last executing test programs: 13.070556753s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 10.802080619s ago: executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) fanotify_init(0x10, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0xbf}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x3}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r2, 0x0, 0x2}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x227c, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000280)) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.643236332s ago: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) write$input_event(r0, &(0x7f00000000c0)={{r1, r2/1000+60000}, 0x11, 0x8a, 0x66e}, 0x18) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x7ff, 0x8, 0x0, 0x7, 0xb756, 0x10000}, &(0x7f0000000180)={0x1, 0x2e, 0x0, 0x0, 0x8736, 0x80000000, 0x66, 0x3ede}, &(0x7f00000001c0)={0x8, 0x40, 0xffffffff, 0xfffffe0000000000, 0x10001, 0x9b8, 0xa0c7}, 0x0, &(0x7f0000000280)={0x0}) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x204419, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5ae, &(0x7f0000001280)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000005c0)=[&(0x7f00000003c0)='=#--\\)*-\x00'], 0x0) 10.319078042s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket(0x0, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00'}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) 10.083364739s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 8.763923177s ago: executing program 4: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="01202a3a8a"], 0x8) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$inet_tcp(0x2, 0x1, 0x0) 8.693644305s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x60142, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x0, 0x2, 0x1}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x4, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000002, 0x12, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x48, 0x8}, 0x48) read$FUSE(r6, &(0x7f0000004800)={0x2020}, 0x2020) lseek(r6, 0xfffffffffffffff5, 0x1) 8.615418845s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 8.55078038s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000cd454b3e00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40086602, &(0x7f0000000540)={'\x00', @dev}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x115000, 0x0) r4 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r4}, 0x38) 7.916111868s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x5, 0x5}, {0x7, 0x80, 0x6, 0x9}, {0x0, 0x2, 0x81}, {0x0, 0xac, 0x80}, {0x0, 0x0, 0xff, 0x2da9}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.364641435s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 6.734269723s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000fcecb784000000000000d799b42de6d15d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2009) 5.37862476s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000500)={r3, 0x0, 0x0}, 0x20) 5.354986592s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) write$input_event(r0, &(0x7f00000000c0)={{r1, r2/1000+60000}, 0x11, 0x8a, 0x66e}, 0x18) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x7ff, 0x8, 0x0, 0x7, 0xb756, 0x10000}, &(0x7f0000000180)={0x1, 0x2e, 0x0, 0x0, 0x8736, 0x80000000, 0x66, 0x3ede}, &(0x7f00000001c0)={0x8, 0x40, 0xffffffff, 0xfffffe0000000000, 0x10001, 0x9b8, 0xa0c7}, 0x0, &(0x7f0000000280)={0x0}) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x204419, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5ae, &(0x7f0000001280)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000005c0)=[&(0x7f00000003c0)='=#--\\)*-\x00'], 0x0) 5.198322049s ago: executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000200), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 5.130621697s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket(0x0, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00'}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) 5.073424341s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r3, r2, 0x0) 4.96345447s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0), 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 3.653289046s ago: executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.59404073s ago: executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x5, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0xfc, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x285}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc01}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffceff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x16, 0x3, "c3f4bfc3a08fd356e163bd00fc374088d406"}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x20000050) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x3, 0xc}, 0x48) close(r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1080, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x0, 0x0, 0x2, 0x6}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800003d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r6}, 0x10) write$cgroup_type(r3, &(0x7f0000000140), 0x9) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0xfffffffc}]}, 0x20}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000080)={r7}) sendmsg$AUDIT_TRIM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000004", @ANYRES16=r11, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 3.592483935s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 3.586057441s ago: executing program 3: r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 3.537999879s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1e, 0x4) 3.385124225s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x5, 0x5}, {0x7, 0x80, 0x6, 0x9}, {0x0, 0x2, 0x81}, {0x0, 0xac, 0x80}, {0x0, 0x0, 0xff, 0x2da9}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.327604329s ago: executing program 4: mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) open(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000210001000000e6ffffff000104"], 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00'}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011cb63e714f6879c72e6160007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100005800c0003800800010000000000"], 0x34}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) 3.305265563s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=ANY=[], 0x0, 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x90) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x37bc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f000090e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000139000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x69, 0x4) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f00000002c0)=ANY=[], 0xf7) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) 3.22748928s ago: executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000380), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r5, @ANYRESHEX=0x0, @ANYBLOB="ffef16159f18b351706b8d24ca9b27cd0de9a0f5c1ff0bddfedfd90c888f66b89ed3aec824d59a38aeef1c6494f4ebcfb7", @ANYRES32], 0xb0}, 0x1, 0x0, 0x0, 0xc104}, 0x4008851) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x2000000}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 61.048014ms ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 59.594386ms ago: executing program 4: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x91) syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000011a40)='./file0\x00', 0x1200014, &(0x7f0000000100)=ANY=[@ANYBLOB='data_checksum=xxhash,spr_hash=siphash,data_checksum=xxhash,compression=zstd,\x00'], 0x1, 0x119fc, &(0x7f0000011ac0)="$eJzs2QtUTt2j9/2rg4qUiihFDimiECqUc1Eoci6SohMpUsqhckpEOghRCpUkklNKIqRSRCgUKnRWEUUH3rH/z23v/3M/+36fZ9/v++49xru/nzGuMa8557p+a665Zqu1xhIAAAAAAP5beLDHrcW0r+HDnWu++cxKc94hkBT5R7vE7w1k/ig9/6tGiP9M4qIK/yj/vC5OO880LNhhaBL885RV7JX1UeJOCtqr15vpJxtcqbCTN+383+X+Xk/D/q0u9E1IIHAIef9mb1Zen39pExIIBCJCMr4CgayQcJas0J8iRrUJBILV/zrO/7nzxrcxdv9S+gaI/0/tPf4Uwnr/703ij3V2QrXxk5OrcV7QkhFGw/p6rvD9t02EJP5pPQkE0tZ//r3wv5NrY+ugobF2jZeCpfeGDb1rE0SL91poFMaWv19TobJ/f4FwQ9342U9eeG/sIhAIuv7x+Re/V6vC753/Uc4TCATd/ilf739zXIP+D49f8y/qyn+UYn+Ukv+bnN/9A/8Pt/8z0T+V3f6Dv/+P+vfO2f+Xuv8n7++338cp/UeZ9kc57D+YI/L7IyQQFhKI/uu1eJ3Qv60RwT+dNyGBkKDLP11HhQTC/6gL/2td8I+64N/qQn+qC/+pLtLlT8f1j/3+sdBEhIT+5/bf2/2pfcAf7aJ/tA/852v9v2PBX7Qr/lFK/PGH+v13XfDnL/+D5P/y5V+P6x9+j6vs/2Ys/xmE/+ka9O+1/x6v3h8nQ/KPNkkhuf/lN7/+Hb/7Mtb52+e5TNsl8xfjELok9Ee+0N/Kn+iqdE3SX/O0wl/lWwv/kS/8t/ILPk9Q+iBRdO0v84N+54v8rXyJPNfArfV31f9yfpp+z4/o38q/F+QZ2mtatdmAv8qP/p0v8bfyP4ta5v/yTQ75y/GP+j0/Xf9W/qVlqabfx1zc/5f5gt/53f5W/gD/B6lxe/uc+sv8O7/nR/Jv5Q/WvOSf4+826y/n/8nvfKm/lV/2S7u5T/6DpL9cn1N+z4/M38qXs1dXltm8bfhfXTuFfP+z/8MCwP+/9PzjHsv/j/rffU79f+qfnheOyQj9j3u+7n98pP7f3NGfCP3TswsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L+vVS6nxWdEGSrpz5f0mNTycE6QwZBK6at91ov+0S8uKhD8y3chEYHg/dGa/CfRU/Yuu3EuZ6v/1kHjxFOKJslYnXpWVbcgOH7bba/owr6TrbvuWmBWKjouMCOz/GyTqVX0JUWX0UtfjLx9Y4ifvdUJb8vsiaNG114TxE8ydotbf/5hS5rOrV4zTh1Y1SVvfe++0g8Dn21JfKTd7WqBTPi55+/ru3z9PrO5dkzPEd3bV4flfB7zrVy29Mb1qB36K7QL591trtNSiJTq1fI6JHdmw/uNDw8futXnsI7oMLubC8p0jCcZyWvv+qLeS8EqU+jLipyfJnP1dB6cl/6SHeU4RVJWzLUgZEnQzq+be6hdmFdRUHJ2asY4TU9/hY8a41KURH8+Obcq29Ry7JLC1W8PyIrGzh++1Utjss1w+6E9pEN7vdH3O7JxTli79dx7joPLYs0fxZ/pUbRrQpNYqM/TgeJf09bta3zyuMBi7DULzVD3Z+da03q6GeV//7TEN8LVsm3zuZ5e3nOEE66MU1xXrRB9TbpPUcztW4Eveoxxy2rbLluvkhntc2KNtd1U/5ZzBtme8rnFT0U2BA6d0LwnLiN6+BhPr5LZPge8DLIKZC1nKIrl/djyZMOFJRsqQoe3uogb5ex6v0CvOMhSctw6z82P7X9+jHbL0LZxLFCU//musXnKcqt0yeatsjfHS3WkdD7caHx54PyGCyoWn3uJC2V4+epofJrU9GLqlqm+pT17zRnRYfx2gYP3MIG1SpHY7R8y29bv/TFWREJhgNyp/Emm8VcS1OOttLquWb/arcL7sWbtDfXGF43qn4a8SQs7e0g9fbnySr976+bdvPcj2EK9drGR5Optvw593xH8ycP0xftLvw5I3/KrXalkWfMg67nGpu46juv2dpk2zFlsSvCw5/bfd/vb7Ftr8nKd4Qb/Xs7XJpxOezAg915Zn5/9dpyo3KS14lRXzYjL43rPEzu/+pJBpvRV8z5lNSHPZb5EG72yXzquuFLbpCQu0Gl2tqxR9cipPy5/nOlRWC2yWyvV5nHcIPPSnNEXY7y+pfp87Ju4s33x8A1HnA26jayXkBMJtU0aecXwk/r8e5MSH/W/2CXY0jv81f5jnUr9Sx+u7vlKsVbnXPxF0ZztUiftTK1rr55Zkj2xT/GM0o8Dz66ffO7U+vSwIlPr1e2nx70T1V3Qp7lBL+Kmr8sQs5bRs2rigrXqr14uVq0OdorouivGwVs6fVCH+MDwk2FeB98aP5bvtuXFvPihWroP7Ywi03+oLSq12PZDep/tbTWvc+/NJzdeK+3rmq5r7Or+JqC0weFMf4f+p/yivGYtq9z04G2xdcSwn17LzocaVi4PDxzjdcPi1v0D8yw19CxKR0oNFg5bnPc9wbZAqXb6rbaZ/ndyRiQb23ZqONn2F37vMShw0Lfh1SG1FckeCsJ97BR2Hqr2TpJ7M8RoVv9+I1V2hIp1ZBfUWAUcjY83mr3wu7VGc0Ckx7mW6UKtXZO1Hjvs0workhwWciJlX6JioXqrvkj1PtnjnpfkJ8tFLinWCHybOk8me8rwmtpvfR/1DH/2U083vjDko/G0vbby/S67zDs3r9R8+bvV9muVI1dMVbjp41j96q31ce0hK145xuqqGpnXRTusvnNoUEnMtz63w7SV7z+QvT7gepGL8vJc2zHdQiPu2c239t6QGChTHrNuYqOR/CJ3C+GZUy9VhclVmtU8aMiQz7Q2CZzxZr7qpx7KFcctWqy77Csbbv5kaKO+fHcXp4vTpH3Pi/3cn32+MvmagfyOTSYve1qkXTJ4MHn12KQqp76WCy/s9z9SM/Dloft2iWI9HR49lbHcPvncll09DF8qWijrXDcdkXpP7KLpeqvOr3IKKZtzPVdU9e1ydohPoJzkoYVPg/0616X4l9uc/Nlfxayt6UGPErN5k8uH3xC2GCx8feguewvnNQt1m44N9LmQPEtp+6ut256Ll2+vTDqjrr+20N1FyeroXPMavbLk6pGrumnsGCO7QKjq4AapS2keZ2NEU+bP/ZJjPyJiSVDbuJ3Pn663GO16KMT4nm+Pl2XXi7Kk3ytLFcn/FPg5S45XKRiwbOUXTcOqzLIpIXMKtV8MfjLB7J3dvmUvEyLfdoS8Pz9gg0etdlC7UFladKDzXOlaBTsFI3HV7J3J4z8Z7Lk4NU/kRDdjI1Pz0hsvSzSGHDFfdatLlYXaaOmgFVo1ufVHN6Y5Rz4/rBLqvmNO2fuemvVVo7LEHdvdljzalrNtQ+FgtW6eij1ltA/PX7Ass26G749d4ZK70+Tuyg5If9XV8JPENYcAofjrodeGDsxxf7534lmxX43jhteOXbVgx5EhOy3LFaZdfRKek/w2ffDcLdJKrZLbb7z2G/O1Kqbr91vTP6it0nzTJfNV38S9cT0mbjc6eEpyp0n3XvdmLX9nbq5zKvHN8WmlZSVdS7TXJPdXijAS3OgidqOjdufmrW0JJS4iedNPGdYe3d5fN89R805ZTTeZR/63F9lue7rvTHqWvVK/JquH73wzb1vquS5W7hjcNDCtw9d5RfM4oTTDkZsG7Jyvr/nppbvIsemL1Q6v3OMmaB+16aXSQSPbExvav+78YvP82VxJ6ePummpyUU+FJUQ00z+cOyaSduGAV9LS/NxVgepZ7vuOS+zYfW5W+NrgBB1jCQ1N/dRDWSve7xuxpcJgbkyV51vn55Uv3Y4LjTLasHTKuVPackJKLebFi0bGuF4cv6bIxP6MhWWuXPPPK8E/Twee7Iz2+2Zwf8f+gT8j2/fVr9XYaxBqkdTj1barTnMH6Tcuj9cLaRd5uXVWgEun6FDZlzsMnj8J0Tve78KhIrV5g2YJ2cSKLZx3cdaBYU8mbPTOsHTaa380skRjx7aTN3SGa2W722wQ2h/2IiFQZtiMCqFlizs07737XH/CP/3IqNmaaRMX3/N6sXzcto9BuSXhiY3miRePbl5wN2pmTZcBvWdIFu73WF7TXZAcbGZbGxh5a2DFYJNDDRd2du+7d6J7aWS+1ILefoqPquziig4t2SKWfFoi9OvxAsuK3HvvEqasTNu08FWD3Nuqk7dsQgfpZA091THzhK/pkOha8W7yc17tOL7COv2drkRFQJTRsMgTaf0yCs9dCZs2qI+dsGHdx7aS6msZweFuw652e7yyzPq74poIVYeJXrfSGw4s85D2srJvF16UIiEUFfBKpf7xDZP9uYfccySDB83xTr7ReKpinPOOPUY9b00US9Zfplb8On2qiqnMMMGjtp3PjmdO97o5Ys2Dwy2ptStOPOlSc7PebPB4lasaVZ2rzgibDul1+1V9wqigqV0m39KJSLwsk1rz2vT+jTnTd70b4yPjIdp//6Snp1RMrruu0dk25pvRc0tzt3S/qQUD3x1zzNtyf4/SjAsKvffM37o/M8Nh2tHkiAuK1T7Hq8LqAl75fU9oeVaovvKL1vSe+6Y4e7pn5By58i3p6IA7B+8Grx+rerD4dZW9b22G/pMRs4dsvXryga6ExMc0J/G+3Q4s2+gu9/O4Ucvg1ROevygw+Baw1airbJddb7MmqzfpSl+ZLPfaNPpG3k7BJMOI+vLU8GTHOzO8V9edD3491yBwXYT+4RalF6Fe7WunzFy3tuv1r6aOHn7mC0dVpb/uEL0yylhDaXyfhQ+GJebn2BhE9b4Vu91XyiXsWuk+/+C0Xf4Dh8xq6ZitO+67bUGTvVeiWmPnkNvN4TMvJysWLG1bOXd7UvOR1rbADyZRt9Kuj/H9ICQ68OjbF366+evjVBNH7T7Y/Yy+3BMDb/eU2l/Vfkl5+79M+9GqkyNn8KDV8sLBPj7DlcU6I338/AdLPDj3w69t//uLhh07Bj/OM69sUfGRb5v6Y7b6U9vc1llux66PWvblgmuUnM27Bv89il/zHnZk1D/WW2k9WXaEduA9j1zXXR/9ortG/TCwtNyT361JUzem26wtCjsl961YISg1ld6UdTf5lNh313MJ+7aVjpgUJ3atac0pOZGGNx8mf9pdHP9J2/7JjbZXjxUV/H33BgleiMUc233/psHntnUxEyKV1cZZKm5Wfj49oOft8FPXzIQv9RStH5XiknTL/FaJbcic/gOXCcdfmXhh0+Ov3X0X/fJVu/P0QMjmseJn1Vwnvp8Q2EfiXufXtmkXCr9/6xOUnp8+1Ki5scVq6fe8APcv1+IPn2m0rjB2cJwvdbPea/rDD90LX72bd+X8i26diw48MVL/qPI6/eKc46pVx14v+rXx471riQPHp/SerB/x1rOzXGeR4U+nBQcN1KS/WHYz33PVeqfKKv8aGa+zFu3jrZfqqA9WOrV6g03D7Y+79Yd8T50SFr3DbExDahfv1UqrhaWkkkRvHRiu5NRw/9DTvscfZs3ol2oh8UB71pOTY6Lm6uhreTt1S98ybfaRAOXHTkdyyp07O9ZFT0kKC721KV0z+8WwltGtb6IfKjj03DLVWi3211PD11sWW9xQ1h1u1a3x6nL1+rjLL2b5bl7WcDTxvIezS5GQnOozP6v4b76JD0dIybgPfh8aU7co26PuTtxFg7opki5VukNauodXdttb3y7wainJFd6XcyltvpfVzZZ1q8tzWsfvTdTbl3f/sO734d3uhOj4X3So2fWkyGb58qnJJ/JK6ytXrl+xVKTHs0/Jp9xUDU/Ib5HVyWoTXNGuWy787Nh8XVWVfGfPFT2Hvjg/W22T16XnS03EPq/yG3pmbKXeU9mJz960J7ye/mPfltuHJl4Pyg4zyH2Vu/HFu9Wnq2a3XI48vf+2gohQ+HDDwbIpB29tWOY9ymjJFJ9I1+RM26qMrUd8VcYLSZ+1OOUsGRY6V/WU1JCDPS/2j5XJ0OpevdTjacvjglUFYypqjxb/8rdt7xWSIZE55Fnn+lmJT7pNT1IYv/d+xMGWbqqb8qtXn71ke03mY0j2rrKs7rvX+8fuKH462G33quN7B06XtNsQFqx1XHnC1abpK5LKs2/OCdCIKz924lG9YWFVQLO4y6L0a08aR26LPdGeEXlxeXLxiMtPCzp6b2oYbr/itWWS37pF44Z/Gmp2Livs5A5pjY0n2su+zXzyPbgo/3JRt9iRcmp1BtWXOhd8WSoTeLtiV1Zm8rrrvSf2c7ZTyfq2XvzC1ATp6pKHxVvv1IbemtsYl1FaqjP8gWJPP++tT9dkLNl8/ZfgQ5D+pfyA5ONJnZH6np8WaWWe39+5wU5eZFme/bH7N0wWbu9ro/mj5wCtyenKvds/Ck8SUS48LiVSp1dn/UNC0cRVrMqwacktmX7h5jL9nZqfDa48eXLQgr1xtX5lFl8yJKyFlk6M9xdIeP+oaLTLHbCim3hI/vKp404OWT/tk8e8xTYzBq2Pmq7+deryUBvxNjGxjrnDL2+xGDhiwhZ/7XfBGbo3ptRIJ/zcq3Y/xPuR8JxJr0V7jNrjGWmcJL654tFY6+CUMw1Lriwf+Mm1r/P0nG/HbRfUhdd/7pk+P+XlvJRtZ2XiJqYqTa7+Nivz/r2qMSL7NQtbb6ce88vWz/YX+xx3IOKB5oyAEcoHOztF94UYyynI36+ObdO2W+ottENZxs99t+2bMDNj/w1HX6XoRO/ub/wq/Kd6+fw1kYNPTDpknzmu8bx9Rw/F/VL3LSzUp5+YdaxcvYfcYUXrXaenhwndnj0u6qRwe2reKMWvFtLpyz1fmMkN1Zx5xubTVJuegtV+27Q2ZuXMcZJTtjlbPim1fnx8tWxnRlXb/ORPqw8s6dz90erh8DtL0vs59bA696aqRmmb6Uqx5Qerery1zHpxvd/RK6G3osOaVLr1dF2U5Gh/c4nnzq72ojcPljsudgg+4tAoP6ihcbi3TugwqdpJ2zUT80707G/8Wm/w+CEjlfUG9VgbeTBMZ0J93GTxhNvGAY/Pbfa4/TNPPeOiSUybTE69Resmww7vA4aHjFp7r50gL5o39MFz52ML1ij1Nu3bcdhO4H6u6Pi3PWbqWmkqzwr9ZN+enay565R8X4+nUqUHNT7tWHk54cOXSIGn3qGAbRNXpmw64Bn2Mic8WFAl19GwqDBygqjghXmYtK76s+mdrqpz5FeqvHw73sRy/oyxo0c2KI8Yl3yyUk+7yXPZW/9p/Sy/XVRq2KJYLPtV/nmmjesjDbf8V72SDLQvLvZ4dnXzpQ7l0B2OQZuTNq3dO/nI3n53a3aOE+h0O9bsI3GyeXi6nMYL53mu6y8MTHy2MGtLnNgXv4gjFn0M0zpNvpwd2+PUjtmzSyea/Jz2+ktc3ocFfmu14xIPDF1Srrvo87xZ1tdGvD9odCF7ZO+x5sXBJ0NPy0mei5wR63Di1OCJhZUfOo+0bQmvPahQurp46ZCMimzZXdp2a8slZRdXDNleXzNKfWF1lGGB0+f0jzsUc7xk+uW65njKJ+WGWukdWyGu82CrjuRztRgTzZcS8hMGi38z22dofU5QYNm68bJn4aIKmfJy+QSXjjFWMu80Hy1MW5A5YupF95CO2bmnZ/c/fmObut3x2QtfRt8+5hK4IVr17VCH8WvsZx+cnT3qdX5AcL+8+EnrEoN2nd8ScnJ123XNrYPyYgunPly951Rmz4+DNw/psSlu8QWHik8mX+UG/erztSz5mW/znQm9tj6b9DRgzc4SqRKDyRnKaoOMRo4cET+p7IHqnMeqs/SKpWY+Wr9nzLuJr6ylfQw3RXfZFLbSZarCWwV91YflDhONTrZZax5JSbx25siHyiXGqZYjZT95Zxyx/zk35sS6kyJftL4syX5X7b7eqiVE06G1bsXBHU6Tds39uKbmhMr5vs7NWm6G1knb4rMdBWZVLpMudkbU3XI8uf79Y+d3Xo79f9p63v6w06V+d7+QKyPK1oTc2JxjFdDL8fzl9a/fOFs6xrp+Nh6ytfJH1Hr/frUtPSerhrS3bjUIc4q/rXJzk/XYmbFbmwy3Dj5zXTlnzuqWR34TJM8+PXTstou27K8prTO8toucnDHN9OuDKzf19spEHZb54fBke8wI35XN3xbuGVh2c4bEa4O8oiOfdg8MXmYo0zHGT05aqUv5bnGnN/t05P0sTXXkDgTNXX6+w+N7lXZ42MTPvdUW/brsLqQy7V3hcz/7/mVvdcMmOHqGmg+ps51mXJTl6NYy6Mxp/2P2/fy6tnwP9goedcro+sy3Z0QkTr/RMBo86ZtO28Euuqdmaz0zafywfM2oXdf1Qgx9ZVbNOdhzfeZt4eBQM/tp+z7lqvaJWjjM5t6vxQ7vWqWkpsZnjVTq6560J+iOwGdZ18MqV8xcThW4tZlkNw4tHB9XsMHqhWrv4s8/pw2+7FQ2Neze/rWV76t9vCLfm01rn/JTNbafYUBDt8J3H7q5vnsglR3zfILUJk2FYT+GKL65sc0nar6dzJHLNvFLk0fJqwde33V6++0Txt4Pv1i8N48zqGpI8Z7kN/2+4lbHfe7FoqbuaXoNlz7lnfhifCV5UOzMjQ9SDL3FJusvqXtxerJht2V2boMUH1yfJvEt58PVM6+meW/d1pbUa9yCH3suLzV+HL4ttC7oybcjQvd9okUjh28rdqyeO9IyP77NRmXt59ySS9OdN3813xOy+nCA/qGNO1vPHG+RTXhXmNb0vvGWQMfMqOmbt4Wq597dK1usJWRXVuXLmQ9ebnmhv6XUFrU7MosqhGtsfbtqLN06ILI4S1C86Vz3jU2qa5UrPhc3uEea3jkX7XDy+yTfqTsNjynvtZpz9sfPqKy82dPi3QfMadfU62okWzPQPuj9ex8j37PJuhNved1/lJUzadGz9iyhkImS4deyGjSftzz2HRq/oKrX5JRfdf2a3JMu3E1fHlmruN03bc5ikdSUvBi5jP7HWjPUd3TEal1qnLD4TnyM+5Yr+SMSE84nPN6/ZU+uSU2Mp+0+7Ty37W+LP6QuHKHqs9YpJ6k6JFwqtSKx5Fd7dXWpw6f00kMvk/aenLj/YdTZrutVglJqMxbmOLQMi3M5rtx9o8GSoVt/ahTr1vawlXP8EXThq+fR44nf5Tyun5d50Xqs8WP4GquNszS21fepVFoXGykkM7l0jPQws22WdxY4bVyStnuUxIKEZot+K56OaxoQmiLsMfJeN4fWsMnhPkNVvix/JZKtse+K+Ovp65uv2l32nvl5yJtRX6+o7Jtz1svRUtP7Re7B7mGrhHzD7iV9rxrm8ExP/eLEpTLDfiU8eF8oZ2VS8mhfQt9s0zmHFm1vGRLbkPvWM7Y9yPeJ00/57s7OEcYK8SKj77reH/LBtrRkUfkS5c6HQcOVT71uHNne2awX62KmfHGJacWShq1RPQrvRM58u9C1v67r5csJTpEtUV1ypRtrZrTPDncUCZ+/YubxvBdXSzO/ZzkUzFP2mzn1cVyO0ccz0ftXrzVv7WYTWPLeJSlnp6NfUvcZt+1CVk8fc7NS2X2Z0lPpNW6dmV6jvNq0X6g/DT3lfexgm2SoTLmb45H524RUpvuHr1afIjrAYoddnMS++NMBb7Y/Cb16KTGmWi2watH6sZsCZpksevzjWWcvQUb7aMudLdMOV8iVBncpshN+bu8Qa5fUtvmcxOczHQtOdt2R4bg28a7+p466PdsCNXyCFg1UMGpNaIzIXSvnMufkaHljT991L933zaxS2JOnviFq1gqxT71Gf0xVsbewWaq5aMKqzepTD4nWFVnKvlG8n6MUu2TPrycvZl907q0+rb7ZN3780dmD4hxHvZ9UNbZZr3C1e+Bppeb/4tcXAADgbzAT3dP98SuFQerNA3POD3AT/v3+v8sf/b/f/zsICQRPZpg2iBTWb7gl6x9XplU9yrNOQkPkjNQy6/6qk1S+3p95uc+kSDHh/ROVfh2qXfz26nj9/cuz82pygxuNnaaUb++WkyDfmblzqNNJyYnjfaYaTo/NCVQtWT6mxbSxbcLu7D5SE4Knt+xb6yP/5aXck1EWIw7mL5oWVGdyRe7wbcljxUpSg/oGj43Ycyw90eaY3yALmRNDO5tLPuaOVjO5uf1ea+yQda4Dh4zr3WZT+Nhkzq3HG6Y61ffoaxX93ev8+DkW7jPcqxzFAq8OPJZaMq/tQ7tXYF37O4k3lYW9I4rrlp6TeCcj9SLp165fi6tVTjvc+LJH1urZ3rk53qebcybmVGusUoiZaC8es9dzUkXxmwNT5p1QkwwTq12wWFpqXbD4wozZERnWAS9dgtouPjWtzFZoUla8Kr9wVHp3lZC2Wbo66ycdLglJUEh5/vxyYb75LFmdX+XBuUrvjuu/9HH5kdIQpHgpMTRTfF2nsce0ww3nqtY+mX9pxMirlUudc8yubgpYl/qxyrp+/9tHNdczbyxf39axVl2qxLI9bn+6qesUD7HutY/6eL4I7b++11cDKz1B572Uok1r+9wa4KVRHxszL/Xnz7DshUXxOZaR1+7VFHVouYueTRIa+8vlc/IuW111D7vWMsukp+ev1hQtb4ypWmAesUv0elnL8Kq+8jlmU7LljjYVpyseCtte/11/6zTVU+UvzZYqHVrz6pVFatqWX/4xGQ8PpmTuLLt8ZFiXw8pWY0f0U8vQ1e6SKeHWrTD6R3htD/GTNz+/Dh+tEnvd68KjmUKifgrTr610HRBVEl1110FxdOT6Zo9n+k5vr5s4pK6dMm7svkWC68pr59asii4OGD63r/kD73WWBW7yvle2jHLrmGcZKdY1+OGQZY5bdHetXesy3cJjuli+Xq/Kh48vbWo972YquuWh/vejXXz6vVlQoN421cvVuOd2a/UvI0c+69Z/eWb77h/axYobVLTuJRTM/BS0Y3ZVsfIVa6/73Tb09Ir/puP1zmq+h9t4/eyRS60Uxt+97Zw1+FF91qqzWvI7nBYN+SytlvbmdkXuvNF2IqMufl+3Ty24sM+39omXzlRdP398nrNLQbTXqOzFJ9+5B3YP97aLGBoakGT7abTxkOCBt29d7Zu/NWKFaU3PuoPTHEc37hyWfWVcybJDkT9GxeuWGB/9mJp04bxy3Z2Tqv6vRgrbBwecTXCx/vV6rs7ZfueC+/rYNVlM8SpfJaQr+9wmfWhRiZLr5Q8ffGSVG++8vhuzsurBtaFWF1pCw0d0zfn8Maje6ZNga3a37U2lgc3pimrVnbcP1XfeSZnXcfRM+5x7wjKDi2wfL3ufe+pHy4NDu+4Z+Bxse9k97V16oa/VhrEHbB72u/by/TWhGW9Whu+1DRtW3H/P/SM5WTPf1Iy2KTXUHXm3Qy4g98lP7+dXeqzru9Bnb/ET15man7JuqjXpZI5yTo9bnBUYd7V21XJtuz0SvjllKps0Yn7JDYsysX3W63LGjMLBR8NHOfS8qDalvuSVg4bC4oBWfeF3NlnjBzWv3pF45NmoVTZi6/Ty+6wL1zObX5nV486WLjF5o6vXH/YfuvL5kOl54SXa41yEhl3oHPpzxlH/44O+2Baoj35z5IlWy7XIPJ1xJotLzn4f5KKxxcqgYmHcxI3WktIj9c8+dbKwPL95T6/oBwu0hnt7TgtZe6dp0usNG4zHyHb8kP4x6/TGiIH3f7XYTdsxukFW4d7ZXuZvzmrr7PvxYtup2i43cpSzco6qXyhJvBJw6taILSEZUyyTFrzMlyi3bt0zY0rFgHJ1O4W76/yn37w7VN3CoVQ63Pr+tZin2iavq0c0X967T+j0HPH3Jyffvrprgsf+LMmrZy7M1YmITpU/8MzMeXZOwuZlugumh6ySzPS1dK+oKzwm0K7Nar3QZH8x5fjh1L7xYk+m11saPz/4cF9LRHxMa3G6y8ibTjPMC6NkT3getdX4qXIkNmdkS69zshs+aNrrCnYsN1ju/m3+vdivsd8Nl96ReOputUvwXCN5T29PA6eH2hc2GxvJ1U9Ynr2lSP+F250lltVCu1ZZab1NaFDSkDQ2qY5SXfMq9pTZVp2C7PoJUxcEXoq74jdwkIF9z1Lf7RMfRSVNvT1d+unSCHe3H7PaDl7x2brC+rD0l55Flk+XZ7YovSm//WR3yuEeWacLYhv29T67s03ce1CUvULTxuN70wrGPPtWPOW+27KSZZ2LpwdNlflwc2PW3bDAZeWRDeIJX+fqDRHen7/gsv7ndWfchkZmLZEOn/MrQinzgFq0o+jFLi8r19r3mPQir8dBQ7U1VzsGuI3W7HK66OWmU73Dxy883F1lx6VoWbezJSNOVOe7uq+80FIZNeyy2fIovTf73yobvooYWVf4XXXdovM2zrrjW2O+zX02+7Ck7vJ+jw/vtzxy9e7ZAp0wo3En7OVOv92k0SOryWrpkTD3+00heyscv3re1DiXm/ZrmOss6+8GR3wO+w516JF24bDdHMeR7VK5Tb7JKyu8jp865mbrst5SREQ0P6LHzIAF31dpV8pMHp7kOnp/YJ1Vw/BDu+bdnf7aeW5Q1PnW+I/RgXFp4ft/ug94qV9xZ5+5Z3TgvPItIdomXy5sG2Cbf61HyaOnrU3Rqu1m0qrm1skr0kSE8kIv2bVtE2QWJe7Z1TxBP9ch5vI3ycoFfrNfz9yaINsxYoBcx+AKf/kp6covr45xtx1RNn1m1I33AU8OZQpOqj/tF9nl6tpV52I3dw8tCFxWtWy3box1i2vKrSORqs1Hls6XUCy/vmuylsrkewG1KTq2o7OXrjIPztk6f/QzBR9h2826M29W+MwWBLl06y7VZ9RZP8vbOv12vPqQ3+VYfOpJYbnY42UupRfva3lVjX1xd4Totafp7/Snj1+8aJzl68l3c2JK/LVX/WjdIrrCqE1t92YV9YZV1SfrLvVxzTdZInc2+cM3MQ352xE25527HX9ornszL2WQzoBPu0rlNdq67tiiu9f7tY9v8mrx1ppHezVbr1dWRcbuqVZZZxc9rGX/lWPtd7dLHPvUe1Nd32N6McvDpdakSozstUtvtlTqMZ+dfX9VfKvp+GLavvL8lTsypat/Slf5NG7YoFEmE2fSbtJ8/Ozx3E6hBaM9erwrOm9ard2YsDBkvlZuFzWnPuGdA2v1O4c9F7nc5cfiSjU55xUrnKaNveDXpLz0cot/huLX1RefF/z0OFR4wn7GpcyDEV9qP/+o35E8acHOztNdRk9rf7TszPXuDb98x8uom0kmZh9wD0s49L2javH20SqDCpYt8n0lnvUiw/ZbzhF3Da1RC+McI/Tn6XaM2HwptjRg+hjZ0BaXha7aGpErRcu/XZCOWXF1loj9g3jzpcdMPjYM6VJ0fOu8baNnX+xpECQyVFIu4Vvir+r9Tn4nszbahK5f9azH4xaFva6HL52bpLnTQ8ppWcS9owVWrnFW9o0fHIq639tYVR7qMjusYuRQq/IP9osLT/cSTAk9KpLYc97Nb19tMxITDrSNVNg/fqys3JgRBsbXkz/mOY3f+z2kem/D+HGnU1xOtKR/Clt/VlFlVHpF1k3r272NfB9ZR6kZ3wqKKreRl1ywQtxRtFHnuXhH3pz+J6d+amw3W3/zfLjj1FXnNUXq2p98PKc6VPlm2giR+lepIWpTvYa29QpzL2uKFB67+0KRXNTW3uPsmj7n9woMGPyhbu3brheGyiY9TstJT4yyG2tpLj4gffaZT1vjFg9oW1K+sGy+WmiXdwY7AofPdFC8Z/Vy1lmt11Izz7/081QzOuki5irbcfmS0fA6NRm3SZdbA2y0nLO2lioNSNzT58rG7MuzlU0zJ21PLClNa1jb291MtbxTYBw+teX2o4wyKT3XX9tXGIdKOD146SdxdFf826Bdal8HN8dtcvHVam04f2/f14iL7eMabgs73o1OnxG7fNHZ97aKa3Z3/2iQcu59wcdGzUHrU66vd3o9f/KHHrP8Z+SKlTiNWFyQMajMKOlt/auasvyNS0weHFEakDbM71GGyMNHCtIHFgb1m+T4X3zbDwCCouozZUkDXs9qPNaSMKVLZI/fz/9if/T/y/O/qkAg+CwQCIxiE17c7iqU6zhs7eeSgiFtRlpFxx6Oc9nrKCQ6S1CWPd8oosLp9RvnyYUjN558mvPjpW7+44Qux16bRUeErlp37dJmzeS0M2Y3PlTZPMl17d1zTqWvtMSrX842i7L6TRJzfl8h3kvXZ/OmEzNmjxzxzDPVYmrLM+Xpg3KKBEE3FedJ5ah1Zm4z3ZRiO8ZSfIBVVMWPuBtjZ5XVBKYM7JA0rd6j4KAnLD1z8k7ttbabbItmNfukXDv8/O0lwUndT8emNMzMsu0f5d3XcPeJjPbhUQ/Nutucv3nk848Dg43Fve9mXLu1v7Eqwtlz+K2uIcNX/nrmNeJz5XW9SXtWTU8OfO6xSjjp2J4tA9+o948rL+z3JXF3mWJ2z2VPpktlXZ5WsLV3+WWvjYaPxgU7/Ojmlu/2+tLcNwPsXs0ZEZxvmHpHbMTKtITAgv6D18bMzorc5tl4bZxtY93lkIJJXrrLjtvVtPZOkVNdpm2jbq++89f8zM+hj5/+KLp0+lLl+W2jm08e3qyodGjWwDGHpqV9OLI4adHNgOZbIqGe9ZXLA9c0yW14vCJ/osIX6WWq+iJi8XGe2WfcnY5KnZi6vHJbxIfvLh8jm7d8e5M49o7X+J1bhygYSsrE9Q7QvCAnVXPk9bQ+u/WExCWv3Kz1lDfffGKeUWvDlfs6bvvfCM9ctq50s22Q0mAXXY3ysvW9qu9qlyfd9jgpVD5knriNqqHK6Q82nu0Dzo0rFWl8V/HhnYKL7gZx2Ud1K6sP5wiW6hdO7Iy8lbWi7lrRO6VlXQfIVIXcauseVlKw7O1efZdVc9v76W0Xkcr02zDgWWKf6sf6xSLdmyvGm+yPuR2gUe+RNbqmcqOSsVfGCtUxOqtlfEoXX9xzJS80s8yiaVWV1GSZgR6PEsQ8nJvcajdFFFQ37Yzt2FEo+Jmv+yb/u5aam8WAKGmNccvfnnoQNufwFAWdAd5R9rFRcarz+3gZiW8NtlJPD65J2Nc2e57HuJ2jB8ScfnvW8bH1sydJHw+Kxr16s+hHntcd0VW77tUsTai539t3zx07P49aU/sViw50+SB3Qyl2jKGl24/rvhGnzDe4bZKTj03pa3bmxIZ2+7DUohljVIfelfK6Nnf1gTU/ov38eqTnmYzvM+Wi452p9QZBPXUzzCXKvm3s6ltelh+dtvNV6cM+CRJtcwwCRgf7FxqPEc2aM3XYU/lTH6uC06rvi0t71Iy0MG64r5r4QtqsVXWGZdmqmYv6dUaekYl69vTNk7KRq7fNqz6X2Fv0yiCfOY07du9uKtZKntz31fX3R1wOzfZ851VhEmv3UDT1npx5ke2gV9YDYu4ON7vq8kLrROf4jp0K0XcESgM2exuMn/k8u+z+4Qm7LqwrkD+tsalXYJ/Y9JHbvj6at8r1st/x1kdubluOqnnPevBwlEi2SEKBh3hAqtG09Mdrj/dc3V/uhlnlxrG2acdrex7MD537TK7Ztr3PQGnlwiXtDduP9Nrs0W+EzoCAO13OdqnMt5BQOHBWKc4hffNyc+W9ukmWn1df3TV/yetIuYFZE3xOxiw2v5tUF/Tw/NlkxVD5QXIDF305fDyn9vG+z3PMBTKB6keLRLeYFE+W9ZmslGsz6qe2V97LhIh1q7M0e0yzd152eeLrjlid10OEvkksGmNkemt56VNht3S7NQ1BXiP1yrcaLVSNdf40wmPi2k0uegdUd6t3zBBVbHsZfHhczw+T5p6baZqq6TjRt978RPy5Zumxj7TPeGec/3n4uqSp1hKzp10+xphVnx862iQ2/MGUX+1a4/eZpIXvKV4w1zPVLnHf3TbDBHUXmQrP1GV3u0q+XeAu2b/HwV7DBo0Y2mPk9yTvB7lqU54tyrxy0HHJx5lrDr/v1tZHQf3ckq9ymzwNtFdMlX49zPLe1LNayqnn+qzZeCdk+pdU6Z9CPTeeKFllv0U591ZKY5Ts1o+Vl3btz7To9WFkc0ih/uHonJia8+dupEYlf1xxqaShsrHvMoP5YqtUL8pWPFoZlu52evG4S11PvQ1Y56GVqa4ZYRzbf9zD1M9S8Ze+rNyYlhKdUXphfvLwo8lPA2SspC7Prow/MEh3kauU125D1aaiE+t2jLLpWp8mqrnJPHTDi8GX6mb2d5jWvUJniYrWTUOT8WaNGr0mfVQyczkxYX7QgxsrV9b1ElfqW9r81DthoueM2rcHtr7R3pM7Wvy6jf4GPfH5M3tfFnjWia1JSdXsnaSrpxh6rX5QS7jUjqRS4fFnBlT+2hRrmqvbdPaI11qJaSMXrnQb/NSloHjrsX7+a7akK5yyzrC+VxVfrHZ3zNvtByYumtNzV8KG0eXz15hafL1lumn//8XOn0dj9f594/9pFkWUKUKmSjIriUyhCClSpmTIEDJnyDxlKCnzmCEZSsbMiZAQMqYQKmMkMie/dV33+30Nn3Xf67qvP37fz32t9Xysda7Xeu3XPo+9j7WPtfc+HPCU41qtfD60d8K8/sxbHeL1H+LTW8af6/JGfzc8rWQajs6uvxl5hL7Mz5U5OCmGWsTRgCohRdxNIiTSkrWK+brOKNGmej01e7V3q/GAjso4idWnlMKUZI1Lts2DjTynK496tJW1kf8e1lPdKpWTejxMEx6uwPjhFTej8HVTx12P7O+Yeg98b8jTKJeWIBE0kjQ/bnWiL14+pjm8pz72wZEdE1tPt2hatrxDkyN6g5yIHh0LtXBZNs1i2Ftrfb7h/fVzQ56X2+r6a1QlOsJMVbvvzEwRD+q9LNzsGnoUoO1ev8XBoB34diTxsNvM/r06wZqPn9/qspSJ/0yaPeZ+zeBwXdu9VNbkVwwvhqnVjUjFbBaCJc8f/sXyT359AAAAgP+BrtJHzs+2e/hrM40cGH2/4vv3/J/ir/rf8/9FAoFwLuf+Cc76wWMnOv8Yhe5eI7c3PD43zHuVv0xwiyyY1Go9srhESmZ0O3p1gsz19HeFmLT9vclH1hNaN41nyfheft+sEbg2vO9Gm533iw/bnk9XS1w23uYIlosSs+jVZ9Y8cSreyS728eTp70X1srbGS++P3AhmMrkUOHqeOvudvZXF4Zv+J/tDwo05aEwzJW4It43GBSeGlObKbY1oZsjLslrTvSk0/X3Hk+pJ2e8jOrbLny+0dijtmPs6ERd1V5qv9qHTL0Xv+rMcR7sz748L3mmaOXDEq93ryKgiwXH9zu0plnmJTb0/109dorygULPREeN1SfuYs2mAF7erv7bwUalvo+2b5QEnXbpjfp612H/xbDyDdEx5gksS2a2Y2QUjoRWqgzkyxobZVckl+38lF17fV8jhf1yhuVz31B6fM41j8awRDvvHiIRLaol2LKicz+tr2/ZhpOleiBlh3k8kerJuz3bm4sGMl0xtj+b9eaJqX6uTRQ+26J0n5q1nFD9AoX9qI2xha/D96IjUTZ7aIdYwAaMV+rePZRtlUm7unt6y267iXX+luUDt8PONnbsdfUKTAbcDSdVs6AFN1TMjq2coPpEEh79d6SCJUbBvt5BhUHfszSe4adFPxR932+CoIjjHxRy6eG8+uXGuV/etXfidRylZ11SXdNp8ii77srrGfJwuEk5yvFhwOythZfkT0aTBI+Hrcz+9e0OemQVb/ZFOcAzh33rzbbny0/sPH/Plb5FGWLofUWG/8u1wPoffQQnC5zBWKs2Mtax7/L9YOt7r23zjFLrXPP2A7MVb54CnKoOdZbUxkqVlu5LPR9++55ASzadnSDNmEF2f5ZEeQlPvVkR9YSM+oU/VvDzg3KSorf+2cusb31+rLM6Nsfc81ptvkDR4XDx88c4prY4ban5UD5vOLU+9evG+z5dHopMhIdtQ9Phuv2z36HeXEini99DVqxqutxMfTvfZG6++l6sk13H8XcjtY0wfj5LdszlNqDWKUqtx+fY5hixsQu2Pha/VnFTXwDipo2rK+ZLwVNLdD5bj3pOOWTzRuxDEX7UkwrVm12XCUMF5+HIOUd2a/uKUtCZn+zD3K8b5XZS0x2rZ7d2/kdw+s1etNmRec/q10kz/2Xs2C65SJ1Y0qz3mxKIrKjlKGbcfnPvNNMd58kDpZRcxcRE/LjdFnbxT1VQvHrUfT9btts0mssl42+llejlQTOjhd8PyBo5UU9Z3Fuln3nwUEqfx98yfWGm0tZcvis3T94unnPyUL1XbfrlLNlpTh/7y/q+Ctm3ih53m9zZL9fzg2ftwh2XLW881MzdGj6mM1sTG82cFz2R8s9UcGas48ePBkWu0rWmme/Y86g7kPPHi2+hNW1vxHBX557UnGEP65HrJiZWmp+R8HKti98raS7KvylR5Pt7nY/lw7WBO7oJqrKjXmfubQsWWJxp2eM8MHF5xEjG8wBTL90uE6AsXlcdXJw4ziq1RTyl2rti1n+f0W3qFL50KuXpeOWVgpqyIeIrRhJZIxOjOG3XW0yX5O/29Skg5Xje+qZw+p6S2pSFea5VCcFp/98n5192DsvPBqS/rUy+w6xOrD77IS1ZsIfIei0xpsRv1Piy9fiH1Sa7yzeqnxFwblqdcN715OKzfMZt4yRG+ieze2acj6GWcrz4QZJxgcktqbtc7j2J2Ol5NYR51afrap6f3UAQLeYwNPzkw8Ly52sb09pszb002s4KEZy5TyfnzDikovS18ckV64mgqnbXrBRPJV4IXPD4+ZB7gpyoJvhbENG4lcp19+ZoTX4LGZfrgFrV064ONYYpuZeNCCvm2R8o4FhePj0a9/H1uzDlXRbGPniv2fZyHQZ2cnnNi3LnGokHlaRErF62K3jiNK2Y3ne9sJcXvpCSSrJ/N1+e3eP31QD+Z2jualhYdPb2jpxlDn33pI6f+rN7gqbPts5TeHrrGa3G2ca58dmSPI0+L32SrUVv71gpdD6WP2tCoYbj06u26Rf5C8Qgt8QwLs5wnu0yNbfY1xWh81tVzUshd3/B9XP2G5tVBn8VY3ZljVg1GOxz0b/Nrq1rU5dOv81wpVpDk4BVzLRUKGOvdyqz/sOTJZMN4w1VAU0emqPV5kZuTYr7Xi8Y9LYmBVC9kExnnO9jFJYXcvpraELseT33zLMpe/cezZ6LXJ2PuX4ihV37Uu8D/UfhWFteFSxR+ys1xdn8qK+lYWm1jBarPXzq+n8x0/Wby8PKjfY/O+v0gLz1yebEowdIzhLmX6ND3N1uiip5Z3HcErL7oJdZ/iS1yNHiaHRijn3c04v3UQ+NuwrdB8UCS8idL08JtmYrf2e6N7uOf+2N28aempHvMS+bmkLBbD/gVTF/7lX90P7Q0bK7c8bLja8dQaTHlG/+xk9X0xiwHOIV455Wvul4wEN2Wfqf1a5Er9WfqkbfvvNfqj/N3jhgkl/tTjVu+c14uptB9XCCxvp4znV4euFFd7xaS1+fI+aR6XbuSMyKGw/nYly6NAamk47vPSXYePM5bJ6PlNb0lsHHc1N2TuKulr/Jd/ZjzS1cC4aOqc5+X+afSjo85zatFvo1buQzc91c8XlN4fGrqFZ8KsNA5RVLIfmyU5sLkF6L8Fz7vrDU56KkiZa+8dggNNg1Q6Tn24qf3MwMjDhPHnceGq1o2Df/JrxEAAADwP4jLue86Q87NonrGGZb+Z9/V/T3/p/yr/vf8/zWBQBhma1fI/qr1Mqb2mJrw12PaniZv7CNfyH5SC6Y9cu14nKVjvFfjfV3WA5q7zDPUPmmtXtUk1DG8nnV7P354QCjoi0eAeIQr2T3ZOY/DzvMFLAKNkfa/Vwyux4y8XaldV7Kt531/xVP2pmPKMeswscS79rmnB1+psPm8UUptyZy14zFaXus+SCLVne1dcOjP3QbZ6dLl4u8Lkj/3NkySJzIzu3iWalW8FlduMH1ExLf6ycy7zsC6RIzpDt+Rs16zTG0Vt8c3a8V9fsQGxpnFkJ6UzHS0vGzoZRn47IiYcs/VkKKE1O5hHsLuxPZr2vfCyTcad4U2iySdfH6V7rVPkXrQ/O6rrtLTgc5GXh0Olc+ID0l3hijrvPq04G36knZWvWLQm/vF55rkq/M2VDtvbXcED9C9b8o0XVohqLUs7NMKJh4zd3vUk6vcpCquTjRNXtufFRYmURi4FGhM7evB/ZPrq3+Qgg7VQs9PEhvxkdSF26kisz2taUk3U3vvnGz5QtpR454XbHLV4tnV8xFdez/miCXqx8WX6qd+Nc/Km21+a85p2Tl+22+ALcZuyLHXJ5t6S7n1mbyo6XjOgwX/nbYq82ePDDzXva0vGDRIfc/Ma5/9bJ2RQGSg5XWhIuXjJ5QLHqTYKjHqrR//sqzDm79bbmcLvWn8McP59PhrGvctRUWTzubo0S2cSlgeyTC9fWiP6OtFA70syj3XSCcLGX8EnE2/whWxtSFeOzdz/hJ5gHdODEdGmncft3wa08+sJ8w1brtaWF5J3CxmHKA/+bJfrLSN8Xzx7edSnz9w2tRdH92ue+LNl+lY2epObahDLFIgo7krpOWM8iUPpZiNN4zuX7/djB0bF6fgPzinRXA5/DYqVd81NVl58zoJM63FnSvhNffD5wesWTg+mLEqv2zd9DvnXV8TQUKkZNjFPTVya4Oiu054xXwqmf9VlobfAM/eMcKHkFR3/ZWgG5QhixySid6cZbxP/yTuIUivfw48OHa43KTeQM9cp0jhnefrYW8Bkm2RVtuVYqtB25D5Ox+Ivh857fqsu7zawl6lKEw/a+1nnvZMfGiO44DXmG4bc2aj52jWFf/jwqrTrR/au8b6Q6XpDyYzaa9Un/D4RTIlwa0bxRl9dMn/npTI+5t1jk2F8i+019oK5SWoXq/zJbaK+ob1Pk6p06VTJHs2UBi80UZ+c28U28Gxn6P8HUHu1zbWzz+lDB+Q6npBm0bHw/JIcLhMp1jhEO2YrJ4ZE0/Dn2+VWT1FT1YdiFSjd4vrzf7SepGUeWd3ii+p54kxSvmwSZFQvYW3JRUx0tY3aHa8eC520TioMvLRFaIVzvm0uEUX5+edQouCavuyR+WFOZpzdevf/XnL13iA6cXYerHmH1uLRvF9ZRKiO2dqG17KpVFzrui8UKH+teWyMqGidTyaW74ve19P4Ua4qcCjL2U7qXhq1q3K+j3chL6ynRZhvbzKTsazy8yDlyWblPOu5ZcGnY75dqbyr1d/TvmEV5zSHX612VY3kmsgEKHnc3raXbQ/NM6jWIAi+u5HF/kK7tbYppGmXPfIvuhk7UD/3RvGt093L3zTJD71+aKvj1pZZ2tR360yxpCE5cMscmZOFI7JvYYv7Y4OBt7yNdSvzdfbs/VEqI+Jb9zYhd9f0VHkpPRdYr3PSa+9PbsL6upu+WuYLqSz1Z04VHma6qtE1ouMhg12Q1Nm4Q2Z8UTl4CHbGOWJ1wMaUSmH5caeCtdNpDew6lEWzrvoL+mvudtEV/XcvaX8aUu9P9GHdEyVa3LPRT0Bw++njHT2yBOZq688+ZREzd3+bbBS+GF2yc9xG3WL8+s9Ebu5/fO+zKZ85Tw2PBNh/6yT7AzT0FSsliY5De1dddlTy0vlAgUtVuWzv84pKLXrRAtJGn+M6FCxNP7dTpRYFTzYRlroHx9TVd7l/mZXXl5Eg2UCx5aa5JBW03qc56kjUhe5vNmvc2bz63KG7eJzuEXh9UTu42F1ieIm4zLyOF87u6396psBNNKxp7e7z99IPVnA9oftXqlLtqx5lsyuoVQzLq3KEQr/Ab3m4qQySie9qT+ir+/YBRprRUsS0hst7iQk6BpvCMT2+HyjcB265ev+5oVmy8ikQ5D1/lcru14lvGL5LUijPTCCvwcHAAAA+H/c4GKkjCKBl+bibUIyWwIL39/z/x1/1f/j/L/4ewKZwrQTO+mc6mVjNeIAoq/C1a+6nO9/1eJpCvqQ4OPSNdobvVOG46qg/YbIrl/sZrqPwuz5x055nAlm6Ek2yaxUtzGbl6Pr4drvyTB65OwHM4ODUUe3894WKqSR1Ah9OZ+9U2441vlA6/sAR8tH95glewfer50lKd+WXC76ExTQ7XjEt4pQKXrQ/GLlDdfP7Lc4Nmt2nug9lvLLrlS4+paunqQjVfqLFTvGZGMrlWnRD61p1l+JblXyyUT/PvqLY/vKsImO29H35OxM4v3pm/2bm4ILkVP584QPRqrnJzQ8OagnAp/HdD63EpPec7dUk8uVdE+7stknp2sFnvvYGOXsDpVUdIs+v/yYOpXfmJooq8xpSfvTt7fZ3K5/hJ56eoRlMRuITYyrys11mydy7WB3cmkrL3rtTvxn53FHPfUrxCee8XFTZTS2dGVW9Eqm2XDvU36Y56N4hs3+ZZbCfdcx3xumsyTmj62JTmonJB+YqqKclLlb6uhZXs6Sqb5JvVzOpk0dNXA9L8Q+w9ThqfnIJ0kfta7dTev73lKVCouxJdC86m9au7R9q0S1xvLFQH+J94UsFzfLMtrAYvF9oRd+POn6dYU/UfbzZ4OlLlcn5pBqhmchfZmiJGJi6h9rjUhrubd+8JsGLjIkH/JWV29euyBU5DzoRsJ1w9WCNnSv++Ef2s9DrJ3rL+q8smnY2MPv2eFAq/7TzYEqY+yesRbxicWzV7Ybc+fyFHdpshexb1GHMEidWhX23P2Id7Vf6cN9r+z9xidy6Nq18u6d3IgTopWLeyhttzNKz71qrdbWpezFx4L1V8aVRxrp7YR+FnqJG9z+8vAVw5vBhfujVl++NivKjgp7WTzvi6fbMZR8jHvxYlriWJmDt1WAmWmmvk/G8uVg2TO88xPj8alBLGdZs5NniuQY6LQFE8XKeYsqH9+cTKHkyXlvrr6U/U3oobXKgQHG+c9UycabqRZdiVONlE9XpEgbZCqmO98UtLHwXbQLSVhnU6UJGW8LLektt20g6RcNVxXsTKE6VfCFM0CldKnw2gwVY8NLNUV95tKxjEdbIZwtzCTmpDekG8yHMtsONWgEdYczR72fTTC6rHssXs/gSc+O7q9kAnldHvzX9+7YEp0hEQyXlAuRW7T7XNXsXWXdbuo6JEObREFef0n5muHgq3118s7uCUna2txEXo8HloO6Nn+SPVnefqp3Zq8c98Jw5qcukrsmUjqmcZp6XXd+z+x5f1HBZ/zu07vC+YGn+y5bu5Swjx+1vtFd/vZCy82r1S6zJFadIzJyg7RsIc+ujV6tHNaiVRCe7pc85tMxuJLZc/WThtuvP85ME0zRequ3T04bmgo8C1Gc0RRKnfqkcTd026LiRafSn19Kh5dGT9sGXLB6O982XbH7KYEr+F7wwOemqnSyTjmun8dbDJ7VLa52prt+uxbK/7v4l+GJ4kPuTuc+hmR9y7RfK2jw+WHw9Natlw9rJFh55mbDPWJY9w0QydUr8UkGm1mx+FclDzkcjfBkX2FpiOMTOJDXksHAFOP5gTiegTqr6U1LtgWdnuze2lK3F8QMJ76ev7M8UX7+vgGDTsdWc0Dj3Y+/dKkmDOV1jqTTn/2aQ2n6W0tbbSBvojty34Q87bfGribv7eOxgaerPx9zjNI1EJuOsBacIuJbap1sm79I47bY21m/S+3TLos/h8cNrivZ070p6Qt8QFlc8V3JO1U1o4q3ofj4dsM3GQEFTrNR0mw/4QCacfv+2f7Th4UfiM+PMNe7b6+x3ol5/b7E5IK+sELp7wLSB1m0DxW1+BK3fYkfBgXcSt8zdLFqNVuozzBFrUb54TLtgfOXzI2SdX5q8F60b9C5QPx5xfhE18mvismknMtT5+qc1Hj3MyrOL/FWVHCn1HjY7X/79Nmu+rCQhxlkj0Qa5B+/OdEYN/FoJm7m/tDxG4bHYn98Ngj0Yb4boHr5gCBHnqCB4dLvQ7W6Ed3Lr9jtnfQ6ve6b9YumrmSERV4bPlfn+ONgwdvLArt5V8c0DqVNHtS5lnE9QpXicfYdXl+XBR0tRtMZNUEyGkqFqpoumtsniTrj7gXcFE47nx7/fneCjSbrmuYFQ6qRPIriMtIv3/aGTS7sLPmlXV881SEkTu5KorfFSHKUz0P0n/w4AwAAAID/Qsuqwi6G26uZQd4Prlf0jjz4e/5P9Vf97///10ggEIj8XDvzKQ9nHTuSn73z0NH6Qzey77nuWNo8MxJvUx9oYhKmNSb34X1433WiLUqPAO6IsTGtGNXEFrrE5zd4ZG24E1/Heux+7C+1M+mJWy+rDAPjnzNWXMc6uD2pmB6fY5n3MRWrK74b+FizNyvztKFoHCVjQ9bZhDcJbbmNd6T0mmfTgvXVav1Uptv03q/ThHpbZxGHmh9qfsrZ/aXxxzn2p9HkZWcC482fhT+omhfOW0vg2Rzh5xunKiYTTXJnbzr6nDTM/8ZcRYdugTFDkz/XVY214NAIhfsWLWR2o3lHE7ida2o+yRfcO7pfNVdf9vvbV+WUl0anD9NRhl9uV7tMWmXhql6V/DVAUzNdR8uitfbRuyQ3tY3hvQU1vU9G1C6Tqn2UGB+0+SbP9meJND4lvsi8tO/DSLaH33DmWN/qjCEz0febWefvePOm9zYMPByQOb02nDd69xWXPinXuwdHdzZ81yK9lmYYPt3bnE6dNsG1K3h6uf8b8b6Bh+8lau8aLO+oLf/dlEx+n4OX6rRfoNOlqyJuH+tnJNvJBrb7ghIX9l59lBqxf7NEbsOOua+3T+PQfWuO/rII8ZL1B4H2Zg9fc3LQfuKvs505qHo20Tzldq3qtBT3R+Yh05iTTixdOikFHS8KdOyCHwiybenanDytTVnu7bBemHfFulfr27CzLev0alubWtZDi133NAlxQbSJjt2VU0x/SJhz1m5Nub0YorZd/aqyM8ZuzUNnqiaCwS65ovJZatbTXI7+pmA1raMi3y2s24xEoyn9Cy89pvtFR+CJss/ha1q5s23Idq2i6JsIb8dbDenG8udTyVl8jMaKPQ/O35C9M6vA9ZtPMzJXvzR/8OaLC36B75u3gy8/PLzRmvvOoVDiY7CgTDrtMOvtd2TszbNeQo4BBROM7NuFM8Shub9dW7o5U7Pd+SetPs5TvTvG1rmpsN8haqfVWmuOW1T40+UlwrGpHxK9kqKxnQ/muhftg+SFvxmm3Fnez3JQVEshVUBh38ny1mgZx9DLmrEX9uyXdWrK9qESvRPAcvMLZWRv2FokR+X1taZW+hIqnd5dBRdk97TSNBQltnbwauV9iPp5kayaJUnlYr1m0nHP2iW+E1QXHojtrr0iSWr7uUvuClWCKKWXRI9e0Luqxo3iqfuq0893KNGsSgUWu2WcylaRcX4YN3/TzlLVyNb3T8W5TkKOCcW7T5d+eOwSeyPm7lvuKn8n7XHCPS3CrvR6ooeE8woNZaQHT7TamQ64TSVGWBhqpjedFIn6YGyy62e1Nvey7qsnV3K35alemfT4Hd6eTphUWaRJOuoqsjvldFDjzP2TC/xPipsP3NwaY/faDFmpnVHxsR4T17u/9/z4ePC7yMPyF9ZTQjtbuKOufntXws4kpv4zse3rokmQsPOifcBnZZW81by8yrXZB+Lx0bNCnjELsT/GH77lYwy6kZ7A4r2wg/eFtdBjJpEir9WdJ1ZcLkgHeZtfVaXVDx967SPzPYY46sLkWSH9M2NV79q+CT/nDaUOLpM0vO9km2sm7KaXwt87LHx2lODJmauRl5zLfealk415C8+ntv5rry/95uzSHqCcSB2cZdsOCNSvX2gmP3D6vLpy7kGFPcp5+4sP3b5XQ8Fn8TvgdGMkH8cV/iezsnr9NUd8RPvkY2LL9VKSgo/elF2ePxixRFEfL6eppWn3+UoAa3T9+fwJao5wtaAb99dUz96gSmBfrXaeeKJfRkpzXuW+VmfVjr7TL0tPG3cf2bir1VOfL7yarhnyuXG/8sHRDQ6RlsL26luDa7vz1tUjFybtftsscJ54vrQqxTzAwM+t35p4vfmKgV/CUcta94iBqoefpTmvF/k/GGQUT1IyWnj58TvFXUPnsHYRl/PS/L6NNfnHpXPvKdd/8g+9dENrI8mFJHnM53DgQPZkp6UmXc8uakd2lvbhdF3l18lM5/fQSQuJfbKvut2SpiFS9qny3Irl98xKhif+d2jOhNBsX9Yj1a72XpiTqWmYXbQTKY427KO0PfslJ2Y0Z8Re1YmroWA4/2BvgYTexZsSxKftbZg1qp65+yp/V8/8PGOj782aeWzf4x0Zo4y2P2xT22sn/Cnn6O5d6RUi1isZK5lQjLlMs7Ooh3w+tzXJNl6d4VB39VZZ245I9cGBf/JjDQAAAAD+DxSTf/Xuv3WcrDuuXtq58NerM6L09WOKvwSEx/3d5HZ6fDn5xTz2O4fnRkJqcc/YXcm0kqZ1mx/mSctsTwtfTnIF2xQ2h9fTVLhnZ1up/6FLX76hdMD1wcPRN18sUveY5OlzhVyfPEUSNnorJvzRld4eN5cjDuS7SXRD4/Qb9ESOVJ8j79ZNifU4c5OHdDfH9yb+Sr4lUcaeLOJS+YodFIWaJaFEuk6bypUFjSk/T0uN0hTdGDxJo/P+TTT/ffyeKQAAAAAAAMB/w617fJ5DV8M1/btMyGy3NCv+Xv8n/qvOTPhf6/9axARCisiIVOCbxbPjLc70t17O372t1d4gtN4WG/e2eeWJPZXS+OVR6bJlCZPLl89O3yjk+BHfEV7BX82v+963kDefzGxpJnTej+aGQG+NAPWDc+qz6X43etQsz5zjj7MvqRa7JhH1QVhUtbJYKF606lxzwNKXex26IrdcpbuEMofolc8dNx9vUKH27X2gs/d+AUvDH2KFyY6vIs2fOEOsrhr3X85W6MhOWPk8UZvEWG+aPqqWv1ZIHtnaF0Xr0qHTkUr7M+293aJ9AOXj7oxJkytjj+jmbnn+nvhSEjf3kPKq0ORqTksMx1qbq+YJb5qLcXQy0ftOXMpOJG6s3/3udonFwIfSQtZuE3o5wgtarRdVovvoC032vJ1+8q4sY/65+A8erZnYpLSR7vor10LZ3+qRsKuw8V2JyV0Q+ZVxbn7nxeJYJ7+tGLXTlTZhBlpNbt+SDzrVdZxhaVlTYrz9s+RNxQZTLulZp6814oyiqfuezwhSHXDWEVZU+PYnedL3qTqPSpq39hJlIO0e1kMqr3Y/69SOynnGZLf31eo0e+PWxOhNU44JzYOtTEVyXcbvi37cX8ttTVra+W58XeKlepSOwkgEZ8lqw5dTYbRnKjbYF7X8XtzbqejXENHAlX7qNoPUprYVC19G7muNQec6icWfX9R0HXS7/+h+9axsnjz4Pc+g4/6lSJltd/+kvknBDxpDGg4SZzqvsJevkvkZWvTyC4x77zws+UOGp0Dgtq6SdxO9HTkh26/dI5Uy2+QGaQ6T9otj4p7V5iy07WvWd0wOSH1yPycilT9nWrYiGJEZHGOnQmJFTP2u2GT6mTZveRF/6t3rzMYOeZo8pUVXuLQcLU99ZG5SLF3Ie3D3dpA400du6QPnTn4mzdmdbxj5OuGSTzdNqNqBuLCb1EUcy59lOD58YbykKbl1gMdjSf+pvF2ydeXlDB2F+fQms2K/Q44D66I+3/2Ye5PG7j6JPb9vH0shd29ok3egsGn7tecP54bee0cFUf1xuH09m7zsrZg6K/XFQttq4VcnB+r2qnGnZGk8H7z0ieW0y7ygr1p7zJh0nSu/H5+a2v7fp8kPR1pQyo5VKHbfOHJPOk9L4PuuL3LPaLUlbY6XMA8S3zNSETRtYeO1sW3cmdKwaGiQq3qTpjGzpiK5OZ7FhbvpRrqj+9vVpYnvbbJ2DAlmqW9Lng5l1Av7anvudV4fJ8+mTpd0oK2pnhgSbkveXUWWUuRvRWwt472yeH7MsmWPpK2kV/5PPXnCI2beYSXXcFcZWqc5v7X+21H2c8khMtZFB24p8CYIi36oP1aUxtggl3skjW7IiY78gOCwVrcEC43hRzHbcR+12LUUNp7cnYXRGc0n1c+1jQrsvbJ8W0Uu/3eU8YvMQ0MJVpLhdcPWa4OvDS8EmbOazxUIfRXoYO2nHDU8uD8gTaCGj01kRWyv+m/jIVUtZhuZC+cqzJ9r/PGQ0bx48+oEcf8VxSj2Kp7SnU+YRsqsvVWCvy/U9Hi9YKppc5DP/KpIWS9maa5RfrbtYOfzzy4X+PYr91bfNEmtcKk928eqdDUx7Q4p3bM+bjlv73NiyVtm1GoM6T2POgTYApt0/E5vsPX1mPaEd3IRPkX+ELxAaE+dKdIj5Tusmt0cZ2k4S245edLrFanVqQ2Rji0GTgX/wHqS9WEqnmr/t2pVnxOcH5sfD1XqEC3wI449VX14x9cvF+g5/6zWm23ft1EzM6qju5nFS283mM5S3hM0GNpaHxXZc3KMdKLL79i+pxSH1v4sPs9+eCDLiW9mVduiX175OwPH9JGGHdrvua7X7uEKW2d4lUJ2ScDTg5cxaVj5fF0e3Y+0M+o51bqDZ7g2klIcvSoDKXskBMo/VRhRq3i09LJ67X+prZlWK0kUTBOv7ucU38Uj4Dz8NESup/55cnJ74aEukSwjt0ibWk6/e9WHlCvKTcd3W/GOcH5JWFn3DQjIjzJ6eYOFiiHvsUiv4lkfTbHfBwMuMZs/vm8VpX/MMezOd69wU9WXPsdlwz6I5J55Szt4mcqVrrlG1OUAz/v0JSpR9yyn5SLTIzSxw/dCcuk82lx1rkk3mRv7fu4/WyPyyNHFm/WMZH7im8wzpm8K7xz0VjCQuyZZstOlKfJKyzESzvcdPW2sOd56BcKOY8nRFvxtUekTtrtYiku1jFJ2B8iExN++tN9dpXuLWe3EkK0IdftZbgYeikgSeuuitNzPm6Lt0TvOv7U/6Zqh8oRuodw/dSeNBtf5SfvtnnNHNVTyRZ+RhxusdvvX3DigVSrORcxZuG/kIf8TLu1nFiMpKgfTtsen+1yPsV2nDGJ/cNbot27eijRL+sAlzyI/5QMuh1eumoiusZqEqn23ErTODsySuPqtK3tn5QRTv/3xnNCPfDNqGjzLRPFak26lHlLfr83c8L465L7tcDLlWDBbvKLiZ5INno82G85cBhqvYmiYiCb25C8Z5ZS+lCI5/fudzfWjax65hZFSYmwkL1nDPzC/ZNLfVFnpbDa95jcdkF1mdKd957hSpVl10UX5yFcuGi4UBwPride9p4ZsstUNhRqT/xTTG+hW+12NFj+j12S1fqVvbef9Qxt6+4Kf31Vc8nn1vEZJqqRgLI2FWkbhqQbbKP8vtXxz2wsGwc9/+7488ySG6jS/xMTWnJ7boGJm5LOkwUX10750hx9NitVcYJn6zPahYfKoO19Ax4tuinW1EbUXK2fuqrDcDBg6/lPqgETeOHeJwJOYUjvRHZe0T4iMx77uW44T5jtecEWhfcfG/Ue29xuVKBnFvpQId7w1Emg8U6uu1uyrPPrkVo9K7SPZfda2cRvUB0QozQz90zroZu+/+sgj3Z8+qfI0bzq9I2riCfnIssVW8u77jObrvgpTufk5UVnsnA7f5Tbu/Ur+/Sr7l9sXpZ3JkS0zgga6eSyctMu99IHqs741rB/UgvSuBilZmFx/s+dXlVGk6kej4TdPcz8d26QzNV20C8sNinNva+XZH57JJ+DWSSgRcH0wV70c768fa2jom2HQEEAVeuppwY+fcjJTGROyO+KPfvf0ch17xlARmhjRUKks3DTzM89OWutbabyrsl812/ny6LRf1AscX4MFI+3+EP9w6KGiPR1179YhEy4Rv+WOhVwfx7f0Z7ZO7BZKux9/idObz7cg9JskdXhZWlGblV+UtLOd2z5T2T6PTzx/TmQVa2QenDri/eH5pVmerEv5dNdiNm47x8Qb77lmESye27Ot+PhntWLydkx3fr9NdzSXWZ/OVXFVIa8/0SRBrEUaSUNy2vsFTgU95DAbXFfzD5u1HO/UreOnbKH/pLSTe5jwfGg/W8TUXdk7VfT8aSs/RfbKTLMJVvEc/lCmXqBYbzP2IJzf3yNcZzJuuqeit0XzYULq+6f7dUv1a/ivs1q/0nr1QC5enCbOMuHuTckQ+TxP2q2D4Z2aHa8HjuQe92/1TZj3ifkor6YrsaOJ0eqJUPGd0c29fDWFZo+pxTWE/aZj6TuV6Q64kkYI1N4YqZiLPt4+lGy+3/tQVVfbzI6p+YzI4yyJPHZ/jukM0wbwp9d+eUX2eviwi/RxxYsXqosZ1t2tGWsem6755mqW1KWLiam61DeXVHZkTn1NTqVJTpb09aI6KveNWO/Ilfr2rEIB9rXJtLGoMPUt7kt2iqaBxucUJu/ZKgaoBe64SvT1Lb/gK+t9PC1NBdKszLwMSoqOBJITLWNej4+eKjA8Zc5cSMSaxKaTz3vWzKw4gz5wnZKs7PTrKT1BIi3PUvtM3b5dH9iqMmrUe+m4SeK+eWamOfBIfrBbaI171mKTHqUmsdQQ8f3GysRP47quaZZ5Hnq1majPtRce6H5pLkn1bo5KVGVm+T7pFvyb/MDHK5wnRt7Zx+nRKt16UO127M7O6v3StZHkZ+Q/Wz5sLc507ctyaWa2ZDolf/NWJ/WS7OmTir45iyWnSwYzPEilFD9mxxAN/flFaXfPQu9jRvSgta2NXwHR11Rr/is+lRFbkyRCi8YLDdlkVyZculYjJvN/x1wmNFjde2GzaKzdGMu3f1tanPnq0MFQ5QFnUVuXvNaXndf3usWeeHz+jKLgqaI8NkGS120TB/zMnh3zV+Oeq+Me6TDO7mVgcRS95tWhzRJG5TEu3v+b1mVYOif/C4swnd79nzW/erQ2xPQVJVYni8Ql9OdC7c5TxD0zy70yaNq1atot4530izyVd69O0qr88acFGm13R233pt8eHzjIUkTWbTrx/OyBBVVrzen8nqypW93flRhPPOWyH2fQ6aoQ3dc3uZ1uWndX6fHp/vofxkejlELPPfz5JlXxpHqq8faTBXGmnvFcKflnJYzLzw/UBoaHqlcpnUzojh94z5o5tnUgkrc63yUx7NA5sV1c4mxOig6rUoktj88qrt00kGfqH9sdnGG9J5pV5QKXls18Z6jTJTuFl9/2ybcJzBVy58eILwYUddQ/19pLmEwUu0Kn200jtPN4jrju0MEu86q4JnsjTbn8oKiobp9MNZNvP/bzPF57G3t3Q7UkqWWY4v6IwbfRxAPz5AU/k8o6n3XmZf16pdryorrp44UGjsyzbYJUlS89vhPyF3k52o8ra2eJ1WevmEeomFLHyihXHh9r+aikFjBQ0eRTR0n+4ePrBU2lJRNN+9UDmj5GhzJ4E7x63vaXkQuG5feUODuz0j+QiLGTmx3KGyr51HbdwYh+UZ+dSOmXZdoTtrPPqwVJOXaaGG0VhoTvZ+63GUi0F3gsG1j6XM2NkMglV3kgO3WugLZ3hI6tZZbvcWxIexqz975BOdfSjOHfC8JzH1V3j1yZuhnmyH7GerzrQcg7q8g3BukR5z69tnqXcJpci2LMu7rKbn/krOu35iwGv9UT2h8OjPTXDRzt7cl5RFI6XKbqdqv1ScGEfZ+kf8JUYFW35Z3KMKv0GLXvG+k0P4YUzjYFlXtN7ZJLlko0nFMfkxR/szRLExvJd0xx3WA6qp0nYdi6vl9+cqLF0aTX4HsvxVLv4f2M5EHTuUc2nRP1d5Ks2JKFuzjeMVBuHjkQwRDYJjWde6e9fHqx6TjnolTlm5lA8/Jf6h+rhKT8uy4XylkFrBVLZL6ZlPzOmpvsLyXWI7Q3uOJSDtPetHX2mJf3Eg/x7z01ZrxewHqumPCdhftnR9cf1rvnFAotL6lN31fS5K7SyDBrqG/aQbB68HKLwofL8iLd09MH36QPa0Rk7qOcd+BnUpiVsfB017rK7pRl8dTpHNfO7J+W5WJhO6+0RC5Y/tH9wlu4640De2RcjOk1rs4KBraKU105u2NVB2jFoulZ5n6cZZO9QBEstU/s8kNLeb9PTc/TzxadT/Poqhv5aSC2GNlzcDMvYNidMcrqM4u2joMnd+KXEOrr7gMle27fc2ZZprA+kOA10ct3tvzTh376Td6HFEZMRymZ05KPELUxUgbuGTvnbXkju9bv/WjOspVfquvGRP3Wfsf42KO8+dI6RLuOFCsbyxUlHkvkPLXbo/9GE1OurW/mc0ryQxKENmXx+QzZlmsOapw+eQzq06pKR1n2/nGPs8+zHqv4fJ/L3OGpFznvIdW+I8ydN4J07joLFQ6zqt/h5Q0XdHSYnRX5GsiWwtphaRnJzLmX70Rfwy0rE4k5Vur375v0Zin0nUPD7pG/Hix913ZMmkf3d31dhtelT1or6pPTqULpPIcosvK8GfYV8lU92e5W8RINOXpjtMLp2JGal9FmKWNzng+a2WYJ32coizZlVR/WltQn2L1ilDv+YF72cpHwwS4udvoqzsokUbvdJqfs+mepuVnqDs9dSL9A+ptcKZB+efOqptzYNcfkNrfKR+3nckbJWT5anbhJ0W/1bkPV6Zyk/yN3AXmy3Oz5h10h71JqBhL2pgXLN762lmtw3mF7j7nxRjF3AsMLPds2+8OlPJT6X41oc/xTQ7hmLxVZL3Mk/+I2eheaanhltVOVeo6N5sLdcyvC8uuW13q759Qo68QSXj5TO75d4fOypnqvirO4WPyxBxRnbhKMVqiHNaxXOm7t2Ovs3dPRyZ2TqqtZTdTcwX3ul1nhuVgrxxdqbSmdPgIy8iS3idsuqy49rGKUKHm/HkH6YVBApHTJRzbnJ4WToUlXtHblJZnoJ6s5G+Ztk6oUZH5zbtH8zfqWvIshiV5lmR+GLw6xz9c7nD0TYJ7A6H3aqFw99XRD3i6lyxmneW/sMhLQjXtaP+U3Nr9XZZDPPO7A1a1Wx2k/yz4GDu1vi2qbKpXnLe7XRp+9L6v/iFLw1timzDLH7OTzlLuKYUfHNj/k14tIXpClJf45Xzw/sBXVYjCn0MpxdVR4Z8amZemVriRFm19DjLKi4U8cjj8c9yRTuV+zj9+qgDzeyeZnwW4lhgS7LjKVs9IxUzTLjA9v7zqmm921+6jVp87bNnzP+y3ZogSlfmo9m049f/VmTFPhHmZJ7Yw751SpaxPOy4vTazW9DwmanH7543BQpf5UnzaFo7eH/mTHJ+nO3H4TvaCmBrqA7qvK/+QfnwEAAAAAAPyP0d8zecwpM+yFkmrk09TH8c/+Xv8n+av+9/p/OIFAOJp9nmZHDdcRxd4POTXGl2432y+3sb9Lo8wtiqtpDd9WH+hfv33yx9UgeoNCEZGhKKHDtcnWy0lrrId6p780FozMkvdEFLvOp/4Oz/289+PTLub27sq3nhRvBT1dfWRv08k5/eg+/WiNMX6xy/now0FFRqO0P/qOijeWLu40Pvasm3aOVSf4/dJMTWzppEEIb170FItueZTlZsGni9c7Xp5dV3b3K3hF1uq08DSZSSFuZaJi6F3Z5RrN2F7OZ1eOifacYm9ck36R1jC5uFeARE+sap8Z8/OG9WdsB9MkhTYOvhulJv/lZKqbHsilLLc/0fxMzBshSpfu+xcdfpPSdl//oH+Sn5SXUFZkNHk1RMLOi4exuN3VQTpUnmtN1/Ld27ja+Ch2IhONw7/NaaNPUrGUJYi6GA4tSjQosD0h+6P9gGxVL+CyjIBH4FJ+f8uDMw5K7Szy2oOP4o7YHyYiu5BMm2EyUqi8nRSQlJh7nIyHo3T05HKAuVW/ntRsWmTWfb6gGzFaWpa8r3TddPSSRlhTgy4mx/dwxhu22Dde1iyN244PFq4SDUsyZ7o85evcl8c4wilvSHrq2uN3s1mJhn9kq6/yEUwLdt16Ec/MutP+p1W1g5nJnZiPqoWq5B0kvhRU/nTZCuPxxN1T7N6e8hb0xNcPJrrMEssNPn/w2f2pwAyxWvIc/WoDo59QtP/7oM4LxZdoFzpfOKhyV4k9C6jmZ3pq6/spW9uku1P0iepBEsF2v5vpnHS6VWsiXAeKZioo43/X9zpFKfoEZW+0Cz4ZM+PWuLX0OnH+qpGvwZ+BD9StDfT8JkmqWndjIukLyi0oTVufsSs+YWikrBo+wje6QXFwKlSrsFSJpGq/rNupKy1SPeQ2/mV8+7NzLzGHXtRcrCHd880lacdMZ774RG0Ir2Rohq+24N0dDgKXEwgST9tEZObWmfsi35H3hG+tXJ+9Uv1bfve87Cq5pdvvHRuUa7ve+CrxZRGawnU2rpzKVGkK/lrAHxickXOP6Z6+gsSZSoUMtWraxkc5YV8NJY6Sbb5cXOaVytmbQl7GcuZ9j9QyexO/4Za0BrnokQwx6a3gIk/Z3U/5XDry1/l62DxkHGRlGYUT3MKObP5IKZmxtGk3Y5IrGOI9HEDFYea9GeE0fcfC/JhE/Q4tqxt5S4V32o+7EFhMyrb2WLkcfbPLe9fMoUThwLDcjmszJ3V/C+3ZZ0+yxPO2QSuiYjNPf+E7sSN5P5+QlJuEWswcZYNgSDvphR/qlYLa9C7LL/azjbKfHXuTvSOC4eqVJPHw+wGtmadWP7wjPm5IGu5FRyT4ZjMg4o4py59z+bVHfn96/3RPu0MwZUEnCyHO2uFkZWOdZnn9+ofAiM79gfz5iRopVkerj6yI7M61IXt75H2ARn+zVb+ruYzygcK9zD86eXbvO+Ww76hG2xtP9X0v/a47aGgZ+WRdFv1hc0/5Q1fHjr3J9UwLYytsQ/c0dh3r/lL5c1LUfZvvSMnuV353yIainvVLX02T+Eo/+2QrYk9MtNSuun/y7RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/WRSkzP8am4OcVjT2KbX6my/7nKmy9cuwVVHq9FNSjfqTbvS4xC6NwppZ1MxOU7pIpmT8OoPG1n/Z8O7/FQ7/lVISCETLRASC5YMvwyFNbUz/so2IQCCQEO32JRDoiIib6Ij+oQXhDQKBYPZv5/mfixXLYtf/JfqGU/yn7bT/0Mg/9otATfL3+fyn8yS4/Zc9gv+BKP8aZ0k8P+as7c+23dcVUD68z83Q9993IaL8D+OJQKAx/sfvE/9v2jUxteTnv2Huzqzv7eDAOJNHOhCix9/9eOyL+ThHWFgn8fzsCbWuPm9HMgKBsOOvz7/4e7Qy/33wv+J5AoFA9R/al/wv+sX1f9n/o/+HnO2vSP5XpP4v2vm7fuD/cv9/RPoPkeq/+f3/rv/dNfv/p53/Hx/vb3/3k+avWPVXPPzfbIfk7w8RgZiIQPpv92Ibon8fI4T/cN2ICEQEsv9wHyUiEP9rTvxvOeFfc8K/50T/kBP/Q05C9g/9+tfj/jXQSIiI/vP2v/f7/7FfF0BS3tHeoBsYnBDcJbi7S9BgwYIEdwiuIcEZCDoQ3N0JEByCBidYcA/u7hJctmo/2Lp1v5utrezuzbfZ56mamu7/qfnNeU/3vNPnP51/9uE86MN5sv94r/8vVPmL8/gfvkf48If64uPzwH9+8D9E/p8e/B/X9b/72NfF/5Ne/juE/g/3oP/q/GO/eT+8GJE/nEUOFeN/+pn3/4WPtU2tQ5rtbVesb7S/6CPUslAf8kP9rfwC7ROuihySaVa8v8pvEPpDfui/lX/wUf6EVyOcWPWX+SM+5of5W/kR9rYf1v3utjR/OZ+HH+cT9Lfyt4/oMjpWsZsVP/ur/Bkf8yP8rfxHQbX3ve+9fNRf9p/143wi/q38ZTXXVXiRY8ngv8wPfMyP9LfyPwvZue6ngXFn/mX+lo/zify38lNkWhayO6Rj6b+c/6GP+Z/8rfyL77M/ibtv59K/fH8W+TifaH8rP0azNImide6R4a/unaF6/3f/hwX4d4n54TNWyIfnf3dP/b/rP+wLE6KF+h+f+aJ8+Prk/8lf9J+E+g+7CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/17l2z5sNzPFykH5vtnTrvSy++Gqtzz1Zs25aqdvTLn7evOb1QUy55t8utHJpJnSHTiy7UjUZDfrX+1Z5sC2szW/zVx7bOZ11wfl/DZM/T96lGhS/t7RGJfCPTkc/3acNtPHZF54+13SGf0nj/iizvGTn8fJ3rbTpIIDNi0ZVHdi83qVn58YUDbkdMvA1Ssl1wyYciLu0eUnTgW2j+gyOlaxmxU/9hUUCATi/bOjAQAAgH+Nai92nIt9/mKj1Gm6NM+86emRj3t46A/1oECEQLxA51Bj2me/MCHOd7kWju/9/N27mk1f3toVZ0GJwUVaDiw4LvyNKhFzPpua4eCQX5Lv+HrLlNB3ysf5s+uopsPb5Dw7YGTZ4mv33SqbNtazMtVqpSjZZnz12ZMTFIu4dW2S7ecz30oec1rKlhdLzNlzdV3c9lUuF3v8+HqTAh1L1LmUZ1eLpT2Grt1+LijRnNNL21ZtW3fUZytfTaj5uN3Jd8frFl1caEKm5t+nu3X55wNnT9/eejPLwV4z/ojatuG8YzerJzqQ+uzGWwW/nJ64f8e72bfeePi2/aGfk7xMkOPJ6mnJMz34qUPizNHSJkxQokD89p8lDd9gROMUZwvWyXfx6b4qi5sO/n1LovkvOj/Kf2le+yirsrVu/zR2ugizem/5bOjFSg93Tz8b7nGeFT92mNro1MPhIV+Ua/lp/N6lR49IX/fRy5tb758vHnR5xbIli2bsT791Xs/bsXslTTFu3NzMQXm6/dSsT9w/3pQ5EyF8nCLNcoYbHn/cks45ruc+ECvdhTZnrt//bs660CG5T+4a0fXy24FHT6ePmuRCh2jjXvZ+Ezw20+A/L6+tXbBRjHwPcpWY/nmVfOtLN5k2cMDE5cWqv49b6mD2OSNXh72SOkW7WXlXTN1Z6fjS6KGW1497qcTsSo+zHzqwuFn+4q/rjU1VMFz1aUPT9suU7FHD0am2J/7160N/FPit3sG11xYMPpb4p0LPk18on3PmrpRVZycYfjXnb5WjLQv5eVDUgkUm1A++cCJRmAbPk45p+jrG4JUbkx79dXGUK9XqtQ5dtuisjddLvwv3rkjuqgVyPjgWukH6ZS1yJitQvVO12JEmTx04u3eTRGm2Tuu4aPy08G97Dkrd9crQwvUzNv52UlDTLN1qJ2l3v+mXO0cPiDK679Ir10fOfX6sSr6Dn776M+H2fYW/Cz27ybVJD2s1OxfUIE74PbHuDD9Vfv2CdhWLf7IkTLOogd1xJ275IsvCrzKlOt8zf/t453vsqDXmzuS69RpMGdpxxpzZw97fLtX8kwe7s9859r55kkoh6c/HuNx9bK9+3dMFzd4X5fTTCy/7bio5bNT42Hk6jJp1rfOZEUduHvvp8fvY0TOlq3umWYuT5+cO218z07hS3b/Yuqvk5uhtftja+afM5d9826TltY5lI70vfDdz1D8GRZ3Q4u79ZQ+DH2RMNbrKqty/J6qfa+bmNoWKnVpwfdeJDHPiXhgzpWyuOyO3JA2T+Xymr2elGBStQlDaNgvujPo9ffiBtb4cn3/l1C6P9xQ8UWVL7vHRS2wpHurugy7rOr3MfLD6rkMLmlcLPCg9tH/KJgd67XxQ+NHK3DOHV938ebed9+q8q5Mvz5zH4/YVGrb8p/Cbz7z7sm2HFAV/Pn0k46DEY251avjq3dDfLu+bEDvbmMpfJ6x58vkfkW73H9Ij7egezbtlOLzgeaXaJcaOjlC8dMt005NkibNrx7y3efLE6f/t2e4ZIiyPe6FdgY3Z0xy9dPxokozlXvSqXuSTZ8/2jD5z7tv32ZeWuXLi8fKOwXPHjbtUu/T0wVFWdo+Us2ujw6eCqk4qUSZZ0NZ7cUPN3Vpv1dBdebaf6vNdjWjpw91rvS3f67cVKi9qUm1UrRLxyw67fadMlLaLpzT95JfH5zKGil3x+5hnivU9d31mqeY5vsjT7/D9OBG7f7u6aO4Yc+9uSpixcfpDzxsuanZ405ZDPX4u8Lhw57qPm184W2HWjV3vdi6q/WpGuA2/1JjSLUmd1Zsqjg315alkud+OzjerzK53hc4PL1LwWP3Qs6LdXTk2R78spbNkqdAz5o3v4m3NvPFiuQUdJszvkyjNgM9Hnaj4ePXYGetH3/+lRrTCfXdPT7dySsLC368umPf49rClX9duli90tIuLN13LdrXEzTHBX4ZdcbhlrYJXRzXLm6JtorN/dAv6PPb1tNVfhsqzdGLB4DNvHx9Kde3A1y9rzky479Tma2N/SRfc73zhohOO/Lj8y7c7+1xvPm79m4vhysSt1GJRzdyZcqQq+m2Ysz9fSLEjz9CtEcdO7ri65KiZtcs0vtCqd8l1aebMzr3taYnOv+c63vHTO52GJ8ycLUWg6bgf1789nHRfr9GXbwa1uTVp4tAfeuS92KBJkZkbMxb+KvutWm2avIk4+V3Jnrdrbbw9u9eusWXCHg+7JHnTvfHvtqoVb3mlhnHXJ1jbr8O5X6YNDvwxKM/BoxkiXan5c6jHEUe0HBzvSOPR8U5M77oxX+BW88NXDwz4dU2fXgeTj+/d/PfWGUbHKBKlcvYRExsVjBm68/xZt4uP79Ih9+7lf5SLGnHH4UPLwqVsN3R38MULMXJfHLP709MV25cImbY63rCkOUr1WHj9eecqBwaWK5Tv0e2V/cKN+Pbq8FaxmxQ5nnPI1Ir7JkcJvWfFpJEVw19MVvlp++rXloXq/6hWitmbO1//pmavNKUjT+81O+b3u2PF2H96T8TgF+tS1Y4W/MXdk7uOdm6YbmfHszFvN7wx7WXN4QU63A1Ov61IYMToUImLTFiXP3bgQdKL+26/rZcq2+wNn9XPv2HJludXUxT5JGX67xt0nz1hyOEm586NaLm/ydhLW2uHLXkmT9ZHXWIlyng9+y91ShaZWW1Cssu7OmdslGjZ+hkRXnWqdbB8oTS5Psu3r2zt5xU7pA81M0+WwlOH5w0f/0H/mterTK2SeGDynduGD+p7MXq3A4PnbDt2f3Kb1vPinmpTMFvFPzuOrZ1vcrpmx79qX3nQ+Kq9d6cM2vTs2vD+Hevmi/hmwpwXexNe73Q/7aT1b0KVPzsiy+vkPxTaF2NgvzcvOlYblHfb/bUNmufLs3z5qqjPYp64VTDZqV3zJvScl+PV6ZZzIycd3Cew/Oc1v5X49XnRUsvm5+r866IFS/6IfzlGsRvTjnVY+PxqqKVlokw4/abotBhR2z0pdCz9t9k6lJ50cXTkWWPOdJ1aalLbteky3Bw5PeqPY0fkjJZ32uYctfIHuiw8PHxv3dC9po7v2ynNr/lT5024pULjm+//vHR0Z7FxT7/5KvLxevdW5VnW4ZcVXTbXnft6dqzO0b9adih80UQv9g1+Oexet8jXKz+pvrRRn1Fpr0+/EPmzr7fvHRC/7NXFU1NGTb18R53hu65mz5W54IZVteLXX/oqV/igE41ODgm++fCbkIK56/24cGnsjqn2rl++rdLW2a/b3okddK7VsskZ46aOMj30i5+6BnVbN2x97kaFTycImZ6/SosJCfIsONjvbJN9U74vMbn5soohP7epXOptkmu9og8flDXa8xgZmpe6fOaL6ZvORnz0oGyJwUl/vVP/WMJcGzZv6RU+6o6TK9dknr+vZkj8qy2S3rvdfv6qGBOqz5oXqfKQd5lqt92ZO3OSmg93B7c+Hjn79NGDqkaYuDrclWmnmkVf9OD50ejxY3YoMmjRjXOj0xQInjQp+PyihxlqjO02YGamwKOdbRLNHHPr7aPGybssLDm/ZesfUnZt8fKTiDFGP+zf8cKlxmXCxpy7vuTx8RnunGpaq+/C2+t6fHu49r3hZwdOutcwfdK29zZfLR1n684CiZIdG1v79PYIxS90XlY+0ZR0uybn6zemYdJx3QqENCp38lqPRGOy3Yv8tmmUaI/f1llUZ9iqK7OeNu7UfUjf3msLrL5SPOW9M+dqJtvXLaTFilBDBydcGvfdhVJt5x5NXTzb1uCi8dY0yFq9cY6h0cd2+WZrvxzdMwzadvP0nKUXt38XmDuw7S+JZ7e4+2Lk05lT146JkzPj64R3vnm/d2bYIz8cv/xs96l3oWslyzOg+rU8fTdPOvjw7vDSh3+IWGhp2pJly1V6H2t24eOPnzR5uCB6vua5xqQqG27lu4qF4xdP1vKT2+GfH5g46vSRi+uivw+1I6h9cOW6YRb82rxYzCRHv7p9Ivvo7s+itNseuUnkK/lvNJhyof+SMJvifdFgZubk5V7eTbah4oAVuwokvDMtVInQDea2K1dneKsas+4u2531q4mVR5W8ObRQm6Ybi93JW3BQ3lN38p5LdDNyuBQDc3y6Zfs3CRbuDfP4csYaQyqO7JvuZJGb69LHu1ig2qHJd4uWetl01ZUL5e9f/rV7os2Xf74xfOCCbx4lzxg8McakDGeOdtndN1LeQZ/mjBH8OFLwuw45srTu+WerX5ccOl148YP3LdJWebu6cNPVn/VeO27GlvDZLvecXGFtuynP48UpdutwzGVTyy3OcOj54CojF+ap87DjgzIj0vfv32lYzyPThxzZmmDQpcJjnrdeMTVv0t25eu5Y9E25FP1SXd4fKvWTMFtC5w95eGfmtbzdbr+sGev40bqtujQ7PrLmw6M3L/w2qE2qLj2u3AyKEHHe4T4HGgwrUHR8sRL1t3VpuS/xicn5i/547JcCR2Nef1Z/aPFu+wdd3DAzXtsBj5+cHZH8ZPMU+WsW63o+/75Gk3/oHP3Y2SyZzk9ZMTFV0OpcJ/PkKnbzeZtWkYJ2/MPrBfC/sEcNvin54tbx4IjzjjwMd2tC9I/7f7gP9aBAtED4oOyBMXnTZgxXdveXj2IeO3kpRqJFl/JOaPPrsGhrIq1+vqtNoivHd98KV3Pblj/7lB2Qc2PvdS1ux/r+TqO9LdJtLVj52yRRSn+dZsXIl4kSzD2fL+nxzzJdK3apeJm6ddpmrbz86JBReSq3uTGjfeFqtzJ+eutaIFC2Wb8yB1NfGrciTorJw2J1z3+vwI48t2sNyhqn1aqvR52pHmtbos2pSq0N2RSuYYXFK/cfHBwpVO1JGb9omOfrcYdyFNtTuOivgz9J3qzY5xeGnXzR5Ks2m08GWpWJ/UX9RUWexoxQd1vCuNvqRhrbbfTks3Wa9DwSMX3MJFGy9lkTK3Xbcg9GPE2cYHv7wY9ndli4cHWu5zUz9H38bmjTca/2dRyWpNKE1s2mrRrW5eKzfrESHN2SYWKlvk8+b5yncZd4eba93TX6YJEcdwe2ujFjQos/q84t17LEycb5oncsEL9ziVs3Xs8432nKj7P6t9ibbVCR1AuvJO4wpOv4Wrv2Rj41Y9nd15v39b+6NaR0u6LTjzW43CphmRcvQ0co/zTZlVWVs6et8qRV0dWpr3be0ynMrpBayZZFPnhxcfMXx1fsSLV756knHf7htw0AAAD/H3Nk/54Lg9f82LhzzZYN97xovffj/h/+Qz0oEC8QPihSIHjipfyZq+7blTJ60hw1rsTaMWZiu4tnHhWKPevI9gHDupXo/bj5hq7hsmyoETHkzvM1jfdnjHFqwMBTN3O/XzA//uyqk3MVH1CkeKfB94pvb1ZsaITQhR589w9fNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPCD53rvqSpn9+37N1oRJ/rrs6uHrLU2/WnKt2usrzPIMbPkhf+E6p0kWT1Gjeu3DeWc9mvfm2ecw16+scKl3jm9Jpa/y2OUefKbGPtss69vaUqCuHfD5m0u1Gg26/jZiyQZ5qOae+OxtqUv1hjdsvyFbqz7u/lpoT8djPqyLlbDVh0LI9O0P/UnjDF7kq9Zh/reWJLt2XLMq8dOOm1iHN9rYr1vdjX0GBQCB80D87GwAAAPi3yL80VMmGuUusrLE3Za9EiX9Z+3EPD/uhHhSIEAgflCOwukH4sXffvEwV5Y9Ev0YtF/PM7MIZFhab325ihrZl2j7vfLv/yQoJ0mWMcHp2vCYzVs5bUzlq22RpC13otG7K4+8PVlnQbl3xAzs/rxg5cpnklwe3/abQ7M+bl79/cGi1Mil+KpA6cdRie0c2bnOvUeoD9ytGrb3/7Ksfc83K+LDu08Mx32T68/rjT6I/DVs62s1Is8KHmtMtec3Al70r98+YN+UfRUa9fnDv6+KFYnSpmzFL3tZt0n4+L2u/Ef3nps+WalHyeQ0/D9m1psOoymU+CbUoRfYDVbZ1npopTr7EOTO1bbFn3IAdRS9HP5E2wdkprUIyxXwyqcvGFunbVZu65mn4La8uvBz6oHK5LBlelf0pxbz1SSPdLHZ7Rskr4T/ru3vV2lARVw4peatctS8rtli3pnuBCXsj1W+4MPmiHnuLtIxZ4ttOrYIHL4pyYOL6VddWP926cmKXjnn275h+++vvMt8ddTxCrRMDnuVqsefy0SGdFwW3PVr4u/2JVyU/sOKXwOieF862Ope4ZcrEu77+fUrSO90X1975NGux76tVTvkkXOL2tbe3Oj61X7t1fdZuvrG3fZmrcypEGPDFlitJxobtUiVV1Mz/8NsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nxlSsOaNCEEz9myc0zlWlQPP1ldveerNmnPVThcIM2jDq+9aVbx0ptDrNI3eDqr/bne1KckOxs/Yodv11kkulkq85G2O7usbXn55eFColPe3HH3xIn3mPEMGd0h19mSDFnd3VHg++eTuVVGPX543o03x4xtu9rhdKdpXZ3YOHljk4K5Jd8qFLzf9bNwWzeOECy77ZuWDbcN6Z/4sZOe6nwbGnfmxr6BAIBA+6J+dDQAAAPxbBB/Mkivc29n5KhcosX/z3v0bP+7hYT/UgwIRAuGDwgTCX4samBmU72q92Y2vVnuWu8X9AmvSfXPiZaR/uH0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/0aQ9JT8/XnJm0d73OnVbPGXfo+otT71Zc67a6Zpzm1ZImbJmzunnWrVYE+XalJ1jfhv+ycyRO4//ViZaIOeZwYXfb6jw+7MZO8td25f3dOnYWWeODRNj7utF4/Y3HrsuyYPXo2/f/nPH72fXN/k53y+pDoVkKBh6dssacyL0bDqg7s0SOed3Dnet4oJPQ9VIX2XT/Os7/pi0PXmKTMtCdod0LP2xr6BAIBDvnx0NAAAA/GtMjpZ528r7w1K9/H55keLZip79uIeH/lAPCkQIxAukCLRvO+zptq/bHgkp37/eipHNojwJG/Z4upIZ5uS6/rxWu+SpIo/vV2TdqxzRd+9OP71h3K0Ldq07XvPBkqZ/JJvfvOnw/Dfv5uoSZWDljr9MedXqRdX5N2ZVrzH504wzxob99Lst39wpUTHjubTjX0z9OvZnfT8N97jQ7Fahjxwbkq7Qvcf9135fpUz82ec2jD924PXE4Owx++aIWS90wkw/7qhWv2STTDeHFF24q9aWWqXLfxc051TLe33OhI/z1drJZWJvGV85ftkaX44O+7LYtqz5R/WcuqlK1x2pU01qXaBfwW/Cdog+LHvKiO3WZsmZ8O1X8QcuaDUmYveK3yaM2mZk9+MDMtbsW+pR/invOkd7Eu9Z93cNzt5JkapozxG5K2dpP/T0qU23+xd9X+hkuAjPa/ce9XmvPCdu/MMvHwAAAPxf8k3MwYnGhV2TeujraQdrx2+Z5eP+H+5DPSgQLRA+KF4g0qu7B6t1TBDmQsZtec/+Pjhzm6oHet2qO73W+5QTk1y6VrJVyyP3s+5s9sPL5Jnyth3UIX+zuU1KHilVavueyeV7FhpYYe2rGiOODR19s1TT4/tiJCpV7074rDmrJQ8pUSz2nOfVfqlQZXvpxN3HJtv/efTlYasP2zmyVO0mrZ/HLNQ/TN2ut28UHZ2jaLkNM3bkGhm1b6Ks3VMGv3p/4EW6NyPTXJk1++SFXiNrZxpX+M2IOKei5ss+rcOTZe2O7otYNOH17aFb5tr17l39T5MmvDO29OVX//CYAQAA4B9V6+C6iIla9g2do3z7xYsT//bFx/0//Id6UCBeIHxQhMCCBQlL561yPkHO4TF/yrIweOOTMRfK341Tvd7S/DGz/x737s0h3WNNyjsiXqqQ1VvfpovxZmdIy/h9oqf8fN+Asz/Unj7s68/+4csEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4XUmvSk55j0/Wruve30Eke5O63vXrLU2/WnKt2en7/ddNXTJsabXTWa8u6dMu7rGDxrltrRRt1vde6Ff2Ht4keJXOie0cvNZv/ycgIZ7qvrv3szqQrr8q963Ry/IDYf5wu/lOf+K+/f/Hb3uzdb0SquuBijN3Tz1T7quLDnp2rzdz9PO+hofliz8vUttmraq/qPL18tevkl22Sxoiwt/2w7ne3pfnYV1AgEAgf9M/OBgAAAP4tev0W+2rDwOUxy94+e723VLuMH/fwj6t3UCBCIHxQpEC07z6bMH38wUq5ytUrU7rQiEM3dmfvFNzw7rPZCebeaF6uVonMF98OH5myS59b66+NKHw69c29lU81CZ6841aCZaXqxni5fUm5KuMC7Sft6V72SIIu0fK2C/6HLxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgbau7sPTxK9LLj1gy99lv2wafnVm956s2ac9VO18iZKX3rW70WTi549vrKy9OrNX8ys/6hvmPX/Rkyudy5G1W7nplV4smAaDW2pLzTfEnmcod63xkwoWb5hYfnvHocZ8qTDdl2tZ7TscHwSYvnNU7UP/XDRKfX1Cu1+Ne6RXJm77x40/YCgzelPL5z9VfV693IObt9zNjnW8cMt6zmugovciwZ/LGvoEAgEO+fHQ0AAAD8a5wMF6PC91uHlnk0a9Wm/emPHPq4h4f6UA8KRAjEC4QLxPntm83l13UYHiXcu0gbLtedcqPUrbh147euOj9unfF3w0avfPV6hHJhZ6fe1qxjtM0NJ21I8Q9fFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/okjbxnVZf3bvzAGrOvd43PxY87wHZyablXdMp2tNOoRMCf6zQo9GsTr0OzYk8w9Xisz7Ks2bNgNTXa90LdmDmg3rBYrPHNOhWIG+D87Ern6sZLdYDxsnfLV+fI6JYYIjvR9cfselS4sr9Rw0scir5ttn5C/2Z5FG585WORFrV5V+d05ejD6gcYwEaTdlvrv1UbyxN5O+Gjw936XuoZuWj/Jt6czPjuyKdHbV+XyXar1r0rHVoveZ4iy7kPn2s4LVOjepGnwt0rdt36e/fKZR9wbTirz55MaSAt8VbPMm2vlnedpt6nOo96jrQV3r5154YHWHR1PT3gyTePiXK9+lGZR8XIc0B84sX/hi7q7mK26/qVf1Wse8P383ssOyNkWzrEp/a/3Vp0OHtUv06y/JRkU9kz12/s0Tix+v9nR7vTNRPz0W/l7mQP/69dslXP9gZfKSl5s13Dg0coMkj/INSL0sUvvGeU8G1w6ePqXrpL1x8kzZ1Cp510ZX9kYPiTD3xwFDq/fJnC737TJp6j6rEXr4q2SDh8T9/F60r8odyN3z0/KT8m5/8uLrLXWuTb+0pGXpd9c6h0vVcUS3xTmXDOkddCVvvHb161b+cknpka8T9k27KtPDiD+2bVR+bqTu7Wu8Ldu28N4wswc2vVP7911RR8V4vHhsnHc1E+aMUPhUqhw9YnzxfYk8ecr1q/JHwatfnRqYtcIvB94NHvP17V4rLyxv17rx2DOTm9VvWa16rAcRyvUvFW15/Qlv0h28UuPNmUXvG+b5NMrrSQuLXutf/sZPp/LsqRAmT+qGz06l3Zur7HebD5wqVLjjhkEZdyY9FZzi5I+xu0wPLjU73IDN35RbF3n40sXlQ53Z81PVDj/Vb9K57rGQw2v2HDvQ4dMYfRK36jU6X454YeLd//l2w0bT51WL+MelBH3SRF5+r2DE05tvTMxWfdDy0YlHday1Ol3PnJda3Oq5ptLhfJkrH02fNFWRCxWizmlT7qdsnXp+VbTlnp8XPu74WceDX3f4reSVWimT/9YxQfGddYdcmx0lz/Z5jZ8cuBC52vKIN1NWvbthWZ9Wm0LHXtNs7rtJ/e+WbtcyyrMRY5tumfBD90THG+bN1mlos1+OxA31eGaiFo9aJLy/7Y/I11dPj5WuW85Un41dsSzmskpXJqbftnZB6JPZmqdL/0XKJSfGbJsdMdlvmZJ9d+FS2e/uRYgcJl/fxIEwrX8dNLby/FhP2m98eigk3ZDceUdvK1m+0ZmfknaYVeftjorJWu17mejqg8ipmq/I+tmpE91j94nzffTqjxJHWNMw9MhsT+pPenm8ys8xUs5IGfdF00ZTf255omi1G13zrs9W48mCqBvLfx+j1+krsz9vsvXXPtfLBLLUnprj/IO3QQdTpor11aFKl/uFirhyX/VVuyvt6fg+x/ZX7Z9fbz74/LpJbaoP/bTY2G6Bs6HT7dlTKMHmbAvLjanVo3f7klWjpD+TdumCtSO6/RCtW4s06QN3xpTr/ibponxbdwZ3Pr0qbocve7wpE6t0oadh3ubPeHvjqQwp2xWdMfpV9i2pwyauc3tP1q1rfrr2bcvs4y8P3Ph4UPpzdy5OjHSs2d3qpSt0+rxZ660D65a6+8PRLj2aJ886LNbAw8Mbpwu3Lf4nfzSdcfzC6NDf90oQPl7MlgdTzXz/+7wSv83aOqviiYXnnqZ6P/xO7PyJ17/dOCFRi1YJlkXffz/X9/O/Tbyj5/BJX60OKdbjToewOUaWCR0qeeztIYuSTon9Q9Faa2K9bnzleIQbKzpPXlxy+4XCF8P//G5ggUyJ88/fH2dh8PFvGsXfVHpO6JKf7opQeG7tSNO+y3LiWcb+B4eHvXF1dfy3RzMMzpQiadyVS9aOfng+f6Td7d7MCj2v8+bWFfO2bd989ITscbOn7tV52Pizvy/dP+nCrC0n9jR9W/7g9QbBmcelHnDlf2PnLrqCcIB2gdNdIohIS4OAlHSXSneDkpLSKN0l3fzpbgQUQZCWbulu6S4l5G7u+xHuec+5Z37b2czM7tk8P7cOb3jMBL7ayZ/mkRcTL5j8sJzPMhZiXZFtM2uwNOfrJFx+xD5Ax5vdnCDf9Abrrw+1d3sjhycvPW0ODg6BX+mrpKq0hc1QC7fJaeSBG0GzLyiFfsUv6KLbLD4ZuopZEBFPKeTFKFv+vGcORSnnRiZtQvmxo7irHsBh1EN3Ls5oOaM532Jg0L6yyG5ErUs2L0tGZE+d/S4304V/J/S3pHaqq8XMM8nxA6G2DwqBbYMEn8e912u6XjYkjF7UqOI8CohfFKbfMpH/yCniFl5fVD7z5K9wwHklsmBp857XIyNprSwxYfUJXAXqRpaM47hN7JZNBYKerjH09l9ohaPliP+Rq2t4mHl9VSHbkJvY6F5pVW34tRM0Sf9jNDguezHoUaEV+/spmna8l/zKf7B0vs8J8bT+MLE6+8sgi5czQy5nHsD9xDJoLcdrZSW2jIpe/94Xzzez4Q0iaWNgmbnnYzu1waKKsg8xyLFHalL86WtdrEYu5l9bQpdZ1NjL56Kd3lELqAfw2vUH6vnRemb8VNsJi3fAxSKLv3N9/Q9p5XtjYUuE+WRL+qZQyZOfYpmbljkcQXLenbqOr9SXQt4/ukiQ3E8X6kOo5CdJaEx/KNzLiNX18uh9bpNO/TmyurV84r3tXqXcm4+2KbqRHwoEVlRtAqZvdCMY/9IsvmP5SOWhH62e/enkFaYREYEEte0bEfweDJTju25Khqm0LyybMpHOxqoegwN1rOgmCwH5mlbj9dNnjz55qz6TF2yi6up2DPK7UH9iPs6Ewu2Ae/OyfsrdFnuXRCrVlb3jz7r88gOEmNCwj3RM+1KFpbpccp2qaWTR2Pbb2OGSFHXUPXba6tvT21waeCLmzuj1D5SzMt/eeCVsdFre6Ola1zm0lE/q/FJMk8wdEgqd5Rh+39P6YkTaCv9dp0ylt9Klyn3jWVdmg0GXwqDXoU/sX05VIZsPz/k/LdwPfbfbqOapw9SZnL7ouhNCkdTaoX9GojRnLIK6WuSkPsD12nTRvqFqeskgGevvFsN4bwid/5sZLQfq7h9iL63C8HNrn3+e/BZTILx2ldjSoTDxx+KvoqVtam3zx4OHlD6hIzr00pXcpefn5WErj/ALXfOlkAjMgg8/KDOxp9DQmxh/92Te/ZTK3GY2KdRKVfpbkEWDL49SwKU7A43ARTUnNm5fVfXw2Pb0AftcTgdibOPBQk9kdmL0ZmteDzu69+OgovhQU/3Zj3KIkbO+aUwXaWH02T52vaEPO0PqefacGkvf16V/WpWaoJq+GYkaMtOkfH0+IvDix4O2CWfOPZsII4pBUU8f4sLCqEj5NpEEpL83c9ER9pIFzhQ2d9IH0debmZScAokepliISOkTtyX0mrw3+sm/JVe00cJVFXRN8r114nqzUO6mLZepGegSs7A/8y+FhSxJXemRD3EFE6uvbWVcfw0b6kyZbCmY3nVr9X1nI5BH45yc8nihU9GMwjw6zul9f5HvQzVXYmLyrByv3AjmNoor8dvAAiyF7aWBuLWJYts/Z7wEPKfdCcdbKrV4daM/9nOrX9X9RBkyoWiWRV5h+vRVveJAd08UEX1n5qdOUKzx5t+btNSxd2p5nNoqfL21oZRaukh48eM6SrOf37rveU8mD+KhECZ2lmB03Nv/VP1sVjafOiojU8u9NxjphG84rXtJwvDlAV+Ls2Zq4K+u0fQNUpeloyqb5KDdrQ5EJOpvHzMJtkS6/mBtjX3aQLn0LCbddgptOGNVvDZQx2998WRiETvq638BhbZO2rTeOpT40rIMAh9DtV/R3eiZ7qzx5Ms/UL45+3LXWcXCNur+GHHmqdbwYl+1fSN9Vte3h9EkZxRMKG9Rl6QT3WsxMt0qur1i6rNRW+TFBZs2mXrddC5vXfJGF+oY9+IZ/He07GdCnVA9OAJb/mv5oiT5QctYZAABe3N7oUqGpD2P3I9Jy6mGnWfGrTxhaP5952jRrJjKszC0cHEOPOnbM0SVNAZqunBf/ZsdZjShXccAbPQNH2K5J2el8ax9re4vx3m/lvtxa1GVr+/e8Rw8fj9ByjKc+fZd9cGpzl/BX+Q1aPV/Jtxw+/Zys955Ntcwyb/s+jem7/hHj4uiWaaKHSVyU4MgFvWndeO5J6EVrtGx5p/1wCzV4s49jc+C1lmbUm+Ivtb+anm8gqsRcivUyWX53H5gi1h0T9BMrhc7/8swGQO6gBDJq/WUJMt/Y4lRCG3TkpPDNzrtNL6b77pVax8ZN7zhySOQwNX4plPJqutI82SM2h1NraWO92tg4wPazBfTtYYGuKSFSYoa7xGfi/I1VNSG/eic+3oc2qz95tmSEB7yTOBrzbfzkvRv1NG/54eKHubsJr9XZtiNbOp+Gj/FutWB3ipq1fu0ury7UEIDr8C2XIXhUd+6MaHyXXF/WUr0EsOveW8HIcrUnz4OxCOJHNUSPUUGH+jM9Z0qttOXS9FdXxpS3Uk9SGCb5LcmcO4a8BGYz/zEgjjJq1/0UsSUtCff8uSclk4STdTz7fJgt9mU/PN/s3VLcvELtOyirli2NmgGRtlVedLXXswrpDhbBXbN7w29P84e6VsI1jj+JaNZcxCudbR84SPv292khfr+rnzqu9IKt8tP2oC6h/lkaJH+v5EJLK6azCpN30p+J/jqNtXDqebfmEqm0/VfLomu5Va2uk+qunFI9jSyKa/tq1t617D3+5of32XZS0U5/3Yny578bqvR/3vnJnWm6veZ/5Hw1xj9t/sb3n8JJoUHdd+k5XjIHp/QixPI8wuYtNN+f57PTOSHxkzltufN+rDKkWl1h+ZLBzLzgpWEs64Vz3dnExaeCtnnMqdCVdMfONBpl9WVBDAQ4378OODDHjHRaE5sx2ppV4zlxPXNI/LKJ11CdL+U5mHELdEZ4CPkt16hzfOhThvqwRTLSlT8xTujlCmCFOjI10W/EeO1wy3Hj8bwgDvwbRdCX/C01n+BUh8Fgs+JCsw6rpKnpWzv/32oiuUIIjxTsqS2K3RU+EG5d9/8Ai9iCuXHF11T/rHJ+9QVvd9nC3OUJI8pa3qvUIj/oJsbUGoZoCTV6/mjzPWL4/IcqIir+K90SRPi49ph9ny13nzotW301r7kA+JU66T/+sNbcwXiFDn8u65/2Y0TiZOfvZ6M8DD28Kglq5ejfiTC+rsSxeX7hLRU7SRBWIeKG6NzY9M8zH5tMuH8raN0kRY+W1GW+XRcnbHM03xJtmvVgLd7RMoRiS9xFrxeLqr1VyJUB8VhPRrbUbuZLWEO4tbOD7bcxmk6I257R9KVnl8bH9vLQNepcmviyLA2e4EQW4eyOucxU02HKmDovc05+wctORVvXNISf3DfruX7QOpXk3bPG+zaysmn5q/CxN6O/SdW+Ke4pZiN/Wjp+8dlacTxsllSpHfK8eHcrLtU9wp7+CWDLdpG1l43HkEYFzTNmjUVQhppyC6Ug1ZeRC9M0xBVGUoUh7EYctZ8aRjGdOLQi5wiJSoqzZB1HhZqT1ytUTCwTwjXjdz2W03pnS9htaqvU388LjyhsnYWrS1qj7UOC3zYwafUXEZrW6r/H+Xs9EGafv+r6UXj/8b4jbPUbYQlf8wwaTf4h9Xzfl5Hs2yTduU3y9BDoDxXP1nFo+BAOptspGAQqazbpfId1S+6CPvD173BXut8GN4zrEZawzbFjbGOU3i0obAUNc0maj77ktZah2CHyu8SR1iWRe88ISLh6MAolUGzIU/JpcjLoPxB09/BychiKgO8bLRn1t5JtINlzQgCzWGcrQrtk+84pBxOmDiw+iS+fteTwOnSHRu1kGBGccZi/0NCYojob0Ez9l3VT1xyyNDCkTBx4K4XRZZu+0aH9ct4h6ZScYV+9VOZ70OHc1lLPifnTV7J/1mPSBBLKXIF5VsTCHsU7TuJ/0J9lMAlNf0q4n1VOvE8r6W2QbgA0ugmz0u5j4/IWylpM+36FbFl+ri/tWM8miax2Eis/mLZ7yZP0oqDE+djR1dCzbC6U+xIH/wSdZkjUOrV8tIAoiyPktdNGfpkC1YErTgeEtmDSMzlEQoSPkOcq4GZKGI3LFvTL6N1T71vPLhfzkn3FhFXaIoLYWXYtrxGOlLMNHssYphCNoPe9mhlFTHJhBmF4dQz6UG5Ynhm/fLyNWbE9FHQlUBnHHmnUdA+k+bmq5t9/NKgPbXdDALamUP0+JD4f8iSE57t3L19Ldhre9nBh9fxWYG53juEKRx2bCulV8npnG5qpcpdjyJkrxlJ97EW0xYwF7AWsG0vCRoQ+Up/cL5X+0UQLOhGUbyViN9Fr5QS2yHwQouzc0KndkqDaDAvNSHResgoQbrolWXhq7DhJ1LKeA1qGCh5pqKKeRkJLM3TDMUROEqDuJK2xCaJX8QcLFSkKv0nRjhU5ucHhCk8/8VI7XHfign+9QlPlgupjSknVN+/LnS6+1b4qsY5+kfyNN1gbocUsab3CWEyFT+7l6sqwsENz3orTs2M+Aavrid36ENL21OtajzRxAfHzwUi7Jt8qDbOR3it0bw6mBzdBjtNfKyXpArbKah8E3/J0PzH+PhoKcw1BM3lSb18uW6LPBWb7WOh5I/fFmpFRjNkcsNRJf9DyChIpCef7N9i0rrylmYsca0Ns3b9h3xCILJG/vII2bSiOfU2ofb4g3PnU9yX2svRGkyaNDVOmo+f/OqS+VVDkWdRXIIy+CjvmNF3n17xRxKCWX5VzM1Lv4QLyjCNOAnnjfVa7yncfiEVXNpORQfl769KxFJscZQovpKrhxH7xOhrUnW2q7ymf9SP6tX1nCnp4wXX0i6eaPnJ59uSv6P7SDnrAV0WrWfnPDuX6/8d+o6HbUX+9nT1uB7MPr/LyXtGLzwgs+DbQ4wdQoRihjpG9ziaJko/T3IHf76NA6nX2rqCZP+rVn6/lE8Cx9NjrE+DI8lfRDwscvm8QsxdkGcH35Ldfd94wdz3Aeezx5en0/Kx1m2/Pl8y1CWa/DXL8glZpSYJRnN8bfYwgjEitUrTe51xKAqZNFviU88T+Q0zNloWw9nyyH8ti5j1zKKTWMMhKAF5jr/tTH1OA6rDMoXs4x72uqfWBKn41UeYelgf4TRrC30P8egsOqLg/KlD7LQUoiXJnJ73nHzJwmkDgX9c9U/0iV0UyyPx8LLIipN6FM9g/4Pf1qcHSgUBWspdoWmviTT1w9Fwv9F8xZ783sT9NNtLftfpdRyXnN8RoRFiwAO6fFx9Yo0/XgNx/YgRH0Vtf3qjFFop7xnEYk+Y8FYE6jIVOWDaMfMroZn45M3rkulo1S6OSVpUn0mKH6ZgNdApvz3/EebkmSChhYAltmO7tIVz8kYyi2vynMu5YqJFfEZOwssuQhVDD5Pj1wHyi4XiWy/PTK2M+myb5gfpspvcYaoqF8qhz5TJ7zR4cynJW1NsasqzRy50UlRr6Ob+9RecLm92D6sb9id5cuOuUydUixtsXXe3t+yYyXnSjK7U2++txwQlWnVgW/ptkDizeua+pj2a9FG/f4grkUG9PnDg+mMYS/kG+1lg2cl7xSzOOe2wgqdCOuML9wxpVFY6r+p6cB8LZrEa2GVh0Hwcz+PJTK4d1PMV2tkzlV/K6SzVVTK+KpDd4q62bh11QFO1CNtlmbMttF2N+r36JlbrmV6bzP76MVJef53IZzbEwDRmW2aO07NIy0NMBWnOwFuEpT+fg+3Of8Yjbh6NbRAhnOrYI7MdyA4zbvyiSbs2drr5+O+8Y3srXkPugcvWa49Kft9kKoEnmrwZzepXAh1rn6ladIrpqmJ2Va8qvp9tT8gir/l3vD15lJR/FOqdtmXTmYIdiiOHannqzTZ3ZH5vgDIp4IEb+W8xmpsspmE8LL/jd5cC/d2jb/Rt5JRRz6cTPhVRtSkpSZr4WSiyfWs4e0S+adyLRYlCN7+XbEfokseJ76BDdv8LO5D1oXqj8zLClDZOgbpXFa2KvALVRyxVdpE6/b4ujuGHQfRxtrbVwsKeAzfMhRsoTnIH0p/4X8phbn3KOKvIfe63x8rpYmB2+P4mqOWlITWK80wBQ2M5Og1ecY5rzF+ppEEVOd2pixYcq7ZqN9R++gzMwaD+w448MRZ6sWWZVswPTBdJGtyzij7vBxYJ316ntEqLFJ2y0J9YP7bHDWPxdC7Fuf89jezz5ufEFBn+3rBSpRUK8/X3iVw8wV+8v4t/WuGZ3xZ2HnIfHWYFnraQkylZxU7mFYX1dZP7aQ6puDWUi42f0Z/J7B+sCF0V3ZMT7irPaVxOs0byVeYz9SvNWIZf7tL/NlNaHsIPE4lWl6/5x9/1Usj8HP+XsohJ82y6nzCudtF3l0DLix1/Q+yy70dYf9cGxZ6pVvi2PjyjaQrjLNyoEpCbQpsMeC08dmlHrma3e7lGwaDAsdlanoXN2j5ss5r8dM2IN86y+jq7GfsZ17h5qUhTA7e4umiYZGhNsFv0qaQ1Vp4x57ndL1WvZT3ifEKZ34GU5a8cjx42TUy6SKdkRj1JpH2JxynVy+Uh3/Rt0dku26Kn2VSJsYHEDrM92BXfli1OJuMAQ2u6Xq/sZ2NrfVxx9r6cv47AT7WepeeMCNRnf0q7yscEkR9wWxDEWL0grcpDP6b1fDDuYlAo0HkiUNbuuD+FHUV8ln18tvKW0Plxnu/NjbsFjYAbIcfc8Oou8+i7Z+1N/8jREROafj9FKbendnfWD1DA3g8KeZLTEY801O6or41Do4C0+UN7XS42OGJjC1VozuRrSvYspWuc1qktEQq7OYrLf9h9Gp2mvjjoAjvF2gG3n25mH6VWSLlOXCmyDBFxfgnbsNlDP1yo7m4lMhsaR+UkJMimcDj6donRxOVm0rlbRUas4D/ONuoQ0BHk/tmUhGlIzOBEBuXl3ml/fJ//fZgSv/fMtDamE87U9Wo0upRcd+6S/S5+xbDuogQFhvD84PEBdaZ4wSeTFYVlXb6L56qJMQ2/zh0QUv74LwqmuZvR/tMcWYp5bCHXGdH1RMxIYDVfjpSTdeyTIpKxlg+/HsIPFv9PGq+5eP7lKV76hT/B8CfcEUjUdlW//ZC9GMjdTvj7hdfrqcjpUG2lr7QX6vnPDot3xP67TsOI1cjBrZoQXvvvfuPqKsH1Yz5veh/PM4oBFcSSkj8P8Xxsl/SFBTc6pBJwGDparcQmLlgb+3hsSASW8egpJNmfC4QI+vGWN9Av2E9gyBoNN9Omem54LYdwbzqGuj9j9uVtjRjALxHYwUicfPMmIIBuwm71sLnf7imZhnhhfSGmQYNNaRgT2WdSIpaT/Y9/BD4IJNMEk50vV6LdaPwJeGuZ/gsnqWP5o4MPY04J2iG5Q8kMXa4Ax/Ijddm7EBJf3OVh3uv3LZ0OoYomnyeU24bPBf+Qn6ZNXR8puEYyIeK/CkqXx7JZw31MdzDL5qS7l0xm+EOw+i+n7acg8iwb2dPvtnqmH3YJaFyxB7+zrDq6UeyiZU77D+YnrG8aDFOnCeCE8aiL7qtrNa5kMt6avmslVaxvcx1ioKl6wzr39vll4KqnEhJOvMLdHK8tYbRhWaVf4jHBHgKekJXwZRepsYi4rERwr9hFpFZCStPGS3K6EA3MUiVlJXfkrsl/wkFE/cb0/0hSSkrsDn7RtGOucxrYDAx4FFoLFEqYPfYjqR3Jqp7k7yUMv29bG7assa4rSpsTzXc3KPV5NZBdVtE4gX+taXO+2Wj/eNV+1WRxJZsjINijj/ohiRotTTJPv8fhSpazQ17bHb3MQkwP+WHoxgyxBQdG4Y8RjFqN04d8P0rweGr+dWONMBYoTT6fUm2uI3wlh1igfGPH/c5BP1UolSIqkoV4klwVpTiabWUovEbNhxt/jtV+D1cZ6ZPmvZ3+gxCMjk8G5ouEH98yUHj1mc1ml9RxS7003FMWIKvSbilptrGPcQ4KIklnwZu32zmjjrx7HdA4+8dANyC8g0h79so74v7zdYzbqFbOaNb7taDABqp/G1osJPpd+uTYZm+/edoElP+JVRUS5uBTSLzq+SP6n4Sq9ohI1PG87NRwSOBaOe91hjZhtByaW7TUdXhMl6dC9+cQBUnDs5T0TKLm+Tah6rRH3jqeqUZJCL6J6QfRHKYsmCkfBo24yCio4wliNZeUGSIEGDJmRU/b61a1SdZq9fSlY6lry6suHdi8nQjoqFOc+LbNZI6eoOhfFo+SMYrcBDzYJCcQoZbU4tUrYj1ZVfVvXyTKufX4WIhxbla0rvxwtkpf8E+RZ1CRVOzGNvnAeLrFbQBfGcUlqQeCZkcf6mRm/CHNwpFFTaWhvHCWwrOGn8RLIzzlPdySM3R7ueZfU4Yi3vWcyLn+2sqlpKUcbH4fT/oycFF6MH+TMIX9a2pU7PKP+hrFJF+co5dhw74sivtTWVOv1eZ4X6fXUETjmIdm+5ZEftmNyULlOz9BdPMc4fn7aP38fPa2ZK6NLqie+DLI7Y20gcm9Yetl+w2tIA6d5IWDGZsx36LQag7tNk7IlYwilrZ/R0ucq8+L6dH1XyZ3IVtErkxxe+G6tBJyJrLh1XjIBmwiac4UqhfhSxj769mNuB9p6P8+1JhuYE+gt/PjXro5KyyQONx3kcxKH6Wsti/mp+DmcuLG0ZEgD2fJviuiiMoiramhwLNNJGSzNg+Te/A6wyU4RvvHjwDElpvoodG4FKfXKl1dinrRJ8Ns66UlGoUyhNUf2ZAOhSPN5N+sxtFLbuKRMMlwopA5qMQwjMocVc6ptv2clNG2XI98pbBxgoYfJ8/DYate2JanjJ10Tev6x3qu+/Z7gom9Z1IrrdMQY5beJ9fS4FCnx8+evSv9vt7EjBHyUNvSdq9uxkkSw1NEWXn2ou6NVfzNY1y3w0lFXh1yrwS5XxQOhNEDPJH7Ggbuz+7LCOWoftDHl89XBVJqBgbjqhYalas1JUXw5owiXTliEfsKUPDOlx/UWit3T4oGMPCgFZlLPivdIRkcXy5z08hA09vn/Dk5143gm0/KQ7Mweue5bpToFOew3qkYNnZ3Obj4pIIGNZmQLBGL+uYscnA7vfXv7CPx2nGWSDx0v+eFeSLss5xkXuw9Dt+4hYuPkjAH8ixfnE6qeMWoS0U32Ls8mUCv/EuB6s0f9mm7jq8fM0QYjwh3NyPApWATvWLoD50tPvKzhXqRJO+zQxPdv3KBGbEEDmoMdetuWvFsqlPdWRVPF8uomKZayd3GjUXwuIsenhccPNMxFQp+dcKJ29Gz+dtAa7uJ+6fgxMBUw6g6dmxtCQNHqLhgqtdmacoj3a3QzLw1pVaJMhmDUr4CWavdklinwNpl/MQ1eVLsaDF7Zm45hHbJ1U8HvtzciOGZC68+aCNFf+8Mz0D5QvZN3o9zGfnBOhK9hQzX0iFiAiMtAd/GnhSS7R9KGe2SOtL8urNytKSfngTaXMaLZb9CCWpf8T9jHu2Zvn4Yj8nY0fxUMrQmR1t1abh5pTEQJ84u23f4JsTQrIYW7YD/n/4DE48Ty7NZkjvCItxnlHwYNs4Y5/7RzKT4RfGRHXFUU40B/m/n1HSZnm2Ks/4nHVFyaeZeQ4OvdzMhnRw4lvl4sf9l6hnW7drJV7rMkklV5cfKEZiX+s33p7UKZDP5+WMrj39T24jFEc6bzgakEw5FvfYLknvPrf6fdx+PfP5/6Qt1nlsOXyuRU70pej6w9dHOJetWlYjdiq1Ji0imUyAmDtq4Sa7wOOnnnGMW5tjGCvZSzBUeJ91eIXBi9/eN3shXt5itslCz3cv/lfdXCH+ZbfnK+mVpUyxzmns5ktZUJ8l3YSYO86PELt8n0YqWDdei2jtsR6Y4f/NkmOzrGoWEZkMo1oyuUHRjtfRmPZAddN810YXXoebkqQVJa+HZNzxLGvrgHkHVnGt58YElP5n51rWd4YLnKigfgY4K/erFMy1G/BZnykLq35ff2jIz66VlDSiCq+Nwkudf+TpYK1pxE7h9W7COWXOLWr36FpXvu0xA9yWY6DqOz7Ixc6kq7DOiOrfqe+v0FsfqBjrU/06LNuveP2tOmfam7OaU3/xEpBljwWlATJqM9sErCe1zC0sPxmOU+E2dklSKbQ963ou5hqYfU2i6001+xoe4zGvJKl8VN5sbBWjXZ2ueoKT/Nkkra+h3IWr/xUbPNcue+fhUQ5pFY2lKberOQYP87JE5fhNHmafGk5+upO2iIZ8YU5GX47OrUR9M6DbXHBk8m1S8Lq64+ZLm2mOXYLYkIRizZvBmwk3Ma2QCvf2bnl9G6WPNz9inD9o0Yi1S9xs0SqUjjIRlaYj3j0UzN660iHkwejqKIk10xavNK71ditziww+5EgJ2Tyvp5/jU2qWU/mCvbYmjai6yjiVuTVjeEvFWEluU9z1j/Rnwh92+3T2zPGa/KNvSSJp/V2GDSFgX+ad+4PJE2hl5EQH6uBOvPsUgRpUEHlb4m+Dk56vHFLuVTkZcNIgBmAu2op71zlhq260OuOShGgHPjzR3y5vk7xNo/aw7lkjTO1p2W1xTPhZh1PA/eIDNco/DoJyKMf5FYZE2d++T49f/Ruf/LqTVZghdEUvU929XxmYW1LBFcek8x//ypau+F+FFix9qFt7mSNlevKf5gwg8rx4PrN6QxozI7CunEmJWwsfWFox8eWUDxfXWJ3zXxjOSpNEPfn7Won9AfZLOr/92/sO7f1UUuDJVfuk0uTrv2e3bY2NZdX2oHRQ1s5692fyplP8ruE7lS4dL19bpYA7Pe6uMoAv0PJVjGa7QCM8ZBB2V9alODjyhlCuywpBzIp7zqnoCnSEPd/nf2zd246zyr3D9xVYKk25LxNoGtkU/2GoiX0S/Nk0aDng2Jo8bNb0a0FI7tyNPIYZmi17gWdnt/sLDi3Tr7hWzm+yXZM5I/lZ07EJ8qsaw4DaW3vuO3BNGb9cEWnc3GgbstcWYiL+//1SxNPvYmOQrZhchYlxGuVzGJ32gYKw5akBNjhf0cX+0YL37VJ3dPA/RSUNKW61OR2dh0yECT/ksRd2z8A3dddhxyZN/D6qkLpVVxZ+jFxpRP5Zfp2iZch1Cb09F34h4iRxtwC50RbKTWsByc35aQBaos5JKcd2gwyTPdqFUERuBkK3fr8FYkR5fviPh50F1pI50QH+IOnEp4VTLQTjeTLEg3Pof49t1ngiiD75xSTvFG/7Fw9OPBYWXMyY6SoJD1Z2/fXn28j9dHK4thB9BS2RjzExf+QJjct9HNiLNvpU4s2mtCE/BHbzcuO6tYM2rR1HhZPAjS+nHe4Of+1sUn4495uPrBW17h48qMwvpzcTRzCrzAW+v6Rr9SdoxFgT1kTykahAr0eRvVyqiGEeWJn518+Seb/Mln2HkVrw1ae79vDWAHbokyHs3bHpAv9mEGqWukY+aPTfgzmg9dNDDe/v6d07Z2EOnxtbXjcqOrHgydLfK37TCyr2JJmZlMkqCAqTpDHWpJ7YiSVdepG5XTZttO67SL9QNHXBELNYcX8SKrbrdtlObMa5dyqWc6CAFK+w1lrWT1/t9xye1J3lZO5eiaKHC/ZnqqWDc+2uFbmrJBY75IbVU92L0z1gsHCpf0xBqXE/mLNJ/JmdkTQxJrLwh9E3vNHeoX0RBY1MZtRBgQjEQlHOocZBB3LROGg8JMrJPflkZPcT0SFoAzfONV5boraNb4HPKUI9XE7nvMRXX9CULQqhC2dneWrxSkrqlq1b7Io5n+aJmC69deV7e5ZugjcO4bVQfmQvpFy8G6eenGrf14s3TbAQTI9TYSzSvcIP5akX9+cNYPQiunmqMhnhzsatEX6tVnBs/VGBRo7s0Tll/ST1jFxp1NSwjL5LVJsyfZYmRYmWc4cw/l885WOY0rylnZ5YqmOoUUyWLciXhiad6Q+RZg7CU8A/56rfU2Fs6XVr8wVFUCyEdJv2VsaI1pXv/vEiE+QKU3f9s3KnSml3aqwl0ShLotZiJDojVDtnr0aOpvRbnJGSGdTDbtBgn1LHFseq7+3PyugQq3G7fY1R0XdEbub8o9VWr4PPH/lNWhDkamP2X3yMlc4vam9iAW6GG8fEPMwSk4eCcNVZmNEeOPOsgeeRODCPxH9LpJilOwTMP4q1GRsaUxp4nq2YO2ZF/NnDDfPB5LlDVJtUs6weC9Y1JYyC+f35JAOWVTZrSi8KR40CbF/zfkoWOAvfvB0eR9ZdeIkYn1c68LJiautjjR+QjMTlN++B82PJTXcJflk5+7JjuZ4kZ8+7LYec4Um8xGb+4b3JSqynf6OOwcmP5Q/E505LlgyVxhn1CZgycmX8GT5atGCOnqsumrtXohqnYUV4/rEcMyjST3zJNQBtHKXgR07WGRVx/3fXX2kQy3F7CXOgbGh+i1yomKyrPA2f5wCzBnM7AVy2Zc74Von/vkSsf5DaE5JZU1XiLojB8I7z+k7ApO3Wq0apStEr3SGtoqpCvbmBJk3wc6wN+UGfND+8z/0EFpo2HxtTkIwbT3ErBGeKrUXlcuF+vg0nOENt58XIinScxu7n2EraTgwwDGwpqexJDSCZul2QSrhTmvPGvCNjwL9lOcRnCCdJuxphfPHtLnS+xRXtoxXtrlI43LPG4qudMzDYo6Mor8ystdovf0wNBDhpV/f391i6D4YGYuRN9x7IJViz0qCcoX/sUiEwDbp90SQ3WmnY99eVvyEs1DTvUuzS3l5ZTJPxZhEDBWU/mNklnRmLbFCVQe3Fo93lS6oDopymJPjPpb0r5OCaHnwunk9wZylUUDU/2/4tlCd2zXJpa/fIOV0t9E1FYWs1WoZdUhZLm3WP0nOh+u64C5bmls3vWoe8V3+4KHFo70Nzp8XjS7naZslnCbWxCZgVxDnV07j67lbwSzz0SqzkMHPTrXsSNGP7r2hhP0dDrtJfinhY/pIkc2ZbMykzqYP48Pwq9aY/xuR5P3zTj1vwFhx++/MiLghV/JPWh5Sv7t9H+wUlyY2X7i5b7KxpvvW7SQwVbGrkNmD2EMV4WvYlVfU+oP6pq0efxC7VP5t/1rJ9hn09gQ9AZ4meyXeHcF/Myjbh3QhSovavO+Y08TiEKpmTRcoh4hMI24/7fLoMm1fA6aV5kVnGLu4ShZZVh0FmeSpu+iqLNJni1Nu1ap99XUlQv0IRMnYhQqCCh1fohXQ5NwbmD0Dz0o/bcDRq26KwP1eebHim26C/qb/p27Ve2Fwsv0ZcXZYQ9/U1RSuiaxLLKba3emprOnoq4cK2k1OLE3SqqUfG2aOu5MNCEEA6//Tfdkd9h9tbVJRwZQfOZU6VPux7WKl9MxQTOatjVuXItVrlTb+IT+ZERsWnaLqSE6ycrY53oJYo0jP1sGCRCmp3JzpREC5npuVPG+lz87s2FSfyIigY1648F/75cI0B8mt77oMp4LnJSBcl+/++amt+MtMJUTyTRL/LFL+ONDxL4tfsGk39lIuGRp4ePhhX5ZKxMJnLx25SV/pTIOP5gsxjz+/v7tQ10HB6GTOzIromJ2c8q349z+Y5+33Kjtlz16Z60ImdWiQ/809NyaaBw+Vb9l8OrX8hq4Q4p657MdEHUuYqZIcjoUe9EW6G+sa3o4Udd6jNZE46DSlbVbMdRr19x/zan+3x9eZZ3xp8R8AbTPNua4/FNKfpr3mNmsrfMfP/d5QflI+pjQ91wWbZDrCUstdLaJxOmOKKTOz9ZAohuKGpPd5xy0v6WsaNzti8440u4iKqSYU7vGrveYhKZ2RRlGJXRGITHDIjgrN8lv9UO+zXBtsrdUaYvFCjJiacQ+CQ8J5OkosBJpnu1bsKXRipnz/Xis+O6hV1i+3ges9bsuwaVoCthmZGzUoI17d159nfWGDRX5E3c1a6DNGesh9nq/L84svib6Se5TpmS2/rO9cVTS7/UaJ7K7lflT8bQoiCNUHVXKK+7BLuUfZOtcY9iMek2esPKjvHfCq5BjR82i1u5Ki1T+mHfsO9sj+KADefRZSZzPNUfU/FlM6733EOIVYTVDr4TV9miuOERn60XNJDZGRVZ/fsDVc0PSTpLDIddw286Jzy7zI9jA//LpBA/jU/3U674F1BtWRyeKIQ2WkEWONSu3Ztz0bcjv7k3nBf+9sNKA48+jvmDhuvgaKN9p+leJtYG0q+Z/84IVfovrQiIhb1GMzbKtV59J8Vkj00iuJYZX6wISKu+Gu/yT37tIRLfs0wywPhRf2/9Ff+L31YOAmwqrkR3nA8/IH6U6TbZCyg8E3yAZhSmhz3L29uA52OVMnXFU/noZRg3zkLnyTw1zoD63ROvou+WBwUI6Ugfbsq20B8+MJWuyKau+55g0fU69Ufgdri/Sed/w+F3ptX2lV86nmLaEHtUNwe/a49bENJZuH4kgrbLx3FIE2nLH/e1RP0R85BVD0fBmk3qefrONav1cN/NPe+jlAzjCVbXrlIa/vvfYatGe33jnWwmJJqyVlycExLcc6m9nR9NOGv1CkbQxBfer1oir5Mgvn/5lFtk9N9p2ajJhCsOpWVfV58HRfOGh0GN2tOQQ8p9kbxlZ9yPH8b6mpJIB+eJkMbJVomx9AqivS97XHZOtQybpsyftZmt0wp9UcarV9ll2Aii/OP78+wtbTl2RHNcS5VV4Iok26j4QCW+1+In++XEN779VrsqSxfYTcGe4xfN5H//tHeLDLESupPMEYa6vGaadZIltlliNPpEpKQh70d4652xlTqP3RlTmbkfk1RjpscxIhp23lrRK+a+rbk9oKuRK7S0ijI04snrMkAodvnetVyqK7CLsdI3IlNyP98qVedD338o6ObD6yTGe2cIvP7fAuZ636bGhwsgzDmUqey5ML1z7NooNJpO8+txbM2ty4lTk2/kZEeIf1H38BX52UOzeqvOFarT/JV3TGdSdy9XqDAUqo0lUT6t2RPlHq292HTDsKCuC1d8VbWqueFUszP+nzLvuc1OAEGU8rWeyGV5gWqlNLI6ntDMaPjj/dYqt6G9zG4TUgci13tT6q15EZ8w85X6xEB6fENRVj78sZkfHYeolHgkPbdDd1m6a5Z4LeadSjcs346q/3ocit5I/LS3W0MXX30iebYpmWY+REuvZPv+ME/9AiFVwR/dT7Ma/9soJ1mhLMaWwZBXxuEbwwry1P7R0w9EDUjcJ44dh8aUsl51AtK+qG6jv8X7yJGs09OKH2LrRPIfbKDPq8czChK8iNGQR8ob39NTsvjdZqmxxWVPR8n8o53hYceOXJRPXv6U6ZSk+p0+PXoZc0HAQjDWrmyoVX5INuHupP/AnDYORUDuYXRWb1Lxh0/lrZZISyf73nJ11DPfT+j/W9/9eIzSh1quHuN23Ttc5irm2fSt5LWYpbJBl30bqsHF7480GBPsuK5IK2hTi7cYiLoL6N+oOlFo9KO4xJWqU9viEz6F3uHmxQdyYJ85fZgWw7VAo4ixZc8aaSkeKcjYQ5t3NyNIJTqYbwmRTJ9/XdqE3z6I9qElMzODNPdjwROBKvY/lTiGqjy2TUQ14WtfODKRGeKFewQCJVO+oWvPdHFSk2clz/GTiSqHPPiheS3L4/cQQQD/oeVXJP+2r3kI8cqkrTsiI9GL7qpl4Y4vvmesDKh+3CSTuHbRYOulqlcPEPjKZuqWRL/cJpN3n559rNeebCGHMTYyncl7/R2DZ4b9h7XhWmqgI9JSwTeTp1+Qf7rGPb3g2vzNOImuk3L6WJuCU0mML7RPue2yBw0F37uqkTJdX/14KvPfraUO3npNNw8GnWcdYo4Eg1vU8/YaG+uLuRkRpnKnp6MICTZ+otTPpPzylwbD5YNRS1AZyxDqpITTynvw2yqO2ar6TNULTnDQc9/0qequoO1Kpbjp/0EX6Anh6cqKJAmTvK4g1GWNXuZo2rG26PUoeuLVvWSsOHZQ+G87yMIsu0Jv7lXR8EoJlW4/xk2hcyyTn/aaJIW44N3exGNvLrfcE9z1BEzPRxwSd6Nd3dIoDd8691ssekv4sMg8vcv08Z6WsZX7PBryqZS9ejIS16BnMbwxh+67RIrlWCBhJh0hE3spV4HGsd5LpRjyTqG4Lx790TPKa8Ug5xV8+zr6WQNjSuT1c9JrEp1YJNySHdviz9TC7taNhintXyTruJs6hkpa1elu2m+nlwfcW+eNZc95rx1lK891sUpsqa/izX5OvY6lydEWU7GnnpPM8E/qkdSrfr+jLPmFuu+1xqDSdy50xIkPeOby4ThaA6lBO6ptWWHPfR1VU6SeepBRI3cEz2z/7os9uUKKNPLyfT5rf5nT9GNb0e7t0z2rmtZSnHYcJCknRN9WEuEQwkOMp34hoZwamEaSPzAHBE5XrgNW0xnJqYWp3e6fiztEzGx8NRCx4jfmVj39+DGrA73vxde/OoQjg3indahFY92FRilb/RbHgue0/vKTmU+fd0y7HWy53qhv6lBxRBdXzeMUEDeUij/f/q/7fi5KLzqcUs2zsUFP+lAnKlIJy5GO01CZ1oozWzBjZb9Yea/4R2DrpnpyxpGg0c/g7xr5rebSskm2XFPoFevV4snaCpcUd/ZsTG9ZVU+JCQc+eDZzSQuvGzSaouRbd/Ht+Vh6LaK0MhxhhJI0jhWvSCO6+j1a8pe8Z88+qqZ3PQyR4N7fCTYhLKlUQosvxG2P/PPn3R9yxDebz4yRKNQdjdnsLq9KsDA1rHy/OBkXs1dvOvi8bRJPYuYYPasUUJ5/anfhrX8WEFmAYsPlqt/UH9OFnkNw20P9+yxywpdq97DYAS13LCErgbepSDVySmJBSvVTl52Ja7dqYG05es3odgZPrkFGpxLyi4fnLl/o6B3PJg4i6LGL/3ZriwTPEKykzAuX/OX5vVRY2tewupKYjjE0Yuze2inuL1rywV1mJq9iuC9Rse6URypUhXjosSEdkzS9ifHKqnaoodDV81f78dKWmrXaBX8fzpeom2P7VNORlOjj9oxEe5PFPzM5zG7UvA2zs4jAVXgtKoZXuFvvb91r7PvWeifTodYfTcNUqDzJ1WMcx+d6pMFHakfVhmfv6lND1KhromIDCaGYjSOOYujzu6hLnetXmNZ0pWVT/FSrF4oltBJiu5osrT4yxpwZKHRsBv/M1142tj11JdMVeTs72V8iZ3tHFF2Yw1nyRuu6/MVj4kybh0pex/eNKMTdKvdVMbto5U1IL/k3mGRoFmNIb26jXh3T/s0yPIx2xng+rxuEMOZLjWY4MfBUo3RpqJXJh5RQt1WNM+LjQ3GydTzjWdx5s6bgSMcgTQoj+dCM2vL2aONupF0TjMmxx9V0bJ5aLkK0J2PGONSo8XGBehtf/H7u5aq/qaF7Xmfajsy4JJ93Tax4oBUwi6eSQJbcX5RyEPDOb9CQ7tv8Y5UEJg6EYardPUMrDw4jTDS+X4zJ/TFTVc/f61Zq7fb0LEYoEM4RyWG9l800qUoakhk8YBYy0qYpcfj2X7NYhtLBYmeC8NoN+tj9zfWxNlNW6lLr9r9v/8o7+LxOWgIxI+SOMwJei3xHm/ecUBwgvtksRdCkwKnoWlzbS5LpHfkoamHk0ydf5N/56zjKOKLrD1WVmFHm4GHuNsm8/ROCqoz1bEnlM5klo2qyj3gDf5mRvs2s6uvdnytTjQmlCAidh+Jp7c980MLgcCnCXCYkJeZFQ8gpX88PDcxuc67+SrY8FNiwT2weyDmv9mRRqWRDAplXjYpnKL8MQzcliQ/Z/ZzAeH+fg4Io3G+qz3rf8PHVtf2N7Jz4hXWcO4vNENJx3FqKo0uI9s4fKsTY61tM0z3NkqlI5MaVjSX3IfP3UQNYig+6+f49yhRgS0IZFUIg3BlCNfyxS537ftOaIM08mYnwQ98hel4kWrIVZzJJmNVih5dDVWhwKmfIA63asqBFotj4tceCuQ4HQay3H9K6F+mFtzHdOpoGTP31Nv3RRDE7RCmPc0XFVqhqLUQs+ktLNb463mCVlX6nNG4zlK/43WlNYKFGvDD8GeFhGBfjVAy7rOHgB5zKtDV9koBcoaKq8DozPT4nbr0wiySFb2spPe9W7OT4jVFnWjSSPbMuvLcj5PfKy07zsdsSjkWsPhx9adfZ8bYLUUlZJ2lfvjr2NoqteUaCGSofSjaQ6bXE+odPdOD1P7lUO8bJ/7bs19Bf5fUK/q7XOo1YR3mfW/HwdMNt+2QriPXD66eDqlz6v0r+Q9fVehXtGep1Zz0udCJc70Urt5SLKh0lWe9lGlVwR5pchK7g7ozLFnAdpMCbr8c9MYhgE9T2z0cbj09P/R7711y3x8vfk/exBh6qWKoHhyYkEd63bNkZDbbUmJ9Vb/E/Zxuj15SIKJJdH68NcD6al2u+CZ9Z/8mbF6w3tp9wfc5ix/vklla2ugjnDP1Bnu7849DLnDfDmP5Pf8hMhaZ9OPl5EsfyoM32Y5qZzF1M+NbojZuJYXFiMmFQCUf5kBaeZUIReaZWcdzKuNNbX5x3b2Un8sfImbtu8zLfPOEeTsCISGOk+czezn4y/unTUxOy/oeyRTMV8n+8K59IUh++Yzmje+L/d7DQ+dLyuIY479HvN3dieEUnyRG/X9Bza723xTzD2X49MufwZNGxbSEsDdvNpLhRrfhs5EhMQFyJZSc9AWfblHJABN2kASH7TiGf/WAPtf8AbY2iVCshsKYEfc1q9kV4l8BWUEoKyeMHuKjffhvwI8zWF80qR/7alThraixopQkNd+g723tPfGWoGO0meG52eGH8j/lPjumsr5lM8uJ2czSdaNUjH5oU7KGkPWTjrLUNdMZoBPfA13/OCnb30PtHL1ZexiUsGqddG7vgmY3/ZGNBHuufSa9xX6ttRK200EtFOLVFWtOpU27RMiJ2IhX+V2O2xvg5V5G+gZBhkYHPrwMbM5mKt8Imnr9ihbzXUJnZNO65TErrlOAgMePS31KjJ6e1gZ8S/MsdDfmEKQTn/RmCTTslXwxZ2FKhfWIvy9fpl5diyWu3lP2OdMnH4FTJ9K7wpKXwSMzefIPUc+6rATdi7Xjxt2G1o4valckNhddCF5VhEuhlpM1TJuK/dRzH51hyKr2Oo873H+R9Yd6XD/xRmvz6FDFRW2UqXf5Xqd6TlJ364yRcR46EJj9tHUT05Mm+N2Q9tR30ubVF2Dan9yxB480n2Bp7awT4XwmHR9J9nrUzm1DEirev7s6wmMiHtfQ6NmD1d86hXqTX/izLG3fcFgl0+fF0jq3o5aePLujmlTIZGXsxX6Ykrt83TcqomE7RlUy/edWfqUPD6ykpK95Tx0HYQjjrmMPkl9ra2zB5yO70U5/NsNnCdFZwsJSVnm/gkaPB+MvFIAHsumjJSCmc6QYR3k8/VPOfVpwFfpegRPAk4kIPta788fWayk3S+0pv16jTQBLTqOa5WdPEs4+YtyFGOXS42q/iFEpK7zf/iox4kH+pkl/5NXbNjTi2hvD7AXvyUQBuwM6Xmimk/up6VHdm4haWjGmzNcNPhe8YM/fSvwZkDVIdiAqYCLKyXe2z2XxU0eRDGuULCeaTwpPbzu5NUiBR2/4PKbXN7aQzjZqBTX/YN/iiC/9ps+CHSipXR93xa9zpT6biNbdInO2C0yvFGyLsNVxPHWqGOvifzPZoNrsXUkhJnJSiExgqd6cgqfVbJ3ZM7Scp3rz4PvigWED2xT9HRWZsCpXk0XdK7mZCpykNZMzPSrFID9Loq6a43FfTjyu1LLnN3/XlTPMZpXnWLpoV8w96sDCqeJpGFEhUr1sqf6dZjtN1q3H5Tn30kQen7Fz/UGq2Wu3L+6SM7sSHApRRB2FLC4j2lsf1EdfYwayWQhFIE5ZfM5T+K9X/xeE3QvwtM/GXp2zmd9xXVo0LmljtX2STWMitiJ9sy62mE3LJvWnYYCRwtXSLdN8VeBOOwpIhw2dDRpwaM5lm8UZLP631UdCwpSJqVf/S11srmaE4aQ4fal3aIlXX6wwkd8l/JffLnKSc9Rsi/+ithbrprktQlQiDSw2OJ6aximVN9LMCbzAS5o0/qRDr49GFiyIbWRfvd+viPWdj1z6TOda009jQfEQe8C34V5jLSctnI+V+RA5rubUhhYCki4SszI0/Od5K/3w/f9X55rz8rwub8C2SUTk+18BcRTGVuK4368vSyN9ftdenz1MjleiZLZbob0gt+2c3PNutA7Timlx40HhDcucCV/WMMoUeWVXbz3hYTwSM/Of8UJXFaPRRjllEw7TNLRtLjMCn8vkJY3ETdRFat6YfV3NW88Ql8w9b+4SFqkzb09ZTtZdM8RcW7xxf3M9HG0xEkSb1d+q6l6aM2Z8bdvU+VUFYV1Jptvw9aLJdiSEQ3vbMLgf9+sNq92Pr379UdcQ3WAxmnxPQ5+yLbKagd0spiovhXMVvDHqnZZiH4j1AKb2pf7rC7TfLh/nWey5/aYdxoGnt61/iUeOj6qHIoDMXS/S55f/t/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B8j1lL97XxNnd2pnAMGfoTb2tazt/WLWnOT84alQY+eHi+9uGp5IdOgfDMijTuTLlI140NahBTeTbjlP0WlTVS401ofoOJpaWDr8cnTIJZVe+96nk4v9D6JnOhOHVee64EEV4VRyu4vnA0pbQvHQw5y1/AaS+w4bcl8MrnXbxtQb0zYNJmrzrEo5U9Q9Afv/Wri/2cvFAQEhMf/u68BAAAAAAAAAAD+v7GOICZ9w1BuJmn9er9SSkjuf3I44v+doyBgIDxGQEVAFYteed7LyhxlEFRHXGYXOl+H0Bv9vbTAaeJzWhrPIY3zQpDO09P4s//lcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/DxnTD/U1z5NPTGf4XVaSXu9pW8/e1i9qzVkIb1KVVnQsHBKotaDcu789OXeysTOXYCN0DaOY3qJ79/kdnke081HoVhfrG9MJwR50m81RRZ7Ae9IbP9slbEJs0iYbBZqjY7dgRCyL+KdVknxEiyuoqw2vX33iO7BffrGOWUPu9ZkcgYrlqJPc7f+wX6dRPtd93MD/mGkQlyU0WbJdyFaIRLbIMDQSNYOrYTQkEjKWGlNNi1HGGGTsWcZYqukyySTbFCpbpVAZmhZL9rHWZZtxP8k59/P7XMc51/16PX0/+fze33N+57yLnPnxtxvNLt759Verbt4VFAgEQoJubTcAAADwv+JoieyYqO2fJ9UZ/EeXuMsZp2/u8OC/86BA8UBIUNXAHy++W21uwTeFd40I21wttEa5qm8FPtuR+kLCwjsH7Pjx+QtrPmv2yN42r/RrkNBoeqltx3tXH/TjipjEoslPNl78Xejm7q/2SNv/ylOHL2U91/tK0S96vViv2/M9Z5U+kbtzS3iL2x94Z3nbmEUtf/ghtkzBtMDnc1oW+fLLcds2bbzY4rVi7Xum5myOvhLeskOZxE57S2397cCmfgN2P9qq9pKUTt+0rX5b3m8vpd/30vvxb5c8dn+jbyqM2nV1+JZf+pdoeXbrexU7ZG9/p2S/STdadus6PWLK4b7d3/pX5SX3PvvTq2UX3oj/MnZMmQkTH2m2bsr1tGtbJmXd4mcAAACA/6qMF5ptKbqyQfOoj+9MSh1aIv3m/g/5Ow8KlA2EBFUMXMrfd/mRH2eF1jw4r92FVjMG/B4bURDd86mGfV5su/qL3oO6X4xoE1blZN4HXX8uDO63J//ddoteT3z727vDx3z+YURwQfHde5Y1Lv5YuxkFEWs+KPHJ0oNf9t2zt8rZNk9uf+tUu3p3HW+/61yFE8UmJCT2rDNtYN39ZWKqXAypkz/ts8JGJ+6d9kNu1jtLKj/YqVW12a+eLbGgzPsrmi6qeLDp8Fm1x/Qb+dL0lMiF2eUWLi13/ueNic163eI6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQCBQ665BcyqerTSpc2Zh5PidqZeihuVeX5sXeaBldvBDZWqlTN9wI/f2zSOGhC/6ddpTWxbXn/Vxi8N/tH3pyOoTTyasHDq8QnbVY1+l7Upvk9bxzmNHnjsf8UeX4M1jw+8ZVid35e6oF4rMOhIRv3tD4cjaVx87mTF/XuSNQek72g/dHvzroPwnVo46VvJI8VOPds9e82D8tIdGVcm+/a3G6TfvCgoEAqG3thoAAAD4n9G9/cjSbcs3jhv64hfZvyYuK3Vzhxf5Ow8KFA+EBqoFnqg+5fF9+48VLxIx+dDgIr9trR0WUSFuRsXWB1/YXKd4alJ+5HPzPqwWFjKiRWz6uskRj4w/MinjRLP06sOvd0zY/mWl8EozD7apt7BX+as5f54e3bVqvy53dmoflH12Rf1Zjb6dmZNZ49jxiU0efrjFxlYHxsxOv7Y1uWR4ybD8oHr13/+pWk5U3O1JKZsWLjw7rDA6Mrr6ymcHLvgr5O4yKfetj1yyad3iiU+Ma1V8UbdAbmb2jOmR7/ZqHd6j1/LxLQYcW/rmruql314xtnzapY9Pn6rebdD3HcI/jD6UUXfc0w90fu6X8vn1slf2a10Ye7Hcz6syX+t5IGTX0Xqjb/FzAAAAwH/F+usFfT89/fJ/urbq9E6NUzF9bu7/4L/zoEDZQEjQiMD8j+JPfBKz+rlpRS8k9W7Yb2bfDs+ktti65o0jWTtTZ86aWbNUVkr0j4fu7Lt9Z7WcdvsrtL83us3LX80OCcu4EDeg4pgz8RsnPFou4ULFBcsnDlw57+4Jkd98dLBh6efrXHh6bqOLa/oXvJ81d1TnyL+uHKy45Ey/T68d/X5xwfKs0Kyeh44MHRCUecdd63d3fflk/+jwjdmP/rBsyYLaVyvua1zip8pTGlx5Y++fzUPLX6l1ekDlreFfVuqx6uFlSUXil3/w6IXE7rE3DvbKmhY8sknJ8A9To3Yk1a43v/27fepPj77jtsnV4ube/cprlbaFFd0X9WL9sDbJs+8PX/LehtmvrSp/dUSxBa+m5x448VNq/xX9xu4YGLL/j7AaTxXZkP/wVxvuubx/eHDwd9MnLe5dfcfRUhlVm377y/zHs+JONzz/bkSTj4aWzL3vtZTCHudWLWmauvb1sOQ9q06Gl/tr2wMZfZ4s32x+hxvj2nYKLSx92+vfzFo9ekDNuH+9lZt8dPLJE6+3axYZ8+nGKd+NPTQh/+lSZ95PS1u0plNwjWHnqr15IaX5L7X++jZnzSdhv5XdXX7fiJy1nyb2v7Ewa+2Kvj0zojesrNP7TGbx+3p3S97cs+ZdmT2zgpLyH5r1zIGW/ZuWTxqaVzPs6Ff5u/u37/HO74v/8UKFO8+36rchNyjhlbycG1vLPf1H5pQFWUEd3y3bZ/DAuJWdN9YflJ779eOjZr++uXLLK+v63FGz+df7W0Q0/CQzMTO+W9bV/fOnX6+b0etSn5RVhfvOnj0T3Gh8xYgpJc+HRtXNbBI/qtkz+woOvBq2dsfsy1ebFju5b/PEgTOfiFtWP7lrj2qNaqes63euQnxMm2IJ++7oOCOqROfK47PDjkRXaZVX7KuRh0ZN29S/fk6Nq7c1mVg/Nr/n07VeXnQ44c02c4vWWBbz+fVTva5sfaDF+qRzx8Y2Dh7xedj9wyqV+blYzr3N+z+7sVndvKb5fZf1Cn+6oMiMmC3Xrm1YN3Vps5pVgjdnVK0RV6Vh/zKV0nd1KVPueNt5y7YF4ht2nP7hrMM1H7wnNKbqP9Lnrjyftm5g15PXC6cui28+9cjsWm+O/e1aZs/YAb1fuvZG9h0v/nXi+MQJzW9s+LprWoPDMYOil0++3GTTnMdfLJwZXrP471Vn1Vzfteuk7LmJD7QeFPfaNxemFmRtTdq+t8KHb2UVdHtsVLt1u/6Yv+S5y7OrXqh04WK1ieeqJs59Iis9N+Xxzouarw/74JmUc0Pur1gp7d8tki69tDMoucKAd5ZuCv3uFv8WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+nx3+dFDaluS18d1Cd+aV3v7Y+1HDcq+vzYs88HGf5ONDhu3J2tih/P1Tmy/4ssHO4Y/1uH/csoblXkm4/nODZ84HjWw7+f1nK0zpMvXdorvaJv+7Z7u6PZoOHTMhrXB50gMDf5jxcuN6q3+dmHjxkcbfV3vqwjv/ebD9kF++f+TBT7Zdvv72m98+/On88MfeaPLyt3UHF1ZMXpORV35Ivaplxyc0vHlXUCAQCAm6td0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/2/ObG/SbnFO10lFm/autuKnFoVRw3Kvr82LPHDovdR1QypcWdbgniVde6Ssvm/oscaxz449//uof+RP3/D8e6XC79n7wrUuzZJPzK4c0aP3W1vf/GhTrdLzph89e7po3fAqr9VO777go8k/5M7r3WRHo+Bt004tW996WIclDcoOvLdKQvs9l3/KaFZs//LQrNSEgrfX370iYvLu862rHCn+Y/bNu4ICgUDora0GAAAA/mdE1dn3S1r58WN/7RnSPzj72ao3d3iRv/OgQPFAaOC2wJlSx6MHju5ceUzFc4N/Hrc0YdGfW8e1iNz0RGqdSVdjv2vxyZoJM2KnPnB35fh6c0dOOXWqwi3+LAAAAOD/MqDOvr0java57/atkyOfyMxLvLn/g/7OgwJlAyFB/wx8/HWbiCLD5tQ/dKl5/U9vCz1c5r3V817dsuR0XPexJ6/kxSwYt+d67J9jxnd7c9+m5W0GfnBw8NBKrb8IaZrzwbcVJqc1LFmmQZ9Sc/re/+T3B2PLraozZ0jnslFNg28PavPPl2LnRnf84PPJ20p/NHXGlo4Xi3XJ2bz0k5i76p1OPTuvc4nb0xrPqVyz9b+bR3TvGDlj09xRBZvXjm43esXHOaX31Cu4nP/X6JR7hu8fsf65mLgyHapldljwdZXuE6rMnXWpzeL6R4o9vPKpOfWal39y1czf1159fOSi3h9/tuzzNhndhj7f6bGHvnhkaOKvY5//efgrHw0ZtPqXrNGvtBpc68nvT6XW2Ttuwm3lBg6O6vKfM8m/vbH7w/4RG1Z/VbXb0hrlt3e8kPTTlF6dC0qumLbqhwU7W2wNu2fe0bwZ9z56i58RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+DztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYr5/QOKoHDuBvdje/bLNtf9v6J7EtmKpQEg2U9lL/gRSiVSEVPIgWpWjTltrW1B6MKDVVJEsEifUieNAW6sGDppSC7UFEaRBTSBHUk1BbD+L/IpEiaCTJTLKZZkyzag7184Hl7Xsz85333ry87AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf159oWm8HHxx768dy9o/eb5z5LkNJ3btP7Trrvbh/e33vPLHwUcOH939Rv2OpjVbdm+87cjtR89uvarj91mDuyeKlrhaDCEaiULYfuDcl70nhxrH2qIQQj4q94SwJMqdXBKlElb/FkLYMtnP6QffG1m7dazseal+Wvv/UyHpcYVSPunPhPL0/nJ5Kcbr7PUbfvphR9fdQ/0P3HRny7Luh3umTomKVesphMWb09fnZsh99LHtra2Pdz7dtGnfnj1Xf/t24Yveh1o/PfzVuc6z1/b1Ded+/O7me09/tu/JuhDCgvgzJlmtTcnN4/K+EEJDVf66WcZ13SWOvy2jviIu/xeXpVlykuMrL/H8tEKqbJjj9XM10zP7Ny2c5/slknEujssTcdkyx5x88olCLgqFyb14ZzS1RkLVc4tCFOqq9tEo5Mbrucl6GK+HqXqUqudS9Xxdalzj940XWj6Kprcn56Xam+P2Qty+snqvn8H9Ge3XxGUx/kO9kNRD+suE0kVfJsc1LunXmb/oy3zIVe1BM7Un/V0XP4xS3FaKll50zegMkmPv76xsG3pi/QvljH5EA1GcH9WUf2vX8mOlStuhpqz8zbk4P1dT/vD5W5Z/Xfz8WGZ+f5Kfrym/ONT18jPff7gqc35+TuanUFP+R/3dr165/puNzVn5byb5xZryzxc2nRrtOXIgs/+rk/lZUFP+wIPHOy6sfacvMz8k+Q015TdXBo+/1dt4MDP/g2R+SjXlX982UPm4sndD5vyfTvIX1ZR/ZnTNL42nBt/NXJ93JPNTril/6bZVK8pPPXtj1t4Z9cz3f1iAy8sV8W+sSlyv9T3176p6X3itHE385lsYfxb9kzdKiareXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZAcOZAAAAACE+Vvn0X4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KAAD//4EUVH4=") r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)}], 0x1}}], 0x2, 0x2094) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg(r2, &(0x7f0000009600)=[{{&(0x7f0000000340)=@in, 0x80, &(0x7f0000009800)=[{&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/100, 0x64}, {&(0x7f0000001540)=""/67, 0x43}, {&(0x7f00000015c0)=""/240, 0xf0}, {&(0x7f0000003fc0)=""/2, 0x2}], 0x6, &(0x7f0000001740)=""/135, 0x87}, 0x3ff}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000001800)=""/221, 0xdd}, {&(0x7f0000001900)=""/116, 0x74}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/130, 0x82}, {&(0x7f0000002a40)=""/78, 0x4e}], 0x6, &(0x7f0000002b40)=""/102, 0x66}, 0x10001}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002bc0)=""/247, 0xf7}, {&(0x7f0000002cc0)=""/200, 0xc8}, {&(0x7f0000002dc0)=""/157, 0x9d}], 0x3, &(0x7f00000016c0)=""/85, 0x55}, 0x3}, {{&(0x7f0000002f40)=@sco, 0x80, &(0x7f00000052c0)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)}, {&(0x7f0000004200)=""/157, 0x9d}, {&(0x7f0000009880)=""/193, 0xc1}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/100, 0x64}], 0x7}, 0x1}, {{&(0x7f0000005340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f0000007540)=[{&(0x7f00000053c0)=""/175, 0xaf}, {&(0x7f0000005480)=""/191, 0xbf}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/4096, 0x1000}], 0x4, &(0x7f0000007580)=""/77, 0x4d}, 0x102}, {{&(0x7f0000007600)=@l2tp, 0x80, &(0x7f0000008a80)=[{&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/40, 0x28}, {&(0x7f00000086c0)=""/48, 0x30}, {&(0x7f0000008700)=""/53, 0x35}, {&(0x7f0000008780)=""/202, 0xca}, {&(0x7f0000008880)=""/128, 0x80}, {&(0x7f0000008900)=""/82, 0x52}, {&(0x7f0000008980)=""/214, 0xd6}], 0x8, &(0x7f0000008b00)=""/188, 0xbc}, 0x80003}, {{&(0x7f0000008bc0)=@ax25={{}, [@rose, @null, @rose, @rose, @remote, @rose, @netrom]}, 0x80, &(0x7f0000008e00)=[{&(0x7f0000008c40)=""/136, 0x88}, {&(0x7f0000008d00)=""/92, 0x5c}, {&(0x7f0000008d80)=""/1, 0x1}, {&(0x7f0000008dc0)=""/23, 0x17}], 0x4, &(0x7f0000008e40)=""/61, 0x3d}, 0x4}, {{&(0x7f0000008e80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000009540)=[{&(0x7f0000008f00)=""/94, 0x5e}, {&(0x7f0000008f80)=""/128, 0x80}, {&(0x7f0000009000)=""/168, 0xa8}, {&(0x7f00000090c0)=""/91, 0x5b}, {&(0x7f0000009140)=""/221, 0xdd}, {&(0x7f0000009300)=""/242, 0xf2}, {&(0x7f0000009400)=""/126, 0x7e}, {&(0x7f0000009480)=""/191, 0xbf}], 0x8}, 0xe8}], 0x8, 0x10021, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x32, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) 0s ago: executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x71}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x9}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) shutdown(r1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) getpeername(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000040)={@mcast2}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000680)={0x33, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "392fcc65209c4b"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001680)={r4, 0xad}) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)=""/200, 0xc8}], 0x1, &(0x7f00000004c0)=""/250, 0xfa}, 0x2000) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r5, r6, 0x2f, 0x4, 0x4, @prog_id}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) kernel console output (not intermixed with test programs): te a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 211.142514][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 211.156962][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 211.169454][ T6165] loop3: detected capacity change from 0 to 32768 [ 211.239461][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 211.248408][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 211.270438][ T6165] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6165) [ 211.387161][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 211.388118][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 211.439019][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 211.506816][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 211.557656][ T6165] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.587874][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 211.611664][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 211.655808][ T6165] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 211.675189][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 211.735972][ T6165] BTRFS info (device loop3): using free-space-tree [ 211.770493][ T6158] BTRFS error (device loop1): open_ctree failed [ 211.916489][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 211.917599][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 211.947175][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 212.097560][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 212.165046][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 212.255693][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 212.276496][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 212.360492][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 212.509543][ T6165] BTRFS error (device loop3): open_ctree failed [ 215.941163][ T6256] loop2: detected capacity change from 0 to 40427 [ 215.983397][ T6256] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 215.991457][ T6256] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 216.103011][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.116907][ T6263] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.126400][ T6263] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.137905][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.161491][ T5111] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 216.205336][ T5111] Bluetooth: Wrong link type (-22) [ 216.211450][ T5111] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 216.224629][ T5111] Bluetooth: Wrong link type (-22) [ 216.233845][ T5111] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 216.241571][ T5111] Bluetooth: Wrong link type (-22) [ 216.256515][ T5111] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 216.263461][ T5111] Bluetooth: Wrong link type (-22) [ 216.269570][ T5111] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 216.276497][ T5111] Bluetooth: Wrong link type (-22) [ 217.427263][ T6256] F2FS-fs (loop2): Found nat_bits in checkpoint [ 217.548545][ T6256] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 217.555802][ T6256] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 218.179690][ T29] audit: type=1804 audit(1719020287.043:250): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/2/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 220.066110][ T5164] libceph: connect (1)[c::]:6789 error -101 [ 220.091921][ T5164] libceph: mon0 (1)[c::]:6789 connect error [ 220.418691][ T6296] ceph: No mds server is up or the cluster is laggy [ 220.438098][ T5164] libceph: connect (1)[c::]:6789 error -101 [ 220.475904][ T5164] libceph: mon0 (1)[c::]:6789 connect error [ 223.980733][ T6318] loop3: detected capacity change from 0 to 32768 [ 223.989405][ T6336] loop0: detected capacity change from 0 to 2048 [ 224.027708][ T6318] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78 [ 224.105111][ T6341] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.503425][ T6318] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 224.540490][ T6318] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 224.590751][ T6328] loop4: detected capacity change from 0 to 32768 [ 224.636063][ T6328] bcachefs (/dev/loop4): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 224.716915][ T6318] bcachefs (loop3): alloc_read... done [ 224.722565][ T6318] bcachefs (loop3): stripes_read... done [ 224.758005][ T6326] loop2: detected capacity change from 0 to 32768 [ 224.775695][ T6318] bcachefs (loop3): snapshots_read... done [ 224.810011][ T6326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6326) [ 224.830171][ T6318] bcachefs (loop3): journal_replay... done [ 224.857002][ T6328] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 224.874043][ T6332] loop1: detected capacity change from 0 to 32768 [ 224.884130][ T6318] bcachefs (loop3): resume_logged_ops... done [ 224.891503][ T6318] bcachefs (loop3): going read-write [ 224.898337][ T6328] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 224.904796][ T6326] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.924066][ T6332] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got c940d40a should be 29d2fb78 [ 224.944504][ T6318] bcachefs (loop3): bch2_copygc_start(): error creating copygc thread EINTR [ 224.959810][ T6326] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 224.966819][ T6318] bcachefs (loop3): error starting copygc thread [ 224.986017][ T6318] bcachefs (loop3): going read-only [ 224.991372][ T6318] bcachefs (loop3): finished waiting for writes to stop [ 225.004607][ T6326] BTRFS info (device loop2): using free-space-tree [ 225.008888][ T6318] bcachefs (loop3): flushing journal and stopping allocators, journal seq 7 [ 225.044075][ T6318] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 7 [ 225.088147][ T6318] bcachefs (loop3): shutdown complete, journal seq 8 [ 225.096950][ T6318] bcachefs (loop3): marking filesystem clean [ 225.123797][ T6318] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 225.143753][ T6318] bcachefs (loop3): shutting down [ 225.238257][ T6318] bcachefs (loop3): shutdown complete [ 225.542525][ T6326] BTRFS error (device loop2): open_ctree failed [ 225.854195][ T6332] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 225.993632][ T6332] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 226.495350][ T6332] bcachefs (loop1): alloc_read... done [ 226.604455][ T6332] bcachefs (loop1): stripes_read... done [ 226.669816][ T6332] bcachefs (loop1): snapshots_read... done [ 226.711844][ T6332] bcachefs (loop1): journal_replay... done [ 226.775707][ T6332] bcachefs (loop1): resume_logged_ops... done [ 226.783715][ T6332] bcachefs (loop1): going read-write [ 226.859788][ T6332] bcachefs (loop1): bch2_copygc_start(): error creating copygc thread EINTR [ 226.903925][ T6332] bcachefs (loop1): error starting copygc thread [ 226.959595][ T6332] bcachefs (loop1): going read-only [ 226.964892][ T6332] bcachefs (loop1): finished waiting for writes to stop [ 227.013251][ T6332] bcachefs (loop1): flushing journal and stopping allocators, journal seq 7 [ 227.036330][ T6332] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 7 [ 227.116082][ T6332] bcachefs (loop1): shutdown complete, journal seq 8 [ 227.146240][ T6332] bcachefs (loop1): marking filesystem clean [ 227.206459][ T6332] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 227.247403][ T6332] bcachefs (loop1): shutting down [ 227.403521][ T6332] bcachefs (loop1): shutdown complete [ 227.847114][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 228.140454][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.376445][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.396927][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.412154][ T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 228.422971][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.249980][ T8] usb 3-1: config 0 descriptor?? [ 229.871350][ T6414] loop4: detected capacity change from 0 to 2048 [ 229.967273][ T6415] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.215995][ T29] audit: type=1400 audit(1719020299.203:251): avc: denied { read } for pid=4520 comm="acpid" name="event4" dev="devtmpfs" ino=2389 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 230.281253][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 230.319661][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 230.328433][ T29] audit: type=1400 audit(1719020299.203:252): avc: denied { open } for pid=4520 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2389 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 230.328524][ T29] audit: type=1400 audit(1719020299.243:253): avc: denied { ioctl } for pid=4520 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2389 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 230.456881][ T8] usb 3-1: USB disconnect, device number 2 [ 231.752501][ T6417] loop3: detected capacity change from 0 to 32768 [ 231.769203][ T6417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6417) [ 231.807320][ T6417] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.807446][ T6417] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 231.807520][ T6417] BTRFS info (device loop3): using free-space-tree [ 232.285698][ T29] audit: type=1400 audit(1719020301.263:254): avc: denied { create } for pid=6416 comm="syz-executor.3" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 232.390420][ T29] audit: type=1400 audit(1719020301.323:255): avc: denied { read write open } for pid=6416 comm="syz-executor.3" path="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/23/file0/bus" dev="loop3" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 232.418638][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.510450][ T6421] loop1: detected capacity change from 0 to 32768 [ 232.532328][ T6421] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 232.548387][ T29] audit: type=1800 audit(1719020301.323:256): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 232.625987][ T29] audit: type=1800 audit(1719020301.483:257): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 232.899342][ T4479] Bluetooth: hci1: command 0x0406 tx timeout [ 232.905470][ T4479] Bluetooth: hci2: command 0x0406 tx timeout [ 232.911698][ T5120] Bluetooth: hci0: command 0x0406 tx timeout [ 232.914003][ T5276] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.929767][ T6423] loop4: detected capacity change from 0 to 32768 [ 232.966106][ T6423] bcachefs (/dev/loop4): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78 [ 233.237853][ T6421] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 233.266240][ T6423] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 233.294443][ T6421] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 233.306132][ T6423] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 233.386240][ T6465] loop0: detected capacity change from 0 to 1024 [ 233.455479][ T6465] hfsplus: failed to load root directory [ 233.577291][ T5158] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 233.589976][ T6421] bcachefs (loop1): alloc_read... done [ 233.622518][ T6421] bcachefs (loop1): stripes_read... done [ 233.642049][ T6421] bcachefs (loop1): snapshots_read... done [ 233.723623][ T6465] loop0: detected capacity change from 0 to 512 [ 233.724204][ T6421] bcachefs (loop1): going read-write [ 233.781120][ T6421] bcachefs (loop1): journal_replay... [ 233.856110][ T6421] bcachefs (loop1): bch2_journal_replay(): error ERESTARTSYS [ 233.896587][ T6421] bcachefs (loop1): bch2_fs_recovery(): error ERESTARTSYS [ 233.904110][ T6421] bcachefs (loop1): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 233.968297][ T6421] bcachefs (loop1): shutting down [ 233.973612][ T5165] bcachefs (loop1): going read-only [ 233.974147][ T6465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.979596][ T5165] bcachefs (loop1): finished waiting for writes to stop [ 234.007692][ T5165] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 234.016925][ T5165] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 234.029077][ T6465] ext4 filesystem being mounted at /root/syzkaller-testdir2020697336/syzkaller.YMhe4j/52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.044457][ T5165] bcachefs (loop1): unshutdown complete, journal seq 11 [ 234.057448][ T5165] bcachefs (loop1): done going read-only, filesystem not clean [ 234.453628][ T6421] bcachefs (loop1): shutdown complete [ 235.796993][ T6465] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 235.896420][ T29] audit: type=1800 audit(1719020304.873:258): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 236.170403][ T5109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.929627][ T6488] loop0: detected capacity change from 0 to 2048 [ 237.086948][ T6493] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.508277][ T6477] loop3: detected capacity change from 0 to 32768 [ 237.558157][ T6477] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got c940d40a should be 29d2fb78 [ 237.672198][ T6494] loop2: detected capacity change from 0 to 8192 [ 237.737044][ T6494] Dev loop2: unable to read RDB block 8 [ 237.743387][ T6494] loop2: unable to read partition table [ 237.756010][ T6494] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 238.148217][ T6477] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 238.203706][ T6477] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 238.291551][ T6477] bcachefs (loop3): alloc_read... done [ 238.325686][ T6477] bcachefs (loop3): stripes_read... done [ 238.336667][ T6477] bcachefs (loop3): snapshots_read... done [ 238.370264][ T6477] bcachefs (loop3): journal_replay... done [ 238.423963][ T6477] bcachefs (loop3): resume_logged_ops... done [ 238.445859][ T6477] bcachefs (loop3): going read-write [ 238.483841][ T6477] bcachefs (loop3): done starting filesystem [ 238.681331][ T29] audit: type=1800 audit(1719020307.663:259): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1073741825 res=0 errno=0 [ 239.578246][ T6506] loop0: detected capacity change from 0 to 32768 [ 239.659497][ T6506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6506) [ 239.765373][ T5276] bcachefs (loop3): shutting down [ 239.784967][ T5276] bcachefs (loop3): going read-only [ 239.806089][ T6506] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.833497][ T5276] bcachefs (loop3): finished waiting for writes to stop [ 239.835722][ T6506] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 239.873573][ T6506] BTRFS info (device loop0): using free-space-tree [ 239.897138][ T5276] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9 [ 239.962819][ T5276] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 239.985777][ T5276] bcachefs (loop3): shutdown complete, journal seq 12 [ 239.996587][ T5276] bcachefs (loop3): marking filesystem clean [ 240.321141][ T5276] bcachefs (loop3): shutdown complete [ 240.356485][ T29] audit: type=1800 audit(1719020309.343:260): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 240.378424][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.586385][ T29] audit: type=1800 audit(1719020309.583:261): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 240.816758][ T5109] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.125371][ T6515] loop1: detected capacity change from 0 to 32768 [ 241.148637][ T6515] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78 [ 241.262313][ T6515] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 241.262905][ T6515] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 243.070871][ T6558] loop3: detected capacity change from 0 to 40427 [ 243.084575][ T6558] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 243.092738][ T6558] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 243.183184][ T6558] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.276724][ T6558] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 243.284116][ T6558] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 243.511784][ T6547] loop4: detected capacity change from 0 to 32768 [ 243.580240][ T29] audit: type=1400 audit(1719020312.563:262): avc: denied { setattr } for pid=6556 comm="syz-executor.3" name="bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 243.625917][ T6547] bcachefs (/dev/loop4): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 243.828882][ T29] audit: type=1804 audit(1719020312.713:263): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/26/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 243.855312][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.975908][ T29] audit: type=1400 audit(1719020312.943:264): avc: denied { append } for pid=6556 comm="syz-executor.3" path="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/26/bus/file1" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 244.003192][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.148174][ T6547] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 244.224031][ T6547] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 244.319249][ T6547] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 244.335932][ T6547] bcachefs (loop4): bch2_fs_recovery(): error EINTR [ 244.354952][ T6547] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 244.390892][ T6547] bcachefs (loop4): shutting down [ 244.566629][ T6547] bcachefs (loop4): shutdown complete [ 244.843396][ T6580] loop1: detected capacity change from 0 to 40427 [ 244.854361][ T6580] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 244.862518][ T6580] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 245.118750][ T6562] loop0: detected capacity change from 0 to 40427 [ 245.127429][ T6580] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.206027][ T6562] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 245.255471][ T6562] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 245.256494][ T6580] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 245.270998][ T6580] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 245.429116][ T6562] F2FS-fs (loop0): invalid crc value [ 245.600317][ T6586] syz-executor.1: attempt to access beyond end of device [ 245.600317][ T6586] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 245.719943][ T29] audit: type=1804 audit(1719020314.623:265): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/43/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 245.751022][ T6562] F2FS-fs (loop0): Found nat_bits in checkpoint [ 246.999679][ T6596] loop2: detected capacity change from 0 to 2048 [ 247.059659][ T6596] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 247.225066][ T6603] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.759298][ T6596] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 247.828110][ T6596] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 247.884919][ T6596] Remounting filesystem read-only [ 247.895408][ T6596] NILFS (loop2): error -5 truncating bmap (ino=16) [ 248.103456][ T5740] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 248.133126][ T5740] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 248.157685][ T5740] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 248.187788][ T5740] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 248.265779][ T5740] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 248.296523][ T5740] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 248.550240][ T6598] loop4: detected capacity change from 0 to 32768 [ 249.199281][ T6598] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6598) [ 249.570869][ T6598] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.626946][ T6598] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 249.661310][ T6598] BTRFS info (device loop4): using free-space-tree [ 250.400482][ T6598] BTRFS error (device loop4): open_ctree failed [ 250.659140][ T6609] loop3: detected capacity change from 0 to 32768 [ 251.516381][ T29] audit: type=1804 audit(1719020320.303:266): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir809019028/syzkaller.Ir5BsK/46/bus" dev="sda1" ino=1965 res=1 errno=0 [ 251.543628][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.602825][ T6609] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop3": -EINTR [ 252.303810][ T6650] loop4: detected capacity change from 0 to 40427 [ 252.364712][ T6650] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 252.372665][ T6650] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 252.472842][ T6650] F2FS-fs (loop4): Found nat_bits in checkpoint [ 252.564262][ T29] audit: type=1400 audit(1719020321.553:267): avc: denied { create } for pid=6652 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 252.671238][ T29] audit: type=1400 audit(1719020321.663:268): avc: denied { mounton } for pid=6660 comm="syz-executor.2" path="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/20/file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 252.698747][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.759125][ T6650] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 252.766396][ T6650] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 252.791301][ T29] audit: type=1804 audit(1719020321.703:269): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/20/file0" dev="sda1" ino=1966 res=1 errno=0 [ 253.356884][ T29] audit: type=1804 audit(1719020322.253:270): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir809019028/syzkaller.Ir5BsK/47/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 253.450972][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 256.719730][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 256.838331][ T6682] loop3: detected capacity change from 0 to 40427 [ 256.848215][ T6682] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 256.856290][ T6682] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.918145][ T6682] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.949485][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 257.011557][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.030122][ T6682] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 257.037377][ T6682] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.202050][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.213869][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.231199][ T8] usb 1-1: config 0 descriptor?? [ 257.358861][ T29] audit: type=1804 audit(1719020326.293:271): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/30/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 257.359952][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 257.385206][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.425269][ T6696] loop4: detected capacity change from 0 to 128 [ 257.481608][ T6696] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.537754][ T6696] ext4 filesystem being mounted at /root/syzkaller-testdir809019028/syzkaller.Ir5BsK/48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.866558][ T6700] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.884697][ T6700] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.955920][ T29] audit: type=1400 audit(1719020326.933:272): avc: denied { link } for pid=6694 comm="syz-executor.4" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 258.057427][ T29] audit: type=1400 audit(1719020326.943:273): avc: denied { rename } for pid=6694 comm="syz-executor.4" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 258.323592][ T6680] loop2: detected capacity change from 0 to 32768 [ 258.355115][ T6680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6680) [ 258.432077][ T6680] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.448332][ T5107] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.488267][ T29] audit: type=1400 audit(1719020327.463:274): avc: denied { read } for pid=6683 comm="syz-executor.0" name="event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 258.531906][ T6680] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 258.551847][ T6680] BTRFS info (device loop2): using free-space-tree [ 258.566009][ T29] audit: type=1400 audit(1719020327.463:275): avc: denied { open } for pid=6683 comm="syz-executor.0" path="/dev/input/event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 258.590422][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.670761][ T29] audit: type=1400 audit(1719020327.543:276): avc: denied { write } for pid=6683 comm="syz-executor.0" name="event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 258.973918][ T29] audit: type=1800 audit(1719020327.893:277): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 259.122713][ T29] audit: type=1800 audit(1719020328.083:278): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 259.339078][ T29] audit: type=1804 audit(1719020328.333:279): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/48/file0" dev="sda1" ino=1958 res=1 errno=0 [ 259.367987][ T6722] loop4: detected capacity change from 0 to 40427 [ 259.383693][ T6722] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 259.391641][ T6722] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 259.432668][ T5740] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.499766][ T6722] F2FS-fs (loop4): Found nat_bits in checkpoint [ 259.588558][ T6722] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 259.596121][ T6722] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 259.843744][ T6731] syz-executor.4: attempt to access beyond end of device [ 259.843744][ T6731] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 260.053411][ T29] audit: type=1804 audit(1719020328.863:280): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir809019028/syzkaller.Ir5BsK/49/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 260.226328][ T5160] usb 1-1: USB disconnect, device number 2 [ 261.647410][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.654138][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.079492][ T6745] loop2: detected capacity change from 0 to 40427 [ 262.101840][ T6745] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 262.113404][ T6745] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 262.185815][ T6745] F2FS-fs (loop2): Found nat_bits in checkpoint [ 262.285842][ T6745] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 262.293504][ T6745] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 262.830656][ T29] audit: type=1804 audit(1719020331.813:281): pid=6750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/25/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 262.842353][ T6733] loop1: detected capacity change from 0 to 32768 [ 263.071751][ T6733] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6733) [ 263.215759][ T6733] BTRFS error (device loop1): open_ctree failed [ 264.294760][ T6762] loop3: detected capacity change from 0 to 128 [ 264.437929][ T6762] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.547589][ T6762] ext4 filesystem being mounted at /root/syzkaller-testdir2364248209/syzkaller.1n3nNe/33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.816603][ T6767] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.854938][ T6767] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.240007][ T5276] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.679025][ T6777] fuse: Bad value for 'group_id' [ 265.716607][ T29] audit: type=1804 audit(1719020334.703:282): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir809019028/syzkaller.Ir5BsK/51/file0" dev="sda1" ino=1954 res=1 errno=0 [ 266.178374][ T6763] loop1: detected capacity change from 0 to 40427 [ 266.214908][ T6763] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 266.233178][ T6763] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 266.287452][ T6763] F2FS-fs (loop1): Found nat_bits in checkpoint [ 266.375664][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 266.560349][ T6763] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 266.577591][ T6763] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 266.617998][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.643745][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.724785][ T29] audit: type=1804 audit(1719020335.693:283): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/50/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 266.754700][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.796886][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.849030][ T45] usb 5-1: config 0 descriptor?? [ 266.891813][ T45] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 267.199328][ T6775] loop3: detected capacity change from 0 to 32768 [ 267.245333][ T6775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6775) [ 267.338144][ T6775] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.356297][ T6775] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 267.366188][ T6775] BTRFS info (device loop3): using free-space-tree [ 267.601760][ T6785] loop2: detected capacity change from 0 to 32768 [ 267.662484][ T6785] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 267.696163][ T29] audit: type=1800 audit(1719020336.683:284): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 267.820666][ T29] audit: type=1800 audit(1719020336.813:285): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 268.002363][ T5276] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.002559][ T6785] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 268.034622][ T6785] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 268.093878][ T6785] bcachefs (loop2): alloc_read... done [ 268.114656][ T6785] bcachefs (loop2): stripes_read... done [ 268.145832][ T6785] bcachefs (loop2): snapshots_read... done [ 268.232339][ T6785] bcachefs (loop2): going read-write [ 268.260911][ T6785] bcachefs (loop2): journal_replay... done [ 268.388219][ T6785] bcachefs (loop2): resume_logged_ops... done [ 268.394540][ T6785] bcachefs (loop2): delete_dead_inodes... done [ 268.570203][ T6785] bcachefs (loop2): done starting filesystem [ 269.220009][ T6820] loop0: detected capacity change from 0 to 40427 [ 269.242140][ T6820] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 269.250112][ T6820] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 269.317683][ T6820] F2FS-fs (loop0): Found nat_bits in checkpoint [ 269.424935][ T6820] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 269.432739][ T6820] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 269.446934][ T29] audit: type=1400 audit(1719020338.433:286): avc: denied { mounton } for pid=6784 comm="syz-executor.2" path="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/26/file1/bus" dev="loop2" ino=1073741825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.488052][ T5160] usb 5-1: USB disconnect, device number 2 [ 269.566140][ T29] audit: type=1400 audit(1719020338.433:287): avc: denied { getattr } for pid=6784 comm="syz-executor.2" name="/" dev="loop2" ino=4096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 269.589138][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.713850][ T6820] syz-executor.0: attempt to access beyond end of device [ 269.713850][ T6820] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 269.745363][ T29] audit: type=1400 audit(1719020338.443:288): avc: denied { setattr } for pid=6784 comm="syz-executor.2" name="work" dev="loop2" ino=1073741826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.775775][ T29] audit: type=1400 audit(1719020338.503:289): avc: denied { remove_name } for pid=6784 comm="syz-executor.2" name="#b" dev="loop2" ino=4103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.805041][ T29] audit: type=1400 audit(1719020338.583:290): avc: denied { rename } for pid=6784 comm="syz-executor.2" name="#b" dev="loop2" ino=4103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.818014][ T6821] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 269.828027][ T29] audit: type=1400 audit(1719020338.623:291): avc: denied { unlink } for pid=6784 comm="syz-executor.2" name="#b" dev="loop2" ino=4103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.876136][ T29] audit: type=1804 audit(1719020338.723:292): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2020697336/syzkaller.YMhe4j/64/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 269.928598][ T6820] syz-executor.0: attempt to access beyond end of device [ 269.928598][ T6820] loop0: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 270.074186][ T6785] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 270.564047][ T5109] syz-executor.0: attempt to access beyond end of device [ 270.564047][ T5109] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 270.647214][ T5109] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 270.680856][ T5109] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 270.745926][ T5109] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 270.997118][ T29] audit: type=1400 audit(1719020339.973:293): avc: denied { rmdir } for pid=5740 comm="syz-executor.2" name="index" dev="loop2" ino=4104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.185323][ T5740] bcachefs (loop2): shutting down [ 271.201393][ T5740] bcachefs (loop2): going read-only [ 271.207013][ T5740] bcachefs (loop2): finished waiting for writes to stop [ 271.251533][ T5740] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 271.293605][ T5740] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 271.338767][ T5740] bcachefs (loop2): shutdown complete, journal seq 15 [ 271.378791][ T5740] bcachefs (loop2): marking filesystem clean [ 271.606977][ T5740] bcachefs (loop2): shutdown complete [ 271.687582][ T6832] loop1: detected capacity change from 0 to 32768 [ 271.694055][ T6842] loop3: detected capacity change from 0 to 764 [ 271.822357][ T6829] loop4: detected capacity change from 0 to 32768 [ 271.846849][ T6832] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 271.873416][ T6829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6829) [ 271.977862][ T6829] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.992886][ T6829] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 272.130025][ T6829] BTRFS info (device loop4): using free-space-tree [ 272.209103][ T6832] XFS (loop1): Ending clean mount [ 272.740094][ T5107] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.144633][ T5108] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.992309][ T6874] loop0: detected capacity change from 0 to 40427 [ 275.001869][ T6874] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 275.013231][ T6874] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 275.143139][ T6874] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.264385][ T6874] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 275.272034][ T6874] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 275.669603][ T29] audit: type=1804 audit(1719020344.493:294): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2020697336/syzkaller.YMhe4j/66/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 276.011098][ T6887] fuse: Bad value for 'group_id' [ 276.086310][ T29] audit: type=1804 audit(1719020345.043:295): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/52/file0" dev="sda1" ino=1965 res=1 errno=0 [ 278.421810][ T29] audit: type=1400 audit(1719020347.413:296): avc: denied { read } for pid=6902 comm="syz-executor.1" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 278.543605][ T29] audit: type=1400 audit(1719020347.443:297): avc: denied { open } for pid=6902 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 278.645692][ T29] audit: type=1400 audit(1719020347.523:298): avc: denied { ioctl } for pid=6902 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 278.825196][ T6891] loop3: detected capacity change from 0 to 32768 [ 278.878096][ T6891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6891) [ 278.973199][ T6891] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.021186][ T6891] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 279.055909][ T6891] BTRFS info (device loop3): using free-space-tree [ 279.122887][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.196474][ T6891] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 279.219107][ T6891] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 279.494095][ T6891] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 279.629993][ T6891] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 279.763930][ T6891] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 280.033463][ T6891] BTRFS error (device loop3): open_ctree failed [ 282.254607][ T6944] loop3: detected capacity change from 0 to 764 [ 282.517171][ T6933] loop1: detected capacity change from 0 to 32768 [ 282.572723][ T6935] loop2: detected capacity change from 0 to 32768 [ 282.588519][ T6933] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got c940d40a should be 29d2fb78 [ 282.643152][ T6935] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got c940d40a should be 29d2fb78 [ 283.124646][ T6933] syz-executor.1: vmalloc error: size 5242880, failed to allocated page array size 10240, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 283.187306][ T6933] CPU: 0 PID: 6933 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 283.198002][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 283.208101][ T6933] Call Trace: [ 283.211497][ T6933] [ 283.214471][ T6933] dump_stack_lvl+0x16c/0x1f0 [ 283.219221][ T6933] warn_alloc+0x24d/0x3a0 [ 283.223618][ T6933] ? __pfx_warn_alloc+0x10/0x10 [ 283.228594][ T6933] ? __bch2_darray_resize+0xd8/0x250 [ 283.234007][ T6933] ? __get_vm_area_node+0x190/0x2d0 [ 283.239239][ T6933] ? __get_vm_area_node+0x1bc/0x2d0 [ 283.244470][ T6933] __vmalloc_node_range_noprof+0xff7/0x1520 [ 283.250411][ T6933] ? __bch2_darray_resize+0xd8/0x250 [ 283.255818][ T6933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.262231][ T6933] ? trace_kmalloc+0x2d/0xe0 [ 283.266857][ T6933] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 283.272622][ T6933] ? __bch2_darray_resize+0xd8/0x250 [ 283.277939][ T6933] kvmalloc_node_noprof+0x14f/0x1a0 [ 283.283180][ T6933] ? __bch2_darray_resize+0xd8/0x250 [ 283.288497][ T6933] __bch2_darray_resize+0xd8/0x250 [ 283.293659][ T6933] bch2_fs_btree_write_buffer_init+0x2a2/0x380 [ 283.299846][ T6933] bch2_fs_alloc+0x1a50/0x2670 [ 283.304649][ T6933] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 283.309815][ T6933] bch2_fs_open+0x7b5/0x1110 [ 283.314453][ T6933] ? kasan_save_free_info+0x3b/0x60 [ 283.319689][ T6933] ? __pfx_bch2_fs_open+0x10/0x10 [ 283.324769][ T6933] ? bch2_mount+0x46e/0x1230 [ 283.329405][ T6933] ? kasan_quarantine_put+0x10a/0x240 [ 283.334846][ T6933] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.340084][ T6933] bch2_mount+0xe2c/0x1230 [ 283.344555][ T6933] ? __pfx_bch2_mount+0x10/0x10 [ 283.349444][ T6933] ? cred_has_capability.isra.0+0x192/0x2f0 [ 283.355369][ T6933] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 283.361639][ T6933] ? rcu_is_watching+0x12/0xc0 [ 283.366434][ T6933] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 283.372120][ T6933] ? cap_capable+0x1cf/0x240 [ 283.376755][ T6933] ? __pfx_bch2_mount+0x10/0x10 [ 283.381645][ T6933] legacy_get_tree+0x109/0x220 [ 283.386471][ T6933] vfs_get_tree+0x8f/0x380 [ 283.390932][ T6933] path_mount+0x14e6/0x1f20 [ 283.395475][ T6933] ? kmem_cache_free+0x12f/0x3a0 [ 283.400461][ T6933] ? __pfx_path_mount+0x10/0x10 [ 283.405362][ T6933] ? putname+0x12e/0x170 [ 283.409650][ T6933] __x64_sys_mount+0x297/0x320 [ 283.414656][ T6933] ? __pfx___x64_sys_mount+0x10/0x10 [ 283.420016][ T6933] do_syscall_64+0xcd/0x250 [ 283.424568][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.430513][ T6933] RIP: 0033:0x7f848507e7aa [ 283.434959][ T6933] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 283.454618][ T6933] RSP: 002b:00007f8485decef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 283.463089][ T6933] RAX: ffffffffffffffda RBX: 00007f8485decf80 RCX: 00007f848507e7aa [ 283.471089][ T6933] RDX: 0000000020020980 RSI: 0000000020000000 RDI: 00007f8485decf40 [ 283.479274][ T6933] RBP: 0000000020020980 R08: 00007f8485decf80 R09: 0000000000000000 [ 283.487268][ T6933] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 283.495350][ T6933] R13: 00007f8485decf40 R14: 0000000000005d85 R15: 00000000200209c0 [ 283.503356][ T6933] [ 283.545965][ T6933] Mem-Info: [ 283.549291][ T6933] active_anon:33753 inactive_anon:0 isolated_anon:0 [ 283.549291][ T6933] active_file:0 inactive_file:46899 isolated_file:0 [ 283.549291][ T6933] unevictable:768 dirty:19 writeback:0 [ 283.549291][ T6933] slab_reclaimable:10682 slab_unreclaimable:101387 [ 283.549291][ T6933] mapped:19177 shmem:13066 pagetables:811 [ 283.549291][ T6933] sec_pagetables:0 bounce:0 [ 283.549291][ T6933] kernel_misc_reclaimable:0 [ 283.549291][ T6933] free:1359253 free_pcp:1283 free_cma:0 [ 283.603579][ T6935] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 283.634281][ T6933] Node 0 active_anon:135612kB inactive_anon:0kB active_file:0kB inactive_file:187528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76708kB dirty:72kB writeback:0kB shmem:51528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10908kB pagetables:3244kB sec_pagetables:0kB all_unreclaimable? no [ 283.686925][ T6935] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 283.713870][ T6961] fuse: Bad value for 'group_id' [ 283.718954][ T6933] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 283.719056][ T6933] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.719155][ T6933] lowmem_reserve[]: 0 2565 2567 0 0 [ 283.719222][ T6933] Node 0 DMA32 free:1466628kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:136884kB inactive_anon:0kB active_file:0kB inactive_file:185712kB unevictable:1536kB writepending:72kB present:3129332kB managed:2654756kB mlocked:0kB bounce:0kB free_pcp:3776kB local_pcp:2696kB free_cma:0kB [ 283.719328][ T6933] lowmem_reserve[]: 0 0 1 0 0 [ 283.719391][ T6933] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 283.818059][ T6935] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 283.818150][ T6935] bcachefs (loop2): bch2_fs_recovery(): error EINTR [ 283.818174][ T6935] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 283.818197][ T6935] bcachefs (loop2): shutting down [ 283.884477][ T6933] lowmem_reserve[]: 0 0 0 0 0 [ 283.888001][ T6935] bcachefs (loop2): shutdown complete [ 283.892714][ T6933] Node 1 Normal free:3951588kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3016kB local_pcp:1004kB free_cma:0kB [ 283.899792][ T29] audit: type=1804 audit(1719020352.883:299): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2020697336/syzkaller.YMhe4j/68/file0" dev="sda1" ino=1967 res=1 errno=0 [ 283.937497][ T6933] lowmem_reserve[]: 0 0 0 0 0 [ 283.987810][ T6933] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.053634][ T6933] Node 0 DMA32: 116*4kB (UME) 92*8kB (UME) 120*16kB (UE) 46*32kB (UE) 142*64kB (UME) 145*128kB [ 284.058110][ T6941] loop4: detected capacity change from 0 to 32768 [ 284.060346][ T6933] (UME) 101*256kB (UME) 78*512kB (UME) 51*1024kB (UM) 6*2048kB (UME) 318*4096kB (M) = 1465072kB [ 284.088164][ T6933] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 284.105319][ T6933] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 0*64kB 1*128kB (U) 1*256kB (M) 1*512kB (M) 2*1024kB (U) 4*2048kB (UM) 962*4096kB (M) = 3951588kB [ 284.126583][ T6933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.137710][ T6933] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.147247][ T6933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.161263][ T6933] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.171101][ T6933] 61159 total pagecache pages [ 284.176692][ T6933] 0 pages in swap cache [ 284.181196][ T6933] Free swap = 124996kB [ 284.185842][ T6933] Total swap = 124996kB [ 284.190742][ T6933] 2097051 pages RAM [ 284.194883][ T6933] 0 pages HighMem/MovableOnly [ 284.200317][ T6933] 401768 pages reserved [ 284.204740][ T6933] 0 pages cma reserved [ 284.228187][ T6933] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 284.462357][ T6972] loop0: detected capacity change from 0 to 128 [ 284.598793][ T6972] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.739725][ T6941] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 284.811094][ T6972] ext4 filesystem being mounted at /root/syzkaller-testdir2020697336/syzkaller.YMhe4j/69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 285.064438][ T6977] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.108647][ T6977] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.559871][ T5109] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.502641][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.605997][ T6976] loop3: detected capacity change from 0 to 32768 [ 286.651826][ T6976] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 286.900464][ T6976] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 286.912530][ T6976] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 287.005079][ T6976] bcachefs (loop3): alloc_read... done [ 287.024585][ T6976] bcachefs (loop3): stripes_read... done [ 287.048138][ T6976] bcachefs (loop3): snapshots_read... done [ 287.136856][ T6976] bcachefs (loop3): going read-write [ 287.173882][ T6976] bcachefs (loop3): journal_replay... done [ 287.260848][ T6976] bcachefs (loop3): resume_logged_ops... done [ 287.285087][ T6980] loop1: detected capacity change from 0 to 32768 [ 287.296677][ T6976] bcachefs (loop3): delete_dead_inodes... done [ 287.358348][ T6976] bcachefs (loop3): done starting filesystem [ 287.425396][ T6980] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 287.550615][ T6976] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 287.651092][ T6980] XFS (loop1): Ending clean mount [ 287.689060][ T6984] loop4: detected capacity change from 0 to 32768 [ 287.719556][ T6980] XFS (loop1): Quotacheck needed: Please wait. [ 287.733814][ T6984] bcachefs (/dev/loop4): error reading default superblock: checksum error, type crc32c_nonzero: got c940d40a should be 29d2fb78 [ 287.755723][ T29] audit: type=1400 audit(1719020356.723:300): avc: denied { mounton } for pid=6975 comm="syz-executor.3" path="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/40/file1/bus/file0" dev="overlay" ino=1073741828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.822336][ T6982] loop0: detected capacity change from 0 to 32768 [ 287.914178][ T6982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6982) [ 288.044386][ T6982] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 288.061936][ T29] audit: type=1400 audit(1719020356.993:301): avc: denied { write } for pid=5276 comm="syz-executor.3" name="/" dev="overlay" ino=1073741827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.069492][ T6982] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 288.126837][ T6984] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 288.130718][ T6982] BTRFS info (device loop0): using free-space-tree [ 288.180108][ T29] audit: type=1400 audit(1719020357.033:302): avc: denied { remove_name } for pid=5276 comm="syz-executor.3" name="file0" dev="overlay" ino=1073741828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.208778][ T6984] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 288.225675][ T6980] XFS (loop1): Quotacheck: Done. [ 288.231061][ T5276] bcachefs (loop3): shutting down [ 288.241319][ T5276] bcachefs (loop3): going read-only [ 288.247294][ T5276] bcachefs (loop3): finished waiting for writes to stop [ 288.259974][ T29] audit: type=1400 audit(1719020357.033:303): avc: denied { rmdir } for pid=5276 comm="syz-executor.3" name="file0" dev="overlay" ino=1073741828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.296812][ T5276] bcachefs (loop3): flushing journal and stopping allocators, journal seq 14 [ 288.318407][ T5276] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15 [ 288.340036][ T5276] bcachefs (loop3): shutdown complete, journal seq 16 [ 288.359689][ T5276] bcachefs (loop3): marking filesystem clean [ 288.499569][ T7009] loop2: detected capacity change from 0 to 32768 [ 288.516054][ T7009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7009) [ 288.544102][ T5276] bcachefs (loop3): shutdown complete [ 288.644704][ T7009] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.665992][ T7009] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 288.674789][ T7009] BTRFS info (device loop2): using free-space-tree [ 288.808181][ T5164] XFS (loop1): Metadata CRC error detected at xfs_refcountbt_read_verify+0x26/0xe0, xfs_refcountbt block 0x28 [ 288.812176][ T29] audit: type=1400 audit(1719020357.803:304): avc: denied { read write } for pid=6979 comm="syz-executor.1" name="file2" dev="loop1" ino=4423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 288.851056][ T29] audit: type=1400 audit(1719020357.823:305): avc: denied { open } for pid=6979 comm="syz-executor.1" path="/root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/57/file0/file2" dev="loop1" ino=4423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 288.866033][ T5164] XFS (loop1): Unmount and run xfs_repair [ 288.886140][ T5164] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 288.893594][ T5164] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 288.903031][ T5164] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 288.917316][ T5164] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 288.934362][ T5164] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 288.970777][ T5164] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 289.028385][ T29] audit: type=1400 audit(1719020357.943:306): avc: denied { ioctl } for pid=6979 comm="syz-executor.1" path="/root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/57/file0/file2" dev="loop1" ino=4423 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 289.035411][ T5164] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 289.194629][ T5164] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 289.278149][ T5164] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 289.336096][ T6980] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x28 len 8 error 74 [ 289.338790][ T6982] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 289.404282][ T6980] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x414/0x990 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 289.485310][ T6980] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 289.569591][ T29] audit: type=1400 audit(1719020358.553:307): avc: denied { link } for pid=7007 comm="syz-executor.2" name="file1" dev="loop2" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 289.794642][ T29] audit: type=1800 audit(1719020358.783:308): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 289.843170][ T5108] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 290.123169][ T5740] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 290.366196][ T5109] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.867061][ T29] audit: type=1804 audit(1719020360.853:309): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/32/file0" dev="sda1" ino=1955 res=1 errno=0 [ 292.165019][ T7072] loop4: detected capacity change from 0 to 764 [ 292.444700][ T5157] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 294.132854][ T7082] loop3: detected capacity change from 0 to 128 [ 294.274255][ T7082] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.331151][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 294.404938][ T7082] ext4 filesystem being mounted at /root/syzkaller-testdir2364248209/syzkaller.1n3nNe/42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 294.831015][ T7076] loop2: detected capacity change from 0 to 32768 [ 294.835830][ T7085] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.853282][ T7085] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.119417][ T7080] loop0: detected capacity change from 0 to 32768 [ 295.156558][ T7080] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got c940d40a should be 29d2fb78 [ 295.202097][ T5276] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.452713][ T7076] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 295.525228][ T7076] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 295.604350][ T7080] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 295.611561][ T7076] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 295.631289][ T7076] bcachefs (loop2): bch2_fs_recovery(): error EINTR [ 295.638460][ T7076] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 295.648313][ T7076] bcachefs (loop2): shutting down [ 295.665914][ T7080] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 295.680325][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.726115][ T7076] bcachefs (loop2): shutdown complete [ 295.856871][ T7080] bcachefs (loop0): alloc_read... done [ 295.902451][ T7080] bcachefs (loop0): stripes_read... done [ 295.932750][ T7080] bcachefs (loop0): snapshots_read... done [ 295.963313][ T7080] bcachefs (loop0): journal_replay... done [ 295.982990][ T7080] bcachefs (loop0): resume_logged_ops... done [ 296.006362][ T7080] bcachefs (loop0): going read-write [ 296.053692][ T7080] bcachefs (loop0): done starting filesystem [ 296.456888][ T7117] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 296.515807][ T29] audit: type=1800 audit(1719020365.463:310): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 297.406591][ T5109] bcachefs (loop0): shutting down [ 297.411696][ T5109] bcachefs (loop0): going read-only [ 297.418407][ T29] audit: type=1400 audit(1719020365.943:311): avc: denied { create } for pid=7114 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 297.467347][ T5109] bcachefs (loop0): finished waiting for writes to stop [ 297.549053][ T5109] bcachefs (loop0): flushing journal and stopping allocators, journal seq 7 [ 297.585721][ T5109] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 7 [ 297.641362][ T5109] bcachefs (loop0): shutdown complete, journal seq 8 [ 297.713468][ T5109] bcachefs (loop0): marking filesystem clean [ 298.888464][ T5109] bcachefs (loop0): shutdown complete [ 299.795387][ T29] audit: type=1804 audit(1719020368.763:312): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/62/file0" dev="sda1" ino=1954 res=1 errno=0 [ 300.009901][ T7136] loop4: detected capacity change from 0 to 128 [ 300.142940][ T7136] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.469625][ T7136] ext4 filesystem being mounted at /root/syzkaller-testdir809019028/syzkaller.Ir5BsK/61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 300.723670][ T7145] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 300.799987][ T7145] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 300.866811][ T7143] loop3: detected capacity change from 0 to 764 [ 301.314345][ T5107] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.897059][ T29] audit: type=1800 audit(1719020371.163:313): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1943 res=0 errno=0 [ 303.253054][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.830716][ T29] audit: type=1400 audit(1719020372.823:314): avc: denied { write } for pid=7158 comm="syz-executor.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.224124][ T7161] kvm: emulating exchange as write [ 305.669838][ T7167] loop0: detected capacity change from 0 to 32768 [ 305.717170][ T7167] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7167) [ 305.751525][ T7167] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 305.772166][ T7167] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 305.795648][ T7167] BTRFS info (device loop0): using free-space-tree [ 305.960525][ T29] audit: type=1804 audit(1719020374.953:315): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/67/file0" dev="sda1" ino=1964 res=1 errno=0 [ 306.866425][ T5109] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 307.343713][ T7208] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 307.624168][ T7208] overlayfs: overlapping lowerdir path [ 307.966294][ T29] audit: type=1800 audit(1719020376.703:316): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1943 res=0 errno=0 [ 308.652649][ T7217] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.713330][ T7217] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.966351][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.227642][ T7226] loop0: detected capacity change from 0 to 512 [ 309.434930][ T7226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.483690][ T7226] ext4 filesystem being mounted at /root/syzkaller-testdir2020697336/syzkaller.YMhe4j/74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.764920][ T5109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.796798][ T29] audit: type=1400 audit(1719020378.773:317): avc: denied { ioctl } for pid=7232 comm="syz-executor.3" path="socket:[14233]" dev="sockfs" ino=14233 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.106328][ T29] audit: type=1400 audit(1719020378.793:318): avc: denied { create } for pid=7232 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 310.195766][ T29] audit: type=1400 audit(1719020378.963:319): avc: denied { write } for pid=7232 comm="syz-executor.3" path="socket:[14240]" dev="sockfs" ino=14240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.206271][ T7240] loop4: detected capacity change from 0 to 2048 [ 312.222623][ T7246] loop0: detected capacity change from 0 to 1024 [ 312.229186][ T29] audit: type=1804 audit(1719020381.213:320): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/48/file0" dev="sda1" ino=1938 res=1 errno=0 [ 312.313230][ T7246] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 312.341155][ T7240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.361505][ T7246] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 312.394032][ T7246] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 312.422115][ T29] audit: type=1400 audit(1719020381.413:321): avc: denied { mount } for pid=7239 comm="syz-executor.4" name="/" dev="loop4" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 312.438880][ T7246] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 312.550316][ T7246] journal_load_superblock: Cannot read journal superblock [ 312.587061][ T29] audit: type=1400 audit(1719020381.583:322): avc: denied { setopt } for pid=7239 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.614842][ T7246] EXT4-fs (loop0): Could not load journal inode [ 313.266391][ T29] audit: type=1800 audit(1719020382.013:323): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 313.967737][ T29] audit: type=1400 audit(1719020382.953:324): avc: denied { unmount } for pid=5107 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 314.101922][ T7265] loop0: detected capacity change from 0 to 128 [ 314.151862][ T7265] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.177217][ T7265] ext4 filesystem being mounted at /root/syzkaller-testdir2020697336/syzkaller.YMhe4j/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 314.567374][ T7269] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 314.581702][ T7269] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.016394][ T5109] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.441023][ T7260] loop2: detected capacity change from 0 to 32768 [ 315.488726][ T7260] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 315.592817][ T7274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.988743][ T7260] warn_alloc: 1 callbacks suppressed [ 315.988770][ T7260] syz-executor.2: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 316.057654][ T7260] CPU: 1 PID: 7260 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 316.068148][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 316.078329][ T7260] Call Trace: [ 316.081627][ T7260] [ 316.084674][ T7260] dump_stack_lvl+0x16c/0x1f0 [ 316.089387][ T7260] warn_alloc+0x24d/0x3a0 [ 316.093763][ T7260] ? __pfx_warn_alloc+0x10/0x10 [ 316.098688][ T7260] ? __bch2_darray_resize+0xd8/0x250 [ 316.104018][ T7260] ? __get_vm_area_node+0x190/0x2d0 [ 316.109255][ T7260] ? __get_vm_area_node+0x1bc/0x2d0 [ 316.114611][ T7260] __vmalloc_node_range_noprof+0xff7/0x1520 [ 316.120570][ T7260] ? __bch2_darray_resize+0xd8/0x250 [ 316.125888][ T7260] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.132317][ T7260] ? trace_kmalloc+0x2d/0xe0 [ 316.136969][ T7260] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 316.142724][ T7260] ? __bch2_darray_resize+0xd8/0x250 [ 316.148041][ T7260] kvmalloc_node_noprof+0x14f/0x1a0 [ 316.153285][ T7260] ? __bch2_darray_resize+0xd8/0x250 [ 316.158599][ T7260] __bch2_darray_resize+0xd8/0x250 [ 316.163760][ T7260] bch2_fs_btree_write_buffer_init+0x2a2/0x380 [ 316.169948][ T7260] bch2_fs_alloc+0x1a50/0x2670 [ 316.174774][ T7260] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 316.180047][ T7260] bch2_fs_open+0x7b5/0x1110 [ 316.184690][ T7260] ? kasan_save_free_info+0x3b/0x60 [ 316.189931][ T7260] ? __pfx_bch2_fs_open+0x10/0x10 [ 316.194991][ T7260] ? bch2_mount+0x46e/0x1230 [ 316.199728][ T7260] ? kasan_quarantine_put+0x10a/0x240 [ 316.205143][ T7260] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.210393][ T7260] bch2_mount+0xe2c/0x1230 [ 316.214847][ T7260] ? __pfx_bch2_mount+0x10/0x10 [ 316.219749][ T7260] ? cred_has_capability.isra.0+0x192/0x2f0 [ 316.225675][ T7260] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 316.232042][ T7260] ? rcu_is_watching+0x12/0xc0 [ 316.236944][ T7260] ? vfs_parse_fs_string+0xfb/0x150 [ 316.242236][ T7260] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 316.247932][ T7260] ? cap_capable+0x1cf/0x240 [ 316.252672][ T7260] ? __pfx_bch2_mount+0x10/0x10 [ 316.257731][ T7260] legacy_get_tree+0x109/0x220 [ 316.262737][ T7260] vfs_get_tree+0x8f/0x380 [ 316.267224][ T7260] path_mount+0x14e6/0x1f20 [ 316.271771][ T7260] ? kmem_cache_free+0x12f/0x3a0 [ 316.276767][ T7260] ? __pfx_path_mount+0x10/0x10 [ 316.281761][ T7260] ? putname+0x12e/0x170 [ 316.286064][ T7260] __x64_sys_mount+0x297/0x320 [ 316.290897][ T7260] ? __pfx___x64_sys_mount+0x10/0x10 [ 316.296258][ T7260] do_syscall_64+0xcd/0x250 [ 316.300822][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.306766][ T7260] RIP: 0033:0x7f44ed87e7aa [ 316.311203][ T7260] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 316.330848][ T7260] RSP: 002b:00007f44ee522ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 316.339331][ T7260] RAX: ffffffffffffffda RBX: 00007f44ee522f80 RCX: 00007f44ed87e7aa [ 316.347334][ T7260] RDX: 0000000020005d80 RSI: 0000000020005dc0 RDI: 00007f44ee522f40 [ 316.355350][ T7260] RBP: 0000000020005d80 R08: 00007f44ee522f80 R09: 0000000000000480 [ 316.363368][ T7260] R10: 0000000000000480 R11: 0000000000000202 R12: 0000000020005dc0 [ 316.371365][ T7260] R13: 00007f44ee522f40 R14: 0000000000005e05 R15: 0000000020000040 [ 316.379463][ T7260] [ 316.394865][ T7263] loop1: detected capacity change from 0 to 32768 [ 316.394890][ T7285] loop3: detected capacity change from 0 to 2048 [ 316.442337][ T7260] Mem-Info: [ 316.462696][ T7260] active_anon:31827 inactive_anon:0 isolated_anon:0 [ 316.462696][ T7260] active_file:0 inactive_file:46854 isolated_file:0 [ 316.462696][ T7260] unevictable:2800 dirty:21 writeback:0 [ 316.462696][ T7260] slab_reclaimable:10607 slab_unreclaimable:98700 [ 316.462696][ T7260] mapped:19771 shmem:10428 pagetables:819 [ 316.462696][ T7260] sec_pagetables:0 bounce:0 [ 316.462696][ T7260] kernel_misc_reclaimable:0 [ 316.462696][ T7260] free:1366427 free_pcp:390 free_cma:0 [ 316.484253][ T7285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.515898][ T7263] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got c940d40a should be 29d2fb78 [ 316.661031][ T7260] Node 0 active_anon:124268kB inactive_anon:0kB active_file:0kB inactive_file:187788kB unevictable:9724kB isolated(anon):0kB isolated(file):0kB mapped:77084kB dirty:80kB writeback:0kB shmem:40316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10776kB pagetables:3232kB sec_pagetables:0kB all_unreclaimable? no [ 317.020181][ T7263] workqueue: Failed to create a rescuer kthread for wq "bcachefs_copygc": -EINTR [ 317.020691][ T7263] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 317.036019][ T7260] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 317.076805][ T7260] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.169892][ T7260] lowmem_reserve[]: 0 2565 2567 0 0 [ 317.215659][ T7260] Node 0 DMA32 free:1494436kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:125640kB inactive_anon:0kB active_file:0kB inactive_file:185672kB unevictable:1624kB writepending:80kB present:3129332kB managed:2654756kB mlocked:88kB bounce:0kB free_pcp:8504kB local_pcp:940kB free_cma:0kB [ 317.283931][ T7260] lowmem_reserve[]: 0 0 1 0 0 [ 317.320456][ T7260] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 317.659602][ T7260] lowmem_reserve[]: 0 0 0 0 0 [ 317.684502][ T7260] Node 1 Normal free:3954568kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.807311][ T7260] lowmem_reserve[]: 0 0 0 0 0 [ 317.816151][ T7260] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.833427][ T7260] Node 0 DMA32: 923*4kB (UME) 822*8kB (UME) 315*16kB (UME) 172*32kB (UME) 168*64kB (UME) 205*128kB (UME) 151*256kB (UM) 98*512kB (UM) 59*1024kB (UME) 8*2048kB (UME) 312*4096kB (UM) = 1501388kB [ 317.854134][ T7260] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 317.867169][ T7260] Node 1 Normal: 5*4kB (UM) 3*8kB (UM) 4*16kB (UM) 11*32kB (UM) 9*64kB (U) 1*128kB (U) 5*256kB (UM) 3*512kB (UM) 2*1024kB (U) 4*2048kB (UM) 962*4096kB (M) = 3954572kB [ 317.900274][ T7260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.910809][ T7260] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 317.924464][ T7260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.949269][ T7260] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.980556][ T7260] 55874 total pagecache pages [ 317.985465][ T7260] 0 pages in swap cache [ 318.020868][ T29] audit: type=1804 audit(1719020387.013:325): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/51/file0" dev="sda1" ino=1941 res=1 errno=0 [ 318.024617][ T7260] Free swap = 124996kB [ 318.111309][ T7260] Total swap = 124996kB [ 318.135491][ T7260] 2097051 pages RAM [ 318.140337][ T7260] 0 pages HighMem/MovableOnly [ 318.160284][ T7260] 401768 pages reserved [ 318.192781][ T7260] 0 pages cma reserved [ 318.210727][ T7260] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 318.968133][ T29] audit: type=1800 audit(1719020387.953:326): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 320.048579][ T7314] loop3: detected capacity change from 0 to 128 [ 320.116815][ T7314] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.388192][ T7314] ext4 filesystem being mounted at /root/syzkaller-testdir2364248209/syzkaller.1n3nNe/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 320.650063][ T7319] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.682012][ T7319] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 321.079183][ T7322] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 321.217622][ T5276] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.723984][ T7331] loop2: detected capacity change from 0 to 512 [ 321.878568][ T7331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.977755][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 321.997957][ T7331] ext4 filesystem being mounted at /root/syzkaller-testdir2462023525/syzkaller.NkWT1A/42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.410812][ T5740] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.523800][ T7325] loop1: detected capacity change from 0 to 32768 [ 322.582385][ T7325] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got c940d40a should be 29d2fb78 [ 322.733573][ T29] audit: type=1804 audit(1719020391.723:327): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir809019028/syzkaller.Ir5BsK/74/file0" dev="sda1" ino=1957 res=1 errno=0 [ 323.049007][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.087189][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.780605][ T7325] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 323.792755][ T7325] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 323.937913][ T7327] loop0: detected capacity change from 0 to 32768 [ 323.938598][ T7325] bcachefs (loop1): alloc_read... [ 323.958569][ T7327] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got c940d40a should be 29d2fb78 [ 323.975759][ T7325] done [ 323.979761][ T7325] bcachefs (loop1): stripes_read... done [ 323.998758][ T7325] bcachefs (loop1): snapshots_read... done [ 324.049916][ T7325] bcachefs (loop1): journal_replay... done [ 324.060679][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 324.072757][ T7325] bcachefs (loop1): resume_logged_ops... done [ 324.073616][ T29] audit: type=1400 audit(1719020393.053:328): avc: denied { ioctl } for pid=7366 comm="syz-executor.3" path="socket:[14484]" dev="sockfs" ino=14484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 324.082958][ T7325] bcachefs (loop1): going read-write [ 324.128340][ T7325] bcachefs (loop1): done starting filesystem [ 324.166282][ T7377] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.4'. [ 324.464585][ T29] audit: type=1400 audit(1719020393.173:329): avc: denied { getopt } for pid=7366 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.602587][ T7327] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 324.627917][ T7327] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 324.695468][ T5108] bcachefs (loop1): shutting down [ 324.722990][ T5108] bcachefs (loop1): going read-only [ 324.755310][ T5108] bcachefs (loop1): finished waiting for writes to stop [ 324.819197][ T5108] bcachefs (loop1): flushing journal and stopping allocators, journal seq 7 [ 324.866663][ T5108] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 7 [ 324.951890][ T5108] bcachefs (loop1): shutdown complete, journal seq 8 [ 324.973939][ T5108] bcachefs (loop1): marking filesystem clean [ 325.261335][ T5108] bcachefs (loop1): shutdown complete [ 325.556644][ T7400] fuse: Unknown parameter 'grou00000000000000000000' [ 325.596554][ T29] audit: type=1804 audit(1719020394.583:330): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/58/file0" dev="sda1" ino=1959 res=1 errno=0 [ 326.775508][ T29] audit: type=1400 audit(1719020395.763:331): avc: denied { mount } for pid=7411 comm="syz-executor.0" name="/" dev="ramfs" ino=14546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 326.934803][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.229554][ T51] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 327.449254][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.683218][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.697497][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.710693][ T51] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 327.719903][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.761096][ T51] usb 3-1: config 0 descriptor?? [ 328.273398][ T51] wacom 0003:056A:0043.0001: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 328.312234][ T29] audit: type=1400 audit(1719020397.303:332): avc: denied { unmount } for pid=5109 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 328.401375][ T51] wacom 0003:056A:0043.0001: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 328.471660][ T51] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0001/input/input5 [ 328.532664][ T7443] fuse: Unknown parameter 'grou00000000000000000000' [ 328.549344][ T29] audit: type=1400 audit(1719020397.533:333): avc: denied { read } for pid=4520 comm="acpid" name="mouse1" dev="devtmpfs" ino=2472 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.633255][ T29] audit: type=1400 audit(1719020397.533:334): avc: denied { open } for pid=4520 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2472 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.664182][ T51] usb 3-1: USB disconnect, device number 3 [ 328.720918][ T29] audit: type=1804 audit(1719020397.543:335): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2020697336/syzkaller.YMhe4j/84/file0" dev="sda1" ino=1949 res=1 errno=0 [ 328.772745][ T29] audit: type=1400 audit(1719020397.613:336): avc: denied { ioctl } for pid=4520 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2472 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.789292][ T7446] loop3: detected capacity change from 0 to 2048 [ 328.891419][ T7446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.151739][ T7448] loop0: detected capacity change from 0 to 4096 [ 329.271391][ T7451] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.284804][ T29] audit: type=1400 audit(1719020399.273:337): avc: denied { connect } for pid=7447 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.390007][ T29] audit: type=1400 audit(1719020399.333:338): avc: denied { read write } for pid=7447 comm="syz-executor.0" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 330.471375][ T29] audit: type=1400 audit(1719020399.343:339): avc: denied { open } for pid=7447 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 330.568078][ T29] audit: type=1400 audit(1719020399.363:340): avc: denied { ioctl } for pid=7447 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=695 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 330.676477][ T29] audit: type=1804 audit(1719020399.433:341): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2020697336/syzkaller.YMhe4j/85/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 330.738841][ T7459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.824511][ T29] audit: type=1400 audit(1719020399.813:342): avc: denied { create } for pid=7466 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 331.276756][ T29] audit: type=1400 audit(1719020400.263:343): avc: denied { ioctl } for pid=7466 comm="syz-executor.2" path="socket:[15726]" dev="sockfs" ino=15726 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 331.784550][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.029137][ T7474] loop3: detected capacity change from 0 to 2048 [ 332.073459][ T7476] loop2: detected capacity change from 0 to 2048 [ 332.102590][ T7479] fuse: Unknown parameter 'grou00000000000000000000' [ 332.154558][ T7474] loop3: p1 p2 p3 [ 332.158683][ T7476] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 332.171474][ T29] audit: type=1804 audit(1719020401.113:344): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/76/file0" dev="sda1" ino=1954 res=1 errno=0 [ 332.221778][ T7476] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh [ 332.241643][ T7476] UDF-fs: Scanning with blocksize 512 failed [ 332.400603][ T7476] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 332.408563][ T7476] UDF-fs: Scanning with blocksize 1024 failed [ 332.420886][ T7476] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 332.431366][ T7476] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 332.439131][ T7476] UDF-fs: Scanning with blocksize 2048 failed [ 332.456454][ T7476] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 332.492589][ T7476] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 332.534740][ T7476] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 332.559115][ T7476] UDF-fs: Scanning with blocksize 4096 failed [ 332.586756][ T7476] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 334.639743][ T7507] loop0: detected capacity change from 0 to 4096 [ 334.721453][ T7512] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.898142][ T7496] ALSA: mixer_oss: invalid OSS volume '' [ 335.012601][ T7509] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 335.163687][ T29] audit: type=1804 audit(1719020404.153:345): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2020697336/syzkaller.YMhe4j/88/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 335.578261][ T29] audit: type=1400 audit(1719020404.573:346): avc: denied { bind } for pid=7514 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.678111][ T29] audit: type=1400 audit(1719020404.613:347): avc: denied { setopt } for pid=7514 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.698235][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 340.243214][ T29] audit: type=1400 audit(1719020409.233:348): avc: denied { create } for pid=7521 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 340.322022][ T7526] fuse: Unknown parameter 'group_i00000000000000000000' [ 340.374129][ T29] audit: type=1804 audit(1719020409.363:349): pid=7526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/54/file0" dev="sda1" ino=1951 res=1 errno=0 [ 340.469805][ T7529] loop1: detected capacity change from 0 to 2048 [ 340.606514][ T7529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.751298][ T7529] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 340.824166][ T29] audit: type=1400 audit(1719020409.813:350): avc: denied { connect } for pid=7537 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.855807][ T7529] EXT4-fs (loop1): Remounting filesystem read-only [ 340.889009][ T7529] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 340.916261][ T29] audit: type=1400 audit(1719020409.883:351): avc: denied { write } for pid=7537 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.220039][ T5108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.238207][ T29] audit: type=1400 audit(1719020409.903:352): avc: denied { read } for pid=7537 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.751464][ T29] audit: type=1400 audit(1719020410.743:353): avc: denied { write } for pid=7555 comm="syz-executor.2" name="ip_vs" dev="proc" ino=4026533139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 341.899344][ T7558] loop1: detected capacity change from 0 to 512 [ 342.014144][ T7560] loop3: detected capacity change from 0 to 2364 [ 342.032137][ T7558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.056481][ T7558] ext4 filesystem being mounted at /root/syzkaller-testdir3256756536/syzkaller.SDx8Fn/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.936232][ T7540] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 345.103599][ T5108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.143554][ T7560] ISOFS: Unable to identify CD-ROM format. [ 345.327761][ T29] audit: type=1804 audit(1719020414.323:354): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/58/file1" dev="sda1" ino=1946 res=1 errno=0 [ 345.687938][ T5111] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 346.417038][ T29] audit: type=1400 audit(1719020415.403:355): avc: denied { set_context_mgr } for pid=7572 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 346.884891][ T29] audit: type=1804 audit(1719020415.863:356): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir809019028/syzkaller.Ir5BsK/86/bus" dev="sda1" ino=1966 res=1 errno=0 [ 346.978630][ T7584] fuse: Unknown parameter 'group_i00000000000000000000' [ 347.075958][ T29] audit: type=1804 audit(1719020416.063:357): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/59/file0" dev="sda1" ino=1957 res=1 errno=0 [ 347.166989][ T7592] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 347.184118][ T29] audit: type=1400 audit(1719020416.173:358): avc: denied { setopt } for pid=7588 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.301105][ T29] audit: type=1400 audit(1719020416.293:359): avc: denied { bind } for pid=7588 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.383621][ T29] audit: type=1400 audit(1719020416.293:360): avc: denied { name_bind } for pid=7588 comm="syz-executor.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 347.460724][ T29] audit: type=1400 audit(1719020416.293:361): avc: denied { node_bind } for pid=7588 comm="syz-executor.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 347.505174][ T7600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.533388][ T29] audit: type=1400 audit(1719020416.333:362): avc: denied { write } for pid=7588 comm="syz-executor.3" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.614964][ T29] audit: type=1400 audit(1719020416.333:363): avc: denied { connect } for pid=7588 comm="syz-executor.3" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.927933][ T29] audit: type=1400 audit(1719020416.333:364): avc: denied { name_connect } for pid=7588 comm="syz-executor.3" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 348.404324][ T7606] loop3: detected capacity change from 0 to 512 [ 348.744514][ T7606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.878439][ T7606] ext4 filesystem being mounted at /root/syzkaller-testdir2364248209/syzkaller.1n3nNe/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.291980][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 350.501530][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 350.523455][ T54] Bluetooth: hci3: hardware error 0x00 [ 352.695777][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 353.699096][ T7612] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 353.828476][ T5276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.109491][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 354.109518][ T29] audit: type=1400 audit(1719020423.103:366): avc: denied { bind } for pid=7620 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.734663][ T29] audit: type=1804 audit(1719020423.513:367): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir809019028/syzkaller.Ir5BsK/91/file0" dev="sda1" ino=1965 res=1 errno=0 [ 356.905653][ T5165] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 357.189345][ T5165] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 357.215879][ T5165] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.270020][ T5165] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 357.299286][ T5165] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 357.324067][ T5165] usb 4-1: Manufacturer: syz [ 357.342392][ T5165] usb 4-1: config 0 descriptor?? [ 357.351203][ T7646] fuse: Bad value for 'fd' [ 357.365081][ T29] audit: type=1804 audit(1719020426.353:368): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir809019028/syzkaller.Ir5BsK/92/file0" dev="sda1" ino=1954 res=1 errno=0 [ 357.419884][ T5165] igorplugusb 4-1:0.0: incorrect number of endpoints [ 357.599205][ T7652] loop1: detected capacity change from 0 to 8 [ 357.659780][ T7652] unable to read xattr id index table [ 357.770644][ T5160] usb 4-1: USB disconnect, device number 2 [ 357.915330][ T29] audit: type=1400 audit(1719020426.903:369): avc: denied { read write } for pid=7658 comm="syz-executor.1" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 357.998368][ T29] audit: type=1400 audit(1719020426.903:370): avc: denied { open } for pid=7658 comm="syz-executor.1" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 358.093730][ T29] audit: type=1400 audit(1719020426.943:371): avc: denied { create } for pid=7657 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 358.144286][ T29] audit: type=1400 audit(1719020427.043:372): avc: denied { accept } for pid=7658 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 358.180563][ T29] audit: type=1400 audit(1719020427.113:373): avc: denied { create } for pid=7658 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 358.223207][ T29] audit: type=1400 audit(1719020427.123:374): avc: denied { bind } for pid=7658 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 358.350484][ T29] audit: type=1800 audit(1719020427.333:375): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 359.250864][ T1063] tipc: Subscription rejected, illegal request [ 359.303845][ T7682] fuse: Bad value for 'fd' [ 359.366223][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 359.366250][ T29] audit: type=1804 audit(1719020428.333:379): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir809019028/syzkaller.Ir5BsK/95/file0" dev="sda1" ino=1966 res=1 errno=0 [ 359.659660][ T7685] loop2: detected capacity change from 0 to 4096 [ 359.788783][ T7691] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.052053][ T29] audit: type=1400 audit(1719020429.033:380): avc: denied { read write } for pid=7686 comm="syz-executor.1" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 360.145819][ T29] audit: type=1400 audit(1719020429.033:381): avc: denied { open } for pid=7686 comm="syz-executor.1" path="/dev/raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 360.265761][ T29] audit: type=1400 audit(1719020429.033:382): avc: denied { ioctl } for pid=7686 comm="syz-executor.1" path="/dev/raw-gadget" dev="devtmpfs" ino=733 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 360.311495][ T5160] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 360.426130][ T7677] loop3: detected capacity change from 0 to 32768 [ 360.442759][ T29] audit: type=1804 audit(1719020429.223:383): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2462023525/syzkaller.NkWT1A/64/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 360.515426][ T7677] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7677) [ 360.583602][ T5160] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 360.592692][ T5160] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.612427][ T7677] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 360.647140][ T5160] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 360.666150][ T7677] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 360.685052][ T5160] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 360.698934][ T7677] BTRFS info (device loop3): using free-space-tree [ 360.708315][ T5160] usb 2-1: Manufacturer: syz [ 360.754213][ T5160] usb 2-1: config 0 descriptor?? [ 360.788072][ T5160] igorplugusb 2-1:0.0: incorrect number of endpoints [ 361.107696][ T7717] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.167657][ T29] audit: type=1804 audit(1719020430.153:384): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/77/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 361.263562][ T29] audit: type=1804 audit(1719020430.253:385): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2364248209/syzkaller.1n3nNe/77/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 361.374790][ T29] audit: type=1400 audit(1719020430.333:386): avc: denied { accept } for pid=7675 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 362.699304][ T51] usb 2-1: USB disconnect, device number 2 [ 364.050908][ T5276] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 366.312988][ T7770] loop3: detected capacity change from 0 to 256 [ 366.441355][ T29] audit: type=1400 audit(1719020435.403:387): avc: denied { mount } for pid=7769 comm="syz-executor.3" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 366.527733][ T29] audit: type=1400 audit(1719020435.473:388): avc: denied { execute } for pid=7771 comm="syz-executor.2" path="/dev/audio1" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 367.507560][ T29] audit: type=1400 audit(1719020436.503:389): avc: denied { unmount } for pid=5276 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 368.188166][ T7773] loop0: detected capacity change from 0 to 32768 [ 368.227005][ T7773] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7773) [ 369.118348][ T7773] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 369.185783][ T7773] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 369.233247][ T7773] BTRFS info (device loop0): using free-space-tree [ 369.252636][ T29] audit: type=1400 audit(1719020438.233:390): avc: denied { name_bind } for pid=7793 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 369.336834][ T7773] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 369.338059][ T7773] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 369.378726][ T7773] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 369.438618][ T7773] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 369.466985][ T7773] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 369.666245][ T7773] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 369.790849][ T7773] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 370.160930][ T7773] BTRFS error (device loop0): open_ctree failed [ 370.410854][ T29] audit: type=1400 audit(1719020439.393:391): avc: denied { bind } for pid=7816 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.510178][ T29] audit: type=1400 audit(1719020439.423:392): avc: denied { listen } for pid=7816 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.540726][ T29] audit: type=1400 audit(1719020439.423:393): avc: denied { connect } for pid=7816 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.564826][ T7819] loop1: detected capacity change from 0 to 512 [ 370.593378][ T7819] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 370.714522][ T7818] Bluetooth: MGMT ver 1.22 [ 370.721791][ T29] audit: type=1400 audit(1719020439.703:394): avc: denied { bind } for pid=7816 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.733713][ T7821] loop3: detected capacity change from 0 to 512 [ 370.891962][ T7821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.913414][ T7821] ext4 filesystem being mounted at /root/syzkaller-testdir2364248209/syzkaller.1n3nNe/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.152728][ T29] audit: type=1400 audit(1719020440.143:395): avc: denied { unlink } for pid=7820 comm="syz-executor.3" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.350304][ T5276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.082115][ T29] audit: type=1400 audit(1719020450.043:396): avc: denied { write } for pid=7911 comm="syz-executor.1" name="001" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 382.719666][ T29] audit: type=1400 audit(1719020451.713:397): avc: denied { bind } for pid=7926 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 382.788581][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 384.423313][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.433994][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.935842][ T29] audit: type=1400 audit(1719020453.923:398): avc: denied { mount } for pid=7931 comm="syz-executor.4" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 385.067590][ T7937] loop0: detected capacity change from 0 to 1024 [ 385.082680][ T7938] loop3: detected capacity change from 0 to 164 [ 385.128190][ T7937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.159503][ T7937] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 385.192378][ T7937] System zones: 0-1, 3-36 [ 385.222241][ T7937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.305848][ T7937] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 385.417430][ T5109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.432164][ T7952] loop3: detected capacity change from 0 to 512 [ 385.468464][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 385.537697][ T7952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.562771][ T7952] ext4 filesystem being mounted at /root/syzkaller-testdir2364248209/syzkaller.1n3nNe/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.642437][ T7960] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 385.687415][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 385.722849][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.760249][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.797458][ T8] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 385.812687][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.852479][ T8] usb 2-1: config 0 descriptor?? [ 385.919108][ T8] usbhid 2-1:0.0: can't add hid device: -22 [ 385.930264][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 385.948021][ T5276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.091712][ T8] usb 2-1: USB disconnect, device number 3 [ 386.155443][ T29] audit: type=1400 audit(1719020455.143:399): avc: denied { name_bind } for pid=7965 comm="syz-executor.4" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 386.182538][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 387.395943][ T29] audit: type=1400 audit(1719020456.323:400): avc: denied { getopt } for pid=7971 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 387.977107][ T29] audit: type=1400 audit(1719020456.963:401): avc: denied { name_connect } for pid=7988 comm="syz-executor.4" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 388.789896][ T8011] syzkaller0: entered promiscuous mode [ 388.805799][ T8011] syzkaller0: entered allmulticast mode [ 388.843885][ T29] audit: type=1400 audit(1719020457.833:402): avc: denied { relabelfrom } for pid=8009 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 388.909142][ T29] audit: type=1400 audit(1719020457.843:403): avc: denied { relabelto } for pid=8009 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 390.987544][ T8042] syz-executor.2[8042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.987832][ T8042] syz-executor.2[8042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.448962][ T29] audit: type=1400 audit(1719020460.433:404): avc: denied { create } for pid=8053 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 391.501333][ T29] audit: type=1400 audit(1719020460.493:405): avc: denied { setopt } for pid=8053 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 391.527460][ T29] audit: type=1400 audit(1719020460.493:406): avc: denied { connect } for pid=8053 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 391.557083][ T29] audit: type=1400 audit(1719020460.493:407): avc: denied { name_connect } for pid=8053 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 392.445770][ T8058] hub 9-0:1.0: USB hub found [ 392.459214][ T8058] hub 9-0:1.0: 8 ports detected [ 392.606023][ T8059] loop2: detected capacity change from 0 to 256 [ 395.542999][ T8045] bridge0: port 3(hsr_slave_1) entered blocking state [ 395.550449][ T8045] bridge0: port 3(hsr_slave_1) entered disabled state [ 395.557938][ T8045] hsr_slave_1: entered allmulticast mode [ 395.571248][ T8045] hsr_slave_1: left allmulticast mode [ 395.990643][ T29] audit: type=1400 audit(1719020464.983:408): avc: denied { create } for pid=8065 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 396.087580][ T29] audit: type=1400 audit(1719020465.003:409): avc: denied { setopt } for pid=8065 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 397.330418][ T29] audit: type=1400 audit(1719020466.323:410): avc: denied { execute } for pid=8085 comm="syz-executor.1" path=2F6D656D66643AC0873A2A18C16BA7875BA06F38AA4BA5D30B86CA3C7FFD368D7DD8F247B8EA65299086E39608E0FAB1D84EB257CB8D7D336C6D38A537C9202864656C6574656429 dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.370418][ T8123] hub 9-0:1.0: USB hub found [ 401.383827][ T8123] hub 9-0:1.0: 8 ports detected [ 401.464375][ T8126] loop0: detected capacity change from 0 to 256 [ 402.796728][ T8132] pim6reg1: entered promiscuous mode [ 402.833555][ T8132] pim6reg1: entered allmulticast mode [ 404.873408][ T29] audit: type=1400 audit(1719020473.773:411): avc: denied { search } for pid=4517 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.406813][ T8160] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 405.411296][ T8159] loop0: detected capacity change from 0 to 164 [ 405.454140][ T8160] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 405.480256][ T8160] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 405.863229][ T8168] loop2: detected capacity change from 0 to 512 [ 405.973230][ T8168] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 406.169615][ T8168] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 406.844955][ T8168] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.199604][ T5740] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 407.379973][ T8187] loop1: detected capacity change from 0 to 2048 [ 407.688447][ T8187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.021277][ T5108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.543052][ T29] audit: type=1400 audit(1719020478.533:412): avc: denied { wake_alarm } for pid=8202 comm="syz-executor.2" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 410.510676][ T8210] loop3: detected capacity change from 0 to 164 [ 412.356029][ T8234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8234 comm=syz-executor.2 [ 412.397341][ T29] audit: type=1400 audit(1719020481.393:413): avc: denied { setopt } for pid=8233 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 412.477586][ T29] audit: type=1400 audit(1719020481.413:414): avc: denied { create } for pid=8232 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 412.560590][ T29] audit: type=1400 audit(1719020481.413:415): avc: denied { write } for pid=8232 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 415.597333][ T29] audit: type=1400 audit(1719020482.333:416): avc: denied { bind } for pid=8241 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 524.005483][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 524.012520][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1063/1:b..l P35/1:b..l [ 524.022255][ C0] rcu: (detected by 0, t=10502 jiffies, g=39901, q=98 ncpus=2) [ 524.029941][ C0] task:kworker/u8:2 state:R running task stack:23928 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 524.043723][ C0] Workqueue: bat_events batadv_mcast_mla_update [ 524.050049][ C0] Call Trace: [ 524.054050][ C0] [ 524.057014][ C0] __schedule+0xf15/0x5d00 [ 524.061457][ C0] ? __pfx_mark_lock+0x10/0x10 [ 524.066258][ C0] ? __pfx_mark_lock+0x10/0x10 [ 524.071063][ C0] ? hlock_class+0x4e/0x130 [ 524.075597][ C0] ? __pfx___schedule+0x10/0x10 [ 524.080502][ C0] ? hlock_class+0x4e/0x130 [ 524.085080][ C0] ? __pfx_mark_lock+0x10/0x10 [ 524.089889][ C0] ? mark_held_locks+0x9f/0xe0 [ 524.094699][ C0] preempt_schedule_irq+0x51/0x90 [ 524.099764][ C0] irqentry_exit+0x36/0x90 [ 524.104229][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.110291][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 524.116422][ C0] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 14 f5 75 7e 65 8b 05 15 f5 75 7e a9 00 01 [ 524.136051][ C0] RSP: 0018:ffffc90000ab7718 EFLAGS: 00000202 [ 524.142159][ C0] RAX: 0000000000000000 RBX: ffffc90000ab77a0 RCX: ffffffff813cd746 [ 524.150156][ C0] RDX: ffff8880182cbc00 RSI: 0000000000000000 RDI: 0000000000000005 [ 524.158254][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 524.166255][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: ffffc90000ab77a0 [ 524.174251][ C0] R13: ffffffff81798350 R14: ffffc90000ab7860 R15: ffff8880182cbc00 [ 524.182283][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 524.188472][ C0] ? unwind_next_frame+0x46/0x23a0 [ 524.193637][ C0] unwind_next_frame+0x6b/0x23a0 [ 524.198619][ C0] ? ret_from_fork+0x45/0x80 [ 524.203233][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 524.208210][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 524.214392][ C0] arch_stack_walk+0x100/0x170 [ 524.219177][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 524.224247][ C0] stack_trace_save+0x95/0xd0 [ 524.228974][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 524.234403][ C0] ? __pfx_mark_lock+0x10/0x10 [ 524.239237][ C0] kasan_save_stack+0x33/0x60 [ 524.243981][ C0] ? kasan_save_stack+0x33/0x60 [ 524.248962][ C0] ? kasan_save_track+0x14/0x30 [ 524.253914][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 524.258718][ C0] ? batadv_mcast_mla_update+0x1908/0x3200 [ 524.264558][ C0] ? process_one_work+0x9fb/0x1b60 [ 524.269709][ C0] ? worker_thread+0x6c8/0xf70 [ 524.274487][ C0] ? kthread+0x2c1/0x3a0 [ 524.278778][ C0] ? ret_from_fork+0x45/0x80 [ 524.283419][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 524.288425][ C0] kasan_save_track+0x14/0x30 [ 524.293132][ C0] __kasan_kmalloc+0xaa/0xb0 [ 524.297748][ C0] batadv_mcast_mla_update+0x1908/0x3200 [ 524.303412][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 524.309447][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 524.314527][ C0] ? __pfx_lock_release+0x10/0x10 [ 524.319581][ C0] process_one_work+0x9fb/0x1b60 [ 524.324539][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 524.330565][ C0] ? __pfx_process_one_work+0x10/0x10 [ 524.335960][ C0] ? assign_work+0x1a0/0x250 [ 524.340581][ C0] worker_thread+0x6c8/0xf70 [ 524.345193][ C0] ? __kthread_parkme+0x148/0x220 [ 524.350247][ C0] ? __pfx_worker_thread+0x10/0x10 [ 524.355382][ C0] kthread+0x2c1/0x3a0 [ 524.359505][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.364747][ C0] ? __pfx_kthread+0x10/0x10 [ 524.369360][ C0] ret_from_fork+0x45/0x80 [ 524.373817][ C0] ? __pfx_kthread+0x10/0x10 [ 524.378456][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.383276][ C0] [ 524.386311][ C0] task:kworker/u8:8 state:R running task stack:24688 pid:1063 tgid:1063 ppid:2 flags:0x00004000 [ 524.398066][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 524.404362][ C0] Call Trace: [ 524.407660][ C0] [ 524.410604][ C0] __schedule+0xf15/0x5d00 [ 524.415145][ C0] ? __pfx_mark_lock+0x10/0x10 [ 524.419962][ C0] ? __pfx___schedule+0x10/0x10 [ 524.424837][ C0] ? mark_held_locks+0x9f/0xe0 [ 524.429631][ C0] preempt_schedule_irq+0x51/0x90 [ 524.434702][ C0] irqentry_exit+0x36/0x90 [ 524.439145][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 524.444642][ C0] RIP: 0010:ieee80211_sta_get_rates+0x38b/0x650 [ 524.450940][ C0] Code: 49 8d 7e 04 48 89 fa 48 c1 ea 03 42 0f b6 0c 2a 48 89 fa 83 e2 07 83 c2 01 38 ca 7c 08 84 c9 0f 85 ff 01 00 00 45 0f b7 76 04 <44> 8b 7c 24 20 44 89 f7 44 89 fe e8 55 d9 2a f7 45 39 fe 0f 85 3a [ 524.470666][ C0] RSP: 0018:ffffc900042a7958 EFLAGS: 00000246 [ 524.476754][ C0] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000000000 [ 524.484744][ C0] RDX: 0000000000000001 RSI: ffffffff8a630491 RDI: ffff88807a9c5c70 [ 524.492759][ C0] RBP: 0000000000000007 R08: 0000000000000004 R09: 0000000000000000 [ 524.500762][ C0] R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000000 [ 524.508770][ C0] R13: dffffc0000000000 R14: 00000000000000b4 R15: 0000000000000000 [ 524.516942][ C0] ? ieee80211_sta_get_rates+0x361/0x650 [ 524.522606][ C0] ? ieee80211_sta_get_rates+0x361/0x650 [ 524.528396][ C0] ieee80211_ibss_rx_queued_mgmt+0x1039/0x2f40 [ 524.534588][ C0] ? hlock_class+0x4e/0x130 [ 524.539120][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 524.545667][ C0] ? lock_acquire+0x1b1/0x560 [ 524.550468][ C0] ? find_held_lock+0x2d/0x110 [ 524.555257][ C0] ? find_held_lock+0x2d/0x110 [ 524.560081][ C0] ? kcov_remote_start+0x372/0x6e0 [ 524.565219][ C0] ? mark_held_locks+0x9f/0xe0 [ 524.570104][ C0] ? kcov_remote_start+0x3d1/0x6e0 [ 524.575236][ C0] ieee80211_iface_work+0xc07/0xf00 [ 524.580471][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.585692][ C0] cfg80211_wiphy_work+0x255/0x330 [ 524.590855][ C0] process_one_work+0x9fb/0x1b60 [ 524.595815][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 524.601343][ C0] ? __pfx_process_one_work+0x10/0x10 [ 524.606753][ C0] ? assign_work+0x1a0/0x250 [ 524.611464][ C0] worker_thread+0x6c8/0xf70 [ 524.616078][ C0] ? __kthread_parkme+0x148/0x220 [ 524.621215][ C0] ? __pfx_worker_thread+0x10/0x10 [ 524.626389][ C0] kthread+0x2c1/0x3a0 [ 524.630571][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.635783][ C0] ? __pfx_kthread+0x10/0x10 [ 524.640677][ C0] ret_from_fork+0x45/0x80 [ 524.645137][ C0] ? __pfx_kthread+0x10/0x10 [ 524.649752][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.654545][ C0] [ 524.657575][ C0] rcu: rcu_preempt kthread starved for 10426 jiffies! g39901 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 524.668910][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 524.679064][ C0] rcu: RCU grace-period kthread stack dump: [ 524.684973][ C0] task:rcu_preempt state:R running task stack:27312 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 524.696751][ C0] Call Trace: [ 524.700039][ C0] [ 524.703086][ C0] __schedule+0xf15/0x5d00 [ 524.707529][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 524.712783][ C0] ? __pfx___schedule+0x10/0x10 [ 524.717673][ C0] ? schedule+0x298/0x350 [ 524.722019][ C0] ? __pfx_lock_release+0x10/0x10 [ 524.727071][ C0] ? __pfx___mod_timer+0x10/0x10 [ 524.732026][ C0] ? lock_acquire+0x1b1/0x560 [ 524.736753][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 524.742262][ C0] schedule+0xe7/0x350 [ 524.746394][ C0] schedule_timeout+0x136/0x2a0 [ 524.751333][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 524.756763][ C0] ? __pfx_process_timeout+0x10/0x10 [ 524.762093][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 524.767961][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 524.773452][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 524.778241][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 524.783572][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 524.789484][ C0] rcu_gp_kthread+0x271/0x380 [ 524.794226][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.799496][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 524.804727][ C0] ? __kthread_parkme+0x148/0x220 [ 524.809799][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.815055][ C0] kthread+0x2c1/0x3a0 [ 524.819270][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.824489][ C0] ? __pfx_kthread+0x10/0x10 [ 524.829127][ C0] ret_from_fork+0x45/0x80 [ 524.833586][ C0] ? __pfx_kthread+0x10/0x10 [ 524.838199][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.842989][ C0] [ 524.846045][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 524.852391][ C0] Sending NMI from CPU 0 to CPUs 1: [ 524.857625][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20