last executing test programs: 27.554139177s ago: executing program 1: creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000010002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160005000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) 26.637178665s ago: executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x89fb, &(0x7f0000000040)={'veth1_to_bridge\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001140)="023ce16019d3dc8e7f377b", 0xb}, {&(0x7f0000001180)="558c95d212abac1bc14f03a945fdf0a328d45515f3157c000bb6dcb959c064b0f76c97ab278cade7c043954d7762ceeae9f435297d360255abf2abaddbf2fbf4be8da6a8f41d724d7b2b", 0x4a}, {&(0x7f0000001200)="5c0ee306452337104d7d03455e37da9568feace4cb3fa2548ca0061b3c875080f33df88e9d66d7740fe4c3df87269224b41cef189b0bcca76a336faa453b0736f97e72b1e8758d50cf7b3ac2d48d5040d26e248d8421d4036efa7d8123", 0x5d}, {&(0x7f0000001280)="8a8534a8751a02117404a9c1900047230eda5b7bad60dca4f067fd338a9363e371b981897155c0d697cce605f50d5a8ee0b5cdce6af052876637f474dd51ce12dc7fce2bb5e0d263608e75f3b7ad24c8222a16fa9aec5f2095340329c257688764b1549e8fbdfa65b50d5802b26db1e5ad3e73787c59e451ef8abb2a685d7bc55d3f33c71f2f1c0b7020610cda527f4c11cd68d788ba34a4ebb00ae659aee6d27a1b6489b77d5a90b108055bf9419d1c2713a1bf2d59889c92fb00b2f3fd08a87e4d12c4ecb5c8374accf2570b8257634640614cad4388016ef49f45ccc251", 0xdf}], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64f2e9c50000006d150000a60000000006000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xa}}}}}, 0x28}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@ipv4}, {@in6=@private2, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) ioperm(0x0, 0x4, 0x2) clock_adjtime(0xa, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x20000004000}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="100000000893c591883483762f92b0d26ab985fcb9232ca54afe0e0000"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00060000000000120000f1850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x88041, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 26.065951916s ago: executing program 1: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000b00)={[{@orlov}, {@usrjquota}, {@noblock_validity}, {@norecovery}, {@errors_remount}, {@nomblk_io_submit}]}, 0x3, 0x546, &(0x7f0000000180)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000036c0)={[{@codepage={'codepage', 0x3d, 'cp737'}}, {@session={'session', 0x3d, 0x1000}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@session={'session', 0x3d, 0xffffffffffffe23d}}, {@uid}]}, 0x1, 0x2d1, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{r1}, 0x0, &(0x7f00000019c0)}, 0x20) open$dir(&(0x7f00000042c0)='./file1\x00', 0x0, 0x0) 24.74581067s ago: executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r0) r1 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)=']\x00', 0xfffffffffffffffa) r2 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)=']\x00', r1) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x8, 0x500) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x80000000) keyctl$describe(0x6, r0, &(0x7f0000000300)=""/145, 0x91) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3be}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x1, {0x200, 0x7ff, "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", 0x80, 0x81, 0x7f, 0xff, 0x5, 0x1f, 0x81, 0x1}}}, 0x128) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r8, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x16, 0x14, '/dev/input/event#\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '&\xe4[.{/){\x95&\\)%'}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'syzkaller\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '-$%-\'\'\''}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80001}, 0x24008001) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x5) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) getsockopt$ax25_int(r9, 0x101, 0x2, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$SG_SCSI_RESET(r9, 0x2284, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x2f}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x48000) splice(r9, &(0x7f0000000a00)=0x6, r4, &(0x7f0000000a40)=0x100000000, 0x70, 0x3) r11 = add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$search(0xa, r1, &(0x7f0000000a80)='syzkaller\x00', &(0x7f0000000ac0)={'syz', 0x1}, r11) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @desc4}, &(0x7f0000000c00)={0x0, "2c5440b65a4fff3d9d81127ff4aed35bddeb89a26f5fbe31300074a56c9a48823af0fb5fdadf8b1e093f27a4ddcc756074d5bf85092091cb5b418895b914c39c", 0x20}, 0x48, r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000e80)={'ip_vti0\x00', &(0x7f0000000e00)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x0, 0x3, {{0x10, 0x4, 0x2, 0x30, 0x40, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0x79, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @remote, @empty]}, @noop, @end, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x86, [@remote, @empty, @broadcast]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r9, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000f80)=[0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000001000)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x19, 0x24, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x77}, @ldst={0x2, 0x2, 0x2, 0x8, 0x3, 0x80, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @generic={0x2, 0x1, 0x0, 0x7, 0x1000}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', r12, 0x27, r9, 0x8, &(0x7f0000000ec0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x5, 0xe, 0x4, 0x1}, 0x10, r13, r9, 0x5, &(0x7f0000001280)=[r9, r9, 0x1, r9, r9, r9, r14, r9], &(0x7f00000012c0)=[{0x2, 0x3, 0x7, 0x1}, {0x1, 0x5, 0x5, 0x4}, {0x1, 0x1, 0x1, 0x7}, {0x2, 0x2, 0x3, 0x2}, {0x0, 0x3, 0xa, 0x4}], 0x10, 0x1000}, 0x90) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000001400)=""/206, 0xce, 0x1, &(0x7f0000001500)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) 20.453939261s ago: executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r3, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x4, 0x2, 0x2, 0x0, @dev={0xac, 0xc}, 0x0, "20f0ddf9a66a"}]}}}}}}}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000600)=0x10) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000580), 0x240200, 0x0) pwrite64(r8, &(0x7f0000000a80)="ddeb1379a9f069fa89cebe6498da9623f6c2fbff91b0f8b05b8e5bb8dbeed7aaa5888e615e7d781625b2539cd13661055c772a7f60fad86e", 0x38, 0x9) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000340)='./file0\x00', 0x2000c12, &(0x7f000000a480)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@check_relaxed}, {@cruft}, {@overriderock}, {@overriderock}, {@check_strict}, {@check_relaxed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@unhide}, {@cruft}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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") (async) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), 0x4) (async) clock_gettime(0x3, &(0x7f0000000ac0)) (async) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0xffffffff, @private0}}}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000b40)={r10}, &(0x7f00000002c0)=0x8) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x44, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4884}, 0x20000010) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001b80)={0xa, 0x0, [{0x10000, 0xe5, &(0x7f0000000400)=""/229}, {0x6000, 0xd8, &(0x7f0000000680)=""/216}, {0x1000, 0x1c, &(0x7f0000000540)=""/28}, {0x4, 0x0, &(0x7f0000000580)}, {0x10000, 0x83, &(0x7f0000000780)=""/131}, {0xd000, 0x8e, &(0x7f0000000840)=""/142}, {0x5000, 0xe4, &(0x7f0000000900)=""/228}, {0x2000, 0x25, &(0x7f00000005c0)=""/37}, {0x2, 0x1000, &(0x7f0000000b80)=""/4096}, {0x5000, 0x5e, &(0x7f0000000a00)=""/94}]}) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="0004000081401fe82e00ee3361dafb096f18e2b4b18c53b2ae745f743081328b29c4094112551ac744aa72e71798cea489651c346e825810bac5067e5c7df1f86ccf64f63319f54e920309b64186a057f31e60e7225cdbe3ec5c865d9fb6cf7f28aeab20f8a8014c5eee2de7326e3ea6a8cc482d04013c765fb7b48a450781e5eb666c7dc639b3903d8553408f30415980", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000780"], 0x18}}, 0x0) 18.04399638s ago: executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_POLL(r1, &(0x7f0000000040)={0x18}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x0, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="4c000000000000000000000007000000880e6534ba3124e84ee8010400004408114000000fff0089179cac1414400a0101020a010101000000000a010100830bdbac1414bbe00000020000000000000014000000000000000000000001"], 0x68}}], 0x1, 0x240080e4) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 13.342185461s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000040420f00b70300000000200085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a"], 0x34}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000e8ffffffffff6400000008000300", @ANYBLOB="9a77755caaa204f780d8590964a36ad74889e99e0964bf262177ad352f5cbd46da185b46a5cf1b334f0ab1a91a64b020f9f9c9f03ab7f6f4f1125f988a00bdc4969f89ee6f3ddd29a7dbb41cc69c87174db6bc383c1c97bdfcbecf9518968eec078bd7"], 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES64=r4], 0x58}}, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) setregid(0xee00, r10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/i8042', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffc}) fchmod(r11, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040091) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x208000, 0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r12, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) 12.643922929s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f00000000c0), 0x1, 0x510c, &(0x7f0000005180)="$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") syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000240)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc2d, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f00000002c0)='./file1\x00', 0x0) 9.855295749s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028008000400000000000500010005"], 0x4c}}, 0x0) 8.608717079s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000140)={0x0, [0x7f, 0xb, 0x5], [{0x8000000, 0x0, 0x0, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x1}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}], 0x20}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x15, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.531340988s ago: executing program 4: epoll_create1(0x0) r0 = socket(0x0, 0x80802, 0x0) r1 = epoll_create1(0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = epoll_create1(0x0) r4 = dup3(r3, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'vlan1\x00', &(0x7f0000000200)=@ethtool_test={0x28}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000004a40)=ANY=[], 0x1, 0xee7, &(0x7f0000001e40)="$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") mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x2, 0x5, 0x2, 0x8, 0x48, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x80000000, @mcast2, 0xfffffffd}, @in={0x2, 0x4e21, @multicast2}}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x6}, @sadb_x_sec_ctx={0x14, 0x18, 0x8, 0x76, 0x97, "8ce162110e5168f4b8d6640317d10a98c35010c1aa12f839736e9ca302b3b7f58c8cab236a6b2525dbcdc45473d63b10ce9f961c93bbaa9e1bc1d61f26e49684c88bca75c9883ef76fce5842bcfaf480c485e6da055c3976f8660c134100d28cb0b96614e967cd396a3e33090cfdc6a02730c3ff15493cd9a3f69ef85fa01d7097126839c2bc5dce6c4c82092c4a551f6c2c198fcd7e6b"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x8, 0x0, 0x3c, 0x3, 0x180000000}, @sadb_x_sec_ctx={0x21, 0x18, 0x7, 0x1, 0xfe, "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"}, @sadb_x_nat_t_type={0x1, 0x14, 0x80}]}, 0x240}}, 0x20000855) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e21, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x24, {0x2, 0x4e24, @private=0xa010102}, 'bridge0\x00'}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000033a80)=""/102393, 0xffffffffffffff63}], 0x1, 0x0, 0xffffffff) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) 7.20554115s ago: executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8002}, 0x14048851) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000fcffbfa200200000000098070000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000263430be65f53811ac80413b5e509b7e2f87d8973d41c1906de2bf04c970c50654983aa086b69355fc097dd8745f0247ad6cc176ecff42f460788147435df5edcbc90e0713b7e09c94ef886af20c0e3342f45ffac3f915f5fb819e50bd6610483399e2aadc1075a049e2095a42e714687c57e0e17ff31901efe96c9f5b8ad75ab640b53fbfb2f8c5414c6eab06d1f7c2d55e9518220bc124bfc42582c338ed34acd1d63edd833a1371fc8d7490c438cd030000b676c49e00f028469ee9a91f0b2f5bbf4d5413b84a61143e1d8a86bfadca239fc49875a607f4d6c4e20000000000002f3cf36199432fc399e5d5046efbcb56e1279986b1aeddda6a533b4d88f5332960209fa7a36d6bd70462631a282ef0e54d1361f57d12db0324ee7e30cf6f08f40b1252cd8702198ca7834032f06631d81a49e0dba4a2fb90c19efc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x120c086, &(0x7f0000000300)={[{@resgid}, {@nouid32}, {@jqfmt_vfsold}, {@quota}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@abort}, {@bsdgroups}, {@nobh}]}, 0x11, 0x5ec, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000001200)='./control\x00', 0x0) chmod(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, 0x0) setreuid(r1, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ee289f413bb90152f7d6d1ce5ca93c0f7c41499dc28ac63a01000000000000004faa2ad9c084a003ea00", "03bdbcef549ba19704007ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c20c62df7a8d5da5c00000000ff030000fff2ff008900"}) open(&(0x7f0000000080)='./control\x00', 0x551a01, 0x408) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000180)={0x3, 0x1, [0x3, 0xfffffe00, 0x9, 0x7, 0x9, 0x9, 0x6, 0x80000001]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 6.303140296s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x13) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x7a, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000507000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 5.739798516s ago: executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000038d47e6d9197821f9500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x0, 0x6, 0x200}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000380)={0x0, 0x7, 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) accept(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @prog_id}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r8, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}}, 0x14}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r8, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}}, 0x14}, 0x1, 0xffffffff00000003}, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @prog_id}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @prog_id}, 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) 5.715833893s ago: executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x6, 0x14f8, &(0x7f0000001540)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) 5.192933235s ago: executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x101101) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004550c, 0x0) 5.042537054s ago: executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x80045500, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 4.768321971s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}]}, 0x38}}, 0x0) 4.644585008s ago: executing program 2: syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="6c617374626c8d08f15ac6379001093ef76ed8c6ed7774c76f8d2f6b3d303030303020", @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB=',shortad,uid=ignore,shortad,volume=00000000000000000006,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$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") (async) r0 = syz_open_procfs(0x0, &(0x7f0000001940)='net/psched\x00') read$FUSE(r0, &(0x7f0000003ec0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000000)={0x1, &(0x7f00000019c0)="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"}) (async) chown(&(0x7f0000001980)='./file1\x00', 0x0, r1) 4.104894556s ago: executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x2}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002e00)=@newchain={0x6c, 0x64, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_CLASSID={0x8}, @TCA_BASIC_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) eventfd(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x4, 0x2) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x24000, &(0x7f0000000480)=ANY=[], 0x1, 0x6248, &(0x7f00000072c0)="$eJzs3c1vHGcdB/Df7JtfStOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmD1n4eZzxde+2k3ln7+XwkZ+Y3z4z3mXx3vLueGT8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Dj81VEXP1VWnAy4nPRj+hFLI3rlYhYWjmZ1x9ExPOx2RzPRcRwIaLKjc9EvBYRH52IePDw7up40YV99uP7f/nnH37y1I/+8efh2f/99Xb/9d3Wu3Pnt//9273H318AAAAoUV3XdZU+5p9Kn+97XXcKAJiJ/PpfJ3m5eu7q9Tnrj1qtVquPYN1UT3avWUTEenOb8XsGp+MB4IhZj4+77gIdkn/RBhHxVNedAOZa1XUHOBQPHt5drVK+VfP1YGWrPV8LsiP/9Wr7/o7dptO0rzGZ1fNrI/rx7C79WZpRH+ZJzr/Xzv/qVvsorXfY+c/KbvmPtm59Kk7Ov9/Ov+X45N+bmH+pcv6DA+Xflz8AAAAAAMyx/Pv/kx2f/1148l3Zl73O/67MqA8AAAAAAAAA8Fl70vH/tlXG/wMAAIB5Nf6sPva7E4+WNa/1H8XO5VeqiKdb6wOFSTfLLHfdDwAAAAAAAAAAAAAoyWDrGt4rVcQwIp5eXq7revzV1K4P6km3P+pK338oWdc/5AEAYMtHJ1r38lcRixFxJf2tv+Hy8nJdLy4t18v10kJ+PztaWKyXGp9r83S8bGG0jzfEg1E9/maLje2apn1entbe/n7jxxrV/X10bDY6DBwAImLr1eiBV6Rjpq6fia7f5XA0OP6PH8c/+9H18xQAAAA4fHVd11X6c96n0jn/XtedAgBmIr/+t88LqNVqtVqtPn51Uz3ZvWYREevNbcbvGQzHDwBHzHp83HUX6JD8izaIiOe77gQw16quO8ChePDw7mqV8q2arwdpfPd8LciO/Nerze3y9pOm07SvMZnV82sj+vHsLv15bkZ9mCc5/147/6tb7aO03mHnPyu75T/ez5Md9KdrOf9+O/+W45N/b2L+pcr5Dw6Uf1/+AAAAAAAwx/Lv/0/O1fnf0ePuzlR7nf9dObRHBQAAAAAAAIDD9eDh3dV832s+//+FCeu5//N4yvlX8i9Szr/Xyv+rrfX6jfn7bz3K/z8P767+8fa/P5+n+81/Ic9U6ZlVpWdElR6pGqTpk+zdp20M+6PxIw2rXn+Qrvmph+/E9bgRa3Fux7q99P/xqP38jvZxT4eb7XV/q/3CjvbBdnve/uKO9mG60qleyu1nYjV+Hjfi7c32cdvClP1fnNJeT2nP+fcd/0XK+Q8aX+P8l1N71ZqO3f+w96njvjmd9DhvXv/ib84d/u5MtRH97X1rGu/fix30Z/P/5KlR/PLW2s0zd67dvn3zfKTJjqUXIk0+Yzn/Yfra/vn/0lZ7/rnfPF7vfzg6cP7zYiMGu+b/UmN+vL8vz7hvXcj5j9JXzv/t1D75+D9A/r0/zWxf9mOv4/+VDvoDAAAAAAAAAAAAAAAAe6nrevMW0Tcj4lK6/6erezMBgNnKr/91kpfPqu7P+PHU6iNeV3PWn5nWn9Tz1R+1+ijWTfVkbzSLiPh7c5vxe4ZfT/pmAMA8+yQi/tV1J+iM/AuW/97feHq6684AM3Xr/Q9+eu3GjbWbt7ruCQAAAAAAAADwuPL4nyuN8Z9P13V9r7XejvFf34qVJx3/dZBntgcY3WWg6v7B92kvG71Rv9cYbvyF2G387+H23F7jfw+mPN5wSvtoSvvClPbFKe0Tb/RoyPm/0Bjv/HREnGoNv/7Y47/Omb3Gf22PeV+CnP+LjefzOP+vtNZr5l///ijn39uR/9nb7/3i7K33P3j1+nvX3l17d+1nF8+fP3fx0qXLly+ffef6jbVzW/922OPDlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5Zq+Zcl5/9KquVflpz/11Mt/7Lk/F9NtfzLkvM/k2r5lyXnfzbV+8x/6bD7xWzk/PMZLsd/WXL++coG+Zcl538h1fIvS87/YqrlX5ac/2upln9Zcv7fSLX8y5Lzv5Rq+Zcl5//NVMu/LDn/y6mWf1ly/t9KtfzLkvP/dqrlX5ac/+upln9Zcv7fSbX8y5Lz/26q5V+WnP/3Ui3/suT830i1/Mvy6O//mzFjxkye6fonEwAAAAAAAAAAAADQNovLibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnv3FiPXXd8B/MzevHEgMRBSJzVh7RhjnE12fYkvtC4mXBtuJSEUesF2vWuz4BteuwQa1Y4CJRJGRRVtw0NbQKjNS4VV8UArQHlArSpVgvaBviAqVB6iKqCAVKmtgK1mzv//35nZ2Zld73hz5pzPR0p+2Zkzc86cOXN2v7v5zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQbOsbZj9Vy7KsVqvlF2zKshfV500TmxqXvPaF3T4AAABg7X7e+Pfzt6YLjqzgRk3L/NNd3/7qwsLCQva+4T8d/dzCQrpiIstGN2RZ47ro2g/eX2teJngiG68NNX091GP1wz2uH+lx/WiP68d6XL+hx/XjPa5fsgOWuCmrpTvb3vjPTfkuzW7LRhvXbe9wqydqG4bq+y7dNqs1brMwejKby05ns9l0y/L5srXG8l/fWl/XW7O4rqGmdW2pHyE/eexE3IZa2MfbW9a1eJ/Rj16fTfz0J4+d+OuLz93RafbcDS33l2/nzm317fxEuCTf1lq2Ie2TuJ1DTdu5pcNzMtyynbXG7er/3b6dz69wO4cXN3NdtT/n49lQ47+/09hPI7Wsw37aEi77n7uzLLuyuNntyyxZVzaUbWy5ZGjx+RnPj8j6fdQPpZdmI92P04Vay3G6dQXHaX3ObG89TttfE/H53xpuN7LMNjQ/TT96fKzpef/ZwvUcp1H9US/3Wmk/Bvv9WinKMRiPi+80HvSTHY/B7eHxP7Zj+WOw47HT4RhMj7vpGNzW6xgcGhtubHN6EmqN2yweg7tblh9urKnWmM/u6H4MTl08c35q/mMfv3fuzPFTs6dmz+7dvXt67/79Bw8enDo5d3p2Ov/3de7t4tuYDaXXwLaw7+Jr4NVtyzYfqgtfHFty/r3e1+F4l9fhprZl+/06HGl/cLX1eUEuPabz18Z76jt9/OpQtsxrrPH87Fr76zA97qbX4UjT67Dj95QOr8ORFbwO68uc37Wyn1lGmv7ptA3Lfy9Y2zG4qekYbP95pP0Y7PfPI0U5BsfDcfG9Xct/L9gStvfJydX+PDK85BhMDzece+qXpJ/3xw82Rqfj8s76FTePZZfmZy/c9+jxixcv7M7CWBcvazpW2o/XjU2PKVtyvA6t+ng9MnfXk3d2uHxT2Ffj99b/Nb7sc1VfZt993Z+rxne3zvuz5dI9WRh9tt77s9N38/r+HMuyz3/r8Ye+8djn37Ds/qznzU9Mrf1n8ZRLm86/o8ucf2Pu/0W+vnRXTwyPjuSv3+G0d0ZbzsetT9VI49xVa6z7+amVnY9Hwz/rfT6+rcv5eHPbsv0+H4+2P7h4Pq71+m3H2rQ/n+PhODk93f18XF9m857VHpMjXc/Hd4dZC/v/NSEppFzUdOwsd9ymdY2MjIbHNRLX0Hqc7m1ZfjRks/q6nt5zfcfpzrvz+xpOj27Reh2nE23L9vs4Tb/7Wu44rfX67dv1aX8+x8Nxcdve7sdpfZln9q393HlT/M+mc+dYr2NwdHisvs2j6SBsnO+zhZviMXhfdiI7l53OZhrXjjWOp1pjXZP3r+wYHAv/rPe5cnOXY3Bn27L9PgbT97Hljr3ayNIH3wftz+d4OC6eur/7MVhf5o0H+vuz685wSVqm6WfX9t+vLfc7rzvbdtONOlZGwnZ+60D3383Wlzl9cLU5s/t+uidccnOH/dT++l3uNTWTrc9+2hy287mDy++n+vbUl/ncoRUeT0eyLLv8kQcav+8Nf1/5u0vf/WrL3106/U3n8kce+PGLT/7jarYfgMH3i3xszL/XNf1laiV//wcAAAAGQsz9Q2Em8j8AAACURsz98f8KT+R/AAAAKI2Y+0fCTCqS/ze/8bm5X1zOUjN/IYjXp93wYL5c7LhOh68nFhbVL3/gy7P//Q+XV7buoSzLfvbgH3RcfvODcbtyE2E7r72p9fIlvnrvitZ97JHLab3N/fUvhPuPj2elh0GnCu50lmVfv/UzjfVMvP9qYz7z4LHGfOjKk0/Ul3n+UP51vP2zL8uX/4tQ/j1y8njL7Z8N++GHYU6/rfP+iLf7ytXXbDnw3sX1xdvVtt3SeNhPfSC/3/g+OZ99Il8+7ufltv8bn376K/XlH31V5+2/PNR5+58O9/vlMP/3Ffnyzc9B/et4u0+G7Y/ri7e770vf7Lj91z6VL3/+zflyx8KM698Zvt7+5ufmmvfXo7XjLY8re0u+XFz/9Hf/uHF9vL94/+3bP370asv+aD8+nvm3/H6m2paPl8f1RH/ftv76/TQfn3H9T//RsZb93Gv91x569hX1+21f/z1ty53/yK7G+hfvr/Udm/7yk5/puL64PUf+9nzL4zny7vA6Dut/6gPheAzX/9+1/P7a313h2Ltbzz9x+S9sutzyeKK3/jRf/7XXnWrMDeM3bbz5RS++5cor6/suy76zIb+/Xus/9VfnWrb/i7fn+yNeHzv67etfTlz/hY9Onj03f2luJu3Vx25tvHfO2/Ptidt7azi3tn999NzFD85emJiemM6yifK+hd51+1KYP87Hle5LLyw5g+56JDyfd/751zfu+NdPx8v//T355Vffln/fenVY7rPh8k3h+Vvd+pd6auvtjdd37ZmwhQtL3y94LbZs/6+DK1owPP72nwvi8X7+5R9s7If6dY3vG/F1vcbt//5Mfj9fC/t1Ibwz87bbF9fXvHx8b4SrD+ev9zXvv3Cai8/r34Tn+x0/zO8/bld8vN8PP8d8c3Pr+S4eH1+7PNR+/4138bgSzifZlfz6uFTc31efv73j5sX3Icmu3NH4+k/S/dyxqoe5nPmPzU+dnjt76dGpi7PzF6fmP/bxo2fOXTp78WjjvTyPfqjX7RfPTxsb56eZ2f37ssbZ6lw+brAXevvPP3Ji5sD0jpnZk8cvnbz4yPnZC6dOzM+fmJ2Z33H85MnZj/a6/dzM4d17Du09sGfy1NzM4YOHDu09NDl39lx9M/KN6mH/9Icnz1442rjJ/OF9h3bff/++6ckz52ZmDx+Ynp681Ov2je9Nk/Vb//7khdnTxy/OnZmdnJ/7+Ozh3Yf279/T890Az5w/OT8xdeHS2alL87MXpvLHMnGxcXH9e1+v21NO8/+R/zzbrpa/EV/2rnv2p/dnrfvy48veVb5I2xuIPhfei+afX3L+4Eq+jrl/NMykIvkfAAAAqiDm/rEwE/kfAAAASiPm/g1hJvI/AAAAlEbM/eNhJhXJ/6Xr/2++vKL16//r/zfvL/3/ivX/Hy5a/z8/X+j/98da+/f6/4H+v/6//v/A9P8Xwjck/X+KqGj9/5j7b8qySuZ/AAAAqIKY+zeGmcj/AAAAUBox998cZiL/AwAAQGnE3P+iMJOK5H/9f/1//X/9f/3/zuvX/x9M+v/d6f/3oP8/lVWr/3+ln9vv8//1/1mqaP3/mPtfHGZSkfwPAAAAVRBz/y1hJvI/AAAAlEbM/beGmcj/AAAAUBox928KM6lI/tf/1//X/9f/1//vvH79/8Gk/9+d/n8P+v8+/1//X/+fvipa/z/m/peEmVQk/wMAAEAVxNz/0jAT+R8AAACKZ+T6bhZz/8vCTJbk/+tcAQAAAPCCi7n/tqytCF6Rv//r/+v/F7//vyFdp/+v/58Vsv8/nOn/F4f+f3f6/z3o/+v/6//r/9NXRev/N3J/Np69PMykIvkfAAAAqiDm/tvDTOR/AAAAKI2Y+38pzET+BwAAgNKIuX9zmElF8r/+v/5/8fv/Pv9f/7/o/X+f/18k+v/d6f/3oP+v/6//r/9PXxWt/x9z/x1hJhXJ/wAAAFAFMfffGWYi/wMAAEBpxNz/y2Em8j8AAACURsz9W8JMKpL/9f8L3v+PzVH9f/1//X/9f/3/FdH/707/vwf9f/1//X/9f/qqaP3/mPtfEWZSkfwPAAAAVRBz/11hJvI/AAAAlEbM/a8MM5H/AQAAoDRi7p8IM6lI/tf/X0H/f0Pv+7vBn/8/5vP/9f/1//X/9f9XRv+/O/3/HsJp7kdZlun/6//r/+v/s3ZF6//H3L81zKQi+R8AAACqIOb+bWEm8j8AAACURsz9d4eZyP8AAABQGjH3bw8zqUj+1/8v+Of/t/Xn9f/1//X/9f/1/7vT/+9O/78Hn/+v/6//r/9PXxWt/x9z/6vCTCqS/wEAAKAKYu7fEWYi/wMAAEBpxNz/6jAT+R8AAABKI+b+nWEmFcn/+v/6//r/+v/6/53Xr/8/mPT/u9P/70H/X/9f/1//n74qWv8/5v7XhJlUJP8DAABAFcTcvyvMRP4HAACA0oi5/54wE/kfAAAASiPm/skwk4rkf/1//X/9f/1//f/O69f/H0z6/93p//eg/6//r/+v/09fFa3/H3P/vWEmFcn/AAAAUAUx998XZiL/AwAAQGnE3D8VZiL/AwAAQGnE3D8dZlKR/K//r/+v/6//v6r+/ysX71f/P6f/Xyz6/93p//eg/6///4L3/0f1/ymVovX/Y+7fHWZSkfwPAAAAVRBz/54wE/kfAAAASiPm/r1hJvI/AAAAlEbM/fvCTCqS//X/9f/1//X/ff5/5/Xr/w8m/f/u+t//jw9R/1//X//f5//r/7NU0fr/MfffH2ZSkfwPAAAAVRBz//4wE/kfAAAASiPm/gNhJvI/AAAAlEbM/QfDTCqS//X/9f/1//X/9f87r1//fzDp/3fn8/97KF7//3XNN1/P/n99Xfr/+v/6/6zew3/Y/FXR+v8x9x8KM6lI/gcAAIAqiLn/tWEm8j8AAACURsz9vxJm0j3/b7ixWwUAAAD0U8z9vxpmUpG//+v/6//r/+v/6/93Xr/+/2DS/+9O/7+H4vX/W/j8/2Jvv/6//j9LFa3/H3P/4TCTiuR/AAAAqIKY+38tzET+BwAAgNKIuf91YSbyPwAAAJRGzP1Hwgw61blLSf9f/1//X/9f/7/z+te7/z8W71f/f030/7vT/+9B/1//X/9f/5++Klr/P+b+14eZ+Ps/AAAAlEbM/Q+Emcj/AAAAUBox978hzET+BwAAgNKIuf+NYSYVyf/6//r/+v/6//r/ndfv8/8Hk/5/d/r/Pej/6//r/+v/01dF6//H3P+mMJOK5H8AAACogpj73xxmIv8DAABAacTc/5YwE/kfAAAASiPm/reGmVQk/+v/6//r/+v/6/830f8fePr/3en/96D/r/+v/6//T18Vrf8fc/+vh5lUJP8DAABAFcTc/2CYifwPAAAApRFz/9vCTOR/AAAAKI2Y+98eZlKR/K//r/+v/6//r//fef36/4NJ/7+7Aev///yWcLn+f07/v9jbv9r+/0jb1zek//+D5fr/Cxvab6//z41QtP5/zP3vCDOpSP4HAACAKoi5/51hJvI/AAAAlEbM/e8KM2nK/339H+8AAACAdRdz/2+EmVTk7//6//XtWGwv6//r/zcu0P/X/9f/H1j6/90NWP/f5/+30f8v9vb7/H/9f5YqWv8/5v53h5lUJP8DAABAFcTc/1CYifwPAAAApRFz/8NhJvI/AAAAlEbM/e8JM6lI/tf/9/n/+v/6//r/ndev/z+Y9P+70//vQf9f/79o/f//1P9nsBWt/x9z/yNhJhXJ/wAAAFAFMfe/N8xE/gcAAIDSiLn/N8NM5H8AAAAojZj73xdmUpH8r/8/KP3/iQHt/z+u/38D+/933ZIvp/+v/88i/f/u9P970P/X/y9a/9/n/zPgitb/j7n//WEmK8//4yteEgAAALiBRpa9Jub+3wozqcjf/wEAAKAKYu7/7TAT+R8AAABKI+b+3wkzqUj+1/8flP6/z//P9P99/n/b49H/1//vZP36//HMo/+v/6//H+n/V7X/n39n1P+nk6L1/2Pu/90wk4rkfwAAAKiCmPs/EGYi/wMAAMBA6PT/ZLeLuf9omIn8DwAAAKURc/+xMJOK5H/9f/1//f+C9v//bNu/fO/b7zy2W/9f/1//f1XW9fP/6y9+n/+v/6//nwxK/7+2zEeD6f/7/H/6r2j9/5j7j4eZVCT/AwAAQBXE3P97YSbyPwAAAJRGzP0nwkzkfwAAACiNmPtnwkwqkv/1//X/9f8L2v8f4M//j/tD/79V3/r/8aSr/9/Ruvb/37vYE9f/X23/f6zjpfr/+v+DvP36//r/LFW0/n/M/bNhJhXJ/wAAAFAFIfcPnczn4hXyPwAAAJRGzP2nwkzkfwAAACiNmPs/GGZSkfyv/6//r/+v/+/z/zuvv1v/vzbi8/+LSv+/u+L0/zvT/9f/f4G3vz70//X/6aOi9f9j7p8LM6lI/gcAAIAqiLn/Q2Em8j8AAACURsz9Hw4zkf8BAACgNGLuPx1mUpH8r/+v/6//r/+v/995/YX9/H/9/670/7vT/+9B/7/q/X+f/6//T58Vrf8fc/+ZMJOK5H8AAP6fvTt5sqws8zh+EwoqK+hF73rRm47oZf8JLJp197570ZtedEcYLkBFxZnCeURRcVYU5wEHEERUnCdwQnEGFRXnESdEjTLIfJ6ncjh5b2bWvZXnvO/ns+ChUrLupaIYfmR9PQD0IHf/xXGL/Q8AAADNyN1/Sdxi/wMAAEAzcvc/LG7pZP/r//X/zfb//67/3+v19f/6/5bp/+fT/y+g/9f/6//1/yzV2Pr/3P0Pj1s62f8AAADQg9z9j4hb7H8AAABoRu7+S+MW+x8AAACakbv/kXFLJ/t/R/+/Nuuz/8+MV//fUv/v+f97vr7+/wz6/3P1/2N3dvv/Kx78O5/+X/+v/w/6/331/8f3+nz9Py0aW/+fu/9RcUsn+x8AAAB6kLv/0XGL/Q8AAADNyN1/Wdxi/wMAAEAzcvc/Jm7pZP8v7/n/JzY+PtH+v+j/9f8bH9D/6//36v+Pnf62/n+cPP9/vp76/0vvvODi+27655sP8vr6f/2/5//r/1musfX/ufsfG7d0sv8BAACgB7n7Hxe32P8AAADQjNz9j49b7H8AAABoRu7+J8Qtnez/5fX/k37+f9H/6/83PqD/1//v1f//l+f/j53+f76e+v/DvL7+X/+v/9f/s1xH3f/nd5zfzt3/xLilk/0PAAAAPcjd/6S4xf4HAACAZuTuvzxusf8BAACgGbn7T8Ytnex//f/q+/+/6f/1/3H1//p//f/q6f/n0/8voP/X/+v/9f8s1VH3/zu/nbv/irilk/0PAAAAPcjd/+S4xf4HAACAZuTuf0rcYv8DAABAM3L3PzVu6WT/6/89/1//r//X/w+/vv5/mvT/8+n/dzi249v6/zPt58/T/0+w/4+/DvT/rMIB+/8H5vxteyn9f+7+p8Utnex/AAAA6EHu/qfHLfY/AAAANCN3/zPiFvsfAAAAmpG7/5lxSyf7X/+v/9f/6/8P3f/v/qm3Qf8/TP9/duj/5xtN/7+2M7zf5Pn/k+//Pf9/iv1/0P+zCmN7/n/u/mfFLZ3sfwAAAOhB7v5nxy1z9v+B/2M+AAAAcKRy9z8nbvH1fwAAAJi8rM5y9z83bulk/+v/9f/6f/2/5/8Pv/68/v/mLe9P/z8u+v/5RtP/70H/r/+f8vvX/+v/2W1s/X/u/ufFLZ3sfwAAAOhB7v4r4xb7HwAAAJqRu//5cYv9DwAAAM3I3f+CuKWT/T/c/5/+3/X/+6P/3/7+9f/DPz+W1f/n96j/n9v/X+T5/33S/8939vv/4/r/7d+//n+Fjvr9N97/n1j0+fp/hoyt/8/df1Xc0sn+BwAAgB7k7n9h3GL/AwAAQDNy978obrH/AQAAoBm5+18ct3Sy/4/4+f9XnL/X+9L/b9D/6/89/3+cz/+fnfX+/5j+f5/0//N5/v8C+n/9v/7f8/9ZqrH1/7n7r45bOtn/AAAA0IOr759t7P6XzGb2PwAAAEzR1l87sPMXlIbc/S+NW+x/AAAAaEbu/pfFLZ3s/yPu/1f1/P/zFr22/l//v/XHS/+v/x96/XH1/57/v1/6//n0/wvo/1fRzx9rrP+/Zq/PH0P/f7n+n5HZ1v/fevrjR9X/5+5/edzSyf4HAACAHuTuf0XcYv8DAABAM3L3vzJusf8BAACgGbn7XxW3dLL/V97/n9j7tVfY/y+k/9f/b/3x0v/r/4deX/8/Tfr/+fT/C+j/Pf/f8//1/yzVtv5/i6Pq/3P3vzpu6WT/AwAAQA9y978mbrH/AQAAoBm5+6+JW+x/AAAAaEbu/tfGLZ3s/0af/7+Q/l//v/XHS/+v/x96ff3/NOn/59P/L6D/1//r/xf3/zv/QR30/wwZW/+fu/91cUsn+x8AAAB6kLv/2rjF/gcAAIBm5O5/fdxi/wMAAEAzcve/IW7pZP/r/1fb/+fH9f/6/9lB+v/4BP3/Jv2//v8gptb/7/zr59D9+trQP4l226P/v/0hJ/9z+0f0//p//b/+3/P/WYJR9P+nTv/bZe7+N8Ytnex/AAAA6EHu/jfFLfY/AAAANCN3/5vjFvsfAAAAmpG7/y1xywH3/z8u9V2dPfp/z//X/4+w/w/6/036f/3/QUyt/9/J8//1//r/6b5//b/+n91G0f9v+Xbu/rfGLb7+DwAAAM3I3f+2uMX+BwAAgGbk7n973GL/AwAAQDNy978jbulk/+v/9f/6f/2//n/49Q/b/6/Phun/zw79/3z6/wX0//p//b/+n6UaW/+fu/+6uKWT/Q8AAAA9yN3/zrjF/gcAAIBm5O5/V9xi/wMAAEAzcve/O27pZP/r//X/+n/9v/5/+PU9/3+a9P/zrar/P3dK/f/1c97AUP9/6rj+X/+v/9f/c0hj6/9z978nbulk/wMAAEAPcvdfH7fY/wAAANCM3P03xC32PwAAADQjd/9745ZO9r/+X/+v/9f/6/+HX1//P036//k8/38Bz//X/+v/9f8s1dj6/9z9N8Ytnex/AAAA6EHu/pviFvsfAAAAmpG7/31xi/0PAAAAzcjdf3Pc0sn+1//r//X/0+n/868//f8m/b/+f8jq+v/Z0fX/955z0O9mT/r/BfT/+n/9v/6fpRpb/5+7//1xSyf7HwAAAHqQu/+WuMX+BwAAgGbk7v9A3GL/AwAAQDNy938wbulk/+v/9f/T7P+vWh96/633/57/v/3PR/+v/x/i+f/z6f8X0P/r//X/+n+Wamz9f+7+D8Utnex/AAAA6EHu/lvjFvsfAAAAmpG7/8Nxi/0PAAAAzcjd/5G4pZP9r//X/2/v/2ezafT/fT7/X/+//c+ngf5/fab/Xzr9/3z76/8v0v/r/9vq/8+ZNdT/n9j2Oedv+X39P2M0tv4/d/9H45ZO9j8AAAD0IHf/x+IW+x8AAAAasPlrZ3L3fzxusf8BAACgGbn7PxG3dLL/p9//H9/xifr/2Wx212XNP/9f/z/T/7fQ/9ePqv5/efT/83n+/wL6/zb7f8//1/9zZMbW/+fu/2Tc0sn+BwAAgB7k7v9U3GL/AwAAQDNy9386brH/AQAAoBm5+z8Tt3Sy/6ff/+/8RP3/7Iye/6//3/iA/l//r/+fLP3/fPr/BfT/C/v5tT3+vWem/9f/6/8ZMLb+P3f/Z+OWTvY/AAAA9CB3/21xi/0PAAAAzcjdf3vcYv8DAABAM3L3fy5u6WT/6//1//r/afb/6/p//b/+f9BY+v8LL/yPO/T/+v8W+/959P/6f/0/O42t/8/d//m4pZP9DwAAAD3I3f+FuMX+BwAAgGbk7v9i3GL/AwAAQDNy938pbulk/+/u/8+bbRaqm4b6/2jU9P9b6P+3v3/9//DPD8//1//r/1dvLP2/5/8f7v3r//X/U37/B+r//2X35+v/adHY+v/c/XfELZ3sfwAAAOhB7v4vxy32PwAAADQjd/9X4hb7HwAAAJqRu//OuKWT/e/5//p//b/+X/8//Pr6/2nS/8+n/19A/6//9/z/S/7vXP0/yzO2/j93/1fjlo3h96//cMg/TQAAAGBEcvd/LW7p5Ov/AAAA0IPc/V+PW+x/AAAAaEbu/m/ELZ3sf/2//l//r//X/w+/vv5/mvT/8+n/F+in/18f+uBR9/Nn6qjffzP9v+f/s0Rj6/9z938zbulk/wMAAEAPcvd/K26x/wEAAKAZufu/HbfY/wAAANCM3P13xS2d7H/9v/6//f7/f/X/O15f/6//b5n+P/+JPkz/v0A//f+go+7np/7+9f/6f3YbW/+fu//uuKWT/Q8AAAA9yN3/nbjF/gcAAIBm5O7/btxi/wMAAEAzcvd/L27pZP/r//vq/9dmPfb/nv+v/9f/92Q6/f+1x4Y+6vn/+n/9/3Tfv/5f/89uY+v/c/ffs3asy/0PAAAAU/Xf//bQu/f7x96z8dv12ffjFvsfAAAAmpG7/wdxi/0PAAAAzcjd/8O4pZP9r//vq//v8/n/+n/9v/6/J9Pp/4fp//X/+v/pvn/9v/6f3cbW/+fuvzdu2TL8Bv8PegAAAIDJyN3/o7ilk6//AwAAQA9y9/84btm1/0/t81e1AwAAAGOTu/8ncUsnX//X/4+8/5+tqP+PP07/v0n/r/8fen39/zS11v8fn42q/z+1pv/X/8+h/9f/6//ZaWz9f+7+W26cdbn/AQAAoFHb/ovCTzd+uz77Wdxi/wMAAEAzcvf/PG6x/wEAAKAZuft/Ebd0sv/1/yPv/w/1/P8T9Xue/995/3/l+uDr6//1/y1rrf/3/P/Nj+v/N+n/x/3+9f/6f3Y7QP+/MUhX3f/n7v9l3NLJ/gcAAIAe5O7/Vdxi/wMAAEAzcvf/Om6x/wEAAKAZuft/E7d0sv/1/0fQ/191fDZbaf+/j+f/6//76P/3eP12+v9/uuDkbf/z/zdcp//ntLPZ/+fPBf2//l//v0n/r//X/7PT2J7/n7v/t3FLJ/sfAAAAepC7/764xf4HAACAZuTu/13cYv8DAABAM3L3/z5u6WT/6/9bfP7/NPv//LE+gv7/5PT6/2yKe+//Pf9f/7+b5//Pp/9fQP+v/9f/6/9ZqrH1/7n7/xC3dLL/AQAAoAe5+/8Yt+T+Xzvwf7oHAAAARiZ3/5/iFl//BwAAgGbk7r8/bulk/+v/9f9j6f+T5/+f/jzP/9+k/9f/H4T+fz79/wL6f/2//l//z1KNrf/P3f/nuKWT/Q8AAAA9yN3/QNxi/wMAAEAzcvf/JW6x/wEAAKAZufv/Grd0sv/1//p//b/+X/8//Pr6/2nS/8+n/3/Q+Xu/Af2//l//r/9nqcbW/+fu/3sAAAD//5wGXmI=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='cmdline\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1f, &(0x7f00000007c0)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000950000000018765300000e00000000000000000000bf91000000000000b7020000020000008500000085000000b700000000000000950000000000000873d965a5267e65f5d710801c94edc0928f4d43e033ff0dad12d5fdf4030f7e90fab8336a291e9dace293bd59ed01d6743de21c7a9568216e9e7afc65f4cce618887b662ea090a10a3a31c99f9ec81bb4dd14e22bbb3f2ad22af71274dbd33dc8"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001600)=""/4096, 0x41100, 0x30, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x6, 0x9, 0x6, 0x7f}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[r7, r2, 0xffffffffffffffff, r6], &(0x7f0000000640)=[{0x1, 0x49f, 0x4, 0xc}, {0x0, 0x3, 0x6, 0x6}, {0x0, 0x1, 0xf, 0x1}, {0x4, 0x2, 0x5, 0xb}], 0x10, 0x3}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.963356679s ago: executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x0, 0x2}}}}, 0xf) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, 0x0) 3.388294986s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000340)="a6", 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000380)=""/207, &(0x7f0000000200)=0xcf) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6cd17b1ad98d48ea9487f82e00"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x0, 0x0, "00fcffffff65bbeee896f374c77246d2056703c2b47dfa2de1d9c027116565299965c63b40a6e20df0c7ea4d62000800006764acd64f3119056d35c879947c7b4b7d92d3fa877cb4bc512d299e0135b8"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x4, 0xb1, &(0x7f0000000400)="$eJzs1zFqwmAYBuC3oW3aJT1Ah94gd+hRSsd261Rx8ELunsIjCB7AwU1cIjExZHYwIM8DCby8/wff+P/r4/I9VdK85awZ+fuf/Xz9tv9VBs/hjhRJyiQvbai6vPvsuoe+3+zn35dvNPo40coAAMCVitRJXvubfhZF6rprtsOZj/YtcOjD02i4vOmqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJM4BQAA//8fTCFM") mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus\x00', 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) memfd_create(&(0x7f00000004c0)='{@$.$\\]&\x00', 0x2) 3.103724449s ago: executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/66, 0x42}], 0x1, 0x200, 0x0) 2.194364635s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0xa) 1.969122073s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@struct={0x3, 0x3, 0x0, 0x4, 0x0, 0x81, [{0x6, 0x2, 0x8}, {0x6, 0x3, 0x4}, {0xb, 0x4}]}, @fwd={0xe}, @const={0x2, 0x0, 0x0, 0xa, 0x4}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xffff8000}}]}, {0x0, [0x30, 0x61, 0x5f, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f00000003c0)=""/187, 0x8d, 0xbb, 0x0, 0xffff6482}, 0x20) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000011a40)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="737472686173683d73697051050000006d657461643f74615f636865636b73756d3d7878686173682c6e6f636f772c00"/64], 0x1, 0x119fc, &(0x7f0000011ac0)="$eJzs2QtUTt2j9/2rg4qUiihFDimiECqUc1Eoci6SohMpUsqhckpEOghRCpUkklNKIqRSRCgUKnRWEUUH3rH/z23v/3M/+36fZ9/v++49xru/nzGuMa8557p+a665Zqu1xhIAAAAAAP5beLDHrcW0r+HDnWu++cxKc94hkBT5R7vE7w1k/ig9/6tGiP9M4qIK/yj/vC5OO880LNhhaBL885RV7JX1UeJOCtqr15vpJxtcqbCTN+383+X+Xk/D/q0u9E1IIHAIef9mb1Zen39pExIIBCJCMr4CgayQcJas0J8iRrUJBILV/zrO/7nzxrcxdv9S+gaI/0/tPf4Uwnr/703ij3V2QrXxk5OrcV7QkhFGw/p6rvD9t02EJP5pPQkE0tZ//r3wv5NrY+ugobF2jZeCpfeGDb1rE0SL91poFMaWv19TobJ/f4FwQ9342U9eeG/sIhAIuv7x+Re/V6vC753/Uc4TCATd/ilf739zXIP+D49f8y/qyn+UYn+Ukv+bnN/9A/8Pt/8z0T+V3f6Dv/+P+vfO2f+Xuv8n7++338cp/UeZ9kc57D+YI/L7IyQQFhKI/uu1eJ3Qv60RwT+dNyGBkKDLP11HhQTC/6gL/2td8I+64N/qQn+qC/+pLtLlT8f1j/3+sdBEhIT+5/bf2/2pfcAf7aJ/tA/852v9v2PBX7Qr/lFK/PGH+v13XfDnL/+D5P/y5V+P6x9+j6vs/2Ys/xmE/+ka9O+1/x6v3h8nQ/KPNkkhuf/lN7/+Hb/7Mtb52+e5TNsl8xfjELok9Ee+0N/Kn+iqdE3SX/O0wl/lWwv/kS/8t/ILPk9Q+iBRdO0v84N+54v8rXyJPNfArfV31f9yfpp+z4/o38q/F+QZ2mtatdmAv8qP/p0v8bfyP4ta5v/yTQ75y/GP+j0/Xf9W/qVlqabfx1zc/5f5gt/53f5W/gD/B6lxe/uc+sv8O7/nR/Jv5Q/WvOSf4+826y/n/8nvfKm/lV/2S7u5T/6DpL9cn1N+z4/M38qXs1dXltm8bfhfXTuFfP+z/8MCwP+/9PzjHsv/j/rffU79f+qfnheOyQj9j3u+7n98pP7f3NGfCP3TswsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L+vVS6nxWdEGSrpz5f0mNTycE6QwZBK6at91ov+0S8uKhD8y3chEYHg/dGa/CfRU/Yuu3EuZ6v/1kHjxFOKJslYnXpWVbcgOH7bba/owr6TrbvuWmBWKjouMCOz/GyTqVX0JUWX0UtfjLx9Y4ifvdUJb8vsiaNG114TxE8ydotbf/5hS5rOrV4zTh1Y1SVvfe++0g8Dn21JfKTd7WqBTPi55+/ru3z9PrO5dkzPEd3bV4flfB7zrVy29Mb1qB36K7QL591trtNSiJTq1fI6JHdmw/uNDw8futXnsI7oMLubC8p0jCcZyWvv+qLeS8EqU+jLipyfJnP1dB6cl/6SHeU4RVJWzLUgZEnQzq+be6hdmFdRUHJ2asY4TU9/hY8a41KURH8+Obcq29Ry7JLC1W8PyIrGzh++1Utjss1w+6E9pEN7vdH3O7JxTli79dx7joPLYs0fxZ/pUbRrQpNYqM/TgeJf09bta3zyuMBi7DULzVD3Z+da03q6GeV//7TEN8LVsm3zuZ5e3nOEE66MU1xXrRB9TbpPUcztW4Eveoxxy2rbLluvkhntc2KNtd1U/5ZzBtme8rnFT0U2BA6d0LwnLiN6+BhPr5LZPge8DLIKZC1nKIrl/djyZMOFJRsqQoe3uogb5ex6v0CvOMhSctw6z82P7X9+jHbL0LZxLFCU//musXnKcqt0yeatsjfHS3WkdD7caHx54PyGCyoWn3uJC2V4+epofJrU9GLqlqm+pT17zRnRYfx2gYP3MIG1SpHY7R8y29bv/TFWREJhgNyp/Emm8VcS1OOttLquWb/arcL7sWbtDfXGF43qn4a8SQs7e0g9fbnySr976+bdvPcj2EK9drGR5Optvw593xH8ycP0xftLvw5I3/KrXalkWfMg67nGpu46juv2dpk2zFlsSvCw5/bfd/vb7Ftr8nKd4Qb/Xs7XJpxOezAg915Zn5/9dpyo3KS14lRXzYjL43rPEzu/+pJBpvRV8z5lNSHPZb5EG72yXzquuFLbpCQu0Gl2tqxR9cipPy5/nOlRWC2yWyvV5nHcIPPSnNEXY7y+pfp87Ju4s33x8A1HnA26jayXkBMJtU0aecXwk/r8e5MSH/W/2CXY0jv81f5jnUr9Sx+u7vlKsVbnXPxF0ZztUiftTK1rr55Zkj2xT/GM0o8Dz66ffO7U+vSwIlPr1e2nx70T1V3Qp7lBL+Kmr8sQs5bRs2rigrXqr14uVq0OdorouivGwVs6fVCH+MDwk2FeB98aP5bvtuXFvPihWroP7Ywi03+oLSq12PZDep/tbTWvc+/NJzdeK+3rmq5r7Or+JqC0weFMf4f+p/yivGYtq9z04G2xdcSwn17LzocaVi4PDxzjdcPi1v0D8yw19CxKR0oNFg5bnPc9wbZAqXb6rbaZ/ndyRiQb23ZqONn2F37vMShw0Lfh1SG1FckeCsJ97BR2Hqr2TpJ7M8RoVv9+I1V2hIp1ZBfUWAUcjY83mr3wu7VGc0Ckx7mW6UKtXZO1Hjvs0workhwWciJlX6JioXqrvkj1PtnjnpfkJ8tFLinWCHybOk8me8rwmtpvfR/1DH/2U083vjDko/G0vbby/S67zDs3r9R8+bvV9muVI1dMVbjp41j96q31ce0hK145xuqqGpnXRTusvnNoUEnMtz63w7SV7z+QvT7gepGL8vJc2zHdQiPu2c239t6QGChTHrNuYqOR/CJ3C+GZUy9VhclVmtU8aMiQz7Q2CZzxZr7qpx7KFcctWqy77Csbbv5kaKO+fHcXp4vTpH3Pi/3cn32+MvmagfyOTSYve1qkXTJ4MHn12KQqp76WCy/s9z9SM/Dloft2iWI9HR49lbHcPvncll09DF8qWijrXDcdkXpP7KLpeqvOr3IKKZtzPVdU9e1ydohPoJzkoYVPg/0616X4l9uc/Nlfxayt6UGPErN5k8uH3xC2GCx8feguewvnNQt1m44N9LmQPEtp+6ut256Ll2+vTDqjrr+20N1FyeroXPMavbLk6pGrumnsGCO7QKjq4AapS2keZ2NEU+bP/ZJjPyJiSVDbuJ3Pn663GO16KMT4nm+Pl2XXi7Kk3ytLFcn/FPg5S45XKRiwbOUXTcOqzLIpIXMKtV8MfjLB7J3dvmUvEyLfdoS8Pz9gg0etdlC7UFladKDzXOlaBTsFI3HV7J3J4z8Z7Lk4NU/kRDdjI1Pz0hsvSzSGHDFfdatLlYXaaOmgFVo1ufVHN6Y5Rz4/rBLqvmNO2fuemvVVo7LEHdvdljzalrNtQ+FgtW6eij1ltA/PX7Ass26G749d4ZK70+Tuyg5If9XV8JPENYcAofjrodeGDsxxf7534lmxX43jhteOXbVgx5EhOy3LFaZdfRKek/w2ffDcLdJKrZLbb7z2G/O1Kqbr91vTP6it0nzTJfNV38S9cT0mbjc6eEpyp0n3XvdmLX9nbq5zKvHN8WmlZSVdS7TXJPdXijAS3OgidqOjdufmrW0JJS4iedNPGdYe3d5fN89R805ZTTeZR/63F9lue7rvTHqWvVK/JquH73wzb1vquS5W7hjcNDCtw9d5RfM4oTTDkZsG7Jyvr/nppbvIsemL1Q6v3OMmaB+16aXSQSPbExvav+78YvP82VxJ6ePummpyUU+FJUQ00z+cOyaSduGAV9LS/NxVgepZ7vuOS+zYfW5W+NrgBB1jCQ1N/dRDWSve7xuxpcJgbkyV51vn55Uv3Y4LjTLasHTKuVPackJKLebFi0bGuF4cv6bIxP6MhWWuXPPPK8E/Twee7Iz2+2Zwf8f+gT8j2/fVr9XYaxBqkdTj1barTnMH6Tcuj9cLaRd5uXVWgEun6FDZlzsMnj8J0Tve78KhIrV5g2YJ2cSKLZx3cdaBYU8mbPTOsHTaa380skRjx7aTN3SGa2W722wQ2h/2IiFQZtiMCqFlizs07737XH/CP/3IqNmaaRMX3/N6sXzcto9BuSXhiY3miRePbl5wN2pmTZcBvWdIFu73WF7TXZAcbGZbGxh5a2DFYJNDDRd2du+7d6J7aWS+1ILefoqPquziig4t2SKWfFoi9OvxAsuK3HvvEqasTNu08FWD3Nuqk7dsQgfpZA091THzhK/pkOha8W7yc17tOL7COv2drkRFQJTRsMgTaf0yCs9dCZs2qI+dsGHdx7aS6msZweFuw652e7yyzPq74poIVYeJXrfSGw4s85D2srJvF16UIiEUFfBKpf7xDZP9uYfccySDB83xTr7ReKpinPOOPUY9b00US9Zfplb8On2qiqnMMMGjtp3PjmdO97o5Ys2Dwy2ptStOPOlSc7PebPB4lasaVZ2rzgibDul1+1V9wqigqV0m39KJSLwsk1rz2vT+jTnTd70b4yPjIdp//6Snp1RMrruu0dk25pvRc0tzt3S/qQUD3x1zzNtyf4/SjAsKvffM37o/M8Nh2tHkiAuK1T7Hq8LqAl75fU9oeVaovvKL1vSe+6Y4e7pn5By58i3p6IA7B+8Grx+rerD4dZW9b22G/pMRs4dsvXryga6ExMc0J/G+3Q4s2+gu9/O4Ucvg1ROevygw+Baw1airbJddb7MmqzfpSl+ZLPfaNPpG3k7BJMOI+vLU8GTHOzO8V9edD3491yBwXYT+4RalF6Fe7WunzFy3tuv1r6aOHn7mC0dVpb/uEL0yylhDaXyfhQ+GJebn2BhE9b4Vu91XyiXsWuk+/+C0Xf4Dh8xq6ZitO+67bUGTvVeiWmPnkNvN4TMvJysWLG1bOXd7UvOR1rbADyZRt9Kuj/H9ICQ68OjbF366+evjVBNH7T7Y/Yy+3BMDb/eU2l/Vfkl5+79M+9GqkyNn8KDV8sLBPj7DlcU6I338/AdLPDj3w69t//uLhh07Bj/OM69sUfGRb5v6Y7b6U9vc1llux66PWvblgmuUnM27Bv89il/zHnZk1D/WW2k9WXaEduA9j1zXXR/9ortG/TCwtNyT361JUzem26wtCjsl961YISg1ld6UdTf5lNh313MJ+7aVjpgUJ3atac0pOZGGNx8mf9pdHP9J2/7JjbZXjxUV/H33BgleiMUc233/psHntnUxEyKV1cZZKm5Wfj49oOft8FPXzIQv9RStH5XiknTL/FaJbcic/gOXCcdfmXhh0+Ov3X0X/fJVu/P0QMjmseJn1Vwnvp8Q2EfiXufXtmkXCr9/6xOUnp8+1Ki5scVq6fe8APcv1+IPn2m0rjB2cJwvdbPea/rDD90LX72bd+X8i26diw48MVL/qPI6/eKc46pVx14v+rXx471riQPHp/SerB/x1rOzXGeR4U+nBQcN1KS/WHYz33PVeqfKKv8aGa+zFu3jrZfqqA9WOrV6g03D7Y+79Yd8T50SFr3DbExDahfv1UqrhaWkkkRvHRiu5NRw/9DTvscfZs3ol2oh8UB71pOTY6Lm6uhreTt1S98ybfaRAOXHTkdyyp07O9ZFT0kKC721KV0z+8WwltGtb6IfKjj03DLVWi3211PD11sWW9xQ1h1u1a3x6nL1+rjLL2b5bl7WcDTxvIezS5GQnOozP6v4b76JD0dIybgPfh8aU7co26PuTtxFg7opki5VukNauodXdttb3y7wainJFd6XcyltvpfVzZZ1q8tzWsfvTdTbl3f/sO734d3uhOj4X3So2fWkyGb58qnJJ/JK6ytXrl+xVKTHs0/Jp9xUDU/Ib5HVyWoTXNGuWy787Nh8XVWVfGfPFT2Hvjg/W22T16XnS03EPq/yG3pmbKXeU9mJz960J7ye/mPfltuHJl4Pyg4zyH2Vu/HFu9Wnq2a3XI48vf+2gohQ+HDDwbIpB29tWOY9ymjJFJ9I1+RM26qMrUd8VcYLSZ+1OOUsGRY6V/WU1JCDPS/2j5XJ0OpevdTjacvjglUFYypqjxb/8rdt7xWSIZE55Fnn+lmJT7pNT1IYv/d+xMGWbqqb8qtXn71ke03mY0j2rrKs7rvX+8fuKH462G33quN7B06XtNsQFqx1XHnC1abpK5LKs2/OCdCIKz924lG9YWFVQLO4y6L0a08aR26LPdGeEXlxeXLxiMtPCzp6b2oYbr/itWWS37pF44Z/Gmp2Livs5A5pjY0n2su+zXzyPbgo/3JRt9iRcmp1BtWXOhd8WSoTeLtiV1Zm8rrrvSf2c7ZTyfq2XvzC1ATp6pKHxVvv1IbemtsYl1FaqjP8gWJPP++tT9dkLNl8/ZfgQ5D+pfyA5ONJnZH6np8WaWWe39+5wU5eZFme/bH7N0wWbu9ro/mj5wCtyenKvds/Ck8SUS48LiVSp1dn/UNC0cRVrMqwacktmX7h5jL9nZqfDa48eXLQgr1xtX5lFl8yJKyFlk6M9xdIeP+oaLTLHbCim3hI/vKp404OWT/tk8e8xTYzBq2Pmq7+deryUBvxNjGxjrnDL2+xGDhiwhZ/7XfBGbo3ptRIJ/zcq3Y/xPuR8JxJr0V7jNrjGWmcJL654tFY6+CUMw1Lriwf+Mm1r/P0nG/HbRfUhdd/7pk+P+XlvJRtZ2XiJqYqTa7+Nivz/r2qMSL7NQtbb6ce88vWz/YX+xx3IOKB5oyAEcoHOztF94UYyynI36+ObdO2W+ottENZxs99t+2bMDNj/w1HX6XoRO/ub/wq/Kd6+fw1kYNPTDpknzmu8bx9Rw/F/VL3LSzUp5+YdaxcvYfcYUXrXaenhwndnj0u6qRwe2reKMWvFtLpyz1fmMkN1Zx5xubTVJuegtV+27Q2ZuXMcZJTtjlbPim1fnx8tWxnRlXb/ORPqw8s6dz90erh8DtL0vs59bA696aqRmmb6Uqx5Qerery1zHpxvd/RK6G3osOaVLr1dF2U5Gh/c4nnzq72ojcPljsudgg+4tAoP6ihcbi3TugwqdpJ2zUT80707G/8Wm/w+CEjlfUG9VgbeTBMZ0J93GTxhNvGAY/Pbfa4/TNPPeOiSUybTE69Resmww7vA4aHjFp7r50gL5o39MFz52ML1ij1Nu3bcdhO4H6u6Pi3PWbqWmkqzwr9ZN+enay565R8X4+nUqUHNT7tWHk54cOXSIGn3qGAbRNXpmw64Bn2Mic8WFAl19GwqDBygqjghXmYtK76s+mdrqpz5FeqvHw73sRy/oyxo0c2KI8Yl3yyUk+7yXPZW/9p/Sy/XVRq2KJYLPtV/nmmjesjDbf8V72SDLQvLvZ4dnXzpQ7l0B2OQZuTNq3dO/nI3n53a3aOE+h0O9bsI3GyeXi6nMYL53mu6y8MTHy2MGtLnNgXv4gjFn0M0zpNvpwd2+PUjtmzSyea/Jz2+ktc3ocFfmu14xIPDF1Srrvo87xZ1tdGvD9odCF7ZO+x5sXBJ0NPy0mei5wR63Di1OCJhZUfOo+0bQmvPahQurp46ZCMimzZXdp2a8slZRdXDNleXzNKfWF1lGGB0+f0jzsUc7xk+uW65njKJ+WGWukdWyGu82CrjuRztRgTzZcS8hMGi38z22dofU5QYNm68bJn4aIKmfJy+QSXjjFWMu80Hy1MW5A5YupF95CO2bmnZ/c/fmObut3x2QtfRt8+5hK4IVr17VCH8WvsZx+cnT3qdX5AcL+8+EnrEoN2nd8ScnJ123XNrYPyYgunPly951Rmz4+DNw/psSlu8QWHik8mX+UG/erztSz5mW/znQm9tj6b9DRgzc4SqRKDyRnKaoOMRo4cET+p7IHqnMeqs/SKpWY+Wr9nzLuJr6ylfQw3RXfZFLbSZarCWwV91YflDhONTrZZax5JSbx25siHyiXGqZYjZT95Zxyx/zk35sS6kyJftL4syX5X7b7eqiVE06G1bsXBHU6Tds39uKbmhMr5vs7NWm6G1knb4rMdBWZVLpMudkbU3XI8uf79Y+d3Xo79f9p63v6w06V+d7+QKyPK1oTc2JxjFdDL8fzl9a/fOFs6xrp+Nh6ytfJH1Hr/frUtPSerhrS3bjUIc4q/rXJzk/XYmbFbmwy3Dj5zXTlnzuqWR34TJM8+PXTstou27K8prTO8toucnDHN9OuDKzf19spEHZb54fBke8wI35XN3xbuGVh2c4bEa4O8oiOfdg8MXmYo0zHGT05aqUv5bnGnN/t05P0sTXXkDgTNXX6+w+N7lXZ42MTPvdUW/brsLqQy7V3hcz/7/mVvdcMmOHqGmg+ps51mXJTl6NYy6Mxp/2P2/fy6tnwP9goedcro+sy3Z0QkTr/RMBo86ZtO28Euuqdmaz0zafywfM2oXdf1Qgx9ZVbNOdhzfeZt4eBQM/tp+z7lqvaJWjjM5t6vxQ7vWqWkpsZnjVTq6560J+iOwGdZ18MqV8xcThW4tZlkNw4tHB9XsMHqhWrv4s8/pw2+7FQ2Neze/rWV76t9vCLfm01rn/JTNbafYUBDt8J3H7q5vnsglR3zfILUJk2FYT+GKL65sc0nar6dzJHLNvFLk0fJqwde33V6++0Txt4Pv1i8N48zqGpI8Z7kN/2+4lbHfe7FoqbuaXoNlz7lnfhifCV5UOzMjQ9SDL3FJusvqXtxerJht2V2boMUH1yfJvEt58PVM6+meW/d1pbUa9yCH3suLzV+HL4ttC7oybcjQvd9okUjh28rdqyeO9IyP77NRmXt59ySS9OdN3813xOy+nCA/qGNO1vPHG+RTXhXmNb0vvGWQMfMqOmbt4Wq597dK1usJWRXVuXLmQ9ebnmhv6XUFrU7MosqhGtsfbtqLN06ILI4S1C86Vz3jU2qa5UrPhc3uEea3jkX7XDy+yTfqTsNjynvtZpz9sfPqKy82dPi3QfMadfU62okWzPQPuj9ex8j37PJuhNved1/lJUzadGz9iyhkImS4deyGjSftzz2HRq/oKrX5JRfdf2a3JMu3E1fHlmruN03bc5ikdSUvBi5jP7HWjPUd3TEal1qnLD4TnyM+5Yr+SMSE84nPN6/ZU+uSU2Mp+0+7Ty37W+LP6QuHKHqs9YpJ6k6JFwqtSKx5Fd7dXWpw6f00kMvk/aenLj/YdTZrutVglJqMxbmOLQMi3M5rtx9o8GSoVt/ahTr1vawlXP8EXThq+fR44nf5Tyun5d50Xqs8WP4GquNszS21fepVFoXGykkM7l0jPQws22WdxY4bVyStnuUxIKEZot+K56OaxoQmiLsMfJeN4fWsMnhPkNVvix/JZKtse+K+Ovp65uv2l32nvl5yJtRX6+o7Jtz1svRUtP7Re7B7mGrhHzD7iV9rxrm8ExP/eLEpTLDfiU8eF8oZ2VS8mhfQt9s0zmHFm1vGRLbkPvWM7Y9yPeJ00/57s7OEcYK8SKj77reH/LBtrRkUfkS5c6HQcOVT71uHNne2awX62KmfHGJacWShq1RPQrvRM58u9C1v67r5csJTpEtUV1ypRtrZrTPDncUCZ+/YubxvBdXSzO/ZzkUzFP2mzn1cVyO0ccz0ftXrzVv7WYTWPLeJSlnp6NfUvcZt+1CVk8fc7NS2X2Z0lPpNW6dmV6jvNq0X6g/DT3lfexgm2SoTLmb45H524RUpvuHr1afIjrAYoddnMS++NMBb7Y/Cb16KTGmWi2watH6sZsCZpksevzjWWcvQUb7aMudLdMOV8iVBncpshN+bu8Qa5fUtvmcxOczHQtOdt2R4bg28a7+p466PdsCNXyCFg1UMGpNaIzIXSvnMufkaHljT991L933zaxS2JOnviFq1gqxT71Gf0xVsbewWaq5aMKqzepTD4nWFVnKvlG8n6MUu2TPrycvZl907q0+rb7ZN3780dmD4hxHvZ9UNbZZr3C1e+Bppeb/4tcXAADgbzAT3dP98SuFQerNA3POD3AT/v3+v8sf/b/f/zsICQRPZpg2iBTWb7gl6x9XplU9yrNOQkPkjNQy6/6qk1S+3p95uc+kSDHh/ROVfh2qXfz26nj9/cuz82pygxuNnaaUb++WkyDfmblzqNNJyYnjfaYaTo/NCVQtWT6mxbSxbcLu7D5SE4Knt+xb6yP/5aXck1EWIw7mL5oWVGdyRe7wbcljxUpSg/oGj43Ycyw90eaY3yALmRNDO5tLPuaOVjO5uf1ea+yQda4Dh4zr3WZT+Nhkzq3HG6Y61ffoaxX93ev8+DkW7jPcqxzFAq8OPJZaMq/tQ7tXYF37O4k3lYW9I4rrlp6TeCcj9SLp165fi6tVTjvc+LJH1urZ3rk53qebcybmVGusUoiZaC8es9dzUkXxmwNT5p1QkwwTq12wWFpqXbD4wozZERnWAS9dgtouPjWtzFZoUla8Kr9wVHp3lZC2Wbo66ycdLglJUEh5/vxyYb75LFmdX+XBuUrvjuu/9HH5kdIQpHgpMTRTfF2nsce0ww3nqtY+mX9pxMirlUudc8yubgpYl/qxyrp+/9tHNdczbyxf39axVl2qxLI9bn+6qesUD7HutY/6eL4I7b++11cDKz1B572Uok1r+9wa4KVRHxszL/Xnz7DshUXxOZaR1+7VFHVouYueTRIa+8vlc/IuW111D7vWMsukp+ev1hQtb4ypWmAesUv0elnL8Kq+8jlmU7LljjYVpyseCtte/11/6zTVU+UvzZYqHVrz6pVFatqWX/4xGQ8PpmTuLLt8ZFiXw8pWY0f0U8vQ1e6SKeHWrTD6R3htD/GTNz+/Dh+tEnvd68KjmUKifgrTr610HRBVEl1110FxdOT6Zo9n+k5vr5s4pK6dMm7svkWC68pr59asii4OGD63r/kD73WWBW7yvle2jHLrmGcZKdY1+OGQZY5bdHetXesy3cJjuli+Xq/Kh48vbWo972YquuWh/vejXXz6vVlQoN421cvVuOd2a/UvI0c+69Z/eWb77h/axYobVLTuJRTM/BS0Y3ZVsfIVa6/73Tb09Ir/puP1zmq+h9t4/eyRS60Uxt+97Zw1+FF91qqzWvI7nBYN+SytlvbmdkXuvNF2IqMufl+3Ty24sM+39omXzlRdP398nrNLQbTXqOzFJ9+5B3YP97aLGBoakGT7abTxkOCBt29d7Zu/NWKFaU3PuoPTHEc37hyWfWVcybJDkT9GxeuWGB/9mJp04bxy3Z2Tqv6vRgrbBwecTXCx/vV6rs7ZfueC+/rYNVlM8SpfJaQr+9wmfWhRiZLr5Q8ffGSVG++8vhuzsurBtaFWF1pCw0d0zfn8Maje6ZNga3a37U2lgc3pimrVnbcP1XfeSZnXcfRM+5x7wjKDi2wfL3ufe+pHy4NDu+4Z+Bxse9k97V16oa/VhrEHbB72u/by/TWhGW9Whu+1DRtW3H/P/SM5WTPf1Iy2KTXUHXm3Qy4g98lP7+dXeqzru9Bnb/ET15man7JuqjXpZI5yTo9bnBUYd7V21XJtuz0SvjllKps0Yn7JDYsysX3W63LGjMLBR8NHOfS8qDalvuSVg4bC4oBWfeF3NlnjBzWv3pF45NmoVTZi6/Ty+6wL1zObX5nV486WLjF5o6vXH/YfuvL5kOl54SXa41yEhl3oHPpzxlH/44O+2Baoj35z5IlWy7XIPJ1xJotLzn4f5KKxxcqgYmHcxI3WktIj9c8+dbKwPL95T6/oBwu0hnt7TgtZe6dp0usNG4zHyHb8kP4x6/TGiIH3f7XYTdsxukFW4d7ZXuZvzmrr7PvxYtup2i43cpSzco6qXyhJvBJw6taILSEZUyyTFrzMlyi3bt0zY0rFgHJ1O4W76/yn37w7VN3CoVQ63Pr+tZin2iavq0c0X967T+j0HPH3Jyffvrprgsf+LMmrZy7M1YmITpU/8MzMeXZOwuZlugumh6ySzPS1dK+oKzwm0K7Nar3QZH8x5fjh1L7xYk+m11saPz/4cF9LRHxMa3G6y8ibTjPMC6NkT3getdX4qXIkNmdkS69zshs+aNrrCnYsN1ju/m3+vdivsd8Nl96ReOputUvwXCN5T29PA6eH2hc2GxvJ1U9Ynr2lSP+F250lltVCu1ZZab1NaFDSkDQ2qY5SXfMq9pTZVp2C7PoJUxcEXoq74jdwkIF9z1Lf7RMfRSVNvT1d+unSCHe3H7PaDl7x2brC+rD0l55Flk+XZ7YovSm//WR3yuEeWacLYhv29T67s03ce1CUvULTxuN70wrGPPtWPOW+27KSZZ2LpwdNlflwc2PW3bDAZeWRDeIJX+fqDRHen7/gsv7ndWfchkZmLZEOn/MrQinzgFq0o+jFLi8r19r3mPQir8dBQ7U1VzsGuI3W7HK66OWmU73Dxy883F1lx6VoWbezJSNOVOe7uq+80FIZNeyy2fIovTf73yobvooYWVf4XXXdovM2zrrjW2O+zX02+7Ck7vJ+jw/vtzxy9e7ZAp0wo3En7OVOv92k0SOryWrpkTD3+00heyscv3re1DiXm/ZrmOss6+8GR3wO+w516JF24bDdHMeR7VK5Tb7JKyu8jp865mbrst5SREQ0P6LHzIAF31dpV8pMHp7kOnp/YJ1Vw/BDu+bdnf7aeW5Q1PnW+I/RgXFp4ft/ug94qV9xZ5+5Z3TgvPItIdomXy5sG2Cbf61HyaOnrU3Rqu1m0qrm1skr0kSE8kIv2bVtE2QWJe7Z1TxBP9ch5vI3ycoFfrNfz9yaINsxYoBcx+AKf/kp6covr45xtx1RNn1m1I33AU8OZQpOqj/tF9nl6tpV52I3dw8tCFxWtWy3box1i2vKrSORqs1Hls6XUCy/vmuylsrkewG1KTq2o7OXrjIPztk6f/QzBR9h2826M29W+MwWBLl06y7VZ9RZP8vbOv12vPqQ3+VYfOpJYbnY42UupRfva3lVjX1xd4Totafp7/Snj1+8aJzl68l3c2JK/LVX/WjdIrrCqE1t92YV9YZV1SfrLvVxzTdZInc2+cM3MQ352xE25527HX9ornszL2WQzoBPu0rlNdq67tiiu9f7tY9v8mrx1ppHezVbr1dWRcbuqVZZZxc9rGX/lWPtd7dLHPvUe1Nd32N6McvDpdakSozstUtvtlTqMZ+dfX9VfKvp+GLavvL8lTsypat/Slf5NG7YoFEmE2fSbtJ8/Ozx3E6hBaM9erwrOm9ard2YsDBkvlZuFzWnPuGdA2v1O4c9F7nc5cfiSjU55xUrnKaNveDXpLz0cot/huLX1RefF/z0OFR4wn7GpcyDEV9qP/+o35E8acHOztNdRk9rf7TszPXuDb98x8uom0kmZh9wD0s49L2javH20SqDCpYt8n0lnvUiw/ZbzhF3Da1RC+McI/Tn6XaM2HwptjRg+hjZ0BaXha7aGpErRcu/XZCOWXF1loj9g3jzpcdMPjYM6VJ0fOu8baNnX+xpECQyVFIu4Vvir+r9Tn4nszbahK5f9azH4xaFva6HL52bpLnTQ8ppWcS9owVWrnFW9o0fHIq639tYVR7qMjusYuRQq/IP9osLT/cSTAk9KpLYc97Nb19tMxITDrSNVNg/fqys3JgRBsbXkz/mOY3f+z2kem/D+HGnU1xOtKR/Clt/VlFlVHpF1k3r272NfB9ZR6kZ3wqKKreRl1ywQtxRtFHnuXhH3pz+J6d+amw3W3/zfLjj1FXnNUXq2p98PKc6VPlm2giR+lepIWpTvYa29QpzL2uKFB67+0KRXNTW3uPsmj7n9woMGPyhbu3brheGyiY9TstJT4yyG2tpLj4gffaZT1vjFg9oW1K+sGy+WmiXdwY7AofPdFC8Z/Vy1lmt11Izz7/081QzOuki5irbcfmS0fA6NRm3SZdbA2y0nLO2lioNSNzT58rG7MuzlU0zJ21PLClNa1jb291MtbxTYBw+teX2o4wyKT3XX9tXGIdKOD146SdxdFf826Bdal8HN8dtcvHVam04f2/f14iL7eMabgs73o1OnxG7fNHZ97aKa3Z3/2iQcu59wcdGzUHrU66vd3o9f/KHHrP8Z+SKlTiNWFyQMajMKOlt/auasvyNS0weHFEakDbM71GGyMNHCtIHFgb1m+T4X3zbDwCCouozZUkDXs9qPNaSMKVLZI/fz/9if/T/y/O/qkAg+CwQCIxiE17c7iqU6zhs7eeSgiFtRlpFxx6Oc9nrKCQ6S1CWPd8oosLp9RvnyYUjN558mvPjpW7+44Qux16bRUeErlp37dJmzeS0M2Y3PlTZPMl17d1zTqWvtMSrX842i7L6TRJzfl8h3kvXZ/OmEzNmjxzxzDPVYmrLM+Xpg3KKBEE3FedJ5ah1Zm4z3ZRiO8ZSfIBVVMWPuBtjZ5XVBKYM7JA0rd6j4KAnLD1z8k7ttbabbItmNfukXDv8/O0lwUndT8emNMzMsu0f5d3XcPeJjPbhUQ/Nutucv3nk848Dg43Fve9mXLu1v7Eqwtlz+K2uIcNX/nrmNeJz5XW9SXtWTU8OfO6xSjjp2J4tA9+o948rL+z3JXF3mWJ2z2VPpktlXZ5WsLV3+WWvjYaPxgU7/Ojmlu/2+tLcNwPsXs0ZEZxvmHpHbMTKtITAgv6D18bMzorc5tl4bZxtY93lkIJJXrrLjtvVtPZOkVNdpm2jbq++89f8zM+hj5/+KLp0+lLl+W2jm08e3qyodGjWwDGHpqV9OLI4adHNgOZbIqGe9ZXLA9c0yW14vCJ/osIX6WWq+iJi8XGe2WfcnY5KnZi6vHJbxIfvLh8jm7d8e5M49o7X+J1bhygYSsrE9Q7QvCAnVXPk9bQ+u/WExCWv3Kz1lDfffGKeUWvDlfs6bvvfCM9ctq50s22Q0mAXXY3ysvW9qu9qlyfd9jgpVD5knriNqqHK6Q82nu0Dzo0rFWl8V/HhnYKL7gZx2Ud1K6sP5wiW6hdO7Iy8lbWi7lrRO6VlXQfIVIXcauseVlKw7O1efZdVc9v76W0Xkcr02zDgWWKf6sf6xSLdmyvGm+yPuR2gUe+RNbqmcqOSsVfGCtUxOqtlfEoXX9xzJS80s8yiaVWV1GSZgR6PEsQ8nJvcajdFFFQ37Yzt2FEo+Jmv+yb/u5aam8WAKGmNccvfnnoQNufwFAWdAd5R9rFRcarz+3gZiW8NtlJPD65J2Nc2e57HuJ2jB8ScfnvW8bH1sydJHw+Kxr16s+hHntcd0VW77tUsTai539t3zx07P49aU/sViw50+SB3Qyl2jKGl24/rvhGnzDe4bZKTj03pa3bmxIZ2+7DUohljVIfelfK6Nnf1gTU/ov38eqTnmYzvM+Wi452p9QZBPXUzzCXKvm3s6ltelh+dtvNV6cM+CRJtcwwCRgf7FxqPEc2aM3XYU/lTH6uC06rvi0t71Iy0MG64r5r4QtqsVXWGZdmqmYv6dUaekYl69vTNk7KRq7fNqz6X2Fv0yiCfOY07du9uKtZKntz31fX3R1wOzfZ851VhEmv3UDT1npx5ke2gV9YDYu4ON7vq8kLrROf4jp0K0XcESgM2exuMn/k8u+z+4Qm7LqwrkD+tsalXYJ/Y9JHbvj6at8r1st/x1kdubluOqnnPevBwlEi2SEKBh3hAqtG09Mdrj/dc3V/uhlnlxrG2acdrex7MD537TK7Ztr3PQGnlwiXtDduP9Nrs0W+EzoCAO13OdqnMt5BQOHBWKc4hffNyc+W9ukmWn1df3TV/yetIuYFZE3xOxiw2v5tUF/Tw/NlkxVD5QXIDF305fDyn9vG+z3PMBTKB6keLRLeYFE+W9ZmslGsz6qe2V97LhIh1q7M0e0yzd152eeLrjlid10OEvkksGmNkemt56VNht3S7NQ1BXiP1yrcaLVSNdf40wmPi2k0uegdUd6t3zBBVbHsZfHhczw+T5p6baZqq6TjRt978RPy5Zumxj7TPeGec/3n4uqSp1hKzp10+xphVnx862iQ2/MGUX+1a4/eZpIXvKV4w1zPVLnHf3TbDBHUXmQrP1GV3u0q+XeAu2b/HwV7DBo0Y2mPk9yTvB7lqU54tyrxy0HHJx5lrDr/v1tZHQf3ckq9ymzwNtFdMlX49zPLe1LNayqnn+qzZeCdk+pdU6Z9CPTeeKFllv0U591ZKY5Ts1o+Vl3btz7To9WFkc0ih/uHonJia8+dupEYlf1xxqaShsrHvMoP5YqtUL8pWPFoZlu52evG4S11PvQ1Y56GVqa4ZYRzbf9zD1M9S8Ze+rNyYlhKdUXphfvLwo8lPA2SspC7Prow/MEh3kauU125D1aaiE+t2jLLpWp8mqrnJPHTDi8GX6mb2d5jWvUJniYrWTUOT8WaNGr0mfVQyczkxYX7QgxsrV9b1ElfqW9r81DthoueM2rcHtr7R3pM7Wvy6jf4GPfH5M3tfFnjWia1JSdXsnaSrpxh6rX5QS7jUjqRS4fFnBlT+2hRrmqvbdPaI11qJaSMXrnQb/NSloHjrsX7+a7akK5yyzrC+VxVfrHZ3zNvtByYumtNzV8KG0eXz15hafL1lumn//8XOn0dj9f594/9pFkWUKUKmSjIriUyhCClSpmTIEDJnyDxlKCnzmCEZSsbMiZAQMqYQKmMkMie/dV33+30Nn3Xf67qvP37fz32t9Xysda7Xeu3XPo+9j7WPtfc+HPCU41qtfD60d8K8/sxbHeL1H+LTW8af6/JGfzc8rWQajs6uvxl5hL7Mz5U5OCmGWsTRgCohRdxNIiTSkrWK+brOKNGmej01e7V3q/GAjso4idWnlMKUZI1Lts2DjTynK496tJW1kf8e1lPdKpWTejxMEx6uwPjhFTej8HVTx12P7O+Yeg98b8jTKJeWIBE0kjQ/bnWiL14+pjm8pz72wZEdE1tPt2hatrxDkyN6g5yIHh0LtXBZNs1i2Ftrfb7h/fVzQ56X2+r6a1QlOsJMVbvvzEwRD+q9LNzsGnoUoO1ev8XBoB34diTxsNvM/r06wZqPn9/qspSJ/0yaPeZ+zeBwXdu9VNbkVwwvhqnVjUjFbBaCJc8f/sXyT359AAAAgP+BrtJHzs+2e/hrM40cGH2/4vv3/J/ir/rf8/9FAoFwLuf+Cc76wWMnOv8Yhe5eI7c3PD43zHuVv0xwiyyY1Go9srhESmZ0O3p1gsz19HeFmLT9vclH1hNaN41nyfheft+sEbg2vO9Gm533iw/bnk9XS1w23uYIlosSs+jVZ9Y8cSreyS728eTp70X1srbGS++P3AhmMrkUOHqeOvudvZXF4Zv+J/tDwo05aEwzJW4It43GBSeGlObKbY1oZsjLslrTvSk0/X3Hk+pJ2e8jOrbLny+0dijtmPs6ERd1V5qv9qHTL0Xv+rMcR7sz748L3mmaOXDEq93ryKgiwXH9zu0plnmJTb0/109dorygULPREeN1SfuYs2mAF7erv7bwUalvo+2b5QEnXbpjfp612H/xbDyDdEx5gksS2a2Y2QUjoRWqgzkyxobZVckl+38lF17fV8jhf1yhuVz31B6fM41j8awRDvvHiIRLaol2LKicz+tr2/ZhpOleiBlh3k8kerJuz3bm4sGMl0xtj+b9eaJqX6uTRQ+26J0n5q1nFD9AoX9qI2xha/D96IjUTZ7aIdYwAaMV+rePZRtlUm7unt6y267iXX+luUDt8PONnbsdfUKTAbcDSdVs6AFN1TMjq2coPpEEh79d6SCJUbBvt5BhUHfszSe4adFPxR932+CoIjjHxRy6eG8+uXGuV/etXfidRylZ11SXdNp8ii77srrGfJwuEk5yvFhwOythZfkT0aTBI+Hrcz+9e0OemQVb/ZFOcAzh33rzbbny0/sPH/Plb5FGWLofUWG/8u1wPoffQQnC5zBWKs2Mtax7/L9YOt7r23zjFLrXPP2A7MVb54CnKoOdZbUxkqVlu5LPR9++55ASzadnSDNmEF2f5ZEeQlPvVkR9YSM+oU/VvDzg3KSorf+2cusb31+rLM6Nsfc81ptvkDR4XDx88c4prY4ban5UD5vOLU+9evG+z5dHopMhIdtQ9Phuv2z36HeXEini99DVqxqutxMfTvfZG6++l6sk13H8XcjtY0wfj5LdszlNqDWKUqtx+fY5hixsQu2Pha/VnFTXwDipo2rK+ZLwVNLdD5bj3pOOWTzRuxDEX7UkwrVm12XCUMF5+HIOUd2a/uKUtCZn+zD3K8b5XZS0x2rZ7d2/kdw+s1etNmRec/q10kz/2Xs2C65SJ1Y0qz3mxKIrKjlKGbcfnPvNNMd58kDpZRcxcRE/LjdFnbxT1VQvHrUfT9btts0mssl42+llejlQTOjhd8PyBo5UU9Z3Fuln3nwUEqfx98yfWGm0tZcvis3T94unnPyUL1XbfrlLNlpTh/7y/q+Ctm3ih53m9zZL9fzg2ftwh2XLW881MzdGj6mM1sTG82cFz2R8s9UcGas48ePBkWu0rWmme/Y86g7kPPHi2+hNW1vxHBX557UnGEP65HrJiZWmp+R8HKti98raS7KvylR5Pt7nY/lw7WBO7oJqrKjXmfubQsWWJxp2eM8MHF5xEjG8wBTL90uE6AsXlcdXJw4ziq1RTyl2rti1n+f0W3qFL50KuXpeOWVgpqyIeIrRhJZIxOjOG3XW0yX5O/29Skg5Xje+qZw+p6S2pSFea5VCcFp/98n5192DsvPBqS/rUy+w6xOrD77IS1ZsIfIei0xpsRv1Piy9fiH1Sa7yzeqnxFwblqdcN715OKzfMZt4yRG+ieze2acj6GWcrz4QZJxgcktqbtc7j2J2Ol5NYR51afrap6f3UAQLeYwNPzkw8Ly52sb09pszb002s4KEZy5TyfnzDikovS18ckV64mgqnbXrBRPJV4IXPD4+ZB7gpyoJvhbENG4lcp19+ZoTX4LGZfrgFrV064ONYYpuZeNCCvm2R8o4FhePj0a9/H1uzDlXRbGPniv2fZyHQZ2cnnNi3LnGokHlaRErF62K3jiNK2Y3ne9sJcXvpCSSrJ/N1+e3eP31QD+Z2jualhYdPb2jpxlDn33pI6f+rN7gqbPts5TeHrrGa3G2ca58dmSPI0+L32SrUVv71gpdD6WP2tCoYbj06u26Rf5C8Qgt8QwLs5wnu0yNbfY1xWh81tVzUshd3/B9XP2G5tVBn8VY3ZljVg1GOxz0b/Nrq1rU5dOv81wpVpDk4BVzLRUKGOvdyqz/sOTJZMN4w1VAU0emqPV5kZuTYr7Xi8Y9LYmBVC9kExnnO9jFJYXcvpraELseT33zLMpe/cezZ6LXJ2PuX4ihV37Uu8D/UfhWFteFSxR+ys1xdn8qK+lYWm1jBarPXzq+n8x0/Wby8PKjfY/O+v0gLz1yebEowdIzhLmX6ND3N1uiip5Z3HcErL7oJdZ/iS1yNHiaHRijn3c04v3UQ+NuwrdB8UCS8idL08JtmYrf2e6N7uOf+2N28aempHvMS+bmkLBbD/gVTF/7lX90P7Q0bK7c8bLja8dQaTHlG/+xk9X0xiwHOIV455Wvul4wEN2Wfqf1a5Er9WfqkbfvvNfqj/N3jhgkl/tTjVu+c14uptB9XCCxvp4znV4euFFd7xaS1+fI+aR6XbuSMyKGw/nYly6NAamk47vPSXYePM5bJ6PlNb0lsHHc1N2TuKulr/Jd/ZjzS1cC4aOqc5+X+afSjo85zatFvo1buQzc91c8XlN4fGrqFZ8KsNA5RVLIfmyU5sLkF6L8Fz7vrDU56KkiZa+8dggNNg1Q6Tn24qf3MwMjDhPHnceGq1o2Df/JrxEAAADwP4jLue86Q87NonrGGZb+Z9/V/T3/p/yr/vf8/zWBQBhma1fI/qr1Mqb2mJrw12PaniZv7CNfyH5SC6Y9cu14nKVjvFfjfV3WA5q7zDPUPmmtXtUk1DG8nnV7P354QCjoi0eAeIQr2T3ZOY/DzvMFLAKNkfa/Vwyux4y8XaldV7Kt531/xVP2pmPKMeswscS79rmnB1+psPm8UUptyZy14zFaXus+SCLVne1dcOjP3QbZ6dLl4u8Lkj/3NkySJzIzu3iWalW8FlduMH1ExLf6ycy7zsC6RIzpDt+Rs16zTG0Vt8c3a8V9fsQGxpnFkJ6UzHS0vGzoZRn47IiYcs/VkKKE1O5hHsLuxPZr2vfCyTcad4U2iySdfH6V7rVPkXrQ/O6rrtLTgc5GXh0Olc+ID0l3hijrvPq04G36knZWvWLQm/vF55rkq/M2VDtvbXcED9C9b8o0XVohqLUs7NMKJh4zd3vUk6vcpCquTjRNXtufFRYmURi4FGhM7evB/ZPrq3+Qgg7VQs9PEhvxkdSF26kisz2taUk3U3vvnGz5QtpR454XbHLV4tnV8xFdez/miCXqx8WX6qd+Nc/Km21+a85p2Tl+22+ALcZuyLHXJ5t6S7n1mbyo6XjOgwX/nbYq82ePDDzXva0vGDRIfc/Ma5/9bJ2RQGSg5XWhIuXjJ5QLHqTYKjHqrR//sqzDm79bbmcLvWn8McP59PhrGvctRUWTzubo0S2cSlgeyTC9fWiP6OtFA70syj3XSCcLGX8EnE2/whWxtSFeOzdz/hJ5gHdODEdGmncft3wa08+sJ8w1brtaWF5J3CxmHKA/+bJfrLSN8Xzx7edSnz9w2tRdH92ue+LNl+lY2epObahDLFIgo7krpOWM8iUPpZiNN4zuX7/djB0bF6fgPzinRXA5/DYqVd81NVl58zoJM63FnSvhNffD5wesWTg+mLEqv2zd9DvnXV8TQUKkZNjFPTVya4Oiu054xXwqmf9VlobfAM/eMcKHkFR3/ZWgG5QhixySid6cZbxP/yTuIUivfw48OHa43KTeQM9cp0jhnefrYW8Bkm2RVtuVYqtB25D5Ox+Ivh857fqsu7zawl6lKEw/a+1nnvZMfGiO44DXmG4bc2aj52jWFf/jwqrTrR/au8b6Q6XpDyYzaa9Un/D4RTIlwa0bxRl9dMn/npTI+5t1jk2F8i+019oK5SWoXq/zJbaK+ob1Pk6p06VTJHs2UBi80UZ+c28U28Gxn6P8HUHu1zbWzz+lDB+Q6npBm0bHw/JIcLhMp1jhEO2YrJ4ZE0/Dn2+VWT1FT1YdiFSjd4vrzf7SepGUeWd3ii+p54kxSvmwSZFQvYW3JRUx0tY3aHa8eC520TioMvLRFaIVzvm0uEUX5+edQouCavuyR+WFOZpzdevf/XnL13iA6cXYerHmH1uLRvF9ZRKiO2dqG17KpVFzrui8UKH+teWyMqGidTyaW74ve19P4Ua4qcCjL2U7qXhq1q3K+j3chL6ynRZhvbzKTsazy8yDlyWblPOu5ZcGnY75dqbyr1d/TvmEV5zSHX612VY3kmsgEKHnc3raXbQ/NM6jWIAi+u5HF/kK7tbYppGmXPfIvuhk7UD/3RvGt093L3zTJD71+aKvj1pZZ2tR360yxpCE5cMscmZOFI7JvYYv7Y4OBt7yNdSvzdfbs/VEqI+Jb9zYhd9f0VHkpPRdYr3PSa+9PbsL6upu+WuYLqSz1Z04VHma6qtE1ouMhg12Q1Nm4Q2Z8UTl4CHbGOWJ1wMaUSmH5caeCtdNpDew6lEWzrvoL+mvudtEV/XcvaX8aUu9P9GHdEyVa3LPRT0Bw++njHT2yBOZq688+ZREzd3+bbBS+GF2yc9xG3WL8+s9Ebu5/fO+zKZ85Tw2PBNh/6yT7AzT0FSsliY5De1dddlTy0vlAgUtVuWzv84pKLXrRAtJGn+M6FCxNP7dTpRYFTzYRlroHx9TVd7l/mZXXl5Eg2UCx5aa5JBW03qc56kjUhe5vNmvc2bz63KG7eJzuEXh9UTu42F1ieIm4zLyOF87u6396psBNNKxp7e7z99IPVnA9oftXqlLtqx5lsyuoVQzLq3KEQr/Ab3m4qQySie9qT+ir+/YBRprRUsS0hst7iQk6BpvCMT2+HyjcB265ev+5oVmy8ikQ5D1/lcru14lvGL5LUijPTCCvwcHAAAA+H/c4GKkjCKBl+bibUIyWwIL39/z/x1/1f/j/L/4ewKZwrQTO+mc6mVjNeIAoq/C1a+6nO9/1eJpCvqQ4OPSNdobvVOG46qg/YbIrl/sZrqPwuz5x055nAlm6Ek2yaxUtzGbl6Pr4drvyTB65OwHM4ODUUe3894WKqSR1Ah9OZ+9U2441vlA6/sAR8tH95glewfer50lKd+WXC76ExTQ7XjEt4pQKXrQ/GLlDdfP7Lc4Nmt2nug9lvLLrlS4+paunqQjVfqLFTvGZGMrlWnRD61p1l+JblXyyUT/PvqLY/vKsImO29H35OxM4v3pm/2bm4ILkVP584QPRqrnJzQ8OagnAp/HdD63EpPec7dUk8uVdE+7stknp2sFnvvYGOXsDpVUdIs+v/yYOpXfmJooq8xpSfvTt7fZ3K5/hJ56eoRlMRuITYyrys11mydy7WB3cmkrL3rtTvxn53FHPfUrxCee8XFTZTS2dGVW9Eqm2XDvU36Y56N4hs3+ZZbCfdcx3xumsyTmj62JTmonJB+YqqKclLlb6uhZXs6Sqb5JvVzOpk0dNXA9L8Q+w9ThqfnIJ0kfta7dTev73lKVCouxJdC86m9au7R9q0S1xvLFQH+J94UsFzfLMtrAYvF9oRd+POn6dYU/UfbzZ4OlLlcn5pBqhmchfZmiJGJi6h9rjUhrubd+8JsGLjIkH/JWV29euyBU5DzoRsJ1w9WCNnSv++Ef2s9DrJ3rL+q8smnY2MPv2eFAq/7TzYEqY+yesRbxicWzV7Ybc+fyFHdpshexb1GHMEidWhX23P2Id7Vf6cN9r+z9xidy6Nq18u6d3IgTopWLeyhttzNKz71qrdbWpezFx4L1V8aVRxrp7YR+FnqJG9z+8vAVw5vBhfujVl++NivKjgp7WTzvi6fbMZR8jHvxYlriWJmDt1WAmWmmvk/G8uVg2TO88xPj8alBLGdZs5NniuQY6LQFE8XKeYsqH9+cTKHkyXlvrr6U/U3oobXKgQHG+c9UycabqRZdiVONlE9XpEgbZCqmO98UtLHwXbQLSVhnU6UJGW8LLektt20g6RcNVxXsTKE6VfCFM0CldKnw2gwVY8NLNUV95tKxjEdbIZwtzCTmpDekG8yHMtsONWgEdYczR72fTTC6rHssXs/gSc+O7q9kAnldHvzX9+7YEp0hEQyXlAuRW7T7XNXsXWXdbuo6JEObREFef0n5muHgq3118s7uCUna2txEXo8HloO6Nn+SPVnefqp3Zq8c98Jw5qcukrsmUjqmcZp6XXd+z+x5f1HBZ/zu07vC+YGn+y5bu5Swjx+1vtFd/vZCy82r1S6zJFadIzJyg7RsIc+ujV6tHNaiVRCe7pc85tMxuJLZc/WThtuvP85ME0zRequ3T04bmgo8C1Gc0RRKnfqkcTd026LiRafSn19Kh5dGT9sGXLB6O982XbH7KYEr+F7wwOemqnSyTjmun8dbDJ7VLa52prt+uxbK/7v4l+GJ4kPuTuc+hmR9y7RfK2jw+WHw9Natlw9rJFh55mbDPWJY9w0QydUr8UkGm1mx+FclDzkcjfBkX2FpiOMTOJDXksHAFOP5gTiegTqr6U1LtgWdnuze2lK3F8QMJ76ev7M8UX7+vgGDTsdWc0Dj3Y+/dKkmDOV1jqTTn/2aQ2n6W0tbbSBvojty34Q87bfGribv7eOxgaerPx9zjNI1EJuOsBacIuJbap1sm79I47bY21m/S+3TLos/h8cNrivZ070p6Qt8QFlc8V3JO1U1o4q3ofj4dsM3GQEFTrNR0mw/4QCacfv+2f7Th4UfiM+PMNe7b6+x3ol5/b7E5IK+sELp7wLSB1m0DxW1+BK3fYkfBgXcSt8zdLFqNVuozzBFrUb54TLtgfOXzI2SdX5q8F60b9C5QPx5xfhE18mvismknMtT5+qc1Hj3MyrOL/FWVHCn1HjY7X/79Nmu+rCQhxlkj0Qa5B+/OdEYN/FoJm7m/tDxG4bHYn98Ngj0Yb4boHr5gCBHnqCB4dLvQ7W6Ed3Lr9jtnfQ6ve6b9YumrmSERV4bPlfn+ONgwdvLArt5V8c0DqVNHtS5lnE9QpXicfYdXl+XBR0tRtMZNUEyGkqFqpoumtsniTrj7gXcFE47nx7/fneCjSbrmuYFQ6qRPIriMtIv3/aGTS7sLPmlXV881SEkTu5KorfFSHKUz0P0n/w4AwAAAID/Qsuqwi6G26uZQd4Prlf0jjz4e/5P9Vf97///10ggEIj8XDvzKQ9nHTuSn73z0NH6Qzey77nuWNo8MxJvUx9oYhKmNSb34X1433WiLUqPAO6IsTGtGNXEFrrE5zd4ZG24E1/Heux+7C+1M+mJWy+rDAPjnzNWXMc6uD2pmB6fY5n3MRWrK74b+FizNyvztKFoHCVjQ9bZhDcJbbmNd6T0mmfTgvXVav1Uptv03q/ThHpbZxGHmh9qfsrZ/aXxxzn2p9HkZWcC482fhT+omhfOW0vg2Rzh5xunKiYTTXJnbzr6nDTM/8ZcRYdugTFDkz/XVY214NAIhfsWLWR2o3lHE7ida2o+yRfcO7pfNVdf9vvbV+WUl0anD9NRhl9uV7tMWmXhql6V/DVAUzNdR8uitfbRuyQ3tY3hvQU1vU9G1C6Tqn2UGB+0+SbP9meJND4lvsi8tO/DSLaH33DmWN/qjCEz0febWefvePOm9zYMPByQOb02nDd69xWXPinXuwdHdzZ81yK9lmYYPt3bnE6dNsG1K3h6uf8b8b6Bh+8lau8aLO+oLf/dlEx+n4OX6rRfoNOlqyJuH+tnJNvJBrb7ghIX9l59lBqxf7NEbsOOua+3T+PQfWuO/rII8ZL1B4H2Zg9fc3LQfuKvs505qHo20Tzldq3qtBT3R+Yh05iTTixdOikFHS8KdOyCHwiybenanDytTVnu7bBemHfFulfr27CzLev0alubWtZDi133NAlxQbSJjt2VU0x/SJhz1m5Nub0YorZd/aqyM8ZuzUNnqiaCwS65ovJZatbTXI7+pmA1raMi3y2s24xEoyn9Cy89pvtFR+CJss/ha1q5s23Idq2i6JsIb8dbDenG8udTyVl8jMaKPQ/O35C9M6vA9ZtPMzJXvzR/8OaLC36B75u3gy8/PLzRmvvOoVDiY7CgTDrtMOvtd2TszbNeQo4BBROM7NuFM8Shub9dW7o5U7Pd+SetPs5TvTvG1rmpsN8haqfVWmuOW1T40+UlwrGpHxK9kqKxnQ/muhftg+SFvxmm3Fnez3JQVEshVUBh38ny1mgZx9DLmrEX9uyXdWrK9qESvRPAcvMLZWRv2FokR+X1taZW+hIqnd5dBRdk97TSNBQltnbwauV9iPp5kayaJUnlYr1m0nHP2iW+E1QXHojtrr0iSWr7uUvuClWCKKWXRI9e0Luqxo3iqfuq0893KNGsSgUWu2WcylaRcX4YN3/TzlLVyNb3T8W5TkKOCcW7T5d+eOwSeyPm7lvuKn8n7XHCPS3CrvR6ooeE8woNZaQHT7TamQ64TSVGWBhqpjedFIn6YGyy62e1Nvey7qsnV3K35alemfT4Hd6eTphUWaRJOuoqsjvldFDjzP2TC/xPipsP3NwaY/faDFmpnVHxsR4T17u/9/z4ePC7yMPyF9ZTQjtbuKOufntXws4kpv4zse3rokmQsPOifcBnZZW81by8yrXZB+Lx0bNCnjELsT/GH77lYwy6kZ7A4r2wg/eFtdBjJpEir9WdJ1ZcLkgHeZtfVaXVDx967SPzPYY46sLkWSH9M2NV79q+CT/nDaUOLpM0vO9km2sm7KaXwt87LHx2lODJmauRl5zLfealk415C8+ntv5rry/95uzSHqCcSB2cZdsOCNSvX2gmP3D6vLpy7kGFPcp5+4sP3b5XQ8Fn8TvgdGMkH8cV/iezsnr9NUd8RPvkY2LL9VKSgo/elF2ePxixRFEfL6eppWn3+UoAa3T9+fwJao5wtaAb99dUz96gSmBfrXaeeKJfRkpzXuW+VmfVjr7TL0tPG3cf2bir1VOfL7yarhnyuXG/8sHRDQ6RlsL26luDa7vz1tUjFybtftsscJ54vrQqxTzAwM+t35p4vfmKgV/CUcta94iBqoefpTmvF/k/GGQUT1IyWnj58TvFXUPnsHYRl/PS/L6NNfnHpXPvKdd/8g+9dENrI8mFJHnM53DgQPZkp6UmXc8uakd2lvbhdF3l18lM5/fQSQuJfbKvut2SpiFS9qny3Irl98xKhif+d2jOhNBsX9Yj1a72XpiTqWmYXbQTKY427KO0PfslJ2Y0Z8Re1YmroWA4/2BvgYTexZsSxKftbZg1qp65+yp/V8/8PGOj782aeWzf4x0Zo4y2P2xT22sn/Cnn6O5d6RUi1isZK5lQjLlMs7Ooh3w+tzXJNl6d4VB39VZZ245I9cGBf/JjDQAAAAD+DxSTf/Xuv3WcrDuuXtq58NerM6L09WOKvwSEx/3d5HZ6fDn5xTz2O4fnRkJqcc/YXcm0kqZ1mx/mSctsTwtfTnIF2xQ2h9fTVLhnZ1up/6FLX76hdMD1wcPRN18sUveY5OlzhVyfPEUSNnorJvzRld4eN5cjDuS7SXRD4/Qb9ESOVJ8j79ZNifU4c5OHdDfH9yb+Sr4lUcaeLOJS+YodFIWaJaFEuk6bypUFjSk/T0uN0hTdGDxJo/P+TTT/ffyeKQAAAAAAAMB/w617fJ5DV8M1/btMyGy3NCv+Xv8n/qvOTPhf6/9axARCisiIVOCbxbPjLc70t17O372t1d4gtN4WG/e2eeWJPZXS+OVR6bJlCZPLl89O3yjk+BHfEV7BX82v+963kDefzGxpJnTej+aGQG+NAPWDc+qz6X43etQsz5zjj7MvqRa7JhH1QVhUtbJYKF606lxzwNKXex26IrdcpbuEMofolc8dNx9vUKH27X2gs/d+AUvDH2KFyY6vIs2fOEOsrhr3X85W6MhOWPk8UZvEWG+aPqqWv1ZIHtnaF0Xr0qHTkUr7M+293aJ9AOXj7oxJkytjj+jmbnn+nvhSEjf3kPKq0ORqTksMx1qbq+YJb5qLcXQy0ftOXMpOJG6s3/3udonFwIfSQtZuE3o5wgtarRdVovvoC032vJ1+8q4sY/65+A8erZnYpLSR7vor10LZ3+qRsKuw8V2JyV0Q+ZVxbn7nxeJYJ7+tGLXTlTZhBlpNbt+SDzrVdZxhaVlTYrz9s+RNxQZTLulZp6814oyiqfuezwhSHXDWEVZU+PYnedL3qTqPSpq39hJlIO0e1kMqr3Y/69SOynnGZLf31eo0e+PWxOhNU44JzYOtTEVyXcbvi37cX8ttTVra+W58XeKlepSOwkgEZ8lqw5dTYbRnKjbYF7X8XtzbqejXENHAlX7qNoPUprYVC19G7muNQec6icWfX9R0HXS7/+h+9axsnjz4Pc+g4/6lSJltd/+kvknBDxpDGg4SZzqvsJevkvkZWvTyC4x77zws+UOGp0Dgtq6SdxO9HTkh26/dI5Uy2+QGaQ6T9otj4p7V5iy07WvWd0wOSH1yPycilT9nWrYiGJEZHGOnQmJFTP2u2GT6mTZveRF/6t3rzMYOeZo8pUVXuLQcLU99ZG5SLF3Ie3D3dpA400du6QPnTn4mzdmdbxj5OuGSTzdNqNqBuLCb1EUcy59lOD58YbykKbl1gMdjSf+pvF2ydeXlDB2F+fQms2K/Q44D66I+3/2Ye5PG7j6JPb9vH0shd29ok3egsGn7tecP54bee0cFUf1xuH09m7zsrZg6K/XFQttq4VcnB+r2qnGnZGk8H7z0ieW0y7ygr1p7zJh0nSu/H5+a2v7fp8kPR1pQyo5VKHbfOHJPOk9L4PuuL3LPaLUlbY6XMA8S3zNSETRtYeO1sW3cmdKwaGiQq3qTpjGzpiK5OZ7FhbvpRrqj+9vVpYnvbbJ2DAlmqW9Lng5l1Av7anvudV4fJ8+mTpd0oK2pnhgSbkveXUWWUuRvRWwt472yeH7MsmWPpK2kV/5PPXnCI2beYSXXcFcZWqc5v7X+21H2c8khMtZFB24p8CYIi36oP1aUxtggl3skjW7IiY78gOCwVrcEC43hRzHbcR+12LUUNp7cnYXRGc0n1c+1jQrsvbJ8W0Uu/3eU8YvMQ0MJVpLhdcPWa4OvDS8EmbOazxUIfRXoYO2nHDU8uD8gTaCGj01kRWyv+m/jIVUtZhuZC+cqzJ9r/PGQ0bx48+oEcf8VxSj2Kp7SnU+YRsqsvVWCvy/U9Hi9YKppc5DP/KpIWS9maa5RfrbtYOfzzy4X+PYr91bfNEmtcKk928eqdDUx7Q4p3bM+bjlv73NiyVtm1GoM6T2POgTYApt0/E5vsPX1mPaEd3IRPkX+ELxAaE+dKdIj5Tusmt0cZ2k4S245edLrFanVqQ2Rji0GTgX/wHqS9WEqnmr/t2pVnxOcH5sfD1XqEC3wI449VX14x9cvF+g5/6zWm23ft1EzM6qju5nFS283mM5S3hM0GNpaHxXZc3KMdKLL79i+pxSH1v4sPs9+eCDLiW9mVduiX175OwPH9JGGHdrvua7X7uEKW2d4lUJ2ScDTg5cxaVj5fF0e3Y+0M+o51bqDZ7g2klIcvSoDKXskBMo/VRhRq3i09LJ67X+prZlWK0kUTBOv7ucU38Uj4Dz8NESup/55cnJ74aEukSwjt0ibWk6/e9WHlCvKTcd3W/GOcH5JWFn3DQjIjzJ6eYOFiiHvsUiv4lkfTbHfBwMuMZs/vm8VpX/MMezOd69wU9WXPsdlwz6I5J55Szt4mcqVrrlG1OUAz/v0JSpR9yyn5SLTIzSxw/dCcuk82lx1rkk3mRv7fu4/WyPyyNHFm/WMZH7im8wzpm8K7xz0VjCQuyZZstOlKfJKyzESzvcdPW2sOd56BcKOY8nRFvxtUekTtrtYiku1jFJ2B8iExN++tN9dpXuLWe3EkK0IdftZbgYeikgSeuuitNzPm6Lt0TvOv7U/6Zqh8oRuodw/dSeNBtf5SfvtnnNHNVTyRZ+RhxusdvvX3DigVSrORcxZuG/kIf8TLu1nFiMpKgfTtsen+1yPsV2nDGJ/cNbot27eijRL+sAlzyI/5QMuh1eumoiusZqEqn23ErTODsySuPqtK3tn5QRTv/3xnNCPfDNqGjzLRPFak26lHlLfr83c8L465L7tcDLlWDBbvKLiZ5INno82G85cBhqvYmiYiCb25C8Z5ZS+lCI5/fudzfWjax65hZFSYmwkL1nDPzC/ZNLfVFnpbDa95jcdkF1mdKd957hSpVl10UX5yFcuGi4UBwPride9p4ZsstUNhRqT/xTTG+hW+12NFj+j12S1fqVvbef9Qxt6+4Kf31Vc8nn1vEZJqqRgLI2FWkbhqQbbKP8vtXxz2wsGwc9/+7488ySG6jS/xMTWnJ7boGJm5LOkwUX10750hx9NitVcYJn6zPahYfKoO19Ax4tuinW1EbUXK2fuqrDcDBg6/lPqgETeOHeJwJOYUjvRHZe0T4iMx77uW44T5jtecEWhfcfG/Ue29xuVKBnFvpQId7w1Emg8U6uu1uyrPPrkVo9K7SPZfda2cRvUB0QozQz90zroZu+/+sgj3Z8+qfI0bzq9I2riCfnIssVW8u77jObrvgpTufk5UVnsnA7f5Tbu/Ur+/Sr7l9sXpZ3JkS0zgga6eSyctMu99IHqs741rB/UgvSuBilZmFx/s+dXlVGk6kej4TdPcz8d26QzNV20C8sNinNva+XZH57JJ+DWSSgRcH0wV70c768fa2jom2HQEEAVeuppwY+fcjJTGROyO+KPfvf0ch17xlARmhjRUKks3DTzM89OWutbabyrsl812/ny6LRf1AscX4MFI+3+EP9w6KGiPR1179YhEy4Rv+WOhVwfx7f0Z7ZO7BZKux9/idObz7cg9JskdXhZWlGblV+UtLOd2z5T2T6PTzx/TmQVa2QenDri/eH5pVmerEv5dNdiNm47x8Qb77lmESye27Ot+PhntWLydkx3fr9NdzSXWZ/OVXFVIa8/0SRBrEUaSUNy2vsFTgU95DAbXFfzD5u1HO/UreOnbKH/pLSTe5jwfGg/W8TUXdk7VfT8aSs/RfbKTLMJVvEc/lCmXqBYbzP2IJzf3yNcZzJuuqeit0XzYULq+6f7dUv1a/ivs1q/0nr1QC5enCbOMuHuTckQ+TxP2q2D4Z2aHa8HjuQe92/1TZj3ifkor6YrsaOJ0eqJUPGd0c29fDWFZo+pxTWE/aZj6TuV6Q64kkYI1N4YqZiLPt4+lGy+3/tQVVfbzI6p+YzI4yyJPHZ/jukM0wbwp9d+eUX2eviwi/RxxYsXqosZ1t2tGWsem6755mqW1KWLiam61DeXVHZkTn1NTqVJTpb09aI6KveNWO/Ilfr2rEIB9rXJtLGoMPUt7kt2iqaBxucUJu/ZKgaoBe64SvT1Lb/gK+t9PC1NBdKszLwMSoqOBJITLWNej4+eKjA8Zc5cSMSaxKaTz3vWzKw4gz5wnZKs7PTrKT1BIi3PUvtM3b5dH9iqMmrUe+m4SeK+eWamOfBIfrBbaI171mKTHqUmsdQQ8f3GysRP47quaZZ5Hnq1majPtRce6H5pLkn1bo5KVGVm+T7pFvyb/MDHK5wnRt7Zx+nRKt16UO127M7O6v3StZHkZ+Q/Wz5sLc507ctyaWa2ZDolf/NWJ/WS7OmTir45iyWnSwYzPEilFD9mxxAN/flFaXfPQu9jRvSgta2NXwHR11Rr/is+lRFbkyRCi8YLDdlkVyZculYjJvN/x1wmNFjde2GzaKzdGMu3f1tanPnq0MFQ5QFnUVuXvNaXndf3usWeeHz+jKLgqaI8NkGS120TB/zMnh3zV+Oeq+Me6TDO7mVgcRS95tWhzRJG5TEu3v+b1mVYOif/C4swnd79nzW/erQ2xPQVJVYni8Ql9OdC7c5TxD0zy70yaNq1atot4530izyVd69O0qr88acFGm13R233pt8eHzjIUkTWbTrx/OyBBVVrzen8nqypW93flRhPPOWyH2fQ6aoQ3dc3uZ1uWndX6fHp/vofxkejlELPPfz5JlXxpHqq8faTBXGmnvFcKflnJYzLzw/UBoaHqlcpnUzojh94z5o5tnUgkrc63yUx7NA5sV1c4mxOig6rUoktj88qrt00kGfqH9sdnGG9J5pV5QKXls18Z6jTJTuFl9/2ybcJzBVy58eILwYUddQ/19pLmEwUu0Kn200jtPN4jrju0MEu86q4JnsjTbn8oKiobp9MNZNvP/bzPF57G3t3Q7UkqWWY4v6IwbfRxAPz5AU/k8o6n3XmZf16pdryorrp44UGjsyzbYJUlS89vhPyF3k52o8ra2eJ1WevmEeomFLHyihXHh9r+aikFjBQ0eRTR0n+4ePrBU2lJRNN+9UDmj5GhzJ4E7x63vaXkQuG5feUODuz0j+QiLGTmx3KGyr51HbdwYh+UZ+dSOmXZdoTtrPPqwVJOXaaGG0VhoTvZ+63GUi0F3gsG1j6XM2NkMglV3kgO3WugLZ3hI6tZZbvcWxIexqz975BOdfSjOHfC8JzH1V3j1yZuhnmyH7GerzrQcg7q8g3BukR5z69tnqXcJpci2LMu7rKbn/krOu35iwGv9UT2h8OjPTXDRzt7cl5RFI6XKbqdqv1ScGEfZ+kf8JUYFW35Z3KMKv0GLXvG+k0P4YUzjYFlXtN7ZJLlko0nFMfkxR/szRLExvJd0xx3WA6qp0nYdi6vl9+cqLF0aTX4HsvxVLv4f2M5EHTuUc2nRP1d5Ks2JKFuzjeMVBuHjkQwRDYJjWde6e9fHqx6TjnolTlm5lA8/Jf6h+rhKT8uy4XylkFrBVLZL6ZlPzOmpvsLyXWI7Q3uOJSDtPetHX2mJf3Eg/x7z01ZrxewHqumPCdhftnR9cf1rvnFAotL6lN31fS5K7SyDBrqG/aQbB68HKLwofL8iLd09MH36QPa0Rk7qOcd+BnUpiVsfB017rK7pRl8dTpHNfO7J+W5WJhO6+0RC5Y/tH9wlu4640De2RcjOk1rs4KBraKU105u2NVB2jFoulZ5n6cZZO9QBEstU/s8kNLeb9PTc/TzxadT/Poqhv5aSC2GNlzcDMvYNidMcrqM4u2joMnd+KXEOrr7gMle27fc2ZZprA+kOA10ct3tvzTh376Td6HFEZMRymZ05KPELUxUgbuGTvnbXkju9bv/WjOspVfquvGRP3Wfsf42KO8+dI6RLuOFCsbyxUlHkvkPLXbo/9GE1OurW/mc0ryQxKENmXx+QzZlmsOapw+eQzq06pKR1n2/nGPs8+zHqv4fJ/L3OGpFznvIdW+I8ydN4J07joLFQ6zqt/h5Q0XdHSYnRX5GsiWwtphaRnJzLmX70Rfwy0rE4k5Vur375v0Zin0nUPD7pG/Hix913ZMmkf3d31dhtelT1or6pPTqULpPIcosvK8GfYV8lU92e5W8RINOXpjtMLp2JGal9FmKWNzng+a2WYJ32coizZlVR/WltQn2L1ilDv+YF72cpHwwS4udvoqzsokUbvdJqfs+mepuVnqDs9dSL9A+ptcKZB+efOqptzYNcfkNrfKR+3nckbJWT5anbhJ0W/1bkPV6Zyk/yN3AXmy3Oz5h10h71JqBhL2pgXLN762lmtw3mF7j7nxRjF3AsMLPds2+8OlPJT6X41oc/xTQ7hmLxVZL3Mk/+I2eheaanhltVOVeo6N5sLdcyvC8uuW13q759Qo68QSXj5TO75d4fOypnqvirO4WPyxBxRnbhKMVqiHNaxXOm7t2Ovs3dPRyZ2TqqtZTdTcwX3ul1nhuVgrxxdqbSmdPgIy8iS3idsuqy49rGKUKHm/HkH6YVBApHTJRzbnJ4WToUlXtHblJZnoJ6s5G+Ztk6oUZH5zbtH8zfqWvIshiV5lmR+GLw6xz9c7nD0TYJ7A6H3aqFw99XRD3i6lyxmneW/sMhLQjXtaP+U3Nr9XZZDPPO7A1a1Wx2k/yz4GDu1vi2qbKpXnLe7XRp+9L6v/iFLw1timzDLH7OTzlLuKYUfHNj/k14tIXpClJf45Xzw/sBXVYjCn0MpxdVR4Z8amZemVriRFm19DjLKi4U8cjj8c9yRTuV+zj9+qgDzeyeZnwW4lhgS7LjKVs9IxUzTLjA9v7zqmm921+6jVp87bNnzP+y3ZogSlfmo9m049f/VmTFPhHmZJ7Yw751SpaxPOy4vTazW9DwmanH7543BQpf5UnzaFo7eH/mTHJ+nO3H4TvaCmBrqA7qvK/+QfnwEAAAAAAPyP0d8zecwpM+yFkmrk09TH8c/+Xv8n+av+9/p/OIFAOJp9nmZHDdcRxd4POTXGl2432y+3sb9Lo8wtiqtpDd9WH+hfv33yx9UgeoNCEZGhKKHDtcnWy0lrrId6p780FozMkvdEFLvOp/4Oz/289+PTLub27sq3nhRvBT1dfWRv08k5/eg+/WiNMX6xy/now0FFRqO0P/qOijeWLu40Pvasm3aOVSf4/dJMTWzppEEIb170FItueZTlZsGni9c7Xp5dV3b3K3hF1uq08DSZSSFuZaJi6F3Z5RrN2F7OZ1eOifacYm9ck36R1jC5uFeARE+sap8Z8/OG9WdsB9MkhTYOvhulJv/lZKqbHsilLLc/0fxMzBshSpfu+xcdfpPSdl//oH+Sn5SXUFZkNHk1RMLOi4exuN3VQTpUnmtN1/Ld27ja+Ch2IhONw7/NaaNPUrGUJYi6GA4tSjQosD0h+6P9gGxVL+CyjIBH4FJ+f8uDMw5K7Szy2oOP4o7YHyYiu5BMm2EyUqi8nRSQlJh7nIyHo3T05HKAuVW/ntRsWmTWfb6gGzFaWpa8r3TddPSSRlhTgy4mx/dwxhu22Dde1iyN244PFq4SDUsyZ7o85evcl8c4wilvSHrq2uN3s1mJhn9kq6/yEUwLdt16Ec/MutP+p1W1g5nJnZiPqoWq5B0kvhRU/nTZCuPxxN1T7N6e8hb0xNcPJrrMEssNPn/w2f2pwAyxWvIc/WoDo59QtP/7oM4LxZdoFzpfOKhyV4k9C6jmZ3pq6/spW9uku1P0iepBEsF2v5vpnHS6VWsiXAeKZioo43/X9zpFKfoEZW+0Cz4ZM+PWuLX0OnH+qpGvwZ+BD9StDfT8JkmqWndjIukLyi0oTVufsSs+YWikrBo+wje6QXFwKlSrsFSJpGq/rNupKy1SPeQ2/mV8+7NzLzGHXtRcrCHd880lacdMZ774RG0Ir2Rohq+24N0dDgKXEwgST9tEZObWmfsi35H3hG+tXJ+9Uv1bfve87Cq5pdvvHRuUa7ve+CrxZRGawnU2rpzKVGkK/lrAHxickXOP6Z6+gsSZSoUMtWraxkc5YV8NJY6Sbb5cXOaVytmbQl7GcuZ9j9QyexO/4Za0BrnokQwx6a3gIk/Z3U/5XDry1/l62DxkHGRlGYUT3MKObP5IKZmxtGk3Y5IrGOI9HEDFYea9GeE0fcfC/JhE/Q4tqxt5S4V32o+7EFhMyrb2WLkcfbPLe9fMoUThwLDcjmszJ3V/C+3ZZ0+yxPO2QSuiYjNPf+E7sSN5P5+QlJuEWswcZYNgSDvphR/qlYLa9C7LL/azjbKfHXuTvSOC4eqVJPHw+wGtmadWP7wjPm5IGu5FRyT4ZjMg4o4py59z+bVHfn96/3RPu0MwZUEnCyHO2uFkZWOdZnn9+ofAiM79gfz5iRopVkerj6yI7M61IXt75H2ARn+zVb+ruYzygcK9zD86eXbvO+Ww76hG2xtP9X0v/a47aGgZ+WRdFv1hc0/5Q1fHjr3J9UwLYytsQ/c0dh3r/lL5c1LUfZvvSMnuV353yIainvVLX02T+Eo/+2QrYk9MtNSuun/y7RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/WRSkzP8am4OcVjT2KbX6my/7nKmy9cuwVVHq9FNSjfqTbvS4xC6NwppZ1MxOU7pIpmT8OoPG1n/Z8O7/FQ7/lVISCETLRASC5YMvwyFNbUz/so2IQCCQEO32JRDoiIib6Ij+oQXhDQKBYPZv5/mfixXLYtf/JfqGU/yn7bT/0Mg/9otATfL3+fyn8yS4/Zc9gv+BKP8aZ0k8P+as7c+23dcVUD68z83Q9993IaL8D+OJQKAx/sfvE/9v2jUxteTnv2Huzqzv7eDAOJNHOhCix9/9eOyL+ThHWFgn8fzsCbWuPm9HMgKBsOOvz7/4e7Qy/33wv+J5AoFA9R/al/wv+sX1f9n/o/+HnO2vSP5XpP4v2vm7fuD/cv9/RPoPkeq/+f3/rv/dNfv/p53/Hx/vb3/3k+avWPVXPPzfbIfk7w8RgZiIQPpv92Ibon8fI4T/cN2ICEQEsv9wHyUiEP9rTvxvOeFfc8K/50T/kBP/Q05C9g/9+tfj/jXQSIiI/vP2v/f7/7FfF0BS3tHeoBsYnBDcJbi7S9BgwYIEdwiuIcEZCDoQ3N0JEByCBidYcA/u7hJctmo/2Lp1v5utrezuzbfZ56mamu7/qfnNeU/3vNPnP51/9uE86MN5sv94r/8vVPmL8/gfvkf48If64uPzwH9+8D9E/p8e/B/X9b/72NfF/5Ne/juE/g/3oP/q/GO/eT+8GJE/nEUOFeN/+pn3/4WPtU2tQ5rtbVesb7S/6CPUslAf8kP9rfwC7ROuihySaVa8v8pvEPpDfui/lX/wUf6EVyOcWPWX+SM+5of5W/kR9rYf1v3utjR/OZ+HH+cT9Lfyt4/oMjpWsZsVP/ur/Bkf8yP8rfxHQbX3ve+9fNRf9p/143wi/q38ZTXXVXiRY8ngv8wPfMyP9LfyPwvZue6ngXFn/mX+lo/zify38lNkWhayO6Rj6b+c/6GP+Z/8rfyL77M/ibtv59K/fH8W+TifaH8rP0azNImide6R4a/unaF6/3f/hwX4d4n54TNWyIfnf3dP/b/rP+wLE6KF+h+f+aJ8+Prk/8lf9J+E+g+7CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/17l2z5sNzPFykH5vtnTrvSy++Gqtzz1Zs25aqdvTLn7evOb1QUy55t8utHJpJnSHTiy7UjUZDfrX+1Z5sC2szW/zVx7bOZ11wfl/DZM/T96lGhS/t7RGJfCPTkc/3acNtPHZF54+13SGf0nj/iizvGTn8fJ3rbTpIIDNi0ZVHdi83qVn58YUDbkdMvA1Ssl1wyYciLu0eUnTgW2j+gyOlaxmxU/9hUUCATi/bOjAQAAgH+Nai92nIt9/mKj1Gm6NM+86emRj3t46A/1oECEQLxA51Bj2me/MCHOd7kWju/9/N27mk1f3toVZ0GJwUVaDiw4LvyNKhFzPpua4eCQX5Lv+HrLlNB3ysf5s+uopsPb5Dw7YGTZ4mv33SqbNtazMtVqpSjZZnz12ZMTFIu4dW2S7ecz30oec1rKlhdLzNlzdV3c9lUuF3v8+HqTAh1L1LmUZ1eLpT2Grt1+LijRnNNL21ZtW3fUZytfTaj5uN3Jd8frFl1caEKm5t+nu3X55wNnT9/eejPLwV4z/ojatuG8YzerJzqQ+uzGWwW/nJ64f8e72bfeePi2/aGfk7xMkOPJ6mnJMz34qUPizNHSJkxQokD89p8lDd9gROMUZwvWyXfx6b4qi5sO/n1LovkvOj/Kf2le+yirsrVu/zR2ugizem/5bOjFSg93Tz8b7nGeFT92mNro1MPhIV+Ua/lp/N6lR49IX/fRy5tb758vHnR5xbIli2bsT791Xs/bsXslTTFu3NzMQXm6/dSsT9w/3pQ5EyF8nCLNcoYbHn/cks45ruc+ECvdhTZnrt//bs660CG5T+4a0fXy24FHT6ePmuRCh2jjXvZ+Ezw20+A/L6+tXbBRjHwPcpWY/nmVfOtLN5k2cMDE5cWqv49b6mD2OSNXh72SOkW7WXlXTN1Z6fjS6KGW1497qcTsSo+zHzqwuFn+4q/rjU1VMFz1aUPT9suU7FHD0am2J/7160N/FPit3sG11xYMPpb4p0LPk18on3PmrpRVZycYfjXnb5WjLQv5eVDUgkUm1A++cCJRmAbPk45p+jrG4JUbkx79dXGUK9XqtQ5dtuisjddLvwv3rkjuqgVyPjgWukH6ZS1yJitQvVO12JEmTx04u3eTRGm2Tuu4aPy08G97Dkrd9crQwvUzNv52UlDTLN1qJ2l3v+mXO0cPiDK679Ir10fOfX6sSr6Dn776M+H2fYW/Cz27ybVJD2s1OxfUIE74PbHuDD9Vfv2CdhWLf7IkTLOogd1xJ275IsvCrzKlOt8zf/t453vsqDXmzuS69RpMGdpxxpzZw97fLtX8kwe7s9859r55kkoh6c/HuNx9bK9+3dMFzd4X5fTTCy/7bio5bNT42Hk6jJp1rfOZEUduHvvp8fvY0TOlq3umWYuT5+cO218z07hS3b/Yuqvk5uhtftja+afM5d9826TltY5lI70vfDdz1D8GRZ3Q4u79ZQ+DH2RMNbrKqty/J6qfa+bmNoWKnVpwfdeJDHPiXhgzpWyuOyO3JA2T+Xymr2elGBStQlDaNgvujPo9ffiBtb4cn3/l1C6P9xQ8UWVL7vHRS2wpHurugy7rOr3MfLD6rkMLmlcLPCg9tH/KJgd67XxQ+NHK3DOHV938ebed9+q8q5Mvz5zH4/YVGrb8p/Cbz7z7sm2HFAV/Pn0k46DEY251avjq3dDfLu+bEDvbmMpfJ6x58vkfkW73H9Ij7egezbtlOLzgeaXaJcaOjlC8dMt005NkibNrx7y3efLE6f/t2e4ZIiyPe6FdgY3Z0xy9dPxokozlXvSqXuSTZ8/2jD5z7tv32ZeWuXLi8fKOwXPHjbtUu/T0wVFWdo+Us2ujw6eCqk4qUSZZ0NZ7cUPN3Vpv1dBdebaf6vNdjWjpw91rvS3f67cVKi9qUm1UrRLxyw67fadMlLaLpzT95JfH5zKGil3x+5hnivU9d31mqeY5vsjT7/D9OBG7f7u6aO4Yc+9uSpixcfpDzxsuanZ405ZDPX4u8Lhw57qPm184W2HWjV3vdi6q/WpGuA2/1JjSLUmd1Zsqjg315alkud+OzjerzK53hc4PL1LwWP3Qs6LdXTk2R78spbNkqdAz5o3v4m3NvPFiuQUdJszvkyjNgM9Hnaj4ePXYGetH3/+lRrTCfXdPT7dySsLC368umPf49rClX9duli90tIuLN13LdrXEzTHBX4ZdcbhlrYJXRzXLm6JtorN/dAv6PPb1tNVfhsqzdGLB4DNvHx9Kde3A1y9rzky479Tma2N/SRfc73zhohOO/Lj8y7c7+1xvPm79m4vhysSt1GJRzdyZcqQq+m2Ysz9fSLEjz9CtEcdO7ri65KiZtcs0vtCqd8l1aebMzr3taYnOv+c63vHTO52GJ8ycLUWg6bgf1789nHRfr9GXbwa1uTVp4tAfeuS92KBJkZkbMxb+KvutWm2avIk4+V3Jnrdrbbw9u9eusWXCHg+7JHnTvfHvtqoVb3mlhnHXJ1jbr8O5X6YNDvwxKM/BoxkiXan5c6jHEUe0HBzvSOPR8U5M77oxX+BW88NXDwz4dU2fXgeTj+/d/PfWGUbHKBKlcvYRExsVjBm68/xZt4uP79Ih9+7lf5SLGnHH4UPLwqVsN3R38MULMXJfHLP709MV25cImbY63rCkOUr1WHj9eecqBwaWK5Tv0e2V/cKN+Pbq8FaxmxQ5nnPI1Ir7JkcJvWfFpJEVw19MVvlp++rXloXq/6hWitmbO1//pmavNKUjT+81O+b3u2PF2H96T8TgF+tS1Y4W/MXdk7uOdm6YbmfHszFvN7wx7WXN4QU63A1Ov61IYMToUImLTFiXP3bgQdKL+26/rZcq2+wNn9XPv2HJludXUxT5JGX67xt0nz1hyOEm586NaLm/ydhLW2uHLXkmT9ZHXWIlyng9+y91ShaZWW1Cssu7OmdslGjZ+hkRXnWqdbB8oTS5Psu3r2zt5xU7pA81M0+WwlOH5w0f/0H/mterTK2SeGDynduGD+p7MXq3A4PnbDt2f3Kb1vPinmpTMFvFPzuOrZ1vcrpmx79qX3nQ+Kq9d6cM2vTs2vD+Hevmi/hmwpwXexNe73Q/7aT1b0KVPzsiy+vkPxTaF2NgvzcvOlYblHfb/bUNmufLs3z5qqjPYp64VTDZqV3zJvScl+PV6ZZzIycd3Cew/Oc1v5X49XnRUsvm5+r866IFS/6IfzlGsRvTjnVY+PxqqKVlokw4/abotBhR2z0pdCz9t9k6lJ50cXTkWWPOdJ1aalLbteky3Bw5PeqPY0fkjJZ32uYctfIHuiw8PHxv3dC9po7v2ynNr/lT5024pULjm+//vHR0Z7FxT7/5KvLxevdW5VnW4ZcVXTbXnft6dqzO0b9adih80UQv9g1+Oexet8jXKz+pvrRRn1Fpr0+/EPmzr7fvHRC/7NXFU1NGTb18R53hu65mz5W54IZVteLXX/oqV/igE41ODgm++fCbkIK56/24cGnsjqn2rl++rdLW2a/b3okddK7VsskZ46aOMj30i5+6BnVbN2x97kaFTycImZ6/SosJCfIsONjvbJN9U74vMbn5soohP7epXOptkmu9og8flDXa8xgZmpe6fOaL6ZvORnz0oGyJwUl/vVP/WMJcGzZv6RU+6o6TK9dknr+vZkj8qy2S3rvdfv6qGBOqz5oXqfKQd5lqt92ZO3OSmg93B7c+Hjn79NGDqkaYuDrclWmnmkVf9OD50ejxY3YoMmjRjXOj0xQInjQp+PyihxlqjO02YGamwKOdbRLNHHPr7aPGybssLDm/ZesfUnZt8fKTiDFGP+zf8cKlxmXCxpy7vuTx8RnunGpaq+/C2+t6fHu49r3hZwdOutcwfdK29zZfLR1n684CiZIdG1v79PYIxS90XlY+0ZR0uybn6zemYdJx3QqENCp38lqPRGOy3Yv8tmmUaI/f1llUZ9iqK7OeNu7UfUjf3msLrL5SPOW9M+dqJtvXLaTFilBDBydcGvfdhVJt5x5NXTzb1uCi8dY0yFq9cY6h0cd2+WZrvxzdMwzadvP0nKUXt38XmDuw7S+JZ7e4+2Lk05lT146JkzPj64R3vnm/d2bYIz8cv/xs96l3oWslyzOg+rU8fTdPOvjw7vDSh3+IWGhp2pJly1V6H2t24eOPnzR5uCB6vua5xqQqG27lu4qF4xdP1vKT2+GfH5g46vSRi+uivw+1I6h9cOW6YRb82rxYzCRHv7p9Ivvo7s+itNseuUnkK/lvNJhyof+SMJvifdFgZubk5V7eTbah4oAVuwokvDMtVInQDea2K1dneKsas+4u2531q4mVR5W8ObRQm6Ybi93JW3BQ3lN38p5LdDNyuBQDc3y6Zfs3CRbuDfP4csYaQyqO7JvuZJGb69LHu1ig2qHJd4uWetl01ZUL5e9f/rV7os2Xf74xfOCCbx4lzxg8McakDGeOdtndN1LeQZ/mjBH8OFLwuw45srTu+WerX5ccOl148YP3LdJWebu6cNPVn/VeO27GlvDZLvecXGFtuynP48UpdutwzGVTyy3OcOj54CojF+ap87DjgzIj0vfv32lYzyPThxzZmmDQpcJjnrdeMTVv0t25eu5Y9E25FP1SXd4fKvWTMFtC5w95eGfmtbzdbr+sGev40bqtujQ7PrLmw6M3L/w2qE2qLj2u3AyKEHHe4T4HGgwrUHR8sRL1t3VpuS/xicn5i/547JcCR2Nef1Z/aPFu+wdd3DAzXtsBj5+cHZH8ZPMU+WsW63o+/75Gk3/oHP3Y2SyZzk9ZMTFV0OpcJ/PkKnbzeZtWkYJ2/MPrBfC/sEcNvin54tbx4IjzjjwMd2tC9I/7f7gP9aBAtED4oOyBMXnTZgxXdveXj2IeO3kpRqJFl/JOaPPrsGhrIq1+vqtNoivHd98KV3Pblj/7lB2Qc2PvdS1ux/r+TqO9LdJtLVj52yRRSn+dZsXIl4kSzD2fL+nxzzJdK3apeJm6ddpmrbz86JBReSq3uTGjfeFqtzJ+eutaIFC2Wb8yB1NfGrciTorJw2J1z3+vwI48t2sNyhqn1aqvR52pHmtbos2pSq0N2RSuYYXFK/cfHBwpVO1JGb9omOfrcYdyFNtTuOivgz9J3qzY5xeGnXzR5Ks2m08GWpWJ/UX9RUWexoxQd1vCuNvqRhrbbfTks3Wa9DwSMX3MJFGy9lkTK3Xbcg9GPE2cYHv7wY9ndli4cHWu5zUz9H38bmjTca/2dRyWpNKE1s2mrRrW5eKzfrESHN2SYWKlvk8+b5yncZd4eba93TX6YJEcdwe2ujFjQos/q84t17LEycb5oncsEL9ziVs3Xs8432nKj7P6t9ibbVCR1AuvJO4wpOv4Wrv2Rj41Y9nd15v39b+6NaR0u6LTjzW43CphmRcvQ0co/zTZlVWVs6et8qRV0dWpr3be0ynMrpBayZZFPnhxcfMXx1fsSLV756knHf7htw0AAAD/H3Nk/54Lg9f82LhzzZYN97xovffj/h/+Qz0oEC8QPihSIHjipfyZq+7blTJ60hw1rsTaMWZiu4tnHhWKPevI9gHDupXo/bj5hq7hsmyoETHkzvM1jfdnjHFqwMBTN3O/XzA//uyqk3MVH1CkeKfB94pvb1ZsaITQhR589w9fNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPCD53rvqSpn9+37N1oRJ/rrs6uHrLU2/WnKt2usrzPIMbPkhf+E6p0kWT1Gjeu3DeWc9mvfm2ecw16+scKl3jm9Jpa/y2OUefKbGPtss69vaUqCuHfD5m0u1Gg26/jZiyQZ5qOae+OxtqUv1hjdsvyFbqz7u/lpoT8djPqyLlbDVh0LI9O0P/UnjDF7kq9Zh/reWJLt2XLMq8dOOm1iHN9rYr1vdjX0GBQCB80D87GwAAAPi3yL80VMmGuUusrLE3Za9EiX9Z+3EPD/uhHhSIEAgflCOwukH4sXffvEwV5Y9Ev0YtF/PM7MIZFhab325ihrZl2j7vfLv/yQoJ0mWMcHp2vCYzVs5bUzlq22RpC13otG7K4+8PVlnQbl3xAzs/rxg5cpnklwe3/abQ7M+bl79/cGi1Mil+KpA6cdRie0c2bnOvUeoD9ytGrb3/7Ksfc83K+LDu08Mx32T68/rjT6I/DVs62s1Is8KHmtMtec3Al70r98+YN+UfRUa9fnDv6+KFYnSpmzFL3tZt0n4+L2u/Ef3nps+WalHyeQ0/D9m1psOoymU+CbUoRfYDVbZ1npopTr7EOTO1bbFn3IAdRS9HP5E2wdkprUIyxXwyqcvGFunbVZu65mn4La8uvBz6oHK5LBlelf0pxbz1SSPdLHZ7Rskr4T/ru3vV2lARVw4peatctS8rtli3pnuBCXsj1W+4MPmiHnuLtIxZ4ttOrYIHL4pyYOL6VddWP926cmKXjnn275h+++vvMt8ddTxCrRMDnuVqsefy0SGdFwW3PVr4u/2JVyU/sOKXwOieF862Ope4ZcrEu77+fUrSO90X1975NGux76tVTvkkXOL2tbe3Oj61X7t1fdZuvrG3fZmrcypEGPDFlitJxobtUiVV1Mz/8NsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nxlSsOaNCEEz9myc0zlWlQPP1ldveerNmnPVThcIM2jDq+9aVbx0ptDrNI3eDqr/bne1KckOxs/Yodv11kkulkq85G2O7usbXn55eFColPe3HH3xIn3mPEMGd0h19mSDFnd3VHg++eTuVVGPX543o03x4xtu9rhdKdpXZ3YOHljk4K5Jd8qFLzf9bNwWzeOECy77ZuWDbcN6Z/4sZOe6nwbGnfmxr6BAIBA+6J+dDQAAAPxbBB/Mkivc29n5KhcosX/z3v0bP+7hYT/UgwIRAuGDwgTCX4samBmU72q92Y2vVnuWu8X9AmvSfXPiZaR/uH0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/0aQ9JT8/XnJm0d73OnVbPGXfo+otT71Zc67a6Zpzm1ZImbJmzunnWrVYE+XalJ1jfhv+ycyRO4//ViZaIOeZwYXfb6jw+7MZO8td25f3dOnYWWeODRNj7utF4/Y3HrsuyYPXo2/f/nPH72fXN/k53y+pDoVkKBh6dssacyL0bDqg7s0SOed3Dnet4oJPQ9VIX2XT/Os7/pi0PXmKTMtCdod0LP2xr6BAIBDvnx0NAAAA/GtMjpZ528r7w1K9/H55keLZip79uIeH/lAPCkQIxAukCLRvO+zptq/bHgkp37/eipHNojwJG/Z4upIZ5uS6/rxWu+SpIo/vV2TdqxzRd+9OP71h3K0Ldq07XvPBkqZ/JJvfvOnw/Dfv5uoSZWDljr9MedXqRdX5N2ZVrzH504wzxob99Lst39wpUTHjubTjX0z9OvZnfT8N97jQ7Fahjxwbkq7Qvcf9135fpUz82ec2jD924PXE4Owx++aIWS90wkw/7qhWv2STTDeHFF24q9aWWqXLfxc051TLe33OhI/z1drJZWJvGV85ftkaX44O+7LYtqz5R/WcuqlK1x2pU01qXaBfwW/Cdog+LHvKiO3WZsmZ8O1X8QcuaDUmYveK3yaM2mZk9+MDMtbsW+pR/invOkd7Eu9Z93cNzt5JkapozxG5K2dpP/T0qU23+xd9X+hkuAjPa/ce9XmvPCdu/MMvHwAAAPxf8k3MwYnGhV2TeujraQdrx2+Z5eP+H+5DPSgQLRA+KF4g0qu7B6t1TBDmQsZtec/+Pjhzm6oHet2qO73W+5QTk1y6VrJVyyP3s+5s9sPL5Jnyth3UIX+zuU1KHilVavueyeV7FhpYYe2rGiOODR19s1TT4/tiJCpV7074rDmrJQ8pUSz2nOfVfqlQZXvpxN3HJtv/efTlYasP2zmyVO0mrZ/HLNQ/TN2ut28UHZ2jaLkNM3bkGhm1b6Ks3VMGv3p/4EW6NyPTXJk1++SFXiNrZxpX+M2IOKei5ss+rcOTZe2O7otYNOH17aFb5tr17l39T5MmvDO29OVX//CYAQAA4B9V6+C6iIla9g2do3z7xYsT//bFx/0//Id6UCBeIHxQhMCCBQlL561yPkHO4TF/yrIweOOTMRfK341Tvd7S/DGz/x737s0h3WNNyjsiXqqQ1VvfpovxZmdIy/h9oqf8fN+Asz/Unj7s68/+4csEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4XUmvSk55j0/Wruve30Eke5O63vXrLU2/WnKt2en7/ddNXTJsabXTWa8u6dMu7rGDxrltrRRt1vde6Ff2Ht4keJXOie0cvNZv/ycgIZ7qvrv3szqQrr8q963Ry/IDYf5wu/lOf+K+/f/Hb3uzdb0SquuBijN3Tz1T7quLDnp2rzdz9PO+hofliz8vUttmraq/qPL18tevkl22Sxoiwt/2w7ne3pfnYV1AgEAgf9M/OBgAAAP4tev0W+2rDwOUxy94+e723VLuMH/fwj6t3UCBCIHxQpEC07z6bMH38wUq5ytUrU7rQiEM3dmfvFNzw7rPZCebeaF6uVonMF98OH5myS59b66+NKHw69c29lU81CZ6841aCZaXqxni5fUm5KuMC7Sft6V72SIIu0fK2C/6HLxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgbau7sPTxK9LLj1gy99lv2wafnVm956s2ac9VO18iZKX3rW70WTi549vrKy9OrNX8ys/6hvmPX/Rkyudy5G1W7nplV4smAaDW2pLzTfEnmcod63xkwoWb5hYfnvHocZ8qTDdl2tZ7TscHwSYvnNU7UP/XDRKfX1Cu1+Ne6RXJm77x40/YCgzelPL5z9VfV693IObt9zNjnW8cMt6zmugovciwZ/LGvoEAgEO+fHQ0AAAD8a5wMF6PC91uHlnk0a9Wm/emPHPq4h4f6UA8KRAjEC4QLxPntm83l13UYHiXcu0gbLtedcqPUrbh147euOj9unfF3w0avfPV6hHJhZ6fe1qxjtM0NJ21I8Q9fFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/okjbxnVZf3bvzAGrOvd43PxY87wHZyablXdMp2tNOoRMCf6zQo9GsTr0OzYk8w9Xisz7Ks2bNgNTXa90LdmDmg3rBYrPHNOhWIG+D87Ern6sZLdYDxsnfLV+fI6JYYIjvR9cfselS4sr9Rw0scir5ttn5C/2Z5FG585WORFrV5V+d05ejD6gcYwEaTdlvrv1UbyxN5O+Gjw936XuoZuWj/Jt6czPjuyKdHbV+XyXar1r0rHVoveZ4iy7kPn2s4LVOjepGnwt0rdt36e/fKZR9wbTirz55MaSAt8VbPMm2vlnedpt6nOo96jrQV3r5154YHWHR1PT3gyTePiXK9+lGZR8XIc0B84sX/hi7q7mK26/qVf1Wse8P383ssOyNkWzrEp/a/3Vp0OHtUv06y/JRkU9kz12/s0Tix+v9nR7vTNRPz0W/l7mQP/69dslXP9gZfKSl5s13Dg0coMkj/INSL0sUvvGeU8G1w6ePqXrpL1x8kzZ1Cp510ZX9kYPiTD3xwFDq/fJnC737TJp6j6rEXr4q2SDh8T9/F60r8odyN3z0/KT8m5/8uLrLXWuTb+0pGXpd9c6h0vVcUS3xTmXDOkddCVvvHb161b+cknpka8T9k27KtPDiD+2bVR+bqTu7Wu8Ldu28N4wswc2vVP7911RR8V4vHhsnHc1E+aMUPhUqhw9YnzxfYk8ecr1q/JHwatfnRqYtcIvB94NHvP17V4rLyxv17rx2DOTm9VvWa16rAcRyvUvFW15/Qlv0h28UuPNmUXvG+b5NMrrSQuLXutf/sZPp/LsqRAmT+qGz06l3Zur7HebD5wqVLjjhkEZdyY9FZzi5I+xu0wPLjU73IDN35RbF3n40sXlQ53Z81PVDj/Vb9K57rGQw2v2HDvQ4dMYfRK36jU6X454YeLd//l2w0bT51WL+MelBH3SRF5+r2DE05tvTMxWfdDy0YlHday1Ol3PnJda3Oq5ptLhfJkrH02fNFWRCxWizmlT7qdsnXp+VbTlnp8XPu74WceDX3f4reSVWimT/9YxQfGddYdcmx0lz/Z5jZ8cuBC52vKIN1NWvbthWZ9Wm0LHXtNs7rtJ/e+WbtcyyrMRY5tumfBD90THG+bN1mlos1+OxA31eGaiFo9aJLy/7Y/I11dPj5WuW85Un41dsSzmskpXJqbftnZB6JPZmqdL/0XKJSfGbJsdMdlvmZJ9d+FS2e/uRYgcJl/fxIEwrX8dNLby/FhP2m98eigk3ZDceUdvK1m+0ZmfknaYVeftjorJWu17mejqg8ipmq/I+tmpE91j94nzffTqjxJHWNMw9MhsT+pPenm8ys8xUs5IGfdF00ZTf255omi1G13zrs9W48mCqBvLfx+j1+krsz9vsvXXPtfLBLLUnprj/IO3QQdTpor11aFKl/uFirhyX/VVuyvt6fg+x/ZX7Z9fbz74/LpJbaoP/bTY2G6Bs6HT7dlTKMHmbAvLjanVo3f7klWjpD+TdumCtSO6/RCtW4s06QN3xpTr/ibponxbdwZ3Pr0qbocve7wpE6t0oadh3ubPeHvjqQwp2xWdMfpV9i2pwyauc3tP1q1rfrr2bcvs4y8P3Ph4UPpzdy5OjHSs2d3qpSt0+rxZ660D65a6+8PRLj2aJ886LNbAw8Mbpwu3Lf4nfzSdcfzC6NDf90oQPl7MlgdTzXz/+7wSv83aOqviiYXnnqZ6P/xO7PyJ17/dOCFRi1YJlkXffz/X9/O/Tbyj5/BJX60OKdbjToewOUaWCR0qeeztIYuSTon9Q9Faa2K9bnzleIQbKzpPXlxy+4XCF8P//G5ggUyJ88/fH2dh8PFvGsXfVHpO6JKf7opQeG7tSNO+y3LiWcb+B4eHvXF1dfy3RzMMzpQiadyVS9aOfng+f6Td7d7MCj2v8+bWFfO2bd989ITscbOn7tV52Pizvy/dP+nCrC0n9jR9W/7g9QbBmcelHnDlf2PnLrqCcIB2gdNdIohIS4OAlHSXSneDkpLSKN0l3fzpbgQUQZCWbulu6S4l5G7u+xHuec+5Z37b2czM7tk8P7cOb3jMBL7ayZ/mkRcTL5j8sJzPMhZiXZFtM2uwNOfrJFx+xD5Ax5vdnCDf9Abrrw+1d3sjhycvPW0ODg6BX+mrpKq0hc1QC7fJaeSBG0GzLyiFfsUv6KLbLD4ZuopZEBFPKeTFKFv+vGcORSnnRiZtQvmxo7irHsBh1EN3Ls5oOaM532Jg0L6yyG5ErUs2L0tGZE+d/S4304V/J/S3pHaqq8XMM8nxA6G2DwqBbYMEn8e912u6XjYkjF7UqOI8CohfFKbfMpH/yCniFl5fVD7z5K9wwHklsmBp857XIyNprSwxYfUJXAXqRpaM47hN7JZNBYKerjH09l9ohaPliP+Rq2t4mHl9VSHbkJvY6F5pVW34tRM0Sf9jNDguezHoUaEV+/spmna8l/zKf7B0vs8J8bT+MLE6+8sgi5czQy5nHsD9xDJoLcdrZSW2jIpe/94Xzzez4Q0iaWNgmbnnYzu1waKKsg8xyLFHalL86WtdrEYu5l9bQpdZ1NjL56Kd3lELqAfw2vUH6vnRemb8VNsJi3fAxSKLv3N9/Q9p5XtjYUuE+WRL+qZQyZOfYpmbljkcQXLenbqOr9SXQt4/ukiQ3E8X6kOo5CdJaEx/KNzLiNX18uh9bpNO/TmyurV84r3tXqXcm4+2KbqRHwoEVlRtAqZvdCMY/9IsvmP5SOWhH62e/enkFaYREYEEte0bEfweDJTju25Khqm0LyybMpHOxqoegwN1rOgmCwH5mlbj9dNnjz55qz6TF2yi6up2DPK7UH9iPs6Ewu2Ae/OyfsrdFnuXRCrVlb3jz7r88gOEmNCwj3RM+1KFpbpccp2qaWTR2Pbb2OGSFHXUPXba6tvT21waeCLmzuj1D5SzMt/eeCVsdFre6Ola1zm0lE/q/FJMk8wdEgqd5Rh+39P6YkTaCv9dp0ylt9Klyn3jWVdmg0GXwqDXoU/sX05VIZsPz/k/LdwPfbfbqOapw9SZnL7ouhNCkdTaoX9GojRnLIK6WuSkPsD12nTRvqFqeskgGevvFsN4bwid/5sZLQfq7h9iL63C8HNrn3+e/BZTILx2ldjSoTDxx+KvoqVtam3zx4OHlD6hIzr00pXcpefn5WErj/ALXfOlkAjMgg8/KDOxp9DQmxh/92Te/ZTK3GY2KdRKVfpbkEWDL49SwKU7A43ARTUnNm5fVfXw2Pb0AftcTgdibOPBQk9kdmL0ZmteDzu69+OgovhQU/3Zj3KIkbO+aUwXaWH02T52vaEPO0PqefacGkvf16V/WpWaoJq+GYkaMtOkfH0+IvDix4O2CWfOPZsII4pBUU8f4sLCqEj5NpEEpL83c9ER9pIFzhQ2d9IH0debmZScAokepliISOkTtyX0mrw3+sm/JVe00cJVFXRN8r114nqzUO6mLZepGegSs7A/8y+FhSxJXemRD3EFE6uvbWVcfw0b6kyZbCmY3nVr9X1nI5BH45yc8nihU9GMwjw6zul9f5HvQzVXYmLyrByv3AjmNoor8dvAAiyF7aWBuLWJYts/Z7wEPKfdCcdbKrV4daM/9nOrX9X9RBkyoWiWRV5h+vRVveJAd08UEX1n5qdOUKzx5t+btNSxd2p5nNoqfL21oZRaukh48eM6SrOf37rveU8mD+KhECZ2lmB03Nv/VP1sVjafOiojU8u9NxjphG84rXtJwvDlAV+Ls2Zq4K+u0fQNUpeloyqb5KDdrQ5EJOpvHzMJtkS6/mBtjX3aQLn0LCbddgptOGNVvDZQx2998WRiETvq638BhbZO2rTeOpT40rIMAh9DtV/R3eiZ7qzx5Ms/UL45+3LXWcXCNur+GHHmqdbwYl+1fSN9Vte3h9EkZxRMKG9Rl6QT3WsxMt0qur1i6rNRW+TFBZs2mXrddC5vXfJGF+oY9+IZ/He07GdCnVA9OAJb/mv5oiT5QctYZAABe3N7oUqGpD2P3I9Jy6mGnWfGrTxhaP5952jRrJjKszC0cHEOPOnbM0SVNAZqunBf/ZsdZjShXccAbPQNH2K5J2el8ax9re4vx3m/lvtxa1GVr+/e8Rw8fj9ByjKc+fZd9cGpzl/BX+Q1aPV/Jtxw+/Zys955Ntcwyb/s+jem7/hHj4uiWaaKHSVyU4MgFvWndeO5J6EVrtGx5p/1wCzV4s49jc+C1lmbUm+Ivtb+anm8gqsRcivUyWX53H5gi1h0T9BMrhc7/8swGQO6gBDJq/WUJMt/Y4lRCG3TkpPDNzrtNL6b77pVax8ZN7zhySOQwNX4plPJqutI82SM2h1NraWO92tg4wPazBfTtYYGuKSFSYoa7xGfi/I1VNSG/eic+3oc2qz95tmSEB7yTOBrzbfzkvRv1NG/54eKHubsJr9XZtiNbOp+Gj/FutWB3ipq1fu0ury7UEIDr8C2XIXhUd+6MaHyXXF/WUr0EsOveW8HIcrUnz4OxCOJHNUSPUUGH+jM9Z0qttOXS9FdXxpS3Uk9SGCb5LcmcO4a8BGYz/zEgjjJq1/0UsSUtCff8uSclk4STdTz7fJgt9mU/PN/s3VLcvELtOyirli2NmgGRtlVedLXXswrpDhbBXbN7w29P84e6VsI1jj+JaNZcxCudbR84SPv292khfr+rnzqu9IKt8tP2oC6h/lkaJH+v5EJLK6azCpN30p+J/jqNtXDqebfmEqm0/VfLomu5Va2uk+qunFI9jSyKa/tq1t617D3+5of32XZS0U5/3Yny578bqvR/3vnJnWm6veZ/5Hw1xj9t/sb3n8JJoUHdd+k5XjIHp/QixPI8wuYtNN+f57PTOSHxkzltufN+rDKkWl1h+ZLBzLzgpWEs64Vz3dnExaeCtnnMqdCVdMfONBpl9WVBDAQ4378OODDHjHRaE5sx2ppV4zlxPXNI/LKJ11CdL+U5mHELdEZ4CPkt16hzfOhThvqwRTLSlT8xTujlCmCFOjI10W/EeO1wy3Hj8bwgDvwbRdCX/C01n+BUh8Fgs+JCsw6rpKnpWzv/32oiuUIIjxTsqS2K3RU+EG5d9/8Ai9iCuXHF11T/rHJ+9QVvd9nC3OUJI8pa3qvUIj/oJsbUGoZoCTV6/mjzPWL4/IcqIir+K90SRPi49ph9ny13nzotW301r7kA+JU66T/+sNbcwXiFDn8u65/2Y0TiZOfvZ6M8DD28Kglq5ejfiTC+rsSxeX7hLRU7SRBWIeKG6NzY9M8zH5tMuH8raN0kRY+W1GW+XRcnbHM03xJtmvVgLd7RMoRiS9xFrxeLqr1VyJUB8VhPRrbUbuZLWEO4tbOD7bcxmk6I257R9KVnl8bH9vLQNepcmviyLA2e4EQW4eyOucxU02HKmDovc05+wctORVvXNISf3DfruX7QOpXk3bPG+zaysmn5q/CxN6O/SdW+Ke4pZiN/Wjp+8dlacTxsllSpHfK8eHcrLtU9wp7+CWDLdpG1l43HkEYFzTNmjUVQhppyC6Ug1ZeRC9M0xBVGUoUh7EYctZ8aRjGdOLQi5wiJSoqzZB1HhZqT1ytUTCwTwjXjdz2W03pnS9htaqvU388LjyhsnYWrS1qj7UOC3zYwafUXEZrW6r/H+Xs9EGafv+r6UXj/8b4jbPUbYQlf8wwaTf4h9Xzfl5Hs2yTduU3y9BDoDxXP1nFo+BAOptspGAQqazbpfId1S+6CPvD173BXut8GN4zrEZawzbFjbGOU3i0obAUNc0maj77ktZah2CHyu8SR1iWRe88ISLh6MAolUGzIU/JpcjLoPxB09/BychiKgO8bLRn1t5JtINlzQgCzWGcrQrtk+84pBxOmDiw+iS+fteTwOnSHRu1kGBGccZi/0NCYojob0Ez9l3VT1xyyNDCkTBx4K4XRZZu+0aH9ct4h6ZScYV+9VOZ70OHc1lLPifnTV7J/1mPSBBLKXIF5VsTCHsU7TuJ/0J9lMAlNf0q4n1VOvE8r6W2QbgA0ugmz0u5j4/IWylpM+36FbFl+ri/tWM8miax2Eis/mLZ7yZP0oqDE+djR1dCzbC6U+xIH/wSdZkjUOrV8tIAoiyPktdNGfpkC1YErTgeEtmDSMzlEQoSPkOcq4GZKGI3LFvTL6N1T71vPLhfzkn3FhFXaIoLYWXYtrxGOlLMNHssYphCNoPe9mhlFTHJhBmF4dQz6UG5Ynhm/fLyNWbE9FHQlUBnHHmnUdA+k+bmq5t9/NKgPbXdDALamUP0+JD4f8iSE57t3L19Ldhre9nBh9fxWYG53juEKRx2bCulV8npnG5qpcpdjyJkrxlJ97EW0xYwF7AWsG0vCRoQ+Up/cL5X+0UQLOhGUbyViN9Fr5QS2yHwQouzc0KndkqDaDAvNSHResgoQbrolWXhq7DhJ1LKeA1qGCh5pqKKeRkJLM3TDMUROEqDuJK2xCaJX8QcLFSkKv0nRjhU5ucHhCk8/8VI7XHfign+9QlPlgupjSknVN+/LnS6+1b4qsY5+kfyNN1gbocUsab3CWEyFT+7l6sqwsENz3orTs2M+Aavrid36ENL21OtajzRxAfHzwUi7Jt8qDbOR3it0bw6mBzdBjtNfKyXpArbKah8E3/J0PzH+PhoKcw1BM3lSb18uW6LPBWb7WOh5I/fFmpFRjNkcsNRJf9DyChIpCef7N9i0rrylmYsca0Ns3b9h3xCILJG/vII2bSiOfU2ofb4g3PnU9yX2svRGkyaNDVOmo+f/OqS+VVDkWdRXIIy+CjvmNF3n17xRxKCWX5VzM1Lv4QLyjCNOAnnjfVa7yncfiEVXNpORQfl769KxFJscZQovpKrhxH7xOhrUnW2q7ymf9SP6tX1nCnp4wXX0i6eaPnJ59uSv6P7SDnrAV0WrWfnPDuX6/8d+o6HbUX+9nT1uB7MPr/LyXtGLzwgs+DbQ4wdQoRihjpG9ziaJko/T3IHf76NA6nX2rqCZP+rVn6/lE8Cx9NjrE+DI8lfRDwscvm8QsxdkGcH35Ldfd94wdz3Aeezx5en0/Kx1m2/Pl8y1CWa/DXL8glZpSYJRnN8bfYwgjEitUrTe51xKAqZNFviU88T+Q0zNloWw9nyyH8ti5j1zKKTWMMhKAF5jr/tTH1OA6rDMoXs4x72uqfWBKn41UeYelgf4TRrC30P8egsOqLg/KlD7LQUoiXJnJ73nHzJwmkDgX9c9U/0iV0UyyPx8LLIipN6FM9g/4Pf1qcHSgUBWspdoWmviTT1w9Fwv9F8xZ783sT9NNtLftfpdRyXnN8RoRFiwAO6fFx9Yo0/XgNx/YgRH0Vtf3qjFFop7xnEYk+Y8FYE6jIVOWDaMfMroZn45M3rkulo1S6OSVpUn0mKH6ZgNdApvz3/EebkmSChhYAltmO7tIVz8kYyi2vynMu5YqJFfEZOwssuQhVDD5Pj1wHyi4XiWy/PTK2M+myb5gfpspvcYaoqF8qhz5TJ7zR4cynJW1NsasqzRy50UlRr6Ob+9RecLm92D6sb9id5cuOuUydUixtsXXe3t+yYyXnSjK7U2++txwQlWnVgW/ptkDizeua+pj2a9FG/f4grkUG9PnDg+mMYS/kG+1lg2cl7xSzOOe2wgqdCOuML9wxpVFY6r+p6cB8LZrEa2GVh0Hwcz+PJTK4d1PMV2tkzlV/K6SzVVTK+KpDd4q62bh11QFO1CNtlmbMttF2N+r36JlbrmV6bzP76MVJef53IZzbEwDRmW2aO07NIy0NMBWnOwFuEpT+fg+3Of8Yjbh6NbRAhnOrYI7MdyA4zbvyiSbs2drr5+O+8Y3srXkPugcvWa49Kft9kKoEnmrwZzepXAh1rn6ladIrpqmJ2Va8qvp9tT8gir/l3vD15lJR/FOqdtmXTmYIdiiOHannqzTZ3ZH5vgDIp4IEb+W8xmpsspmE8LL/jd5cC/d2jb/Rt5JRRz6cTPhVRtSkpSZr4WSiyfWs4e0S+adyLRYlCN7+XbEfokseJ76BDdv8LO5D1oXqj8zLClDZOgbpXFa2KvALVRyxVdpE6/b4ujuGHQfRxtrbVwsKeAzfMhRsoTnIH0p/4X8phbn3KOKvIfe63x8rpYmB2+P4mqOWlITWK80wBQ2M5Og1ecY5rzF+ppEEVOd2pixYcq7ZqN9R++gzMwaD+w448MRZ6sWWZVswPTBdJGtyzij7vBxYJ316ntEqLFJ2y0J9YP7bHDWPxdC7Fuf89jezz5ufEFBn+3rBSpRUK8/X3iVw8wV+8v4t/WuGZ3xZ2HnIfHWYFnraQkylZxU7mFYX1dZP7aQ6puDWUi42f0Z/J7B+sCF0V3ZMT7irPaVxOs0byVeYz9SvNWIZf7tL/NlNaHsIPE4lWl6/5x9/1Usj8HP+XsohJ82y6nzCudtF3l0DLix1/Q+yy70dYf9cGxZ6pVvi2PjyjaQrjLNyoEpCbQpsMeC08dmlHrma3e7lGwaDAsdlanoXN2j5ss5r8dM2IN86y+jq7GfsZ17h5qUhTA7e4umiYZGhNsFv0qaQ1Vp4x57ndL1WvZT3ifEKZ34GU5a8cjx42TUy6SKdkRj1JpH2JxynVy+Uh3/Rt0dku26Kn2VSJsYHEDrM92BXfli1OJuMAQ2u6Xq/sZ2NrfVxx9r6cv47AT7WepeeMCNRnf0q7yscEkR9wWxDEWL0grcpDP6b1fDDuYlAo0HkiUNbuuD+FHUV8ln18tvKW0Plxnu/NjbsFjYAbIcfc8Oou8+i7Z+1N/8jREROafj9FKbendnfWD1DA3g8KeZLTEY801O6or41Do4C0+UN7XS42OGJjC1VozuRrSvYspWuc1qktEQq7OYrLf9h9Gp2mvjjoAjvF2gG3n25mH6VWSLlOXCmyDBFxfgnbsNlDP1yo7m4lMhsaR+UkJMimcDj6donRxOVm0rlbRUas4D/ONuoQ0BHk/tmUhGlIzOBEBuXl3ml/fJ//fZgSv/fMtDamE87U9Wo0upRcd+6S/S5+xbDuogQFhvD84PEBdaZ4wSeTFYVlXb6L56qJMQ2/zh0QUv74LwqmuZvR/tMcWYp5bCHXGdH1RMxIYDVfjpSTdeyTIpKxlg+/HsIPFv9PGq+5eP7lKV76hT/B8CfcEUjUdlW//ZC9GMjdTvj7hdfrqcjpUG2lr7QX6vnPDot3xP67TsOI1cjBrZoQXvvvfuPqKsH1Yz5veh/PM4oBFcSSkj8P8Xxsl/SFBTc6pBJwGDparcQmLlgb+3hsSASW8egpJNmfC4QI+vGWN9Av2E9gyBoNN9Omem54LYdwbzqGuj9j9uVtjRjALxHYwUicfPMmIIBuwm71sLnf7imZhnhhfSGmQYNNaRgT2WdSIpaT/Y9/BD4IJNMEk50vV6LdaPwJeGuZ/gsnqWP5o4MPY04J2iG5Q8kMXa4Ax/Ijddm7EBJf3OVh3uv3LZ0OoYomnyeU24bPBf+Qn6ZNXR8puEYyIeK/CkqXx7JZw31MdzDL5qS7l0xm+EOw+i+n7acg8iwb2dPvtnqmH3YJaFyxB7+zrDq6UeyiZU77D+YnrG8aDFOnCeCE8aiL7qtrNa5kMt6avmslVaxvcx1ioKl6wzr39vll4KqnEhJOvMLdHK8tYbRhWaVf4jHBHgKekJXwZRepsYi4rERwr9hFpFZCStPGS3K6EA3MUiVlJXfkrsl/wkFE/cb0/0hSSkrsDn7RtGOucxrYDAx4FFoLFEqYPfYjqR3Jqp7k7yUMv29bG7assa4rSpsTzXc3KPV5NZBdVtE4gX+taXO+2Wj/eNV+1WRxJZsjINijj/ohiRotTTJPv8fhSpazQ17bHb3MQkwP+WHoxgyxBQdG4Y8RjFqN04d8P0rweGr+dWONMBYoTT6fUm2uI3wlh1igfGPH/c5BP1UolSIqkoV4klwVpTiabWUovEbNhxt/jtV+D1cZ6ZPmvZ3+gxCMjk8G5ouEH98yUHj1mc1ml9RxS7003FMWIKvSbilptrGPcQ4KIklnwZu32zmjjrx7HdA4+8dANyC8g0h79so74v7zdYzbqFbOaNb7taDABqp/G1osJPpd+uTYZm+/edoElP+JVRUS5uBTSLzq+SP6n4Sq9ohI1PG87NRwSOBaOe91hjZhtByaW7TUdXhMl6dC9+cQBUnDs5T0TKLm+Tah6rRH3jqeqUZJCL6J6QfRHKYsmCkfBo24yCio4wliNZeUGSIEGDJmRU/b61a1SdZq9fSlY6lry6suHdi8nQjoqFOc+LbNZI6eoOhfFo+SMYrcBDzYJCcQoZbU4tUrYj1ZVfVvXyTKufX4WIhxbla0rvxwtkpf8E+RZ1CRVOzGNvnAeLrFbQBfGcUlqQeCZkcf6mRm/CHNwpFFTaWhvHCWwrOGn8RLIzzlPdySM3R7ueZfU4Yi3vWcyLn+2sqlpKUcbH4fT/oycFF6MH+TMIX9a2pU7PKP+hrFJF+co5dhw74sivtTWVOv1eZ4X6fXUETjmIdm+5ZEftmNyULlOz9BdPMc4fn7aP38fPa2ZK6NLqie+DLI7Y20gcm9Yetl+w2tIA6d5IWDGZsx36LQag7tNk7IlYwilrZ/R0ucq8+L6dH1XyZ3IVtErkxxe+G6tBJyJrLh1XjIBmwiac4UqhfhSxj769mNuB9p6P8+1JhuYE+gt/PjXro5KyyQONx3kcxKH6Wsti/mp+DmcuLG0ZEgD2fJviuiiMoiramhwLNNJGSzNg+Te/A6wyU4RvvHjwDElpvoodG4FKfXKl1dinrRJ8Ns66UlGoUyhNUf2ZAOhSPN5N+sxtFLbuKRMMlwopA5qMQwjMocVc6ptv2clNG2XI98pbBxgoYfJ8/DYate2JanjJ10Tev6x3qu+/Z7gom9Z1IrrdMQY5beJ9fS4FCnx8+evSv9vt7EjBHyUNvSdq9uxkkSw1NEWXn2ou6NVfzNY1y3w0lFXh1yrwS5XxQOhNEDPJH7Ggbuz+7LCOWoftDHl89XBVJqBgbjqhYalas1JUXw5owiXTliEfsKUPDOlx/UWit3T4oGMPCgFZlLPivdIRkcXy5z08hA09vn/Dk5143gm0/KQ7Mweue5bpToFOew3qkYNnZ3Obj4pIIGNZmQLBGL+uYscnA7vfXv7CPx2nGWSDx0v+eFeSLss5xkXuw9Dt+4hYuPkjAH8ixfnE6qeMWoS0U32Ls8mUCv/EuB6s0f9mm7jq8fM0QYjwh3NyPApWATvWLoD50tPvKzhXqRJO+zQxPdv3KBGbEEDmoMdetuWvFsqlPdWRVPF8uomKZayd3GjUXwuIsenhccPNMxFQp+dcKJ29Gz+dtAa7uJ+6fgxMBUw6g6dmxtCQNHqLhgqtdmacoj3a3QzLw1pVaJMhmDUr4CWavdklinwNpl/MQ1eVLsaDF7Zm45hHbJ1U8HvtzciOGZC68+aCNFf+8Mz0D5QvZN3o9zGfnBOhK9hQzX0iFiAiMtAd/GnhSS7R9KGe2SOtL8urNytKSfngTaXMaLZb9CCWpf8T9jHu2Zvn4Yj8nY0fxUMrQmR1t1abh5pTEQJ84u23f4JsTQrIYW7YD/n/4DE48Ty7NZkjvCItxnlHwYNs4Y5/7RzKT4RfGRHXFUU40B/m/n1HSZnm2Ks/4nHVFyaeZeQ4OvdzMhnRw4lvl4sf9l6hnW7drJV7rMkklV5cfKEZiX+s33p7UKZDP5+WMrj39T24jFEc6bzgakEw5FvfYLknvPrf6fdx+PfP5/6Qt1nlsOXyuRU70pej6w9dHOJetWlYjdiq1Ji0imUyAmDtq4Sa7wOOnnnGMW5tjGCvZSzBUeJ91eIXBi9/eN3shXt5itslCz3cv/lfdXCH+ZbfnK+mVpUyxzmns5ktZUJ8l3YSYO86PELt8n0YqWDdei2jtsR6Y4f/NkmOzrGoWEZkMo1oyuUHRjtfRmPZAddN810YXXoebkqQVJa+HZNzxLGvrgHkHVnGt58YElP5n51rWd4YLnKigfgY4K/erFMy1G/BZnykLq35ff2jIz66VlDSiCq+Nwkudf+TpYK1pxE7h9W7COWXOLWr36FpXvu0xA9yWY6DqOz7Ixc6kq7DOiOrfqe+v0FsfqBjrU/06LNuveP2tOmfam7OaU3/xEpBljwWlATJqM9sErCe1zC0sPxmOU+E2dklSKbQ963ou5hqYfU2i6001+xoe4zGvJKl8VN5sbBWjXZ2ueoKT/Nkkra+h3IWr/xUbPNcue+fhUQ5pFY2lKberOQYP87JE5fhNHmafGk5+upO2iIZ8YU5GX47OrUR9M6DbXHBk8m1S8Lq64+ZLm2mOXYLYkIRizZvBmwk3Ma2QCvf2bnl9G6WPNz9inD9o0Yi1S9xs0SqUjjIRlaYj3j0UzN660iHkwejqKIk10xavNK71ditziww+5EgJ2Tyvp5/jU2qWU/mCvbYmjai6yjiVuTVjeEvFWEluU9z1j/Rnwh92+3T2zPGa/KNvSSJp/V2GDSFgX+ad+4PJE2hl5EQH6uBOvPsUgRpUEHlb4m+Dk56vHFLuVTkZcNIgBmAu2op71zlhq260OuOShGgHPjzR3y5vk7xNo/aw7lkjTO1p2W1xTPhZh1PA/eIDNco/DoJyKMf5FYZE2d++T49f/Ruf/LqTVZghdEUvU929XxmYW1LBFcek8x//ypau+F+FFix9qFt7mSNlevKf5gwg8rx4PrN6QxozI7CunEmJWwsfWFox8eWUDxfXWJ3zXxjOSpNEPfn7Won9AfZLOr/92/sO7f1UUuDJVfuk0uTrv2e3bY2NZdX2oHRQ1s5692fyplP8ruE7lS4dL19bpYA7Pe6uMoAv0PJVjGa7QCM8ZBB2V9alODjyhlCuywpBzIp7zqnoCnSEPd/nf2zd246zyr3D9xVYKk25LxNoGtkU/2GoiX0S/Nk0aDng2Jo8bNb0a0FI7tyNPIYZmi17gWdnt/sLDi3Tr7hWzm+yXZM5I/lZ07EJ8qsaw4DaW3vuO3BNGb9cEWnc3GgbstcWYiL+//1SxNPvYmOQrZhchYlxGuVzGJ32gYKw5akBNjhf0cX+0YL37VJ3dPA/RSUNKW61OR2dh0yECT/ksRd2z8A3dddhxyZN/D6qkLpVVxZ+jFxpRP5Zfp2iZch1Cb09F34h4iRxtwC50RbKTWsByc35aQBaos5JKcd2gwyTPdqFUERuBkK3fr8FYkR5fviPh50F1pI50QH+IOnEp4VTLQTjeTLEg3Pof49t1ngiiD75xSTvFG/7Fw9OPBYWXMyY6SoJD1Z2/fXn28j9dHK4thB9BS2RjzExf+QJjct9HNiLNvpU4s2mtCE/BHbzcuO6tYM2rR1HhZPAjS+nHe4Of+1sUn4495uPrBW17h48qMwvpzcTRzCrzAW+v6Rr9SdoxFgT1kTykahAr0eRvVyqiGEeWJn518+Seb/Mln2HkVrw1ae79vDWAHbokyHs3bHpAv9mEGqWukY+aPTfgzmg9dNDDe/v6d07Z2EOnxtbXjcqOrHgydLfK37TCyr2JJmZlMkqCAqTpDHWpJ7YiSVdepG5XTZttO67SL9QNHXBELNYcX8SKrbrdtlObMa5dyqWc6CAFK+w1lrWT1/t9xye1J3lZO5eiaKHC/ZnqqWDc+2uFbmrJBY75IbVU92L0z1gsHCpf0xBqXE/mLNJ/JmdkTQxJrLwh9E3vNHeoX0RBY1MZtRBgQjEQlHOocZBB3LROGg8JMrJPflkZPcT0SFoAzfONV5boraNb4HPKUI9XE7nvMRXX9CULQqhC2dneWrxSkrqlq1b7Io5n+aJmC69deV7e5ZugjcO4bVQfmQvpFy8G6eenGrf14s3TbAQTI9TYSzSvcIP5akX9+cNYPQiunmqMhnhzsatEX6tVnBs/VGBRo7s0Tll/ST1jFxp1NSwjL5LVJsyfZYmRYmWc4cw/l885WOY0rylnZ5YqmOoUUyWLciXhiad6Q+RZg7CU8A/56rfU2Fs6XVr8wVFUCyEdJv2VsaI1pXv/vEiE+QKU3f9s3KnSml3aqwl0ShLotZiJDojVDtnr0aOpvRbnJGSGdTDbtBgn1LHFseq7+3PyugQq3G7fY1R0XdEbub8o9VWr4PPH/lNWhDkamP2X3yMlc4vam9iAW6GG8fEPMwSk4eCcNVZmNEeOPOsgeeRODCPxH9LpJilOwTMP4q1GRsaUxp4nq2YO2ZF/NnDDfPB5LlDVJtUs6weC9Y1JYyC+f35JAOWVTZrSi8KR40CbF/zfkoWOAvfvB0eR9ZdeIkYn1c68LJiautjjR+QjMTlN++B82PJTXcJflk5+7JjuZ4kZ8+7LYec4Um8xGb+4b3JSqynf6OOwcmP5Q/E505LlgyVxhn1CZgycmX8GT5atGCOnqsumrtXohqnYUV4/rEcMyjST3zJNQBtHKXgR07WGRVx/3fXX2kQy3F7CXOgbGh+i1yomKyrPA2f5wCzBnM7AVy2Zc74Von/vkSsf5DaE5JZU1XiLojB8I7z+k7ApO3Wq0apStEr3SGtoqpCvbmBJk3wc6wN+UGfND+8z/0EFpo2HxtTkIwbT3ErBGeKrUXlcuF+vg0nOENt58XIinScxu7n2EraTgwwDGwpqexJDSCZul2QSrhTmvPGvCNjwL9lOcRnCCdJuxphfPHtLnS+xRXtoxXtrlI43LPG4qudMzDYo6Mor8ystdovf0wNBDhpV/f391i6D4YGYuRN9x7IJViz0qCcoX/sUiEwDbp90SQ3WmnY99eVvyEs1DTvUuzS3l5ZTJPxZhEDBWU/mNklnRmLbFCVQe3Fo93lS6oDopymJPjPpb0r5OCaHnwunk9wZylUUDU/2/4tlCd2zXJpa/fIOV0t9E1FYWs1WoZdUhZLm3WP0nOh+u64C5bmls3vWoe8V3+4KHFo70Nzp8XjS7naZslnCbWxCZgVxDnV07j67lbwSzz0SqzkMHPTrXsSNGP7r2hhP0dDrtJfinhY/pIkc2ZbMykzqYP48Pwq9aY/xuR5P3zTj1vwFhx++/MiLghV/JPWh5Sv7t9H+wUlyY2X7i5b7KxpvvW7SQwVbGrkNmD2EMV4WvYlVfU+oP6pq0efxC7VP5t/1rJ9hn09gQ9AZ4meyXeHcF/Myjbh3QhSovavO+Y08TiEKpmTRcoh4hMI24/7fLoMm1fA6aV5kVnGLu4ShZZVh0FmeSpu+iqLNJni1Nu1ap99XUlQv0IRMnYhQqCCh1fohXQ5NwbmD0Dz0o/bcDRq26KwP1eebHim26C/qb/p27Ve2Fwsv0ZcXZYQ9/U1RSuiaxLLKba3emprOnoq4cK2k1OLE3SqqUfG2aOu5MNCEEA6//Tfdkd9h9tbVJRwZQfOZU6VPux7WKl9MxQTOatjVuXItVrlTb+IT+ZERsWnaLqSE6ycrY53oJYo0jP1sGCRCmp3JzpREC5npuVPG+lz87s2FSfyIigY1648F/75cI0B8mt77oMp4LnJSBcl+/++amt+MtMJUTyTRL/LFL+ONDxL4tfsGk39lIuGRp4ePhhX5ZKxMJnLx25SV/pTIOP5gsxjz+/v7tQ10HB6GTOzIromJ2c8q349z+Y5+33Kjtlz16Z60ImdWiQ/809NyaaBw+Vb9l8OrX8hq4Q4p657MdEHUuYqZIcjoUe9EW6G+sa3o4Udd6jNZE46DSlbVbMdRr19x/zan+3x9eZZ3xp8R8AbTPNua4/FNKfpr3mNmsrfMfP/d5QflI+pjQ91wWbZDrCUstdLaJxOmOKKTOz9ZAohuKGpPd5xy0v6WsaNzti8440u4iKqSYU7vGrveYhKZ2RRlGJXRGITHDIjgrN8lv9UO+zXBtsrdUaYvFCjJiacQ+CQ8J5OkosBJpnu1bsKXRipnz/Xis+O6hV1i+3ges9bsuwaVoCthmZGzUoI17d159nfWGDRX5E3c1a6DNGesh9nq/L84svib6Se5TpmS2/rO9cVTS7/UaJ7K7lflT8bQoiCNUHVXKK+7BLuUfZOtcY9iMek2esPKjvHfCq5BjR82i1u5Ki1T+mHfsO9sj+KADefRZSZzPNUfU/FlM6733EOIVYTVDr4TV9miuOERn60XNJDZGRVZ/fsDVc0PSTpLDIddw286Jzy7zI9jA//LpBA/jU/3U674F1BtWRyeKIQ2WkEWONSu3Ztz0bcjv7k3nBf+9sNKA48+jvmDhuvgaKN9p+leJtYG0q+Z/84IVfovrQiIhb1GMzbKtV59J8Vkj00iuJYZX6wISKu+Gu/yT37tIRLfs0wywPhRf2/9Ff+L31YOAmwqrkR3nA8/IH6U6TbZCyg8E3yAZhSmhz3L29uA52OVMnXFU/noZRg3zkLnyTw1zoD63ROvou+WBwUI6Ugfbsq20B8+MJWuyKau+55g0fU69Ufgdri/Sed/w+F3ptX2lV86nmLaEHtUNwe/a49bENJZuH4kgrbLx3FIE2nLH/e1RP0R85BVD0fBmk3qefrONav1cN/NPe+jlAzjCVbXrlIa/vvfYatGe33jnWwmJJqyVlycExLcc6m9nR9NOGv1CkbQxBfer1oir5Mgvn/5lFtk9N9p2ajJhCsOpWVfV58HRfOGh0GN2tOQQ8p9kbxlZ9yPH8b6mpJIB+eJkMbJVomx9AqivS97XHZOtQybpsyftZmt0wp9UcarV9ll2Aii/OP78+wtbTl2RHNcS5VV4Iok26j4QCW+1+In++XEN779VrsqSxfYTcGe4xfN5H//tHeLDLESupPMEYa6vGaadZIltlliNPpEpKQh70d4652xlTqP3RlTmbkfk1RjpscxIhp23lrRK+a+rbk9oKuRK7S0ijI04snrMkAodvnetVyqK7CLsdI3IlNyP98qVedD338o6ObD6yTGe2cIvP7fAuZ636bGhwsgzDmUqey5ML1z7NooNJpO8+txbM2ty4lTk2/kZEeIf1H38BX52UOzeqvOFarT/JV3TGdSdy9XqDAUqo0lUT6t2RPlHq292HTDsKCuC1d8VbWqueFUszP+nzLvuc1OAEGU8rWeyGV5gWqlNLI6ntDMaPjj/dYqt6G9zG4TUgci13tT6q15EZ8w85X6xEB6fENRVj78sZkfHYeolHgkPbdDd1m6a5Z4LeadSjcs346q/3ocit5I/LS3W0MXX30iebYpmWY+REuvZPv+ME/9AiFVwR/dT7Ma/9soJ1mhLMaWwZBXxuEbwwry1P7R0w9EDUjcJ44dh8aUsl51AtK+qG6jv8X7yJGs09OKH2LrRPIfbKDPq8czChK8iNGQR8ob39NTsvjdZqmxxWVPR8n8o53hYceOXJRPXv6U6ZSk+p0+PXoZc0HAQjDWrmyoVX5INuHupP/AnDYORUDuYXRWb1Lxh0/lrZZISyf73nJ11DPfT+j/W9/9eIzSh1quHuN23Ttc5irm2fSt5LWYpbJBl30bqsHF7480GBPsuK5IK2hTi7cYiLoL6N+oOlFo9KO4xJWqU9viEz6F3uHmxQdyYJ85fZgWw7VAo4ixZc8aaSkeKcjYQ5t3NyNIJTqYbwmRTJ9/XdqE3z6I9qElMzODNPdjwROBKvY/lTiGqjy2TUQ14WtfODKRGeKFewQCJVO+oWvPdHFSk2clz/GTiSqHPPiheS3L4/cQQQD/oeVXJP+2r3kI8cqkrTsiI9GL7qpl4Y4vvmesDKh+3CSTuHbRYOulqlcPEPjKZuqWRL/cJpN3n559rNeebCGHMTYyncl7/R2DZ4b9h7XhWmqgI9JSwTeTp1+Qf7rGPb3g2vzNOImuk3L6WJuCU0mML7RPue2yBw0F37uqkTJdX/14KvPfraUO3npNNw8GnWcdYo4Eg1vU8/YaG+uLuRkRpnKnp6MICTZ+otTPpPzylwbD5YNRS1AZyxDqpITTynvw2yqO2ar6TNULTnDQc9/0qequoO1Kpbjp/0EX6Anh6cqKJAmTvK4g1GWNXuZo2rG26PUoeuLVvWSsOHZQ+G87yMIsu0Jv7lXR8EoJlW4/xk2hcyyTn/aaJIW44N3exGNvLrfcE9z1BEzPRxwSd6Nd3dIoDd8691ssekv4sMg8vcv08Z6WsZX7PBryqZS9ejIS16BnMbwxh+67RIrlWCBhJh0hE3spV4HGsd5LpRjyTqG4Lx790TPKa8Ug5xV8+zr6WQNjSuT1c9JrEp1YJNySHdviz9TC7taNhintXyTruJs6hkpa1elu2m+nlwfcW+eNZc95rx1lK891sUpsqa/izX5OvY6lydEWU7GnnpPM8E/qkdSrfr+jLPmFuu+1xqDSdy50xIkPeOby4ThaA6lBO6ptWWHPfR1VU6SeepBRI3cEz2z/7os9uUKKNPLyfT5rf5nT9GNb0e7t0z2rmtZSnHYcJCknRN9WEuEQwkOMp34hoZwamEaSPzAHBE5XrgNW0xnJqYWp3e6fiztEzGx8NRCx4jfmVj39+DGrA73vxde/OoQjg3indahFY92FRilb/RbHgue0/vKTmU+fd0y7HWy53qhv6lBxRBdXzeMUEDeUij/f/q/7fi5KLzqcUs2zsUFP+lAnKlIJy5GO01CZ1oozWzBjZb9Yea/4R2DrpnpyxpGg0c/g7xr5rebSskm2XFPoFevV4snaCpcUd/ZsTG9ZVU+JCQc+eDZzSQuvGzSaouRbd/Ht+Vh6LaK0MhxhhJI0jhWvSCO6+j1a8pe8Z88+qqZ3PQyR4N7fCTYhLKlUQosvxG2P/PPn3R9yxDebz4yRKNQdjdnsLq9KsDA1rHy/OBkXs1dvOvi8bRJPYuYYPasUUJ5/anfhrX8WEFmAYsPlqt/UH9OFnkNw20P9+yxywpdq97DYAS13LCErgbepSDVySmJBSvVTl52Ja7dqYG05es3odgZPrkFGpxLyi4fnLl/o6B3PJg4i6LGL/3ZriwTPEKykzAuX/OX5vVRY2tewupKYjjE0Yuze2inuL1rywV1mJq9iuC9Rse6URypUhXjosSEdkzS9ifHKqnaoodDV81f78dKWmrXaBX8fzpeom2P7VNORlOjj9oxEe5PFPzM5zG7UvA2zs4jAVXgtKoZXuFvvb91r7PvWeifTodYfTcNUqDzJ1WMcx+d6pMFHakfVhmfv6lND1KhromIDCaGYjSOOYujzu6hLnetXmNZ0pWVT/FSrF4oltBJiu5osrT4yxpwZKHRsBv/M1142tj11JdMVeTs72V8iZ3tHFF2Yw1nyRuu6/MVj4kybh0pex/eNKMTdKvdVMbto5U1IL/k3mGRoFmNIb26jXh3T/s0yPIx2xng+rxuEMOZLjWY4MfBUo3RpqJXJh5RQt1WNM+LjQ3GydTzjWdx5s6bgSMcgTQoj+dCM2vL2aONupF0TjMmxx9V0bJ5aLkK0J2PGONSo8XGBehtf/H7u5aq/qaF7Xmfajsy4JJ93Tax4oBUwi6eSQJbcX5RyEPDOb9CQ7tv8Y5UEJg6EYardPUMrDw4jTDS+X4zJ/TFTVc/f61Zq7fb0LEYoEM4RyWG9l800qUoakhk8YBYy0qYpcfj2X7NYhtLBYmeC8NoN+tj9zfWxNlNW6lLr9r9v/8o7+LxOWgIxI+SOMwJei3xHm/ecUBwgvtksRdCkwKnoWlzbS5LpHfkoamHk0ydf5N/56zjKOKLrD1WVmFHm4GHuNsm8/ROCqoz1bEnlM5klo2qyj3gDf5mRvs2s6uvdnytTjQmlCAidh+Jp7c980MLgcCnCXCYkJeZFQ8gpX88PDcxuc67+SrY8FNiwT2weyDmv9mRRqWRDAplXjYpnKL8MQzcliQ/Z/ZzAeH+fg4Io3G+qz3rf8PHVtf2N7Jz4hXWcO4vNENJx3FqKo0uI9s4fKsTY61tM0z3NkqlI5MaVjSX3IfP3UQNYig+6+f49yhRgS0IZFUIg3BlCNfyxS537ftOaIM08mYnwQ98hel4kWrIVZzJJmNVih5dDVWhwKmfIA63asqBFotj4tceCuQ4HQay3H9K6F+mFtzHdOpoGTP31Nv3RRDE7RCmPc0XFVqhqLUQs+ktLNb463mCVlX6nNG4zlK/43WlNYKFGvDD8GeFhGBfjVAy7rOHgB5zKtDV9koBcoaKq8DozPT4nbr0wiySFb2spPe9W7OT4jVFnWjSSPbMuvLcj5PfKy07zsdsSjkWsPhx9adfZ8bYLUUlZJ2lfvjr2NoqteUaCGSofSjaQ6bXE+odPdOD1P7lUO8bJ/7bs19Bf5fUK/q7XOo1YR3mfW/HwdMNt+2QriPXD66eDqlz6v0r+Q9fVehXtGep1Zz0udCJc70Urt5SLKh0lWe9lGlVwR5pchK7g7ozLFnAdpMCbr8c9MYhgE9T2z0cbj09P/R7711y3x8vfk/exBh6qWKoHhyYkEd63bNkZDbbUmJ9Vb/E/Zxuj15SIKJJdH68NcD6al2u+CZ9Z/8mbF6w3tp9wfc5ix/vklla2ugjnDP1Bnu7849DLnDfDmP5Pf8hMhaZ9OPl5EsfyoM32Y5qZzF1M+NbojZuJYXFiMmFQCUf5kBaeZUIReaZWcdzKuNNbX5x3b2Un8sfImbtu8zLfPOEeTsCISGOk+czezn4y/unTUxOy/oeyRTMV8n+8K59IUh++Yzmje+L/d7DQ+dLyuIY479HvN3dieEUnyRG/X9Bza723xTzD2X49MufwZNGxbSEsDdvNpLhRrfhs5EhMQFyJZSc9AWfblHJABN2kASH7TiGf/WAPtf8AbY2iVCshsKYEfc1q9kV4l8BWUEoKyeMHuKjffhvwI8zWF80qR/7alThraixopQkNd+g723tPfGWoGO0meG52eGH8j/lPjumsr5lM8uJ2czSdaNUjH5oU7KGkPWTjrLUNdMZoBPfA13/OCnb30PtHL1ZexiUsGqddG7vgmY3/ZGNBHuufSa9xX6ttRK200EtFOLVFWtOpU27RMiJ2IhX+V2O2xvg5V5G+gZBhkYHPrwMbM5mKt8Imnr9ihbzXUJnZNO65TErrlOAgMePS31KjJ6e1gZ8S/MsdDfmEKQTn/RmCTTslXwxZ2FKhfWIvy9fpl5diyWu3lP2OdMnH4FTJ9K7wpKXwSMzefIPUc+6rATdi7Xjxt2G1o4valckNhddCF5VhEuhlpM1TJuK/dRzH51hyKr2Oo873H+R9Yd6XD/xRmvz6FDFRW2UqXf5Xqd6TlJ364yRcR46EJj9tHUT05Mm+N2Q9tR30ubVF2Dan9yxB480n2Bp7awT4XwmHR9J9nrUzm1DEirev7s6wmMiHtfQ6NmD1d86hXqTX/izLG3fcFgl0+fF0jq3o5aePLujmlTIZGXsxX6Ykrt83TcqomE7RlUy/edWfqUPD6ykpK95Tx0HYQjjrmMPkl9ra2zB5yO70U5/NsNnCdFZwsJSVnm/gkaPB+MvFIAHsumjJSCmc6QYR3k8/VPOfVpwFfpegRPAk4kIPta788fWayk3S+0pv16jTQBLTqOa5WdPEs4+YtyFGOXS42q/iFEpK7zf/iox4kH+pkl/5NXbNjTi2hvD7AXvyUQBuwM6Xmimk/up6VHdm4haWjGmzNcNPhe8YM/fSvwZkDVIdiAqYCLKyXe2z2XxU0eRDGuULCeaTwpPbzu5NUiBR2/4PKbXN7aQzjZqBTX/YN/iiC/9ps+CHSipXR93xa9zpT6biNbdInO2C0yvFGyLsNVxPHWqGOvifzPZoNrsXUkhJnJSiExgqd6cgqfVbJ3ZM7Scp3rz4PvigWED2xT9HRWZsCpXk0XdK7mZCpykNZMzPSrFID9Loq6a43FfTjyu1LLnN3/XlTPMZpXnWLpoV8w96sDCqeJpGFEhUr1sqf6dZjtN1q3H5Tn30kQen7Fz/UGq2Wu3L+6SM7sSHApRRB2FLC4j2lsf1EdfYwayWQhFIE5ZfM5T+K9X/xeE3QvwtM/GXp2zmd9xXVo0LmljtX2STWMitiJ9sy62mE3LJvWnYYCRwtXSLdN8VeBOOwpIhw2dDRpwaM5lm8UZLP631UdCwpSJqVf/S11srmaE4aQ4fal3aIlXX6wwkd8l/JffLnKSc9Rsi/+ithbrprktQlQiDSw2OJ6aximVN9LMCbzAS5o0/qRDr49GFiyIbWRfvd+viPWdj1z6TOda009jQfEQe8C34V5jLSctnI+V+RA5rubUhhYCki4SszI0/Od5K/3w/f9X55rz8rwub8C2SUTk+18BcRTGVuK4368vSyN9ftdenz1MjleiZLZbob0gt+2c3PNutA7Timlx40HhDcucCV/WMMoUeWVXbz3hYTwSM/Of8UJXFaPRRjllEw7TNLRtLjMCn8vkJY3ETdRFat6YfV3NW88Ql8w9b+4SFqkzb09ZTtZdM8RcW7xxf3M9HG0xEkSb1d+q6l6aM2Z8bdvU+VUFYV1Jptvw9aLJdiSEQ3vbMLgf9+sNq92Pr379UdcQ3WAxmnxPQ5+yLbKagd0spiovhXMVvDHqnZZiH4j1AKb2pf7rC7TfLh/nWey5/aYdxoGnt61/iUeOj6qHIoDMXS/S55f/t/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B8j1lL97XxNnd2pnAMGfoTb2tazt/WLWnOT84alQY+eHi+9uGp5IdOgfDMijTuTLlI140NahBTeTbjlP0WlTVS401ofoOJpaWDr8cnTIJZVe+96nk4v9D6JnOhOHVee64EEV4VRyu4vnA0pbQvHQw5y1/AaS+w4bcl8MrnXbxtQb0zYNJmrzrEo5U9Q9Afv/Wri/2cvFAQEhMf/u68BAAAAAAAAAAD+v7GOICZ9w1BuJmn9er9SSkjuf3I44v+doyBgIDxGQEVAFYteed7LyhxlEFRHXGYXOl+H0Bv9vbTAaeJzWhrPIY3zQpDO09P4s//lcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/DxnTD/U1z5NPTGf4XVaSXu9pW8/e1i9qzVkIb1KVVnQsHBKotaDcu789OXeysTOXYCN0DaOY3qJ79/kdnke081HoVhfrG9MJwR50m81RRZ7Ae9IbP9slbEJs0iYbBZqjY7dgRCyL+KdVknxEiyuoqw2vX33iO7BffrGOWUPu9ZkcgYrlqJPc7f+wX6dRPtd93MD/mGkQlyU0WbJdyFaIRLbIMDQSNYOrYTQkEjKWGlNNi1HGGGTsWcZYqukyySTbFCpbpVAZmhZL9rHWZZtxP8k59/P7XMc51/16PX0/+fze33N+57yLnPnxtxvNLt759Verbt4VFAgEQoJubTcAAADwv+JoieyYqO2fJ9UZ/EeXuMsZp2/u8OC/86BA8UBIUNXAHy++W21uwTeFd40I21wttEa5qm8FPtuR+kLCwjsH7Pjx+QtrPmv2yN42r/RrkNBoeqltx3tXH/TjipjEoslPNl78Xejm7q/2SNv/ylOHL2U91/tK0S96vViv2/M9Z5U+kbtzS3iL2x94Z3nbmEUtf/ghtkzBtMDnc1oW+fLLcds2bbzY4rVi7Xum5myOvhLeskOZxE57S2397cCmfgN2P9qq9pKUTt+0rX5b3m8vpd/30vvxb5c8dn+jbyqM2nV1+JZf+pdoeXbrexU7ZG9/p2S/STdadus6PWLK4b7d3/pX5SX3PvvTq2UX3oj/MnZMmQkTH2m2bsr1tGtbJmXd4mcAAACA/6qMF5ptKbqyQfOoj+9MSh1aIv3m/g/5Ow8KlA2EBFUMXMrfd/mRH2eF1jw4r92FVjMG/B4bURDd86mGfV5su/qL3oO6X4xoE1blZN4HXX8uDO63J//ddoteT3z727vDx3z+YURwQfHde5Y1Lv5YuxkFEWs+KPHJ0oNf9t2zt8rZNk9uf+tUu3p3HW+/61yFE8UmJCT2rDNtYN39ZWKqXAypkz/ts8JGJ+6d9kNu1jtLKj/YqVW12a+eLbGgzPsrmi6qeLDp8Fm1x/Qb+dL0lMiF2eUWLi13/ueNic163eI6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQCBQ665BcyqerTSpc2Zh5PidqZeihuVeX5sXeaBldvBDZWqlTN9wI/f2zSOGhC/6ddpTWxbXn/Vxi8N/tH3pyOoTTyasHDq8QnbVY1+l7Upvk9bxzmNHnjsf8UeX4M1jw+8ZVid35e6oF4rMOhIRv3tD4cjaVx87mTF/XuSNQek72g/dHvzroPwnVo46VvJI8VOPds9e82D8tIdGVcm+/a3G6TfvCgoEAqG3thoAAAD4n9G9/cjSbcs3jhv64hfZvyYuK3Vzhxf5Ow8KFA+EBqoFnqg+5fF9+48VLxIx+dDgIr9trR0WUSFuRsXWB1/YXKd4alJ+5HPzPqwWFjKiRWz6uskRj4w/MinjRLP06sOvd0zY/mWl8EozD7apt7BX+as5f54e3bVqvy53dmoflH12Rf1Zjb6dmZNZ49jxiU0efrjFxlYHxsxOv7Y1uWR4ybD8oHr13/+pWk5U3O1JKZsWLjw7rDA6Mrr6ymcHLvgr5O4yKfetj1yyad3iiU+Ma1V8UbdAbmb2jOmR7/ZqHd6j1/LxLQYcW/rmruql314xtnzapY9Pn6rebdD3HcI/jD6UUXfc0w90fu6X8vn1slf2a10Ye7Hcz6syX+t5IGTX0Xqjb/FzAAAAwH/F+usFfT89/fJ/urbq9E6NUzF9bu7/4L/zoEDZQEjQiMD8j+JPfBKz+rlpRS8k9W7Yb2bfDs+ktti65o0jWTtTZ86aWbNUVkr0j4fu7Lt9Z7WcdvsrtL83us3LX80OCcu4EDeg4pgz8RsnPFou4ULFBcsnDlw57+4Jkd98dLBh6efrXHh6bqOLa/oXvJ81d1TnyL+uHKy45Ey/T68d/X5xwfKs0Kyeh44MHRCUecdd63d3fflk/+jwjdmP/rBsyYLaVyvua1zip8pTGlx5Y++fzUPLX6l1ekDlreFfVuqx6uFlSUXil3/w6IXE7rE3DvbKmhY8sknJ8A9To3Yk1a43v/27fepPj77jtsnV4ube/cprlbaFFd0X9WL9sDbJs+8PX/LehtmvrSp/dUSxBa+m5x448VNq/xX9xu4YGLL/j7AaTxXZkP/wVxvuubx/eHDwd9MnLe5dfcfRUhlVm377y/zHs+JONzz/bkSTj4aWzL3vtZTCHudWLWmauvb1sOQ9q06Gl/tr2wMZfZ4s32x+hxvj2nYKLSx92+vfzFo9ekDNuH+9lZt8dPLJE6+3axYZ8+nGKd+NPTQh/+lSZ95PS1u0plNwjWHnqr15IaX5L7X++jZnzSdhv5XdXX7fiJy1nyb2v7Ewa+2Kvj0zojesrNP7TGbx+3p3S97cs+ZdmT2zgpLyH5r1zIGW/ZuWTxqaVzPs6Ff5u/u37/HO74v/8UKFO8+36rchNyjhlbycG1vLPf1H5pQFWUEd3y3bZ/DAuJWdN9YflJ779eOjZr++uXLLK+v63FGz+df7W0Q0/CQzMTO+W9bV/fOnX6+b0etSn5RVhfvOnj0T3Gh8xYgpJc+HRtXNbBI/qtkz+woOvBq2dsfsy1ebFju5b/PEgTOfiFtWP7lrj2qNaqes63euQnxMm2IJ++7oOCOqROfK47PDjkRXaZVX7KuRh0ZN29S/fk6Nq7c1mVg/Nr/n07VeXnQ44c02c4vWWBbz+fVTva5sfaDF+qRzx8Y2Dh7xedj9wyqV+blYzr3N+z+7sVndvKb5fZf1Cn+6oMiMmC3Xrm1YN3Vps5pVgjdnVK0RV6Vh/zKV0nd1KVPueNt5y7YF4ht2nP7hrMM1H7wnNKbqP9Lnrjyftm5g15PXC6cui28+9cjsWm+O/e1aZs/YAb1fuvZG9h0v/nXi+MQJzW9s+LprWoPDMYOil0++3GTTnMdfLJwZXrP471Vn1Vzfteuk7LmJD7QeFPfaNxemFmRtTdq+t8KHb2UVdHtsVLt1u/6Yv+S5y7OrXqh04WK1ieeqJs59Iis9N+Xxzouarw/74JmUc0Pur1gp7d8tki69tDMoucKAd5ZuCv3uFv8WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+nx3+dFDaluS18d1Cd+aV3v7Y+1HDcq+vzYs88HGf5ONDhu3J2tih/P1Tmy/4ssHO4Y/1uH/csoblXkm4/nODZ84HjWw7+f1nK0zpMvXdorvaJv+7Z7u6PZoOHTMhrXB50gMDf5jxcuN6q3+dmHjxkcbfV3vqwjv/ebD9kF++f+TBT7Zdvv72m98+/On88MfeaPLyt3UHF1ZMXpORV35Ivaplxyc0vHlXUCAQCAm6td0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/2/ObG/SbnFO10lFm/autuKnFoVRw3Kvr82LPHDovdR1QypcWdbgniVde6Ssvm/oscaxz449//uof+RP3/D8e6XC79n7wrUuzZJPzK4c0aP3W1vf/GhTrdLzph89e7po3fAqr9VO777go8k/5M7r3WRHo+Bt004tW996WIclDcoOvLdKQvs9l3/KaFZs//LQrNSEgrfX370iYvLu862rHCn+Y/bNu4ICgUDora0GAAAA/mdE1dn3S1r58WN/7RnSPzj72ao3d3iRv/OgQPFAaOC2wJlSx6MHju5ceUzFc4N/Hrc0YdGfW8e1iNz0RGqdSVdjv2vxyZoJM2KnPnB35fh6c0dOOXWqwi3+LAAAAOD/MqDOvr0java57/atkyOfyMxLvLn/g/7OgwJlAyFB/wx8/HWbiCLD5tQ/dKl5/U9vCz1c5r3V817dsuR0XPexJ6/kxSwYt+d67J9jxnd7c9+m5W0GfnBw8NBKrb8IaZrzwbcVJqc1LFmmQZ9Sc/re/+T3B2PLraozZ0jnslFNg28PavPPl2LnRnf84PPJ20p/NHXGlo4Xi3XJ2bz0k5i76p1OPTuvc4nb0xrPqVyz9b+bR3TvGDlj09xRBZvXjm43esXHOaX31Cu4nP/X6JR7hu8fsf65mLgyHapldljwdZXuE6rMnXWpzeL6R4o9vPKpOfWal39y1czf1159fOSi3h9/tuzzNhndhj7f6bGHvnhkaOKvY5//efgrHw0ZtPqXrNGvtBpc68nvT6XW2Ttuwm3lBg6O6vKfM8m/vbH7w/4RG1Z/VbXb0hrlt3e8kPTTlF6dC0qumLbqhwU7W2wNu2fe0bwZ9z56i58RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+DztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYr5/QOKoHDuBvdje/bLNtf9v6J7EtmKpQEg2U9lL/gRSiVSEVPIgWpWjTltrW1B6MKDVVJEsEifUieNAW6sGDppSC7UFEaRBTSBHUk1BbD+L/IpEiaCTJTLKZZkyzag7184Hl7Xsz85333ry87AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf159oWm8HHxx768dy9o/eb5z5LkNJ3btP7Trrvbh/e33vPLHwUcOH939Rv2OpjVbdm+87cjtR89uvarj91mDuyeKlrhaDCEaiULYfuDcl70nhxrH2qIQQj4q94SwJMqdXBKlElb/FkLYMtnP6QffG1m7dazseal+Wvv/UyHpcYVSPunPhPL0/nJ5Kcbr7PUbfvphR9fdQ/0P3HRny7Luh3umTomKVesphMWb09fnZsh99LHtra2Pdz7dtGnfnj1Xf/t24Yveh1o/PfzVuc6z1/b1Ded+/O7me09/tu/JuhDCgvgzJlmtTcnN4/K+EEJDVf66WcZ13SWOvy2jviIu/xeXpVlykuMrL/H8tEKqbJjj9XM10zP7Ny2c5/slknEujssTcdkyx5x88olCLgqFyb14ZzS1RkLVc4tCFOqq9tEo5Mbrucl6GK+HqXqUqudS9Xxdalzj940XWj6Kprcn56Xam+P2Qty+snqvn8H9Ge3XxGUx/kO9kNRD+suE0kVfJsc1LunXmb/oy3zIVe1BM7Un/V0XP4xS3FaKll50zegMkmPv76xsG3pi/QvljH5EA1GcH9WUf2vX8mOlStuhpqz8zbk4P1dT/vD5W5Z/Xfz8WGZ+f5Kfrym/ONT18jPff7gqc35+TuanUFP+R/3dr165/puNzVn5byb5xZryzxc2nRrtOXIgs/+rk/lZUFP+wIPHOy6sfacvMz8k+Q015TdXBo+/1dt4MDP/g2R+SjXlX982UPm4sndD5vyfTvIX1ZR/ZnTNL42nBt/NXJ93JPNTril/6bZVK8pPPXtj1t4Z9cz3f1iAy8sV8W+sSlyv9T3176p6X3itHE385lsYfxb9kzdKiareXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZAcOZAAAAACE+Vvn0X4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KAAD//4EUVH4=") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r3, &(0x7f0000000280)='+', 0x1, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, &(0x7f00000000c0)=0x10000, 0x6, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r6) 1.89276881s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xc0000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.785312091s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 1.594696773s ago: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 86.281883ms ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) 0s ago: executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : unexpected cc 0x1001 length: 249 > 9 [ 241.026858][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.039646][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.063020][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.072363][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.080691][ T5093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.094384][ T5092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.104540][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.105799][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.114192][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 241.131732][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.137353][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.168043][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.190086][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 241.201181][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.362344][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.456035][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.471625][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.515698][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.533440][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.543469][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.900869][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 242.695763][ T5085] chnl_net:caif_netlink_parms(): no params data found [ 242.721469][ T51] Bluetooth: hci0: command tx timeout [ 242.931939][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 243.200070][ T51] Bluetooth: hci2: command tx timeout [ 243.205745][ T51] Bluetooth: hci1: command tx timeout [ 243.280502][ T51] Bluetooth: hci3: command tx timeout [ 243.355896][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.363798][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.371676][ T5080] bridge_slave_0: entered allmulticast mode [ 243.381151][ T5080] bridge_slave_0: entered promiscuous mode [ 243.405950][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 243.428622][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.436781][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.444710][ T5080] bridge_slave_1: entered allmulticast mode [ 243.453811][ T5080] bridge_slave_1: entered promiscuous mode [ 243.600342][ T51] Bluetooth: hci4: command tx timeout [ 243.810159][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.817978][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.829065][ T5085] bridge_slave_0: entered allmulticast mode [ 243.838095][ T5085] bridge_slave_0: entered promiscuous mode [ 243.871329][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.887169][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 243.939838][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.947636][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.956450][ T5085] bridge_slave_1: entered allmulticast mode [ 243.965869][ T5085] bridge_slave_1: entered promiscuous mode [ 243.985242][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.261307][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.291532][ T5080] team0: Port device team_slave_0 added [ 244.365392][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.434325][ T5080] team0: Port device team_slave_1 added [ 244.547803][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.555819][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.565940][ T5087] bridge_slave_0: entered allmulticast mode [ 244.575236][ T5087] bridge_slave_0: entered promiscuous mode [ 244.595294][ T5085] team0: Port device team_slave_0 added [ 244.713058][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.723821][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.731856][ T5087] bridge_slave_1: entered allmulticast mode [ 244.741543][ T5087] bridge_slave_1: entered promiscuous mode [ 244.764404][ T5085] team0: Port device team_slave_1 added [ 244.780734][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.787907][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.814359][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.819910][ T51] Bluetooth: hci0: command tx timeout [ 245.022972][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.031584][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.059734][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.189949][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.197854][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.206068][ T5090] bridge_slave_0: entered allmulticast mode [ 245.215374][ T5090] bridge_slave_0: entered promiscuous mode [ 245.231514][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.238694][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.265385][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.280863][ T51] Bluetooth: hci1: command tx timeout [ 245.286526][ T51] Bluetooth: hci2: command tx timeout [ 245.356338][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.366529][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.374606][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.374977][ T51] Bluetooth: hci3: command tx timeout [ 245.382394][ T5096] bridge_slave_0: entered allmulticast mode [ 245.396885][ T5096] bridge_slave_0: entered promiscuous mode [ 245.429287][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.441236][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.449051][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.456857][ T5090] bridge_slave_1: entered allmulticast mode [ 245.466113][ T5090] bridge_slave_1: entered promiscuous mode [ 245.476634][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.484517][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.510910][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.571223][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.579303][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.586927][ T5096] bridge_slave_1: entered allmulticast mode [ 245.595618][ T5096] bridge_slave_1: entered promiscuous mode [ 245.716415][ T51] Bluetooth: hci4: command tx timeout [ 245.797452][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.823255][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.917010][ T5087] team0: Port device team_slave_0 added [ 246.031814][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.054427][ T5085] hsr_slave_0: entered promiscuous mode [ 246.066406][ T5085] hsr_slave_1: entered promiscuous mode [ 246.083204][ T5087] team0: Port device team_slave_1 added [ 246.101873][ T5080] hsr_slave_0: entered promiscuous mode [ 246.111576][ T5080] hsr_slave_1: entered promiscuous mode [ 246.121214][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.129299][ T5080] Cannot create hsr debugfs directory [ 246.175110][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.298083][ T5096] team0: Port device team_slave_0 added [ 246.378665][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.386063][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.412417][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.433272][ T5096] team0: Port device team_slave_1 added [ 246.442983][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.451123][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.477581][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.528301][ T5090] team0: Port device team_slave_0 added [ 246.653304][ T5090] team0: Port device team_slave_1 added [ 246.882364][ T51] Bluetooth: hci0: command tx timeout [ 246.912733][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.920045][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.946322][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.009703][ T5087] hsr_slave_0: entered promiscuous mode [ 247.019172][ T5087] hsr_slave_1: entered promiscuous mode [ 247.027522][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.035752][ T5087] Cannot create hsr debugfs directory [ 247.102441][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.109931][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.136550][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.151173][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.158348][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.184832][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.339485][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.346673][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.373236][ T51] Bluetooth: hci2: command tx timeout [ 247.373269][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.375068][ T5082] Bluetooth: hci1: command tx timeout [ 247.438987][ T5082] Bluetooth: hci3: command tx timeout [ 247.646849][ T5096] hsr_slave_0: entered promiscuous mode [ 247.657935][ T5096] hsr_slave_1: entered promiscuous mode [ 247.666545][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.674517][ T5096] Cannot create hsr debugfs directory [ 247.755750][ T5090] hsr_slave_0: entered promiscuous mode [ 247.761739][ T5082] Bluetooth: hci4: command tx timeout [ 247.772102][ T5090] hsr_slave_1: entered promiscuous mode [ 247.781803][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.789790][ T5090] Cannot create hsr debugfs directory [ 248.142364][ T5085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.240539][ T5085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.338043][ T5085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.437303][ T5085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.710902][ T5080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.735476][ T5080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.834317][ T5080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.873632][ T5080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.969498][ T5082] Bluetooth: hci0: command tx timeout [ 249.105345][ T5087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.176861][ T5087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.283100][ T5087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.334869][ T5087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.441635][ T5082] Bluetooth: hci1: command tx timeout [ 249.449256][ T5082] Bluetooth: hci2: command tx timeout [ 249.519567][ T5082] Bluetooth: hci3: command tx timeout [ 249.526270][ T5096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.609171][ T5090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.631437][ T5096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.685742][ T5090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.743806][ T5096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.784699][ T5090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.806345][ T5090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.837388][ T5096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.844585][ T5082] Bluetooth: hci4: command tx timeout [ 250.323170][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.452650][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.675330][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.708149][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.769665][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.798033][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.805932][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.921249][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.929136][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.945578][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.953550][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.048543][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.056395][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.205074][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.362070][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.369857][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.466258][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.537264][ T5085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.548375][ T5085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.611026][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.618932][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.837383][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.034627][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.042513][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.181970][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.199148][ T5087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.256443][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.264319][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.509785][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.692576][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.700443][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.718098][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.726020][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.228482][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.003584][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.092673][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.525666][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.757804][ T5085] veth0_vlan: entered promiscuous mode [ 254.876948][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.916750][ T5085] veth1_vlan: entered promiscuous mode [ 255.150055][ T5087] veth0_vlan: entered promiscuous mode [ 255.270917][ T5087] veth1_vlan: entered promiscuous mode [ 255.442234][ T5085] veth0_macvtap: entered promiscuous mode [ 255.558173][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.597823][ T5085] veth1_macvtap: entered promiscuous mode [ 255.724377][ T5087] veth0_macvtap: entered promiscuous mode [ 255.747614][ T5090] veth0_vlan: entered promiscuous mode [ 255.810037][ T5087] veth1_macvtap: entered promiscuous mode [ 255.893609][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.976824][ T5090] veth1_vlan: entered promiscuous mode [ 256.031533][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.138420][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.150496][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.171583][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.207821][ T5085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.217294][ T5085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.228071][ T5085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.237303][ T5085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.361044][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.372808][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.388299][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.399223][ T5096] veth0_vlan: entered promiscuous mode [ 256.507244][ T5096] veth1_vlan: entered promiscuous mode [ 256.521457][ T5090] veth0_macvtap: entered promiscuous mode [ 256.561960][ T5087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.572167][ T5087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.581529][ T5087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.590640][ T5087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.680538][ T5090] veth1_macvtap: entered promiscuous mode [ 256.837995][ T5096] veth0_macvtap: entered promiscuous mode [ 256.906079][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.917213][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.928693][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.939540][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.954929][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.011185][ T5096] veth1_macvtap: entered promiscuous mode [ 257.313873][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.326741][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.337514][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.348360][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.358623][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.370727][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.386227][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.417985][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.429035][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.439962][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.450769][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.465997][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.555893][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.566968][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.577393][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.588312][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.598493][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.610989][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.629768][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.708152][ T5080] veth0_vlan: entered promiscuous mode [ 257.739902][ T5090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.749335][ T5090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.758407][ T5090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.767821][ T5090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.806059][ T5096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.815344][ T5096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.826071][ T5096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.837056][ T5096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.929448][ T5080] veth1_vlan: entered promiscuous mode [ 258.331456][ T5080] veth0_macvtap: entered promiscuous mode [ 258.418211][ T5080] veth1_macvtap: entered promiscuous mode [ 258.645904][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.656834][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.667417][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.678252][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.688519][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.699367][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.709535][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.720344][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.735683][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.000009][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.011271][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.021600][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.032428][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.044297][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.056283][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.066513][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.077399][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.093360][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.368633][ T5080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.377889][ T5080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.387245][ T5080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.396536][ T5080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.668954][ T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.677138][ T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.925586][ T3300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.933876][ T3300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.003769][ T4431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.012161][ T4431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.235288][ T2847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.244495][ T2847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.948971][ T5178] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 265.085291][ T3300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.093521][ T3300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.124862][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.133186][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.284157][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.294607][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.309746][ T5178] usb 1-1: device descriptor read/64, error -71 [ 265.327175][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.336079][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.658189][ T5178] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 265.880740][ T5178] usb 1-1: device descriptor read/64, error -71 [ 266.002194][ T29] audit: type=1326 audit(1717719530.247:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5273 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb0ce7cf69 code=0x0 [ 266.025967][ T5178] usb usb1-port1: attempt power cycle [ 266.371316][ T3807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.379546][ T3807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.573400][ T5178] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 266.606573][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.615420][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.669838][ T5178] usb 1-1: device descriptor read/8, error -71 [ 266.881396][ T5289] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 266.970100][ T5178] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 267.232605][ T5178] usb 1-1: device descriptor read/8, error -71 [ 267.254315][ T5289] input: syz1 as /devices/virtual/input/input5 [ 267.388479][ T5178] usb usb1-port1: unable to enumerate USB device [ 267.421015][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.513444][ T5294] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.603596][ T5299] loop1: detected capacity change from 0 to 256 [ 268.342560][ T5297] loop2: detected capacity change from 0 to 2048 [ 268.505813][ T5294] loop4: detected capacity change from 0 to 32768 [ 268.518453][ T5294] XFS: attr2 mount option is deprecated. [ 268.524596][ T5294] XFS: ikeep mount option is deprecated. [ 268.611753][ T5294] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 268.747591][ T5299] team0: entered promiscuous mode [ 268.753565][ T5299] team_slave_0: entered promiscuous mode [ 268.760525][ T5299] team_slave_1: entered promiscuous mode [ 268.794516][ T5294] XFS (loop4): Ending clean mount [ 268.836792][ T5296] team0: left promiscuous mode [ 268.841086][ T5297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.842404][ T5296] team_slave_0: left promiscuous mode [ 268.860892][ T5296] team_slave_1: left promiscuous mode [ 268.947461][ T29] audit: type=1804 audit(1717719533.087:3): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4174717646/syzkaller.4rbxya/1/file0/file1" dev="loop1" ino=1048595 res=1 errno=0 [ 269.055760][ T5294] XFS (loop4): Quotacheck needed: Please wait. [ 269.369837][ T5178] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 269.381713][ T5178] XFS (loop4): Unmount and run xfs_repair [ 269.387695][ T5178] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 269.395452][ T5178] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 269.404757][ T5178] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 269.417895][ T5178] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 269.428195][ T5178] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 269.437450][ T5178] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 269.446688][ T5178] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 269.455991][ T5178] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 269.465270][ T5178] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 269.474702][ T4341] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 269.484734][ T5087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.541372][ T5294] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 269.815651][ T5321] loop3: detected capacity change from 0 to 256 [ 269.898679][ T5080] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 269.941860][ T5080] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 270.104998][ T5326] loop2: detected capacity change from 0 to 64 [ 270.209641][ T5321] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 270.461692][ T29] audit: type=1804 audit(1717719534.587:4): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3460155517/syzkaller.z6kb0I/4/file2/file1" dev="loop2" ino=8 res=1 errno=0 [ 271.064561][ T5328] loop0: detected capacity change from 0 to 32768 [ 271.149165][ T5178] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 271.618238][ T5178] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.629017][ T5178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.732834][ T5178] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.734444][ T5333] ======================================================= [ 271.734444][ T5333] WARNING: The mand mount option has been deprecated and [ 271.734444][ T5333] and is ignored by this kernel. Remove the mand [ 271.734444][ T5333] option from the mount to silence this warning. [ 271.734444][ T5333] ======================================================= [ 271.742265][ T5178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.742406][ T5178] usb 2-1: SerialNumber: syz [ 271.959866][ T5333] loop2: detected capacity change from 0 to 256 [ 272.012712][ T5333] FAT-fs (loop2): Unrecognized mount option "shortnam" or missing value [ 272.185582][ T5178] usb 2-1: 0:2 : does not exist [ 272.331430][ T5178] usb 2-1: USB disconnect, device number 2 [ 272.846521][ T5301] udevd[5301]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.248340][ T5336] loop3: detected capacity change from 0 to 4096 [ 273.293520][ T5336] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 273.330263][ T5342] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 273.482947][ T5346] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 273.577996][ T5345] loop4: detected capacity change from 0 to 512 [ 273.600833][ T4509] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 273.822342][ T5345] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 273.836158][ T5345] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 273.872248][ T29] audit: type=1800 audit(1717719538.057:5): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 273.893683][ T4509] usb 2-1: device descriptor read/64, error -71 [ 274.067229][ T5345] EXT4-fs (loop4): 1 truncate cleaned up [ 274.074142][ T5345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.199778][ T4509] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 274.469911][ T4509] usb 2-1: device descriptor read/64, error -71 [ 274.624525][ T4509] usb usb2-port1: attempt power cycle [ 274.880526][ T5350] loop0: detected capacity change from 0 to 32768 [ 275.151904][ T4509] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 275.370442][ T4509] usb 2-1: device descriptor read/8, error -71 [ 275.660729][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.701322][ T4509] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 275.830140][ T4509] usb 2-1: device descriptor read/8, error -71 [ 276.019137][ T4509] usb usb2-port1: unable to enumerate USB device [ 276.201883][ T5178] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 276.629652][ T5178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.641174][ T5178] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 276.650672][ T5178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.660684][ T5357] loop2: detected capacity change from 0 to 65536 [ 276.674244][ T5357] xfs: Unknown parameter 'fowner' [ 276.781752][ T5178] usb 4-1: config 0 descriptor?? [ 277.062954][ T5360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.072836][ T5360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.486897][ T5178] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 277.725962][ T5178] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input6 [ 277.737566][ T5360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.748009][ T5360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.883843][ T5080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.020250][ T5370] tipc: Started in network mode [ 278.025508][ T5370] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 278.034003][ T5178] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 278.037419][ T5370] tipc: Enabled bearer , priority 0 [ 278.415548][ T5377] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 279.154057][ T5130] tipc: Node number set to 10463914 [ 279.380790][ T5385] loop1: detected capacity change from 0 to 512 [ 279.426608][ T5385] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 279.513461][ T5385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.527224][ T5385] ext4 filesystem being mounted at /root/syzkaller-testdir4174717646/syzkaller.4rbxya/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.616688][ T29] audit: type=1326 audit(1717719543.867:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f8ca7cf69 code=0x0 [ 279.811162][ T5130] usb 4-1: USB disconnect, device number 2 [ 279.885466][ T5388] loop2: detected capacity change from 0 to 256 [ 280.156763][ T5388] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 280.645999][ T5396] loop3: detected capacity change from 0 to 164 [ 280.719834][ T5396] Unable to read rock-ridge attributes [ 280.722687][ T5096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.177259][ T5404] loop4: detected capacity change from 0 to 512 [ 281.439250][ T5404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.452713][ T5404] ext4 filesystem being mounted at /root/syzkaller-testdir670899098/syzkaller.KZKCbT/4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.590665][ T5404] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 282.305423][ T5414] loop0: detected capacity change from 0 to 256 [ 282.459313][ T5178] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 282.650195][ T5178] usb 4-1: device descriptor read/64, error -71 [ 282.960835][ T5178] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 283.248268][ T5178] usb 4-1: device descriptor read/64, error -71 [ 283.293394][ T5080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.396063][ T5178] usb usb4-port1: attempt power cycle [ 283.511884][ T5429] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 283.852619][ T5178] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 283.964319][ T5178] usb 4-1: device descriptor read/8, error -71 [ 284.301224][ T5178] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 284.449771][ T5178] usb 4-1: device descriptor read/8, error -71 [ 284.541299][ T5446] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.550989][ T5446] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.560192][ T5446] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.573833][ T5446] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.584472][ T5446] vxlan0: entered promiscuous mode [ 284.589926][ T5446] vxlan0: entered allmulticast mode [ 284.612637][ T5442] loop2: detected capacity change from 0 to 1024 [ 284.630447][ T5178] usb usb4-port1: unable to enumerate USB device [ 284.658271][ T5442] EXT4-fs: Ignoring removed i_version option [ 284.665771][ T5442] ext4: Unknown parameter 'context' [ 284.803119][ T5446] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.812752][ T5446] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.822170][ T5446] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.831744][ T5446] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.361186][ T5442] loop2: detected capacity change from 0 to 512 [ 285.551702][ T5442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.558627][ T5442] ext4: Unknown parameter 'dioread_lock"abort' [ 285.741790][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.748547][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.503943][ T5446] Zero length message leads to an empty skb [ 288.601252][ T5535] loop3: detected capacity change from 0 to 2048 [ 288.761679][ T5535] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 288.771567][ T5536] loop4: detected capacity change from 0 to 2048 [ 288.782874][ T5535] UDF-fs: Scanning with blocksize 512 failed [ 288.875953][ T5536] loop4: p1 p2 p4 [ 288.923142][ T5535] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 288.960675][ T5536] loop4: p4 start 4294967040 is beyond EOD, truncated [ 288.997194][ T5544] loop1: detected capacity change from 0 to 256 [ 289.004796][ T5535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.416329][ T5544] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 289.421220][ T5541] loop0: detected capacity change from 0 to 4096 [ 289.517703][ T5541] ntfs3: Unknown parameter 'r  ' [ 290.026986][ T5553] loop4: detected capacity change from 0 to 512 [ 290.239150][ T5553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.252400][ T5553] ext4 filesystem being mounted at /root/syzkaller-testdir670899098/syzkaller.KZKCbT/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.118012][ T5252] udevd[5252]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 291.163987][ T5565] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 291.448000][ T5301] udevd[5301]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 291.590958][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 291.669767][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 291.867760][ T10] usb 3-1: device descriptor read/64, error -71 [ 291.909780][ T5570] loop0: detected capacity change from 0 to 256 [ 291.944723][ T5553] EXT4-fs error (device loop4): ext4_do_update_inode:5082: inode #2: comm syz-executor.4: corrupted inode contents [ 291.970764][ T5553] EXT4-fs error (device loop4): ext4_dirty_inode:5942: inode #2: comm syz-executor.4: mark_inode_dirty error [ 291.985162][ T5553] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4104: comm syz-executor.4: Allocating blocks 18-19 which overlap fs metadata [ 292.050558][ T5553] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4104: comm syz-executor.4: Allocating blocks 18-19 which overlap fs metadata [ 292.120749][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.132381][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.219538][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 292.310091][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 292.319819][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 292.328088][ T8] usb 4-1: SerialNumber: syz [ 292.459580][ T10] usb 3-1: device descriptor read/64, error -71 [ 292.469030][ T5080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.582502][ T10] usb usb3-port1: attempt power cycle [ 292.737035][ T5563] batadv0: entered promiscuous mode [ 292.750432][ T5563] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 293.007022][ T8] usb 4-1: 0:2 : does not exist [ 293.013142][ T8] usb 4-1: unit 5 not found! [ 293.050226][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 293.179103][ T10] usb 3-1: device descriptor read/8, error -71 [ 293.240224][ T8] usb 4-1: USB disconnect, device number 7 [ 293.470607][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 293.576572][ T5301] udevd[5301]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.584591][ T10] usb 3-1: device descriptor read/8, error -71 [ 293.741901][ T5583] loop4: detected capacity change from 0 to 4096 [ 293.788667][ T10] usb usb3-port1: unable to enumerate USB device [ 293.946019][ T5591] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.015625][ T5593] loop1: detected capacity change from 0 to 64 [ 294.086453][ T5593] hfs: request for non-existent node 293 in B*Tree [ 294.100243][ T5593] hfs: request for non-existent node 293 in B*Tree [ 294.107138][ T5593] hfs: get root inode failed [ 294.688411][ T5597] loop1: detected capacity change from 0 to 512 [ 294.819422][ T5597] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 296.562828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 296.769634][ T5597] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: iget: bad i_size value: -67835469387268086 [ 296.893932][ T5597] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 296.986096][ T5597] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.001626][ T5597] ext2 filesystem being mounted at /root/syzkaller-testdir4174717646/syzkaller.4rbxya/15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.552623][ T5670] loop3: detected capacity change from 0 to 256 [ 297.971353][ T5096] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 298.361986][ T5670] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 298.629711][ T5684] loop4: detected capacity change from 0 to 128 [ 298.684470][ T5684] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 299.899360][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 300.085871][ T5701] loop4: detected capacity change from 0 to 1024 [ 300.140222][ T8] usb 1-1: device descriptor read/64, error -71 [ 300.291711][ T5701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.315920][ T5693] loop1: detected capacity change from 0 to 8192 [ 300.446063][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 300.691017][ T8] usb 1-1: device descriptor read/64, error -71 [ 300.800971][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 300.808948][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 300.856417][ T8] usb usb1-port1: attempt power cycle [ 300.891096][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 301.010276][ T5080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.379161][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 301.500237][ T8] usb 1-1: device descriptor read/8, error -71 [ 301.768456][ T5717] loop4: detected capacity change from 0 to 256 [ 301.809299][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 301.921615][ T8] usb 1-1: device descriptor read/8, error -71 [ 302.047405][ T8] usb usb1-port1: unable to enumerate USB device [ 303.469117][ T29] audit: type=1326 audit(1717719567.647:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb0ce7cf69 code=0x0 [ 303.672921][ T5735] loop1: detected capacity change from 0 to 2048 [ 303.767782][ T5735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.774911][ T5735] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.850176][ T5739] loop3: detected capacity change from 0 to 512 [ 303.887955][ T5735] EXT4-fs (loop1): unsupported descriptor size 32768 [ 303.898385][ T5739] EXT4-fs: Invalid want_extra_isize 1048622 [ 304.550092][ T5746] loop2: detected capacity change from 0 to 256 [ 305.668479][ T5746] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 307.557012][ T29] audit: type=1326 audit(1717719571.757:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92c7cf69 code=0x7ffc0000 [ 307.563663][ T5817] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 307.580347][ T29] audit: type=1326 audit(1717719571.787:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a92c7cf69 code=0x7ffc0000 [ 307.616347][ T29] audit: type=1326 audit(1717719571.787:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92c7cf69 code=0x7ffc0000 [ 307.641103][ T29] audit: type=1326 audit(1717719571.787:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f0a92c7cf69 code=0x7ffc0000 [ 307.664296][ T29] audit: type=1326 audit(1717719571.787:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92c7cf69 code=0x7ffc0000 [ 307.687188][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.693798][ T29] audit: type=1326 audit(1717719571.807:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a92c7cf69 code=0x7ffc0000 [ 307.716668][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.727473][ T29] audit: type=1326 audit(1717719571.947:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92c7cf69 code=0x7ffc0000 [ 307.750474][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.771489][ T29] audit: type=1326 audit(1717719571.957:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92c7cf69 code=0x7ffc0000 [ 307.796969][ T29] audit: type=1326 audit(1717719571.977:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0a92c7cf69 code=0x7ffc0000 [ 307.819691][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.950350][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.802769][ T5829] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 308.811558][ T5829] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 308.909657][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 309.044087][ T5832] loop1: detected capacity change from 0 to 256 [ 309.160077][ T25] usb 3-1: device descriptor read/64, error -71 [ 309.207649][ T5829] nbd: socks must be embedded in a SOCK_ITEM attr [ 309.478029][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 309.709632][ T25] usb 3-1: device descriptor read/64, error -71 [ 309.841385][ T25] usb usb3-port1: attempt power cycle [ 310.060735][ T5178] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 310.261331][ T4509] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 310.339368][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 310.398633][ T5844] input: syz0 as /devices/virtual/input/input7 [ 310.646877][ T5823] loop2: detected capacity change from 0 to 1764 [ 310.929535][ T25] usb 3-1: device descriptor read/8, error -71 [ 310.973397][ T5854] loop0: detected capacity change from 0 to 256 [ 311.115294][ T5854] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 311.390874][ T5856] loop4: detected capacity change from 0 to 256 [ 311.779680][ T5860] loop4: detected capacity change from 0 to 256 [ 312.062415][ T5865] loop2: detected capacity change from 0 to 512 [ 312.167657][ T5865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 312.403983][ T5865] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 312.614032][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 2504 [ 312.787739][ T5875] loop2: detected capacity change from 0 to 4096 [ 313.048810][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 313.119953][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 313.360008][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 313.459299][ T8] usb 1-1: device descriptor read/64, error -71 [ 313.551004][ T25] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 313.551145][ T25] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.551268][ T25] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.551389][ T25] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.551510][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 313.551663][ T25] usb 2-1: config 0 has no interface number 0 [ 313.551814][ T25] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 313.551992][ T25] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.552143][ T25] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 313.552300][ T25] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.552477][ T25] usb 2-1: config 0 interface 125 has no altsetting 0 [ 313.552605][ T25] usb 2-1: config 0 interface 125 has no altsetting 2 [ 313.730691][ T25] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 313.730852][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.730990][ T25] usb 2-1: Product: syz [ 313.731093][ T25] usb 2-1: Manufacturer: syz [ 313.731201][ T25] usb 2-1: SerialNumber: syz [ 313.739197][ T25] usb 2-1: config 0 descriptor?? [ 313.739471][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 313.794395][ T25] usb 2-1: selecting invalid altsetting 2 [ 313.935516][ T8] usb 1-1: device descriptor read/64, error -71 [ 314.071251][ T8] usb usb1-port1: attempt power cycle [ 314.196075][ T5894] loop2: detected capacity change from 0 to 128 [ 314.279679][ T5877] input: syz0 as /devices/virtual/input/input8 [ 314.333548][ T5894] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.391997][ T5894] ext4 filesystem being mounted at /root/syzkaller-testdir3460155517/syzkaller.z6kb0I/24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.489422][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 314.551318][ T5898] loop4: detected capacity change from 0 to 256 [ 314.592277][ T8] usb 1-1: device descriptor read/8, error -71 [ 314.621652][ T5898] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 314.706622][ T5087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.805490][ T25] get_1284_register timeout [ 314.810430][ T25] parport0: fix this legacy no-device port driver! [ 314.828856][ C1] usb 2-1: async_complete: urb error -104 [ 314.835234][ C1] usb 2-1: async_complete: urb error -104 [ 314.841499][ C1] usb 2-1: async_complete: urb error -104 [ 314.899935][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 314.929133][ T780] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 314.992161][ T8] usb 1-1: device descriptor read/8, error -71 [ 315.140954][ T8] usb usb1-port1: unable to enumerate USB device [ 315.164950][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 315.165024][ T29] audit: type=1326 audit(1717719579.407:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f1495c7cf69 code=0x0 [ 315.239318][ T5139] usb 2-1: USB disconnect, device number 7 [ 315.339251][ T780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.350159][ T780] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 315.464072][ T780] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.473705][ T780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.482162][ T780] usb 4-1: SerialNumber: syz [ 316.039995][ T5916] loop3: detected capacity change from 0 to 1764 [ 316.081220][ T5923] loop1: detected capacity change from 0 to 256 [ 316.094528][ T5922] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 316.094528][ T5922] The task syz-executor.2 (5922) triggered the difference, watch for misbehavior. [ 316.203262][ T5923] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 316.510964][ T780] usb 4-1: USB disconnect, device number 9 [ 316.797450][ T5931] loop0: detected capacity change from 0 to 16 [ 316.893811][ T5931] erofs: (device loop0): mounted with root inode @ nid 36. [ 317.025110][ T5936] loop2: detected capacity change from 0 to 256 [ 317.134663][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 317.156146][ T5936] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 317.349869][ T4509] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 317.421159][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 317.551293][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 317.563199][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 317.575787][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 317.585216][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.607865][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 317.625755][ T25] usb 2-1: config 0 descriptor?? [ 317.652112][ T5933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 317.730079][ T5943] loop0: detected capacity change from 0 to 1024 [ 317.753981][ T5943] EXT4-fs: Ignoring removed orlov option [ 317.760227][ T5943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.802817][ T25] hub 2-1:0.0: USB hub found [ 317.840653][ T4509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.857689][ T4509] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 317.868938][ T4509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.910550][ T5949] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 317.924682][ T4509] usb 5-1: config 0 descriptor?? [ 317.937810][ T5943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.019940][ T25] hub 2-1:0.0: 2 ports detected [ 318.122916][ T5952] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.444556][ T5952] loop2: detected capacity change from 0 to 128 [ 318.506638][ T5085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.694195][ T5949] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 318.702526][ T5949] FAT-fs (loop2): Filesystem has been set read-only [ 318.917551][ T5958] loop0: detected capacity change from 0 to 128 [ 319.281028][ T25] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 319.287016][ T8] usb 2-1: USB disconnect, device number 8 [ 319.782728][ T5966] loop2: detected capacity change from 0 to 1024 [ 319.975925][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.082955][ T29] audit: type=1800 audit(1717719584.297:28): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 320.108481][ T29] audit: type=1800 audit(1717719584.317:29): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 320.130840][ T29] audit: type=1800 audit(1717719584.317:30): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 320.284272][ T4509] usbhid 5-1:0.0: can't add hid device: -71 [ 320.292091][ T4509] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 320.302295][ T5967] tmpfs: Bad value for 'mpol' [ 320.327086][ T4509] usb 5-1: USB disconnect, device number 3 [ 320.912298][ T5993] loop0: detected capacity change from 0 to 256 [ 320.971482][ T5087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.070286][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 321.097016][ T5993] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 321.488941][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.499641][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 321.746283][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.756012][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 321.764586][ T8] usb 4-1: SerialNumber: syz [ 321.897567][ T6005] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 322.741388][ T6006] loop4: detected capacity change from 0 to 32768 [ 322.795602][ T6009] loop3: detected capacity change from 0 to 1764 [ 322.949480][ T6006] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 322.988388][ T6016] loop2: detected capacity change from 0 to 764 [ 323.125127][ T5139] usb 4-1: USB disconnect, device number 10 [ 323.148936][ T6006] XFS (loop4): Ending clean mount [ 323.304868][ T4509] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 323.316902][ T4509] XFS (loop4): Unmount and run xfs_repair [ 323.323749][ T4509] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 323.331537][ T4509] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 323.340733][ T4509] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 323.349993][ T4509] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 323.360966][ T4509] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 323.370442][ T4509] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 323.384055][ T4509] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 323.397322][ T4509] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 323.406713][ T4509] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 323.433958][ T5997] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 323.458400][ T5997] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x766/0xf20 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 323.474387][ T5997] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 323.880181][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.882268][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 323.910253][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.965926][ T6030] loop1: detected capacity change from 0 to 256 [ 324.149490][ T29] audit: type=1804 audit(1717719588.347:31): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4174717646/syzkaller.4rbxya/33/file1/bus" dev="loop1" ino=1048615 res=1 errno=0 [ 324.176256][ T29] audit: type=1804 audit(1717719588.367:32): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4174717646/syzkaller.4rbxya/33/file1/bus" dev="loop1" ino=1048615 res=1 errno=0 [ 324.201872][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.301026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 324.461410][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.473119][ T8] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 324.482665][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.555724][ T8] usb 1-1: config 0 descriptor?? [ 324.656157][ T4509] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 324.703178][ T5080] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 324.786057][ T6035] sp0: Synchronizing with TNC [ 324.880589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 324.925780][ T6036] loop3: detected capacity change from 0 to 512 [ 324.988630][ T6036] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 325.005165][ T6036] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 325.022050][ T6036] System zones: 0-2, 18-18, 34-35 [ 325.057570][ T6036] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.100856][ T4509] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.111670][ T4509] usb 3-1: config 0 has no interfaces? [ 325.121779][ T4509] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 325.132129][ T4509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.149523][ T6035] EXT4-fs (loop3): re-mounted 00000000-0700-0000-0000-000000000000 ro. Quota mode: none. [ 325.181580][ T6036] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 325.207558][ T6036] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 325.212200][ T4509] usb 3-1: config 0 descriptor?? [ 325.216196][ T6036] EXT4-fs (loop3): re-mounted 00000000-0700-0000-0000-000000000000 r/w. Quota mode: none. [ 325.797325][ T5090] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 326.042445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 326.045736][ T29] audit: type=1800 audit(1717719590.257:33): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 326.428293][ T6045] loop1: detected capacity change from 0 to 1024 [ 326.514408][ T6045] hfsplus: unable to parse mount options [ 326.578332][ C1] hrtimer: interrupt took 360850 ns [ 326.638007][ T6047] loop3: detected capacity change from 0 to 256 [ 326.730847][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.771769][ T29] audit: type=1804 audit(1717719590.967:34): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4174717646/syzkaller.4rbxya/35/file1" dev="sda1" ino=1948 res=1 errno=0 [ 326.861523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 326.862997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 326.901038][ T51] Bluetooth: hci4: link tx timeout [ 326.906518][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 326.911519][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 326.914644][ T51] Bluetooth: hci4: link tx timeout [ 326.931779][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 327.069734][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 327.076919][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 327.189773][ T8] usb 1-1: USB disconnect, device number 15 [ 327.222429][ T5139] usb 3-1: USB disconnect, device number 10 [ 327.561326][ T6059] loop0: detected capacity change from 0 to 256 [ 327.717480][ T6059] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 328.513124][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 328.794977][ T6082] sp0: Synchronizing with TNC [ 328.917028][ T6082] loop3: detected capacity change from 0 to 512 [ 328.929910][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.940512][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 328.960349][ T5082] Bluetooth: hci4: command 0x0405 tx timeout [ 329.037910][ T6082] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 329.054441][ T6082] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 329.060147][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.064185][ T6082] System zones: [ 329.072323][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 329.072470][ T25] usb 5-1: SerialNumber: syz [ 329.076022][ T6082] 0-2, 18-18, 34-35 [ 329.081831][ T6082] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.102335][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.200177][ T6082] EXT4-fs (loop3): re-mounted 00000000-0700-0000-0000-000000000000 ro. Quota mode: none. [ 329.238019][ T6082] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 329.250503][ T6082] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 329.259362][ T6082] EXT4-fs (loop3): re-mounted 00000000-0700-0000-0000-000000000000 r/w. Quota mode: none. [ 329.359859][ T780] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 329.443573][ T5090] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 329.546318][ T6074] loop4: detected capacity change from 0 to 1764 [ 329.783841][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.795767][ T780] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 329.805314][ T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.882075][ T780] usb 2-1: config 0 descriptor?? [ 329.981129][ T25] usb 5-1: USB disconnect, device number 4 [ 330.300532][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.310298][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.371402][ T6103] Illegal XDP return value 4294967274 on prog (id 50) dev N/A, expect packet loss! [ 330.437412][ T6102] loop0: detected capacity change from 0 to 16 [ 330.496598][ T6102] erofs: (device loop0): mounted with root inode @ nid 36. [ 330.525908][ T6103] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 330.535153][ T6102] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 330.819360][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 331.066613][ T5082] Bluetooth: hci4: command 0x0405 tx timeout [ 331.766926][ T6108] loop0: detected capacity change from 0 to 32768 [ 331.863912][ T6108] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 331.922883][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 332.053426][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.065045][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.075276][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.098145][ T6125] loop3: detected capacity change from 0 to 256 [ 332.114131][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.123658][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.228661][ T8] usb 3-1: config 0 descriptor?? [ 332.275651][ T6125] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 332.334386][ T780] usbhid 2-1:0.0: can't add hid device: -71 [ 332.341213][ T780] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 332.407938][ T6108] XFS (loop0): Ending clean mount [ 332.415778][ T780] usb 2-1: USB disconnect, device number 9 [ 332.518497][ T6108] XFS (loop0): Quotacheck needed: Please wait. [ 332.711202][ T6108] XFS (loop0): Quotacheck: Done. [ 332.889927][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 332.896713][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 332.979626][ T8] usb 3-1: USB disconnect, device number 11 [ 333.051591][ T5085] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 333.178245][ T6137] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.562611][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.652897][ T6142] sp0: Synchronizing with TNC [ 333.799758][ T6142] loop3: detected capacity change from 0 to 512 [ 333.875596][ T6142] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 333.892137][ T6146] loop1: detected capacity change from 0 to 128 [ 333.914736][ T6142] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 333.962768][ T6142] System zones: 0-2, 18-18, 34-35 [ 333.972135][ T6142] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.012882][ T6142] EXT4-fs (loop3): re-mounted 00000000-0700-0000-0000-000000000000 ro. Quota mode: none. [ 334.056939][ T6151] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 334.091725][ T6151] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 334.100340][ T6151] EXT4-fs (loop3): re-mounted 00000000-0700-0000-0000-000000000000 r/w. Quota mode: none. [ 334.309232][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 334.505206][ T5090] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 334.699891][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.710652][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 334.850519][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.860210][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 334.868459][ T8] usb 3-1: SerialNumber: syz [ 334.973259][ T8] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 335.100219][ T5139] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 335.189413][ T6164] loop0: detected capacity change from 0 to 2048 [ 335.375847][ T6167] loop3: detected capacity change from 0 to 256 [ 335.404755][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.414087][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.448457][ T6167] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 335.484513][ T6147] loop2: detected capacity change from 0 to 1764 [ 335.549808][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.566243][ T5139] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 335.577007][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.627985][ T5139] usb 5-1: config 0 descriptor?? [ 335.672828][ T8] usb 3-1: USB disconnect, device number 12 [ 335.699194][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 335.740368][ T4509] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 335.959268][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 336.080143][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 336.119623][ T4509] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 336.124072][ T5139] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 336.129321][ T4509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.173379][ T5139] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input9 [ 336.193476][ T4509] usb 1-1: config 0 descriptor?? [ 336.243841][ T4509] cp210x 1-1:0.0: cp210x converter detected [ 336.270232][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 336.274109][ T5139] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 336.286097][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.286266][ T25] usb 2-1: Product: syz [ 336.286384][ T25] usb 2-1: Manufacturer: syz [ 336.286503][ T25] usb 2-1: SerialNumber: syz [ 336.364519][ T5139] usb 5-1: USB disconnect, device number 5 [ 336.396255][ T25] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10 [ 336.502140][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 336.581255][ T4509] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 336.614763][ T780] usb 2-1: USB disconnect, device number 10 [ 336.701580][ T6178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.719347][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 336.728222][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 336.734124][ T8] usb 4-1: device descriptor read/64, error -71 [ 336.735893][ T5082] Bluetooth: hci0: hardware error 0x00 [ 336.806036][ T4509] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 336.814437][ T4509] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 336.832142][ T4509] usb 1-1: cp210x converter now attached to ttyUSB0 [ 336.850498][ T4509] usb 1-1: USB disconnect, device number 16 [ 336.866190][ T4509] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 336.875435][ T4509] cp210x 1-1:0.0: device disconnected [ 337.075697][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 337.273399][ T8] usb 4-1: device descriptor read/64, error -71 [ 337.392678][ T6188] loop2: detected capacity change from 0 to 128 [ 337.425332][ T8] usb usb4-port1: attempt power cycle [ 337.474160][ T6188] EXT4-fs error (device loop2): __ext4_fill_super:5464: inode #2: comm syz-executor.2: iget: checksum invalid [ 337.569461][ T6188] EXT4-fs (loop2): get root inode failed [ 337.575544][ T6188] EXT4-fs (loop2): mount failed [ 337.703232][ T6193] loop4: detected capacity change from 0 to 2048 [ 337.726204][ T6191] loop1: detected capacity change from 0 to 2048 [ 337.779420][ T6191] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 337.844371][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.857909][ T6193] ext4 filesystem being mounted at /root/syzkaller-testdir670899098/syzkaller.KZKCbT/35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.882255][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 337.974935][ T6199] loop0: detected capacity change from 0 to 512 [ 338.010896][ T8] usb 4-1: device descriptor read/8, error -71 [ 338.050739][ T6199] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 338.075649][ T6199] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 338.104051][ T6199] System zones: 0-2, 18-18, 34-35 [ 338.146941][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.222581][ T5080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.280915][ T6202] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 338.349549][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 338.349980][ T6198] EXT4-fs (loop0): re-mounted 00000000-0700-0000-0000-000000000000 ro. Quota mode: none. [ 338.384276][ T29] audit: type=1800 audit(1717719602.557:35): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 338.424544][ T6199] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 338.442405][ T8] usb 4-1: device descriptor read/8, error -71 [ 338.485334][ T6199] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 338.497823][ T6199] EXT4-fs (loop0): re-mounted 00000000-0700-0000-0000-000000000000 r/w. Quota mode: none. [ 338.606466][ T8] usb usb4-port1: unable to enumerate USB device [ 338.798447][ T5085] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 338.808575][ T5082] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 338.899262][ T6206] loop4: detected capacity change from 0 to 256 [ 339.011595][ T6206] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 339.159448][ T4509] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 339.409913][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 339.560791][ T4509] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.572115][ T4509] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 339.691864][ T4509] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.701492][ T4509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 339.710162][ T4509] usb 3-1: SerialNumber: syz [ 339.784137][ T4509] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 339.819919][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.831900][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 339.841717][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.895833][ T25] usb 2-1: config 0 descriptor?? [ 339.995734][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.005669][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.232854][ T6209] loop2: detected capacity change from 0 to 1764 [ 340.389220][ T25] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 340.407954][ T10] usb 3-1: USB disconnect, device number 13 [ 340.473095][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input11 [ 340.629014][ T25] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 340.647528][ T25] usb 2-1: USB disconnect, device number 11 [ 341.253924][ T6225] syzkaller0: entered allmulticast mode [ 342.004464][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.988506][ T6230] loop2: detected capacity change from 0 to 65536 [ 343.220432][ T6230] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 343.303183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 343.604271][ T6230] XFS (loop2): Ending clean mount [ 343.629454][ T6230] XFS (loop2): Quotacheck needed: Please wait. [ 343.833254][ T6230] XFS (loop2): Quotacheck: Done. [ 343.964536][ T5087] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 344.187473][ T6256] loop1: detected capacity change from 0 to 2048 [ 344.246532][ T6263] loop0: detected capacity change from 0 to 256 [ 344.387581][ T6256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.512855][ T6263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 344.979104][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 345.244423][ T780] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 345.381789][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.396476][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 345.511659][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.521306][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.529917][ T8] usb 4-1: SerialNumber: syz [ 345.575757][ T6275] loop0: detected capacity change from 0 to 2048 [ 345.621821][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 345.649853][ T6275] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 345.713326][ T780] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.723981][ T780] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 345.875434][ T780] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.885012][ T780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.893463][ T780] usb 5-1: SerialNumber: syz [ 346.017804][ T780] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 346.029784][ T6281] process 'syz-executor.1' launched './file0' with NULL argv: empty string added [ 346.190408][ T6280] loop3: detected capacity change from 0 to 1764 [ 346.447733][ T4509] usb 4-1: USB disconnect, device number 16 [ 346.650389][ T6285] loop4: detected capacity change from 0 to 1764 [ 346.779060][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 346.815750][ T6290] loop0: detected capacity change from 0 to 512 [ 346.961645][ T4509] usb 5-1: USB disconnect, device number 6 [ 346.998163][ T6290] loop0: detected capacity change from 0 to 512 [ 347.075771][ T6290] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 347.097865][ T6290] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 347.118317][ T6290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.155804][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.163089][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.230606][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.246589][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.261753][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.271236][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.325209][ T25] usb 2-1: config 0 descriptor?? [ 348.213600][ T5085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.430354][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 348.437175][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 348.449730][ T5178] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 348.532575][ T25] usb 2-1: USB disconnect, device number 12 [ 348.685389][ T6311] loop4: detected capacity change from 0 to 256 [ 348.827907][ T6311] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 348.889201][ T5178] usb 4-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 348.898913][ T5178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.967044][ T5178] usb 4-1: config 0 descriptor?? [ 349.053085][ T5178] usb 4-1: NDI device with a latency value of 1 [ 349.293490][ T6307] loop2: detected capacity change from 0 to 65536 [ 349.373174][ T6307] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 349.638255][ T6307] XFS (loop2): Ending clean mount [ 349.687209][ T6307] XFS (loop2): Quotacheck needed: Please wait. [ 349.731334][ T25] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x4 [ 349.743075][ T25] XFS (loop2): Unmount and run xfs_repair [ 349.749149][ T25] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 349.756866][ T25] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 349.768193][ T25] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 349.777732][ T25] 00000020: d6 f6 9d bd 8c 5d 46 be b8 8e 92 c0 ae 88 ce b2 .....]F......... [ 349.786937][ T25] 00000030: 00 00 00 00 27 32 e3 f9 03 00 00 00 00 00 00 0a ....'2.......... [ 349.800884][ T25] 00000040: 00 00 00 40 00 00 3f c0 00 00 00 00 00 00 00 00 ...@..?......... [ 349.811330][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 349.830278][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 349.839596][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 349.860221][ T49] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x4 len 2 error 74 [ 349.906680][ T5178] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 349.916138][ T5178] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 349.940295][ T6307] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 349.965351][ T5178] usb 4-1: USB disconnect, device number 17 [ 349.973507][ T5178] ftdi_sio 4-1:0.0: device disconnected [ 349.995958][ T780] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x4 [ 350.012065][ T780] XFS (loop2): Unmount and run xfs_repair [ 350.018055][ T780] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 350.027729][ T780] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 350.036998][ T780] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 350.046310][ T780] 00000020: d6 f6 9d bd 8c 5d 46 be b8 8e 92 c0 ae 88 ce b2 .....]F......... [ 350.055562][ T780] 00000030: 00 00 00 00 27 32 e3 f9 03 00 00 00 00 00 00 0a ....'2.......... [ 350.064791][ T780] 00000040: 00 00 00 40 00 00 3f c0 00 00 00 00 00 00 00 00 ...@..?......... [ 350.074037][ T780] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.083394][ T780] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.092690][ T780] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.107172][ T6307] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x4 len 2 error 74 [ 350.169659][ T6307] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x766/0xf20 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 350.184895][ T6307] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 350.641877][ T5087] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 351.037489][ T6336] loop1: detected capacity change from 0 to 32768 [ 351.053049][ T6336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6336) [ 351.123289][ T6336] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 351.139120][ T6336] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 351.150690][ T6336] BTRFS info (device loop1): using free-space-tree [ 353.069013][ T5096] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 353.169145][ T6373] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.169438][ T6373] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.167781][ T6380] loop0: detected capacity change from 0 to 256 [ 354.376777][ T6380] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 354.666067][ T29] audit: type=1800 audit(1717719618.887:36): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="sda1" ino=1964 res=0 errno=0 [ 355.129769][ T6394] loop1: detected capacity change from 0 to 256 [ 355.209944][ T6394] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 355.320736][ T6399] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.581080][ T6406] loop2: detected capacity change from 0 to 128 [ 356.941767][ T6418] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.208923][ T6413] loop1: detected capacity change from 0 to 32768 [ 357.223204][ T6413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6413) [ 357.355501][ T6413] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.366348][ T6413] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 357.381038][ T6413] BTRFS info (device loop1): using free-space-tree [ 358.034339][ T6445] loop4: detected capacity change from 0 to 256 [ 358.121028][ T6445] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 358.313039][ T6413] fs-verity (loop1, inode 258): Unknown hash algorithm number: 0 [ 358.814653][ T6453] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 358.955853][ T5096] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 361.360384][ T6475] syzkaller0: entered promiscuous mode [ 361.372856][ T6475] syzkaller0: entered allmulticast mode [ 361.651338][ T6480] usb usb1: usbfs: process 6480 (syz-executor.2) did not claim interface 0 before use [ 361.811588][ T6486] loop1: detected capacity change from 0 to 8 [ 361.843863][ T6481] loop0: detected capacity change from 0 to 2048 [ 361.954180][ T6481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.118646][ T6475] dvmrp1: entered allmulticast mode [ 362.276856][ T6475] dvmrp1: left allmulticast mode [ 363.682197][ T6490] SQUASHFS error: Failed to read block 0x63a: -5 [ 363.688916][ T6490] SQUASHFS error: Unable to read metadata cache entry [638] [ 363.696418][ T6490] SQUASHFS error: Unable to read directory block [26067d:0] [ 363.758364][ T6490] SQUASHFS error: Unable to read metadata cache entry [638] [ 363.766390][ T6490] SQUASHFS error: Unable to read directory block [26067d:0] [ 363.775661][ T6490] SQUASHFS error: Unable to read metadata cache entry [638] [ 363.783336][ T6490] SQUASHFS error: Unable to read directory block [26067d:0] [ 364.246213][ T6498] loop3: detected capacity change from 0 to 32768 [ 364.262379][ T6498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6498) [ 364.289549][ T5139] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 364.400369][ T6498] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 364.411313][ T6498] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 364.421140][ T6498] BTRFS info (device loop3): using free-space-tree [ 364.560533][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 364.567023][ T5093] Bluetooth: hci2: command 0x0406 tx timeout [ 364.574396][ T4437] Bluetooth: hci3: command 0x0406 tx timeout [ 364.679682][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 364.863811][ T6516] fuse: Bad value for 'fd' [ 364.902826][ T29] audit: type=1800 audit(1717719629.097:37): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1965 res=0 errno=0 [ 364.925320][ T5139] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78 [ 364.934851][ T5139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.943275][ T5139] usb 3-1: Product: syz [ 364.947808][ T5139] usb 3-1: Manufacturer: syz [ 364.957351][ T5139] usb 3-1: SerialNumber: syz [ 365.070371][ T5139] usb 3-1: config 0 descriptor?? [ 365.093033][ T6517] loop1: detected capacity change from 0 to 256 [ 365.148965][ T5139] usbtest 3-1:0.0: couldn't get endpoints, -22 [ 365.162275][ T5139] usbtest 3-1:0.0: probe with driver usbtest failed with error -22 [ 365.210980][ T6498] fs-verity (loop3, inode 258): Unknown hash algorithm number: 0 [ 365.347719][ T6517] fuse: Unknown parameter 'user_id00000000000000000000' [ 365.397728][ T5178] usb 3-1: USB disconnect, device number 14 [ 365.416872][ T6517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.644719][ T5090] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.364510][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 366.374450][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 366.569964][ T29] audit: type=1326 audit(1717719630.787:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1495c7cf69 code=0x0 [ 366.611306][ T6530] loop0: detected capacity change from 0 to 4096 [ 366.655750][ T6530] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 366.870288][ T6530] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 367.567573][ T6538] loop1: detected capacity change from 0 to 4096 [ 367.853482][ T6552] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.822513][ T6560] loop4: detected capacity change from 0 to 32768 [ 368.866026][ T6560] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6560) [ 368.901690][ T6560] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.912331][ T6560] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 368.922089][ T6560] BTRFS info (device loop4): using free-space-tree [ 369.179072][ T5130] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 369.480054][ T5130] usb 3-1: Using ep0 maxpacket: 16 [ 369.531457][ T6560] fs-verity (loop4, inode 258): Unknown hash algorithm number: 0 [ 369.690968][ T5130] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 369.699396][ T5130] usb 3-1: can't read configurations, error -22 [ 369.909245][ T5130] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 370.002695][ T5080] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.189952][ T5130] usb 3-1: Using ep0 maxpacket: 16 [ 370.207116][ T6601] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.361593][ T5130] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 370.370417][ T5130] usb 3-1: can't read configurations, error -22 [ 370.426589][ T5130] usb usb3-port1: attempt power cycle [ 370.839759][ T6607] loop1: detected capacity change from 0 to 512 [ 370.871783][ T6607] EXT4-fs: Ignoring removed orlov option [ 370.878057][ T6607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.879949][ T5130] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 370.928290][ T6607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.022003][ T5130] usb 3-1: Using ep0 maxpacket: 16 [ 371.057614][ T6607] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 371.065480][ T6614] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 371.066276][ T6607] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 371.106517][ T6614] net_ratelimit: 2 callbacks suppressed [ 371.106604][ T6614] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 371.154907][ T6607] EXT4-fs (loop1): orphan cleanup on readonly fs [ 371.162019][ T6607] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 371.171755][ T6607] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 371.186779][ T6607] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 371.269897][ T5130] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 371.278189][ T5130] usb 3-1: can't read configurations, error -22 [ 371.370897][ T6607] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 371.459129][ T6607] EXT4-fs (loop1): Remounting filesystem read-only [ 371.466050][ T6607] EXT4-fs (loop1): 1 truncate cleaned up [ 371.472920][ T6607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.502555][ T5130] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 371.650306][ T6607] overlayfs: failed to get metacopy (-5) [ 371.789155][ T5130] usb 3-1: device not accepting address 18, error -71 [ 371.804122][ T5130] usb usb3-port1: unable to enumerate USB device [ 371.965572][ T6622] loop4: detected capacity change from 0 to 2048 [ 372.076882][ T6624] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.436195][ T6624] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 372.447345][ T6624] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 372.521851][ T6624] Remounting filesystem read-only [ 372.604392][ T6632] syz-executor.3[6632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.604985][ T6632] syz-executor.3[6632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.709502][ T29] audit: type=1326 audit(1717719636.867:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f8ca7cf69 code=0x0 [ 373.026889][ T6627] loop2: detected capacity change from 0 to 32768 [ 373.060586][ T6627] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6627) [ 373.097418][ T6627] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.108014][ T6627] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 373.117986][ T6627] BTRFS info (device loop2): using free-space-tree [ 373.374522][ T5080] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 373.384005][ T5080] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 373.391065][ T5080] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 373.398591][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.407841][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.417482][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.427688][ T5080] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 373.434778][ T5080] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 373.443876][ T6654] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.459029][ T5080] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 373.466581][ T5080] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 373.475862][ T5080] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 373.483545][ T5080] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 373.490850][ T5080] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 373.498364][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.507599][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.516817][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.717158][ T5080] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 373.726200][ T5080] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 373.734082][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.743270][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.752550][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.896164][ T5080] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 373.903375][ T5080] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 373.910999][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.920528][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.929826][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 373.975942][ T6627] fs-verity (loop2, inode 258): Unknown hash algorithm number: 0 [ 374.047143][ T5080] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 374.057002][ T5080] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 374.070149][ T5080] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 374.077692][ T5080] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 374.087084][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.096417][ T5080] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 374.103907][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.113141][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.122338][ T5080] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 374.129960][ T5080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.239474][ T6662] loop3: detected capacity change from 0 to 512 [ 374.350018][ T6662] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 374.423257][ T6662] EXT4-fs (loop3): orphan cleanup on readonly fs [ 374.449526][ T5087] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.469091][ T6662] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 374.484801][ T6662] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 374.512908][ T6662] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 374.521582][ T6662] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 374.551641][ T6662] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 374.587814][ T6662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.812262][ T5090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.709905][ T6677] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 376.002093][ T5096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.051978][ T6684] loop4: detected capacity change from 0 to 1024 [ 376.105372][ T6684] hfsplus: unable to parse mount options [ 376.154311][ T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.354473][ T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.581548][ T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.811223][ T77] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.940297][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.222634][ T77] bridge_slave_1: left allmulticast mode [ 377.228737][ T77] bridge_slave_1: left promiscuous mode [ 377.245297][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.298299][ T77] bridge_slave_0: left allmulticast mode [ 377.304838][ T77] bridge_slave_0: left promiscuous mode [ 377.311679][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.235926][ T6706] loop0: detected capacity change from 0 to 32768 [ 378.250238][ T6706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6706) [ 378.290394][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.300983][ T6706] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.311608][ T6706] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 378.322555][ T6706] BTRFS info (device loop0): using free-space-tree [ 378.397653][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.533332][ T77] bond0 (unregistering): Released all slaves [ 379.472380][ T5085] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 379.981497][ T77] hsr_slave_0: left promiscuous mode [ 380.016032][ T77] hsr_slave_1: left promiscuous mode [ 380.051616][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.059522][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.102924][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.115151][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.198428][ T77] veth1_macvtap: left promiscuous mode [ 380.204759][ T77] veth0_macvtap: left promiscuous mode [ 380.214698][ T77] veth1_vlan: left promiscuous mode [ 380.220536][ T77] veth0_vlan: left promiscuous mode [ 380.232577][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.251845][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.261093][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.475425][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.487964][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 380.497932][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.242109][ T6755] binder: 6754:6755 ioctl c0306201 200001c0 returned -14 [ 381.522073][ T6752] loop4: detected capacity change from 0 to 40427 [ 381.561040][ T77] team0 (unregistering): Port device team_slave_1 removed [ 381.589686][ T77] team0 (unregistering): Port device team_slave_0 removed [ 381.930686][ T6752] F2FS-fs (loop4): invalid crc value [ 381.957926][ T6741] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.008224][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.099286][ T6752] F2FS-fs (loop4): Found nat_bits in checkpoint [ 382.491224][ T6764] loop0: detected capacity change from 0 to 1024 [ 382.498552][ T6752] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 382.574916][ T51] Bluetooth: hci4: command tx timeout [ 382.611253][ T6763] loop3: detected capacity change from 0 to 2048 [ 382.652109][ T6763] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 382.679321][ T6764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.736429][ T6753] syz-executor.4: attempt to access beyond end of device [ 382.736429][ T6753] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 382.739911][ T6764] UDF-fs: error (device loop0): udf_read_inode: (ino 832) failed !bh [ 382.761043][ T6764] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 382.830781][ T6772] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.842569][ T6763] syz-executor.3: attempt to access beyond end of device [ 382.842569][ T6763] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 383.133228][ T6771] loop2: detected capacity change from 0 to 256 [ 383.291632][ T5080] syz-executor.4: attempt to access beyond end of device [ 383.291632][ T5080] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 383.381514][ T6763] Bluetooth: MGMT ver 1.22 [ 383.425189][ T6771] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 383.577889][ T6749] chnl_net:caif_netlink_parms(): no params data found [ 385.305376][ T6785] loop3: detected capacity change from 0 to 32768 [ 385.361996][ T6785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6785) [ 385.400531][ T51] Bluetooth: hci4: command tx timeout [ 385.596534][ T6786] loop0: detected capacity change from 0 to 40427 [ 385.615293][ T6786] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 385.623543][ T6786] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 385.664949][ T6785] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 385.675681][ T6785] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 385.685729][ T6785] BTRFS info (device loop3): using free-space-tree [ 385.727737][ T6786] F2FS-fs (loop0): Found nat_bits in checkpoint [ 386.039321][ T6786] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 386.050970][ T6786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 386.304408][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.312256][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.320303][ T6749] bridge_slave_0: entered allmulticast mode [ 386.329831][ T6749] bridge_slave_0: entered promiscuous mode [ 386.688334][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.696137][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.704866][ T6749] bridge_slave_1: entered allmulticast mode [ 386.714058][ T6749] bridge_slave_1: entered promiscuous mode [ 386.756390][ T4509] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 386.952063][ T6749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.976781][ T5090] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 386.999006][ T4509] usb 3-1: device descriptor read/64, error -71 [ 387.006391][ T6749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.248990][ T6749] team0: Port device team_slave_0 added [ 387.293887][ T6749] team0: Port device team_slave_1 added [ 387.309176][ T4509] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 387.441436][ T51] Bluetooth: hci4: command tx timeout [ 387.511030][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.518190][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.544854][ T6749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.584427][ T4509] usb 3-1: device descriptor read/64, error -71 [ 387.598013][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.605296][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.631762][ T6749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.694766][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.731611][ T6811] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.748480][ T4509] usb usb3-port1: attempt power cycle [ 388.009515][ T6749] hsr_slave_0: entered promiscuous mode [ 388.065518][ T6749] hsr_slave_1: entered promiscuous mode [ 388.142916][ T6749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.150935][ T6749] Cannot create hsr debugfs directory [ 388.302340][ T4509] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 388.460562][ T4509] usb 3-1: device descriptor read/8, error -71 [ 388.783632][ T4509] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 389.070445][ T4509] usb 3-1: device not accepting address 22, error -71 [ 389.097078][ T4509] usb usb3-port1: unable to enumerate USB device [ 389.108537][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 389.266589][ T6820] loop2: detected capacity change from 0 to 164 [ 389.427735][ T6820] Unable to read rock-ridge attributes [ 389.519259][ T51] Bluetooth: hci4: command tx timeout [ 389.632443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 389.781014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 389.790219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 389.813845][ T6749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 389.898311][ T6749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.970431][ T6749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 390.074028][ T6832] loop3: detected capacity change from 0 to 1024 [ 390.087907][ T6749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 390.095168][ T6832] EXT4-fs: Ignoring removed nobh option [ 390.097504][ T6832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 390.258091][ T6832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.317647][ T6825] loop4: detected capacity change from 0 to 4096 [ 390.435168][ T6837] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.643916][ T6823] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 390.656149][ T6823] NILFS (loop4): repaired inode bitmap for reserved inodes [ 390.732842][ T6839] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 390.955054][ T6839] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 390.994618][ T5090] EXT4-fs error (device loop3): __ext4_iget:4913: inode #12: block 13: comm syz-executor.3: invalid block [ 391.043512][ T5090] EXT4-fs error (device loop3): __ext4_iget:4913: inode #12: block 13: comm syz-executor.3: invalid block [ 391.494436][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.517138][ T6843] loop0: detected capacity change from 0 to 256 [ 391.666315][ T5090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.695683][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.752252][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.760066][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.799091][ T6843] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 391.893329][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.901141][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.678153][ T6851] loop2: detected capacity change from 0 to 2048 [ 392.711730][ T6851] udf: Unknown parameter 'lastblZ7 >nwto/k' [ 392.862612][ T25] IPVS: starting estimator thread 0... [ 392.959230][ T6858] IPVS: using max 240 ests per chain, 12000 per kthread [ 393.142734][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 393.770978][ T6856] loop4: detected capacity change from 0 to 32768 [ 394.276268][ T6873] loop2: detected capacity change from 0 to 64 [ 394.335633][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.467668][ T29] audit: type=1326 audit(1717719658.637:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a92c7cf69 code=0x0 [ 394.926113][ T6749] veth0_vlan: entered promiscuous mode [ 395.082728][ T6749] veth1_vlan: entered promiscuous mode [ 395.522287][ T6749] veth0_macvtap: entered promiscuous mode [ 395.676758][ T6749] veth1_macvtap: entered promiscuous mode [ 395.968491][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.984103][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.995332][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.006134][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.016345][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.027159][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.037397][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.048196][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.063644][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.299954][ T6878] loop4: detected capacity change from 0 to 32768 [ 396.338548][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.349787][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.359873][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.370619][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.380714][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.395637][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.406979][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.419058][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.434476][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.626986][ T6749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.636313][ T6749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.645629][ T6749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.654892][ T6749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.759100][ T6878] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 396.774702][ T6878] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 396.809366][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.838333][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.858183][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.872921][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.885431][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 396.894952][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 397.047478][ T6878] bcachefs (loop4): alloc_read... done [ 397.053672][ T6878] bcachefs (loop4): stripes_read... done [ 397.059883][ T6878] bcachefs (loop4): snapshots_read... done [ 397.078816][ T6878] bcachefs (loop4): journal_replay... done [ 397.085047][ T6878] bcachefs (loop4): resume_logged_ops... done [ 397.092792][ T6878] bcachefs (loop4): going read-write [ 397.215269][ T6878] bcachefs (loop4): done starting filesystem [ 397.271205][ T6878] ===================================================== [ 397.278455][ T6878] BUG: KMSAN: uninit-value in bch2_inode_unpack+0xaf0/0x4c40 [ 397.291239][ T6878] bch2_inode_unpack+0xaf0/0x4c40 [ 397.296474][ T6878] bch2_inode_peek_nowarn+0x4ec/0x5a0 [ 397.302132][ T6878] bch2_inode_find_by_inum_trans+0xb3/0x3d0 [ 397.312704][ T6878] bch2_inode_find_by_inum+0x17b/0x4f0 [ 397.318383][ T6878] bchfs_truncate+0x437/0x1420 [ 397.325097][ T6878] bch2_setattr+0x29f/0x2f0 [ 397.329898][ T6878] notify_change+0x1a07/0x1af0 [ 397.334953][ T6878] do_truncate+0x22a/0x2b0 [ 397.339711][ T6878] path_openat+0x50d9/0x5b00 [ 397.344485][ T6878] do_filp_open+0x20e/0x590 [ 397.349233][ T6878] do_sys_openat2+0x1bf/0x2f0 [ 397.354075][ T6878] __x64_sys_creat+0xe6/0x140 [ 397.360169][ T6878] x64_sys_call+0x2966/0x3b50 [ 397.365151][ T6878] do_syscall_64+0xcf/0x1e0 [ 397.371812][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.377903][ T6878] [ 397.380364][ T6878] Uninit was stored to memory at: [ 397.385622][ T6878] bch2_btree_path_traverse_cached_slowpath+0x5f02/0x79f0 [ 397.392985][ T6878] bch2_btree_path_traverse_cached+0xd1a/0x1140 [ 397.399561][ T6878] bch2_btree_path_traverse_one+0x737/0x5290 [ 397.405767][ T6878] bch2_btree_iter_peek_slot+0x128c/0x3840 [ 397.416934][ T6878] bch2_inode_peek_nowarn+0x208/0x5a0 [ 397.422603][ T6878] bch2_inode_find_by_inum_trans+0xb3/0x3d0 [ 397.428816][ T6878] bch2_inode_find_by_inum+0x17b/0x4f0 [ 397.434468][ T6878] bchfs_truncate+0x437/0x1420 [ 397.439517][ T6878] bch2_setattr+0x29f/0x2f0 [ 397.444200][ T6878] notify_change+0x1a07/0x1af0 [ 397.449226][ T6878] do_truncate+0x22a/0x2b0 [ 397.453833][ T6878] path_openat+0x50d9/0x5b00 [ 397.458589][ T6878] do_filp_open+0x20e/0x590 [ 397.463407][ T6878] do_sys_openat2+0x1bf/0x2f0 [ 397.468265][ T6878] __x64_sys_creat+0xe6/0x140 [ 397.473175][ T6878] x64_sys_call+0x2966/0x3b50 [ 397.478044][ T6878] do_syscall_64+0xcf/0x1e0 [ 397.482812][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.488963][ T6878] [ 397.491389][ T6878] Uninit was created at: [ 397.495833][ T6878] __kmalloc_large_node+0x231/0x370 [ 397.501251][ T6878] __kmalloc_node+0xb10/0x10c0 [ 397.506211][ T6878] kvmalloc_node+0xc0/0x2d0 [ 397.510982][ T6878] bch2_btree_node_read_done+0x4e68/0x75e0 [ 397.521000][ T6878] btree_node_read_work+0x8a5/0x1eb0 [ 397.526497][ T6878] bch2_btree_node_read+0x3d42/0x4b50 [ 397.536214][ T6878] bch2_btree_root_read+0xa6c/0x13d0 [ 397.541825][ T6878] read_btree_roots+0x454/0xee0 [ 397.546830][ T6878] bch2_fs_recovery+0x7b6a/0x93e0 [ 397.552109][ T6878] bch2_fs_start+0x7b2/0xbd0 [ 397.556898][ T6878] bch2_fs_open+0x152a/0x15f0 [ 397.561843][ T6878] bch2_mount+0x90d/0x1d90 [ 397.566440][ T6878] legacy_get_tree+0x114/0x290 [ 397.571491][ T6878] vfs_get_tree+0xa7/0x570 [ 397.576117][ T6878] do_new_mount+0x71f/0x15e0 [ 397.580968][ T6878] path_mount+0x742/0x1f20 [ 397.585554][ T6878] __se_sys_mount+0x725/0x810 [ 397.590576][ T6878] __x64_sys_mount+0xe4/0x150 [ 397.595435][ T6878] x64_sys_call+0x2bf4/0x3b50 [ 397.603655][ T6878] do_syscall_64+0xcf/0x1e0 [ 397.608350][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.614495][ T6878] [ 397.620865][ T6878] CPU: 1 PID: 6878 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 397.631973][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 397.642214][ T6878] ===================================================== [ 397.649392][ T6878] Disabling lock debugging due to kernel taint [ 397.655631][ T6878] Kernel panic - not syncing: kmsan.panic set ... [ 397.662155][ T6878] CPU: 1 PID: 6878 Comm: syz-executor.4 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 397.673741][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 397.683883][ T6878] Call Trace: [ 397.687249][ T6878] [ 397.690263][ T6878] dump_stack_lvl+0x216/0x2d0 [ 397.695105][ T6878] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.701061][ T6878] dump_stack+0x1e/0x30 [ 397.705370][ T6878] panic+0x4e2/0xcd0 [ 397.709420][ T6878] ? kmsan_get_metadata+0xf1/0x1d0 [ 397.714695][ T6878] kmsan_report+0x2d5/0x2e0 [ 397.719335][ T6878] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 397.725325][ T6878] ? __msan_warning+0x95/0x120 [ 397.730218][ T6878] ? bch2_inode_unpack+0xaf0/0x4c40 [ 397.735572][ T6878] ? bch2_inode_peek_nowarn+0x4ec/0x5a0 [ 397.741293][ T6878] ? bch2_inode_find_by_inum_trans+0xb3/0x3d0 [ 397.747548][ T6878] ? bch2_inode_find_by_inum+0x17b/0x4f0 [ 397.753342][ T6878] ? bchfs_truncate+0x437/0x1420 [ 397.758436][ T6878] ? bch2_setattr+0x29f/0x2f0 [ 397.763263][ T6878] ? notify_change+0x1a07/0x1af0 [ 397.768388][ T6878] ? do_truncate+0x22a/0x2b0 [ 397.773161][ T6878] ? path_openat+0x50d9/0x5b00 [ 397.778081][ T6878] ? do_filp_open+0x20e/0x590 [ 397.782899][ T6878] ? do_sys_openat2+0x1bf/0x2f0 [ 397.787882][ T6878] ? __x64_sys_creat+0xe6/0x140 [ 397.792873][ T6878] ? x64_sys_call+0x2966/0x3b50 [ 397.797879][ T6878] ? do_syscall_64+0xcf/0x1e0 [ 397.802703][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.808962][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.815207][ T6878] ? kmsan_get_metadata+0x146/0x1d0 [ 397.820551][ T6878] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.826504][ T6878] ? filter_irq_stacks+0x164/0x1a0 [ 397.831800][ T6878] ? stack_depot_save_flags+0x2c/0x6e0 [ 397.837414][ T6878] ? kmsan_get_metadata+0x146/0x1d0 [ 397.842728][ T6878] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 397.849138][ T6878] ? kmsan_get_metadata+0x146/0x1d0 [ 397.854462][ T6878] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.860433][ T6878] __msan_warning+0x95/0x120 [ 397.865160][ T6878] bch2_inode_unpack+0xaf0/0x4c40 [ 397.870384][ T6878] bch2_inode_peek_nowarn+0x4ec/0x5a0 [ 397.875936][ T6878] bch2_inode_find_by_inum_trans+0xb3/0x3d0 [ 397.881993][ T6878] ? bch2_inode_peek_nowarn+0x1e4/0x5a0 [ 397.887702][ T6878] bch2_inode_find_by_inum+0x17b/0x4f0 [ 397.893341][ T6878] bchfs_truncate+0x437/0x1420 [ 397.898265][ T6878] ? kmsan_get_metadata+0x146/0x1d0 [ 397.903588][ T6878] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.909540][ T6878] ? setattr_prepare+0x63a/0x14b0 [ 397.914710][ T6878] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.920659][ T6878] bch2_setattr+0x29f/0x2f0 [ 397.925351][ T6878] ? __pfx_bch2_setattr+0x10/0x10 [ 397.930524][ T6878] notify_change+0x1a07/0x1af0 [ 397.935431][ T6878] ? kmsan_get_metadata+0x146/0x1d0 [ 397.940779][ T6878] do_truncate+0x22a/0x2b0 [ 397.945392][ T6878] path_openat+0x50d9/0x5b00 [ 397.950195][ T6878] do_filp_open+0x20e/0x590 [ 397.954870][ T6878] do_sys_openat2+0x1bf/0x2f0 [ 397.959680][ T6878] __x64_sys_creat+0xe6/0x140 [ 397.964538][ T6878] x64_sys_call+0x2966/0x3b50 [ 397.969451][ T6878] do_syscall_64+0xcf/0x1e0 [ 397.974123][ T6878] ? clear_bhb_loop+0x25/0x80 [ 397.978960][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.985047][ T6878] RIP: 0033:0x7f0a92c7cf69 [ 397.989583][ T6878] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 398.009340][ T6878] RSP: 002b:00007f0a939b40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 398.017901][ T6878] RAX: ffffffffffffffda RBX: 00007f0a92db3f80 RCX: 00007f0a92c7cf69 [ 398.025986][ T6878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 398.034069][ T6878] RBP: 00007f0a92cda6fe R08: 0000000000000000 R09: 0000000000000000 [ 398.042155][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.050265][ T6878] R13: 000000000000000b R14: 00007f0a92db3f80 R15: 00007ffd5020aac8 [ 398.058376][ T6878] [ 399.486242][ T6878] Shutting down cpus with NMI [ 399.491343][ T6878] Kernel Offset: disabled [ 399.495737][ T6878] Rebooting in 86400 seconds..