/P/0F2/9km+L2gWd+nWv/AwAAwASN7P/Ne/v/4k3e8+Ojbn/y9ZsOPPObXPsfAAAAJmhk/2/R2/+XLHXFSzepVjv14YFnbs21/wEAAGCCRvb/lr39f+mX5rz6+O2OePJ3A8/clmv/AwAAwASN7P+tevv/skNe/se/XLjpIusMPDPr9wSw/wEAAGCCRvb/W3v7//IVHpmr3XCJhU4ZeOaOXPsfAAAAJmhk/2/d2/9XHL783V864p7HnzHwzJ259j8AAABM0Mj+f1tv/1+5zGPt+x9Z//RFB565K9f+BwAAgAka2f9v7+3/q1a/+oWveumhG1w48Mxvc+1/AAAAmKCR/f+O3v7/6ceecekVKy5YrzjwzN259j8AAABM0Mj+36a3/6++cqsDD33opns+N/DMPbn2PwAAAEzQyP5/Z2//X7P7l7bb+7C9vnPwwDO/y7X/AQAAYIJG9v+2vf1/7Q4nrbXspudutMTAM/fm2v8AAAAwQSP7f7ve/v/Zrdt87baz13r+Vwae+X2u/Q8AAAATNLL/t+/t/+ueu9ZvLtvxoItXG3jmD7n2PwAAAEzQyP5/V2//X/+Nj62+0sxlj3rxwDP35dr/AAAAMEEj+//dvf3/8+9c8Nx33vjABz858Mz9ufY/AAAATNDI/t+ht/9veOZeTx5x5W6vaQaeeSDX/gcAAIAJGtn/O/b2/437/2rezRc487aTB575Y679DwAAABM0sv936u3/X1y6yJ++vudih5458MyDufY/AAAATNDI/n9Pb//fdP1S1//p1Nt3nnfgmYdy7X8AAACYoP9k/x8wY0a3c2//37zzHStWF9YLrTTwzJ9y7X8AAACYoJFf/9+lt/9/eeXzf3nMdpc+ftTAMw/n2v8AAAAwQSP7/729/X/L7ne/8j3VzqcfMPDMI7n2PwAAAEzQyP5/X2///2qH+n/5zJ9z7X8AAACYoJH9//7e/v/1rc9+4pqfrFyfMfDMo7n2PwAAAEzQyP7ftbf/f3PB/Yftudhj98w+8Mxfcu1/AAAAmKCR/b9bb//fWi/73oP32+I7zxl45rFc+x8AAAAmaGT/f6C3/2+be8E3/vyEYzY6d+CZv+ba/wAAADBBI/t/997+v/20689YfN1tn18NPPN47r+0/9f4r/yAAQAAgH/ZyP7fo7f/7zh1hSdffcyJFx8/8MwTuX79HwAAACZoZP/v2dv/d8736HOvfWKOo84ZeOZvufY/AAAATNDI/v9gb//f1V27+rFLXv3B+Qee+Xuu/Q8AAAATNLL/P9Tb/7/90czf7LTKxq85euCZf+Ta/wAAADBBI/t/r97+v/vK01Y8/e7Db3vlwDNP5tr/AAAAMEEj+3/v3v6/Z/ddrn/Hx1Y/dNmBZ57Ktf8BAABggkb2/z69/f+7Hd7yp2du8fTOhw0883Su/Q8AAAATNLL/9+3t/3tvPXzex89c4PufGnhl1of9DwAAABM0sv8/3Nv/v99/kye23eXGt7xo4JVZf4/9DwAAABM0sv8/0tv/f7j0C8/53Oz7lKsPvFLm41/Z/08//V/7IQMAAAD/opH9v19v/993/RmvvPS68377pYFXqnz49X8AAACYoJH9v39v/9+/846/fMU1S50298ArdT7sfwAAAJigkf1/QG//P/DjR1bYcZ571z9r4JUmH/Y/AAAATNDI/j+wt///uO/Lrztut/We+42BV9p82P8AAAAwQSP7/6O9/f/g++d8+GffOuSpbuCVWX/N/gcAAIAJGtn/B/X2/0O/uGK+1d6w+6d/NPDKrH+9/Q8AAAATNLL/P9bb/39a8L73L3HkWe997sArs+XD/gcAAIAJGtn/H+/t/4e/9ZLP3PzYIqvOHHjlGfmw/wEAAGCCRvb/wb39/8i5zzr9oGVu/eVpA688Mx/2PwAAAEzQyP7/RG///7m6bsNdV17jc0sNvDJ7Pux/AAAAmKCR/X9Ib/8/+qEPHP+9+w/c9WMDr8yRD/sfAAAAJmhk/3+yt///cs3Za7/2U8st8fmBV+bMh/0PAAAAEzSy/w/t7f/HbvnstvNu/uClLxt4Za582P8AAAAwQSP7/1O9/f/X7V5/wJ1rrvT9Zw28Mnc+7H8AAACYoJH9/+ne/n/8x4fuvO+XH33L2QOvzJMP+x8AAAAmaGT/f6a3/5/Y942fPOTJrcoTB16ZNx/2PwAAAEzQyP7/bG///+39HzzlN4sf99ti4JVZu9/+BwAAgAka2f+H9fb/339x5huWW6097TMDr8yfD/sfAAAAJmhk/x/e2///OGft1Y664/L1lxt4ZYF82P8AAAAwQSP7/3O9/f/k7B+/bfsDdnruKkOv5MP+BwAAgAka2f9H9Pb/U8++8Onltz7lqWMHXlkwH/9j/8/8b/sRAwAAAP+qkf3/+d7+f/qEvRe9+LxNP/28gVeenQ+//g8AAAATNLL/v/Dv+7+YcdANex6/wxHv/ejAKwvlw/4HAACACRrZ/1/s7f9i1QWO2qRbbdUvDryycD7sfwAAAJigkf1/ZG//l8sud0776yd/ufLAK8/Jh/0PAAAAEzSy/4/q7f/qqD+8+S+XbfO58wZeWSQf9j8AAABM0Mj+P7q3/+vfrn/e8gsfv+tCA68smg/7HwAAACZoZP8f09v/zZaf2fLifeZaYs6BVxbLh/0PAAAAEzSy/4/t7f92g+/vddRJ1156+sArz82H/Q8AAAATNLL/j+vt/+6vux27/ebnXrTGwCuz/jX2PwAAAEzQyP7/Um//z9zsu7s99am9Fr9r4JXF82H/AwAAwASN7P8v9/b/bA/t+fk57r9pz78MvPL8fNj/AAAAMEEj+/8rvf3/jL+/6awtV17wC5sPvPKCfNj/AAAAMEEj+/+rvf3/zDU/udFpyxx6668HXlkiH/Y/AAAATNDI/v9ab//PPvst8//+sfVX23vglSXzYf8DAADABI3s/+N7+3+Oc5772HOOvGfH9w28slQ+7H8AAACYoJH9f0Jv/895wpI3v+kNS3zy6oFXXpgP+x8AAAAmaGT/n9jb/3M9+7crnf+t2//+wYFXls6H/Q8AAAATNLL/v97b/3P/6sfrfX23xRa+ceCVF+XD/gcAAIAJGtn/3+jt/3m26b65+TxnbnjxwCvL5MP+BwAAgAka2f8n9fb/vHu8+tDqmt2+/c6BV16cD/sfAAAAJmhk/5/c2//zXfv3Hf903QO/++PAKy/Jh/0PAAAAEzSy/0/p7f/5f7jlJ1aafdnuTQOvLJsP+x8AAAAmaGT/n9rb/wvM+Oq7LtvloE23GHjlpfmw/wEAAGCCRvb/ab39/6z5v7HOEWeuddbfBl5ZLh/2PwAAAEzQyP7/Zm//L3jGdie986RjLrp14JXl82H/AwAAwASN7P/Te/v/2bMfv8Hf99li8f0HXnlZPux/AAAAmKCR/f+t3v5f6Jwdvj1z4cf23HHglRXyYf8DAADABI3s/zN6+3/hE9722a0vW/kLVw28smI+7H8AAACYoJH9/+3e/n/Os4/b5du/Pu3W1w688vJ82P8AAAAwQSP7/8ze/l9k3x0XXrDbebW7B15ZKR/2PwAAAEzQyP7/Tm//L/rjMx6/e4dLd/zzwCuvyIf9DwAAABM0sv/P6u3/xX7xhVvOPK/+5MYDr6ycD/sfAAAAJmhk/3+3t/+f+/5NXrX21k///f6BV1bJh/0PAAAAEzSy/8/u7f/n7fKdHd9xwOoLrzfwyqr5sP8BAABggkb2//d6+3/xmz506Ol3HL7h2wdeeWU+7H8AAACYoJH9f05v/z//Jxt88/HVNv72PwZeeVU+7H8AAACYoJH9//3e/n/BXp9a75mLX/27XQdeWS0f9j8AAABM0Mj+/0Fv/y8x+4tOuvbJObqfD7zy6nzY/wAAADBBI/v/3N7+X/Kch9Z59ZdP3PTSgVdWz4f9DwAAABM0sv9/2Nv/S53wi3fttOa2Z+0w8Mpr8mH/AwAAwASN7P/zevv/hc+e7xPH7nP8Sx8YeGWNfNj/AAAAMEEj+//83v5f+ofX7zLjpG1+tuHAK2vmw/4HAACACRrZ/z/q7f8XzVjws3++7Nrjthx4Za182P8AAAAwQSP7/4Le/l9m/mW/ffLCc+3z94FX1s6H/Q8AAAATNLL/L+zt/xefcf8Gb+6OWPFDA6+skw/7HwAAACZoZP9f1Nv/L7ngyV3u+vWmP//FwCvr5sP+BwAAgAka2f8/7u3/ZetXfXae8548+CcDr7w2H/Y/AAAATNDI/v9Jb/+/dO7i2+vusNoO2wy88rp82P8AAAAwQSP7/+Le/l/utMs3OOeAyxf41cArr8+H/Q8AAAATNLL/L+nt/+V3vOdlZ2zdPrrXwCvr5cP+BwAAgAka2f+X9vb/y37+ghvettopX3v/wCtvyIf9DwAAABM0sv8v6+3/FS5b6JHZ7thpzWsGXlk/H/Y/AAAATNDI/r+8t/9X/PDtc//tyUdnrjnwyhvzYf8DAADABI3s/yt6+//lMz/y9GsWX+kPvx14ZYN82P8AAAAwQSP7/8re/l/prPMWvXrN43706MArG+bD/gcAAIAJGtn/V/X2/ytOOnC1o7+81dZvGXjlTfmw/wEAAGCCRvb/T3v7f+VFXnfbzp868KW7DbyyUT7sfwAAAJigkf1/dW//r3LBx1d6ePM1fnbDwCsb58P+BwAAgAka2f/X9Pb/qvXaN5crP3jcJQOvbJIP+x8AAAAmaGT/X9vb/6+ce+/H3nL/cvu8e+CVTfNh/wMAAMAEjez/n/X2/6tOu3D+bzx21or3Dbzy5nzY/wAAADBBI/v/ut7+X+3KN2676DK7//z1A69slg/7HwAAACZoZP9f39v/r9790AMefMOtB79j4JVZfyag/Q8AAAATNLL/f97b/6vvcObxPzxykR2eHHhl83zY/wAAADBBI/v/ht7+f82tH1x7vd3uXeB1A69skQ/7HwAAACZoZP/f2Nv/axz87tcv8q2lHr1n4JUt82H/AwAAwASN7P9f9Pb/mqt97bSHrjnka48MvLJVPux/AAAAmKCR/X9Tb/+vtfSxnzpvnvXW3Gjglbfmw/4HAACACRrZ/zf39v/aR2y90+tnv3HmbwZe2Tof9j8AAABM0Mj+/2Vv/6/zu6cO/sx1C/xhv4FX3pYP+x8AAAAmaGT/39Lb/+tuvcr2+5153o92Gnjl7fmw/wEAAGCCRvb/r3r7/7WvL9ddZpd9tv7pwCvvyIf9DwAAABM0sv9/3dv/r3vkkpNv+fIcW75w4JVt8mH/AwAAwASN7P/f9Pb/6zdq37j2mlf/4OMDr7wzH/Y/AAAATNDI/r+1t//Xu++iM85cfNsHjhh4Zdt82P8AAAAwQSP7/7be/n/DU3877O4nT5xj+YFXtsuH/Q8AAAATNLL/b+/t//XXWe29C96x+jrnD7yyfT7sfwAAAJigkf1/R2//v3G2XV602WpPf2OxgVfelQ/7HwAAACZoZP/f2dv/G3z3tJ+etPXGD8828Mq782H/AwAAwASN7P+7evt/w5MPv++RAw6f+5sDr+yQD/sfAAAAJmhk//+2t//ftOhbZhY77LztPAOv7JgP+x8AAAAmaGT/393b/xvdvsceC5132kHfHXhlp3zY/wAAADBBI/v/nt7+3/hdZx1536/rm78+8Mp78mH/AwAAwASN7P/f9fb/Jrsd8v0Luktf0Q68snM+7H8AAACYoJH9f29v/2/60w0322DhLfY/dOCVXfJh/wMAAMAEjez/3/f2/5svfOCHh1x2zFeWHnjlvfmw/wEAAGCCRvb/H3r7f7NmmS32PWnlq14z8Mr78mH/AwAAwASN7P/7evv/LfPMvfdy+zz24i8PvPL+fNj/AAAAMEEj+//+3v7f/Js3HfebXZbd8ocDr+yaD/sfAAAAJmhk/z/Q2/9bzDb/rq8984EfPHvgld3yYf8DAADABI3s/z/29v+W3/35Ed+7bq0H5hp45QP5sP8BAABggkb2/4O9/b/Vyb//7p2zHzTHtwZe2T0f9j8AAABM0Mj+f6i3/9+66Es3nneexdZZfOCVPfJh/wMAAMAEjez/P/X2/9b73frC0665/RsHDbyyZz7sfwAAAJigkf3/cG//v+2S51y65bd2e/gLA698MB/2PwAAAEzQyP5/pLf/337d4nfPsduZc79i4JUP5cP+BwAAgAka2f9/7u3/d7zn3vapI9ff9tMDr+yVD/sfAAAAJmhk/z/a2//b7FRvdtcbDj3opQOv7J0P+x8AAAAmaGT//6W3/995w0++P88yS9y86sAr++TD/gcAAIAJGtn/j/X2/7aXP37kuo/d84rjBl7ZNx/2PwAAAEzQyP7/a2//b/eR1fc45/699l9w4JUP58P+BwAAgAka2f+P9/b/9rN96bjdVz73K98beOUj+bD/AQAAYIJG9v8Tvf3/ru9utfcBmy941QkDr+yXD/sfAAAAJmhk//+tt//fffI2W9z4qZtePPTK/vmw/wEAAGCCRvb/33v7f4dFT/rhC593+J/PHnjlgHzY/wAAADBBI/v/H739v+OF22/8o39sPO+zBl45MB/2PwAAAEzQyP5/srf/d2pO+O6GX3r6tcXAKx/Nh/0PAAAAEzSy/5/q7f/3zHP0EQuvsfrJJw68clA+7H8AAACYoJH9/3Rv/+/8zbfv+oe3nfjgcgOvfCwf9j8AAABM0H++/2fM6O3/Xe647/AbDtx2rs8MvPLxfNj/AAAAMEEj+7/o7f/3bvWSDzzvzqvfeuzAKwfnw/4HAACACRrZ/2Vv/79vw2dtuser5/jhKgOvfCIf9j8AAABM0Mj+r3r7//2PXvedT/zqsSs+OvDKIfmw/wEAAGCCRvZ/3dv/u77ikWu+2q78oucNvPLJfNj/AAAAMEEj+7/p7f/dPv3y5XZ59zEfWXnglUPzYf8DAADABI3s/7a3/z9w9JxzrvLDLb70xYFXPpUP+x8AAAAmaGT/d739v/vzr3jgpydf+ouFBl75dD7sfwAAAJigkf0/s7f/93jLe6o5961fft7AK5/Jh/0PAAAAEzSy/2fr7f89Hzj9ziefc9o2pw+88tl8/Iv7f+Z/4UcMAAAA/KtG9v8zevv/g48fedGpl+984JwDrxyWD7/+DwAAABM0sv+f2dv/H1pro+dvdf2Zf37RwCuH58P+BwAAgAka2f+z9/b/XnccceVFc+w276cGXvlcPux/AAAAmKCR/T9Hb//vvdWbX7zie29/7ZcGXjkiH/Y/AAAATNDI/p+zt//32fB9z9jhO4udvPrAK5/Ph/0PAAAAEzSy/+fq7f99Hz3l9184/aAHzxp45Qv5sP8BAABggkb2/9y9/f/ho976lZfsutZccw+88sV82P8AAAAwQSP7f57e/v/Isv8f9u48auux7/t+fjsl85ApUxFKpiQyT5klhAzJPMucIVOGRJyhKJ1kpkyZ4iRDFMoQmYdMUYYihJKiZ9332jz3dj/bfl/b5b6u81nbH6/XWuc6v1rH/lm/f9/9jqNjyHmfLfHdQY3qrAwMh/4HAACAAmX6f6mo/y/YdOjBV7627si76qwMCof+BwAAgAJl+n/pqP8vvOSwUWe3fm/cqnVWbvjr6/+9TwsAAAD838j0f5Oo/3sdN2j+UbOWa/VMnZXB4dD/AAAAUKBM/y8T9f9Fb+/11e6Dnjz/3jor/wyH/gcAAIACZfp/2aj/Lx57wtjldzv7pgXrrNwYDv0PAAAABcr0/3K9GjSown3J+Q+sMW2/Ke9eWmflpnDofwAAAChQpv+Xj97/X9p48VfW69tiozXrrAwJh/4HAACAAmX6f4Wo/3s/+nLLT6b2PbRNnZWbw6H/AQAAoECZ/m8a9f9lQ39ufMXGu100oM7KLeHQ/wAAAFCgTP+vGPV/n5XbTes5dotLL6yzcms49D8AAAAUKNP/K0X9f/moWQ0+X/GPoz6ps3JbOP7q//n+fU8MAAAA/F2Z/l856v8rFmjzxdLndm7zSp2V28Ph/T8AAAAUKNP/q0T933fJhcfsNLT/hGPrrNwRDv0PAAAABcr0/6pR/1953/jmI0YuPnhynZU7w6H/AQAAoECZ/m8W9f9VXw05aubRr5+9Y52Vu8Kh/wEAAKBAmf5vHvX/P7oe1GeBhoeus1edlbvDof8BAACgQJn+Xy3q/347H3b3Xh/dNv7nOitDw6H/AQAAoECZ/l896v+rZwztcPuWB47apc7KsHDofwAAAChQpv9bRP1/zQa924+cdGO3aXVW7gmH/gcAAIACZfp/jaj/r+27/Ue7XNRuobl1Vu4Nh/4HAACAAmX6f82o//vffM6clQ/+ZVq3Oiv3hUP/AwAAQIEy/b9W1P8DWoxaYfo2x93+Vp2V+8Oh/wEAAKBAmf5vGfX/dXuuPLP1TcO2P6XOygPh0P8AAABQoEz/t4r6//qpE5t8MLfhcsfUWRkeDv0PAAAABcr0/9pR/w/8c1K7q5qNnflinZUHw6H/AQAAoECZ/m8d9f+gDmu9f+HGK136RZ2Vh8Kh/wEAAKBAmf5fJ+r/G76assWUqZ8ctU2dlYfDof8BAACgQJn+Xzfq/8FdV/902b6nt+lSZ+WRcOh/AAAAKFCm/9eL+v+fO68wb7v9Hpnwa52VR8Oh/wEAAKBAmf5fP+r/G2d8tvLDu60/+Jw6KyPC8b/6/91n/l2PDAAAAPxNmf7fIOr/m65d54TGg6afPbHOymPh8P4fAAAACpTp/zZR/w9pPfWK32dts85rdVYeD4f+BwAAgAJl+n/DqP9v3nrCsOGtLxp/Up2Vf4VD/wMAAECBMv3fNur/W3ovu+vBr/Uc9U6dlSfCof8BAACgQJn+3yjq/1sv+3WFbZd4qtuZdVaeDIf+BwAAgAJl+r9drwYNGoWvvG2LtnMeOWWZhQ6rszIyHPofAAAACpTp/42j9/+3t2z80Vf3vzNtTJ2Vp8Kh/wEAAKBAmf7fJOr/O/q/0X6Zh3e5vVOdlafDof8BAACgQJn+bx/1/51fdX9/QvfLt/++zsoz4dD/AAAAUKBM/28a9f9dXe9rt/qiay73e52VZ8Oh/wEAAKBAmf7fLOr/u3e+tslZb349c/86K6PCof8BAACgQJn+3zzq/6Ezusy8dGqL49+us/JcOPQ/AAAAFCjT/1tE/T9sz+tXXmXjKVeeWmfl+XDofwAAAChQpv+3jPr/nqmd532/326fHV1nZXQ49D8AAAAUKNP/W0X9f++fx336ZN++W71QZ2VMOPQ/AAAAFCjT/1tH/X9fhwe32HXQcmftXGflr78T0P8AAABQoEz/bxP1//37PLny3N3eGzi1zsqL4dD/AAAAUKBM/28b9f8D0y+ct3jrs0f/UWflpXDofwAAAChQpv+3i/p/+O87fHrQrCdXP6TOythw6H8AAAAoUKb/t4/6/8FtLtli2BLb7TWlzsq4cOh/AAAAKFCm/ztE/f/Qxbdt89Brlzy0U52Vl8Oh/wEAAKBAmf7fIer/h9sfc/v29687ec86K6+EQ/8DAABAgTL9v2PU/4+sc/Aly53y3QIz6qy8Gg79DwAAAAXK9P9OUf8/OvDGwyZ3P3X3C+qsvBYO/Q8AAAAFyvT/zlH/j/hi037NH37ogY/rrIwPh/4HAACAAmX6f5eo/x/bf96Jb725yuxX66y8Hg79DwAAAAXK9P+uUf8/vvuLHS9b9LPlj6uz8kY49D8AAAAUKNP/u0X9/6+ZtQd7rDj/8XvUWZkQDv0PAAAABcr0/+5R/z+xz/Mdfhj74pXf1Vl5Mxz6HwAAAAqU6f+OUf8/Ob3R3SsNPeGzOXVW3gqH/gcAAIACZfp/j6j/R/6+ZZ+dz713qwPqrLwdDv0PAAAABcr0f6eo/5/aZs5RTx29yVnv1ll5Jxz6HwAAAAqU6f89o/5/evUFl66NnDnwrDorf/2dgP4HAACAAmX6f6+o/58Z/PpPP360/+hD66y8Fw79DwAAAAXK9P/eUf8/+49fJtzZcPDqo+usvB8O/Q8AAAAFyvR/56j/R22y4YZdJh2+19l1Vj4Ih/4HAACAAmX6f5+o/587cbVNqy3veKhXnZUPw6H/AQAAoECZ/t836v/n35s88aeDF508vs7KR+HQ/wAAAFCgTP/vF/X/6NGf/n7XRa8tcHKdlYnh0P8AAABQoEz/d4n6f8zZyy+/30177f5lnZWPw6H/AQAAoECZ/t8/6v8XFhk5a8A21zywbZ2VT8Kh/wEAAKBAmf4/IOr/Fx8/b5lDm201e786K5+GQ/8DAABAgTL9f2DU/y/dvuNGG82dt/wvdVY+C4f+BwAAgAJl+v+gqP/HLt/rvbGLXr7y8nVWPg+H/gcAAIACZfq/a9T/40Zut+XBb+4yd2SdlUnh0P8AAABQoEz/Hxz1/8sNLv1s+MNfD3ugzsoX4dD/AAAAUKBM/3eL+v+VJs/++Xv3NXdZvM7KX78TUP8DAABAgTL9f0jU/68OP3ulxqc81eCSOiuTw6H/AQAAoECZ/j806v/Xvmy5/27395zUvM7KlHDofwAAAChQpv8Pi/p//AHTRz7x2juPbVxn5atw6H8AAAAoUKb/D4/6//WO79z43RLL7HNdnZWvw6H/AQAAoECZ/j8i6v83Zi11zqqzpq+5Xp2Vb8Kh/wEAAKBAmf4/Mur/Ce02WKBR6/XHXlVn5dtw6H8AAAAoUKb/j4r6/82rZ379y24XDbixzsrUcOh/AAAAKFCm/4+O+v+tG1976dZB25y2aZ2VaeHQ/wAAAFCgTP8fE/X/280XatG57yebP1Zn5btw6H8AAAAoUKb/j436/519h706cL+VPlquzsr34dD/AAAAUKBM/x8X9f+7P5zU6qiNH+lXb2V6OPQ/AAAAFCjT/8dH/f/enH0WbDP19JNvr7PyQzj0PwAAABQo0/8nRP3//rb9p46eO2zl3nVWfgyH/gcAAIACZfr/xKj/P/hyz/n2b3bc3LXqrPwUDv0PAAAABcr0f/eo/z88YOCX920zdtgGdVZmhEP/AwAAQIEy/X9S1P8fdbx/9LybGu7Sv87Kz+HQ/wAAAFCgTP+fHPX/xFnHN1vkohsbrFJn5Zdw6H8AAAAoUKb/T4n6/+PrBu834uADJz1dZ+XXcOh/AAAAKFCm/0+N+v+TXoeM2GnLXx67r87KzHDofwAAAChQpv9Pi/r/082Oun7pSe32aVxnZVY49D8AAAAUKNP/p0f9/1mvO876vOHraz5aZ+W3cOh/AAAAKFCm/8+I+v/zS7ZpMfejxccuWWdldjj0PwAAABQo0/89ov6ftOllLy0+8rYBDeus/B4O/Q8AAAAFyvT/mVH/f7Hu018fdPShp91ZZ2VOOPQ/AAAAFCjT/2dF/f/loJ4LDDv3j81b1lmZGw79DwAAAAXK9P/ZUf9P/vKDqd2HbvFR3zorf4RD/wMAAECBMv1/TtT/Uw5YZcGbx/bvN6TOyp/h0P8AAABQoEz/94z6/6uOLVq9smLnk7euszIvHPofAAAACpTp/3Oj/v961hevbnrGpJEHpSvVX4f+BwAAgAJl+v+8qP+/2bdZszuGNTtodrpSha/R/wAAAFCiTP+fH/X/tz98NXrPcf0Wn56uVH99A4D+BwAAgAJl+v+CqP+nzvn4y/mbdJq+e7pS1cKh/wEAAKBAmf6/MOr/ads2nW9W47eGPpeuVPOHQ/8DAABAgTL93yvq/++m9Zp2z7tL73h4ulItEA79DwAAAAXK9P9FUf9/v9eOjQ987JmleqQrVcNw6H8AAAAoUKb/L476f/oO57Vc7Ljzfn4/XakahUP/AwAAQIEy/X9J1P8/zBv5yh/9+lzUPV2p/vq8/gcAAIACZfr/0qj/f9zyhsen7L3joW+kK1XjcOh/AAAAKFCm/3tH/f9Tn277LLvhNxt9kK5UC4VD/wMAAECBMv1/WdT/MwYc2WO76a3e7ZmuVAuHQ/8DAABAgTL93yfq/59b3T7o4Z9H3DQzXakWCYf+BwAAgAJl+v/yqP9/ObjB2Wes3+P8fdKVatFw6H8AAAAoUKb/r4j6/9evX/pnn04TW22frlSLhUP/AwAAQIEy/d836v+ZP8996u0BTcdNSleqxcOh/wEAAKBAmf6/Mur/WbtsdkCz3s+PfCldqZYIh/4HAACAAmX6/6qo/3+b9tsjIw9ocNCR6Uq1ZDj0PwAAABQo0///iPp/9l5b7bnLpsMXPz1dqZYKh/4HAACAAmX6v1/U/7/vMP+pK085efqb6Ur1V/frfwAAAChQpv+vjvp/zrzRA6b/NmPowelK1SQc+h8AAAAKlOn/a6L+n3tTmyn7tWi747x0pVomHPofAAAACpTp/2uj/v9jzVmN7uowZKlv0pVq2XDofwAAAChQpv/7R/3/54bj1/zphq4/75quVMuFQ/8DAABAgTL9PyDq/3mXL/xCdeHQi35MV6rlw6H/AQAAoECZ/r/uf/V/1WDycYuecMfRh+6drlQrhOM/6P/5/5ueGAAAAPi7Mv1/fdT/83V78IcbxozbaId0pWoaDu//AQAAoECZ/h8Y9X+16/Wvv7Zq43e/TleqFcOh/wEAAKBAmf4fFPV/7cfO62xdXXfTCelKtVI49D8AAAAUKNP/N0T9P/+lP435/dN9z385XalWDof+BwAAgAJl+n9w1P8LbLVJ88bPzmn1abpSrRIO/Q8AAAAFyvT/P6P+b7j2og0OPnyzceelK9Wq4dD/AAAAUKBM/98Y9X+ja179YviAjuOvSVeqvz6j/wEAAKBAmf6/Ker/BTds3HijTlets2G6UjUPh/4HAACAAmX6f0jU/40vf2Pa2PVXO3uNdKVaLRz6HwAAAAqU6f+bo/5f6KZfXxnw85eD+6Qr1cthQP8DAABAgTL9f0vU/wuv2bblodMvmLBwulK1CIf+BwAAgAJl+v/WqP8XOeGIE1fbcFSbe9KV6q+fCdD/AAAAUKBM/98W9f+ib97V7829lzzq2XSlWjMc+h8AAAAKlOn/26P+X+zFWx7s3W/CpSulK9Va4dD/AAAAUKBM/98R9f/iFx7Q8czjWs+8O12pWoZD/wMAAECBMv1/Z9T/SzxzbpuTHpu63PzpStUqHP9B/zf+b3piAAAA4O/K9P9dUf8v2eiZt4e822H7Oo1frR0O7/8BAACgQPMtO9//50/+t/6/O+r/pZbuM+Plxr1vfzhdqVqHQ/8DAABAgTLv/4dG/b/0PdsusVmT5adtma5U64RD/wMAAECBMv0/LOr/Jp98OW/euA8XuiVdqdYNh/4HAACAAmX6/56o/5c5Zo2VFxl2VrfL05VqvXDofwAAAChQpv/vjfp/2dNX3WL/Mx4ftXa6Uq0fDv0PAAAABcr0/31R/y/38oef3nd49/GLpivVBuHQ/wAAAFCgTP/fH/X/8ies2K7Ns/ev82C6UrUJh/4HAACAAmX6/4Go/1d485P3R39anf1EulJtGA79DwAAAAXK9P/wqP+bvvj1zIHVmMFN05WqbTj0PwAAABQo0/8PRv2/4oXNmxy1arcJA9OVaqNw6H8AAAAoUKb/H4r6f6WV3jr8kzG3tNkoXanahUP/AwAAQIEy/f9w1P8r392k13p3tDlq9XSl2jgc+h8AAAAKlOn/R6L+X+WR9W7reeGPl16UrlSbhEP/AwAAQIEy/f9o1P+rLvjN9lfcsPDMzdOVqn049D8AAAAUKNP/I6L+b7bwwktc3+GV5QanK9Wm4dD/AAAAUKBM/z8W9X/zh8fPOLrFkdv3S1eqzcKh/wEAAKBAmf5/POr/1e6a9faGv911+zrpSvXXzwTofwAAAChQpv//FfX/6qu2afP8lPbTbk1Xqi3Cof8BAACgQJn+fyLq/xYnDPh0/k1nL1SlK9WW4dD/AAAAUKBM/z8Z9f8ab+67xawDunRbJl2ptgqH/gcAAIACZfp/ZNT/a7548sp39B446l/pSrV1OPQ/AAAAFCjT/09F/b/WhffM2/PZfVffIl2ptgmH/gcAAIACZfr/6aj/W35yQpNXDr9u9M3pSrVtOPQ/AAAAFCjT/89E/d/qmAdmblptNvCKdKXaLhz6HwAAAAqU6f9no/5f+/RB73f/dM5ZrdOVavtw6H8AAAAoUKb/R0X93/rlvdrdPOborYamK1WHcOh/AAAAKFCm/5+L+n+dD3dq0nLVoZ8tkK5UO4RD/wMAAECBMv3/fNT/6x5x0cyJFza+cql0pdoxHPofAAAACpTp/9FR/6931lPvX33HuOMfSleqncKh/wEAAKBAmf4fE/X/+uPPb3deh7bLL5SuVDuHQ/8DAABAgTL9/0LU/xssfsguR94wY/awdKXaJRz6HwAAAAqU6f8Xo/5v89jg+wb91vWBUelKtWs49D8AAAAUKNP/L0X9v+Ftd/Qd02LI7iunK9Vu4dD/AAAAUKBM/4+N+r/tikcdu8GmDRa4Nl2pdg+H/gcAAIACZfp/XNT/G508ts+vU56f3DZdqTqGQ/8DAABAgTL9/3LU/+3ene+ohr1PfqhFulLtEQ79DwAAAAXK9P8rUf9v/PzmHfY+YPhel6UrVadw/B/6v+F/4xMDAAAAf1em/1+N+n+Tc/+4+7ZOPVa/LV2p9gyH9/8AAABQoEz/vxb1f/sPt+64+YARo2vpSrVXOPQ/AAAAFCjT/+Oj/t/0iNkPjvu56cAm6Uq1dzj0PwAAABQo0/+vR/2/2Vlj+t20/sSzHk9Xqs7h0P8AAABQoEz/vxH1/+bjFzjx5A133GqzdKXaJxz6HwAAAAqU6f8JUf9vMXxm0/en9/nshnSl2jcc+h8AAAAKlOn/N6P+37LJBr+16NfqyqvTlWq/cOh/AAAAKFCm/9+K+n+rBgt9eMre3xy/brpSdQmH/gcAAIACZfr/7aj/tx752uaXPLb08oPSlWr/cOh/AAAAKFCm/9+J+n+bSR9v8N5xb81ul65UB4RD/wMAAECBMv3/btT/2x7U9K01Gp/3wGrpSnVgOPQ/AAAAFCjT/+9F/b9dp2Y/n/ruM7v3Sleqg8Kh/wEAAKBAmf5/P+r/7X/9asmLxzVbYJF0peoaDv0PAAAABcr0/wdR/3e4qMOfOzWZNHl4ulIdHA79DwAAAAXK9P+HUf/vsPnFK404o9NDT6YrVbdw6H8AAAAoUKb/P4r6f8f1n9jy82H99loxXakOCYf+BwAAgAJl+n9i1P87XX/BZ0sfMHufWelKdWg49D8AAAAUKNP/H0f9v/MmT290Re/2j+2brlSHhUP/AwAAQIEy/f9J1P+7/KPnez2nDJy0XbpSHR4O/Q8AAAAFyvT/p1H/7zp4m1nrbdqlwefpSnVEOP5n/9f+rU8MAAAA/F2Z/v8s6v/dVr9smU9avLLLielKdWQ4vP8HAACAAmX6//Oo/3c/6b29bvlt4WGvpyvVUeHQ/wAAAFCgTP9Pivq/4ztLPHriDXfN/TBdqY4Oh/4HAACAAmX6/4uo//d4bu3+7TscufK56Up1TDj0PwAAABQo0/9fRv3fqed3p7x6xy0nP5+uVMeGQ/8DAABAgTL9Pznq/z2feH2Rty/s1u+IdKU6Lhz6HwAAAAqU6f8pUf/vVS04vdmqP350RrpSHR8O/Q8AAAAFyvT/V1H/773shm+cMabN5u+lK9UJ4dD/AAAAUKBM/38d9X/n+39Zt8+n9592YLpSnRgO/Q8AAAAFyvT/N1H/7/PBfqO3q7oP+C1dqbqHQ/8DAABAgTL9/23U//sefk2zhw8fM/aHdKU6KRz6HwAAAAqU6f+pUf/vd+a98015tlqzY7pSnRwO/Q8AAAAFyvT/tKj/u7x24pfLDvtwn+PTleqUcOh/AAAAKFCm/7+L+n//k4YveNUZyz82Ll2pTg2H/gcAAIACZfr/+6j/D3jn2KkXNnl80mfpSnVaOPQ/AAAAFCjT/9Oj/j/wub1fbT3urAbnpyvV6eHQ/wAAAFCgTP//EPX/QT2va/XBu1N3+Sldqc4Ih/4HAACAAmX6/8eo/7uucMwhhzZuPaxzulL1CIf+BwAAgAJl+v+nqP8PvuO2ZwYc13tuh3SlOjMc+h8AAAAKlOn/GVH/d/vXjTeNfazDyl+lK9VZ4dD/AAAAUKBM//8c9f8hix58wUZ7jzq5a7pSnR0O/Q8AAAAFyvT/L1H/H7rYs+u27HdBvz/TleqccPyP/p/v3/vEAAAAwN+V6f9fo/4/bMTZb0ycPuGjb9OVqmc4vP8HAACAAmX6f2bU/4ffut30qzdccvPd/veF6n/879zwH/ofAAAACpTp/1lR/x/R9NJFzlv/qtPGpivVeeHQ/wAAAFCgTP//FvX/kSet+eWTP3cccFS6Up0fDv0PAAAABcr0/+yo/4965/P5dh3w5djT0pXqgnDofwAAAChQpv9/j/r/6Oc+arZKp9XWnJCuVBeGQ/8DAABAgTL9Pyfq/2N6rjT6+8lH/nlkulL1Cof+BwAAgAJl+n9u1P/HfvBpq7Pa37XqS+lKdVE49D8AAAAUKNP/f0T9f9zhy7966f4L7/ZmulJdHA79DwAAAAXK9P+fUf8ff+ZqUydc+sq9p6cr1SXh0P8AAABQoEz/z4v6/4TXJi+4+uAuX85LV6pLw6H/AQAAoED/cf/P1yDq/xOvWGefm3YYWB2crlS9w6H/AQAAoECZ/p8v6v/ubac+fvIa7ffbNV2pLguH/gcAAIACZfq/ivr/pLUmDNp89ux/fZOuVH3Cof8BAACgQJn+r0X9f/KQZXuMW6V6ce90pbo8HPofAAAACpTp//mj/j/lkI0aTxg9psWP6Up1RTj0PwAAABQo0/8LRP1/6pQZ01a/vfspX6crVd9w6H8AAAAoUKb/G0b9f9pP414564L7r90hXamuDIf+BwAAgAJl+r9R1P+n77ZYy0uPaPPBy+lKdVU49D8AAAAUKNP/C0b9f8bW94/ddtSPm56QrlT/CIf+BwAAgAJl+r9x1P89eh+/xiOfdet+XrpS9QuH/gcAAIACZfp/oaj/z7x2z/m/qt1y1afpSnV1OPQ/AAAAFCjT/wtH/X9W64FfLbNMhz9npyvVNeHQ/wAAAFCgTP8vEvX/2Vfss+jVL/de9aB0pbo2HPofAAAACpTp/0Wj/j+nbf8fzrun9W67pytV/3DofwAAAChQpv8Xi/q/51rDXm/ZY+q909OVakA49D8AAAAUKNP/i0f9f+6Qk9aZeOxZXx6erlTXhUP/AwAAQIEy/b9E1P/n/TnkwCNGPF49l65U14dD/wMAAECBMv2/ZNT/53c46Ilr3ll+v/fTlWpgOPQ/AAAAFCjT/0tF/X/BnocNfmHBD//VI12pBoVD/wMAAECBMv2/dNT/F04deu4mP6z24hvpSnVDOPQ/AAAAFCjT/02i/u/VYK/nfmz7ZYvu6Uo1OBz6HwAAAAqU6f9lov6/aOSg1WqdO57SM12p/hkO/Q8AAAAFyvT/slH/Xzz8gVqXq6+69oN0pboxHPofAAAACpTp/+Wi/r+kyQmT7uy/5Af7pCvVTeHQ/wAAAFCgTP8vH/X/pYe+vNhhe0zYdGadmSHh//U/AAAAFCjT/ytE/d/7o8W/67/eBd0npSvVzeHQ/wAAAFCgTP83jfr/stfbjX9pxqirtk9XqlvCof8BAACgQJn+XzHq/z5n/Lx+u9q4Kx5MV6pbw6H/AQAAoECZ/l8p6v/L32vzwoOfNT520XSlui0c+h8AAAAKlOn/laP+v+LEWWt2HTV0i6bpSnV7OPQ/AAAAFCjT/6tE/d/37PGNFjzi6E+eSFeqO8Kh/wEAAKBAmf5fNer/K0cvPGXOBXOu2yhdqe4Mh/4HAACAAmX6v1nU/1ddfdBtT96+WY+B6Up1Vzj0PwAAABQo0//No/7/R7sh2+86+rrmF6Ur1d3h0P8AAABQoEz/rxb1f7/mQw9fZZV9n1s9XamGhkP/AwAAQIEy/b961P9X33hYr+9nD39kcLpSDQuH/gcAAIACZfq/RdT/1xyw/dxf1zi58+bpSnVPOPQ/AAAAFCjT/2tE/X/tl71XabjD843WSVeqe8Oh/wEAAKBAmf5fM+r//rNGbb334AZf9UtXqvvCof8BAACgQJn+Xyvq/wEdz/nktkuHPFilK9X94fir/xv9Gx8ZAAAA+Jsy/d8y6v/rNp244ZH7d93j1nSleiAc3v8DAABAgTL93yrq/+svWXnCoPYzmv4rXamGh0P/AwAAQIEy/b921P8DB63105jJbecsk65UD4ZD/wMAAECBMv3fOur/QetOWnqDGd9csWG6Uj0UDv0PAAAABcr0/zpR/99w9eq/3bteq2OvSVeqh8Oh/wEAAKBAmf5fN+r/we2mND1gjz5b9ElXqkfCof8BAACgQJn+Xy/q/382/2zzRfvv+Mka6Ur1aDj0PwAAABQo0//rR/1/440rfPjn1ROvuyddqUaEQ/8DAABAgTL9v0HU/zf9NvXBHTs37bFwulI9Fg79DwAAAAXK9H+bqP+HbLdOx8fajmi+UrpSPR4O/Q8AAAAFyvT/hlH/37zfsidO+qHHc8+mK9W/wqH/AQAAoECZ/m8b9f8t303ot9SC/R6ZP12pngiH/gcAAIACZfp/o6j/b/2h7SeLvdOp893pSvVkOPQ/AAAAFCjT/+2i/r9t31+3/mPEpEYPpyvVyHDofwAAAChQpv83jvr/9m3fWOWeY5t9Vafxq6fCof8BAACgQJn+3yTq/zvmNJ57YI9nHrwlXameDof+BwAAgAJl+r991P93Xn3f0rfcc94eW6Yr1TPh0P8AAABQoEz/bxr1/13tuv904stvNV07Xan++p2A+h8AAAAKlOn/zaL+v7t5lwntl1l6zuXpSjUqHPofAAAACpTp/82j/h9647UbvrrehGNq6Ur1XDj0PwAAABQo0/9bRP0/bNPOH+41Y8nLbktXqufDof8BAACgQJn+3zLq/3suuX7z2/uPeuvxdKUaHQ79DwAAAAXK9P9WUf/fO+jBpjP3uKBtk3SlGhMO/Q8AAAAFyvT/1lH/37fucb8t0PnLnjekK9UL4dD/AAAAUKBM/28T9f/9W1744aNXr3bjZulK9WI49D8AAAAUKNP/20b9/0CfJzff5oer3lg3XaleCof+BwAAgAJl+n+7qP+HD7ikaZO2Hde7Ol2pxoZD/wMAAECBMv2/fdT/D7ba4bev33m8a7t0pRoXDv0PAAAABcr0f4eo/x+adsyl8xY865lB6Ur1cjj0PwAAABQo0/87RP3/8F63Hb3IsR9+2ytdqV4Jh/4HAACAAmX6f8eo/x/Z4cad9h+x/IKrpSvVq+HQ/wAAAFCgTP/vFPX/o/MOvuu+e3pvOzxdqV4Lh/4HAACAAmX6f+eo/0dcOW/Xk3p0uHWRdKUaHw79DwAAAAXK9P8uUf8/1mbTYUOWmfrLiulK9Xo49D8AAAAUKNP/u0b9//gatStefrn1Mk+mK9Ub4dD/AAAAUKBM/+8W9f+/bnnxhM0++/GYm9OVakI49D8AAAAUKNP/u0f9/8SWjXrdWmtz2RbpSvVmOPQ/AAAAFCjT/x2j/n+yz/OHdz7ilrdapyvVW+HQ/wAAAFCgTP/vEfX/yAFztm80qlvbK9KV6u1w6H8AAAAoUKb/O0X9/1SrLW/75fYxPRdIV6p3wqH/AQAAoECZ/t8z6v+nd339/d0vqG4cmq5U74ZD/wMAAECBMv2/V9T/z/y4YLtRq9z/xkPpSvVeOPQ/AAAAFCjT/3tH/f/s5A2bTBvdfb2l0pXq/XDofwAAAChQpv87R/0/qtsvM5dfY2DXYelK9UE49D8AAAAUKNP/+0T9/9wCk//oOLvLMwulK9WH4dD/AAAAUKBM/+8b9f/zo1Zb9dnBs79dOV2pPgqH/gcAAIACZfp/v6j/R9+3/FZTd2i/4Kh0pZoYDv0PAAAABcr0f5eo/8cs+enHK+x/17Zt05Xq43DofwAAAChQpv/3j/r/haPOa/vxpUfeem26Un0SDv0PAAAABcr0/wFR/7/42cg315/8yi+XpSvVp+HQ/wAAAFCgTP8fGPX/S6/2+vHc9gsv0yJdqT4Lh/4HAACAAmX6/6Co/8eeuuNSl7983hLj0pXq83DofwAAAChQpv+7Rv0/7u1LZy+1zDM/HZ+uVJPCof8BAACgQJn+Pzjq/5eP227FST2Wvuv8dKX6Ihz6HwAAAAqU6f9uUf+/cv7Zmz12z1sdPktXqi/Dof8BAACgQJn+PyTq/1fHPvvBjiM6Ldo5Xakmh0P/AwAAQIEy/X9o1P+v9Z1+0/zH9vvup3SlmhIO/Q8AAAAFyvT/YVH/j9+g5QWzFmz2xFfpSvXXn+l/AAAAKFCm/w+P+v/1Fksdcsc7kw7okK5UX4cj2//vH3pL64V2urHlf/3JAQAAgP+sTP8fEfX/Gze/88yebZu2/jNdqb4Jh/f/AAAAUKBM/x8Z9f+ErjOf3/mHia90TVeqb8Oh/wEAAKBAmf4/Kur/N7/aYPWnru5x827pSjU1HPofAAAACpTp/6Oj/n9rxkLVD51HXPhtulJNC4f+BwAAgAJl+v+YqP/f3vm1z1fao9XGR6Ur1Xfh0P8AAABQoEz/Hxv1/ztbnLT4h/2/eX9sulJ9Hw79DwAAAAXK9P9xUf+/e9mw79eeseMlE9KVano49D8AAAAUKNP/x0f9/17//q9dsF6fw09LV6ofwqH/AQAAoECZ/j8h6v/3W+6z3j/ad11i33Sl+jEcSzf+Nz8vAAAA8Pdl+v/EqP8/6DvwxeUmD/lpVrpS/RQO7/8BAACgQJn+7x71/4cb7LnW5Evb3vV5ulLNCIf+BwAAgAJl+v+kqP8/anF8w4f2n9Fhu3Sl+jkc+h8AAAAKlOn/k6P+n3jz/ZO33+HkRV9PV6pfwqH/AQAAoECZ/j8l6v+P/zik/5zBw787MV2pfg2H/gcAAIACZfr/1Kj/P9lp8CkLzm7wxLnpSjUzHPofAAAACpTp/9Oi/v+08x17dV3j+QM+TFeqv34ngP4HAACAAmX6//So/z/79qhHHxy9Wesj0pXqt3DofwAAAChQpv/PiPr/86mXff7oKnNeeT5dqWaHQ/8DAABAgTL93yPq/0l7blNtc8G+N7+XrlS/h0P/AwAAQIEy/X9m1P9fdOi5epPbr7vwjHSlmhMO/Q8AAAAFyvT/WVH/f/nn089/Parxxr+lK9XccOh/AAAAKFCm/8+O+n9y31XWW+2Ice8fmK5Uf4RD/wMAAECBMv1/TtT/Uzb44LU3a0df0jFdqf4Mh/4HAACAAmX6v2fU/1+1+OL73p8NPfyHdKWaFw79DwAAAAXK9P+5Uf9/fXOLxc/cpOOz09KV2l+H/gcAAIACZfr/vKj/v9niq8nfTbvqkF3SlVr4Gv0PAAAAJcr0//lR/397WbOGq1652sLd0pVaFQ79DwAAAAXK9P8FUf9P7d90rd26fDl1brpS++sHAPQ/AAAAFCjT/xdG/T+t5ccvPrHrBXeckq7U5g+H/gcAAIACZfq/V9T/31284/pfDRy13VvpSm2BcOh/AAAAKFCm/y+K+v/79r3GLzNzyWVfTFdqDcOR7/+7/suPDAAAAPxNmf6/OOr/6euM/G7btSfMOiZdqTUKh/f/AAAAUKBM/18S9f8PA89b7JHxrXt/kq7U/vq8/gcAAIACZfr/0qj/f9yn22n3Ljn1yAvTlVrjcOh/AAAAKFCm/3tH/f/T9BuuOeDUDhscm67UFgqH/gcAAIACZfr/sqj/Z/x++8OLPtD7zVfSldrC4dD/AAAAUKBM//eJ+v/nbY7s/OdDy9+wY7pSWyQc+h8AAAAKlOn/y6P+/2Wjl57e/MQPz5mcrtQWDYf+BwAAgAJl+v+KqP9/7deg27hFzlr353Sltlg49D8AAAAUKNP/faP+n/nPzS68acLjr+2VrtQWD8d/qv97/dceGQAAAPibMv1/ZdT/s5rNHXLyS92fPTNdqS0RDu//AQAAoECZ/r8q6v/fLt7qzF+b3n/IO+lKbclw6H8AAAAoUKb//xH1/+z2v13XsGe18Jh0pbZUOPQ/AAAAFCjT//2i/v99ndGP7X33mKmHpSu1v7pf/wMAAECBMv1/ddT/cwbO3+W2p7rd8X26UmsSDv0PAAAABcr0/zVR/8/9dVbzFY65ZbtO6UptmXDofwAAAChQpv+vjfr/j05txkxt1GbZ/dOV2rLh0P8AAABQoEz/94/6/8+DFv7i2Yk/zvo9XaktFw79DwAAAAXK9P+AqP/nTRrfoOMWC/feJl2pLR8O/Q8AAAAFyvT/df+r/2sNnjvm2PU/f+XIL9KV2grh0P8AAABQoEz/Xx/1/3w9b+v7ca8jN/g1Xak1DYf+BwAAgAJl+n9g1P/VSTfed3nXu97skq7UVgyH/gcAAIACZfp/UNT/tXcO3uXcbdvfMDFdqa0UDv0PAAAABcr0/w1R/89/67y7nx0y+5xz0pXayuHQ/wAAAFCgTP8Pjvp/gaabduj4R5d1T0pXaquEQ/8DAABAgTL9/8+o/xsuVjtqheYDX3stXamtGg79DwAAAAXK9P+NUf83GvFin6kTJr3cLF35fz+j/wEAAKBAmf6/Ker/BZdtdOIpizRreXG6UmseDv0PAAAABcr0/5Co/xvf/3y/S07sd9716UpttXDofwAAAChQpv9vjvp/oSfmPPj+Q52GbJKu1FYPh/4HAACAAmX6/5ao/xeutuzY4oG33nkqXam1CIf+BwAAgAJl+v/WqP8X6dS98dGnLt1uhXSltkY49D8AAAAUKNP/t0X9v+iv9027fslnDlssXamtGQ79DwAAAAXK9P/tUf8vNunaV54ff16v+9OV2lrh0P8AAABQoEz/3xH1/+IHdWm54dp9ZiybrtRahkP/AwAAQIEy/X9n1P9LDO6xz9ozd1x6RLpSaxUO/Q8AAAAFyvT/XVH/L7n6o49/OPCbne5IV2prh0P/AwAAQIEy/X931P9LbXLFoH/s2uru+dKVWutw6H8AAAAoUKb/h0b9v/Q/OvW4oMuIH/6RrtTWCcd/sv8X/K88MgAAAPA3Zfp/WNT/TWZ//8+nruyx2PrpSm3dcHj/DwAAAAXK9P89Uf8vs33rs3eeNvHA9ulKbb1w6H8AAAAoUKb/7436f9kuSx6w0iZNn/pnulL763sC9D8AAAAUKNP/90X9v9z37z/1Q/PnX34mXaltEA79DwAAAAXK9P/9Uf8v32mZPXv80aDlqulKrU049D8AAAAUKNP/D0T9v8Kvbz9y2ZDh59X5x/trG4ZD/wMAAECBMv0/POr/ppO+HfDWticPuTddqbUNh/4HAACAAmX6/8Go/1c8aP1Tm3ed8c6a6Upto3DofwAAAChQpv8fivp/pfYfNxrcq227S9OVWrtw6H8AAAAoUKb/H476f+WLm045/vMhhw1IV2obh0P/AwAAQIEy/f9I1P+rDGz2wlZbdO3VJl2pbRIO/Q8AAAAFyvT/o1H/r7rOV2uOnzh0xpXpSq19OPQ/AAAAFCjT/yOi/m+2/gI93mx09NKt0pXapuHQ/wAAAFCgTP8/FvV/8+vHDFrtmHE7bZWu1DYLh/4HAACAAmX6//Go/1e7aPbjZz7V+O6b0pXa5uHQ/wAAAFCgTP//K+r/1Tffep/ed1/3wxLpSm2LcOh/AAAAKFCm/5+I+r9FpyFPbdNz38UeSVdqW4ZD/wMAAECBMv3/ZNT/a/x60AGPNp1z4F3/28D//GTtr38TQP8DAABAgTL9PzLq/zUnHXb21y9t9lSjdKW2dTj0PwAAABQo0/9PRf2/1kFD/9nkj9lrXZWu1LYJh/4HAACAAmX6/+mo/1vOPurUfs3bv7ReulLbNhz6HwAAAAr0f+j/8D3+8z0T9X+r7e8YcP62A/tvmq7UtguH/gcAAIACZd7/Pxv1/9pdBj/SakiX029MV2rbh0P/AwAAQIEy/T8q6v/W3x8ye968eZstl67UOoRD/wMAAECBMv3/XNT/6/yxy6kndl144mPpSm2HcOh/AAAAKFCm/5+P+n/dna4ecMsWd119e7pS2zEc+h8AAAAKlOn/0VH/r9f5sUde/fzIk+qs1HYKh/4HAACAAmX6f0zU/+t/e/qe7RvdstLIdKW2cziy/T//f/2RAQAAgL8p0/8vRP2/Qeu91mk2sdsfy6crtV3C4f0/AAAAFCjT/y9G/d/m2kGvv/3Uj/csnq7Udg2H/gcAAIACZfr/paj/N+z9wA99jmmz8wPpSm23cOh/AAAAKND/sf/nGz6gZ4P5xkb933brExY9o+f98zVPV2q7h0P/AwAAQIEy7//HRf2/0W4vf/Hw3d0/vyRdqXUMh/4HAACAAmX6/+Wo/9v9tHiD7V4aM+K6dKW2Rzj0PwAAABQo0/+vRP2/8ZR2zZdtWu27cbpS6xQO/Q8AAAAFyvT/q1H/b3LIz2OmLPLhWkumK7U9w6H/AQAAoECZ/n8t6v/2f7RpeeGE5V96NF2p7RUO/Q8AAAAFyvT/+Kj/N91p1itXPfR4/zvTldre4dD/AAAAUKBM/78e9f9mncdP++DEs05vmK7UOodD/wMAAECBMv3/RtT/m3+7cOPWp07drG+6UtsnHPofAAAACpTp/wlR/2/R97cLBzzQemLLdKW2bzj0PwAAABQo0/9vRv2/5QZbDTl0fO+rt05XavuFQ/8DAABAgZL+rzWI+/+tqP+3ajH/0xst2eGkIelKrUs49D8AAAAUKPP+/+2o/7e+eXS3sTNHrbRWulLbPxz6HwAAAAqU6f93ov7f5sW39u2/9gV/9E5XageEQ/8DAABAgTL9/27U/9te2ORfh+064Z7+6UrtwHDofwAAAChQpv/fi/p/uxPWG9hu4JI7b5Cu1A4Kh/4HAACAAmX6//2o/7d/85szXrryqvmeTldqXcOh/wEAAKBAmf7/IOr/DnftemOtS8fPV0lXageHQ/8DAABAgTL9/2HU/zusetU5P27y5YjG6UqtWzj0PwAAABQo0/8fRf2/48KP73/ntNX2vS9dqR0SDv0PAAAABcr0/8So/3d6+JSRXZruu+dO6Urt0HDofwAAAChQpv8/jvp/56Uf2Wv8S9c9PCVdqR0WDv0PAAAABcr0/ydR/+9yzxmPbnX3ZlNmpCu1w8Oh/wEAAKBAmf7/NOr/XZ/Zo//xPefMv2e6UjsiHPofAAAACpTp/8+i/t+t0eWnDD7m6I4fpyu1I8Oh/wEAAKBAmf7/POr/3Xf9YKOJTw29/4J0pXZUOPQ/AAAAFCjT/5Oi/u/44yrvtZzY+Lfj0pXa0eHQ/wAAAFCgTP9/EfX/HpNbzDqv0bgVXk1XaseEQ/8DAABAgTL9/2XU/526fbHM1Z+3PeHUdKV2bDj0PwAAABQo0/+To/7f86bnjhu0xYy+b6crtb9+JkD/AwAAQIEy/T8l6v+91mx45ZFdu376QrpSOz4c+h8AAAAKlOn/r6L+33vDLe7doNeQrY9OV2onhEP/AwAAQIEy/f911P+dL/995zFDGpw5NV2pnRgO/Q8AAAAFyvT/N1H/7zN3/6ENt31+0M7pSq17OPQ/AAAAFCjT/99G/b/vjjfv8Gvzk8cckq7UTgqH/gcAAIACZfp/atT/++1955G3/TF8tT/SldrJ4dD/AAAAUKBM/0+L+r/LN4dftve0Hnt+lK7UTgmH/gcAAIACZfr/u6j/99/11u7jNhnx8NnpSu3UcOh/AAAAKFCm/7+P+v+AH4++evMuTaecnK7UTguH/gcAAIACZfp/etT/B07uOvzkKyfOPz5dqZ0eDv0PAAAABcr0/w9R/x/U7Z+73zRwx47bpiu1M8Kh/wEAAKBAmf7/Mer/rlset1mLXfvc/2W6UusRDv0PAAAABcr0/09R/x/c58EP3l+71W+/pCu1M8Oh/wEAAKBAmf6fEfV/twHXz75k5jcr7Jeu1M4Kh/4HAACAAmX6/+eo/w9p1XnFU5Zc+oTv0pXaX78TUP8DAABAgTL9/0vU/4eu/dDOJ45/q+8e6UrtnHDofwAAAChQpv9/jfr/sGvOvPeWB8779IB0pdYzHPofAAAACpTp/5lR/x9+6e5XvnrqM1vPSVdq54ZD/wMAAECBMv0/K+r/I7bqe1z7E5udeVa6UjsvHPofAAAACpTp/9+i/j9y15aX/fHQpEHvpiu188Oh/wEAAKBAmf6fHfX/UT9OP3KxCZ3GjE5XaheEQ/8DAABAgTL9/3vU/0dPfmeHAxfpt9qh6Urtwv8fHhUAAAD4v5Tp/zlR/x/Tbamh9wwd9/s76UqtVzi8/wcAAIACZfp/btT/x86dsHvbcxuveGa6UrsoHPofAAAACpTp/z+i/j9ux2WHP7fi0E6HpSu1i8Oh/wEAAKBAmf7/M+r/4/de5+rrxh49fEy6UrskHPofAAAACpTp/3lR/5/wzdTux3w05+tO6Urt0nDofwAAACjQf9z/VYOo/08cNvPAgxpu1vD7dKXWOxz6HwAAAAqU6f/5ov7vvtQGTww7+rq9f09XapeFQ/8DAABAgTL9X0X9f1LDhQbPHbnvo/unK7U+4dD/AAAAUKBM/9ei/j/56dfOXfzg4c9/ka7ULg+H/gcAAIACZfp//qj/T7lgeqPlLjq52TbpSu2KcOh/AAAAKFCm/xeI+v/UF1pOmTzp+TO6pCu1vuHQ/wAAAFCgTP83jPr/tAlLvfDQlg2u/zVdqV0ZDv0PAAAABcr0f6Oo/08//p01t2825ONz0pXaVeHQ/wAAAFCgTP8vGPX/Gauc+fJlc7tuOTFdqf0jHPofAAAACpTp/8ZR//e486HWPW6acdxr6UqtXzj0PwAAABQo0/8LRf1/5kN9F2q+TdvLT0pXaleHQ/8DAABAgTL9v3DU/2cttPs3b+33ze+7pCu1a8Kh/wEAAKBAmf5fJOr/s4f1q+3ct9WK09KV2rXh0P8AAABQoEz/Lxr1/zlL7Tzpqal9Os1NV2r9w6H/AQAAoECZ/l8s6v+eDU977oeNdxzeLV2pDQiH/gcAAIACZfp/8aj/z316xGortZ749VvpSu26cOh/AAAAKFCm/5eI+v+8z3ba585ZTRuekq7Urg+H/gcAAIACZfp/yaj/zz/qose7DBqx9zHpSm1gOPQ/AAAAFCjT/0tF/X/BqU8Nqu3W49EX05XaoHDofwAAAP4f9v406uux7/v/6fv5lihEGUIyZUzmDCGRw0zGMh9lSqYICZExmTOmDIlEhsxEMmfIGJnLUIYQQsb0X+d/bf3O7bq24zy2y3md11rbjcfjjvfaa3+tz91nn913p0CZ/l886v8zXj79xO/vvOSpM9KV2rXh0P8AAABQoEz/N4/6/8wVLny1/XG7tv4oXakNCYf+BwAAgAJl+r9F1P8Dhu681rOLftLnpXSldl049D8AAAAUKNP/S0T9f9alJze9bGLrq45IV2pDw6H/AQAAoECZ/l8y6v+zN7z3ux5vjPtwWrpSGxYO/Q8AAAAFyvT/UlH/n7PV4vONbHra5tumK7Xrw6H/AQAAoECZ/l866v9z/3j7072OfrNnl3SldkM49D8AAAAUKNP/LaP+P++7756Z/97FB/6YrtRuDIf+BwAAgAJl+n+Z/3//d/uPP66dv9fqK8zqeMjFy6crtZvCof8BAACgQJn+XzZ6/z/wl69fOmLYrUeNS1dqw8Oh/wEAAKBAmf5fLur/C3Zuu9rQPxfa+I50pXZzOPQ/AAAAFCjT/62i/h/UbcnGr7V+6b0F0pXaiHD86/6v/48+MgAAAPA3Zfp/+aj/L/zsja87bL7PZeekK7VbwuH9PwAAABQo0/+to/6/6O4B9/T/5OrebdKV2q3h0P8AAABQoEz/rxD1/8XN/7HzxQM2XmXddKU2Mhz6HwAAAAqU6f8Vo/6/ZL7Tj3rvgN+evSJdqd0WDv0PAAAABcr0/0pR/1869rFL1hjb4KHV05XaqHDofwAAACjQv+v///hi1P+X9R0ya73DntnnwnSldns49D8AAAAUKPP+f5Wo/y9/+qBFn2p4dG1YulK7Ixz6HwAAAAqU6f82Uf8Pnnzoule9f+enW6QrtdHh0P8AAABQoEz/rxr1/xVHjZh02IR1R9+XrtTuDIf+BwAAgAJl+n+1qP+vXGr+DiOW+X6HRdOV2l3h0P8AAABQoEz/rx71/1U3T5iy26kHtmqUrtTuDsff7P/5/zuPDAAAAPxNmf5fI+r/qx+aM7e67ca5t6YrtXvC4f0/AAAAFCjT/2tG/X9Nk82W++XebS4+K12pjQmH/gcAAIACZfp/raj/r737t9lHH33uUa3Tldq94dD/AAAAUKBM/7eN+n9I8y2b39B0zY3bpyu1eb8TQP8DAABAgTL9v3bU/9fNV9/wpTdmvHdVulK7Pxz6HwAAAAqU6f92Uf8PHfvMO5tMPPmypdOV2gPh0P8AAABQoEz/rxP1/7D31hk+YNGHej+WrtQeDIf+BwAAgAJl+n/dqP+v7zF76+OPW2qVO9OV2kPh0P8AAABQoEz/rxf1/w0nT+ze5s73nl04Xak9HA79DwAAAAXK9P/6Uf/f+MqCZ76944oPPZCu1B4Jh/4HAACAAmX6f4Oo/2969atJL17z2T5LpCu1R8Oh/wEAAKBAmf7fMOr/4X3arbvpLzvX5k9XamPDof8BAACgQJn+3yjq/5sPbrHoMWte9OmIdKU273cC6H8AAAAoUKb/20f9P+L9SbOu36jZ6HbpSu3xcOh/AAAAKFCm/zeO+v+Wu3sv13XG6ztcnK7UxoVD/wMAAECBMv2/SdT/tzZ/eO7oQf1bXZeu1J4Ih/4HAACAAmX6f9Oo/0fOd/GUuXuPn7txulIbHw79DwAAAAXK9P9mUf/fNnbHDk2OPq3H/elK7clw6H8AAAAoUKb/O0T9P2qpC965+t5xZzVLV2pPhUP/AwAAQIEy/b951P+337zrhoe+sfjkhulK7elw6H8AAAAoUKb/t4j6/46HTmy+btM329+SrtSeCYf+BwAAgAJl+n/LqP9HN7l/9tOL7tp/tXSl9mw49D8AAAAUKNP/HaP+v3PZW9/pM/GSGwelK7XnwqH/AQAAoECZ/t8q6v+7RvbY8Pw7W798fbpSez4c+h8AAAAKlOn/TlH/331ft+aTjvtkjS3TldqEcOh/AAAAKFCm/7eO+v+eBW6c3fqall3PTVdqL4RD/wMAAECBMv2/TdT/Y14aN2jjHT94dNV0pfZiOPQ/AAAAFCjT/52j/r/3uFOPeHnNE79dJ12pvRQO/Q8AAAAFyvT/tlH/33fIVtvf+MsDTQZHfz7ve14Oh/4HAACAAmX6/x9R/98/5fzRR81YvXOrdKU2MRz6HwAAAAqU6f/tov5/4I5Vtrl9oy9veTxdqb0SDv0PAAAABcr0//ZR/z+46Gcj99172+9Hpyu1V8Oh/wEAAKBAmf7fIer/h6r3zl940PnNGqcrtdfCof8BAACgQJn+3zHq/4efWP7QOcP277F2ulJ7PRz6HwAAAAqU6f+dov5/ZNmPLjm84/VnXZSu1N4Ih/4HAACAAmX6f+eo/x8ducxRV7Zef/LQdKX2Zjj0PwAAABQo0/+7RP0/9r4Vdn7yz1ntN0lXapPCof8BAACgQJn+3zXq/8cW+OKe9T85tv+D6UrtrXDofwAAAChQpv93i/r/8V7N37tw87tvXDJdqb0dDv0PAAAABcr0f5eo/8e98eZmfQ+Y7+V/sVKbHA79DwAAAAXK9P/uUf8/8dyXLdca8NQaN6crtXfCof8BAACgQJn+3yPq//FnrP3r1MM27bpUulJ7Nxz6HwAAAAqU6f89o/5/cuUtfhw09o9Hx6YrtffCof8BAACgQJn+3yvq/6du+LXZKe/v9e1d6Urt/XDofwAAAChQpv/3jvr/6UFPr9O24ZVNFklXah+EQ/8DAABAgTL9v0/U/8+sU705ZZnGnc9OV2ofhkP/AwAAQIEy/d816v9ntxm5+TITXrhlhXSl9lE49D8AAAAUKNP/3aL+f+6vg6d+edth32+UrtSmhEP/AwAAQIEy/b9v1P/Pz9j3r8dPva3ZlelKbWo49D8AAAAUKNP/+0X9P2G3YcvuOuj15n3TldrH4dD/AAAAUKBM/+8f9f8Lsw785e29m/38frpS+yQc+h8AAAAKlOn/A6L+f3G7a1u02Wj88FfSldqn4dD/AAAAUKBM/x8Y9f9L+9+8wfEz+nc8Nl2pfRYO/Q8AAAAFyvT/QVH/v/z5IZMH/PJZ48/Sldq0cOh/AAAAKFCm/w+O+n/i6A0GP7Pmil9ula7UpodD/wMAAECBMv3/z6j/X2k267h1drzo8b3Tldrn4dD/AAAAUKBM/3eP+v/V+gtdDrlm5wN+SldqX4RD/wMAAECBMv3fI+r/18YvfP81xz3Ubpd0pfZlOPQ/AAAAFCjT/4dE/f/66Wu9dumdJ7/6TbpS+yoc+h8AAAAKlOn/Q6P+f2PCjLanTXzvuj/SldqMcOh/AAAAKFCm/w+L+v/NSa83WW3RpU7tlq7Uvg6H/gcAAIACZfr/8Kj/J/VcYuYHTc9d7+10pTbv/wnQ/wAAAFCgTP8fEfX/W8s9MH+rN7aZdHK6Uvs2HPofAAAACpTp/55R/7992/GffXvvjPMPTldqM8Oh/wEAAKBAmf4/Mur/yfdv9/SjR6952NPpSu27cOh/AAAAKFCm/3tF/f9O40ta73Dq982npyu178Oh/wEAAKBAmf4/Kur/d0fv9PLrt6378z/SldoP4dD/AAAAUKBM/x8d9f97zQatvtKEG4fvlq7UZoVD/wMAAECBMv1/TNT/79fHLHDyMgd2nJWu1H4Mh/4HAACAAmX6/9io/z8Yf9KMcxo+07h/ulL7KRz6HwAAAAqU6f/jov7/8MNzh3V4v8GXH6YrtZ/Dof8BAACgQJn+7x31/0eHbd3/tbF3Pv5yulKbHQ79DwAAAAXK9P/xUf9POf6Ug4YedvQBPdOV2i/h0P8AAABQoEz/nxD1/9QXxo87YsDV7SalK7Vfw6H/AQAAoECZ/u8T9f/HL+8/s88B+7zaO12p/RYO/Q8AAAAFyvT/iVH/f9L7uibnb/7bdYelK7Xfw6H/AQAAoECZ/j8p6v9PD72p7aRPNj712XSl9kc4/nX/f/Xo/+gzAwAAAH9Ppv9Pjvr/s6mHvdb6z1vX2y5dqf0ZDu//AQAAoECZ/u8b9f+00c+2nt76kEkz0pXanHD8n/R/w//LRwYAAAD+pkz/nxL1//RmDZ5eouNL589JV2p/hcP7fwAAAChQpv/7Rf3/eX3jzzoNW+iwg9KV2txw6H8AAAAoUKb/T436/4vxf81/76/T31kwXanmHfofAAAACpTp/9Oi/v9yuQ4z1lx55Y1GpStV+Dv6HwAAAEqU6f/To/7/6rbfF3h3m0Hdx6crVYNw6H8AAAAoUKb/+0f9P+P+J1e/6Nodz14uXalq4dD/AAAAUKBM/58R9f/XjRu+fMa5k1+6PF2p5n0AgP4HAACAAmX6/8yo/78ZMWyFFbotueb66UpVD4f+BwAAgAJl+n9A1P/fLr3vM29u8ugZK6crVcNw6H8AAAAoUKb/z4r6f2bTgz89b3rfG85LV6pG4dD/AAAAUKBM/58d9f93D4+c78QGZ3/TIV2p5n2//gcAAIACZfr/nKj/vz/xnNOOntKp6Q3pStU4HPofAAAACpTp/3Oj/v/htU433PDEN90uSFeqBcOh/wEAAKBAmf4/L+r/WR/0Hf9S97aPrJmuVAuFQ/8DAABAgTL9f37U/z/+84kDNjljzA+3pStVk3DofwAAAChQpv8HRv3/U4tl7/tzRO9F6+lK1TQc+h8AAAAKlOn/C6L+//me93db5Jmp2yyWrlQLh0P/AwAAQIEy/T8o6v/Zj33ce7/lW906Jl2pFgmH/gcAAIACZfr/wqj/f5m/zRWjGj/3zjXpSrVoOPQ/AAAAFCjT/xdF/f/riGl913u72mjDdKVqFg79DwAAAAXK9P/FUf//tvSK1z314B3dV0xXqnmfCaD/AQAAoECZ/r8k6v/fmy712FU9e519ZrpSzet+/Q8AAAAFyvT/pVH///HwlG6H9Zn9UpN0pWoeDv0PAAAABcr0/2VR///5Vtt2U0a1X/PudKVqEQ79DwAAAAXK9P/lUf/POebrV9q+MOSMR9OVaolw6H8AAAAoUKb/B0f9/1e/N745pXnXG5ZJV6olw6H/AQAAoECZ/r8i6v+5Ty658KAfR3wzPF2plgqH/gcAAIACZfr/yv/s/2q+9tPO/bld96a1dKVaOhz6HwAAAAqU6f+rov6f/+IVD2+468RuzdOVqmU49D8AAAAUKNP/V0f932DIUtvufkXTRx5KV6p5nwmg/wEAAKBAmf6/Jur/2kpTbhl+yWU/bJquVMuGQ/8DAABAgTL9f23U/9U+p+14yO5dFr02XamWC4f+BwAAgAJl+n9I1P/1b8fefs16c7e5NF2pWoVD/wMAAECBMv1/XdT/DX87c+AzM7e4tW26Ui0fDv0PAAAABcr0/9Co/xttve2R6yy//U1PpSvVvO/R/wAAAFCgTP8Pi/p/gU/OGXDHMwO36pGuVCuEQ/8DAABAgTL9f33U/43369Sj24g2LfqkK9WK4dD/AAAAUKBM/98Q9f+Cu/bt1PSML36anK5UK4VD/wMAAECBMv1/Y9T/C/38xE1/de83bt90pVo5HPofAAAACpTp/5ui/m/yyMxpjz/x2P6/pivVKuHQ/wAAAFCgTP8Pj/q/aYPVGu46pcUC36UrVZtw6H8AAAAoUKb/b476f+ElFlt1mQZvfbVzulKtGg79DwAAAAXK9P+IqP8XufOt576c3m7oL+lKtVo49D8AAAAUKNP/t0T9v+gxsx/9fpOZ/fZKV6rVw6H/AQAAoECZ/r816v9mb62zX61bx7U7pSvVGuHQ/wAAAFCgTP+PjPp/sScX7LfPuQNe+zhdqdYMh/4HAACAAmX6/7ao/xfvN/HaW65d9ryj0pVqrXDofwAAAChQpv9HRf3ffOFjTv7nNh8d/mq6UrUNh/4HAACAAmX6//ao/1s8MOqqwSufsP576Uq1djj0PwAAABQo0/93RP2/xE2DH3j+1/vePDVdqdqFI+r/Bf5fPTIAAADwN2X6f3TU/0u23HPvDWf2vGn/dKVaJxze/wMAAECBMv1/Z9T/Sz1y9bh71hu11V/pSrVuOPQ/AAAAFCjT/3dF/b90g90O2n/3hi2+Sleq9cKh/wEAAKBAmf6/O+r/lksc2X+BSyb8tGO6Uq0fDv0PAAAABcr0/z1R/y9z553D/rhi33ET0pVqg3DofwAAAChQpv/HRP2/7GsHzdh616H7H5quVBuGQ/8DAABAgTL9f2/U/8udOGSBMe02XOD4dKXaKBz6HwAAAAqU6f/7ov5v9c8Rq0/78aevXk9Xqvbh0P8AAABQoEz/3x/1//IfHPryks0XGXpkulJtHA79DwAAAAXK9P8DUf+3fve8axd64dV+L6Qr1Sbh0P8AAABQoEz/Pxj1/wrdO/b7ddTBa09NV6pNw6H/AQAAoECZ/n8o6v8VT+q33519hr92erpSbRYO/Q8AAAAFyvT/w1H/rzTx8UcP6tnhvB/SlapDOPQ/AAAAFCjT/49E/b/yI632vu7BOYfvka5Um4dD/wMAAECBMv3/aNT/qzR494Geb++x/jbpSrVFOPQ/AAAAFCjT/2Oj/m+zxKdXbd548JufpyvVluHQ/wAAAFCgTP8/FvX/qneufPKr63XZ5eh0peoYDv0PAAAABcr0/+NR/6+28OfD9px52T2vpSvVVuHQ/wAAAFCgTP+Pi/p/9Qda97/tki3+eDddqTqFQ/8DAABAgTL9/0TU/2vc1PKgH3ef27JfulJtHQ79DwAAAAXK9P/4qP/XbPnhuPl27b7H7HSlmvc7AfQ/AAAAFCjT/09G/b/Wgi8Ne+iKEfftma5UncOh/wEAAKBAmf5/Kur/tmOa9O/8Y9PPt05Xqm3Dof8BAACgQJn+fzrq/7Vv2eigZu0mNvokXan+EQ79DwAAAAXK9P8zUf+3a/X9uE9faH/ifulKtV049D8AAAAUKNP/z0b9v86Hbz71e/PZV/6WrlTbh0P/AwAAQIEy/f9c1P/rNrtvpcZ9uj45M12pdgiH/gcAAIACZfr/+aj/1zt+7QYHjBqywk7pSrVjOPQ/AAAAFCjT/xOi/l//hS8/vvvB6ogn05Vq3r8J6H8AAAAoUKb/X4j6f4PHd1ikV8/nLuierlQ7h0P/AwAAQIEy/f9i1P8bNrzo22sb9/roxHSl2iUc+h8AAAAKlOn/l6L+32ixhyZOfPuODu+kK9Wu4dD/AAAAUKBM/78c9X/7UcetveUzvXf5Pl2pdguH/gcAAIACZfp/YtT/Gy9433O3Lj/mnt3TlapLOPQ/AAAAFCjT/69E/b/JmD6r7n1Gqz86pyvVvH8T0P8AAABQoEz/vxr1/6a37NKwwYipLb9IV6o9wqH/AQAAoECZ/n8t6v/NWg2c9sMTnfbola5Ue4ZD/wMAAECBMv3/etT/HU4/dfD23c++78V0pdorHPofAAAACpTp/zei/t98wrjjxjZo+/mUdKXaOxz6HwAAAAqU6f83o/7fYtL5XWZO+abRaelKtU849D8AAAAUKNP/k6L+37LnVvcvt8mSJz6frlRdw6H/AQAAoECZ/n8r6v+O63V5ZLvpk688JF2puoVD/wMAAECBMv3/dtT/Ww28Zt/Hzu375AnpSrVvOPQ/AAAAFCjT/5Oj/u807K5Tv+v26ApvpCvVfuHQ/wAAAFCgTP+/E/X/1m16DVl2m5WPOCBdqfYPh/4HAACAAmX6/92o/7fZ/cWT3rt2+gVz05Vq3r8J6H8AAAAoUKb/34v6v/OXi1y5xq87fvRlulIdGA79DwAAAAXK9P/7Uf9v++eGD/ZfeVCHHdKV6qBw/Nv+H/A/88gAAADA35Tp/w+i/v/Htj/uc/HbczYZma5UB4fD+38AAAAoUKb/P4z6f7tp6z6+ZOMO71bpSvXPcOh/AAAAKFCm/z+K+n/7A385cFrPwRf9i8avuodD/wMAAECBMv0/Jer/HXZ45YwxD+5x9L3pStUjHPofAAAACpTp/6lR/+/4/ULXbz3q1ZU3T1eqQ8Kh/wEAAKBAmf7/OOr/ncbt9978fRZ57sZ0pTo0HPofAAAACvS/9X/tf+v/T6L+37nR9ZvNaj788oHpSnVYOPQ/AAAAFCjz/v/TqP93Wfy2liNfOPi4NdKV6vBw6H8AAAAoUKb/P4v6f9fb//nrXu2GNrgsXamOCIf+BwAAgAJl+n9a1P+79dr6nJ1/3Pez9dKVqmc49D8AAAAUKNP/06P+7/LGuYc9ccVPD6+SrlRHhkP/AwAAQIEy/f951P+7Pzf+HzN23XDv89OVqlc49D8AAAAUKNP/X0T9v8cZp9y69O6jll8oXamOCof+BwAAgAJl+v/LqP/3XOiDHT68pOdft883/5n/20p1dDj0PwAAABQo0/9fRf2/173LjWo3c8IdT6Qr1THh0P8AAABQoEz/z4j6f+9bV73g1PUa7rhsulIdGw79DwAAAAXK9P/XUf/vs/wnvQau/NEmm6Ur1XHh0P8AAABQoEz/fxP1f9dxK5252K/LvjskXal6h0P/AwAAQIEy/f9t1P/dGk3v/sm19110SbpSHR8O/Q8AAAAFyvT/zKj/91186tYPbnPC0WulK9UJ4dD/AAAAUKBM/38X9f9+ty89fNtuM1e+KV2p+oTjb/Z/7b/zyAAAAMDflOn/76P+3/+lGe/8dW675xqkK9WJ4fD+HwAAAAqU6f8fov4/4Li1Nmw6fcDlLdKV6qRw6H8AAAAoUKb/Z0X9f+AhSzTvtknH4x5OV6qTw6H/AQAAoECZ/v8x6v+Dprw++44pjzVomq5UfcOh/wEAAKBAmf7/Ker/gz9a/9aHGvT77J50pTolHPofAAAACpTp/5+j/v/n4T//o3P3tx5+JF2p+oVD/wMAAECBMv0/O+r/7ie8dlizJ1rs3TJdqU4Nh/4HAACAAmX6/5eo/3u82PicT0cMXP7qdKU6LRz6HwAAAAqU6f9fo/4/ZNzoXquesf1fG6Qr1enh0P8AAABQoEz//xb1/6GNjr7greW/uGOldKXqHw79DwAAAAXK9P/vUf8ftvg+o858ps2OA9KV6oxw6H8AAAAoUKb//4j6//DbL9/hhCMOvmLDdKU6Mxz6HwAAAAqU6f8/o/4/YqE9hn/1wPDjr0lXqnk/E6D/AQAAoECZ/p8T9X/Pe6/auuVbi7Q5MxkZUp0VLv0PAAAABcr0/19R/x956z3dd1ng1QkrpivV2eHQ/wAAAFCgTP/Pjfq/1/I9zxzXYo9L7k5XqnPCof8BAACgQP++/2vzRf1/1L7DP2zw4uBjm6Qr1bnh0P8AAABQoEz/zx/1/9EfH77FD7d32GyZdKU6Lxz6HwAAAAqU6f8GUf8f89MBy9964pz3H01XqvPDof8BAACgQJn+r0X9f+wuQ+fsPbjhqFq6Ug0Mh/4HAACAAmX6v4r6/7iLHh2wyy4Tth+erlQXhEP/AwAAQIEy/V+P+r/3Rmf0GLd2z+UeSleqQeHQ/wAAAFCgTP83jPr/+BU7d/pq1qg/m6cr1YXh0P8AAABQoEz/N4r6/4Rrz76p5XcbPnhtulJdFA79DwAAAAXK9P8CUf/3+WaFXaeu/9Oem6Yr1cXh0P8AAABQoEz/N476/8S9v7hrrT32na9tulJdEg79DwAAAAXK9P+CUf+f1Omji/peOvSTS9OVat7X9D8AAAAUKNP/C0X9f/Kvyxxz4ZCOV4xKV6rLwqH/AQAAoECZ/m8S9X/ffd87t1nnAccvmK5Ul4dD/wMAAECBMv3fNOr/Uz5e/vBPV2nXZrl0pRocDv0PAAAABcr0/8JR//f7aZVtH/pt5oTx6Up1RTj0PwAAABQo0/+LRP1/6i6f3dJ52gmXrJ+uVFeGQ/8DAABAgTL9v2jU/6e1XfTNORvfd+zl6Up1VTj0PwAAABQo0//Nov4//ZrJ6yzcddnNzktXqqvDof8BAACgQJn+Xyzq//5nf9Ns33M+en/ldKW6Jhz6HwAAAAqU6f/Fo/4/Y5M1fry9R5tRN6Qr1bXh0P8AAABQoEz/N4/6/8xJH253zPgvtu+QrlRDwqH/AQAAoECZ/m8R9f+Ani3vuH7q9sutma5U14VD/wMAAECBMv2/RNT/Z53e+sIXawP/vCBdqYaGQ/8DAABAgTL9v2TU/2dP+Lznpq1aPFhPV6ph4fg/6/+N/68eGQAAAPibMv2/VNT/59y/zXlzn35rz9vSler6cHj/DwAAAAXK9P/SUf+f2/isQ5rc3G++MelKNe93Auh/AAAAKFCm/1tG/X/eco907tr/sU8WS1eqG8Oh/wEAAKBAmf5fJur/82/rf9voSydO+ytdqW4Kh/4HAACAAmX6f9mo/wfWH99p3T2a1vdPV6rh4fh3/X/m/9AjAwAAAH9Tpv+Xi/r/gvH97n56/RFddkxXqpvD4f0/AAAAFCjT/62i/h80uuOlV3/XfcxX6Uo1Ihz6HwAAAAqU6f/lo/6/sNl5Rx86a+5vh6Yr1S3h0P8AAABQoEz/t476/6L9J6++6tpbLDUhXaluDYf+BwAAgAJl+n+FqP8v/nzRl9/a5bKdXk9XqpHh0P8AAABQoEz/rxj1/yWz1phx5uAudx2frlS3hUP/AwAAQIEy/b9S1P+XbvfNAieceMfUF9KValQ49D8AAAAUKNP/K0f9f9mgV/v0ur3XFkemK9Xt4dD/AAAAUKBM/68S9f/l6yxw9bUvPnfk6elKdUc49D8AAAAUKNP/baL+H7zyeg9PbFFdODVdqUaHQ/8DAABAgTL9v2rU/1fc8NNeWy4w5Ok90pXqznDofwAAAChQpv9Xi/r/yhl7j/39ra4r/ZCuVHeFQ/8DAABAgTL9v3rU/1ftdlnXxg/MPvnzdKW6Oxz6HwAAAAqU6f81ov6/eps7TjngiPZXb5OuVPeEQ/8DAABAgTL9v2bU/9f8ddTQu/t/M61HulKNCYf+BwAAgAJl+n+tqP+v3f/u4za4uW39qXSlujcc+h8AAAAKlOn/tlH/D/n8iMETnj67y+R0pbovHPofAAAACpTp/7X/o/9/mTt37nzzVdfN2v3+K1p1GtMnXanuD4f+BwAAgAJl+r9d9P5/6HZXdjm4NvW3X9OV6oFw6H8AAAAoUKb/14n6f9iah6/67tRWS+2brlQPhkP/AwAAQIEy/b9u1P/XXz78uTXHj9lp53Sleigc+h8AAAAKlOn/9aL+v+HcodPO6NH7ru/SlerhcOh/AAAAKFCm/9eP+v/GLQ9oeNE5g6bula5Uj4RD/wMAAECBMv2/QdT/N3V4Yq/Luu64xS/pSvVoOPQ/AAAAFCjT/xtG/T/8vL4P99h4+pEfpyvV2HDofwAAAChQpv83ivr/5sGdrm4/beULO6Ur1WPh0P8AAABQoEz/t4/6f8Rq5/R59rdHn341XakeD4f+BwAAgAJl+n/jqP9v2b/N0PlX6bvSUelKNS4c+h8AAAAKlOn/TaL+v/Xzj0+Z1XnyyaemK9UT4dD/AAAAUKBM/28a9f/IWe93HTlkyavfS1eq8eHQ/wAAAFCgTP9vFvX/bdstO3avm99acPd0pXoyHPofAAAACpTp/w5R/4+aMaXLa/1bfP19ulI9FQ79DwAAAAXK9P/mUf/fvttS93do9dj4L9KV6ulw6H8AAAAoUKb/t4j6/45tVhx8RDXfgZ3TleqZcOh/AAAAKFCm/7eM+n/0X9OOGzr1iyVfTFeqZ8Oh/wEAAKBAmf7vGPX/nTNndWlbazO7V7pSPRcO/Q8AAAAFyvT/VlH/37XnBvdP6THw5tPSler5cOh/AAAAKFCm/ztF/X93x4UHDxq//dZT0pVqQjj0PwAAABQo0/9bR/1/z+8vHHdK1/vWPSRdqV4Ih/4HAACAAmX6f5uo/8dsPKPJP8854fXn05Vqk3bjt2537NrN9D8AAAAUKNP/naP+v/estWYOnvbROW+kK9VL4dD/AAAAUKBM/28b9f99Vy/x2vMbL3voCelK9XI49D8AAAAUKNP//4j6//61Xm+74SoD1pqbrlQTw6H/AQAAoECZ/t8u6v8Huh7/9Pe/dXzlgHSleiUc+h8AAAAKlOn/7aP+f/DTB1rXhswcskO6Ur0aDv0PAAAABcr0/w5R/z80+5L59+ncru+X6Ur1Wjj0PwAAABQo0/87Rv3/8E7bfXbLHj8t+Fq6Ur0eDv0PAAAABcr0/05R/z8yc9ACW1y64ddHpyvVvN8JqP8BAACgQJn+3znq/0f33GnGK98NHd8vXaneDIf+BwAAgAJl+n+XqP/Hdjzp5SHr73vgu+lKNSkc+h8AAAAKlOn/XaP+f+z3MasfufaEJfdMV6q3wqH/AQAAoECZ/t8t6v/Hh2x90JuzGs6ena5Ub4dD/wMAAECBMv3fJer/cSudO26FwaNu/iRdqSaHQ/8DAABAgTL9v3vU/0+0Hz/sxF16br11ulK9Ew79DwAAAAXK9P8eUf+Pv/iU/ufdPnjd39KVat5nAup/AAAAKFCm//eM+v/JyT1PnHTiHq/vl65U74VD/wMAAECBMv2/V9T/Tx11zzWtW8w5Z6d0pXo/HPofAAAACpTp/72j/n+671UP9Xmxw6Ez05Xqg3DofwAAAChQpv/3ifr/maf32PP8t4av1T1dqT4Mh/4HAACAAmX6v2vU/88+9MNjnRY4+JUn05Xqo3DofwAAAChQpv+7Rf3/XJP23e494tUh76Qr1ZRw6H8AAAAoUKb/9436//mlmvad/sAifU/8N3P6HwAAAAqU6f/9ov6fcPPL1y3Rue/pQ9KV6uNw6H8AAAAoUKb/94/6/4X5Gve+aMijwzZLV6pPwqH/AQAAoECZ/j8g6v8Xx752xRm/LfnCWulK9Wk49D8AAAAUKNP/B0b9/9LdP9+35iqTV78kXak+C4f+BwAAgAJl+v+gqP9fbr7+bu9uvOPBDdKValo49D8AAAAUKO3/eb3/H2oHR/0/sVuP5tdNGzTgpnSlmh4O/Q8AAAAFmn+JpevP/9fv//8Z9f8rn906u+c5K7/9cLpSfR4O/Q8AAAAFyvz8f/eo/1/95cZ3Nu86fYMW6Ur1RTj0PwAAABQo0/89ov5/beduG746vtW296Qr1Zfh0P8AAABQoEz/HxL1/+uXnrr95B5Tb2uarlRfhUP/AwAAQIEy/X9o1P9vbDhu9Cq13j+2TFeqGeHQ/wAAAFCgTP8fFvX/myucP6j31DGLPZKuVF+HQ/8DAABAgf5d/8+tzTdf1P+Thm51xFlPt91vg3Sl+iYc+h8AAAAKlHn/f0TU/29999n5/2j1zdir05Xq23BE/d/w/9UjAwAAAH9Tpv97Rv3/9l6rHPpA/04zB6Qr1cxweP8PAAAABcr0/5FR/0/eavltPr757EVWSleq78Kh/wEAAKBAmf7vFfX/O3+8N3LxB7qeXqUr1ffh0P8AAABQoEz/HxX1/7vdltn5giOGDBuZrlQ/hEP/AwAAQIEy/X901P/vffbRPf0WaP/CvelKNSsc+h8AAAAKlOn/Y6L+f/+XLy5Z+63Zq/+Lxq9+DIf+BwAAgAJl+v/YqP8/2HmFoz56sdfBN6Yr1U/h0P8AAABQoEz/Hxf1/4drv9ny0BZ3DNg8Xal+Dof+BwAAgAJl+r931P8fXdn816tPrN5eI12pZodD/wMAAECBMv1/fNT/U85c+72nb39ug4HpSvVLOPQ/AAAAFCjT/ydE/T910y83W3eXLbZdL12pfg2H/gcAAIACZfq/T9T/H2+y0BFtB8+97bJ0pfotHPofAAAACpTp/xOj/v/k7FcGTZnV5cfz05Xq93DofwAAAChQpv9Pivr/02t+GT1o7csWWyVdqf4Ih/4HAACAAmX6/+So/z9ru+72p6zfdL/b05Xqz3DofwAAAChQpv/7Rv0/rdsVIx//buLYhdKVak449D8AAAAUKNP/p0T9P/2zvbbZ9dLuM5dNV6q/wqH/AQAAoECZ/u8X9f/nvxx76DJ7jFjkiXSlmhsO/Q8AAAAFyvT/qVH/f7Hz7ed/+dj2k8amK/V5h/4HAACAAmX6/7So/7/8rtdRxx8+cL2l0pV6+Dv6HwAAAEqU6f/To/7/aq+7LhnQqM1hi6Qr9Qbh0P8AAABQoEz/94/6f8ZW19zz9gdfnH9XulKvhUP/AwAAQIEy/X9G1P9f/9Fl5zbP93t1hXSlXoVD/wMAAECBMv1/ZtT/33R5+ba+LR9rd3a6Up/3AYD6HwAAAAqU6f8BUf9/+3XTzhf2a3HqlelKvWE49D8AAAAUKNP/Z0X9P3Nu+0Omjnzruo3SlXqjcOh/AAAAKFCm/8+O+v+7zj+ct9ZW7b68KF2pz/t+/Q8AAAAF+v/6f95P8P+v/X9O1P/fnz/p9w2un9l47XSl3jgc+h8AAAAKlHn/f27U/z9s3mKpCXM6HrBJulJfMBz6HwAAAAqU6f/zov6ftXq7Ta5YYcDjQ9OV+kLh0P8AAABQoEz/nx/1/49XfPXBwR2W/XnJdKXeJBz6HwAAAAqU6f+BUf//9MWOG9z68UfNH0xX6k3Dof8BAACgQJn+vyDq/58PuHjy3mee0PHmdKW+cDj0PwAAABQo0/+Dov6fvf3DvzTY/77h/2Klvkg49D8AAAAUKNP/F0b9/8uPvVv8sEPPSaumK/VFw6H/AQAAoECZ/r8o6v9fu9z/V6+rR613brpSbxYO/Q8AAAAFyvT/xVH///b1icteO7vhYYPTlfpi4dD/AAAAUKBM/18S9f/vc3fdfOIaE85fJ12pz+t+/Q8AAAAFyvT/pVH//9H5gqlbtt/31cfTlXrzcOh/AAAAKFCm/y87c756uKs/2/S7/fyvh7Zrla7UW4RD/wMAAECBMv1/efT+f86wx3fsc+GGpzZOV+pLhEP/AwAAQIEy/T846v+/Bp53ZOt9frpudLpSXzIc+h8AAAAKlOn/K6L+n7tex4GTxizyZbN0pb5UOPQ/AAAAFCjT/1f+Z//X51t8xsf3HvVq4/vTlfrS4dD/AAAAUKBM/18V9f/8t6/VoFOTgw+4JV2ptwyH/gcAAIACZfr/6qj/G4xbYqUlXh/+eMN0pb5MOPQ/AAAAFCjT/9dE/V9r9PpT01/p8POgdKW+bDj0PwAAABQo0//XRv1fnXD82q2bzWm+WrpSXy4c+h8AAAAKlOn/IVH/1198YOKk3nt03DJdqbcKh/4HAACAAmX6/7qo/xt+dMm35981ePj16Up9+XDofwAAAChQpv+HRv3f6PDtFumz//Rbeqcr9Xnfo/8BAACgQJn+Hxb1/wLPDZo288yVO09KV+orhOO/6P/a/+QjAwAAAH9Tpv+vj/q/8Rk7NVzu40HNnk1X6iuGw/t/AAAAKFCm/2+I+n/BXietun2HHb8/LF2prxQO/Q8AAAAFyvT/jf/Z///xn+fGrjD50RnpSn3lcOh/AAAAKFCm/2+K3v83GfbxgF/nLNl1u3Slvko49D8AAAAUKNP/w6P+b9qmTY+Frn+0yUHpSr1NOPQ/AAAAFCjT/zdH/b/west2Omirvt/OSVfqq4ZD/wMAAECBMv0/Iur/RQa+f9OdI8++8R/pSn21cOh/AAAAKFCm/2+J+n/RHX798IF+nfpPT1fqq4dD/wMAAECBMv1/a9T/zb7fYot/tPxmjVnpSn2NcOh/AAAAKFCm/0dG/b/YtGr5xZ9v+/Ju6Up9zXDofwAAAChQpv9vO3O+Wrjrix/49JyPPxhz1ofpSn2tcOh/AAAAKFCm/0dF7/+br3HwYqs06t2jf7pSbxsO/Q8AAAAFyvT/7VH/t7hs5PeTD5/avme6Ul87HPofAAAACpTp/zui/l/inGFvnPVYq8kvpyv1duHQ/wAAAFCgTP+Pjvp/yS32Xb/3Xc/d8k26Ul8nHPofAAAACpTp/zuj/l9q2LXvft276rxLulJfNxz6HwAAAAqU6f+7ov5fus2Bmy7V7I5m3dKV+nrh0P8AAABQoH/T/wvMN1/t7qj/W653yDI7vdLr+z/Slfr64dD/AAAAUKDM+/97ov5fZuDNv41/ffajJ6cr9Q3C8V/0f+v/yUcGAAAA/qZM/4+J+n/Zr7tc2qhJ+65vpyv1DcPh/T8AAAAUKNP/90b9v1yXa47+6aghTZ5OV+obhUP/AwAAQIEy/X9f1P+tOt+1001jun57cLpSbx8O/Q8AAAAFyvT//VH/Lz+319177DPixvfTlfrG4dD/AAAAUKBM/z8Q9X/rPwfO2fXC7v37piv1TcKh/wEAAKBAmf5/MOr/FbbdZfnHv564xrHpSn3TcOh/AAAAKFCm/x+K+n/F3fts8WX7pi+/kq7UNwuH/gcAAIACZfr/4aj/V/ryvg+XWeOys7ZKV+odwqH/AQAAoECZ/n8k6v+Vhy26/pTZXXp8lq7UNw+H/gcAAIACZfr/0aj/V2kz+Y22V89t/1O6Ut8iHPofAAAACvSf/d8ofOV/6f+xUf+3We+b70/ZYYvJe6cr9S3Dof8BAACgQJn3/49F/b/qwDUWG9R7zg4fpSv1juHQ/wAAAFCgTP8/HvX/amt8+duid3UYfUa6Up/3mYD6HwAAAAqU6f9xUf+vftnay3z2yuC5R6Qr9U7h0P8AAABQoEz/PxH1/xrnNN/04WZ7tHopXalvHQ79DwAAAAXK9P/4qP/X3OLNd7dp8uo+26Yr9W3Cof8BAACgQJn+fzLq/7XWfva3Wa8v8tC0dKXeORz6HwAAAAqU6f+nov5ve2WDZeYfM/zTH9OV+ryfCdD/AAAAUKBM/z8d9f/aZ2686V5HHVzrkq7U/xEO/Q8AAAAFyvT/M1H/t9v0r3dHXji099fpSn27cOh/AAAAKFCm/5+N+n+dXz+85Yl99r1s+3SlPu9r+h8AAAAKlOn/56L+X7dTy213bv/TswemK/UdwqH/AQAAoECZ/n8+6v/19m59+NJfb7jKn+lKfcdw6H8AAAAoUKb/J0T9v/43n587Y/aoo45LV+o7hUP/AwAAQIEy/f9C1P8bXLvNke3W6Hnxm+lKfedw6H8AAAAoUKb/X4z6f8MVzxr44Q4T3nsuXanvEg79DwAAAAXK9P9LUf9vtNEjtw+8uuHGh6cr9V3Dof8BAACgQJn+fznq//YX9d/x1DM/2qFjulLfLRz6HwAAAAqU6f+JUf9vvPbjN32y/7KjP01X6l3Cof8BAACgQJn+fyXq/02u7NdpsQ73zf05XanvHg79DwAAAAXK9P+rUf9vembHHtt+fEKrfdKV+h7h0P8AAABQoEz/vxb1/2abnjfgwTkz9/kgXanvGQ79DwAAAAXK9P/rUf936HbiL01XaPfQKelKfa9w6H8AAAAoUKb/34j6f/PP7m/x11YDPj0mXanvHQ79DwAAAAXK9P+bUf9v8csFG9xxfcfaxHSlPu8zAfQ/AAAAFCjT/5Oi/t9y510nd+v3WO+T0pV613D8nf5v9N98ZAAAAOBvyvT/W1H/d1zioI+ajOx32VvpSr1bOLz/BwAAgAL9F/3fINxvR/2/1Z1Dtpz7/FvPPpOu1PcNh/4HAACAAmXe/0+O+r/TIyNajW7ZYpV/piv1/cKh/wEAAKBAmf5/J+r/rRsc+mfXRgOP+jZdqe8fDv0PAAAABcr0/7tR/29z0oTFr/9g+4b/YqV+QDj0PwAAABQo0//vRf3feeL8Pxzz2BfvdU1X6geGQ/8DAABAgTL9/37U/9u+u9nrmx7eZuPf05X6QeHQ/wAAAFCgTP9/EPX/P7rPWe/Fq7tsvkS6Uj84HPofAAAACpTp/w+j/t/uyS3f22OHyz58IF2pz/udAPofAAAACpTp/4+i/t++32+b3bTGFgNHpCv17uHQ/wAAAFCgTP9Pifp/h2OeafnT7Lk9509X6j3Cof8BAACgQJn+nxr1/45v1X9t9HX31henK/VDwqH/AQAAoECZ/v846v+dhuz1eOf2I55ql67UDw2H/gcAAIACZfr/k6j/d17pigMf2qfpVRunK/XDwqH/AQAAoECZ/v806v9d2t9+xqcXTuxzXbpSPzwc+h8AAAAKlOn/z6L+3/XiY69vdlT7hq3TlfoR4dD/AAAAUKBM/0+L+n+3XXf+pPGY2V+cla7Ue4ZD/wMAAECBMv0/Per/Lj9fWPv99a73X5Wu1I8Mh/4HAACAAmX6//Oo/3f/5N4V724yZPf26Uq9Vzj0PwAAABQo0/9fRP2/x34nP3lAs2qZx9KV+lHh0P8AAABQoEz/fxn1/57t3m537SvP/b50ulI/Ohz6HwAAAAqU6f+vov7f66rFX+l1V6+7F05X6seEQ/8DAABAgTL9PyPq/70HrP7Nlr3v2PXOdKV+bDj0PwAAABQo0/9fR/2/z2bfLTzx8N6bX5iu1I8Lh/4HAACAAmX6/5uo/7sOaTt978fGfLh6ulLvHQ79DwAAAAXK9P+3Uf93W+nrRrd+0GrgFulK/fhw6H8AAAAoUKb/Z0b9v2/7N9r80Ghqz2HpSv2EcOh/AAAAKFCm/7+L+n+/i5d8tkHLTq0XTVfqfcKh/wEAAKBAmf7/Pur//WdOu2/s82c/dV+6Uj8xHPofAAAACpTp/x+i/j9gzxV3235k26tuTVfqJ4VD/wMAAECBMv0/K+r/Azsu1Xu5ft/0aZSu1E8Oh/4HAACAAmX6/8eo/w/6fcoVM69fsuG4dKXeNxz6HwAAAAqU6f+fov4/+LfNn5y11eQvlk9X6qeEQ/8DAABAgTL9/3PU///c+o8V51+h7/0LpCv1fuHQ/wAAAFCgTP/Pjvq/+z5P1faa8+jud6Qr9VPDof8BAACgQJn+/yXq/x7fNvpk5McrL9MmXamfFg79DwAAAAXK9P+vUf8fMuTWhXt0mP77OelK/fRw6H8AAAAoUKb/f4v6/9CVenxz2f473n1FulLvHw79DwAAAAXK9P/vUf8f1r7bK8+eOWjXddOV+hnh0P8AAABQoEz//xH1/+EX39iu/ZoTrzk3XamfGQ79DwAAAAXK9P+fUf8f0e6AZ+/6pelJq6Yr9QHh0P8AAABQoEz/z4n6v+dVQ9sceM2IFddJV+pnhUP/AwAAQIEy/f9X1P9HDhjeaMEduz8zOF2pnx0O/Q8AAAAFyvT/3Kj/e212+PTf9p47qFW6Up/3OwH1PwAAABTo3/d/NV/U/0cdN6n+zKAtej2ertTnfSag/gcAAIACZfp//qj/j36pxRfrzLhsy9HpSv28cOh/AAAAKFCm/xtE/X/MlHbPH7JRlymN05X6+eHQ/wAAAFCgTP/Xov4/9pCvVr7mjTvuvD9dqQ8Mh/4HAACAAmX6v4r6/7iRL3e9tGmvnZulK/ULwqH/AQAAoECZ/q9H/d972aZjTzv6uaUbpiv1QeHQ/wAAAFCgTP83jPr/+AXaD13t3urXW9KV+oXh0P8AAABQoEz/N4r6/4T7fjjlgzuH3LtaulK/KBz6HwAAAAqU6f8Fov7v8/weV7c6rutug9KV+sXh0P8AAABQoEz/N476/8TTrurz7aKzq+vTlfol4dD/AAAAUKBM/y8Y9f9JR9yz16MT20/fMl2pXxoO/Q8AAAAFyvT/QlH/n/xmz4d3eP+ba5ZKV+qXhUP/AwAAQIEy/d8k6v++x43e//WGbU8am67ULw+H/gcAAIACZfq/adT/p7x09BMrHXb2inelK/XB4dD/AAAAUKBM/y8c9X+/KfvcePLYTs8skq7UrwiH/gcAAIACZfp/kaj/Tz3k8tPPuW3qoLPTlfqV4dD/AAAAUKBM/y8a9f9pjbov1OHUVr1WSFfqV4VD/wMAAECBMv3fLOr/08fd8tVry/z/2LvTqK/H/v/3Kd/PV8osQ6bMQ5epDMk8zyJSyJyMScishMxEkgyRsSIRGZIkGUIoMyFdhCtTMiTEXnvvo/07fv/jWv9jXXvv31rHjcfjjrfO83ytz92nj7PvI9tvka7UBoZD/wMAAECBMv2/dNT/vYbfMem2l3t8OiBdqd0cDv0PAAAABcr0/zJR//deptMGJ7S4asRG6UptUDj0PwAAABQo0//LRv1/0byRNzz85977XpOu1G4Jh/4HAACAAmX6v1nU/312PuGMzrfPXPG2dKV2azj0PwAAABQo0//LRf1/ccf27RfZYa3ftkpXagv+m4D+BwAAgAJl+n/5qP8v+W7AI38cPmbU4+lK7fZw6H8AAAAoUKb/V4j6/9Jbtjhyuz7n7L98ulIbHA79DwAAAAXK9P+KUf/3XXP2uNdnvLfwv1mp3REO/Q8AAAAFyvR/86j/L9vy1dtv2Xb5mXenK7U7w6H/AQAAoECZ/l8p6v/Lr23a66TJR3223//5b3f8t5XakHDofwAAAChQpv9Xjvr/io3fuGn2knct9G26UrsrHPofAAAACpTp/1Wi/r/ypkXObnTaEh3+SFdqC34nQP8DAABAgTL9v2rU/1f1aXVwxxFvjD4kXandEw79DwAAAAXK9P9qUf9fvfXPo+8ddeD8d9OV2r3h0P8AAABQoEz/t4j6/5qz7p39Zbf+K5+drtTuC4f+BwAAgAJl+n/1qP+vnXzM0s0W22aPo9KV2v3h0P8AAABQoEz/rxH1/3UfdGq949T5w59PV2pDw6H/AQAAoECZ/l8z6v9+x9wx9dEtqmnnpCu1YeHQ/wAAAFCgTP+vFfX/9UOeeeiBWS+3/ShdqQ0Ph/4HAACAAmX6f+2o/29ofl67Q6468dTX05XaA+HQ/wAAAFCgTP+vE/V//8V3OHWxg4f1656u1B4Mh/4HAACAAmX6f92o/28cfdk1f+29+Uufpyu1EeHQ/wAAAFCgTP+vF/X/gOfWOnbrm39ed8d0pfZQOPQ/AAAAFCjT/+tH/X/Tef/sM2nuoWccnK7URoZD/wMAAECBMv2/QdT/A0/9YMjtLW/r/3O6Uns4HPofAAAACpTp/5ZR/9/8zqo7dd92h8/eTldqj4RD/wMAAECBMv3/j6j/B5318fBfZvRZqEe6UhsVDv0PAAAABcr0/4ZR/98yufneVZ+NO3RNV2qPhkP/AwAAQIEy/b9R1P+3ftDipPaHfz/6hXSl9lg49D8AAAAUKNP/G0f9f9sxX15x1w5nzN8jXamNDof+BwAAgAJl+n+TqP9vX6jZXyve/ujKs9KV2uPh0P8AAABQoEz/bxr1/+Cxb68868+V95ifrtSeCIf+BwAAgAJl+r9V1P93PPyvbZ9t8cnwI9OV2pPh0P8AAABQoEz/t476/85mG0/f9+V1ps1MV2pPhUP/AwAAQIEy/b9Z1P9Dlpt8zQErfdV293SlNiYc+h8AAAAKlOn/zaP+v2vEoqfeff6ep+6frtSeDof+BwAAgAJl+n+LqP/vfmqTdr8OvaLfnHSlNjYc+h8AAAAKlOn/LaP+v6fhrw/Vnm72Uq90pfZMOPQ/AAAAFCjT/22i/r/3rIN2eq7rO+t+nK7UxoVD/wMAAECBMv2/VdT/903uP6R1dd4Zr6UrtWfDof8BAACgQJn+bxv1//0fDOtz/Edj+5+YrtTGh0P/AwAAQIEy/b911P9Djzn12AEzzln8n+lK7blw6H8AAAAoUKb/t4n6f9hzI65YfNsxP+yQrtQmhEP/AwAAQIEy/b9t1P/DzzvppPmHLz+2Y7pSez4c+h8AAAAKlOn/7aL+f+DU/fce3ue9Q39JV2oTw6H/AQAAoECZ/t8+6v8H3xk4/NDb917m3HSl9kI49D8AAAAUKNP/O0T9P+KFi674doer5kxLV2ovhkP/AwAAQIEy/b9j1P8P9drtpNVarHX/5HSl9lI49D8AAAAUKNP/O0X9P/KkC/be+8+Zu5+artReDsf/vv8b/f/yyAAAAMB/KNP/O0f9//CUp4c/tdKqm7+TrtQmhcP7fwAAAChQpv93ifr/kaUHvTvk5envnJWu1F4Jh/4HAACAAmX6f9eo/0cNO2LLA4f2uOjodKX2ajj0PwAAABQo0/+7Rf3/6DNdlquf/8jRE9OV2mvh0P8AAABQoEz/7x71/2PV3T//3HXD9dqlK7UFnwmg/wEAAKBAmf7fI+r/0ac3WGnTp7995bt0pfZ6OPQ/AAAAFCjT/3tG/f/4pJfmPf/RToN/T1dqb4RD/wMAAECBMv2/V9T/T3z85wcDq0su6JSu1N4Mh/4HAACAAmX6f++o/5/s2rbtcUt2Wrx3ulKbEg79DwAAAAXK9P8+Uf8/9cJvU/+efMsPn6Qrtanh0P8AAABQoEz/7xv1/5he27VuOmLLsa+mK7W3wqH/AQAAoECZ/t8v6v+nT1p46U6n/XroCelK7e1w6H8AAAAoUKb/20X9P3bK87Mf7HbyMl+kK7V3wqH/AQAAoECZ/t8/6v9nHtv0smVGPTBnt3Sl9m449D8AAAAUKNP/B0T9P67x3C6fTV34/gPSldp74dD/AAAAUKBM/7eP+v/ZVV7fdfRiL+7+U7pSez8c+h8AAAAKlOn/A6P+Hz+0ydDdZ223+Z7pSu2DcOh/AAAAKFCm/w+K+v+5P1casfQWf7/zTbpS+zAc+h8AAAAKlOn/DlH/T9jtk/1mHHzARX+mK7WPwqH/AQAAoECZ/j846v/n23/V/fGrrj/6iHSlNi0c+h8AAAAKlOn/jlH/T/x69Wt3u3mx9d5KV2ofh0P/AwAAQIEy/d8p6v8Xbr/kmEv2nvzKaelK7ZNw6H8AAAAoUKb/D4n6/8V1dr3otJbHDD4+Xal9Gg79DwAAAAXK9P+hUf+/1Kr3XWvNveeCFxs0uOXX/75Smx4O/Q8AAAAFyvT/YVH/v3zFmJ3fr945d/10pfZZOPQ/AAAAFCjT/52j/p+0wfnD9v2o2aCr05XajHDofwAAAChQpv8Pj/r/levH7fXs02Mn356u1P4ZDv0PAAAABcr0/xFR/7966eUnz+p63obbpSu1z8Oh/wEAAKBAmf4/Mur/17bb8coVz/+qy6PpSu2LcOh/AAAAKFCm/4+K+n/yGUu9ftjQdfouma7UZoZD/wMAAECBMv1/dNT/r7/y/sbDXr5iaj1dqX0ZDv0PAAAABcr0/zFR/7/xyXeL/7nSnpvcl67UvgqH/gcAAIACZfr/2Kj/3zy+5bdL/PnoTqulK7Wvw6H/AQAAoECZ/u8S9f+U+xpfv3yLM+4Zl67U/hUO/Q8AAAAFyvT/cVH/T13tzdO/2OGTuQ+kK7VZ4dD/AAAAUKBM/3eN+v+tJr8c+MjtKy+3SLpS+yYc+h8AAAAKlOn/46P+f3tU61E79+lz5KXpSu3bcOh/AAAAKFCm/0+I+v+dF2844rLDd3h2nXSl9l049D8AAAAUKNP/J0b9/27vjs/03Pb7WZumK7Xvw6H/AQAAoECZ/j8p6v/3Tu42ePUZGze5MV2p/RAO/Q8AAAAFyvT/yVH/vz/1wd5vzf353NHpSm12OPQ/AAAAFCjT/6dE/f/BGScO2KPl5oOWS1dqP4ZD/wMAAECBMv3fLer/D195+Kyxe982eaF0pTYnHPofAAAACpTp/1Oj/v/ok5s6/nDzoRvek67UfgqH/gcAAIACZfq/e9T/044/8PGVr3q5y8bpSu3ncOh/AAAAKFCm/0+L+v/jhYdMvPfgqu+16Urtl3DofwAAAChQpv97RP3/ybNdV++4xbCpt6YrtV/Dof8BAACgQJn+Pz3q/08f6Nyg0awTN2mTrtTmhkP/AwAAQIEy/X9G1P/Tl7z1n7MX67/TxelK7bdw6H8AAAAoUKb/z4z6/7Nlzh317dQD72mRrtTmhUP/AwAAQIEy/d8z6v8Zw8cfuNqo+XO3TFdqv4dD/wMAAECBMv1/VtT//xzX9/S9u22z3E3pSu2PcOh/AAAAKFCm/8+O+v/z+s7XP3XaXUeumK7U/gyH/gcAAIACZfr/nKj/vzhjRu8LRxz17Nh0pTY/HPofAAAACpTp/3Oj/p/5yrqDr5v8xqwR6Urtr3DofwAAAChQpv/Pi/r/y09WeeajJZdosni6Uvs7HPofAAAACpTp//Oj/v/q+GlHrN973KcnpSvVgkP/AwAAQIEy/X9B1P9fv7ji44/dc8H2k9KVKnyP/gcAAIASZfr/wqj//9V7escdJr518vR0pWoYDv0PAAAABcr0f6+o/2edPPOsZVdb5qoL05WqUTj0PwAAABQo0/+9o/7/ZuqaA75qeN3EH9OVauFw6H8AAAAoUKb/L4r6/9vzx/Qa82m7NQ5MV6paOPQ/AAAAFCjT/32i/v9uQu/b93p2xlm7pCvVgg8A0P8AAABQoEz/Xxz1//fv7jpu1WNa3PxlulLVw6H/AQAAoECZ/r8k6v8ful9y5Hd9p83snK5UC35e/wMAAECBMv1/adT/sx+6a81fDmm+8F/pStU4HPofAAAACpTp/75R//+4/PETqq1G7/+vdKVaNBz6HwAAAAqU6f/Lov6f0+jwz9rP7Dlq73SlahIO/Q8AAAAFyvT/5VH//zTmtoZ3/fb1by+nK1XTcCzToEH1P/zEAAAAwH8q0/9XRP3/8+tbfddlrfVXPC5dqRYLh/f/AAAAUKBM/18Z9f8vZ/+9xM27XL7v6elKtXg49D8AAAAUKNP/V0X9/+uxL240cdBuI6akK9US4dD/AAAAUKBM/18d9f/cDxtN3uS6wZ/OTVeqJcOh/wEAAKBAmf6/Jur/386fsO4D7Ttv3yFdqZYKh/4HAACAAmX6/9qo/+dNqL94SKs5J++UrlRLh0P/AwAAQIEy/X9d1P+/v7vtF4t93/qqz9KVakH3638AAAAoUKb/+0X9/0f3P6q/fho58ZR0pVo2HPofAAAACpTp/+uj/v+z6SKn7bZx9zXeSFeqZuHQ/wAAAFCgTP/fEPX//Cfe6P94uwlnfZiuVMuFQ/8DAABAgTL93z/q/7/u/vmxGTc2uPn8dKVaPhz6HwAAAAqU6f8bo/7/e4VWByx95h8zJ6Qr1Qrh0P8AAABQoEz/D/iv/q8anLn/oPOHtV342HSlWjEc+h8AAAAKlOn/m6L+X+iNgeddMWnA/memK1XzcOh/AAAAKFCm/wdG/d/woxGHfbxsh1HvpSvVSuHQ/wAAAFCgTP/fHPV/o6NOGrNx40m/HZquVCuHQ/8DAABAgTL9Pyjq/4WXnXTwrHcbr/hbulKtEg79DwAAAAXK9P8tUf/XRi4+esXHh+77Q7pSrRoO/Q8AAAAFyvT/rVH/V09vdtO+J3YdsW+6Uq0WDv0PAAAABcr0/21R/9cbzDn72UFLDb8rXakW/Iz+BwAAgAJl+v/2qP8XuXuT29faZcoejdKVavVw6H8AAAAoUKb/B0f933iFX3u9v1avlZdNV6o1wqH/AQAAoECZ/r8j6v9Fm04+8pLfxs9/Il2p1gyH/gcAAIACZfr/zqj/mzyx6LjTZq4xum26Uq0VDv0PAAAABcr0/5Co/5v+cei8Vlt93mFQulKtHQ79DwAAAAXK9P9dUf8vtuPtK004ZN+F+qUr1Trh0P8AAABQoEz/3x31/+Id7m97U99rPtswXanWDYf+BwAAgAJl+v+eqP+X+OGoD7oec3b/m9OVar1w6H8AAAAoUKb/7436f8kNd7q317NPnLF5ulKtHw79DwAAAAXK9P99Uf8vdfOlu1376QrrrpGuVBuEQ/8DAABAgTL9f3/U/0tf8uzxHzb88KWL0pWqZTj0PwAAABQo0/9Do/5fZqtz+m6w2i79mqYr1T8aNJg/V/8DAABAmTL9Pyzq/2X3/eikHyb2PXVkulIt+EwA/Q8AAAAFyvT/8Kj/m81d+YqV72nZdky6Um0UDv0PAAAABcr0/wNR/y/3+TrD9+g9a9pK6Uq1cTj0PwAAABQo0/8PRv2//CGf7T32xE2Hb5OuVJuEQ/8DAABAgTL9PyLq/xX+WGPI6o/P3uOOdKXaNBz6HwAAAAqU6f+Hov5fcccvdnrr3SNWvjJdqVqFQ/8DAABAgTL9PzLq/+YdPj32ssZ3zm+ZrlStw6H/AQAAoECZ/n846v+VflihT89lG44emq5Um4VD/wMAAECBMv3/SNT/K1/zzdzXJ03sUEtXqs3Dof8BAACgQJn+HxX1/ypbbNhsu2HdFlo6Xam2CIf+BwAAgAJl+v/RqP9XXWP5zU46c8Rnj6Qr1Zbh0P8AAABQoEz/Pxb1/2qDpr53y40d+y+arlRtwqH/AQAAoECZ/h8d9X+L21r17dtu4BnD0pVqq3DofwAAAChQpv8fj/p/9dV/Pv6sjdusOz5dqdqGQ/8DAABAgTL9/0TU/2ts/sZua/w076VV0pVq63DofwAAAChQpv+fjPp/zX6L3Dv1+y79bkhXqm3Cof8BAACgQJn+fyrq/7X+eGDvZVvdd2rrdKXaNhz6HwAAAAqU6f8xUf+vveMpw79q36TtWulKtV049D8AAAAUKNP/T0f9v06Hg6947LpXp12WrlTbh0P/AwAAQIEy/T826v91f7j+pB0eb7z7YulKtUM49D8AAAAUKNP/z0T9v96+7ft8dOKk+x9OV6odw6H/AQAAoECZ/h8X9f/6cwccu37jrnOeSleqncKh/wEAAKBAmf5/Nur/DT4fudOF7w5dpnm6Uu0cDv0PAAAABcr0//io/1secsKQ6ya1PXRgulLtEg79DwAAAAXK9P9zUf//Y89efdos+8fYzdKVatdw6H8AAAAoUKb/J0T9v+FPTx372pkdflgzXal2C4f+BwAAgAJl+v/5qP83+urine4cNmDxPulKtXs49D8AAAAUKNP/E6P+3/jwXYac0q77BVunK9Ue4dD/AAAAUKBM/78Q9f8md3b9+MwbRw6+JV2p9gyH/gcAAIACZfr/xaj/N117yHaX/9TglevSlWqvcOh/AAAAKFCm/1+K+r/Vpreu9vbGE9b7R7pS7R0O/Q8AAAAFyvT/y1H/t7668/wWrTofPSRdqfYJh/4HAACAAmX6f1LU/5v9/dfSM78ffFHDdKXaNxz6HwAAAAqU6f9Xov7ffNc2s5e7rvU7zdKVar9w6H8AAAAoUKb/X436f4sDGk7dqf2czZ9MV6p24dD/AAAAUKBM/78W9f+W37zQetQu6+9+fbpS7R8O/Q8AAAAFyvT/5Kj/2+xZfdBy0Nf3t0pXqgPCof8BAACgQJn+fz3q/61+eq7tB7/tNmftdKVqHw79DwAAAAXK9P8bUf+3/er3la5Z6/JlLk9XqgPDof8BAACgQJn+fzPq/60P32Ze762aH9okXakOCof+BwAAgAJl+n9K1P/bbPdmv5dnThs7PF2pOoRD/wMAAECBMv0/Ner/bS9t3G2zvj1/eDZdqQ4Oh/4HAACAAmX6/62o/7e7vvU+Rx0yevGV05WqYzj0PwAAABQo0/9vR/2//Qa/jLzx2XYX3J+uVJ3Cof8BAACgQJn+fyfq/x16zLzvpWOuG7xwulIdEg79DwAAAAXK9P+7Uf/v+Nqau2/esMUr/6bxq0PDof8BAACgQJn+fy/q/52mr9j16E9nrDcqXakOC4f+BwAAgAJl+v/9qP93Pm76pf0nXnD0tulK1Tkc+h8AAAAKlOn/D6L+32WpC0/uuNq4i+5MV6rDw6H/AQAAoECZ/v8w6v9dHxx75b29l3nninSlOiIc+h8AAAAKlOn/j6L+3218n2Gz73lr8w3SlerIcOh/AAAAKFCm/6dF/b97bfe9GrW/b5OX0pXqqHDofwAAAChQpv8/jvp/j6F977rlui5Tu6Qr1dHh0P8AAABQoEz/fxL1/56r7LzzSd+/2veMdKU6Jhz6HwAAAAqU6f9Po/7fq/G5x2zXqkmXqelKdWw49D8AAAAUKNP/06P+3/ux8Re9vvHADQ9PV6oFvxOg/wEAAKBAmf7/LOr/ff764YV+P3Wc/He6Uh0XDv0PAAAABcr0/4yo//fdZf11Lrhx3qCv05Wqazj0PwAAABQo0///jPp/v/2Xqa/Xrs25e6Ur1fHh0P8AAABQoEz/fx71f7tZ786cNmxik9npSnVCOPQ/AAAAFCjT/19E/b//enNvmXhmw1nt05XqxHDofwAAACjQv+//NcK98Myo/w/ov+n5myw74tld05XqpHDofwAAAChQ5v3/l1H/t7+syaFdJnU78qt0pTo5HPofAAAACpTp/6+i/j9wm9efuvnd2cudnK5Up4RD/wMAAECBMv3/ddT/B+3RvWP7xpvOfSVdqbqFQ/8DAABAgTL9/6+o/zvMGf74XSfeec+n6Up1ajj0PwAAABQo0/+zov4/+MsbB/zy+BE7XZCuVN3Dof8BAACgQJn+/ybq/46dO5xV3dN3k8PSleq0cOh/AAAAKFCm/7+N+r/TXzcPvr33LlPnpStVj3DofwAAAChQpv+/i/r/kF0O6N19tVl9v09XqtPDof8BAACgQJn+/z7q/0P3P/mIrSe27LJPulKdEQ79DwAAAAXK9P8PUf8fNuuhZyZ9+sSGz6Ur1Znh0P8AAABQoEz/z476v/OVR7x6WsOzJx+TrlQ9w6H/AQAAoECZ/v8x6v/DWw9a75JjPhzUM12pzgqH/gcAAIACZfp/TtT/R6x7d+P3n13h3PfTlerscOh/AAAAKFCm/3+K+v/IwV2+WeuQz5t0S1eqc8Kh/wEAAKBAmf7/Oer/o+64/Kk2fdeY9Wa6Up0bDv0PAAAABcr0/y9R/x+91o6Hvjbzmmc/SFeq88Kh/wEAAKBAmf7/Ner/YzY5//w7t9r3yPPSler8cOh/AAAAKFCm/+dG/X/sVeNuOWWtKcv9mq5UF4RD/wMAAECBMv3/W9T/Xf5a7azhvy0196B0pbowHPofAAAACpTp/3lR/x+3y4cDDh00/p6d05WqVzj0PwAAABQo0/+/R/3fdf/PH198l147zUhXqt7h0P8AAABQoKT/q/irC/8R9f/xs9buOP+HNrd2SFeqi8Kh/wEAAKBAmff/f0b9f8IeXz1zfOt5589NV6o+4dD/AAAAUKBM/8+P+v/EOasfMeDAjht/lq5UF4dD/wMAAECBMv3/V9T/J325Uu/n+g18Y6d0pbokHPofAAAACpTp/7+j/j+58yeDW/dvcvkb6Up1aTj0PwAAABTof9//tQZR/5+yYrMJ1+z3atdT0pWqbzj0PwAAABQo0/8LRf3f7Z631+y9UZdW56cr1WXh0P8AAABQoEz/N4z6/9Qn/9Ww5Zz73v4wXakuD4f+BwAAgAJl+r9R1P/dF9v4sw+aHXHXselKdUU49D8AAAAUKNP/C0f9f9qbi93+3Ct37jAhXamuDIf+BwAAgAJl+r8W9X+Pnq/1aj1802XfS1eqq8Kh/wEAAKBAmf6vov4//egfjzy+5+xfzkxXqqvDke//6v/zIwMAAAD/oUz/16P+P2PaluMGnNDtmd/SleqacHj/DwAAAAXK9P8iUf+f+fBN7Q8YPeLwQ9OV6tpw6H8AAAAoUKb/G0f937PZgY/c/U7DxvumK9V14dD/AAAAUKBM/y8a9f9ZC514w6+LTPz6h3Sl6hcO/Q8AAAAFyvR/k6j/zx778Bm1VVe4dVK6Ul0fDv0PAAAABcr0f9Oo/89ZsdugO5//8PyT0pXqhnDofwAAAChQpv8Xi/r/3HsePO+Uu8/e+MJ0peofDv0PAAAABcr0/+JR/5/35A2Hten1xBvT05XqxnDofwAAAChQpv+XiPr//MU6jnnt2JaXH5iuVAPCof8BAACgQJn+XzLq/wtOvffNM8bP6vpjulLdFA79DwAAAAXK9P9SUf9f+M4xG140fZdWX6Yr1cBw6H8AAAAoUKb/l476v9dznZq+06jv27ukK9XN4dD/AAAAUKBM/y8T9X/v8+74ft0vet31V7pSDQqH/gcAAIACZfp/2aj/L7r+hA6ftRm/Q+d0pbolHPofAAAACpTp/2ZR//fZYOSTy3Raatm905Xq1nDofwAAAChQpv+Xi/r/4u0GDNz90im//CtdqW4Lh/4HAACAAmX6f/mo/y+5tP2Zo2/Z95nj0pXq9nDofwAAAChQpv9XiPr/0tmzb+ux6zWHv5yuVIPDof8BAACgQJn+XzHq/757bXHuxWuv0XhKulLdEQ79DwAAAAXK9H/zqP8vO6Jpp/fmff716elKdWc49D8AAAAUKNP/K0X9f/kXrz699iIDvrsjXamGhEP/AwAAQIEy/b9y1P9X7LbIAePf6dB0m3Sluisc+h8AAAAKlOn/VaL+v/LPNx7bZ/QfnVqmK9Xd4dD/AAAAUKBM/68a9f9VX//cf4UT2o65Ml2p7gmH/gcAAIACZfp/taj/r27f6rRveg6dXUtXqnvDof8BAACgQJn+bxH1/zWrHbPZ8OFdlxqarlT3hUP/AwAAQIEy/b961P/X3nfve4e+MmnXR8IXT/uv76vuD4f+BwAAgAJl+n+NqP+vG3XH3MWbNb536XSlWvD/BPyv/b/Qwv8DzwwAAAD8ZzL9v2bU//2adGo2f86c94alK9WCP/P+HwAAAAqU6f+1ov6//pXzTpy5UestF01XquHh0P8AAABQoEz/rx31/w1nPHP1cvsNPnaVdKV6IBz6HwAAAAqU6f91ov7vf/xlD+zUv/PF49OV6sFw6H8AAAAoUKb/1436/8ZPdthjVL8Jr7VOV6oR4dD/AAAAUKBM/68X9f+A4f8ceuaBDTa4IV2pHgqH/gcAAIACZfp//aj/b1pmrV0vbz2y12XpSjUyHPofAAAACvS/9v9f/73/N4j6f2B91S5v/9D9zrXSlerhcOh/AAAAKFDm/X/LqP9vHvfBZS3mjf6uUbpSPRIO/Q8AAAAFyvT/P6L+H7Ra825Pr92z6V3pSjUqHPofAAAACpTp/w2j/r/lvo/77bnrtE5PpCvVo+HQ/wAAAFCgTP9vFPX/raO+HLnKLc3HLJuuVI+FQ/8DAABAgTL9v3HU/7c1abHP95dePntQulKNDof+BwAAgAJl+n+TqP9vP+Httgd32m2ptulK9Xg49D8AAAAUKNP/m0b9P/itZh/c1+brXTdMV6oFfyeA/gcAAIACZfq/VdT/d7y08bwfv1j/3n7pSvVkOPQ/AAAAFCjT/62j/r/zgn+t1LDRW+9tnq5UT4VD/wMAAECBMv2/WdT/Q3ovuseq05fZ8uZ0pRoTDv0PAAAABcr0/+ZR/9/14uQHvhs/7tiL0pXq6XD8P/3f6H/ukQEAAID/UKb/t4j6/+6pv1495tgLLl4jXanGhsP7fwAAAChQpv+3jPr/npM3OXGvXjNeG5muVM+EQ/8DAABAgTL93ybq/3tX639Zv7tbbNA0XanGhUP/AwAAQIEy/b9V1P/33XdQlwuev67XSulK9Ww49D8AAAAUKNP/baP+v3/Uqbuut2q7O8ekK9X4cOh/AAAAKFCm/7eO+n9ok2FDp619TaNW6Ur1XDj0PwAAABQo0//bRP0/bPhJ+yz071eqCeHQ/wAAAFCgTP9vG/X/8GVGjHz0ls+fuDxdqZ4Ph/4HAACAAmX6f7uo/x+oD+z35a5rdFw7XakmhkP/AwAAQIEy/b991P8Pjtu/W7NO41cdnq5UL4RD/wMAAECBMv2/Q9T/Ix7abZ97Lu31d5N0pXoxHPofAAAACpTp/x2j/n9o+YtG7v/FlAdXTleql8Kh/wEAAKBAmf7fKer/kY2e7rdwm6X2ejZdqV4Oh/4HAACAAmX6f+eo/x8ec0G3udNntVk4XakmhUP/AwAAQIEy/b9L1P+PnH/EUj80avnh/elK9Uo49D8AAAAUKNP/u0b9P2rCoJ9WPrbvtaPSlerVcOh/AAAAKFCm/3eL+v/Rd+9+a4/xu5zybxq/ei0c+h8AAAAKlOn/3aP+f6x7l03G3v3h2nemK9XkcOh/AAAAKFCm//eI+n/0Si9N79VrhRe2TVeq18Oh/wEAAKBAmf7fM+r/x+9qsO21qz5x/QbpSvVGOPQ/AAAAFCjT/3tF/f/E421X/vD5s3tcka5Ub4ZD/wMAAECBMv2/d9T/Ty7x518bvDOi0cPpSjUlHPofAAAACpTp/32i/n/qoe2aPbJIt38ulq5UU8Oh/wEAAKBAmf7fN+r/Mcv/NnfnEyY+0Tx88c+///47nNVb4dD/AAAAUKBM/+8X9f/TjZ5/b/nRDTs+la5Ub4dD/wMAAECBMv3fLur/sWMW3uyL4Xeuulm6Ur0TDv0PAAAABcr0//5R/z/z0dydOvc84u+B6Ur1bjj0PwAAABQo0/8HRP0/7qhNhzzcbPaDfdKV6r3/6x9Nqv/x5wUAAAD+c5n+bx/1/7NnNunzxyub7rVmulK9Hw7v/wEAAKBAmf4/MOr/8W+8fuwiG73a5pZ0pfogHPofAAAACpTp/4Oi/n/upk9OOHxOkw+3TleqD8Oh/wEAAKBAmf7vEPX/hI1Xumpk//uu/Ue6Un0UDv0PAAAABcr0/8FR/z+/9eoP/r5fl1OuS1eqaeHQ/wAAAFCgTP93jPp/Yp+v9mx84Ly1G6Yr1cfh0P8AAABQoEz/d4r6/4Vfdr1/cr82LwxJV6pPwqH/AQAAoECZ/j8k6v8X212yy/Y/DLz+yXSl+jQc+h8AAAAKlOn/Q6P+f+mwMced3Lpjj2bpSjU9HPofAAAACpTp/8Oi/n95Ru/LBz3f4sx56Ur1WTj0PwAAABQo0/+do/6ftPO4UxquOuOmw9KVakY4/tP+r/5fPDIAAADwH8r0/+FR/78y7/zrfuzVbsI+6Ur1z3B4/w8AAAAFyvT/EVH/v/rdjg/fd/d1Lb5PV6rPw6H/AQAAoECZ/j8y6v/XOl6+78HjlznxmHSl+iIc+h8AAAAKlOn/o6L+n9z8/cbLHvvWFc+lK9XMcOh/AAAAKFCm/4+O+v/1IUt981WjCz5+P12pvgyH/gcAAIACZfr/mKj/3xjd8tXHpo/btme6Un0VDv0PAAAABcr0/7FR/7+5+Hfr7dBmt3ZvpivV1+HQ/wAAAFCgTP93ifp/yuQ3D+r0xeUju6Ur1b/Cof8BAACgQJn+Py7q/6lnNX7iwUvX//28dKWaFQ79DwAAAAXK9H/XqP/fOqb1zX93+nqlD9KV6ptw6H8AAAAoUKb/j4/6/+0PfunZdNee7Q9KV6pvw6H/AQAAoECZ/j8h6v93RnS89ZVbRj/2a7pSfRcO/Q8AAAAFyvT/iVH/v7vcDee0ndf8qxnpSvV9OPQ/AAAAFCjT/ydF/f9ewwcPOXXtadXO6Ur1Qzj0PwAAABQo0/8nR/3//lPdxg5u3eDMLulKNTsc+h8AAAAKlOn/U6L+/6D5w/vXf5hw00vpSvVjOPQ/AAAAFCjT/92i/v9wyImP/tyv+4Sp6Uo1Jxz6HwAAAAqU6f9To/7/aPSBNw45cGSLM9KV6qdw6H8AAAAoUKb/u0f9P23xm3ocuF/rE/9OV6qfw6H/AQAAoECZ/j8t6v+Pu3Wtf9N/zhWHpyvVL+HQ/wAAAFCgTP/3iPr/k/eHzFxhTueP90pXql/Dof8BAACgQJn+Pz3q/08n3vrCPhsN3vbrdKWaGw79DwAAAAXK9P8ZUf9PP7fzOuNf6dqufbpS/RYO/Q8AAAAFyvT/mVH/f3be+J73NBs6cna6Us0Lh/4HAACAAmX6v2fU/zOeO/fm/Xs2/v2rdKX6PRz6HwAAAAqU6f+zov7/5zs7P7Hw8Ekr7ZquVH+EQ/8DAABAgTL9f3bU/5+f2veguaM7tH8lXan+DIf+BwAAgAL92/5fdsFdOyfq/y+arzu21QkDHjs5Xanmh0P/AwAAQIEy7//Pjfp/5pAZh0xYpO1XF6Qr1V/h0P8AAABQoEz/nxf1/5ejp51z0zt/VJ+mK9Xf4dD/AAAAUKBM/58f9f9Xi69ya9dtlvroo3SlvuDQ/wAAAFCgTP9fEPX/1yOm9/jzsylbn5Ou1MP36H8AAAAoUab/L4z6/1/LrXjjEhf16t49Xak3DIf+BwAAgAJl+r9X1P+zGq756GGdx1/3erpSbxQO/Q8AAAAFyvR/76j/v3lq5v7Ddlzj5R3TlfrC4dD/AAAAUKBM/18U9f+3S/d++tfBn6/zebpSr4VD/wMAAECBMv3fJ+r/74aN6VSbv+/pP6cr9Soc+h8AAAAKlOn/i6P+//6ZS849YPVrbjw4Xakv+ABA/Q8AAAAFyvT/JVH//1DtetvdL50949t0pb7g5/U/AAAAFCjT/5dG/T/7heO/err5Ew32S1fqjcOh/wEAAKBAmf7vG/X/j73uqu153goHHZKu1BcNh/4HAACAAmX6/7Ko/+ecdNtaq9z/4eN/pCv1JuHQ/wAAAFCgTP9fHvX/T1MOf6lBw13+PDtdqTcNh/4HAACAAmX6/4qo/3++9+/1Wx7fd5V305X6YuHQ/wAAAFCgTP9fGfX/L6tu9doH9ZZ7Pp+u1BcPh/4HAACAAmX6/6qo/39dtNGsa6bNGnZUulJfIhz6HwAAAAqU6f+ro/6f+8iLi/R+fdOPdk9X6kuGQ/8DAABAgTL9f03U/78tXf985lKzt56ZrtSXCof+BwAAgAJl+v/aqP/nDZuw0HI9jug+J12pLx0O/Q8AAAAFyvT/dVH///7MHy12eujO6/ZPV+oLul//AwAAQIEy/d8v6v8/qm2fH/VIw5c/Tlfqy4ZD/wMAAECBMv1/fdT/fx73xujGp0xcp1e6Um8WDv0PAAAABcr0/w1R/8+fvsjBvzftdvqJ6Up9uXDofwAAAChQpv/7R/3/12utzh45ZcSNr6Ur9eXDof8BAACgQJn+vzHq/797/HzT4Vt2nNEjXamvEA79DwAAAAXK9P+A/+r/eoP9j5i//TcDG7ydrtRXDIf+BwAAgAJl+v+mqP8XmjVotclXtznohXSl3jwc+h8AAAAKlOn/gVH/N/zr7u0GdZz3eNd0pb5SOPQ/AAAAFCjT/zdH/d9oly4fn7xXlz9npSv1lcOh/wEAAKBAmf4fFPX/wpu81HrkwPtW2SNdqa8SDv0PAAAABcr0/y1R/9euajD18F+b7HlkulJfNRz6HwAAAAqU6f9bo/6v7mg7u/EGrw6bn67UVwuH/gcAAIACZfr/tqj/62v9ufTv08Y9tFS6Ul/wM/ofAAAACpTp/9uj/l/ksu3mHVW/YJ/H0pX66uHQ/wAAAFCgTP8Pjvq/8Ta/rXTj8W+tcG+6Ul8jHPofAAAACpTp/zui/l90vefbvjx2mXlVulJfMxz6HwAAAAqU6f87o/5v0n/hDza7/7pHrkpX6muFQ/8DAABAgTL9PyTq/6bTD7r9rPPaHbBeulJfOxz6HwAAAAqU6f+7ov5f7Lj+vfo2n1HbPl2prxMO/Q8AAAAFyvT/3VH/L95j2JFTX2rxxeB0pb5uOPQ/AAAAFCjT//dE/b/Ea6eOW2P1aQPXTVfqC34nQP8DAABAgTL9f2/U/0s23mdC2/nNz+6brtTXD4f+BwAAgAJl+v++qP+XeuyqNV8ZPHrN/ulKfYNw6H8AAAAoUKb/74/6f+mhjzQcvGPP5zdJV+otw6H/AQAAoECZ/h8a9f8yq5z12amdv776mXSl/o9w6H8AAAAoUKb/h0X9v+yJ7yzx4EXrn7RqulLfMBz6HwAAAAqU6f/hUf83e3vp7zp9dvl2jdOV+kbh0P8AAABQoEz/PxD1/3Ivrze56Ta7TX8wXalvHA79DwAAAAXK9P+DUf8vf+H3G/29weCHrklX6gv+TkD9DwAAAAXK9P+IqP9XmP6PF4/7tfM+G6Ur9U3Dof8BAACgQJn+fyjq/xWPm7XuwIFzVtgqXam3Cof+BwAAgAJl+n9k1P/Ne0ypnt+r9bzb0pV663DofwAAAChQpv8fjvp/pdeW+2LTjiMfWT5dqW8WDv0PAAAABcr0/yNR/688bGb/K6/ufsDj6Up983DofwAAAChQpv9HRf2/ytJrnnbeNxNqd6cr9S3Cof8BAACgQJn+fzTq/1WrFQ/YaMsGX/yblfqW4dD/AAAAUKBM/z8W9f9qz0x/7JMpfwx8Ol2ptwmH/gcAAIACZfp/dNT/LcZv89mEpm3PXiFdqS/4TED9DwAAAAXK9P/jUf+vXvu9YatTBqy5RLpSbxuOBf2/yP/gIwMAAAD/oUz/PxH1/xpLPbdm10c6PP9QulLfOhze/wMAAECBMv3/ZNT/az5YTbjpoUlXr56u1LcJh/4HAACAAmX6/6mo/9eafu9G+/dofNIl6Up923DofwAAAChQpv/HRP2/9nHHTL5nqaHbDUhX6tuFQ/8DAABAgTL9/3TU/+v06PTd3Ne7Tt8iXalvHw79DwAAAAXK9P/YqP/Xfe2OJRb+9b6dx6Ur9R3Cof8BAACgQJn+fybq//VO7PzFHRt0uXu1dKW+Yzj0PwAAABQo0//jov5f/+1bq257vfrrv/ls//pO4dD/AAAAUKBM/z8b9f8GLw9Zd6uBTZZ/IF2p7xwO/Q8AAAAFyvT/+Kj/W17Y9cVXrx54xDrpSn2XcOh/AAAAKFCm/5+L+v8f3U774oKOHcdfmq7Udw2H/gcAAIACZfp/QtT/G77/RNVvy3nf3Jiu1HcLh/4HAACAAmX6//mo/zeaeM26075ps+im6Up993D83/1//v/oIwMAAAD/oUz/T4z6f+Nz93pxvaYTz7k6XanvEQ7v/wEAAKBAmf5/Ier/TcaeMGaTKQ1vWT9dqe8ZDv0PAAAABcr0/4tR/2+60MjDJj4y4vXt0pX6XuHQ/wAAAFCgTP+/FPV/q2YDzrv5lG7/uD1dqe8dDv0PAAAABcr0/8tR/7d+uP2gLj1mH7dkulLfJxz6HwAAAAqU6f9JUf9vNm322Xc9tOmlj6Yr9X3Dof8BAACgQJn+fyXq/82P3uKm9q/fOeW+dKW+Xzj0PwAAABQo0/+vRv2/Rc+mo6uljti0nq7U24VD/wMAAECBMv3/WtT/W7756sG/1Pvu3CJdqe8fDv0PAAAABcr0/+So/9t0W2Rc92m73H1xulI/IBz6HwAAAAqU6f/Xo/7f6v03jrx97Kxfb0pX6u3Dof8BAACgQJn+fyPq/7YTf+416fiWy2+ZrtQPDIf+BwAAgAJl+v/NqP+3PrfV7Vuf98QRY9OV+kHh0P8AAABQoEz/T4n6f5vmE2Zdcv/Z41dMV+odwqH/AQAAoECZ/p8a9f+2Q+qLnPbSh98snq7UDw6H/gcAAIACZfr/raj/txu97fprNV9h0RHpSr1jOPQ/AAAAFCjT/29H/b/94n+89v78z89ZLl2pdwqH/gcAAIACZfr/naj/d+jwzXMXr77GLaPTlfoh4dD/AAAAUKBM/78b9f+OP2y4Ro8dr3n9nnSlfmg49D8AAAAUKNP/70X9v9Mfyzdae/C+/1goXakfFg79DwAAAAXK9P/7Uf/vvOPUGe9dNOW4a9OVeudw6H8AAAAoUKb/P4j6f5fNz1h8mc5LXbpxulI/PBz6HwAAAAqU6f8Po/7ftd/j3362zfgpbdKV+hHh0P8AAABQoEz/fxT1/2639Xt99Ge9Nr01XakfGQ79DwAAAAXK9P+0qP93X33PjXdfqvFmZ6Ur9aPCof8BAACgQJn+/zjq/z0uufqFT16f9O476Ur96HDofwAAAChQpv8/ifp/z632XWejh7r2mZiu1I8Jh/4HAACAAmX6/9Oo//fa8Oz6eT2GHnV0ulI/Nhz6HwAAAAqU6f/pUf/vffOomVee0nb979KVepdw6H8AAAAoUKb/P4v6f5+PZtz12iN/TGqXrtSPC4f+BwAAgAJl+n9G1P/7HrXuzm2mdLi9U7pS7xoO/Q8AAAAFyvT/P6P+3+/MVY45pemAC39f8KP/9X3148Oh/wEAAKBAmf7/POr/dm9Mu+jOb7ovsUO6Uj8hHPofAAAACpTp/y+i/t+/6bw/L99y5Pf/TFfqJ4ZD/wMAAECBMv0/M+r/A57YftUzOzZ4+pd0pX5SOPQ/AAAAFCjT/19G/d/+7tr2La6ecFjHdKV+cjj0PwAAABQo0/9fRf1/4AoTP3l7YOelp6Ur9VPCof8BAACgQJn+/zrq/4NOObrVcnsN/uncdKXeLRz6HwAAAAqU6f9/Rf3f4b2hU2Zu0HroqelKfcGf6X8AAAAoUKb/Z0X9f/Dzg38c9euc3SanK/Xu4dD/AAAAUKBM/38T9X/Hcw5bZqfP1t/sm3Slflo49D8AAAAUKNP/30b93+mjW377YJuv390zXan3CIf+BwAAgAJl+v+7qP8bNDyyecvOu/U5Il2pnx4O/Q8AAAAFyvT/91H/H3rmcVv3vujyo/5MV+pnhEP/AwAAQIEy/f9D1P+HvXHPh9cMbr7+aelK/cxw/Pf+X+h/5JEBAACA/1Cm/2dH/d/5of0f3mzHaZPeSlfqPcPh/T8AAAAUKNP/P0b9f/jyA/d9efWet7+YrtTPCof+BwAAgAJl+n9O1P9HNBpxyo3zR194fLpSPzsc+h8AAAAKlOn/n6L+P3LMSdcd1bzdEp+kK/VzwqH/AQAAoECZ/v856v+jnr7ykwteuu773ulK/dxw6H8AAAAoUKb/f4n6/+gG7bbvd3+Lp09IV+rnhUP/AwAAQIEy/f9r1P/HLNtz1WnnzTjs1XSlfn449D8AAAAUKNP/c6P+P3bkY3+ud/wFS++WrtQvCIf+BwAAgAJl+v+3qP+7fLTUMt+NHffTF+lK/cJw6H8AAAAoUKb/50X9f9xR7/+46rRlhv6UrtR7hUP/AwAAQIEy/f971P9dz/xuyl71t3Y7IF2pL/hMAP0PAAAABcr0/x9R/x//RstWY0YMuGNmulK/KBz6HwAAAAqU6f8/o/4/4ZR/fbjmaR16756u1PuEQ/8DAABAgTL9Pz/q/xPf23jrKUv+0XL/dKV+cTj0PwAAABQo0/9/Rf1/0vPNml86ue2rc9KV+iXh0P8AAABQoEz//x31/8nnvP3b2VOHXtIrXalfGg79DwAAAAX63/d/1SDq/1PavPnm3ot1PebjdKXeNxz6HwAAAAqU6f+Fov7vdnHjDZ/qNmmL19KV+mXh0P8AAABQoEz/N4z6/9SBrZt+O6rx+yemK/XLw6H/AQAAoECZ/m8U9X/3f/zy/WoHz7nv7XSlfkU49D8AAAAUKNP/C0f9f9r37/evX9V6lx7pSv3KcOh/AAAAKFCm/2tR//c4aKnTfp41eMmu6Ur9qnDofwAAAChQpv+rqP9P36HlAUO26PzjC+lK/epw6H8AAAAoUKb/61H/n/H7d48d2HLCU3ukK/VrwqH/AQAAoECZ/l8k6v8zr2vXeeDcBofMSlfq14ZD/wMAAECBMv3fOOr/nptd+exxN49cbH66Ur8uHPofAAAACpTp/0X/q/8XatDisTs33bv7t0emK/V+4dD/AAAAUKBM/zeJ3v+ffWvPC58/fPQd56Qr9evDof8BAACgQJn+bxr1/zltnhzYqU/P3h+lK/UbwqH/AQAAoECZ/l8s6v9zL+5x5oMzprV8PV2p9w+H/gcAAIACZfp/8aj/zxu4d4e/t23+avd0pX5jOPQ/AAAAFCjT/0tE/X/+P659smmLyy/5PF2pDwiH/gcAAIACZfp/yaj/L2jXa8LoP/8P9u47yqr6evjwhSjnTgjYjRETir0EUfLDrmCIGjGaJnawghrBiqioiIIVWwJWiBjFFmMvqKAoEmtUsGPFithjF9R3qRs844EcEzE56/s+zz97z3BnM+NKxA+XuWy0c5filWx4LPofAAAAKqik/xfK9f9h741ZeuMR0zp1L17JTotF/wMAAEAFlfT/wrn+P3zqkU0X6bzio+8Wr2Snx6L/AQAAoIJK+n+RXP8P3K7rs89eOHn05sUr2Rmx6H8AAACooJL+XzTX/0dcedV2yw9YpOtrxSvZmbHofwAAAKigkv5fLNf/g5ofcMNDrcYtOKN4JTsrFv0PAAAAFVTS/4vn+v/I1pufccQdh769TfFKdnYs+h8AAAAqqKT/f5jr/6NGH3vI/lOmjnm4eCUbEYv+BwAAgAoq6f8lcv0/eNJKw69r1mab/sUr2chY9D8AAABUUEn//yjX/0P+8Fr/X/Q6qcWOxSvZn2PR/wAAAFBBJf2/ZK7/jx74SPeFbtzitduKV7JzYtH/AAAAUEEl/d8q1//HTFzwmue6rflK++KVbFQs+h8AAAAqqKT/l8r1/7G9J/c86PSP6kOLV7JzY9H/AAAAUEEl/f/jXP8f99Si4074YKvtzy5eyf4Si/4HAACACirp/5/k+v/4u9qPeGbl08atVbySnReL/gcAAIAKKun/1rn+P2H/aYev0qn5u9cWr2Tnx6L/AQAAoIJK+r9Nrv+Hrj9m7b7T717sh8Ur2ehY9D8AAABU0L/u/88G1r7q/xMHH/7YyON37TKHK9kFseh/AAAAqKCS5//b5Z7/P+mUrh/d1X30qL8Ur2QXxqL/AQAAoIJK+n/pXP+fvNKRrda+ssfkJYpXsoti0f8AAABQQSX9v0yu/0+ZNqp3uz7ndLyxeCW7OBb9DwAAABVU0v/L5vr/1N/2GjKpxWq9/1a8kl0Si/4HAACACirp/+Vy/f/HjbY/f8ikt45eoHgl+2ss+h8AAAAqqKT/l8/1/59mnrXRgff2uf+o4pXs0lj0PwAAAFRQSf+vkOv/YceuefHVC17avm3xSjbrewL0PwAAAFRQSf+vmOv/4at/2q3zPk0P6VS8kl0Wi/4HAACACirp/5Vy/X/acrfvueilE84eVrySXR6L/gcAAIAKKun/lXP9f/qIpse+fOMSr1xdvJJdEYv+BwAAgAoq6f9Vcv1/xvrjdzms1+P1hYpXsitj0f8AAABQQSX9/9Nc/585uNmgk5r1375Z8Up2VSz6HwAAACqopP/b5/r/rFPWHTVlynXjzi9eyWZ9T4D+BwAAgAoq6f9Vc/1/9kofb7jiHSu/u0LxSnZNLPofAAAAKqik/zvk+n/ELxt+dmqr6YsdX7ySXRuL/gcAAIAKKun/1XL9P/Kd+x/ZeUDXLiOLV7LrYtH/AAAAUEEl/b96rv///PJ7H3S6cMioDYpXsutj0f8AAABQQSX93zHX/+fs0HGxiZ0PnzykeCUbE4v+BwAAgAoq6f+f5fp/VI8HNnp8xC0dly9eyW6IRf8DAABABZX0///l+v/cFxY/f6WZC/XuULyS3RiL/gcAAIAKKun/Trn+/8tbqww5vM0DR/+xeCW7KRb9DwAAABVU0v9r5Pr/vE2n9z5xvV/d/5PilWxsLPofAAAAKqik/9fM9f/5629y7CZTh7YfW7ySjYtF/wMAAEAFlfT/Wrn+Hz34pD1vGtTukL8Wr2Q3x6L/AQAAoIJK+n/tXP9fcMo13d7c4fmzG4pXslti0f8AAABQQSX9v06u/y9cab+Ll+rVJjuyeCUbH4v+BwAAgAoq6f91c/1/0bFXbHj0jVNfalO8kt0ai/4HAACACirp//Vy/X/x6geO6jdli6vWKF7JbotF/wMAAEAFlfT/+rn+v2S5zQa1bXbS74YXr2QTYtH/AAAAUEEl/b9Brv+/V6vVJrdaZMkfFa9kt8ei/wEAAKCCSvq/c67/Lx06YsNd75g846bilWxiLPofAAAAKqik/7vk+v9vnbYddfqFh15+afFK9vdY9D8AAABUUEn/b5jr/8va7ThowoBxm7csXsnuiEX/AwAAQAU17v8jvt7/P8/1/+VnXLBLhxEbrXtN8Up2Zyz6HwAAACqo5Pn/rrn+v2Lbwa1X6HzMU4sXr2R3xaL/AQAAoIJK+v8Xuf6/8tkNP3mizYrHNSleye6ORf8DAABABZX0/0a5/r/q3YOePHnmtN3PK17J7olF/wMAAEAFlfT/xrn+v3rzm9c/dGq/tqsWr2T3xqL/AQAAoIJK+n+TXP9fs/ZSk25Y75rxJxavZP+IRf8DAABABZX0/y9z/X/tEVM6brrDksPOKl7J7otF/wMAAEAFlfT/prn+v27Yswv/ZNAT/dYsXsnuj0X/AwAAQAUV+7+W7/9uuf6/vv1yb71+ei1rXbySPRCL/gcAAIAKKnn+f7Nc/48Z+kKr/t1ufWlc8Uo2KRb9DwAAABVU0v+/yvX/DZ3afTR45b2vuqR4JZsci/4HAACACirp/81z/X9juyUee+CDy35XL17JHoxF/wMAAEAFlfT/Frn+v+mMp9deenrHJQcXr2QPxaL/AQAAoIJK+v/Xuf4fO+Onm53d6Z8zliteyR6ORf8DAABABZX0/29y/T+uy6uX7d59+8tXK17JHolF/wMAAEAFlfT/b3P9f/OWk05e9/iRm/+peCV7NBb9DwAAABVU0v+/y/X/LW/+sM/9fXqtu2LxSvZYLPofAAAAKqik/3+f6//x12S9zrrywqdOKF7JHo9F/wMAAEAFlfT/lrn+v7XlrYP3mNRw3IjilWxKLPofAAAAKqik/5vUmszu/9uWnDF6vRZ37r5+8Ur2RCz6HwAAACqopP+3yj3/P2HUehvft+CWba8qXsmejEX/AwAAQAWV9P/Wuf6//aFzLmp+77DxCxavZE/Fov8BAACggkr6f5tc/0/su82mH1669rCseCV7Ohb9DwAAABVU0v/b5vr/74fs8odL95nRb3TxSvZMLPofAAAAKmiO/T//rL3Zdrn+v2P86ON6Dhq6zy+LV7JnY9H/AAAAUEElz/9vn+v/O3fuvfPEHX516qvFK9nUWPQ/AAAAVFBJ/++Q6/+7Hjv3iE7rPT9xZvFK9lws+h8AAAAqqKT/e+T6/+57zz5356ntlulRvJI9H4v+BwAAgAoq6f+euf6/58Adfn7qzFv6TC5eyV6IRf8DAABABZX0/465/r93nRbZg20OH7pP8Ur2Yiz6HwAAACqopP93yvX/Pwbd82Kbzg881rt4JXspFv0PAAAAFVTS/zvn+v++4W/ffsCIhdaaWLySvRyL/gcAAIAKKun/XXL9f/+qayx3zIDp3QYWr2TTYtH/AAAAUEEl/b9rrv8feH2xbc+5cOVLnipeyV6JRf8DAABABZX0/265/p+01YNj9rpjyKd3F69k02OZa/83nXefMgAAAPBvKun/Xrn+n/zzV85cs1XX1rsXr2SvxuL5fwAAAKigkv7vnev/Bz9adcA9zR7v/kLxSvZaLPofAAAAKqik/3fP9f9DJ544rOWUJa7fqHglez0W/Q8AAAAVVNL/e+T6/+E1uh34yY3XPf+b4pXsjVj0PwAAAFRQSf/vmev/R5bed6uLe/Vv+k7xSvZmLPofAAAAKqik//+Q6/9Hz7z+2m33uXSfh4pXsrdi0f8AAABQQSX9v1eu/x9bp1+P8Zf2OfXA4pXs7Vj0PwAAAFRQSf/3yfX/44OuHtvx3gkTdypeyf4Zi/4HAACACirp/765/p8y/LiRvRdsusyE4pVs1msC6H8AAACooJL+3zvX/0+susXAYS3O6bNF8Ur2biz6HwAAACqopP/3yfX/k5uNbVhlUo+hrxevZO/Fov8BAACggkr6f99c/z/1/iGvPnPlW499XPv+169k78ei/wEAAKCCSvp/v1z/P/1c57tP6LPaWlsXr2QfxKL/AQAAoIJK+n//XP8/s/XRKxx0/N3dniteyT6MRf8DAABABZX0/wG5/n92u90G7Nq9+SWdi1eyj2LR/wAAAFBBJf3fL9f/U6eed+bpnUZ/ulXxSvZxLPofAAAAKqik/w/M9f9z7505ZsL0XVu/V7ySzYhF/wMAAEAFlfR//1z/P79Fz207fPBR94OLV7KZseh/AAAAqKCS/j8o1/8vrPPJte+tvOb1TxSvZJ/Eov8BAACggkr6/+Bc/784aJ2tmnU77fl7i1eyT2PR/wAAAFBBJf1/SK7/Xxre5MDfnr5V077FK9lnseh/AAAAqKCS/h+Q6/+XV71j2LkvNhmwTfHK7A/X/wAAAFBBJf1/aK7/p504/8B11hp/1ozilXo8Rv8DAABAFZX0/2G5/n9ljQkj79ym732vFa/Um8ai/wEAAKCCSvr/8Fz/T1/6o7Ejhly+6ubFK/XvxaL/AQAAoIJK+n9grv9fPXODHnufsXqv24pX6vPFov8BAACggkr6/4hc/7/WcfQ1q3V955gdi1fq88ei/wEAAKCCSvp/UK7/Xz9ul+63LbPDg/2LV+rNYtH/AAAAUEEl/X9krv/fGLlN/9M+HLH6w8Ur9SwW/Q8AAAAVVNL/R+X6/83lzxm+W+venfcuXqnP+nj9DwAAABVU0v+Dc/3/1ovjXjlswgXn/qN4pd4Qi/4HAACACirp/yG5/n+754DmJ51Xf29K8Ur9+7HofwAAAKigkv4/Otf//+zWZaUpA+9a9KDilXrzWPQ/AAAAVFBJ/x+T6/933j7mzhV3/v0O7xav1H8Qi/4HAACACirp/2Nz/f/ukGWXf+3m4WO7z/rR+Wc/rt4iFv0PAAAAFVTS/8fl+v+9DZ6f2PrpdaZ1KV6pt4xF/wMAAEAFlfT/8bn+f3/lx1/o1vTjhueLV+oLxKL/AQAAoIJK+v+EXP9/cGrrZmMWbTvg9uKV+oKx6H8AAACooJL+H5rr/w87PvV6uzufPatX8Up9oVj0PwAAAFRQSf+fmOv/j45rtcCkiza/b9/ilfrCseh/AAAAqKCS/j8p1/8fj2zbfsgBJ6/6YPFKfVb3638AAACooJL+PznX/zOWf/neA/dYuFfP4pX6orHofwAAAKigr/p/g3hPo/4/Jdf/M7sueuN91z54zCfFK/XFYtH/AAAAUEElz/+fmuv/Tz6dvPV6Dx/24PTilfriseh/AAAAqKCS/v9jrv8/nT7t4D0axq6+SfFK/Yex6H8AAACooJL+/1Ou/z/7dfuzz3pj487/LF6pLxGL/gcAAIAKiv6fL/eeU3I/3PTLUf9Rrdbl9dz74/ELzOr+L36PYJdD3353TvMrn9/Jzy9+iia12nxXfO3Tqn+7r2quZn89PWb++Khah1qT/Ff+ufZzefxp9cWXqnWoNS08vvEHfC8ev2Tcb/b1x++5R99ddzto9pvxo/VWm/R9Y/Vah1r964/fZ7f9evbde9fd4s3459LQtuvuC71S61Cb7+v/pPbo269P7s2GGO2WfHOZk774fL72+P0P2OmAXvvPfvP78filrzx4ZL85PX6/xp9/83j8MnsttcDrLe6szf/1x+/bb+8DdqoBAADwv1bS/7N7tlbrMj73/ujif7v/l2w8a3Pr/+99u6+qTH3Jlg89t+F30P/xZyVqi8zs/4tXW475vIbvXy7/gD337rdf35326jCvvhIAAAD4Jkr6f/bz0/Oo/1s1nrW59f/83+6rmqvZX8931P/xedeXmvrJMQ/U1qw1n9Pz8z3326lv790a/RZAs/i4Hzcf++LBtTVrLef8PH3PXXZv/KFZfNxPDnv/N+e03KTWYo7Pvxc+DAAAgP/flPT/7J6t1QYdkf+wmAvm3/4G/b9U41mL/gcAAAC+SyX9P/t56bn0/7/7/P+PG8+a/gcAAID/gpL+n/3ny+fY/wvOfvMb9n9Dm6/uzdK08c3vVL1tzHYxl465TMxlY8b37NeXj7lCzBVjrhRz5ZirxPxpzPiugPqqMeOP3tdXi7l6zI4xfxbz/2J2irlGzDVjrhVz7ZjrxFw35nox14+5QczOMbvE3DDmz2N2jfmLmBvF3Dhm/J2P9V/G3DRmt5ibxfxVzM1jbhHz1zF/E/O3MX8X8/cxt4zZPeZWMbeOuU3MbWNuF3P7mDvE7BGzZ8wdY8ZLEdZ3jrlLzF1jxuss1nvF7B1z95h7xNwz5h9i7hUzXnux3jfm3jH3iblvzP1ixisv1g+I2S/mgTH7x4xXXKwfHPOQmANiHhrzsJiHxxwYM/6/Wx8U88iYR8UcHHNIzKNjHhPz2JjHxTw+5gkxh8Y8MeZJMU+OGf9OqZ8a848x/xRzWMzhMU+LeXrMM2KeGfOsmGfHHBFzZMw/xzwn5qiY58b8S8zzYp4fc3TMC2JeGPOimBfHvCTmX2PGv7vqf4t5WczLY8b3N9WvjHlVzKtjXhPz2pjXxbw+5piYN8S8MeZNMcfGHBfz5pi3xIzv3arfGvO2mBNi3h5zYsy/x7wj5p0x74p5d8x7Yt4b8x8x74t5f8wHYk6KOTnmgzEfivlwzEdiPhrzsZiPx5wS84mYT8Z8KubTMZ+J+WzMqTGfi/l8zBdivhjzpZgvx5wW85WY02O+GvO1mPEaufU3Yr4Z862Yb8eMv0On/k7M+HWy/l7M92N+EPPDmB/F/DjmjJgzY34S89OYn30542Vgaw3xv9OG+EW3IV5npyF+/W+IP+/XEL/v3xC//jfMet3ZWa8nO+t1Yme9/usPYraI2TLmAjHjvxQaFoq5cMz4+4IaFo25WMzFY8bfK9wQzzM0xOsGN8TrBzXE9xE2xJ8nbIjnFRrivy8aWsfM/Z1GAAAAAACQvnj+v2nuXXd+tTZ7dM6vxVdvW6tlT9ZqTT4YN/Kqjb7Nz7/lt/TZd/w3BQAAAEAKov9bfvWe+Q/6X34+AAAAwLyn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSV9r/zf/7nxMAAAAwb3n+HwAAANJX1v9bL/A/+KQAAACAecrz/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6Yv+ny/3nlNyP1z/cjS0rdUGHZH/sMY//uXbuxz69rtzml/5/E5+fq7prFu1Zs/Mi6/oX2rxnf8MAAAAUEEl/d8Qo91c+n+J/NvfoP/bNZ61Rv3/3Vtg2pez2aPxjh/8935uAAAA+N/51/3f5Ptfzoal59L/4/Nvf4P+X7rxrEX/z7fZvPuK/qWFP4//3NuL1Gr1H9RqTb83b87X23z+BeXeblurZU/Wak0+mDf3AQAA4D9T8vx/8y9HwzJz6f8r8m9/g/5fpvGsRf/P/+TcPr9e/8kX9c012Wa++u97DKzVdtyq9Rdz2ovZF3O2I9e54ZIm187+/YlZj3t2sdaNH/ffuQsAAAD/kZL+jz8f37Bsrdbl9dz74znuBf7dP/+/bOM562Pnu+Jrn1bTb/VFzd3sr6flQ89tWOtQa5L/yj/Xfi6PP62++FItp9WaFh7f/jv6TAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04IAEAAAAQ9P91OwIFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLkCAAD//x0s6Z0=") 1.047488505s ago: executing program 7 (id=1613): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = fanotify_init(0x10, 0x800) fanotify_mark(r2, 0x1, 0x10, r0, 0x0) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r0, 0x0, r3, 0x0, 0x1, 0xb) 867.482299ms ago: executing program 7 (id=1614): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) 711.278123ms ago: executing program 5 (id=1615): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000340), 0x3, 0x464, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 692.851123ms ago: executing program 7 (id=1616): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000c40)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYBLOB="3ac58d341d191bef3ae54e2d8e854dfa3fe8747801d92ff81e579847d2b423f484d1496e058c6f263b7b677c8d09ad0d79e87a33f66a0daec47924e10e2e97a2a01cce8df6a0fe3d6022c192b1b4c56d2476c6db0fb227706027c8f12fd70f2d498eb433bb079342a248f3943e8e36a1f1413e43e8c8b44ef2608a56270405bd17d42477414f3e04a03b0f77319dad6dcfa93bf2225fc86d5b072a15767e1c96c528cb49aad10adac2f0987518e0ab6ad1422b2f6a6e1b95008908515af8f8e25229f98714fc7bcfac86405567a58dad46435e1e1c9a9f1d40d64c1815a8ec9637e957011ead474f307af7f77dcf43b42bcd497c679f6458380f921577c1f2201a3951f43556fda4a933da66e9215d9620814f7efe891431945b7d703a59922d986c5a5aa7a4f3d08622f3d70656a0eeb5caa6e8876fd100fe0188651004fc295060bd4d071c8a3b0eea874ce8f57cce710456bd9c6ddc613e5894bd9d28f218aef298131096762e1a80a806196d84a08aebe53fcdec082e5edd41bbe56b2a287150cc216f64461841b7753ced9dc226d2a712e0beb3c5b3e25e30888bc8e9eab621176c41e8153906468d78bcf57128f5f8317504a43e5847300d306e4de9e089ceab08c61fc7690e6265886bb997cd4f44551042f29c9aafa839b19124e1b7b947f4fe734882214a0c4e877efc33a826aca15921504784ec31208f5fe025fe0c886914677ff14456fafcd65686fa0b34679b04002bfa99def3ed3c1421aee0639492aa64f548f94c3e0c42d84099393114758c80f89e0e19428891a986f98c607dfc0be446a867b9e519e80970ad346b4259aac04f0b433538556019c527b693ff3974d7b75c16468c852242eb233200226b99ed408f9485b3c77abb3d610871d459ebcb3c1243aac559cec49278a410eb83c38b7c130b916698846a85406343a1350880bdf126d5a3f0e23c51350d617dfc261f68587560cf37bc50cc23bbb7aa2bed7c97e6e1a03ac44bbfa5eeda22c81293d07b6ebaca99b88c8d7176afa173bc976080f73cd5be206a4f3e92b060f43a175e3cb5de297521c5059b93f8d1f1f54b2b2c2a0a7484a638700a4af64038b8d4828315f2ce5e4b57cf4f694d342deeaf017bfba61f1e4855e1a1cef523c1b3af45041389cf985622eac5d7d1238915943ac747cf89103a0661ec3b2459a9f963aa489ee1774bfb90a9fb91c86dbd368f00bef3b5760f9e3e81765b4737e27e38fdebe9f172c4fdbf7cd519bb9f5b7d133de01015b7788acdd15b2c17d217bce05b9d3d1045322a69d2c1bcc904ce388be016b721f519b38179e653b167995ed1765c1e2f7e69608e0b2f69e300f9910dbc959773f509d6512ad46cada69de9f8d984c644bee2f6aab6eace602beee981f81693b0713fd5a62a4f974956b4547b4b2534d99b0646ab33382949d277617b007375bc25b7eddebb77c489f10366f9ef6984713a82b5158659ebd4c4eb407ef449ec245433e6b710661cb8928a3e31a29e16aa4f59d0da7ac259883d18c027f7c8255d951d1fd51e1d6efd7ec4e237e4824b3400a9a099e786eb48adc3be61e39c8df4db73225117a406c52f09c237bbfb57d2a8644cb35f3056bfdcca8de22d46e4352f7f06d600160f4bcf15e8fd0bdcef29583f093354cbe88c94ce23a0260304f6f65e1b33da80f5270b5e78f9daeb59ed5a4a79cc46a09ce7b1a10e3589d37365bc038ca3792e616a066c937e4d4b291c27bd84918e8bdcdd82ff88b535ebc8700917b0ba3c2e8edf4bafb275fe0b21251709c33f2b6ab2daea8cbdd5383c4c097c8be883fc69468bc7cf9e81e459e9d68c5d743daade327b331cf0e291d64a25acffcd75bb74330d9cd77f10fa6204b6bd0dc074288715be2b4e229eb299dbeb696fc420190c73ba7d77301e64ada64fd3b7e22570b2163fee74100d630f8cc0b9a6e110a4317c2c80659840e4f88f5b5326caf2a180f13bf21eb9c3b3b6a277f1f1b92d542e257a81907ad3e640cfb4ce85a1f19bd7e732d4e5a923c453ab783a92466a2090f042368e32cee8c5e57b42f1efc52f6b4963e441ee79b8cea1d0fdf989fa42a2e8d4ca2fd90b2073c4e52ab9c3087993ea00c6847fd15f5e61e194b18b55edbaa2aff53ee0e45273fc0ea23480827bf8f893ad843a928bb62c173eca8b3c267f1c1a74495d3332576bca73dd1af4b3664c478458dd5a167bccdee062ae9e12178cd9191d15c967571a0807a2a9845f8ad45efb865877278e1275f592b3eac4c0d16c7280ca6dc4e67276f1b01bf75942554532dff23091da6acc06c1959d9d343b0742556d0076e781c7426fbc68698f064118c1e48c8ad01ce38f3adddb58bd3983c630505b62c961f1d0c1cb33efaeb7629241b8729b0c9e65d2ed5bc00e09d466f7b61c8ea51088ab21da2c2df10bd89e05f4ef156b75b9c0ef654306693530796da679a9740fa149344aace92b9862c59f5812065205a8f464318fc31e88deb916ae818bad4e87ba219ee5e021d547377e19de06e85769f36cbe675a03701f03f2257e157ee4a48762b796d2ddc266cdbc827ee607a5bc28ceff81932314d053b318d72aa64098f39c64f33d29eff50ed8a2d34bb530c8241fb85de5b2ee69200dadfb568249b3297fb8d1de55769abbf92f5502a910f0ef01da3418609fcd1c15d060d78a7bb1f6297aff407ccfb06e233338ffd6c10d2dc60fe478dd9d9ca21897d2dfee8e86daf14fae06626e7b64d2e8cf02f53db4ca6195e2e440636834d9c3601c1f425b721cb513cb722548c3da07c47f9d32d0415203ead05f6e3759049e35d30efad10ce7ba57e4875b712297266a2c5f1687923bee7701185013e356192bf94722b9777a05222b9a06bbb29ebfd146df58c6c24c6709057011177ec5b0e7c7cbcdd3ace45c8396c64cd40445e09e36e41fb4a180ebb2d975c69730fd958e9f5acc8be6e19108fa270d1596d733e9378808212da528bae1f8cc9eeb4cb98626beb23e6b58a03ad8deaa8116a5483f860caf60f1f40af5f75d71910f045663875a15db63cd1bcfe77eade65275f22a7653565a9158d818115708a9c98c39fc9f57f1c915d070934402b2fb9829710ff96d01037c6ca43972c634dbeee59c5694e867b3a67b7d8c3b2795a99a13ccf4f2f7890e6133b153b000ad2c8b1848083b671ef912b00f6b545f65af4f1be82abfa42bde6047c595b0a2c0df3753e882ccf5c0085853062267afcfb2a5250e8bc605e6878b65d5c631346f6cb269bb4e77576704e79c7995fb1048af1d72b5c6533d858ec2112863ecccf6c541aabe8913468568e8eb2cd5dd72d78c36880f9ce1a403c0f0177155268205c62b4559bf968510c242cc8a08dbb63f041d042bc06e7d28a5ab29bffb3e49fdae733c245dbd6ab037c2a98adcd3bac43f4d92833d6b2d163da9634eaff2fc4f019a6a4d1dd1b6eb4af6f54c1542004c17826b5f84b2d01f15e9cd2d5646326bd2094624c89243202a83353e838ee961efd41d3a9fffa5d857b581af95ecdaf5b2be6b73a37e6da87f37dc33f2cf80b11c50be5047defc754cc022948748f1fc08c8e7edc7194e2b05cfb0f5cbf81f1e25b11f23ea7809aa8b6aed35eb62ca18048b69852bab086158a44078a138567d3246ba2e3aecaa27a857eb8749f46948a2b3bba889d44e0f92757c690dea483d195d6814eae929cd17a3d7632eed2e85bae250b308e4035e7a3af53a9cf02c3db865eb17a09eef4cd20eaad59078eccdbec9cdecf38b3b51d58a07ac56c18a1d01f354da5a41dd1e52b7ae5c64519a51f43de320229737b8fd1f3b6b48d7ff12e6d8ce5484a5d9d819ef1eaf2d0d0f9f38643bf28643640f8a6d8a080534f1b481785186aad542a3121f8d2b36e0007b70f42b81c2f915803c24d15097149ac14828b196eaf7d5c739d80ff4444ad8297aa889bbf09ecfc68a1c30b6d989faed943139f6e7351a52a77174e967922cfb0c0a4e76b7d3e0bc5007e7797113f874b318585d78223517c38c559329a1e583084b8ec269a20ba43a596656dca9591997bd9ce5682d002c6fd93b1219afab27746c45ebe1e0aa32256baaf9cbddbce02be0f0dc7a0eca8beadf0fbc6cd05f99f02220398ef705f4346f883fd0a0c19cea317e943f3111ca13e6b26a9922b84f5facb1ddeea0c645073ee48339d62926887d4c8001c79bf7a815909092cbddc53e2c328dea0ab69b1ae57a268be44d13bc3c8ffb60036b09bab42d86464f329f28be9caf4415867966bbaa6afef0a440c8027869ecf010532aa072814293649b5cb376ce67a1e31fbe2f2525374597efabe6080e6dc0bee5b0584a86fc0bf5cdf7da5502892a5545d5dcaff77851f31cd02a45ed765cab3772d2b67d664b08aa321e8cfbdce5cab54f9fbf4863aa5201d3c79bd6a1651757645dedee9fcea562e17eab64ffb65805fc1fcf070a38cdd0d9948f2f63ea8a369c12a1965b96f6c16c94661c87836f222f2a58b1f4c24e92dfab505b26381fae4b1ff7d23439e8634fa5d907698e40a440904fbf55e160d1acc8c19cc7186edde9dea21270675be409d8305564052515329e502d80be08952b2a43d32cda5689aac4bb0a9f77b10bdd8a2983879c554193c2618448d06c33937c99f7f02133d83115170ebc9842997dac239b0123a80d72650bbb5841a64a742b07fb744179fc0fdcdf533346e5cf53e7d88e51d1d049533a6050bbeec07745486000d7cbce67646208e5d778cc6411fbab08e78bdde85c43224d91010d51d2e4b476f2b1ac038e5f9404923bd3cdaa5c828c75712ca2749513c67899bb3a931b75929919080076700937993633d9db270a470243a7db3d838c12a9530aa9d9c4f2de3ebd9a32ae85be8152da4556dd6e6ebafd31dc5a07b275d37b8e538021eb8b413569bab07d7ba3696f0009d53ef2b3a27c714a934994d76df02d4887c4fab4ab642e900ff5425bbcfedf57f9b84b63d2cb32ce8af833048cab60149c3c5b1f68b498666927462dfba70020cce044598798b7673b17159851e5e5bfca16ca2c25629c1b512303f59d863507e476a6b9f1052adc94e28a036a378059a20be3e23992bdda8afe80c1a79fed8ee835e2f7a4155d4535230ecd06d67cb99567896598f8f7df0788cfc465e1f59c6a0449b21c17d5d06b32b384cb49292a7fb4b36af04d3356dcfabe1c10d26d67b214e81dfebdee5fdedd266882888d520404201580a4ae7b19adf300f35db2fd3dc865c0cec30872e9d26dcd222ba5db191e79440f20158841b7f5a014a121f034ffcc508af78e6eb7d04d82ada23cd1e26ace21168d06a7e6a6ea2a3203e6eeb41c2a163c2ed351bf3a4df34f7e4c7237a409a68a0aeae01aa9ef0538c694c46342166388f6f43da6f9770682dc07d1cd94a1e0209f06955019ba2809b941c9c8a34720912a88b24ef07330755c8fcb320eba7ae5cc5cb487589d95a2e2e98c362c346669d5e7fe6e4c5f0409770c212164ced9e8c54836764a3b1c899f181636418a2467bca105516c948a1da6874010950b44275d91d2e0471107b7112ff87e678d41bcc11d7daa175a0ed7fe92e4acfb75e8f5ca8b56c341e50c3ffa54f264ffb029fd0c8197d75dd04192f46b03d0217ddbb27f700c004866715f5dff738675a105b9814cb7fdd7cabc18ae5d5c8350745ee9a4008ee528d9841ce4d616ac097415245a34e2e46a33fcd4860e90c8790e0854f9c8060044f9cf4629c4a34fa512c3a4bbe745e8cc1fc281c61914e54fcd", @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], 0x1, 0x35b, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) 0s ago: executing program 7 (id=1617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000a80)=[{&(0x7f0000000180)="52104030ee", 0x5}, {&(0x7f0000000940)="9c741888d5be602735d7a0b8deeb001ab3630d32964500ca29f1006335ac14d133baac762cfd8a92c96c680d0e6d9eb5cf3b55", 0x33}], 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) kernel console output (not intermixed with test programs): attempt to access beyond end of device [ 213.947213][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 214.006472][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 214.464718][ T970] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 214.471106][ T970] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 214.478901][ T970] cxacru: probe of 6-1:1.0 failed with error -22 [ 214.493158][ T970] usb 6-1: USB disconnect, device number 4 [ 215.786816][ T9264] loop5: detected capacity change from 0 to 40427 [ 215.795331][ T9264] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 215.804248][ T9264] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 215.825439][ T9264] F2FS-fs (loop5): invalid crc value [ 215.929908][ T5818] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 216.052693][ T9264] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 216.070195][ T9264] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 216.145475][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 216.159312][ T5818] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 216.170553][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.179007][ T5818] usb 3-1: Product: syz [ 216.185332][ T7727] syz-executor: attempt to access beyond end of device [ 216.185332][ T7727] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 216.201279][ T5818] usb 3-1: Manufacturer: syz [ 216.206205][ T5818] usb 3-1: SerialNumber: syz [ 216.216091][ T7727] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 216.230927][ T5818] usb 3-1: config 0 descriptor?? [ 216.243800][ T5818] usb 3-1: selecting invalid altsetting 1 [ 216.258083][ T5818] technisat-usb2: could not set alternate setting to 0 [ 216.338163][ T9297] loop3: detected capacity change from 0 to 512 [ 216.376064][ T9297] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.996: corrupted in-inode xattr: invalid ea_ino [ 216.457063][ T9297] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.996: couldn't read orphan inode 15 (err -117) [ 216.462240][ T5818] technisat-usb2: firmware version: 0.0 [ 216.490186][ T5818] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 216.534774][ T9297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.817924][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.867615][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.914814][ T5818] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 216.918201][ T9311] netlink: 'syz.5.1001': attribute type 25 has an invalid length. [ 216.939454][ T5818] usb 3-1: media controller created [ 216.942993][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 216.954719][ T5818] technisat-usb2: i2c-error: out failed 53 = -22 [ 216.965181][ T9313] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 216.965521][ T9311] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.976612][ T5818] dvb-usb: MAC address reading failed. [ 216.983552][ T9311] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.997992][ T9311] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.006978][ T9311] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.028685][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.066529][ T9283] technisat-usb2: i2c-error: out failed 00 = -22 [ 217.075904][ T9311] netlink: 'syz.5.1001': attribute type 25 has an invalid length. [ 217.109599][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 217.118712][ T5818] DVB: Unable to find symbol stv090x_attach() [ 217.125317][ T970] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 217.134907][ T5818] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 217.220264][ T5818] rc_core: IR keymap rc-technisat-usb2 not found [ 217.234298][ T5818] Registered IR keymap rc-empty [ 217.245019][ T5818] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 217.262882][ T5818] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 217.275918][ T9320] loop5: detected capacity change from 0 to 512 [ 217.292604][ T5818] dvb-usb: schedule remote query interval to 100 msecs. [ 217.301277][ T5818] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 217.321554][ T5818] usb 3-1: USB disconnect, device number 10 [ 217.327679][ T9320] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 217.338735][ T970] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.349063][ T970] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.357930][ T9320] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1003: corrupted in-inode xattr: e_value size too large [ 217.362760][ T970] usb 7-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 217.390276][ T970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.417933][ T9320] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1003: couldn't read orphan inode 15 (err -117) [ 217.437381][ T9320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.641577][ T5818] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 217.845150][ T970] rtsx_usb: probe of 7-1:1.0 failed with error -71 [ 217.875258][ T970] usb 7-1: USB disconnect, device number 2 [ 217.898586][ T7727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.219607][ T9338] loop3: detected capacity change from 0 to 128 [ 218.252078][ T9338] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.265868][ T9338] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.529753][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.783253][ T9352] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 219.319792][ C1] sched: RT throttling activated [ 219.435015][ T9343] loop5: detected capacity change from 0 to 131072 [ 219.443878][ T9343] F2FS-fs (loop5): invalid crc value [ 219.501149][ T9343] F2FS-fs (loop5): Found nat_bits in checkpoint [ 219.569914][ T9343] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 219.839930][ T5758] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 221.070737][ T9382] loop2: detected capacity change from 0 to 131072 [ 221.081326][ T9382] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 221.089186][ T9382] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 221.097525][ T9382] F2FS-fs (loop2): Test dummy encryption mode enabled [ 221.123890][ T5758] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.133813][ T9382] F2FS-fs (loop2): invalid crc value [ 221.151891][ T5758] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.173505][ T9382] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.218780][ T9382] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 221.240734][ T9382] F2FS-fs (loop2): Start checkpoint disabled! [ 221.259872][ T5758] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.268959][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.292492][ T9382] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 221.299585][ T9382] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 221.360629][ T9393] loop6: detected capacity change from 0 to 4096 [ 221.455543][ T9393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.522894][ T5758] usb 4-1: usb_control_msg returned -32 [ 221.528551][ T5758] usbtmc 4-1:16.0: can't read capabilities [ 221.575401][ T9393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.853870][ T997] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 221.874114][ T8774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.107259][ T9412] loop6: detected capacity change from 0 to 512 [ 222.209752][ T9412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.270867][ T9412] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.437966][ T8774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.840047][ T970] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 222.972494][ T5837] usb 4-1: USB disconnect, device number 16 [ 223.030042][ T970] usb 7-1: Using ep0 maxpacket: 16 [ 223.050627][ T970] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 223.059713][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.079189][ T970] usb 7-1: Product: syz [ 223.083937][ T970] usb 7-1: Manufacturer: syz [ 223.089168][ T970] usb 7-1: SerialNumber: syz [ 223.098110][ T970] usb 7-1: config 0 descriptor?? [ 223.111477][ T970] usb 7-1: selecting invalid altsetting 1 [ 223.117245][ T970] technisat-usb2: could not set alternate setting to 0 [ 223.260398][ T788] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 223.332030][ T970] technisat-usb2: firmware version: 0.0 [ 223.339921][ T970] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 223.468505][ T788] usb 6-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 223.499624][ T788] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.520168][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 223.528210][ T788] usb 6-1: SerialNumber: syz [ 223.555694][ T788] cdc_ether 6-1:26.0: skipping garbage [ 223.563182][ T788] usb 6-1: bad CDC descriptors [ 223.652112][ T9460] loop2: detected capacity change from 0 to 1024 [ 223.737844][ T970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.758665][ T970] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 223.769220][ T970] usb 7-1: media controller created [ 223.775225][ T970] technisat-usb2: i2c-error: out failed 53 = -22 [ 223.782569][ T970] dvb-usb: MAC address reading failed. [ 223.816071][ T5837] usb 6-1: USB disconnect, device number 5 [ 223.843260][ T970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.936124][ T9423] technisat-usb2: i2c RX buffer can't exceed 62 bytes (dev 0x00) [ 223.964243][ T9423] technisat-usb2: i2c-error: out failed 00 = -22 [ 223.999471][ T970] DVB: Unable to find symbol stv090x_attach() [ 224.012397][ T970] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 224.120823][ T970] rc_core: IR keymap rc-technisat-usb2 not found [ 224.141720][ T970] Registered IR keymap rc-empty [ 224.152020][ T970] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 224.182283][ T970] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input10 [ 224.217333][ T970] dvb-usb: schedule remote query interval to 100 msecs. [ 224.241765][ T970] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 224.274606][ T970] usb 7-1: USB disconnect, device number 3 [ 224.923769][ T970] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 225.383774][ T9515] loop2: detected capacity change from 0 to 512 [ 225.471431][ T9515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.522934][ T9515] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.693831][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.515135][ T9558] loop5: detected capacity change from 0 to 512 [ 226.527233][ T9538] loop2: detected capacity change from 0 to 32768 [ 226.594561][ T9538] JBD2: Ignoring recovery information on journal [ 226.610173][ T9558] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.1071: corrupted inode contents [ 226.763157][ T9558] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 226.790231][ T5758] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 226.811686][ T9538] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 226.826293][ T9558] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.1071: corrupted inode contents [ 226.866405][ T9558] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.1071: mark_inode_dirty error [ 226.893473][ T9558] EXT4-fs (loop5): 1 orphan inode deleted [ 226.918354][ T9558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.021967][ T5758] usb 4-1: Using ep0 maxpacket: 8 [ 227.035797][ T28] audit: type=1804 audit(1791451663.198:275): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1066" name="/newroot/297/file1/file1" dev="loop2" ino=17059 res=1 errno=0 [ 227.089135][ T5758] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 227.114521][ T5758] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.138030][ T5758] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.160831][ T5758] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.173622][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 227.190070][ T5758] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.247595][ T5758] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.274593][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.493103][ T7727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.539908][ T5758] usb 4-1: usb_control_msg returned -32 [ 227.545554][ T5758] usbtmc 4-1:16.0: can't read capabilities [ 228.341467][ T9605] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 228.545682][ T5758] usb 4-1: USB disconnect, device number 17 [ 228.925592][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 229.180579][ T9632] netlink: 1308 bytes leftover after parsing attributes in process `syz.5.1082'. [ 230.385128][ T9682] loop5: detected capacity change from 0 to 2048 [ 230.404636][ T9682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.485957][ T9682] EXT4-fs error (device loop5): __ext4_iget:5091: inode #2: block 127754: comm syz.5.1105: invalid block [ 230.498146][ T9682] EXT4-fs (loop5): get root inode failed [ 230.504211][ T9682] EXT4-fs (loop5): mount failed [ 230.703698][ T9682] Need at least one configuration in g1. [ 230.721636][ T9682] udc usbip-vudc.0: failed to start g1: -22 [ 230.727643][ T9682] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 230.801627][ T9682] UDC core: g1: couldn't find an available UDC or it's busy [ 231.095724][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.141291][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1103'. [ 231.266780][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.417994][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.436902][ T9697] loop3: detected capacity change from 0 to 40427 [ 231.475086][ T9697] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 231.500832][ T9697] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 231.520764][ T9697] F2FS-fs (loop3): Image doesn't support compression [ 231.528259][ T9697] F2FS-fs (loop3): Image doesn't support compression [ 231.566276][ T9697] F2FS-fs (loop3): invalid crc value [ 231.594890][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.793196][ T12] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.858707][ T12] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.878215][ T9697] F2FS-fs (loop3): Start checkpoint disabled! [ 231.938476][ T12] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.972078][ T9697] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 231.986699][ T12] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.002784][ T9697] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 232.057737][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.074188][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.084420][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.100595][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.110451][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.131655][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.205138][ T9697] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=f, ino,nid: [11, 15] run fsck to fix. [ 232.328628][ T11] kworker/u4:0: attempt to access beyond end of device [ 232.328628][ T11] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 232.362776][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 232.689047][ T9714] chnl_net:caif_netlink_parms(): no params data found [ 233.173770][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.181306][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.197839][ T9714] bridge_slave_0: entered allmulticast mode [ 233.211299][ T9714] bridge_slave_0: entered promiscuous mode [ 233.287349][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.298631][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.308875][ T9714] bridge_slave_1: entered allmulticast mode [ 233.326720][ T9714] bridge_slave_1: entered promiscuous mode [ 233.398085][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.422733][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.535321][ T9714] team0: Port device team_slave_0 added [ 233.547677][ T9714] team0: Port device team_slave_1 added [ 233.705130][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.720215][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.779941][ T9714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.810097][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.817098][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.880415][ T9714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.926971][ T12] hsr_slave_0: left promiscuous mode [ 233.980255][ T12] hsr_slave_1: left promiscuous mode [ 234.011245][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.018726][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.043186][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.062658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.082859][ T12] bridge_slave_1: left allmulticast mode [ 234.088896][ T12] bridge_slave_1: left promiscuous mode [ 234.116284][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 234.120390][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.198328][ T12] bridge_slave_0: left allmulticast mode [ 234.204179][ T51] Bluetooth: hci1: command tx timeout [ 234.238105][ T12] bridge_slave_0: left promiscuous mode [ 234.255036][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.377188][ T12] veth1_macvtap: left promiscuous mode [ 234.385935][ T12] veth0_macvtap: left promiscuous mode [ 234.394543][ T12] veth1_vlan: left promiscuous mode [ 234.403390][ T12] veth0_vlan: left promiscuous mode [ 234.787687][ T9762] loop3: detected capacity change from 0 to 512 [ 235.013096][ T9762] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 235.043232][ T9762] FAT-fs (loop3): Filesystem has been set read-only [ 235.165686][ T9762] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 235.188930][ T9762] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 235.755917][ T9773] ip_tables: iptables: counters copy to user failed while replacing table [ 235.836541][ T12] team0 (unregistering): Port device team_slave_1 removed [ 235.955378][ T12] team0 (unregistering): Port device team_slave_0 removed [ 236.052794][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.121262][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 236.188484][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.231880][ T9789] loop2: detected capacity change from 0 to 128 [ 236.281058][ T9789] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.293436][ T5776] Bluetooth: hci1: command tx timeout [ 236.302547][ T9789] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.492100][ T9789] loop2: detected capacity change from 128 to 64 [ 236.521427][ T9792] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Out of memory [ 236.563306][ T9792] EXT4-fs error (device loop2): ext4_ext_tree_init:891: inode #13: comm syz.2.1123: mark_inode_dirty error [ 236.599754][ T9792] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Out of memory [ 236.623735][ T9792] EXT4-fs error (device loop2): __ext4_new_inode:1358: inode #13: comm syz.2.1123: mark_inode_dirty error [ 236.647475][ T9792] EXT4-fs error (device loop2) in __ext4_new_inode:1360: Out of memory [ 236.656389][ T9792] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Out of memory [ 236.677018][ T9792] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #13: comm syz.2.1123: mark_inode_dirty error [ 236.699897][ T9792] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 236.808142][ T12] bond0 (unregistering): Released all slaves [ 236.817077][ T5774] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Out of memory [ 236.838682][ T5774] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #2: comm syz-executor: mark_inode_dirty error [ 236.893806][ T8835] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.147402][ T9714] hsr_slave_0: entered promiscuous mode [ 237.164491][ T9714] hsr_slave_1: entered promiscuous mode [ 237.415843][ T9714] netdevsim netdevsim6 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.525422][ T9714] netdevsim netdevsim6 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.659180][ T9714] netdevsim netdevsim6 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.759670][ T9714] netdevsim netdevsim6 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.997448][ T9714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 238.008676][ T9714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.023754][ T9714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.042647][ T9714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.158089][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.192280][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.213512][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.220704][ T7391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.256965][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.264172][ T7391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.359892][ T5776] Bluetooth: hci1: command tx timeout [ 238.593250][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.947899][ T9714] veth0_vlan: entered promiscuous mode [ 238.969159][ T9714] veth1_vlan: entered promiscuous mode [ 239.017722][ T9714] veth0_macvtap: entered promiscuous mode [ 239.035343][ T9714] veth1_macvtap: entered promiscuous mode [ 239.066792][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.086671][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.106141][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.116815][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.132733][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.157019][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.170995][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.181721][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.192627][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.206935][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.217807][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.234200][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.255414][ T9714] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.265653][ T9714] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.276717][ T9714] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.285760][ T9714] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.409507][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.429194][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.463992][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.474327][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.102011][ T9890] loop6: detected capacity change from 0 to 2048 [ 240.120142][ T5819] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 240.136302][ T9890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.150740][ T9890] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.217546][ T9890] fs-verity: sha512 using implementation "sha512-avx2" [ 240.306034][ T9714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.330547][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.339724][ T5819] usb 4-1: config 4 has an invalid interface number: 13 but max is 0 [ 240.348379][ T5819] usb 4-1: config 4 has no interface number 0 [ 240.355035][ T5819] usb 4-1: config 4 interface 13 altsetting 215 endpoint 0xF has an invalid bInterval 109, changing to 7 [ 240.378789][ T5819] usb 4-1: config 4 interface 13 altsetting 215 endpoint 0x9 has invalid wMaxPacketSize 0 [ 240.392121][ T5819] usb 4-1: config 4 interface 13 altsetting 215 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 240.407866][ T5819] usb 4-1: config 4 interface 13 altsetting 215 has a duplicate endpoint with address 0x9, skipping [ 240.423683][ T5819] usb 4-1: config 4 interface 13 altsetting 215 has a duplicate endpoint with address 0x8, skipping [ 240.439578][ T5819] usb 4-1: config 4 interface 13 has no altsetting 0 [ 240.440221][ T5776] Bluetooth: hci1: command tx timeout [ 240.459656][ T5819] usb 4-1: New USB device found, idVendor=0baf, idProduct=0118, bcdDevice=10.0e [ 240.496454][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.517434][ T5819] usb 4-1: Product: syz [ 240.522468][ T5819] usb 4-1: Manufacturer: syz [ 240.527094][ T5819] usb 4-1: SerialNumber: syz [ 240.553908][ T9899] input: syz0 as /devices/virtual/input/input11 [ 240.763012][ T9910] loop5: detected capacity change from 0 to 128 [ 240.788281][ T5819] usbhid 4-1:4.13: couldn't find an input interrupt endpoint [ 240.805205][ T5819] usb 4-1: USB disconnect, device number 18 [ 241.201574][ T28] audit: type=1326 audit(1791451677.368:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.6.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fc0b9e199 code=0x0 [ 241.452890][ T9928] ªªªªª»: renamed from vlan0 (while UP) [ 241.676952][ T12] bridge0: port 3(team0) entered disabled state [ 242.155472][ T9957] loop6: detected capacity change from 0 to 128 [ 242.196835][ T9948] loop3: detected capacity change from 0 to 32768 [ 242.205769][ T9957] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.225864][ T9957] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 242.296454][ T9948] JBD2: Ignoring recovery information on journal [ 242.353208][ T9948] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 242.531564][ T28] audit: type=1804 audit(1791451678.698:277): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1152" name="/newroot/305/file1/file1" dev="loop3" ino=17059 res=1 errno=0 [ 242.544083][ T9714] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.716857][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 242.778046][ T9972] loop5: detected capacity change from 0 to 128 [ 242.824982][ T9972] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.886244][ T9972] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 242.965958][ T7727] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.340019][ T5758] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 243.510021][ T23] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 243.553836][ T5758] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 243.564574][ T5758] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 243.577012][ T5758] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.589606][ T5758] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 243.598947][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 243.607073][ T5758] usb 6-1: Product: syz [ 243.611501][ T5758] usb 6-1: Manufacturer: syz [ 243.694503][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 243.703502][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 272, setting to 64 [ 243.714422][ T23] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 243.724106][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.735383][ T9988] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.744460][ T23] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 243.758419][ T23] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 243.826295][ T9981] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 243.834526][ T9981] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 243.848443][ T5758] dvb_ttusb_budget: ttusb_init_controller: error [ 243.855312][ T5758] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 243.904561][ T5758] DVB: Unable to find symbol cx22700_attach() [ 243.950725][ T5758] DVB: Unable to find symbol tda10046_attach() [ 243.956945][ T5758] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 243.963568][ T23] usb 4-1: USB disconnect, device number 19 [ 243.985131][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 244.004168][ T23] cyberjack 4-1:1.0: device disconnected [ 244.082011][ T9981] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 244.099932][ T5837] usb 6-1: USB disconnect, device number 6 [ 244.407315][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f371400: rx timeout, send abort [ 244.907693][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cc31c00: rx timeout, send abort [ 244.916276][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f371400: abort rx timeout. Force session deactivation [ 245.060445][ T9996] loop5: detected capacity change from 0 to 32768 [ 245.121928][ T9996] JBD2: Ignoring recovery information on journal [ 245.228770][ T9996] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 245.386123][ T28] audit: type=1804 audit(1791451681.548:278): pid=9996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1169" name="/newroot/143/file1/file1" dev="loop5" ino=17059 res=1 errno=0 [ 245.416118][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cc31c00: abort rx timeout. Force session deactivation [ 245.537309][ T7727] ocfs2: Unmounting device (7,5) on (node local) [ 245.699714][T10019] loop6: detected capacity change from 0 to 2048 [ 245.753255][ T5778] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.865589][T10023] loop5: detected capacity change from 0 to 2048 [ 245.917707][T10027] netlink: 'syz.6.1182': attribute type 7 has an invalid length. [ 245.927761][T10023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.941307][T10027] netlink: 'syz.6.1182': attribute type 7 has an invalid length. [ 245.949301][T10023] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.046296][ T7727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.284697][T10041] loop5: detected capacity change from 0 to 4096 [ 246.294194][T10041] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.303628][T10041] EXT4-fs: Ignoring removed orlov option [ 246.315476][T10041] EXT4-fs (loop5): Test dummy encryption mode enabled [ 246.336622][T10041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.508632][ T7727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.777557][ T28] audit: type=1326 audit(1791451682.938:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10059 comm="syz.5.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda7439e199 code=0x0 [ 247.808522][T10081] loop5: detected capacity change from 0 to 4096 [ 247.853812][T10083] loop3: detected capacity change from 0 to 2048 [ 247.906080][T10084] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.916995][ T5758] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 247.928093][T10083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.026347][ T28] audit: type=1800 audit(1791451684.188:280): pid=10081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1203" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 248.122715][ T5758] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.141097][ T28] audit: type=1800 audit(1791451684.288:281): pid=10088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1203" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 248.141706][ T5758] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 248.161612][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.191594][ T5758] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.211013][ T5758] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 248.229847][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.238107][ T5758] usb 7-1: Product: syz [ 248.248184][ T5758] usb 7-1: Manufacturer: syz [ 248.253008][ T5758] usb 7-1: SerialNumber: syz [ 248.727978][T10075] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 248.824581][T10094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1209'. [ 248.885679][T10096] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1211'. [ 248.954557][T10098] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1212'. [ 249.144374][ T5758] ATM dev 0: failed to start ADSL synchronisation: -71 [ 249.151837][ C0] ATM dev 0: usbatm_complete: urb 0xffff888026b92400 failed (-71)! [ 249.160257][ C0] ATM dev 0: usbatm_complete: urb 0xffff888026b92300 failed (-71)! [ 249.168208][ C0] ATM dev 0: usbatm_complete: urb 0xffff88814bfc0f00 failed (-71)! [ 249.176148][ C0] ATM dev 0: usbatm_complete: urb 0xffff88814bfc0800 failed (-71)! [ 249.184081][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.196880][ T5758] usb 7-1: USB disconnect, device number 4 [ 250.040065][ T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 250.219930][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 250.226912][ T23] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.235386][ T23] usb 7-1: config 179 has no interface number 0 [ 250.241867][ T23] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 250.252992][ T23] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 250.264232][ T23] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 250.275382][ T23] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 250.286804][ T23] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 250.300146][ T23] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 250.309198][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.321199][T10106] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 250.557906][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input12 [ 250.757295][ T23] usb 7-1: USB disconnect, device number 5 [ 250.757354][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 250.771523][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 250.782720][ T23] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 251.080125][ T5776] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 251.147895][T10108] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1217'. [ 252.298864][T10145] netlink: 'syz.5.1234': attribute type 7 has an invalid length. [ 252.311812][T10145] netlink: 'syz.5.1234': attribute type 7 has an invalid length. [ 252.329625][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.338941][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.352173][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.363881][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.375594][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 252.384953][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.513065][T10151] Bluetooth: MGMT ver 1.22 [ 252.652722][T10146] chnl_net:caif_netlink_parms(): no params data found [ 252.817977][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.825768][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.833263][T10146] bridge_slave_0: entered allmulticast mode [ 252.840885][T10146] bridge_slave_0: entered promiscuous mode [ 252.850022][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.857231][T10146] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.865198][T10146] bridge_slave_1: entered allmulticast mode [ 252.873309][T10146] bridge_slave_1: entered promiscuous mode [ 252.907243][T10146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.919705][T10146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.958967][T10146] team0: Port device team_slave_0 added [ 252.969144][T10146] team0: Port device team_slave_1 added [ 253.000007][T10146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.007004][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.033097][T10146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.045973][T10146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.053252][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.079444][T10146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.135844][T10146] hsr_slave_0: entered promiscuous mode [ 253.142780][T10146] hsr_slave_1: entered promiscuous mode [ 253.149112][T10146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.158944][T10146] Cannot create hsr debugfs directory [ 253.428864][T10146] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 253.450281][T10146] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 253.459440][T10146] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 253.472340][T10146] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 253.498189][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.505332][T10146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.514082][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.521214][T10146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.563603][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.574827][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.606322][T10146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.627499][T10146] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.639491][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.646670][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.669460][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.676599][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.856061][T10146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.051235][T10146] veth0_vlan: entered promiscuous mode [ 254.065101][T10146] veth1_vlan: entered promiscuous mode [ 254.094979][T10146] veth0_macvtap: entered promiscuous mode [ 254.108371][T10146] veth1_macvtap: entered promiscuous mode [ 254.125290][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.136771][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.146715][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.157183][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.167496][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.178169][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.189461][T10146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.204176][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.217801][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.227673][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.238134][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.247998][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.258474][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.268322][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.278763][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.290014][T10146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.302640][T10146] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.311758][T10146] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.321181][T10146] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.330175][T10146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.408401][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.417475][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.451813][ T5776] Bluetooth: hci2: command tx timeout [ 254.458381][ T7391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.467131][ T7391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.716977][T10190] netlink: 'syz.7.1242': attribute type 7 has an invalid length. [ 254.726185][T10190] netlink: 'syz.7.1242': attribute type 7 has an invalid length. [ 255.125549][T10200] loop7: detected capacity change from 0 to 8192 [ 255.184971][T10200] loop7: p1 p2 p3 p4 [ 255.189033][T10200] loop7: partition table partially beyond EOD, truncated [ 255.203310][T10200] loop7: p3 start 117772289 is beyond EOD, truncated [ 255.213094][T10200] loop7: p4 size 720896 extends beyond EOD, truncated [ 255.239458][T10200] device-mapper: ioctl: device name cannot contain '/' [ 255.249557][T10200] device-mapper: ioctl: Invalid ioctl structure: name >ª W•tÉ¥ìÿŸ¿%Uó./dev, dev 178f517437743bef [ 255.378645][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 255.388751][ T7732] udevd[7732]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 255.399454][ T6301] udevd[6301]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 255.803791][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.810281][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.333941][T10211] loop5: detected capacity change from 0 to 32768 [ 256.394592][T10211] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.511292][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 256.520844][ T5776] Bluetooth: hci2: command tx timeout [ 256.556589][T10211] XFS (loop5): Ending clean mount [ 256.609948][T10211] XFS (loop5): Quotacheck needed: Please wait. [ 256.639651][T10244] netlink: 'syz.7.1264': attribute type 4 has an invalid length. [ 256.698108][T10211] XFS (loop5): Quotacheck: Done. [ 256.720006][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 256.727291][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.745729][ T7727] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.748943][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.811479][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.838409][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.875030][ T9] usb 7-1: config 0 descriptor?? [ 256.905141][ T9] hub 7-1:0.0: USB hub found [ 257.106193][ T9] hub 7-1:0.0: 1 port detected [ 257.715885][ T9] hub 7-1:0.0: activate --> -90 [ 258.018546][T10257] loop7: detected capacity change from 0 to 128 [ 258.033698][T10257] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 258.120151][ T5758] usb 7-1: USB disconnect, device number 6 [ 258.361650][ T9] usb 7-1-port1: config error [ 258.553489][T10260] loop5: detected capacity change from 0 to 32768 [ 258.567512][T10260] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1272 (10260) [ 258.600096][ T5776] Bluetooth: hci2: command tx timeout [ 258.608221][T10260] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.623197][T10260] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 258.643294][T10260] BTRFS info (device loop5): setting nodatacow, compression disabled [ 258.660204][T10260] BTRFS info (device loop5): using free space tree [ 258.823195][T10260] BTRFS info (device loop5): auto enabling async discard [ 258.930610][ T28] audit: type=1800 audit(1791451695.098:282): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1271" name="file1" dev="loop7" ino=94 res=0 errno=0 [ 259.038383][ T7727] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 259.650592][ T5816] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 259.850479][ T5816] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.874565][ T5816] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 259.888234][ T5816] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.905363][ T5816] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 259.914784][T10309] FAULT_INJECTION: forcing a failure. [ 259.914784][T10309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.914871][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.936122][T10309] CPU: 1 PID: 10309 Comm: syz.6.1284 Not tainted syzkaller #0 [ 259.943578][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.953642][T10309] Call Trace: [ 259.956944][T10309] [ 259.959894][T10309] dump_stack_lvl+0x18c/0x250 [ 259.964605][T10309] ? show_regs_print_info+0x20/0x20 [ 259.969811][T10309] ? load_image+0x420/0x420 [ 259.974343][T10309] ? __might_fault+0xaa/0x120 [ 259.979053][T10309] ? __lock_acquire+0x7eb0/0x7eb0 [ 259.984075][T10309] should_fail_ex+0x394/0x4c0 [ 259.988751][T10309] _copy_from_user+0x2f/0xe0 [ 259.993358][T10309] core_sys_select+0x5ce/0xa80 [ 259.998150][T10309] ? poll_select_set_timeout+0x150/0x150 [ 260.003797][T10309] ? sigprocmask+0x190/0x190 [ 260.008381][T10309] ? __sys_getsockname+0x19e/0x2d0 [ 260.013520][T10309] __se_sys_pselect6+0x272/0x340 [ 260.018513][T10309] ? __x64_sys_pselect6+0xf0/0xf0 [ 260.023563][T10309] ? __x64_sys_pselect6+0x21/0xf0 [ 260.028584][T10309] do_syscall_64+0x55/0xb0 [ 260.033005][T10309] ? clear_bhb_loop+0x40/0x90 [ 260.037703][T10309] ? clear_bhb_loop+0x40/0x90 [ 260.042380][T10309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.048282][T10309] RIP: 0033:0x7f0fc0b9e199 [ 260.052704][T10309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.072322][T10309] RSP: 002b:00007f0fc1af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 260.080744][T10309] RAX: ffffffffffffffda RBX: 00007f0fc0e25fa0 RCX: 00007f0fc0b9e199 [ 260.088720][T10309] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.096696][T10309] RBP: 00007f0fc0c35888 R08: 0000200000000280 R09: 0000200000000300 [ 260.104667][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.112661][T10309] R13: 00007f0fc0e26038 R14: 00007f0fc0e25fa0 R15: 00007fff79176938 [ 260.120648][T10309] [ 260.124934][ T5816] usb 8-1: Product: syz [ 260.129130][ T5816] usb 8-1: Manufacturer: syz [ 260.137192][ T5816] usb 8-1: SerialNumber: syz [ 260.285773][T10313] loop6: detected capacity change from 0 to 4096 [ 260.345654][T10314] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.408421][ T28] audit: type=1800 audit(1791451696.568:283): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1286" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 260.492816][ T28] audit: type=1800 audit(1791451696.658:284): pid=10315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1286" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 260.587164][T10291] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 260.680523][ T5776] Bluetooth: hci2: command tx timeout [ 261.023353][ T5816] ATM dev 0: failed to start ADSL synchronisation: -71 [ 261.043914][ C1] ATM dev 0: usbatm_complete: urb 0xffff888030d9ac00 failed (-71)! [ 261.051928][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880245ab000 failed (-71)! [ 261.059908][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807af4d700 failed (-71)! [ 261.067888][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807af4df00 failed (-71)! [ 261.091026][ T5816] usb 8-1: USB disconnect, device number 2 [ 261.806950][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1295'. [ 261.886841][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.915411][T10342] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1297'. [ 262.299958][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 262.419981][ T5819] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 262.492237][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.503900][ T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 262.515338][ T8] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.533144][ T8] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 262.542687][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.550837][ T8] usb 6-1: Product: syz [ 262.555019][ T8] usb 6-1: Manufacturer: syz [ 262.559615][ T8] usb 6-1: SerialNumber: syz [ 262.603131][ T5819] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 262.612701][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.831509][ T5819] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 262.982597][T10348] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 263.103109][ T5819] usb 7-1: USB disconnect, device number 7 [ 263.396928][ T8] ATM dev 0: failed to start ADSL synchronisation: -71 [ 263.404287][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802ccdf900 failed (-71)! [ 263.412285][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802ebaf100 failed (-71)! [ 263.420228][ C0] ATM dev 0: usbatm_complete: urb 0xffff88805e212d00 failed (-71)! [ 263.440897][ T8] usb 6-1: USB disconnect, device number 7 [ 263.827213][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.837831][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.851993][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.860906][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.868962][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.879105][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.020976][T10368] input: syz1 as /devices/virtual/input/input13 [ 264.331543][T10363] chnl_net:caif_netlink_parms(): no params data found [ 264.456831][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.465101][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.472443][T10363] bridge_slave_0: entered allmulticast mode [ 264.479880][T10363] bridge_slave_0: entered promiscuous mode [ 264.488556][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.496114][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.503372][T10363] bridge_slave_1: entered allmulticast mode [ 264.510816][T10363] bridge_slave_1: entered promiscuous mode [ 264.551560][T10363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.568372][T10363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.642076][T10363] team0: Port device team_slave_0 added [ 264.654355][T10363] team0: Port device team_slave_1 added [ 264.728774][T10363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.750001][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.801448][T10363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.815522][T10363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.824977][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.854263][T10363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.911564][T10363] hsr_slave_0: entered promiscuous mode [ 264.918783][T10363] hsr_slave_1: entered promiscuous mode [ 264.928080][T10363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.936564][T10363] Cannot create hsr debugfs directory [ 265.089740][T10363] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 265.098915][T10363] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 265.108218][T10363] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 265.117795][T10363] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 265.141729][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.148831][T10363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.156284][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.163537][T10363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.182633][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.198517][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.255026][T10363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.275708][T10363] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.288880][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.296191][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.311259][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.318391][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.508858][T10363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.709572][T10363] veth0_vlan: entered promiscuous mode [ 265.727571][T10363] veth1_vlan: entered promiscuous mode [ 265.756872][T10363] veth0_macvtap: entered promiscuous mode [ 265.766904][T10363] veth1_macvtap: entered promiscuous mode [ 265.785763][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.796893][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.807518][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.818235][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.828122][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.838711][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.848676][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.859242][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.871674][T10363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.893396][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.904018][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.914059][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.924584][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.934600][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.945733][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.955857][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.960225][ T51] Bluetooth: hci3: command tx timeout [ 265.975044][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.988241][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.002011][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.015180][T10363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.030499][T10363] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.039213][T10363] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.048598][T10363] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.069499][T10363] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.219228][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.239975][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.265819][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.275872][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.472286][T10418] loop8: detected capacity change from 0 to 1024 [ 266.499199][T10418] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 266.595837][T10418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.011940][T10363] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.330925][T10419] loop7: detected capacity change from 0 to 32768 [ 267.388720][T10419] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1330 (10419) [ 267.446594][T10419] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 267.480074][ T5818] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 267.485614][T10419] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 267.518088][T10419] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 267.538514][T10419] BTRFS info (device loop7): use zstd compression, level 3 [ 267.549875][T10419] BTRFS info (device loop7): using free space tree [ 267.674261][ T5818] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.708615][T10419] BTRFS info (device loop7): enabling ssd optimizations [ 267.716770][ T5818] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 267.748163][T10419] BTRFS info (device loop7): auto enabling async discard [ 267.755922][ T5818] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.792717][ T5818] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 267.822486][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.832203][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 267.832216][ T28] audit: type=1800 audit(1791451703.988:285): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1330" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 267.880355][ T5818] usb 9-1: Product: syz [ 267.884615][ T5818] usb 9-1: Manufacturer: syz [ 267.889231][ T5818] usb 9-1: SerialNumber: syz [ 268.040437][ T51] Bluetooth: hci3: command tx timeout [ 268.252741][T10146] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 268.374616][T10429] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 268.806642][ T5818] ATM dev 0: failed to start ADSL synchronisation: -71 [ 268.825215][ C1] ATM dev 0: usbatm_complete: urb 0xffff888030cd1800 failed (-71)! [ 268.833252][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805e091600 failed (-71)! [ 268.841247][ C1] ATM dev 0: usbatm_complete: urb 0xffff888026352100 failed (-71)! [ 268.849231][ C1] ATM dev 0: usbatm_complete: urb 0xffff888030c91600 failed (-71)! [ 268.886105][ T5818] usb 9-1: USB disconnect, device number 2 [ 269.157082][T10475] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 269.402700][T10485] netlink: 'syz.5.1343': attribute type 12 has an invalid length. [ 269.416376][T10485] ip6gre1: entered promiscuous mode [ 269.422089][T10485] ip6gre1: entered allmulticast mode [ 269.699596][T10499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.765882][T10502] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.785516][ T5837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.794508][ T5837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.804366][ T5837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.812539][ T5837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.824566][ T5837] rtc rtc0: __rtc_set_alarm: err=-22 [ 269.939960][ T5816] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 270.120930][ T51] Bluetooth: hci3: command tx timeout [ 270.161979][ T5816] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 270.179820][ T5816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.758223][ T51] Bluetooth: hci1: Malformed LE Event: 0x1b [ 270.930342][ T5818] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 271.154594][ T5818] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 271.164557][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.224437][ T5816] usb 9-1: non-Atmel transceiver xxxx1f7f [ 271.424764][ T5818] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 271.438680][ T5816] usb 9-1: Firmware version (0.0) predates our first public release. [ 271.457335][ T5816] usb 9-1: Please update to version 0.2 or newer [ 271.466140][ T5816] usb 9-1: atusb_probe: initialization failed, error = -19 [ 271.486323][ T5816] usb 9-1: USB disconnect, device number 3 [ 271.586814][T10534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.688065][ T5818] usb 6-1: USB disconnect, device number 8 [ 272.200348][ T51] Bluetooth: hci3: command tx timeout [ 272.650751][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 272.711092][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 272.789925][ T5818] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 272.833134][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.844612][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.856216][ T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 272.865458][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.876364][ T9] usb 7-1: config 0 descriptor?? [ 272.900026][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 272.907872][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.929263][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.940401][ T8] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 272.951218][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.963456][ T8] usb 8-1: config 0 descriptor?? [ 272.980216][ T8] hub 8-1:0.0: USB hub found [ 272.981922][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.007104][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.019150][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.043668][ T5818] usb 6-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 273.063665][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.074455][ T5818] usb 6-1: config 0 descriptor?? [ 273.185335][ T8] hub 8-1:0.0: 1 port detected [ 273.303710][ T5818] usbhid 6-1:0.0: can't add hid device: -71 [ 273.316765][ T5818] usbhid: probe of 6-1:0.0 failed with error -71 [ 273.317468][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 273.341236][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 273.348463][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 273.349241][ T5818] usb 6-1: USB disconnect, device number 9 [ 273.357139][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 273.372791][T10573] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 273.386666][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 273.398465][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 273.424466][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 273.433899][ T9] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 273.541131][ T9] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 273.649114][T10579] loop8: detected capacity change from 0 to 256 [ 273.669624][ T28] audit: type=1804 audit(1791451709.828:286): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1383" name="/newroot/12/file0/bus" dev="loop8" ino=1048698 res=1 errno=0 [ 273.805028][ T8] hub 8-1:0.0: activate --> -90 [ 274.151737][ T9] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 274.188472][ T9] usb 7-1: USB disconnect, device number 8 [ 274.215077][ T8] usb 8-1-port1: config error [ 274.238144][ T8] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 274.274593][ T8] usb 8-1-port1: connect-debounce failed [ 274.287168][ T788] usb 8-1: USB disconnect, device number 3 [ 274.663404][ T28] audit: type=1807 audit(1791451710.828:287): action=measure func=FILE_CHECK res=1 [ 274.679935][ T28] audit: type=1807 audit(1791451710.848:288): UNKNOWN= res=0 [ 274.686091][T10591] ima: policy update failed [ 274.693869][ T28] audit: type=1802 audit(1791451710.848:289): pid=10591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1387" res=0 errno=0 [ 274.712437][ T28] audit: type=1802 audit(1791451710.858:290): pid=10591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1387" res=0 errno=0 [ 274.840156][ T788] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 274.861887][T10597] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 274.865761][T10595] pim6reg: entered allmulticast mode [ 274.896861][T10595] team0: entered allmulticast mode [ 274.908881][T10595] team_slave_0: entered allmulticast mode [ 274.916255][T10595] team_slave_1: entered allmulticast mode [ 274.927932][T10599] loop6: detected capacity change from 0 to 1024 [ 274.930501][T10595] pim6reg: left allmulticast mode [ 275.053831][ T788] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 275.069655][T10594] team0: left allmulticast mode [ 275.078620][ T788] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.097101][T10594] team_slave_0: left allmulticast mode [ 275.123182][T10594] team_slave_1: left allmulticast mode [ 275.139166][ T11] hfsplus: bad catalog file entry [ 275.179115][T10604] FAULT_INJECTION: forcing a failure. [ 275.179115][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 275.210278][T10604] CPU: 0 PID: 10604 Comm: syz.7.1395 Not tainted syzkaller #0 [ 275.217798][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 275.227852][T10604] Call Trace: [ 275.231126][T10604] [ 275.234055][T10604] dump_stack_lvl+0x18c/0x250 [ 275.238733][T10604] ? show_regs_print_info+0x20/0x20 [ 275.243931][T10604] ? load_image+0x420/0x420 [ 275.248439][T10604] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.253463][T10604] ? ida_alloc_range+0x7d0/0x860 [ 275.258404][T10604] should_fail_ex+0x394/0x4c0 [ 275.263093][T10604] should_failslab+0x9/0x20 [ 275.267599][T10604] slab_pre_alloc_hook+0x59/0x300 [ 275.272619][T10604] ? alloc_vfsmnt+0x9d/0x450 [ 275.277207][T10604] ? alloc_vfsmnt+0x9d/0x450 [ 275.281792][T10604] __kmem_cache_alloc_node+0x53/0x250 [ 275.287173][T10604] ? alloc_vfsmnt+0x9d/0x450 [ 275.291763][T10604] __kmalloc_node_track_caller+0xa4/0x230 [ 275.297488][T10604] kstrdup+0x3b/0x80 [ 275.301382][T10604] alloc_vfsmnt+0x9d/0x450 [ 275.305796][T10604] clone_mnt+0x65/0xc60 [ 275.309947][T10604] ? do_raw_spin_unlock+0x121/0x230 [ 275.315153][T10604] copy_tree+0x3d2/0x7e0 [ 275.319396][T10604] ? copy_mnt_ns+0x16a/0x8f0 [ 275.323984][T10604] copy_mnt_ns+0x16a/0x8f0 [ 275.328396][T10604] ? create_new_namespaces+0x34/0x700 [ 275.333768][T10604] create_new_namespaces+0xd3/0x700 [ 275.338966][T10604] ? bpf_lsm_capable+0x9/0x10 [ 275.343638][T10604] ? security_capable+0x89/0xb0 [ 275.348496][T10604] unshare_nsproxy_namespaces+0x11a/0x160 [ 275.354219][T10604] ksys_unshare+0x4fa/0x8f0 [ 275.358729][T10604] ? sighand_ctor+0x50/0x50 [ 275.363237][T10604] ? lock_chain_count+0x20/0x20 [ 275.368095][T10604] ? syscall_enter_from_user_mode+0x25/0x80 [ 275.373989][T10604] __x64_sys_unshare+0x38/0x40 [ 275.378777][T10604] do_syscall_64+0x55/0xb0 [ 275.383191][T10604] ? clear_bhb_loop+0x40/0x90 [ 275.387866][T10604] ? clear_bhb_loop+0x40/0x90 [ 275.392541][T10604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.398440][T10604] RIP: 0033:0x7f96e5f9e199 [ 275.402853][T10604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.422483][T10604] RSP: 002b:00007f96e6dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 275.430897][T10604] RAX: ffffffffffffffda RBX: 00007f96e6225fa0 RCX: 00007f96e5f9e199 [ 275.438865][T10604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 275.446827][T10604] RBP: 00007f96e6035888 R08: 0000000000000000 R09: 0000000000000000 [ 275.454793][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.462761][T10604] R13: 00007f96e6226038 R14: 00007f96e6225fa0 R15: 00007fff3d9cbe28 [ 275.470745][T10604] [ 275.503770][T10606] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.566685][ T788] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 275.707556][T10614] FAULT_INJECTION: forcing a failure. [ 275.707556][T10614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.721723][T10614] CPU: 0 PID: 10614 Comm: syz.7.1399 Not tainted syzkaller #0 [ 275.729223][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 275.739298][T10614] Call Trace: [ 275.742597][T10614] [ 275.745549][T10614] dump_stack_lvl+0x18c/0x250 [ 275.750254][T10614] ? show_regs_print_info+0x20/0x20 [ 275.755481][T10614] ? load_image+0x420/0x420 [ 275.760011][T10614] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.765062][T10614] ? __virt_addr_valid+0x10c/0x380 [ 275.770203][T10614] should_fail_ex+0x394/0x4c0 [ 275.774917][T10614] _copy_to_user+0x2f/0xa0 [ 275.779363][T10614] bpf_vlog_reverse_ubuf+0x2ad/0x3a0 [ 275.784686][T10614] bpf_vlog_finalize+0x174/0x3e0 [ 275.789663][T10614] btf_new_fd+0x4ca/0x9e0 [ 275.794041][T10614] ? bpf_btf_show_fdinfo+0x80/0x80 [ 275.799188][T10614] ? capable+0x88/0xe0 [ 275.803290][T10614] __sys_bpf+0x670/0x890 [ 275.807556][T10614] ? bpf_link_show_fdinfo+0x560/0x560 [ 275.812965][T10614] ? lock_chain_count+0x20/0x20 [ 275.817847][T10614] __x64_sys_bpf+0x7c/0x90 [ 275.822295][T10614] do_syscall_64+0x55/0xb0 [ 275.826737][T10614] ? clear_bhb_loop+0x40/0x90 [ 275.831441][T10614] ? clear_bhb_loop+0x40/0x90 [ 275.836143][T10614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.842065][T10614] RIP: 0033:0x7f96e5f9e199 [ 275.846497][T10614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.866122][T10614] RSP: 002b:00007f96e6dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.874547][T10614] RAX: ffffffffffffffda RBX: 00007f96e6225fa0 RCX: 00007f96e5f9e199 [ 275.882518][T10614] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 275.890485][T10614] RBP: 00007f96e6035888 R08: 0000000000000000 R09: 0000000000000000 [ 275.898453][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.906417][T10614] R13: 00007f96e6226038 R14: 00007f96e6225fa0 R15: 00007fff3d9cbe28 [ 275.914397][T10614] [ 275.948874][ T5818] usb 9-1: USB disconnect, device number 4 [ 276.205378][T10624] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 276.261900][T10627] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1405'. [ 276.299963][T10627] netlink: 'syz.6.1405': attribute type 7 has an invalid length. [ 276.307751][T10627] netlink: 'syz.6.1405': attribute type 8 has an invalid length. [ 276.325578][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1405'. [ 276.829276][ T28] audit: type=1800 audit(1791451712.988:291): pid=10652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1416" name="file0" dev="overlay" ino=113 res=0 errno=0 [ 276.857501][T10655] ip_tables: iptables: counters copy to user failed while replacing table [ 277.160095][T10668] loop8: detected capacity change from 0 to 164 [ 277.281116][ T23] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 277.300175][ T788] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 277.339158][T10668] loop8: detected capacity change from 0 to 256 [ 277.356741][T10668] exFAT-fs (loop8): bogus fat length [ 277.363912][T10668] exFAT-fs (loop8): failed to read boot sector [ 277.372369][T10668] exFAT-fs (loop8): failed to recognize exfat type [ 277.475063][ T23] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 277.489934][ T23] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 277.510048][ T23] usb 7-1: config 0 has no interface number 0 [ 277.518329][ T788] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.536229][ T788] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.541648][ T23] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 277.553105][ T788] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 277.561479][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.581262][ T788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 277.589430][ T23] usb 7-1: Product: syz [ 277.589574][ T788] usb 8-1: SerialNumber: syz [ 277.599893][ T23] usb 7-1: Manufacturer: syz [ 277.604520][ T23] usb 7-1: SerialNumber: syz [ 277.618890][ T23] usb 7-1: config 0 descriptor?? [ 277.827244][ T788] usb 8-1: 0:2 : does not exist [ 277.850324][ T788] usb 8-1: USB disconnect, device number 4 [ 277.935832][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.039192][ T23] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 278.059911][ T23] usb 7-1: No valid video chain found. [ 278.256846][ T8] usb 7-1: USB disconnect, device number 9 [ 279.081770][T10683] loop8: detected capacity change from 0 to 32768 [ 279.103309][T10683] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.1429 (10683) [ 279.141117][T10683] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 279.171735][T10683] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 279.191959][T10683] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 279.219835][T10683] BTRFS info (device loop8): use zstd compression, level 3 [ 279.235057][T10683] BTRFS info (device loop8): using free space tree [ 279.279898][ T5818] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 279.339433][T10683] BTRFS info (device loop8): enabling ssd optimizations [ 279.362157][T10683] BTRFS info (device loop8): auto enabling async discard [ 279.462488][ T5818] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.499091][ T5818] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 279.540255][ T5818] usb 6-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 279.555707][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.574159][ T5818] usb 6-1: Product: syz [ 279.575752][ T28] audit: type=1800 audit(1791451715.738:292): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1429" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 279.578342][ T5818] usb 6-1: Manufacturer: syz [ 279.663238][ T5818] usb 6-1: SerialNumber: syz [ 279.842138][T10719] loop6: detected capacity change from 0 to 4096 [ 279.884392][T10719] EXT4-fs: Ignoring removed nobh option [ 279.904367][T10719] EXT4-fs: Ignoring removed bh option [ 279.933194][ T5818] kaweth 6-1:1.0: Firmware present in device. [ 279.950006][T10719] EXT4-fs (loop6): Test dummy encryption mode enabled [ 280.032891][T10719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.101174][ T5818] kaweth 6-1:1.0: Statistics collection: 0 [ 280.109238][ T5818] kaweth 6-1:1.0: Multicast filter limit: 0 [ 280.130126][ T5818] kaweth 6-1:1.0: MTU: 0 [ 280.134427][ T5818] kaweth 6-1:1.0: Read MAC address 00:00:00:00:00:00 [ 280.287469][T10363] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 280.352268][ T9714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.667255][T10730] bridge1: entered promiscuous mode [ 280.669037][T10727] loop6: detected capacity change from 0 to 2048 [ 280.672790][T10730] bridge1: entered allmulticast mode [ 280.687664][T10726] netlink: 'syz.8.1437': attribute type 6 has an invalid length. [ 280.734574][ T5818] kaweth 6-1:1.0: kaweth interface created at eth13 [ 280.982399][ T5818] usb 6-1: USB disconnect, device number 10 [ 281.667714][ T28] audit: type=1326 audit(1791451717.828:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.5.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7439e199 code=0x7ffc0000 [ 281.692522][ T28] audit: type=1326 audit(1791451717.828:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.5.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7439e199 code=0x7ffc0000 [ 281.716954][ T28] audit: type=1326 audit(1791451717.848:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.5.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda7439e199 code=0x7ffc0000 [ 281.764298][ T28] audit: type=1326 audit(1791451717.848:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.5.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7439e199 code=0x7ffc0000 [ 281.815507][ T28] audit: type=1326 audit(1791451717.848:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.5.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7439e199 code=0x7ffc0000 [ 281.862375][ T28] audit: type=1326 audit(1791451717.858:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.5.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fda7439e199 code=0x7ffc0000 [ 281.941236][ T28] audit: type=1326 audit(1791451717.858:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.5.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7439e199 code=0x7ffc0000 [ 282.040694][ T28] audit: type=1326 audit(1791451717.858:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.5.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7439e199 code=0x7ffc0000 [ 282.063697][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1443'. [ 282.116568][ T8] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 282.135169][ T28] audit: type=1326 audit(1791451717.858:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.5.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fda7439e199 code=0x7ffc0000 [ 282.173400][ T8] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 282.295419][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1450'. [ 282.806382][T10787] Bluetooth: ISO socket layer initialized [ 282.912032][T10765] loop6: detected capacity change from 0 to 32768 [ 282.968526][T10765] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.112162][T10765] XFS (loop6): Ending clean mount [ 283.275162][T10765] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 283.429579][ T9714] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.480118][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 284.423442][T10843] loop6: detected capacity change from 0 to 128 [ 284.650353][T10848] loop6: detected capacity change from 0 to 4096 [ 284.669875][T10848] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 284.707640][T10848] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 284.734987][T10848] ntfs3: loop6: Failed to load $Extend (-22). [ 284.742067][T10848] ntfs3: loop6: Failed to initialize $Extend. [ 284.790960][T10848] ntfs3: loop6: ino=0, attr_set_size [ 284.811311][T10848] ntfs3: loop6: ino=0, attr_set_size [ 284.828887][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 284.828901][ T28] audit: type=1800 audit(1791451720.988:306): pid=10848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1474" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 284.833907][T10848] ntfs3: loop6: ino=0, attr_set_size [ 285.809717][T10858] loop8: detected capacity change from 0 to 40427 [ 285.819362][T10858] F2FS-fs (loop8): invalid crc value [ 285.829259][T10858] F2FS-fs (loop8): Found nat_bits in checkpoint [ 285.947091][T10858] F2FS-fs (loop8): Start checkpoint disabled! [ 286.042440][T10858] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 286.053243][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.244982][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.297620][ T2932] kworker/u4:10: attempt to access beyond end of device [ 286.297620][ T2932] loop8: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 286.311906][ T2932] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 286.319030][ T2932] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 286.371476][ T2932] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 286.383474][ T2932] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 286.412665][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.586378][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.872159][T10897] loop5: detected capacity change from 0 to 7 [ 286.898231][ T12] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.902928][T10897] Dev loop5: unable to read RDB block 7 [ 286.938906][T10897] loop5: unable to read partition table [ 286.957972][ T12] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.966558][T10897] loop5: partition table beyond EOD, truncated [ 286.970346][T10897] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 287.025864][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.042071][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.045222][ T12] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.067394][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.090197][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.101183][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.110167][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.206871][ T12] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.869889][ T5816] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 287.931177][T10900] chnl_net:caif_netlink_parms(): no params data found [ 288.052827][ T5816] usb 8-1: Using ep0 maxpacket: 8 [ 288.075924][ T5816] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.094329][ T5816] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 288.123860][ T5816] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.156338][ T5816] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 288.179467][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.200206][ T5816] usb 8-1: Product: syz [ 288.204421][ T5816] usb 8-1: Manufacturer: syz [ 288.212822][T10907] loop8: detected capacity change from 0 to 32768 [ 288.230233][ T5816] usb 8-1: SerialNumber: syz [ 288.242047][T10907] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1497 (10907) [ 288.273224][T10907] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 288.305365][T10907] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 288.322147][T10907] BTRFS info (device loop8): using free space tree [ 288.340243][ T5819] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 288.395964][T10900] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.434056][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.471350][T10900] bridge_slave_0: entered allmulticast mode [ 288.493885][T10900] bridge_slave_0: entered promiscuous mode [ 288.500570][T10907] BTRFS info (device loop8): enabling ssd optimizations [ 288.507549][T10907] BTRFS info (device loop8): auto enabling async discard [ 288.517812][T10900] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.534811][T10900] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.543145][T10900] bridge_slave_1: entered allmulticast mode [ 288.550541][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 288.559200][ T5819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.586317][ T5819] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.600399][T10900] bridge_slave_1: entered promiscuous mode [ 288.627239][ T5819] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 288.659142][ T5819] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 288.687716][ T5819] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 288.708482][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.786807][ T5819] hub 6-1:1.0: bad descriptor, ignoring hub [ 288.808804][ T5819] hub: probe of 6-1:1.0 failed with error -5 [ 288.817495][T10363] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 288.818515][ T5819] cdc_wdm 6-1:1.0: skipping garbage [ 288.857957][ T5819] cdc_wdm 6-1:1.0: skipping garbage [ 288.877418][ T5816] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 288.878619][ T5819] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 288.897449][ T5816] usb 8-1: clock source 0 is not valid, cannot use [ 288.903407][ T5819] cdc_wdm 6-1:1.0: Unknown control protocol [ 288.940733][ T5816] usb 8-1: 1:1: cannot get freq (v2/v3): err -32 [ 288.951553][T10900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.069663][T10900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.170259][ T51] Bluetooth: hci1: command tx timeout [ 289.196279][ T5816] usb 8-1: USB disconnect, device number 5 [ 289.431155][T10900] team0: Port device team_slave_0 added [ 289.496666][T10900] team0: Port device team_slave_1 added [ 289.555167][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.975135][T10900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.006851][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.091241][T10900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.122793][T10900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.143371][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.170435][T10900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.321711][T10963] loop8: detected capacity change from 0 to 32768 [ 290.367828][T10963] JBD2: Ignoring recovery information on journal [ 290.516030][T10963] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 290.546175][ T12] hsr_slave_0: left promiscuous mode [ 290.586479][ T12] hsr_slave_1: left promiscuous mode [ 290.607366][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.640146][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.656951][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.685523][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.704188][ T12] bridge_slave_1: left allmulticast mode [ 290.712276][ T12] bridge_slave_1: left promiscuous mode [ 290.718179][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.747715][ T12] bridge_slave_0: left allmulticast mode [ 290.753552][ T12] bridge_slave_0: left promiscuous mode [ 290.759545][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.808449][ T12] veth1_macvtap: left promiscuous mode [ 290.814432][ T12] veth0_macvtap: left promiscuous mode [ 290.821823][ T12] veth1_vlan: left promiscuous mode [ 290.835493][ T12] veth0_vlan: left promiscuous mode [ 290.839314][T10963] syz.8.1508 (10963) used greatest stack depth: 18808 bytes left [ 290.944862][T10363] ocfs2: Unmounting device (7,8) on (node local) [ 291.080953][ T5819] usb 6-1: USB disconnect, device number 11 [ 291.239873][ T51] Bluetooth: hci1: command tx timeout [ 291.412560][T10992] FAULT_INJECTION: forcing a failure. [ 291.412560][T10992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.425915][T10992] CPU: 0 PID: 10992 Comm: syz.8.1513 Not tainted syzkaller #0 [ 291.433411][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 291.443497][T10992] Call Trace: [ 291.446795][T10992] [ 291.449743][T10992] dump_stack_lvl+0x18c/0x250 [ 291.454448][T10992] ? show_regs_print_info+0x20/0x20 [ 291.459685][T10992] ? load_image+0x420/0x420 [ 291.464227][T10992] ? __might_fault+0xaa/0x120 [ 291.468930][T10992] ? __lock_acquire+0x7eb0/0x7eb0 [ 291.473979][T10992] ? __virt_addr_valid+0x10c/0x380 [ 291.479128][T10992] should_fail_ex+0x394/0x4c0 [ 291.483846][T10992] _copy_to_user+0x2f/0xa0 [ 291.488299][T10992] bpf_verifier_vlog+0x2f1/0x840 [ 291.493280][T10992] btf_verifier_log+0x11e/0x1a0 [ 291.498171][T10992] ? btf_parse_graph_root+0xb00/0xb00 [ 291.503582][T10992] ? btf_func_proto_log+0x658/0x850 [ 291.508819][T10992] __btf_verifier_log_type+0x457/0x690 [ 291.514324][T10992] ? btf_int_show+0x2810/0x2810 [ 291.519228][T10992] btf_func_proto_check_meta+0xc0/0x150 [ 291.524815][T10992] btf_check_all_metas+0x371/0xaf0 [ 291.529973][T10992] btf_parse_type_sec+0xfc/0x1960 [ 291.535018][T10992] ? btf_check_sec_info+0x350/0x350 [ 291.540253][T10992] ? __virt_addr_valid+0x10c/0x380 [ 291.545394][T10992] ? btf_verifier_log+0x1a0/0x1a0 [ 291.550448][T10992] ? btf_parse_hdr+0x545/0x700 [ 291.555243][T10992] ? btf_parse_str_sec+0x20d/0x2a0 [ 291.560383][T10992] btf_new_fd+0x440/0x9e0 [ 291.564744][T10992] ? bpf_btf_show_fdinfo+0x80/0x80 [ 291.569881][T10992] ? capable+0x88/0xe0 [ 291.573977][T10992] __sys_bpf+0x670/0x890 [ 291.578243][T10992] ? bpf_link_show_fdinfo+0x560/0x560 [ 291.583653][T10992] ? lock_chain_count+0x20/0x20 [ 291.588539][T10992] __x64_sys_bpf+0x7c/0x90 [ 291.592980][T10992] do_syscall_64+0x55/0xb0 [ 291.597421][T10992] ? clear_bhb_loop+0x40/0x90 [ 291.602125][T10992] ? clear_bhb_loop+0x40/0x90 [ 291.606825][T10992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.612751][T10992] RIP: 0033:0x7fbad359e199 [ 291.617188][T10992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.636817][T10992] RSP: 002b:00007fbad44bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.638733][T10990] loop5: detected capacity change from 0 to 32768 [ 291.645238][T10992] RAX: ffffffffffffffda RBX: 00007fbad3825fa0 RCX: 00007fbad359e199 [ 291.645257][T10992] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 291.645271][T10992] RBP: 00007fbad3635888 R08: 0000000000000000 R09: 0000000000000000 [ 291.645284][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.645296][T10992] R13: 00007fbad3826038 R14: 00007fbad3825fa0 R15: 00007ffdc73a9b68 [ 291.645325][T10992] [ 291.646733][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.713175][T10990] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1511 (10990) [ 291.738973][T10990] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 291.750256][T10990] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 291.783466][T10990] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 291.798751][T10990] BTRFS info (device loop5): use zstd compression, level 3 [ 291.833383][T10990] BTRFS info (device loop5): using free space tree [ 292.024478][T10990] BTRFS info (device loop5): enabling ssd optimizations [ 292.058989][T10990] BTRFS info (device loop5): auto enabling async discard [ 292.167324][ T28] audit: type=1800 audit(1791451728.328:307): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1511" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 292.604835][ T7727] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 293.278240][T11025] ip_tables: iptables: counters copy to user failed while replacing table [ 293.320116][ T51] Bluetooth: hci1: command tx timeout [ 293.416274][ T12] team0 (unregistering): Port device team_slave_1 removed [ 293.495897][ T12] team0 (unregistering): Port device team_slave_0 removed [ 293.568435][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.664841][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.224256][ T12] bond0 (unregistering): Released all slaves [ 294.390651][T10900] hsr_slave_0: entered promiscuous mode [ 294.418017][T10900] hsr_slave_1: entered promiscuous mode [ 294.431053][T10982] netlink: 'syz.7.1510': attribute type 1 has an invalid length. [ 294.484448][T10982] bond1: entered promiscuous mode [ 294.497068][T10982] bond1: entered allmulticast mode [ 294.506229][T10982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.534320][T10985] erspan1: entered allmulticast mode [ 294.595019][T10985] bond1: (slave erspan1): making interface the new active one [ 294.646913][T10985] erspan1: entered promiscuous mode [ 294.656834][T10985] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 295.322308][T10900] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 295.343639][T10900] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 295.370773][T10900] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 295.399508][T10900] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 295.408923][ T51] Bluetooth: hci1: command tx timeout [ 295.735457][T10900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.783245][T10900] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.811891][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.819147][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.869261][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.876491][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.116922][T11079] FAULT_INJECTION: forcing a failure. [ 296.116922][T11079] name failslab, interval 1, probability 0, space 0, times 0 [ 296.174713][T11079] CPU: 0 PID: 11079 Comm: syz.5.1534 Not tainted syzkaller #0 [ 296.182252][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 296.192337][T11079] Call Trace: [ 296.195645][T11079] [ 296.198600][T11079] dump_stack_lvl+0x18c/0x250 [ 296.203316][T11079] ? show_regs_print_info+0x20/0x20 [ 296.208552][T11079] ? load_image+0x420/0x420 [ 296.213098][T11079] ? __might_sleep+0xe0/0xe0 [ 296.217732][T11079] ? __lock_acquire+0x7eb0/0x7eb0 [ 296.222799][T11079] should_fail_ex+0x394/0x4c0 [ 296.227515][T11079] should_failslab+0x9/0x20 [ 296.232072][T11079] slab_pre_alloc_hook+0x59/0x300 [ 296.237132][T11079] kmem_cache_alloc+0x5a/0x2c0 [ 296.241934][T11079] ? security_file_alloc+0x34/0x120 [ 296.247177][T11079] security_file_alloc+0x34/0x120 [ 296.252248][T11079] init_file+0x94/0x1f0 [ 296.256434][T11079] alloc_empty_file+0xb7/0x1d0 [ 296.261225][T11079] alloc_file+0x5b/0x600 [ 296.265501][T11079] alloc_file_pseudo+0x184/0x210 [ 296.270470][T11079] ? fput+0x1a0/0x1a0 [ 296.274471][T11079] ? __rwlock_init+0x150/0x150 [ 296.279267][T11079] ? do_raw_spin_unlock+0x121/0x230 [ 296.284513][T11079] sock_alloc_file+0xb7/0x280 [ 296.289221][T11079] do_accept+0x3e6/0x6b0 [ 296.293498][T11079] ? __ia32_sys_listen+0x70/0x70 [ 296.298491][T11079] __sys_accept4+0x9b/0x100 [ 296.303029][T11079] __x64_sys_accept4+0x9a/0xb0 [ 296.307826][T11079] do_syscall_64+0x55/0xb0 [ 296.312264][T11079] ? clear_bhb_loop+0x40/0x90 [ 296.316961][T11079] ? clear_bhb_loop+0x40/0x90 [ 296.321660][T11079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.327595][T11079] RIP: 0033:0x7fda7439e199 [ 296.332050][T11079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.351688][T11079] RSP: 002b:00007fda751b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 296.355618][T11086] FAULT_INJECTION: forcing a failure. [ 296.355618][T11086] name failslab, interval 1, probability 0, space 0, times 0 [ 296.360106][T11079] RAX: ffffffffffffffda RBX: 00007fda74625fa0 RCX: 00007fda7439e199 [ 296.360126][T11079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 296.360139][T11079] RBP: 00007fda74435888 R08: 0000000000000000 R09: 0000000000000000 [ 296.360151][T11079] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000000 [ 296.360164][T11079] R13: 00007fda74626038 R14: 00007fda74625fa0 R15: 00007ffcb8a3ae88 [ 296.360194][T11079] [ 296.449852][T11086] CPU: 0 PID: 11086 Comm: syz.8.1537 Not tainted syzkaller #0 [ 296.457372][T11086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 296.467463][T11086] Call Trace: [ 296.470767][T11086] [ 296.473719][T11086] dump_stack_lvl+0x18c/0x250 [ 296.478423][T11086] ? show_regs_print_info+0x20/0x20 [ 296.483651][T11086] ? load_image+0x420/0x420 [ 296.488201][T11086] ? __might_sleep+0xe0/0xe0 [ 296.492828][T11086] ? __lock_acquire+0x7eb0/0x7eb0 [ 296.497888][T11086] should_fail_ex+0x394/0x4c0 [ 296.502613][T11086] should_failslab+0x9/0x20 [ 296.507160][T11086] slab_pre_alloc_hook+0x59/0x300 [ 296.512220][T11086] kmem_cache_alloc+0x5a/0x2c0 [ 296.517049][T11086] ? __proc_create+0x373/0x8b0 [ 296.521838][T11086] __proc_create+0x373/0x8b0 [ 296.526461][T11086] ? proc_symlink+0x260/0x260 [ 296.531161][T11086] ? make_kgid+0x1c8/0x650 [ 296.535604][T11086] ? from_kuid_munged+0x6e0/0x6e0 [ 296.540666][T11086] ? rcu_is_watching+0x15/0xb0 [ 296.545467][T11086] _proc_mkdir+0x63/0x160 [ 296.549826][T11086] proc_net_ns_init+0x284/0x360 [ 296.554707][T11086] ops_init+0x391/0x640 [ 296.558903][T11086] setup_net+0x3b6/0xa20 [ 296.563177][T11086] ? copy_net_ns+0x530/0x530 [ 296.567807][T11086] ? copy_net_ns+0x347/0x530 [ 296.572425][T11086] ? down_read_killable+0x1d0/0x340 [ 296.577661][T11086] copy_net_ns+0x361/0x530 [ 296.582117][T11086] create_new_namespaces+0x3ce/0x700 [ 296.587454][T11086] unshare_nsproxy_namespaces+0x11a/0x160 [ 296.593208][T11086] ksys_unshare+0x4fa/0x8f0 [ 296.597742][T11086] ? sighand_ctor+0x50/0x50 [ 296.602271][T11086] ? lock_chain_count+0x20/0x20 [ 296.607153][T11086] ? syscall_enter_from_user_mode+0x25/0x80 [ 296.613083][T11086] __x64_sys_unshare+0x38/0x40 [ 296.617876][T11086] do_syscall_64+0x55/0xb0 [ 296.622321][T11086] ? clear_bhb_loop+0x40/0x90 [ 296.627024][T11086] ? clear_bhb_loop+0x40/0x90 [ 296.631726][T11086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.637662][T11086] RIP: 0033:0x7fbad359e199 [ 296.642109][T11086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.661744][T11086] RSP: 002b:00007fbad44bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 296.670194][T11086] RAX: ffffffffffffffda RBX: 00007fbad3825fa0 RCX: 00007fbad359e199 [ 296.678196][T11086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 296.686199][T11086] RBP: 00007fbad3635888 R08: 0000000000000000 R09: 0000000000000000 [ 296.694204][T11086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.702203][T11086] R13: 00007fbad3826038 R14: 00007fbad3825fa0 R15: 00007ffdc73a9b68 [ 296.710217][T11086] [ 296.842433][T10900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.410862][T10900] veth0_vlan: entered promiscuous mode [ 297.434456][T10900] veth1_vlan: entered promiscuous mode [ 297.526723][T10900] veth0_macvtap: entered promiscuous mode [ 297.574610][T10900] veth1_macvtap: entered promiscuous mode [ 297.622575][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.658699][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.669093][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.679985][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.690247][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.728370][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.747013][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.769337][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.796533][T11128] loop8: detected capacity change from 0 to 512 [ 297.805344][T10900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.848238][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.859453][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.878650][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.889517][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.902916][T11131] TCP: TCP_TX_DELAY enabled [ 297.912644][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.937283][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.948971][T11128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.957067][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.974766][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.985446][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.997958][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.009594][T10900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.025454][T10900] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.036304][T10900] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.047130][T10900] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.056023][T10900] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.314700][T10363] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.385433][ T7391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.429948][ T7391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.467296][T11147] FAULT_INJECTION: forcing a failure. [ 298.467296][T11147] name failslab, interval 1, probability 0, space 0, times 0 [ 298.520614][T11147] CPU: 0 PID: 11147 Comm: syz.5.1552 Not tainted syzkaller #0 [ 298.528151][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 298.536878][T11150] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 298.538207][T11147] Call Trace: [ 298.538217][T11147] [ 298.553033][T11147] dump_stack_lvl+0x18c/0x250 [ 298.557744][T11147] ? show_regs_print_info+0x20/0x20 [ 298.562981][T11147] ? load_image+0x420/0x420 [ 298.567525][T11147] ? __might_sleep+0xe0/0xe0 [ 298.572158][T11147] ? __lock_acquire+0x7eb0/0x7eb0 [ 298.577224][T11147] should_fail_ex+0x394/0x4c0 [ 298.581947][T11147] should_failslab+0x9/0x20 [ 298.586485][T11147] slab_pre_alloc_hook+0x59/0x300 [ 298.591536][T11147] ? do_epoll_create+0x75/0x340 [ 298.596426][T11147] __kmem_cache_alloc_node+0x53/0x250 [ 298.601845][T11147] ? do_epoll_create+0x75/0x340 [ 298.606732][T11147] kmalloc_trace+0x2a/0xe0 [ 298.611183][T11147] do_epoll_create+0x75/0x340 [ 298.615897][T11147] __x64_sys_epoll_create1+0x37/0x40 [ 298.621212][T11147] do_syscall_64+0x55/0xb0 [ 298.625647][T11147] ? clear_bhb_loop+0x40/0x90 [ 298.630329][T11147] ? clear_bhb_loop+0x40/0x90 [ 298.635005][T11147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.640899][T11147] RIP: 0033:0x7fda7439e199 [ 298.645312][T11147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.664919][T11147] RSP: 002b:00007fda751b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 298.673337][T11147] RAX: ffffffffffffffda RBX: 00007fda74625fa0 RCX: 00007fda7439e199 [ 298.681307][T11147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 298.689272][T11147] RBP: 00007fda74435888 R08: 0000000000000000 R09: 0000000000000000 [ 298.697241][T11147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.705224][T11147] R13: 00007fda74626038 R14: 00007fda74625fa0 R15: 00007ffcb8a3ae88 [ 298.713207][T11147] [ 298.731663][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.739514][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.820368][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 299.843979][T11177] loop9: detected capacity change from 0 to 40427 [ 299.890419][T11177] F2FS-fs (loop9): invalid crc value [ 299.958222][T11177] F2FS-fs (loop9): Found nat_bits in checkpoint [ 300.027782][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 300.080339][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 300.098849][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.129016][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.153521][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.172619][T11177] F2FS-fs (loop9): Start checkpoint disabled! [ 300.189879][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.236677][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.241175][T11177] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 300.287049][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.552020][ T9] usb 8-1: usb_control_msg returned -32 [ 300.557668][ T9] usbtmc 8-1:16.0: can't read capabilities [ 300.667321][ T997] kworker/u4:5: attempt to access beyond end of device [ 300.667321][ T997] loop9: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 300.707551][ T997] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 300.729910][ T997] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 300.737033][ T997] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 300.760653][ T997] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 301.021496][T11223] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 301.216874][ T8] usb 8-1: USB disconnect, device number 6 [ 301.924400][T11252] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 302.302880][T11248] loop9: detected capacity change from 0 to 32768 [ 302.413155][T11269] loop7: detected capacity change from 0 to 512 [ 302.444631][T11248] JBD2: Ignoring recovery information on journal [ 302.522215][T11269] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.617215][T11248] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 302.889608][T10146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.069026][T10900] ocfs2: Unmounting device (7,9) on (node local) [ 304.239728][T11314] loop9: detected capacity change from 0 to 32768 [ 304.285088][T11314] JBD2: Ignoring recovery information on journal [ 304.319879][T11314] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 304.569503][T10900] ocfs2: Unmounting device (7,9) on (node local) [ 306.084743][T11295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.700497][ T788] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 306.797451][T11390] loop7: detected capacity change from 0 to 40427 [ 306.813642][T11390] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 306.820474][T11390] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 306.831797][T11390] F2FS-fs (loop7): invalid crc value [ 306.904898][ T788] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 306.920003][ T788] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 306.943137][ T788] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 306.952908][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 306.961712][T11390] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 306.968851][T11390] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 306.969193][ T788] usb 6-1: Product: syz [ 306.980951][ T788] usb 6-1: Manufacturer: syz [ 307.017017][T11390] syz.7.1596: attempt to access beyond end of device [ 307.017017][T11390] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 307.061157][T10146] syz-executor: attempt to access beyond end of device [ 307.061157][T10146] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 307.087573][T10146] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 307.221388][T11392] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 307.228716][T11392] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 307.259458][ T788] dvb_ttusb_budget: ttusb_init_controller: error [ 307.268481][ T788] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 307.350594][ T788] DVB: Unable to find symbol cx22700_attach() [ 307.380111][ T5819] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 307.423522][ T788] DVB: Unable to find symbol tda10046_attach() [ 307.436342][ T788] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 307.582855][ T5819] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.603109][ T5819] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.699611][ T5819] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.722146][ T5818] usb 6-1: USB disconnect, device number 12 [ 307.723775][ T5819] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.747132][ T5819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.768872][ T5819] usb 10-1: config 0 descriptor?? [ 307.891149][T11407] loop7: detected capacity change from 0 to 32768 [ 307.959674][T11407] JBD2: Ignoring recovery information on journal [ 308.035465][T11407] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 308.246065][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 308.263717][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 308.271494][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 308.278921][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 308.289740][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 308.310353][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 308.328361][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 308.352889][ T5819] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 308.448058][T10146] ocfs2: Unmounting device (7,7) on (node local) [ 308.469466][ T5819] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 308.568223][ T5819] usb 10-1: USB disconnect, device number 2 [ 308.582752][ T28] audit: type=1800 audit(1791451744.748:308): pid=11419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1602" name="c_sync" dev="configfs" ino=30189 res=0 errno=0 [ 308.745875][T11415] fido_id[11415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 308.926261][T11433] ip_tables: iptables: counters copy to user failed while replacing table [ 308.969650][T11435] loop7: detected capacity change from 0 to 256 [ 309.078658][ T28] audit: type=1804 audit(1791451745.238:309): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1600" name="/newroot/100/file0/bus" dev="loop7" ino=1048709 res=1 errno=0 [ 309.677401][ T5817] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 309.766896][T11440] loop5: detected capacity change from 0 to 40427 [ 309.786084][T11440] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 309.822167][T11440] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 309.867163][T11440] F2FS-fs (loop5): Image doesn't support compression [ 309.895276][T11440] F2FS-fs (loop5): Image doesn't support compression [ 309.921526][T11440] F2FS-fs (loop5): invalid crc value [ 309.945294][ T5818] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 310.171606][T11440] F2FS-fs (loop5): Start checkpoint disabled! [ 310.212919][T11440] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 310.226550][T11440] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 310.296073][T11440] syz.5.1609: attempt to access beyond end of device [ 310.296073][T11440] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 310.392865][ T12] kworker/u4:1: attempt to access beyond end of device [ 310.392865][ T12] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.429974][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 310.462461][ T5817] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 310.475749][T11462] loop7: detected capacity change from 0 to 512 [ 310.534581][T11462] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 310.597891][T11462] EXT4-fs (loop7): 1 truncate cleaned up [ 310.612030][T11462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.656361][T11451] loop9: detected capacity change from 0 to 32768 [ 310.713530][T11451] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 310.723807][T11451] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 310.766671][T11448] ceph: No mds server is up or the cluster is laggy [ 310.900634][T11451] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 18 extents in 0ms [ 311.142908][T11451] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 311.149206][T11467] loop5: detected capacity change from 0 to 512 [ 311.219192][T11467] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 311.261452][T11467] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1615: invalid indirect mapped block 32768 (level 2) [ 311.319547][ T5818] ------------[ cut here ]------------ [ 311.324905][T11467] EXT4-fs (loop5): 1 orphan inode deleted [ 311.326135][ T5818] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 311.342773][T11467] EXT4-fs (loop5): 1 truncate cleaned up [ 311.360454][ T5818] WARNING: CPU: 1 PID: 5818 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 311.365449][T11467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.369824][ T5818] Modules linked in: [ 311.369846][ T5818] CPU: 1 PID: 5818 Comm: kworker/1:5 Not tainted syzkaller #0 [ 311.369868][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.369880][ T5818] Workqueue: events delete_netdev [ 311.369905][ T5818] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 311.369930][ T5818] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 c0 ce da 8a 48 89 de e8 55 f7 39 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 38 70 ff [ 311.369947][ T5818] RSP: 0018:ffffc90004a2f840 EFLAGS: 00010246 [ 311.369966][ T5818] RAX: 3e56e0923b5aec00 RBX: ffffffff8bc5d2a0 RCX: ffff88802b219e00 [ 311.369981][ T5818] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 311.369993][ T5818] RBP: 00000000000000c1 R08: ffffc90004a2f447 R09: 1ffff92000945e88 [ 311.370008][ T5818] R10: dffffc0000000000 R11: fffff52000945e89 R12: 1ffffffff178b950 [ 311.370022][ T5818] R13: dffffc0000000000 R14: ffff88804ffe4aa8 R15: ffff88805e951820 [ 311.370037][ T5818] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 311.370053][ T5818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.370066][ T5818] CR2: 0000001b2da1bff8 CR3: 00000000641fc000 CR4: 00000000003506e0 [ 311.370084][ T5818] Call Trace: [ 311.370098][ T5818] [ 311.463109][T11467] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, [ 311.465383][ T5818] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 311.473206][T11467] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 311.482302][ T5818] netdev_queue_update_kobjects+0x3e1/0x480 [ 311.482347][ T5818] netdev_unregister_kobject+0x108/0x250 [ 311.482377][ T5818] unregister_netdevice_many_notify+0x1449/0x1910 [ 311.482422][ T5818] ? trace_raw_output_contention_end+0xd0/0xd0 [ 311.482445][ T5818] ? unregister_netdevice_many+0x20/0x20 [ 311.482471][ T5818] ? rcu_is_watching+0x15/0xb0 [ 311.482496][ T5818] ? trace_contention_end+0x39/0xe0 [ 311.482517][ T5818] ? __mutex_lock+0x30d/0xc80 [ 311.482551][ T5818] unregister_netdevice_queue+0x2e9/0x330 [ 311.482577][ T5818] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 311.482600][ T5818] ? list_netdevice+0x730/0x730 [ 311.482624][ T5818] ? read_lock_is_recursive+0x20/0x20 [ 311.482654][ T5818] lowpan_unregister_netdev+0x1c/0x30 [ 311.482680][ T5818] unregister_dev+0x70/0x1a0 [ 311.482698][ T5818] ? process_scheduled_works+0x975/0x1600 [ 311.482725][ T5818] process_scheduled_works+0xa60/0x1600 [ 311.482776][ T5818] ? worker_attach_to_pool+0x370/0x370 [ 311.482807][ T5818] ? assign_work+0x3cc/0x5d0 [ 311.482837][ T5818] worker_thread+0xa5e/0xfe0 [ 311.482890][ T5818] kthread+0x2fa/0x390 [ 311.482908][ T5818] ? pr_cont_work+0x550/0x550 [ 311.482932][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 311.482952][ T5818] ret_from_fork+0x48/0x80 [ 311.482973][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 311.482993][ T5818] ret_from_fork_asm+0x11/0x20 [ 311.483032][ T5818] [ 311.483042][ T5818] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.483052][ T5818] CPU: 1 PID: 5818 Comm: kworker/1:5 Not tainted syzkaller #0 [ 311.483069][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.483080][ T5818] Workqueue: events delete_netdev [ 311.483100][ T5818] Call Trace: [ 311.483107][ T5818] [ 311.483114][ T5818] dump_stack_lvl+0x18c/0x250 [ 311.483134][ T5818] ? show_regs_print_info+0x20/0x20 [ 311.483149][ T5818] ? load_image+0x420/0x420 [ 311.483183][ T5818] panic+0x2ca/0x720 [ 311.483208][ T5818] ? bpf_jit_dump+0xd0/0xd0 [ 311.483236][ T5818] ? ret_from_fork_asm+0x11/0x20 [ 311.483260][ T5818] __warn+0x2e0/0x470 [ 311.483276][ T5818] ? sysfs_remove_group+0x17b/0x290 [ 311.483297][ T5818] ? sysfs_remove_group+0x17b/0x290 [ 311.483315][ T5818] report_bug+0x2be/0x4f0 [ 311.483333][ T5818] ? sysfs_remove_group+0x17b/0x290 [ 311.483353][ T5818] ? sysfs_remove_group+0x17b/0x290 [ 311.483371][ T5818] ? sysfs_remove_group+0x17d/0x290 [ 311.483388][ T5818] handle_bug+0xcf/0x120 [ 311.483413][ T5818] exc_invalid_op+0x1a/0x50 [ 311.483431][ T5818] asm_exc_invalid_op+0x1a/0x20 [ 311.483447][ T5818] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 311.483467][ T5818] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 c0 ce da 8a 48 89 de e8 55 f7 39 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 38 70 ff [ 311.483482][ T5818] RSP: 0018:ffffc90004a2f840 EFLAGS: 00010246 [ 311.483497][ T5818] RAX: 3e56e0923b5aec00 RBX: ffffffff8bc5d2a0 RCX: ffff88802b219e00 [ 311.483510][ T5818] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 311.483521][ T5818] RBP: 00000000000000c1 R08: ffffc90004a2f447 R09: 1ffff92000945e88 [ 311.483533][ T5818] R10: dffffc0000000000 R11: fffff52000945e89 R12: 1ffffffff178b950 [ 311.483546][ T5818] R13: dffffc0000000000 R14: ffff88804ffe4aa8 R15: ffff88805e951820 [ 311.483574][ T5818] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 311.483600][ T5818] netdev_queue_update_kobjects+0x3e1/0x480 [ 311.483631][ T5818] netdev_unregister_kobject+0x108/0x250 [ 311.483657][ T5818] unregister_netdevice_many_notify+0x1449/0x1910 [ 311.483689][ T5818] ? trace_raw_output_contention_end+0xd0/0xd0 [ 311.483708][ T5818] ? unregister_netdevice_many+0x20/0x20 [ 311.483731][ T5818] ? rcu_is_watching+0x15/0xb0 [ 311.483753][ T5818] ? trace_contention_end+0x39/0xe0 [ 311.483771][ T5818] ? __mutex_lock+0x30d/0xc80 [ 311.483803][ T5818] unregister_netdevice_queue+0x2e9/0x330 [ 311.483824][ T5818] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 311.483844][ T5818] ? list_netdevice+0x730/0x730 [ 311.483865][ T5818] ? read_lock_is_recursive+0x20/0x20 [ 311.483892][ T5818] lowpan_unregister_netdev+0x1c/0x30 [ 311.483915][ T5818] unregister_dev+0x70/0x1a0 [ 311.483930][ T5818] ? process_scheduled_works+0x975/0x1600 [ 311.483953][ T5818] process_scheduled_works+0xa60/0x1600 [ 311.484000][ T5818] ? worker_attach_to_pool+0x370/0x370 [ 311.484028][ T5818] ? assign_work+0x3cc/0x5d0 [ 311.484054][ T5818] worker_thread+0xa5e/0xfe0 [ 311.484101][ T5818] kthread+0x2fa/0x390 [ 311.484116][ T5818] ? pr_cont_work+0x550/0x550 [ 311.484138][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 311.484155][ T5818] ret_from_fork+0x48/0x80 [ 311.484174][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 311.484192][ T5818] ret_from_fork_asm+0x11/0x20 [ 311.484227][ T5818] [ 311.492401][ T5818] Kernel Offset: disabled