last executing test programs: 27.307511591s ago: executing program 0 (id=4466): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008ffff00b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) 26.278928277s ago: executing program 0 (id=4470): sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 26.047666594s ago: executing program 0 (id=4474): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x28, 0x18, 0x901, 0x0, 0x0, {0xa, 0xfc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) 25.918230252s ago: executing program 0 (id=4479): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, 0x0) 24.959037267s ago: executing program 0 (id=4482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 24.685762937s ago: executing program 0 (id=4486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) 4.083950425s ago: executing program 1 (id=4610): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x3a, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x7, 0x0, 0x1, [@typed={0x3}]}]}, 0x34}}, 0x0) 3.917354938s ago: executing program 1 (id=4613): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) 3.809011595s ago: executing program 1 (id=4615): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x2c0, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x4}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x144, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}]}, @NL80211_ATTR_REG_RULES={0x128, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x2c0}}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000002900)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}}, {{&(0x7f0000000500)=@caif, 0x80, 0x0}}], 0x2, 0x0) 3.705038681s ago: executing program 1 (id=4617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xe, 0x3, 0x4a}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3.338712243s ago: executing program 1 (id=4621): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&@\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x6c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3.141824648s ago: executing program 4 (id=4624): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.349782698s ago: executing program 1 (id=4626): syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x1200014, &(0x7f00000004c0)=ANY=[], 0x3, 0x119f4, &(0x7f00000234c0)="$eJzs2QtUT9/D7/tuKlIqohS5pIiKUKHci0KRa0VSdCNFSonKLRHpIkQpVJJIbinJNZUiQqFQobuKKLpwxv+/eZ7//u3nf/be/3POs8c4z/s1xnfMNeda67PmWmu2WnMsAQAAAADAfwkPdru3mvY3fLhjzTe/2Rku2wUkhP/eLv5nA+nfpdf/qR7iP5OYiPzfy7+Oi1MuswwLtxuahP48aR1/eX2MmLO89ur1ZvqpBpcr7eVMu/5nuX/G04h/rwt+ExQQcAx7/2ZPdn6/v7UJCggICAtK+wsIyAgKZcsI/iVidLuAgMDq35Xef1l5/dtY+7+V/kFi/117r79sx3j/r0389zg7rtL0ydnNOD9k6SijEf29Vvj/+yaC4v8wngQEpGz+ur/Qf5Bra+eorr52jbe8le+GDX3rkkRK9liqF8VXvF9TqbxvX6FQY/2EOU9e+G7sJiAg0P3372/+jFb5Pwf/Xc7/29/CP+Tr/U/Oa8j/4vlr/JO60u9S9Hcp8T/J+bN+8P/i9n8l8peyx//m/v+7/qN79v+lnv/Jx/vjz3lK/S4zfpcj/jdzhP/8BAWEBAVE/u1ZvE7w38eIwD/cN0EBQYFu//AcFRQQ+ntd6N/qAn+vC/x7XfAvdaG/1IW7/eW8/n7c3wNNWFDwv2//s91f2gf9bhf53T74H5/1/4GF/6Rd4Xcp/vsP9fufusBfF/4bif9h4d/O6+/+9Kv8/6Yv/xmE/uEZ9B+1/+mv3u+bIfG7TUJQ9n/Y59d/4M+6rHWBDvmu03dK/5N+CF4U/J0v+C/lT3JTvCoRqHFK/p/l2wj9zhf6l/ILP09U/CBefPWf5of8yRf+l/LF892CfRruqv3T69P85/qI/Ev590K8wvtMrzH763vTv+XH/skX/5fyP4tYFfzyTw37p/0f/ef6dP+X8i9apJt+H3th3z/NF/iT3+Nfyh8U+CA9YU+/k/80//af6yPxL+UP1bgYmBvoPnvQP8t/8idf8l/KL/+l3dKv4EHKPx2fU/9cH+l/KV/WQU1JevPWkf/s2Sno/5/9HxYA/v+l9+93rMDf9X91nvr/1D/MF45KC/63d76ev3+S/28e6C8E/2HuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4r2uV6ymxmTGGivoLJDwntz6cG2IwrErqSr/1Ir/Xi4kICPxtWVBYQOD9kdqCJ7FT91hcP5vrE+gzZLxYWvFkaeuTz6rrF4Ymbr3lHVvUf4pN950LzcpExgdn3ak402xqHXtRwXXMshdat64PC3CwPu5rlTNp9Ji6qwKJk43dE9afe9iaoXOzz8yT+1d1y1/ft7/Uw+BnW5Ifafe4Uigdefb5+4ZuX7/Paqkb23tUz47VEbmfx36rkCm7fi1mu/4K7aL5d1vqNeWjJfu0vg7Lm9X4fuPDQwdv9jukIzLC/sbCch3jyUZy2ju/qPWRt74j+GVF7k+TeXo6D85JfcmJcZoqISPqVhi2NGTH1829VM/PrywsPTMta7yGV6D8R/XxaYoiP5+cXZVjajVuadHqt/tlROIXjPTxVp9iO9JheC+p8D5v9AMOb5wb0WEz757T0PJ480eJp3sV75zYLBru93Sw2NeMdXubnjwutBx31VIj3OPZ2baM3u5GBd8/LfWPcrNq33y2t7fvXKGky+MV1tXIx16V6lccd+tm8IteY92z27fJNCjfifU7vsbGflpg61mDHC+5vJKnwhuCh09s2Z2QFTtyrJd36Ry//d4G2YUyVjMVRPN/bHmy4fzSDZXhI9tcxYxyd75fqFcSYiUxfp3X5scOPz/Gumdp2zoVKsj9fNfUMnW5daZEi4/MjQmSnWldDzcaXxq8oPG8suXnPmKCWd7+OuqfJje/mLZlmn9Z7z5zR3Uav13o6DtCwEa5WPTWD+mt6/f8GCcsLj9I9mTBZNPEy0lqidaa3desX+1e6ftYo+66WtOLJrVPw95kRJw5qJa5XGllwL1182/c+xFqqVa3xEhi9dZfB79vD/3kafri/cVf+6VuBtStVLSqfZD9XH1TTx2ndXu6TR/hIjo1dMRzh++7Am33rjV5uc5wQ2Afl6sTT2U8GJR3r7zfzwHbj1dt0lxxsrtG1KXxfeeLnlt90eCO1BXzfuW1Yc+lv8QavXJYNr6kStukNCHYeU6OjFGN1rQflz7O8iyqEd6lmW77OGGIeVnumAtx3t/S/T72T97RsWTkhsMuBj20GsRlhcPtUrQuG35SW3BvcvKjgRe6hVr5Rr7ad7RLcWDZw9W9XynU6ZxNvCCSu03yhL2pTd2V00tzJvUrmVn2cfCZ9VPOnlyfGVFsarO649T4dyK6C/u1NOpF3fB3HWbWOmZ2bUKoZsOVSyUqNaHOUd13xjn6SmUO6RQbHHkiwvvAW+PHcj22vJifOFxT96G9UXTmD9XFZZZbf0jttbul6n32vfmUpqtl/d0ydY3dPN4ElTU6nh7oOPBkQIz3bIuqTQ/elthEjfjpbXEu3LBqeWTwWO/rljfv759vpa5nWaYlOVQoYkn+9yS7QsW6GTfbZwXezh2VamzXpe5sN1DoveeQ4CHfRtaE1VWmesoL9bOX33GwxjdF9s0wo9kDB2gpbw8X7cwprLUOOpKYaDRn0Xcb9ZagaM+zrTME27qnaj523KsZUSwxIux42t5khSK1Nn3hmr0yx7wuyk2RjV5aoh78Nn2+dM7UkbV13/o/6h357KeebmJR2Efj6Xvs5AZccp1/dn6Z+fJ3qx3WKkWvmCZ/w8+p5tVbm2Paw1a8corXVTEyr491XH374JDSuG/9bkVoK91/IHNt0LViV6XleXZje4RH3bNfYOO7ITlYuiJu3aQmI7nFHpZCs6ZdrI6QrTKrfdCYJXfHxiR45psFKp96KVUes2y16ba3fKT5k+FN+nI9XZ0vTJfyPyf6c1/OuarUqwZy2zeZvOxtmXHR4MGU1eNSqp37Wy06vy/wcO3glwfv2yeL9nZ89FTaatuUs1t29jJ8qWCppHPNdFT6PdELpuutu77KyqdtzvNaUd2/25lhfsGyEgcXPQ0N6FqXFlhhe+LnQGWz9uYHvUrN5k+pGHldyHKo0LXhOx0sXdYs0m0+OtjvfOpsxW2vfLY+F6vYVpVyWk1/bZGHq6L1kXnmtXrlqTVaq3qobx8rs1Cw+sAGyYsZnmfiRNIWzPuS6zAqamlI+/gdz5+utxzjdjDM+J5/r5fl14qzpd4rSRbL/RQIcJGYoFw4yGLlFw3D6jvlU8PmFmm/GPpkotk7+70WL5Oi33aGvT83aINnnXZIh2B5RmywyzypOnl7eSMxlZwdqRM+Gey+MC1f+HgPYyNT87LrL0vVhx02X3WzW7Wl6hipkBWatXkNRzZmuEQ/P6Qc7rF9bvn73hoN1aOzxZw63Jc+2pq7dUPRUNUeXgq9pbUPLVhocad+pv+PnZESuzJk78oMynzV3fCT+FXHIMHEa+FXhw/O9Xi+Z9IZ0V9N40fWjVu1cPvhYTusKuSnX3kSmZv6NnPovC1Sim0S266/Dhj7tTqu+/ebMz6ortJ40+3Oq/7JexJ6TdpmdOCkxA6Tnn3uzV7+ztxc52Tym2PTy8pLu5dqr0kdqBhlJHC9m+j1zrodm33ak0pdhfNnnDSsO7JtoG6+k8bt8toe0o8Cby222/p07+nMbAfFAc3WD9/537llpee2RKlzaPPgjE5/lxUt4wUzDLU2DdqxQF/j00sP4aMzlqgeWrnbXaBj9KaXigeM7I5v6Pi644vt82fzJKSOeWioysY8FRIX1sj8cPaocMb5/d4pywryVgWrZXvsPSa+fdfZ2ZFrQ5N0jMXVNfTTD2aveL931JZKg3lx1V5vXZ5XvXQ/JjjaaMOyqWdPassKKraalyzWinO7MGFNsYnDaUurPNmWn5dDf54KPtEVG/DN4P72fYN/RnfsbVirvscg3DKl16utV5znDdFvWp6oF9Yh/NJndpBrl8hwmZfbDZ4/CdM7NuD8wWLV+UNmC9rGiy6af2H2/hFPJm70zbJy3uNwJLpUffvWE9d1RmrmeNhuENwX8SIpWHrEzEpBiyWdGvfefW44Hph5ePQcjYxJS+55v1g+fuvHkLzSyOQm8+QLRzYvvBszq7bboL4zJYr2eS6v7SmQGmpmVxccfXNw5VCTg43nd/Tsv2eSR1l0geTCvgEKj6rtE4oPLt0imnpKPPzrsUKryrx775KmrszYtOhVo+zb6hM3bcOH6GQPP9k567i/6bDYOrEecnNfbT+2wibzna54ZVCM0Yjo4xkDsorOXo6YPqSfvZBh/cf20pqrWaGR7iOu9Hi8stzmu8KaKBXHSd43Mxv3W3hKeVs7dAgtThMXjAl6pdzw+LrJvryDHrkSoUPm+qZebzpZOd5l+26j3jcniabqW6iWvM6cpmwqPULgUfuOZ8fuzPC+MWrNg0Ot6XUrjj/pVnujwWzoBOUr6tVdq04LmQ7rc+tVQ9LokGndptzUiUq+JJ1e+9r0/vW5M3a+G+sn7SkycN/kpyeVTa65rdHZOvab0XMrc/fMgGmFg98ddcrfcn+34szz8n13L/DZdyfLcfqR1KjzCjV+x6oj6oNeBXxPan1WpLbyi+aM3nununh5ZOUevvwt5cig2wfuhq4fp3Kg5HW1g39dlv6TUXOG+Vw58UBXXPxjhrNY/x77LTZ6yP48ZtQ6dPXE5y8KDb4F+Rh1l+m28232FLVmXanLU2Rfm8Zez98hMNkwqqEiPTLV6fZM39X150JfzzMIXhelf6hV8UW4d8faqbPWre1+7aupk2eA+aLR1ZmvO0UujzZWV5zQb9GDEckFubYGMX1vxm/zl3SNuFq2NzA0Y2fg4GGzWzvn6I7/blfY7OCdrNrUNexWS+SsS6kKhcvaV87bltJyuK09+INJzM2Ma2P9PwiKDD7y9kWAbsH6BJXk0bsO9DytL/vEwNcjre5XTUBK/r4v03+06eTKGjxoszp/oJ/fSCXRrmi/gMCh4g/O/gho3/f+gmHn9qGP882rWpX95Nqn/Zij9tQur222+9Froy2+nHeLkbV91xi4W+Fr/sPOrIbHeittpsiM0g6+55nntvNjQGz3mB8GVla7C3o0a+jG9Zi9RX6HxN4VKwTKTKU2Zd9NPSn63e1s0t6tZaMmJ4hebV5zUla48c2HKZ92lSR+0nZ4cr391WMF+UD/PSECL0Tjju66f8Pgc/u6uInRSqrjrRQ2Kz2fEdT7VuTJq2ZCF3uLNIxOc025aX6z1C5s7sDBFkKJlyed3/T4a0//xb/8VW8/3R+2eZzYGVW3Se8nBvcTv9f1tX36+aLv3/qFZBZkDjdqaWq1XvY9P8jjy9XEQ6ebbCqNHZ0WSN5o8J7x8EPPolfv5l8+96JH1+L9T4zUPiq/zrww95hK9dHXi39t/HjvavLgCWl9p+hHvfXqqtBZbPjTeeEBA1WpL1Y9zHdfsdmhvCqwVtr7jGXHBJtlOmpDFU+u3mDbeOvjLv1h39OnRsRuNxvbmN7Nd7XiaiFJyRSRm/tHKjo33j/4tP+xh9kzB6Rbij/Qnv3kxNiYeTr6mr7OPTK3TJ9zOEjpsfPh3AqXrs51sVNTIsJvbsrUyHkxonVM25vYh/KOvbdMs1GN//XU8PWWJZbXlXRHWvdourJcrSHh0ovZ/pstGo8kn/N0cS0WlFV5FmCd+M0/+eEoSWmPoe/D4+oX53jW3064YFA/VcK1WndYa8/Iqh57GjoEvFtL84T25l7MWOBtfaN13eqK3LYJe5L19ubfP6T7fWSP22E6gRcca3c+KbZdvnxa6vH8soaqletXLBPu9exT6kl3FcPjcltkdLLbBS5r1y8XenZ0ga6KcoGL14rew1+cm6O6yfvi82Umop9XBQw/Pa5K76nMpGdvOpJez/ixd8utg5OuheREGOS9ytv44t3qU9VzWi9Fn9p3S15YMHKk4VCZtAM3N1j4jjZaOtUv2i31jl11ls9hf+UJglJnLE+6SESEz1M5KTnsQO8LA+OlszR71izzfNr6uHBV4djKuiMlvwLtOvqEZYnfGfasa/3s5Cc9ZqTIT9hzP+pAaw+VTQU1q89ctLsq/TEsZ2d5ds9d6wPjt5c8Heq+a9WxPYNnSNhviAjVPKY08UrzjBUpFTk35gapJ1QcPf6owbCoOqhFzHVx5tUnTVpb4493ZEVfWJ5aMurS08LOvpsaRzqseG2VErBu8fiRn4abnc2OOLFdSn3j8Y7yb7OefA8tLrhU3CNeS1a13qDmYtfCL8ukg29V7sy+k7ruWt9JA1zslbO/rRc7Py1Jqqb0YYnP7brwm/OaErLKynRGPlDoHeDr83RN1tLN134JfAjRv1gQlHospSta3+vTYs075/Z1bbCXE7bIdzh6/7rJom39bTV+9B6kOSVTqW/HR6HJwkpFxySF6/XqbX6IK5i4iVYbNi+9KT0g0lx6oHPLs6FVJ04MWbgnoS6g3PJLlriN4LJJiYEC4r4/Kpvs8wat6CEWVrB82vgTw9ZP/+Q5f4ntzCHrY2aofZ22PNxWrF1UtHPeyEtbLAePmrglUPtdaJbu9am1Ukk/96jeD/N9JDR38muRXqN3e0Ubp4htrnw0ziY07XTj0svLB39y6+8yI/fbMbuF9ZENn3tnLkh7OT9t6xnphEnpilNqvs2+c/9e9VjhfRpFbbfSjwbk6OcEin5O2B/1QGNm0CilA11dInvDjGXl5e7XxLdr2y/zFdyuJB3gscvuTYSZceCGI6/SdGJ3DTR+FflTrWLBmuihxycfdLgzvumcQ2cvhX2S9y0t1WYcn320Qq2X7CEFm52nZkQI3pozPuaEUEd6/miFr5ZSmcu9XpjJDteYddr20zTb3gKrA7ZqbszOnessq2R7pmJyesOExBqZrqzq9gWpn1bvX9q166P1w5G3l2YOcO5lffZNda3iVtOVossPVPd6a5X94tqAI5fDb8ZGNCv36O22OMXJ4cZSrx3dHURuHKhwWuIYetixSW5IY9NIX53wEZJ1k7dpJOcf7z3Q+LXe0AnDtJT0hvRaG30gQmdiQ8IUsaRbxkGPz272vPUzXy3rgklcu3Rug2XbJsNO3/2GB43a+q6dKCeSP/zBc5ejC9co9jXt33nIXsDjbPGxb7vN1DQzlJ8VBci8PTNFY+dJuf6eTyXLDqh/2r7yUtKHL9ECXnoHg7ZOWpm2ab9XxMvcyFCBatnOxsVF0RNFBF6YR0jpqj2b0eWmMldupfLLtxNMrBbMHDdGq1Fp1PjUE1V62s1eFm8Dpw+w+nZBsXGLQonMV7nnd2zdHqm7F7zqk2KgfWGJ57Mrmy92KoVvdwrZnLJp7Z4ph/cMuFu7Y7yATo+jLX7iJ1pGZsqqv3CZ77b+/ODkZ4uytySIfgmIOmzZzzCjy+TLmXG9Tm6fM6dsksnP6a+/JOR/WBiwVjshef/wpRW6iz/Pn21zddT7A0bnc7T6jjMvCT0RfkpW4mz0zHjH4yeHTiqq+tB1uH1LZN0B+bLVJcuGZVXmyOzUtl9bISGzpHLYtoba0WqLamIMC50/Z37crpDrLT0gzy3XSy4lL9xa7+gKMZ0HPjoSz1XjTDReistNHCr2zWyvoc1ZgUKrto2XvIoWV0pXVMgluXaOtZZ+p/FoUcbCO6OmXfAI65yTd2rOwGPXt6rZH5uz6GXsraOuwRtiVd4Od5ywxmHOgTk5o18XBIUOyE+cvC45ZOe5LWEnVrdf0/AZkh9fNO3h6t0n7/T+OHTzsF6bEpacd6z8ZPJVdsivfl/LU5/5t9ye2Mfn2eSnQWt2lEqWGkzJUlIdYqSlNSpxcvkDlbmPVWbrlUjOerR+99h3k17ZSPkZborttilipes0+bfy+ioPKxwnGZ1ot9E4nJZ89fThD1VLjdOttGQ++WYddvg5L+74uhPCXzS/LM15V+Ox3ro1TMOxrX7Fge3Ok3fO+7im9rjyuf4uLZruhjYpWxNznATMql0nX+iKqr/pdGL9+8cu77ydBv6087r1YYdrw64BYZdHla8Ju7451zqoj9O5S+tfv3Gxcop3+2w8zKfqR8z6wAF1rb2nqIR1tPkYRDgn3lK+sclm3Kx4n2ZDn6Gnrynlzl3d+ihgosSZpweP3nLVlvk1tW2m9zbhEzOnm359cPmG3h7pmEPSPxyfbIsb5b+y5dui3YPLb8wUf22QX3z4067BoRaG0p1jA2SlFLtV7BJzfrNXRy7AylRHdn/IvOXnOj2/V2tHRkz63Fd18a9LHoLK098VPQ9wGFj+VjdiopNXuPmwervpxsXZTu6tQ06fCjzqMCCge+v3UO/Q0SeNrs16e1pY/NQbdaOhk7/ptB/opntyjuYzk6YPy9eM3nlNL8zQX3rV3AO919+5JRQabuYwfe+nPJV+MYtG2N77tcTxXZuk5LTEbC3F/h4pu0NuC/hZdD+kfNnM9WShe7tJTtPwogkJhRusX6j0Lfn8c/rQS87l0yLu7Vtb9b7Gzzv6vdn0jqk/VeIHGAY19ih696GH27sHkjlxzydKbtKQH/FjmMKb61v9YhbYSx++ZJu4LHW0nFrwtZ2ntt06buz78Ivle/MEg+rGNN/JATPuK/g47fUoETH1yNBrvPgp//gX48upQ+JnbXyQZugrOkV/af2LU1MMe1jYuw9ReHBtuvi33A9XTr+a7uuztT2lz/iFP3ZfWmb8OHJreH3Ik2+HBe/7xYpEj9xa4lQzT8uqILHdVnnt57zSizNcNn813x22+lCQ/sGNO9pOH2uVSXpXlNH8vummgI6ZUfM3X0sVrz27VrbaiMusrC6QNR+63Or8QCvJLaq3pRdXCtXa+XdXX+YzKLokW6Bk09meG5tV1ipVfi5p9Ig2vX021vHE98n+03YYHlXaYz33zI+fMdn5c6Ynegya26Gh191IpnawQ8j7935G/mdSdSfd9L7/KDt38uJnHdmCYZMkIq9mN2o8b33sPzxxYXWfKWm/6gc0e6Scv5u5PLpOYZt/xtwlwulp+XGyWQOPtmWpbe+M17zYNHHJ7cQ4jy2XC0YlJ51Lerxvy+48k9o4L7u92vnu296WfEhfNErFb61zbkpNWKRkemVy6a+Ompoyx0+ZZQdfpuw5MWnfw5gz3dcrh6TVZS3KdWwdkeB6TKnnRoOlw31+qpfo1vWyk3X6EXL+q9eRY8nfZT2vnZN+0Xa06WPkGuuNs9W3NvSrUlwXHy0oPaVsrNQIs61Wtxc6b1yasWu0+MKkFssBK56Obx4UnibkqXWvh2NbxJRIv+HKX5a/Es5R33tZ7PWM9S1X7C/5zvo87M3or5eV98494+1kpeH7Iu9Az4hVgv4R91K+V49wfKandmHSMukRv5IevC+StTYpfbQ3qX+O6dyDi7e1DotvzHvrFd8R4v/E+adcTxeXKGP5ROExd93uD/tgV1a6uGKpUtfDkJFKJ183aXV0tejFu5opXVhqWrm00SemV9Ht6FlvF7kN1HW7dCnJObo1plueVFPtzI45kU7CkQtWzDqW/+JK2Z3v2Y6F85UCZk17nJBr9PF07L7Va83betgGl753Tcnd4RSQ0nPmLfuw1TPG3qhS8rBQfCq1xr3rjvdo73btF2pPw0/6Hj3QLhEuXeHudHjBVkHlGYGRq9Wmigyy3G6fIL438VTQm21Pwq9cTI6rUQ2uXrx+3Kag2SaLH/941tVHIKtjjNWO1umHKmXLQrsV2ws9d3CMt09p33xW/PPpzoUnum/PclqbfFf/U2f97q3B6n4hiwfLG7UlNUXlrZV1nXtijJyxl/+6lx57Z1XL785X2xAze4Xopz5jPqYrO1jaLtNYPHHVZrVpB0Xqi61k3ijcz1WMX7r715MXcy649FWb3tDinzjhyJwhCU6j30+uHteiV7TaI/iUYsv/4c8XAADgX2Amsrvn41fyQ9RaBueeG+Qu9Of7f7ff6/98/3cUFBB4MtO0UbioYcNNmcCEcs2a0V714urCpyUtbAaqTFb+en/WpX6To0WF9k1S/HWwbsnbKxP09y3Pya/NC20ydp5asa1HbpJc150dw51PSEya4DfNcEZ8brBK6fKxraZN7RN35fSTnBg6o3XvWj+5Ly9ln4y2HHWgYPH0kHqTy7KHbkkcLVGUHNI/dFzU7qOZybZHA4ZYSh8f3tVS+jFvjKrJjW332uKHrXMbPGx833bboscmc28+3jDNuaFXf+vY797nJsy19JjpUe0kGnxl8NH00vntHzq8g+s73om/qSrqG1VSv+ys+DtpyRcpv3b+WlKjfMrx+pfdMtbP9szL9T3Vkjspt0Z9lXzcJAexuD1ekytL3uyfOv+4qkSEaN3CJVKS60LFFmXNicqyCXrpGtJ+4alpVY58s5LCFblFozN7Koe1z9bVWT/5UGlYknza8+eXigrMZ8vo/KoIzVN8d0z/pZ/rj7TGEIWLyeF3xNZ1GXtOP9R4tnrtkwUXR2ldqVrmkmt2ZVPQuvSP1TYN+94+qr125/ry9e2da9UkS606EvZlmrpN9RTtWfeon9eL8IHr+3w1sNYT6LqXVrxpbb+bg7zVG+Lj5qf//BmRs6g4Mdcq+uq92uJOTQ+RMymC4365fk7daaer5mnfVm6V8vTcldri5U1x1QvNo3aKXCtvHVndXy7XbGqO7JHmkkyFgxHbGr7r+0xXOVnx0myZ4sE1r15Zpmds+RUYl/XwQNqdHeWXDo/odkjJetyoAapZutrd7oi79yiK/RFZ10vsxI3PryPHKMdf8z7/aJagSID8jKsr3QbFlMZW33VUGBO9vsXzmb7z22smjulrp44ft3exwDWltfNqV8WWBI2c19/8ge86q0J3Of/LW0a7d863ihbtHvpwmIXTFt2da9e6zrD0nCFaoNen6uHji5vazrmbimx5qP/9SDe/AW8WFqq1T/N2M+69zUbti5bWsx6ivweywgZlzXtJhbM+hWyfU12idNnG+36PDb29E7/peL+zXuDpPkE/R2uZtfyEu7dcsoc+ashedUZTbrvz4mGfpVQz3tyqzJs/xl549IXv6/aqhhb1+9Yx6eLp6mvnjs13cS2M9R6ds+TEO4/gnpG+9lHDw4NS7D6NMR4WOvjWzSv9C3yiVpjW9q4/MN1pTNOOETmXx5daHIz+MTpRt9T4yMf0lPPnlOpvn1AJfKUl5BAadCbJ1ebX63k6ZwacDe3vZ99sOdW7YpWgrsxz28zhxaWKbpc+fPCTUWq6/fpu3MrqB1eHW59vDY8c1T3388eQBudPAj45PbY1lwW3ZCqo1nTdOtjQdTttfueR0x1z7wlJDy22e2zxPu/kj9YHB3feM/A70P6yZ8a7zCJ/6w3j9ts+HHD15furgjPfrIzcYxcxomTg7vuHc7NnvakdY1tmqKt1t1M2KO/JT9/nl3ut67/Ib0/JE7dZGp+yb6g269wZ7ZKZsCQ7OOFK3arl2va7xf1zy5U3qcf9kh0RY2L3rM+lrJlFQ49EjnbsfUF1akPpK0d1+SVBbfpC72yzJwxpWb09+fCz0atsRdfpFfRbF6lntqAqu9ftLd3i8sfUrD8UOHzl82Ez8iNLtce7Co443zX858wjgceGfLErVBvz5vATzdar0fk6402WlJ75PsRVfYu1QeWihEkbbSSktPTPPHW2tDq3eXef2AcLNUf6ek0PW3u7efLrDRuMx8p0/pD6MfvUxqjB93+12k/fPqZRRv7emT7mb85o6+z98WLrybpu13OVsnOPqJ0vTb4cdPLmqC1hWVOtUha+LBCvsGnbPXNq5aAKNXv5u+sCZ9y4O1zN0rFMKtLm/tW4p9omr2tGtVzas1fw1Fyx9yem3Lqyc6LnvmyJK6fPz9OJik2X2//MzGVObtJmC92FM8JWSdzxt/KorC86KqBdl912vtnhQtqxQ+n9E0WfzGiwMn5+4OHe1qjEuLaSTFetG84zzYtiZI57HbFT/6l8OD5Xq7XPWZkNHzQcdAW2LzdY7vFtwb34r/HfDZfdFn/qYb1T4Ll66u6+XgbOD7XPbzY2km2YuDxnS7H+C/fbS61qBHeustZ8m9SoqC5hbFITo7LmVfxJMx+dwpyGidMWBl9MuBwweIiBQ+8y/22THsWkTLs1Q+rpsigP9x+z2w9c9vNZYXNI6kvvYquny++0Kr6puPVkV9qhXtmnCuMb9/Y9s6NdzHdIjIN888ZjezIKxz77VjL1vrtFqUXXkhkh06Q/3NiYfTci2KIiulEs6es8vWFC+woWXtL/vO60+/Do7KVSkXN/RSne2a8a6yRyodvLqrUOvSa/yO91wFB1zZXOQe5jNLqdKn656WTfyAmLDvVU3n4xVsb9TOmo4zUFbh4rz7dWxYy4ZLY8Ru/NvrdKhq+itOqLvqusW3zO1kV3Qlvct3nP5hyS0F0+4PGhfVaHr9w9U6gTYTT+uIPsqbeb1HtlN1svOxzhcb85bE+l01evG+pn8zJ+jXCbbfPd4LDfIf/hjr0yzh+yn+uk1SGZ1+yfurLS+9jJo+52ruuthIVFCqJ6zQpa+H2VdpX0lJEpbmP2BddbN448uHP+3RmvXeaFxJxrS/wYG5yQEbnvp8egl/qVt/eae8UGz6/YEqZt8uX81kF2BVd7lT562tYcq9JhJqVibpO6IkNYMD/8on37VoE7xcm7d7ZM1M9zjLv0TaJqYcCc17N8kmQ6Rw2S7RxaGSg3NVPp5ZWxHnajymfMirn+PujJwTsCJ9SeDojudmXtqrPxm3uGFwZbVFvs0o2zaXVLu3k4WqXl8LIF4goV13ZO0VSeci+oLk3HbkzOslXmobk+C8Y8k/cTstusO+tGpd8cgRDXHj0l+40+E2B1S2fA9lcfCrodTUw/ISQbf6zctezCfU3v6nEv7o4Sufo0853+jAlLFo+3ej3lbm5caaD2qh9tW0RWGLWr7tqsrNa4quZE/cV+bgUmS2XPpH74JqoudyvK9pxLj2MPzXVv5KcN0Rn0aWeZnHp79+1bdPf4vvbzT10t1lb7aI9G27Wq6uj43TXK6+xjR7Tuu3y04+428aOf+m6q739UL255pOSadHGtPjv15kimH/Xb0f9X5bfazi+mHSvPXb4tXbb6p1S1X9OGDerl0gkmHSYtx84cy+sSXDjGs9e74nOmNdpNSYvCFmjmdVN17hfZNbhOv2vEc+FL3X4sqVKVdVmxwnn6uPMBzUrLLrUGZil8XX3heeFPz4NFxx1mXrxzIOpL3ecfDdtTJy/c0XWq25jpHY8sTl/r2fjLf4K0mplEcs5+j4ikg987q5dsG6M8pNBisf8rsewXWXbfcg97qGuOXpTgFKU/X7dz1OaL8WVBM8bKhLe6LnLTVo9eKVLx7bxU3Iors4UdHiSaLztq8rFxWLfiYz7zt46Zc6G3QYjwcAnZpG/Jv2r2OQecyN5oG75+1bNej1vl97gdunh2ssYOT0lni6h7Rwqt3RKsHZo+OBb3vLexuiLcdU5EpdZw64oPDkuKTvURmBp+RDi59/wb377aZSUn7W/Xkt83YZyM7NhRBsbXUj/mO0/Y8z2sZk/jhPGn0lyPt2Z+ilh/RkF5dGZl9g2bW32N/B/ZxKga3wyJqbCVk1i4QsxJpEnnuVhn/tyBJ6Z9auowW3/jXKTTtFXnNITrO558PKsyXOlGxijhhlfpYarTvIe394nwKG+OFhq363yxbIxP3/H2zZ8L+gQHDf1Qv/Zt9/PDZVIeZ+RmJsfYj7MyFxuUOef0J5+EJYPal1YsKl+gGt7tncH24JGzHBXuWb+cfUbzteSscy8DvFSNTriKusl0XrpoNLJeVdp98qW2IFtNl2yfMsVBybv7Xd6Yc2mOkumdyduSS8syGtf29TBTqegSMI6c1nrrUVa5pJ7br20rjMPFnR+8DBA/sjPxbchO1a9DWxI2ufprtjWeu7f3a9SFjvGNt4Sc7sZmzoxfvvjMezuFNbt6fjRIO/u+8GOTxpD1adfWO79eMOVDr9mBM/NES51HLSnMGlJulPK24VVtecHGpSYPDisOyhgR8ChL+OEjean9i0IGTHb6P/jKDwB/V1xzujxl0OvZTUdbk6Z2i+71Z/7/Z9r0t/m/ioCAwGcBAQGj+KQXt7oL5jmNWPu5tHBYu5Fm8dGH4133OAmKzBYoz1lgFFXp/PqNy5QirY0nnub+eKlb8Dip29HXZrFR4avWXb24WSM147TZ9Q/Vtk/y3Pr2nlvlLyX+6peL7eLsAZNFXd5XivXR9du86fjMOVqjnnmlW05rfaY0Y0husUDIDYX5krmqXXe2mm5KsxtrJTbIOqbyR8L1cbPLa4PTBndKmNbslnfUE5KaNWWH9lq7TXbFs1v80q4eev72osAJ3U9HpzbOyrYbGOPb33DX8ayOkTEPzXranrtx+POP/UONxXzvZl29ua+pOsrFa+TN7mEjV/565j3qc9U1vcm7V81IDX7uuUoo5ejuLYPfqA1MqCga8CV5V7lCTm+LJzMksy9NL/TpW3HJe6Pho/Ghjj96uBe4v744780g+1dzR4UWGKbfFh21MiMpuHDg0LVxc7Kjt3o1XR1v11R/KaxwsreuxTH72ra+abIqFtq2ag5qO34tuPM5/PHTH8UXT12sOrd1TMuJQ5sVFA/OHjz24PSMD4eXpCy+EdRyUzjcq6FqefCaZtkNj1cUTJL/ImWhoi8smpjglXPaw/mI5PFpy6u2Rn347voxumXLtzfJ4257T9jhM0zeUEI6oW+QxnlZydrDr6f326UnKCZx+Uadl5z55uPzjdoaL9/Xcd/3RmiWxbqyzXYhikNdddUrytf3qbmrXZFyy/OEYMWw+WK2KobKpz7YenUMOju+TLjpXeWHd/KuuhvEZB7Vr6w5lCuwTL9oUlf0zewV9VeL3yladB8kXR12s71nRGmhxds9+q6r5nUM0NsmLHknYMOgZ8n9ah7rlwj3bKmcYLIv7laQeoNn9pjaqo2Kxt5ZK1TG6qyW9itbcmH35fzwO+WWzauqJadID/Z8lCTq6dLsXrcpqrCmeUd85/YigZ8Fum8KvmuqulsOipFSH7/87ckHEXMPTZXXGeQb4xAfk6CyoJ+3kZhPqLVaZmht0t72OfM9x+8YMyju1NszTo9tnj1J+XhAJOHVm8U/8r1vi6zaea92WVLt/b7+u2/bB3jWmTqsWLy/2wfZ64rxYw2t3H9c8486ab7BfZOsXHxaf7PTxzd0OESkF88cqzL8rqT31Xmr96/5ERsQ0Csz32RCv6kXnG5PazAI6a2bZS5e/m1jd/+K8oLYjB2vyh72SxJvn2sQNCY0sMh4rEj23Gkjnsqd/FgdmlFzX0zKs1bL0rjxvkryCymzNpWZVuWrZi0e0BV9Wjrm2dM3T8q1Vm+dX3M2ua/I5SF+c5u279rVXKKZOqX/q2vvD7senOP1zrvSJN7+oUj6PVnzYrshr2wGxd0daXbF9YXm8a4JnTvkY28LKA7a7GswYdbznPL7hybuPL+uUO6U+qY+wf3iM7W2fn00f5XbpYBjbY/c3bccUfWd/eDhaOEc4aRCT7GgdKPpmY/XHuu9eqDsdbOqjePsMo7V9T5QED7vmWyLXUe/wVJKRUs7Grcd7rPZc8AonUFBt7ud6VZVYCkuv/+MYoJj5ubl5kp7dFOsPq++snPB0tfRsoOzJ/qdiFtifjelPuThuTOpCuFyQ2QHL/5y6Fhu3eO9n+eaC0gHqx0pFtliUjJFxm+KYp7t6J/a3vkvk6LWrc7W6DXdwcXi0qTXnfE6r4cJfhNfPNbI9ObysqdC7pn2axpDvLX0KnyMFqnEu3wa5Tlp7SZXvf0qu9Q6Z4ootL8MPTS+94fJ887OMk3XcJrk32B+PPFsi9S4R9qnfbPO/Tx0TcJUc6nZ024f48xqzg0fYxIf+WDqrw7NCXtNMiJ3lyyc55Vun7z3brthkpqrdKVXusXd7hJvF3pIDOx1oM+IIaOG99L6nuL7IE916rPFdy4fcFr6cdaaQ+97tPeTVzu79KvsJi8D7RXTpF6PsLo37YymUvrZfms23g6b8SVd6qdg743HS1c5bFHKu5nWFCPj87Hq4s59dyz7fNBqCSvSPxSbG1d77uz19JjUjysuljZWNfW3MFggukrlgkzlo5URme6nloy/2P3k26B1npp31DSijOMHjn+Y/lky8eKXlRsz0mKzys4vSB15JPVpkLS15KU5VYn7h+gudpP03mWo0lx8fN320bbdGzJENDaZh294MfRi/ayBjtN7VuosVda8YWgywaxJvc/kj4pmrscnLgh5cH3lyvo+Yor9y1qe+iZN8ppZ93a/zxvt3XljxK7Z6m/QE1swq+8lAa960TVp6Rp9U3T1FMKvNgxpjZTcnlImNOH0oKpfm+JN83Sbzxz2Xis+XWvRSvehT10LS3yODghcsyVT/qRNls296sQS1btj327bP2nx3N47kzaMqViwxtTy603TTft8pg5pS08p6/N/sXPn0Vi+f7/wL7MookyRmUoyK4lMoQgpUoaSIUPInCHzlKGkzGOGZCgZMydCQsiYQqiMkcicPGvf+/vd+3f/1t7Pve8/nue377Xer7Wu9Vmf43Nex3ke6zqc13U4XCbM60+/1SVe/yExvWX8uS5v9HfD00qm4ejs+puRh+nL/FyZg5NiqEUdDakSUiTcJEMiLVmrmK/rjhJtatRTs1d7txoP6KqOk1h9SilMSda8aNs82Mh7qvKIR1tZG/nvYX21rVJ56cfDNOHhiowfXvEwilw3ddz1yP6OqffA94Y8zXIZSRKhK1Lmx6yO98UrxDSH99THPji8Y2Lr6RZNy5Z3aHJEb5AT0aOjoRYuy6ZZDHtrrc81vL9+dsjzUltdf42aZEeYqVr3nZkp4kH9l4WbXUOPAnTc67c4GHQC344kHnKb2b9XN1jr8fNbXZay8Z9Js8fcrxkeqmu7l8qa/IrhxTC1xhVScZuFYKlzh36x/Is/PgAAAMB/QVfpI+dn2z38dZhGuEbfr/j+vf6n+Kv+9/p/kUAgnM25f5yzfvDo8c4/V0J3r5HbGx2bG+a7KlAmtEUWTGq1HllcIi07uh29OkHmeuq7Ykza/t7kw+sJrZvGs2T8L79v1gheG953o83O+8WHbc+nqyUuG29zhMrFiFn06zNrnjgV72QX/3ji1Peiejlb46X3h28EM5lcDBw9R539zt7K4tBN/xP9IeHGHDSmmZI3RNpG44ITQ0pz5bdGtDIU5Fit6d4Umv6+40n1pOz3YV3b5c/nWzuUd8x9nYiLuivDX/vQ6ZeSd/0ZjiPdmffHhe40zXAd9mr3OjyqRHBcv3N7imVeclP/z/WTFynPK9ZsdMR4XdQ56mwa4MXj6q8jckT622j7ZnnACZfumJ9nLPZfOBPPIBNTnuCSRHYrZnbhivAK1YEcWWOj7Krkkv2/kguv7yvk8D+m2Fyud3KPz+nGsXjWCIf9Y0QiJbVEOxZUz+X1tW37MNJ0L8SMMO8nEjtRt2c7c/FAxkumtkfz/rxRta81yKIHW/TPEfPVM0pwURic3Ahb2Bp8PzoifZO3dog1TPDKCv3bx3KNsik3d09v2W1X8a2/0lqgdvj5xs7djj6hyZDHgaRqNpRLS+30yOppik8kweFvVzpIYhTt2y1kGTQce/MJbtr0U/HH3DY4qgjOcTEHL9ybT26c69V7axd+51FK1jW1Jd02n6JLvqyuMR+ni0SSHC8U3M5KWFn+RDRp+Ejk+txP796QZ2bBVn9kEhxDBLbefFuu/PT+w8d8hVukEZbuh1XZL387lM/hd0CS8DmMlUorYy3rnsAvlo73BjbfOIXvNU8/IHvx1jngqepgZ1ltjFRp2a7kc9G37zmkRPPrG9GMGUbXZ3mkh9DUuxVRn9+IT+hTMy8PODspZuu/rdL6xvfXKotzY+w9j/XmGyQNHhcOXbhzUrvjhrof1cOms8tTr1687/PllexkSMg2Eju22y/bPfrdxUSK+D109WpG6+3Eh9J99sZr7OUuyXUcfxdy+yjTxyNk92xOEWqvRKnXuHz7HEMWNqH+x8LXak66a2Cc1FEt5VxJeCrp7gfLce9Jxyye6J8PEqhaEuVes+syYajgPHQph6huzWBxSkaLs32Y5xXj/C5K2qO17Pbu30hun96rXhsyrzX9Wnmm/8w9mwVX6eMrWtUec+LRFZUcpYzbD87+ZprjPMFVeslFXELUj9tNSTfvZDXVi0ftx5L1um2ziWwy3nZ6mV4KFBd++N2ovIEj1ZT1nUX66TcfhSVo/D3zJ1Yabe0VimLzDPziKSc/5UvXtl/qkovW0qW/tP+rkG2bxCGn+b3N0j0/ePc+3GHZ8tZzzcyN0WMqozWx8dwZodMZ32y1RsYqjv94cPgabWua6Z49j7oDOY+/+DZ609ZWIkdV4XntccaQPvlecmLl6Sl5H8eq2L1y9lLsq7JVno/3+Vg+XDuQk7ugFivmdfr+pnCx5fGGHd4zA4dWnESNzjPF8v8SJfrCTeXx1YnDjGJr1FOanTt27edZg5ZekYsnQ66eU0kZmCkrIp5iNKElEr1y540G66mS/J3+XiWkHK8b31ROn1VW39KUqLVKITitv/vk/OvuAbn54NSX9ann2Q2INQZf5CUrtRB5j0WmtNiNeh+SWT+f+iRX5Wb1U2LuDcuTrpvevBzW75hNvOQJ30R37+zTFfIyztcYCDJOMLklPbfrnUcxOx2flgivhgx97dNTeyiChT3Ghp9wDTxvrrYxvf3m9FuTzawgkZlLVPL+fEOKym8Ln1yWmTiSSmftet5E6pXQeY+PD5kHBKhKgq8FMY1biV5nX77mxJ+geYk+uEU93fpAY5iSW9m4sGK+7eEyjsXFY6NRL3+fHXPOVVXqo+eOfR/nYVgnr++cGHe2sWhQZVrUykW7ojdO87LZTec7W0nxOymJpOpn8w0ELF5/5eonU39H09Kiq69/5BRj6LMvfeTUnzUaPHW3fZbS20PX+CzONM6Vz47sceRt8ZtsvdLWvrVC10Ppoz40ahQus3q7blGgUCJCWyLDwiznyS5TY5t9TTGan/X0nRRz1zd8H1e/oXl1wGcxVm/mqFXDlR0OBrcFdNQs6vLp13kvFytKcfCJu5YKB4z1bmXWf1jyZLJhvOEqqKUrW9T6vMjNSSnf60XjnpbEQKoXcomM8x3sElLCbl9NbYhdj6W+eRZlr/Hj2TOx65Mx98/H0Ks86l0Q+ChyK4v7/EUKP5XmOLs/lZV0LK22sYLV5y4e209mun4zeXj50b5HZ/x+kJcevrRYlGDpGcLcS3Tw+5stMSXPLJ47glZf9BPrv8QWORo+zQ6MMcg7EvF+6qFxN+HboEQgSfmTpWmRtkyl72z3RvcJzP0xu/BTS8o95iVzc0jYrQcCiqav/co/uh9cGjZX6XjZ8bVjqLSY8o3/2IlqemMWLk5hvnmVq67nDcW2Zd5p/1rkTv2ZevjtO++1+mMCnSOGyeX+VOOW75yXiyn0HhdIrq/nTKeXB25U17uF5PU5cj6pXtep5IyI4XA++qVLc0A66djus1KdB47x1clqe01vCW4cM3X3JO5q6at8Vz/m/NKVQPio5tznZf6ptONjTvNqkW/jVi4Dz/0Vj9cUHp+aeiWmAix0T5IUsh8dpTk/+YUo/4XPO2stDnqqSLnLrx1Cg00DVHuOvvjp/czwCoeJ486jw1Utm0b/4o8RAAAA8F+Iy9nvukPOzWL6xhmW/mfe1f29/qf8q/73+v81gUAYZmtXzP6q/TKm9qi6yNejOp4mb+wjX8h9Ug+mPXztWJylY7xX4309Vi6tXeYZ6p+0V69qEeoYXs+6vR8/NCAc9MUjQCLCleye3JzHIef5AhbBxkj73yuG12NG3q7Urivb1vO9v+wpd9Mx5ah1mHjiXfvcU4OvVNl83iintmTO2vFeWV7rPkAi3Z3tXXDwz90GuenS5eLvC1I/9zZMkicyM7t4lmpXvJZQaTB9RMS/+snMu87QukSc6Q7/4TNes0xtFbfHN2slfH7EBsaZxZCekMp0tLxk5GUZ+OywuErP1ZCihNTuYV7C7sT2azr3wsk3GneFNosmnXh+le61T5FG0Pzuq64y04HOV7w6HCqfER+U6QxR0X31acHb9CXtrEbFoDfPi881yVfnbah23truCB6ge9+Uabq0QlBvWdinHUw8Zu72qCdXpUlNQoNomry2PyssTLIwcCnQmNrXg+cn91f/IEVdqoWenyQ2EiOpC7dTRWd7WtOSbqb23jnR8oW0o8Y9L9jkqsWzq+ciuvZ+zBFPNIiLLzVI/WqelTfb/Nac07Jz/LbfAFuM3ZBjr0829ZZK6zMFMdPxnAcL/jttVefPHB54rnfbQChokPqemdc++9m6K4KRgZbXhYtUjh1XKXiQYqvMqL9+7MuyLl/+bvmdLfSm8UeN5tPjr2netxQTSzqTo0+3cDJheSTD9PbBPWKvFw31syj3XCOdLGT8EXAm/TJ3xNaGRO3czLmL5AHeOTEcGWnefTwKaUw/s54w17jtamF5JXmzmHGA/sTLfvHSNsZzxbefS3/+wGlTd310u+6JN3+mY2WrO7WRLrFogazWrpCW0yoXPZRjNt4wun/9djN2bFyCQuDAnDbB5dDbqFQD19Rklc3rJMy0Fncuh9fcD58fsGbh+GDGqvKyddPvrHd9TQQJkbJRF8/UyK0Niu46kRXzqWSBV1mafgO8e8cIH0JS3Q1Wgm5QhixySCV6c5bxPf2TuIcgs/458MDYoXKTekN9c90ixXeer4e9BUm2RVttV4qtBm1D5u98IPp++JTrs+7yagt71aIwg6y1n3k6M/GhOY4DXmN6bcyZjZ6jWZf9j4moTbd+aO8a6w+VoT+QzKSzUn3c4xfJlCSPXhRn9JEl/3vSou9v1jk2FSq80FlrK1SQpHq9zp/YKuYb1vs4pU6PTons2UBh8EYb+c29UWwHxn6OCnQEuV/bWD/3lDJ8QLrrBW0aHS/LI6HhMt1ixYO0Y3L6Zky8DX++VWb1FD1ZdSBSi94toT/7S/tFUuad3Sm+pJ7HxygVwiZFQ/UX3pZUxMhY36DZ8eK5+AXjoMrIR5eJVjjn0+IWXZyfdwovCqnvyx5VEOFoztWrf/fnLX8jF9OLsfVirT+2Fo0S+8okxXbO1Da8lE+j5lzRfaFK/WvLZWVCVftYNI9CX/a+nsKNcFPBR1/KdlLx1qxblfV7uAl/ZTslynpplZ2Md5eZBx9LNinnXcsvDbod8+1M5V+v/pzyCa84qTf8arOtbiTXUDBC3+fUtLtYf2icR7EgRfTdjy4KFTytsU0jTbnukX3RyTqB/rs3jG+f6l74pkV88vMFXx/1ss7Wor5bZYwhCcuHWOTNnCgck3uNXtodGQy85WtkUJuvv2friXAfE/+4sYuAv5Kj6AmZu8T6n5Nee3t2F9TV3fLXNF1IZ6s7frDyFNVXyawXGQ0b7EamzCIbsuOJKsFDtjEqE68HNKNSDsmPPRWpm0hvYNWnLJx3MVgyWHO3ia7quXtL5dOWRn+iD+mYGvfkngv6gkbfT17R3aNAZK6x8uRTEjVP+7fBSpGH2SU/x200LM6t90Ts5vHP+zKb8pXz6PBMhP2zTrLTTENTsdpa5DS0dzXkTi4vlQsWtFiVz/46q6jcrhstLGX8MaJD1dL4dztRYlXwYBtpoX98TFV5l/ubXXl5EQ2WCRxb6lJD2k3rcZ4nD0tf4PZmv86ZLaDHGbaL3+EWhdcT+Y+HNCSLm4zLyON87ey29mtsBtDIxJ7a7j53I/VEAdsftnulLtly5lmyu4ZSzbi1K0co/Af0m4uTyiid9Kf+iL2+YxdorB0tRUhvtLiTkKBnvCEY2+PzjcJ16Jav+5sXWi0jkw5B1vtfrex6lfCK5bcQjc7ACL4PDgAAAPB/ucHFSFklAh/NhduEZLYEFv6/1/87/qr/4/q/+HsCmeK0EzvpnNolY3XiAKKvItWvupzvf9XmbQr6kODj0jXaG71TluOqkP2G6K5f7GZ6j8LsBcZOepwOZuhJNsms1LAxm5en6+He78kwevjMBzPDA1FHtvPeFiqmkdQIfzmXvVN+ONaZq/V9gKPlo3vMUr0D79fOkJRvSy0X/QkK6HY87FtFqBQ7YH6h8obrZ/ZbHJs1O4/3Hk35ZVcqUn1LT1/KkSr9xYodY7Kxleq02IfWNOuvRLcq+WWjfx/5xbF9edhE1+3Ie3J2Jon+9M3+zU2hhcip/HnChytq5yY0PTmoJwKfx3Q+txKX2XO3VIvblXRPu4rZJ6drBZ772Bjl7Q6WVHSLPb/0mDpVwJiaKKvMaUnn07e32Tyuf4SfenqEZTEbik+Mq8nPdZsncu9gd3JpKy967U78Z+cxR32Ny8THn/HzUGU0tnRlVvRKpdnw7FN5mOejdJrN/mWW4n3XMd8bprMk5o+tiU7oJCRzTVVRTsreLXX0LC9nydTYpF4uZ9Ohjhq4nhdin2Hq8NR85JOUj3rX7qb1fW+pSkXE2RJoXvU3rV3cvlWiVmP5YqC/xPt8loubZRltYLHEvtDzP550/boskCj3+bPhUperE3NINcOzkL5MMRJxcY2PtVdIa3m2fgiYBi4yJB/01tBoXjsvXOQ86EbCfcPVgjZ0r/uhHzrPQ6yd6y/ovrJp2Ngj4NnhQKvx082BKmPsnrE28fHFM5e3G3Pn8pR2abEXsW9RhzBIn1wV8dz9iG+1X/nDfa/s/cbHc+jatfPundiIE6aVj3soY7czSt+9aq3W1qXsxceC9VfGlYcb6e2EfxZ6SRje/vLwFcObwYX7o1ZfvjYryY2KeFk874un2zGUfJRn8UJa4liZg7dVgJlppoFPxvKlYLnTfPMT4/GpQSxnWLOTZ4rkGeh0hBLFy/mKKh/fnEyh5M15b66xlP1N+KG1KtcA4/xnqmTjzVSLrsSpRsqnK9KkDbIV051vCtpY+C/YhSSss6nRhIy3hZb0lts2kPSLhasJdaZQnSz4whmgWrpUeG2GirHhpbqSAXPpWMajrRDOFmYSc9IbMg3mQ5ltBxs0g7rDmaPezyZcuaR3NF7f8EnPju6vZIJ5XR4C1/fu2BKbIREKl5IPkV+0+1zV7F1l3W7qOiRLm0RBXn9R5ZrR4Kt9dQrO7glJOjo8RF6PB5aDujZ/kj1Z3n6qf3qvPM/CcOanLpK7JtK6pnFa+l13fs/seX9B0Wf87tO7IvmBp/ouWbuUsI8fsb7RXf72fMvNq9UusyRWnSOy8oO0bCHPro1erRzWplUUme6XOurTMbiS2XP1k6bbrz/OTBNM0fqrt09MG5kKPgtRmtESTp36pHk3dNui4kWn8p9fyoeWRk/ZBpy3ejvfNl2x+ymBO/he8MDnpqp0sk557p/HWgyf1S2udqa7frsWKvC7+JfR8eKD7k5nP4Zkfcu0Xyto8Plh+PTWrZcPayRZeedmwz1iWPcNEMnXK/NLBZtZsfhXJQ85HInwZF9haYjjF+TKa8lgYIrx/EAcz0Cd1fSmJduCTl9ub22p2wtihuNfz91Znig/d9+QQbdjqzmg8e7HX3pUE0YKuofT6c98zaE0/a2toz6QN9EduW9CgfZbY1eT9/ax2MBT1Z+POkbpGYpPR1gLTRHxL7VOts1foHFb7O2s36X+aZfFn0PjhteV7enelPQFPqAsrviu7J2qllHF11B8bLvhm6ygIqfZKGm2n0gAzbh9/2z/qUMiDyTmR5jr3bfXWO/EvH5fYnLeQESx9HcB6YMs2odK2vyJ277ED4MCbqXvGbpQtZot3GeUol6j8nCZluvcRfMrybo/Nfku2Dfonif+vGJ8vOvEV6VkUs7lqbN1Tup8+xmV5pf4Kip4Umo87Pa/ffpsV31YyMMMskeiDQqP3xxvjJt4NBM3c3/o2A2jo7E/PhsG+jDfDVC7xCXEkSdkaLT0+2CtXkT38it2eyf9Tq/7Zv1iqSsZYZHXhs/WOf44UPD2kuBuvtUxzYNpkwd0r2Vcj1CjeJx9h8/XZUFXm9F0Rl2IjIZSsaqmi+b2CaLOuHsBN0XSzqXHv9+dYKPFuqZ13ohqJI+iuIz0y7e9YZMLO0t+6dQXT3UIS5C7kuhvMZIc4fcQ+xe/nQEAAADAf6BlVXEXw+3VzCDvB9crekce/L3+p/qr/vf//2skEAhEfq6d+ZSHso4ezs/eefBI/cEb2fdcdyxtnh6Jt6kPNDEJ0x6T//A+vO860RalRwBPxNiYdoxaYgtd4vMbvHI2PImvYz12P/aX3pn0xK2XVZaB8c9pK+6jHTyeVEyPz7LM+5iK1xXfDXys1ZuVecpILI6SsSHrTMKbhLbcxjvS+s2zacEG6rV+qtNt+u/XaUK9rbOIQ80PNj/l7P7S+OMs+9No8rLTgfHmz8IfVM2L5K0l8G6OCPCPUxWTiSW5szcdeU4a5n9jrqJDr8CYocmf+6rmWnBohOJ9ixYyu9G8Iwk8zjU1nxQK7h3Zr5ZrIPf97atyyouj04foKMMvtatfIq2ycNWoSv4aoKWVrqtt0Vr76F2Sm/rG8N6Cmt4nI+qXSNU/So4P2nxTYPuzRBqfEl9kXtr3YSTbw284c6xvdcaImej7zaxzd7z50nsbBh4OyJ5aG84bvfuK24CU+92DIzsbvmuTXkszCp/ubU6nTpvg3hU8vdz/jXjfwMP3krV3DZd31Jb/bkomv8/BR3XKL9Dp4lVRt4/1M1LtZAPbfUGJC3uvPkqN2L9ZIr9hx9zX26d58L41R39ZhETJ+oNAe7OHrzk5aD8J1NnOHFA7k2iecrtWbVqa5yPzkGnMCSeWLt2Ugo4XBbp2wQ+E2Lb0bE6c0qEs93ZYL8y7bN2r/W3Y2ZZ1erWtTT3rocWue1qEuCDaRMfuyimmPyTMOWu3ptxeDFHbrn5V3Rljt+ahO1UTwWCXXFH5LDXraS5Hf1OwuvYR0e8W1m1XxKIp/QsvPqb7RUfgjbLP4W9aubNtxHatouibKF/HW02ZxvLnU8lZ/IzGSj0Pzt2QuzOryP2bXysy16A0f/Dmi/N+ge+bt4MvPTy00Zr7zqFQ8mOwkGw67TDr7Xdk7M2zXsKOAQUTjOzbhTPEobm/XVu6OVOz3QUmrT7OU707yta5qbjfIWqn1VprjltU+NPlJcLRqR+SvVJisZ0P5roX7YMURL4ZpdxZ3s9yQExbMVVQcd+J8tZoWcfQS1qx5/fsl3NqyvahErsTwHLzC2Vkb9haJEfl9bWmVvoSKt3eXQXn5fa00jQUJbZ28GnnfYj6eYGsmiVJ9UK9VtIxz9ol/uNU5x+I7669LEVq+7lL/jJVghill2SPftC7qsaN4qn7atPPdyjTrEoHFrtlnMxWlXV+GDd/085S7Yqt75+Ks52EHBOKd58u/vDYJf5G3N233FXhTtrjhHvahF3p9UQPCecUG8pIDxxvtTMdcJtKjLAw0kpvOiEa9cHYZNfPah2eZb1XTy7nbitQvTLp8Tu0PZ0wqbpIk3TEVXR3yqmgxpn7JxYEnhQ3c93cGmP32gxZqZ1R9bEek9C/v/fc+Hjwu8hDCufXU0I7W3iirn57V8LOJK7xM7Ht66JJkIjzon3AZxXVvNW8vMq12QcS8dGzwp4xC7E/xh++5WcMupGewOK9sIPvhbXwYybRIq/VncdXXM7LBHmbX1WjNQgfeu0j+z2GOOr85Blhg9NjVe/avok85wulDi6TMrrvZJtrJuKmnyLQOyxyZpTgyZmrmZecy3P6pZONeQvvp7b+a68v/ubs0hmgnEgdnGXbDgg0qF9oJuc6dU5DJfeA4h6VvP3FB2/fq6Hgt/gdcKoxkp/jssCTWTn9/prDPmJ9CjGx5fopScFHbsotzx+IWKKoj5fX0tay+3w5gDW6/lz+BDVHuHrQjftramduUCWwr1Y7TzwxKCOlOad6X7uzakffqZelp4y7D2/c1e6pzxdZTdcK+dy4X+XA6AaHaEthe/WtwbXdeesakQuTdr9tFjiPP19a/ftrVInXmy8b+iUcsax1jxioevhZhvN6kf+DQUaJJOUrCy8/fqe4a+Qc1i7qck5GwLexJv+YTO49lfpP/qEXb2hvJLmQJI/5HAocyJ7stNSi69lF7cjO0j6crqfyOpnp3B46GWHxT/ZVt1vSNEXLPlWeXbH8nlnJ8MT/Ds3pEJrtS/qkOtXeC3OyNQ2zi3aixdFGfZS2Z77kxIzmjNirOXE3FAznH+gtkNS/cFOS+JS9DbNm1TN3X5XvGpmfZ2wMvFkzj+57vCNjlNH2h21qe+2EP+Uc3b3LvcLE+iVjJRNKMZdodhb1kM/ntibZxmswHOyu3ipr2xGpMTjwL3xLAwAAAID/F0rJv3r33zpG1h1XL+Nc+OvVaTH6+jGlX4Ii4/5u8js9vpz4Yh77ncNzIyG1uGfsrlRaSdO6zQ/zpGW2p4UvJ7mDbQqbw+tpKtyzs600/tClL99Q5nJ98HD0zReL1D0meQbcIdcnT5KEjd6KCX90ubfHzeWwA/luEr3QOIMGfdHD1WfJu/VSYj1O3+Ql3c3xvUmgkn9JjLEni7hUoWIHRaFWSSiRntOmSmVBY8rPU9KjNEU3Bk/Q6L5/Ey1wH39nCgAAAAAAAPCfcOsev+fQ1XAt/y4TMtstrYq/9/+J/6ozE/77/r82MYGQIjoiHfhm8cx4izP9rZfzd29rtzcIr7fFxr1tXnliT6U8fmlUpmxZ0uTSpTPTNwo5fsR3hFcIVAvovfct5MsnM1uaCZ33o7kh2FsjSP3grMZsut+NHnXL02cF4uxLqsWvSUZ9EBFTqywWjherOtscsPTlXoee6C1XmS7hzCF6lbPHzMcbVKl9ex/o7r1fwNLwh1hxsuOraPMnzhCrq8b9l7IVO7ITVj5P1CYx1pumj6rnrxWSR7b2RdG6dOh2pNL+THtvt2gfQPm4O2PS5PLYI7q5W56/J76UxM09pLwqPLma0xLDsdbmqnXcm+ZCHJ1s9L7jF7MTiRvrd7+7XWIx8KG0kLXbhF6e8IJW+0WV2D76QpM9b6efvCvLmH8u8YNXeyY2KW2ku/7ytVD2t/ok7Kps/JdjchdEf2Wcnd95oTjWyW8rRv1UpU2YoXaT27fkA051HadZWtaUGW//LHlTscGUS3rG6WuNBKNY6r7nM0JUXM66IkqK3/4kT/o+1eBVTfPWWaIMpN3DelD11e5nnTpROc+Y7Pa+Wp1mb9yaGL1pyjGhdaCVqUi+y/h90Y/7a7mtSUs7342vS77UiNJVHIngLFlt+HIyjPZ0xQb7orbfi3s7lfwaIhq400/eZpDe1LFi4c/Ifa056Fwnufjzi7qeg173H72vnpXNkwe+5xl23L8YKbvt7p/UNyn0QXNI00HydOdl9vJVMj8ji14BwXHvnYekfsjyFgje1lP2bqK3Iydk+7V7pFJmm9wgzWHSeXFUwrPanIW2fc36jgmX9Cf3s6LS+XOmZStCEZnBMXaqJFbE1O+KTaaf6fCVFwmk3r3ObOyQp8VbWnSZW9vR8uRH5ial0oW8B3dvB0kwfeSR4Tp74jNpzu58o8jXCRd9umlC1bniwm5SF3Esf5bl+PCF8aKW1BYXr8eSwVMFu2TryksZuorz6U1mxX4HHQfWxXy++zH3Jo3dfRJ7bt8+lkKe3tAm70AR0/Zrzx/ODb33jgqi+uNw+3o2edlbcQ1W6guFttUir04M1O1V50nJ0nw+ePETyymXeSFf9faYMZk6VwE/fnX1/b9PkR+KtKCUG6tQ6r5x+J5Mnrbg911f5J/R6kjZHCthHiS+d0VVyLSFjc/GtnFnSsOikWGu2k2axsyaiuTmeBYXnqYb6Y7ub1eXJr63ydkxJJilvi15OpRRL+Kr47nXeX2cPJs6XcqBtqZ6YkikLXl3FVlKkb8VsbWs98riuTHLlj1StlJe+T/1FQiPmPmGlV3DXWVpneb81vpvR9nPJYfIWhdx3VLkSxAR+1B/tCiNsUE+93Aa3ZATHTmX0LB2tyQLjdFHcdtxH/XYtRQ23tydhdEZzSc0zraNCu69vHxbVT7/d5Txi8yDQwlWUuF1w9Zrg6+NzgeZs5rPFQh/Fexg7accNTqwPyBNsIafTXRFfK/Gb+MhNW1mG9nzZyvMn2v+8ZDVunDz6gRx/2WlKPYq3tKdT5hGyqy9VYO/L9T0eL1gqmlzUMj8qkRZL25prll+pu1A5/PPLuf596v0Vt80Sa1wqT3Tx6p8NTHtDindsz4eeW/vs+LJW2bU6gzpPY86BNkCm3T9Tm2w9fWY9oR3chM+Rf4QOk9oT50p0iflP6SW3RxnaTRLbjl5wusVqdXJDdGOLQZORf/AepL1YSreav+36lWfE5wfmx8LVe4QK/Ajjj1ZfWjH1y/n6Tn/rNabbd+3UTe7Ukd3M4uP3m4wnaW8J2gwtLU+KrLnxBjpRJff0X1PKQ6u/Vl8nv2QK8uJf2ZVx6JfQeU7A8f04YYdOu+5r9fu4Q5bZ3iVQnZR0NODjzFpWOVcXR7dj7TTGjnVeoOnuTeSUhy9KgMpeyQFyz9VXKFW9WjpZfXa/1JHK61WiiiYJl7Dzym+i1fQefhpiHxP/fPk5PbCg12iWVfcIm1qOf3uVR9UqSg3Hd9txTfC+SVhZd03ICA/6srLGyxUDHmPRXuVzvhoif8+EHCR2fzxfasog6OOYXe+e4Wbqr30OSYX9kE09/Rb2sFLVK50zTViLly879OXqMTcs5yWi0wP08QO3wvJpfNoc9W9JtNkbuz7uf9MjegjRxdv1tNS+YlvMk+bvim8c8Bb0VD+mlTJTpemyMstR0k433f0tLHmeOsXiDiOJUdbCLRFpU/Y7mIpLtW+krI7QDYk/vbF/e6q3VvM6seHbEWp28/wMPBSRJLQWxel5X7eFGuP3nHurf0J1wzVJ3QL5f6pO2k0uc9N2m/3nD2iqZov9ow83HC127/mBpd2qQQ3MWfhvpGHAk+4dZ5ZjKSoHkjbHp/ucz3Kdp0yiP3BmSu/9fJWZFjSBy56FvmpcLkcWrlqIrbGahKq/t1KyDo7MEvy6reu7J2VE0z99sdyQj/yz6hr8i4TxWtPupV6SH+/NnPD++qQ+7bDiZSjwWzxSkqfSTZ4P9psOHMbar6KoWEimtiTv3Qlp/SlNMmp3+9srh9Z88gtjJQWZyN5yRr+gfklk8Gm6kpns+k1v+mA7LIrd9p3jitXmlUXXVCIfOWi6UJxILCeeN17asgmW8NIuDH5TzG9oV6139VoidP6TVbrl/vWdt4/uKG/L/j5XaUln1fPa5SlSwrG0lioZRWfarKNCvxSzze3PW8Y/Py378vTT2KoTglITmzN6bsNKmVGPksaXNQ45Ut36NGkeM15lqnPbB8aJo+48wd0vOimWFcfUX+xcvquKsvNgKFjP6W5JPPGeUoEn8SU2ontuKhzXHQ89nXfcpwI/7GCy4rtOzbuP7K936hMySj+pUSk4+0VwcbTtRrqzb4qo09u9ajWPpLbZ20bt0HNJUppZuSf1kE3e//VR16Z/vRJ1ad50+kdURNPyEeWLbaSd99nNF/3VZzKzc+JymLndPguv3HvV/LvV9m/3L4o70yObJkRMtTLY+GkXe6lD9SY9a1h/aAepH81SNnC5PqbPb+qrkSqfbwy/OZp7qejm3Smpot2YblBce5trbz7wzP5Bd06CSWCrg/mqpfj/Q1ijYx8MwwbAqhCTz4t+PFTXnYqY0JuR/yR755ermPPGCpCEyMaKlVEmmZ+5tnJaH8rjXdV8atmO1cenfaLeoHja7BQpN0f4h8OPVS0p6Lu3Tpowi3qt9yxkOvj+Jb+9Nbx3cJp9+Mvcnrz+xaEfpOiDi9LK2qz8ouScbZz22cq1+fxiffP8axizcwDU4e9Pzy/OMubdTGf7lrMxm3nmHjjPdcsgiVye7aVHv+sVkrejunO77fpjuY269O9KqEm7PUnmiSItUgzaUheZ7/gyaCHHGaD6+r+YbOW4516dQKULfSflHfyDBOeD+1ni5i6K3enil4gbeWn6F7ZaTahKt5DH8o0CpTqbcYehAv4e4TrTsZN91T0tmg9TEh9/3S/XqlBjcB1VutX2q8eyMdL0MRZJty9KRWikOdJu3UgvFOr4/XA4dxj/q2+CfM+MR8V1PUkdzQxWj0RLr4zurmXv6bQ7DG1hKaI33QsfacKHZcraYRg7Y2RirnoY+1Dyeb7vQ9WdbXN7Jiaz4g8xpLIa/fnqO4wbYBAeu2XV2Svhw+5yBxTunC+uphh3d2aseax6ZpvrlZJXbq4uJpLfXNJZUfm1NfkVJrkZClfL6oj8t+I9Q9frm/PKhRkX5tMG4sK09jiuWinZBpofFZx8p6tUoB64I6rRF/fCgi9st7H29JUIMPKzMegrORIIDneMub1+MjJAqOT5syFRKxJbLr5fGfMzIoz6APXKcnKTr2e0hci0vYstc/U69v1ga0qo0ajl46HJO6bZ2aaA6/UB7uF1rhnLTbpUeqSSw0R32+sTPw0ruuaZpnnpVefifpce/6B3pfmklTv5qhENWaW75Nuwb/JuT5e5jw+8s4+Tp9W+daDarejd3ZW75epjSQ/rfDZ8mFrcaZrX5ZLM7Ml00mFm7c6qZfkTp1Q8s1ZLDlVMpjhQSqt9DE7hmjozy9Ku3sW+h8zogetbW38Coi+ploLXPapjNiaJBFeNF5oyCa7POHStRoxmf875hKhwereC5tFY53GWP792zISzFeHDoSqDDiL2brktb7svL7XLfb443OnlYROFuWxCZG8bpvg8jN7dtRfnWeujmekwzi7l4HFUeyaV4cOSxiVx7hE/29al2GZnPwvLCJ0+vd/1vzq0d4QN1CSXJ0skpA0mAu1O0cR98ws9/Kgadeqabesd9Iv8lS+vbpJqwrHnhZott0dtd2bfnt84ABLEVm36cTzM1wLatZa0/k9WVO3ur8rMx5/ym0/zqDbVSG2r29yO9207q7y41P99T+Mj0Qph559+PNNqtIJjVTj7ScLEkw947nSCs9KGJefc9UGhodqVCmfSOiOH3jPmjm2xRXJV53vkhh28Kz4Lm4JNiclh1XpxJbHZ5TWbhoqMPWP7Q7OsN4Tzap6nlvbZr4z1OmineLLb/sU2gTnCnnyYyQWA4o66p9r7yVMJopfptPrphHeeSxHQm/oQJd5VVyT/RUt+fygqKhun0x1k28/9vM+Xnsbe3dDrSSpZZji/ojht9FErnnygp9JZZ3POvOyfr1Sa3lR3fTxfANH5pk2IarKlx7fCfmLfBztx1R0ssTrs1fMI1RNqWNlVSqPjbV8VFYPGKho8qmjJP/w8fWClvKSiZb9KpeWz5WDGXwJXj1v+8vIhcLye0qcnVnpH0jG2MnPDuUNlXxqu+5whX7RgJ1I+Zdl2hO2M8+rhUg5dppc2SoMCd/P3G8zkGgv+FgusPS5uhshkVu+kis7da6AtneEjq1llv9xbEh7GrP3vkF519KM4d8LInMf1XaPXJ66GebIftp6vOtByDuryDeG6RFnP722epdwilybYsy7uspuf+Ss67fmLAa/1eM6H7hG+usGjvT25DwiKR0uU3O71fqkYMK+T8o/YSqwqtvyTmWYVXqM+veNdJofQ4pnmoLKvaZ2ySdLJxrNaYxJSbxZmqWJjeQ/qrRuOB3VzpswbF3frzA50eJo0mv4vZdiqffQfkbyoOncw5vOiQY7SVZsycJdHO8YqjSPcEUwBLZJT+feaS+fXmw6xrkoXflmJtC8/JfGxyphaf+uS4XyVgFrxZKZbyalvrPmJvtLi/cI7w2uuJjDtDdtnT3m5b3EgwJ7T44Zrxewni0mfGfh+dnR9Yf17lnFQsuL6tP3lbV4qjQzzBrqm3YQrB683KLw4ba8QPf01IE36cOaEZn7KOcdBJgUZ2UtPN21r7I7ZVk8dTrLvTP7p2W5eNjOyy2RC5Z/9L7wFe5648AeGRdjeo27s4KBreJkV87uWLUBWvFoepa5H2fY5M5TBEvvE7/00FLB71PT8/QzRefSPLrqRn4aii9G9hzYzAsYdmeMsvrMoqPr4MmT+CWE+rr7QMme2/ecWZYprLkSvCZ6+c+Uf/rQT7/J95DiCtMRSua05MNEbYyUgXvGznpb3siu9Xs/mrNs5ZfqujFRv7XfMT72CF++jC7RrsPFKsbyRYlHEzlP7vbov9HElGvrm/mckvygJKFNRWI+Q67lmoM6p08eg8a0mvIRlr1/3OPs86zHKj7f5zZ3eOpFzndQre8wc+eNIN27zsKFw6wad/j4woUcHWZnRb8GsqWwdlhaRjJz7uU/3tdwy8pEco6V+v37Jv1ZCgPn0LB75K8HS9+1HZXh1ftdX5fhdfGT9orG5HSqcDrvQYqsPG+GfYX8VU+2u1W9xEKO3BitcDp6uOZltFnK2Jzng2a2WcL3GcqiTTm1h7Ul9Ql2rxjljz2Yl7tUJHKgi5udvoqzMknMbrfJSbv+WWoelrpDc+fTz5P+JlcOpF/evKolP3bNMbnNrfJR+9mcUXKWj1bHb1L0W73bUHM6K+X/yF1QgSw3e/5hV8i7lJqBhL1pwQqNr63lG5x32N5jbrxRzJPA8ELfts3+UCkvpcHXK7Q5/qkh3LMXi6yXOZJ/8Vx5F5pqdHm1U416jo3m/N2zKyIK65bXervn1CnrxBNePlM/tl3h87Kmeq+qs4R4/NEHFKdvEq6sUA9rWq903Nqx19m7p6OTJydVT6uaqLmD5+wvs8KzsVaOL9TbUjp9BGUVSG4Tt11SW3pYxShZ8n49gvTDoKBo6ZKPXM5PCicjk65oncqLstFPVnM2zNsm1SjI/ObcogWaDSz5FkMSvcoyPwxfGGKfr3c4czrAPIHR+9SVco3UUw15u5QvZZziu7HriqBe3NP6Kb+x+b2qg/zmcVxXt1odp/0s+xg4dL4tqm+qVp6zuF8bfea+nMEjSqFbY5uyyxyzk89T7iqFHRnb/JBfLyp1Xo6W+Od88fzAVlSL4ZxiK8fVUZGdGZuWpZe7kpRsfg0xyomFP3E49nDck0z1fs0+AasC8ngnm58Fu5UZEuy6yFTPyMRM0SwzPry966hedtfuI1afOm/b8D/vt2SLEpL+qf1sOvXc1ZsxTYV7mKV0Mu6cVaOuTTinIEGv3fQ+JGhy+uWPQ0GVBlN9OhSO3h4Gkx2fZDpz+030g5oa6AK6r6r8i399BgAAAAAA8F9Gf8/kUafMsBfKapFPUx/HP/t7/5/kr/rf+//hBALhSPY5mh013IeVej/k1BhfvN1sv9zG/i6NMrcorqY1fFtjoH/99okfV4PoDQtFRYeihA/VJlsvJ62xHuyd/tJYMDJL3hNR7Dqf+js89/Pej0+7mNu7K996UrwV8nT1kbtNJ+/0o/vUozXG+MUu5yMPB5UYr6T9MXBUurF0Yafx0WfdtHOsusHvl2ZqYksnDUP48qKnWPTKoyw3Cz5duN7x8sy6irtfwSuyVqeFp8lMinErExVD78ou1WjF9nI+u3xUrOcke+OazIu0hsnFvYIk+uJV+8yYnzesP2M7kCYlvHHg3Sg1+S8nU730QG4V+f2J5qdj3ghTunTfv+Dwm5S2+/oHgxMCpHyEsqIrk1dDJO28eBmL210dZEIVuNf0LN+9jauNj2InMtE89NucNvoEFUtZgpiL0dCiZIMi2xOyPzoPyFb1Ay7JCnoELuX3tzw47aDczqKgM/go7rD9ISKy88m0GSYjhSrbSQFJibnHyHg5SkdPLAeYW/XrS8+mRWbd5w+6EaOtbcn3Ss9NVz9phDU16EJyfA9nvFGLfeMlrdK47fhgkSqxsCRzpktTvs59eYwjnApGpCevPX43m5Vo9Eeu+io/wbRg160X8cysO+1/WlU7mJncifmoVqhG3kHiS0HlT5etOB5P3D3F7u2pYEFPfP1Aossssfzg8wef3Z8KzhCrJ8/RrzYw+glH+78P6jxffJF2ofOFgxpPlfizgGoBpqe2vp+ydUy6O8WeqB0gEWr3u5nOSadXtSbKzVU0U0EZ/7u+1ylKyScoe6Nd6MmYGY/mraXXifNXr/ga/hn4QN3aQC9gkqSmfTcmkr6g3ILStPUZu9IThkbKquHD/KMbFAemQrULS5VJqvbLuZ283CLdQ27jX8a/Pzv3InPoBa3FGtI931ySdsx05ktM1IbwSYVm+OoI3d3hIHgpgSD5tE1Udm6duS/yHXlP+NbK9dnL1b8Vds/LrZJbuv3esUG5tuuNrzJ/FqEpXHfj8slM1abgrwUCgcEZOfeY7hkoSp6uVMxQr6ZtfJQT9tVI8gjZ5svFZT7pnL0p5GUsp9/3SC+zNwkYbclokosdzhCX2Qou8pTb/ZTfpSN/nb+HzUPWQU6OUSTBLezw5o+UkhlLm3YzJvmCIb5DAVQcZt6bEU7TdyzMj0rW79C2upG3VHin/ZgLgcWkbGuPlcuRN7u8d80cTBQJDMvtuDZzQu+38J599iRLvG8btCMqNvMMFr4TO5L38wtLu0mqx8xRNgiFtJOe/6FRKaRD77L8Yj/bKPuZsTfZOyIYrl5Okgi/H9CaeXL1wzviY0ak4V50REJvNgMi7piy/DmbX3v496f3T/e0OwRTFnSyEOKsHU5UNtZpldevfwiM6NwfKJCfqJlidaT68Iro7lwbsreH3wdo9jdb9buay6pwFe5l/tHJu3vfSYd9RzTb3nhq7Hvpd91BU/uKT9YlsR8291Q+dHXs2Jtcz7QwtsI2dE9z19HuL5U/J8Xct/kPl+x+5XeHbCjqWb/M1TTJr/SzT7Yi9sRES++q+xffDgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6vRUHK/G+xOchpRXOfcqu/+bLP6SpbvwxbVeVOP2W1qD/pVx6X2KVRWDOLmdlpyRTJloxfZ9Dc+g873v3fw6G/UkoCgWiZiECwfPBlOKSpjem/tRERCAQSot2+BAIdEXETHdE/9SCyQSAQzP7Hdf77YsWy+PX/Fn3DKf5dO+0/dfLP4yJQk/x9Pf/uOglu/+GI4L8gyr/mWRLvjzlr+zNt9/UEVQ7tczPy/Z+HEFH+w3wiEGiM//n5xP+Lfk1MLQUEbpi7Mxt4OzgwzuSRDoToC3Q/HvtiPs4RFtZJPD97XL2rz9uRjEAg7Pjr8d/8PVuZ/z75X/EcgUCg+of+pf6DcXH/H47/yP8mZ/srkv8Vqf+Dfv6uc/0fHv/PSP8pUv0nn/+f9b96zf6/tPP/5/P97e9x0vwVq/6Kh/6T/ZD8/SAiEBMRSP/HvdiG6H/OEcI/vG5EBCIC2T/cR4kIxP+WE/+PnPBvOeF/5kT/lBP/U05C9k/j+rfz/jXRSIiI/n3738f9UzvnX+2kf7Vz/eO9/n/hwv+mneWvSPnXD+ra/8N+XQBZdX9xgn9A44TgLsHdpbGgwYIlQHCH4BoSnIagDcHdnQDBXYITLLgHd3cJLlu1E7amZiZbW9ndyex/P5+qrnrvnepvn995t27f8/F94L998V9E/e9e/B/n+t997OvS/0kv/zOE/a/uQf+jzz/2m++vLyPqX59FDRPrv/udD/8DH2ubW4c229eueN8Yf9NHmGVh/soP84/yC7ZPvDpqaJZZCf4uv0HYv/LD/qP8Q48LJL4W6eTqv80f8TE/3D/Kj7Sv/bDu97an+9v5PPo4n6B/lL9jRJfRcYrfqvTZ3+XP+Jgf6R/lPw6qvf9D7+Wj/rb/7B/nE/kf5S+rub7iy1xLBv9tfuBjfpR/lP9Z6K71Pw+MP/Nv87d+nE/Uf5SfKsuy0D2hHcv87fwPf8z/5B/lX/qQ82n8/buW/u31WfTjfGL8o/xYzdIlidG5R6a/u3eG6f0/+z8swH+W2H89Y4X+9f6f7qn/d/1X+8KEGGH+yzNftL9+Pvl/8g/9N8L8V7sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/uSq0fdRuZqqVg/J/u7ddmWUPIlRvefrt2vPVztyccu/NlrdrCmbNP/lMo1PJs2Q4eHT70egpbtW/1rPswe3nan6XtfbYrOtvDMr9Xbj6f/Qo2aTC/WOxLkd4eiThnXhtpo/JuvDO++Qz+k8e8UWdE6c+j5ezbadJhQZsXjKo7sTm9Sq/ODmgXOiZloFrV0utHTDlZPxjy0+eDuwY0WV0nOK3Kn3sKygQCCT4d0cDAAAA/zGqvdx5Pu6FS43SpuvSPOvmZ0c/7uFh/6oHBSIFEgQ6hxnTPufFCfG+z7NwfO8X79/XbPrq9u54C0oOLtpyYKFxEW9WiZz7+dRMh4asSrnzm61Twt6tEO/PrqOaDm+T+9yAkeVKrNt/u1z6OM/LVquVqlSb8dVnT05UPPK2dcl2XMh6O2XsaalbXio5Z++19fHbV7lS/MmTG00KdixZ53Lw7hZLewxdt+N8UJI5Z5a2rdq27qjPVr6eUPNJu1PvT9QttrjwhCzNf8hw+8ovB8+dubPtVrZDvWb8Eb1tw3nHb1VPcjDtuU23C305PWn/jvdybrv56F37w78ke5Uo19M101Jmefhzh6RZY6RPnKhkwYTtP0sescGIxqnOFaqT/9Kz/VUWNx38+9Yk8192flzg8rz20VbnaN3+WdwMkWb13vrZ0EtfP9oz/VyEJ8ErfuowtdHpR8NDvyjf8tOEvcuMHpGx7uNXt7Y9uFAi6MqKZUsWzTiQcdu8nnfi9kqeaty4uVmDgrv93KxP/D/elj0bKWK8os1yRxiecNySzrlu5D0YJ8PFNmdvPPh+zvqwoXlP7R7R9cq7gcfOZIye7GKHGONe9X4bMjbL4D+vrKtdqFGs/A/zlJz+eZX8G8o0mTZwwMTlxat/iF/6UM45I9eEv5o2VbtZ+VZM3fX1iaUxwyyvH/9yydlfP8l5+ODiZgVKvKk3Nk2hCNWnDU3fL0uKxw1Hp9mR9NdvDv9R8Ld6h9ZdXzD4eNKfC79IebFC7pm7U1ednWj4tdy/VY6xLPSXQdELFZ1QP+TiySThGrxIPqbpm1iDV25KfuzXxdGuVqvXOmy5YrM23SjzPsL7onmrFsz98HjYBhmXtcidomD1TtXiRpk8deDs3k2SpNs2reOi8dMivus5KG3Xq0OL1M/c+LtJQU2zdaudrN2Dpl/uGj0g2ui+S6/eGDn3xfEq+Q99+vrPxDv2F/k+7Owm1yc9qtXsfFCDeBH3xrk7/HSFDQvaVSrxyZJwzaIH9sSfuPWLbAu/ypLmQs8C7RNc6LGz1pi7k+vWazBlaMcZc2YP+3CndPNPHu7Jeff4h+bJvg7NeCHWle5je/XrniFo9v5oZ55dfNV3c6lho8bHDe4watb1zmdHHL11/OcnH+LGzJKh7tlmLU5dmDvsQM0s40p3/2Lb7lJbYrb5cVvnn7NWePtdk5bXO5aL8qHIvazR/xgUfUKLew+WPQp5mDnN6Cqr8/6epH6emVvaFC5+esGN3SczzYl/ccyUcnnujtyaPFzWC1m+mZVqUIyKQenbLLg76veMEQfW+nJ8gZVTuzzZW+hkla15x8csubVEmHsPu6zv9Crroeq7Dy9oXi3wsMzQ/qmbHOy162GRxyvzzhxedcvn3Xbdr/O+Tv7gOU/G7S88bPnPEbecff9l2w6pCv1y5mjmQUnH3O7U8PX7ob9d2T8hbo4xlb9JXPPUiz+i3Ok/pEf60T2ad8t0ZMGLr2uXHDs6UokyLTNMT5Yt3u6d894FB8fr/9257pkiLY9/sV3BTTnTHbt84liyzOVf9qpe9JPnz/eOPnv+uw85l5a9evLJ8o4hc8eNu1y7zPTB0VZ2j5K7a6Mjp4OqTipZNkXQtvvxw8zdVm/10N3BO073+b5GjIwR7rfenv/Nu4qVFzWpNqpWyYTlht25WzZa28VTmn6y6sn5zGHiVvoh9tnifc/fmFm6ea4vgvsdeRAvcvfv1hTLG2vuvc2JMzfOePhFw0XNjmzeerjHLwWfFOlc90nzi+cqzrq5+/2uRbVfz4iwcVWNKd2S1VmzudLYMF+eTpH33ej8s8rufl/4wvCihY7XDzsrxr2VY3P1y1YmW7aKPWPf/D7BtqybLpVf0GHC/D5J0g34fNTJSk/WjJ2xYfSDVTViFOm7Z3qGlVMSF/lhTaF8J3aEL/OmdrP8YWNcWrz5eo5rJW+NCfky/IojLWsVujaqWb5UbZOc+6Nb0Odxb6Sv/ipM8NKJhULOvntyOM31g9+8qjkz8f7TW66PXZUhpN+FIsUmHP1p+ZfvdvW50XzchreXIpSN/3WLRTXzZsmVpth34c79cjHVzuCh2yKPndxxTalRM2uXbXyxVe9S69PNmZ13+7OSnX/Pc6Ljp3c7DU+cNUeqQNNxP214dyT5/l6jr9wKanN70sShP/bId6lBk6IzN2Uu8lXO27XaNHkbefL7Uj3v1Np0Z3av3WPLhj8RfknKpvsS3mtVK8HyrxvG35BoXb8O51dNGxz4Y1DwoWOZolyt+UuYJ5FHtByc4Gjj0QlOTu+6KX/gdvMj1w4O+HVtn16HUo7v3fz31plGxyoarXLOERMbFYodtvP8WXdKjO/SIe+e5X+Ujx5555HDyyKkbjd0T8ili7HyXhqz59MzldqXDJ22JsGw5LlK91h440XnKgcHli+c//Gdlf0ijPju2vBWcZsUPZF7yNRK+ydHC7t3xaSRlSJeSlH5Wfvq15eF6f+4VqrZWzrf+LZmr3Rlok7vNTv2D3vixDpwZm/kkJfr09SOEfLFvVO7j3VumGFXx3Ox7zS8Oe1VzeEFO9wLybi9aGDE6DBJi05YXyBu4GHyS/vvvKuXJsfsjZ/VL7BxydYX11IV/SR1xh8adJ89YciRJufPj2h5oMnYy9tqhy91Njj74y5xkmS+kXNVnVJFZ1abkOLK7s6ZGyVZtmFGpNedah2qUDhdns/y7y9X+0WlDhnDzAzOVmTq8HwREz7sX/NGlalVkg5MuWv78EF9L8XsdnDwnO3HH0xu03pe/NNtCuWo9GfHsbXzT87Q7MRX7SsPGl+1957UQZufXx/ev2Pd/JHfTpjzcl/iG50epJ+04W2YCudGZHuT8sfC+2MN7Pf2Zcdqg/Jtf7CuQfP8wcuXr47+PPbJ24VSnN49b0LPeblen2k5N2rywX0Cy39Z+1vJX18UK71sfp7Ovy5asOSPhFdiFb857XiHhS+uhVlaNtqEM2+LTYsVvd3TwsczfpejQ5lJl0ZHnTXmbNeppSe1XZch062R06P/NHZE7hj5pm3JVatAoMvCI8P31Q3ba+r4vp3S/Vogbb7EWys2vvXhz8vHdhUf9+zbr6KeqHd/dfCyDqtWdNlSd+6b2XE6x/xq2eGIxZK83D/41bD73aLeqPy0+tJGfUalvzH9YtTPvtmxb0DCctcWT00dPe3ynXWG776WM0/WQhtX10pYf+nrPBGDTjY6NSTk1qNvQwvlrffTwqVxO6bZt2H59q+3zX7T9m7coPOtlk3OHD9ttOlhX/7cNajb+mEb8jYqciZR6PQCVVpMSBS84FC/c032T/mh5OTmyyqF/tKmcul3ya73ijl8UPYYL2Jlal76ytkvpm8+F/nxw3IlByf/9W7944nzbNyytVfE6DtPrVybdf7+mqEJr7VIfv9O+/mrY02oPmtelMpD3mep3XZX3qzJaj7aE9L6RNSc00cPqhpp4poIV6edbhZz0cMXx2ImjN2h6KBFN8+PTlcwZNKkkAuLHmWqMbbbgJlZAo93tUkyc8ztd48bp+yysNT8lq1/TN21xatPIsca/ah/x4uXG5cNH3vuhlInxme6e7pprb4L76zv8d2R2veHnxs46X7DjMnb3t9yrUy8bbsKJklxfGztMzsilbjYeVmFJFMy7J6cv9+YhsnHdSsY2qj8qes9kozJcT/qu6bRYjx5V2dRnWGrr8561rhT9yF9e68ruOZqidT3z56vmWJ/t9AWK8IMHZx4afz3F0u3nXssbYkc20KKJVjbIHv1xrmGxhzb5dtt/XJ1zzRo+60zc5Ze2vF9YO7AtquSzm5x7+XIZzOnrhsTL3fmN4nvfvth38zwR388ceX5ntPvw9ZKETyg+vXgvlsmHXp0b3iZIz9GLrw0faly5b/+EGd2kRNPnjZ5tCBm/uZ5xqQpF2Hl+0pFEpZI0fKTOxFfHJw46szRS+tjfgizM6h9SOW64Rb82rx47GTHvrpzMufo7s+jtdsRtUnUqwVuNphysf+ScJsTfNFgZtaU5V/dS7Gx0oAVuwsmvjstTMmwDea2K19neKsas+4t25P9q4mVR5W6NbRwm6abit/NV2hQvtN3851PcitqhFQDc326dce3iRbuC/fkSuYaQyqN7JvhVNFb6zMmuFSw2uHJ94qVftV09dWLFR5c+bV7ki1Xfrk5fOCCbx+nzBwyMdakTGePddnTN0q+QZ/mjhXyJErI+w65srXu+WerX5ccPlNk8cMPLdJXebemSNM1n/VeN27G1og5rvScXHFduykvEsQrfvtI7GVTyy/OdPjF4CojFwbXedTxYdkRGfv37zSs59HpQ45uSzTocpExL1qvmJov+Z48PXcu+rZ8qn5prhwIk/ZpuK1hC4Q+ujvzer5ud17VjHPiWN1WXZqdGFnz0bFbF38b1CZNlx5XbwVFijzvSJ+DDYYVLDa+eMn627u03J/05OQCxX46vqrgsdg3ntcfWqLbgUGXNs5M0HbAk6fnRqQ81TxVgZrFu14osL/R5B87xzx+LluWC1NWTEwTtCbPqeA8xW+9aNMqStDOf3m9AP4X9rjBt6Ve3j4REnne0UcRbk+I+XH/j/BXPSgQIxAxKGdgTL70mSOU2/Pl49jHT12OlWTR5XwT2vw6LMbaKGte7G6T5OqJPbcj1Ny+9c8+5Qbk3tR7fYs7cX6422hfiwzbClX+Llm0Mt+kWzHyVZJEcy/kT37isyzXi18uUbZunbbZKy8/NmRUcOU2N2e0L1LtduZPb18PBMo161f2UNrL41bESzV5WJzuBe4X3Bl8p9ag7PFarf5m1NnqcbYn2ZKm9LrQzREaVly88sChwVHC1J6U+YuGwd+MO5yr+N4ixX4d/EnKZsU/vzjs1MsmX7XZcirQqmzcL+ovKvosdqS62xPH3143ythuoyefq9Ok59HIGWMni5a9z9o4aduWfzjiWdJEO9oPfjKzw8KFa/K8qJmp75P3Q5uOe72/47BkX09o3Wza6mFdLj3vFyfRsa2ZJn7d9+nnjYMbd0kQvP3d7tGHiua6N7DVzRkTWvxZdW75liVPNc4fs2PBhJ1L3r75ZsaFTlN+mtW/xb4cg4qmXXg1aYchXcfX2r0v6ukZy+692bK//7VtoWXaFZt+vMGVVonLvnwVNlKFZymurq6cM32Vp62KrUl7rfPeTuF2h9ZKsSzqoUuLm788sWJnmj27Tj/t8C9fNgAAAPx/zNEDey8OXvtT4841Wzbc+7L1vo/7f8S/6kGBBIGIQVECIRMvF8hadf/u1DGT56pxNc7OMRPbXTr7uHDcWUd3DBjWrWTvJ803do2QbWONyKF3X6xtfCBzrNMDBp6+lffDgvkJZ1ednKfEgKIlOg2+X2JHs+JDI4Ut/PD7f/nYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL8g5Pz56kua/vlDz9aFS/65/trg6i1Pv117vtqZKi+CBzd8mLHI3dJliiWr0bx3kXyzns96+13z2Gs31Dlcpsa3ZdLX+G1Lrj5T4h5rl33snSnRVw75fMykO40G3XkXOXWD4Gq5p74/F2ZS/WGN2y/IUfrPe7+WnhP5+C+ro+RuNWHQsr27wq4qsvGLPF/3mH+95cku3Zcsyrp00+bWoc32tSve92NfQYFAIGLQvzsbAAAA+E9RYGmYUg3zllxZY1/qXkmSrlr3cQ8P/1c9KBApEDEoV2BNg4hj7719lSbaH0l+jV4+9tnZRTItLD6/3cRMbcu2fdH5Tv9TFRNlyBzpzOwETWasnLe2cvS2KdIXvthp/ZQnPxyqsqDd+hIHd31eKWrUsimvDG77beHZnzev8ODQ0GplU/1cMG3S6MX3jWzc5n6jtAcfVIpe+8C51z/lmZX5Ud1nR2K/zfLnjSefxHwWvkyMW1FmRQwzp1vKmoEve1funzlf6j+Kjnrz8P43JQrH6lI3c7Z8rduk/3xe9n4j+s/NmCPNopTzGn4euntth1GVy34SZlGqnAerbO88NUu8/ElzZ2nbYu+4ATuLXYl5Mn2ic1NahWaJ/XRSl00tMrarNnXts4hbX198NfRh5fLZMr0u93OqeRuSR7lV/M6MUlcjftZ3z+p1YSKvHFLqdvlqX1ZqsX5t94IT9kWp33BhykU99hVtGbvkd51ahQxeFO3gxA2rr695tm3lxC4dgw/snH7nm++z3ht1IlKtkwOe52mx98qxIZ0XhbQ9VuT7A0lXpzy4YlVgdM+L51qdT9oyddLd3/w+Jfnd7otr73qWvfgP1SqnfhohafvaO1qdmNqv3fo+67bc3Ne+7LU5FSMN+GLr1WRjw3epkiZ61n/58gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P9nhhSqeTNS0Iy9m+Z0jlPl4PMN1Vuefrv2fLUzBcMN2vj6+1aVLp8t/CZdo3eD6r/fU21KikMJM3fodqN1skulky55l6v7hoZXXh0ZFCb1g63HXr7MmDV4yOAOac6datDi3s6KLyaf2rM6+okr82a0KXFi460ed76O8dXZXYMHFj20e9Ld8hHLTz8Xv0XzeBFCyr1d+XD7sN5ZPwvdtf7ngfFnfuwrKBAIRAz6d2cDAAAA/ylCDmXLE+Hd7PyVC5Y8sGXfgU0f9/Dwf9WDApECEYPCBSJejx6YGZT/Wr3Zja9Ve563xYOCazN8e/JVlH+5fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H+iSXtLfX6i1Mxive936rZ4yv7H1Vuefrv2fLUzNec2rZg6dc3c08+3arE22vUpu8b8NvyTmSN3nfitbIxA7rODi3zYWPH35zN2lb++P9+ZMnGzzxwbLtbcN4vGHWg8dn2yh29G37nz587fz21o8kv+VWkOh2YqFHZ2yxpzIvVsOqDurZK553eOcL3Sgk/D1MhYZfP8Gzv/mLQjZaosy0L3hHYs87GvoEAgkODfHQ0AAAD8x5gcI+v2lQ+GpXn1w/KiJXIUO/dxDw/7Vz0oECmQIJAq0L7tsGfbv2l7NLRC/3orRjaL9jR8+BMZSmWak+fGi1rtUqaJOr5f0fWvc8Xcsyfj9Ibxty3Yvf5EzYdLmv6RYn7zpsML3LqXp0u0gZU7rpryutXLqvNvzqpeY/KnmWeMDf/p91u/vVuyUubz6ce/nPpN3M/6fhrhSeHZrcIePT4kQ+H7T/qv+6FK2YSzz28cf/zgm4khOWP3zRW7XtjEWX7aWa1+qSZZbg0ptnB3ra21ylT4PmjO6Zb3+5yNGO+rdZPLxt06vnLCcjW+HB3+VfHt2QuM6jl1c5WuO9OmmdS6YL9C34bvEHNYztSR263Lljvxu68SDlzQakzk7pW+Sxy9zcjuJwZkrtm39OMCU953jvE0wfPu7xucu5sqTbGeI/JWztZ+6JnTm+/0L/ah8KkIkV7U7j3q817BJ2/+y18fAAAA/F/ybezBScaFX5t26Jtph2onbJnt4/4f4a96UCBGIGJQgkCU1/cOVeuYKNzFzNvznft9cNY2VQ/2ul13eq0PqScmu3y9VKuWRx9k39Xsx1cps+RrO6hDgWZzm5Q6Wrr0jr2TK/QsPLDiutc1RhwfOvpW6aYn9sdKUrre3YjZc1dLGVqyeNw5L6qtqlhlR5mk3cemOPB5zOXhqw/bNbJ07SatX8Qu3D9c3a53bhYbnatY+Y0zduYZGb1vkuzdU4e8/nDwZYa3I9NdnTX71MVeI2tnGVfk7Yh4p6Pnzzmtw9Nl7Y7tj1ws8Y0dYVvm2f3+ff1Pkye+O7bMldf/8pgBAADgX1Xr0PrISVr2DZurQvvFi5P+9sXH/T/iX/WgQIJAxKBIgQULEpfJV+VCotzDY/+cbWHIpqdjLla4F696vaUFYuf8Pf69W0O6x5mUb0SCNKFrtr3LEOvtrtCWCfvETP35/gHnfqw9fdg3n/3LxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hdSa9LTnmMz9Ku677ewyR7m7bejesvTb9eer3Zmfv/101dMmxpjdPbry7p0y7esUImu22rFGHWj1/oV/Ye3iRkta5L7xy43m//JyEhnu6+p/fzupKuvy7/vdGr8gLh/nCnxc5+Eb354+du+nN1vRqm64FKsPdPPVvuq0qOenavN3PMi3+Gh+ePOy9K22etqr+s8u3Kt6+RXbZLHirSv/bDu97an+9hXUCAQiBj0784GAAAA/lP0+i3utYaBK2OWvXv+Zl/pdpk/7uEfV++gQKRAxKAogRjffzZh+vhDX+cpX69smcIjDt/ck7NTSMN7z2cnmnuzeflaJbNeejd8ZOoufW5vuD6iyJm0t/ZVPt0kZPLO24mWla4b69WOJeWrjAu0n7S3e7mjibrEyNcu5F8+NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8A/U3NV7eLSY5catHXr9t5yDz8yt3vL027Xnq52pkTtLxta3ey2cXOjcjZVXpldr/nRm/cN9x67/M3Ry+fM3q3Y9O6vk0wExamxNfbf5kqzlD/e+O2BCzQoLj8x5/STelKcbc+xuPadjg+GTFs9rnKR/2kdJzqytV3rxr3WL5s7ZefHmHQUHb059Ytear6rXu5l7dvvYcS+0jh1hWc31FV/mWjL4Y19BgUAgwb87GgAAAPiPcSpCrIo/bBta9vGs1ZsPZDx6+OMeHuavelAgUiBBIEIg3m/fbqmwvsPwaBHeR9l4pe6Um6Vvx6+bsHXV+fHrjL8XPmblazcilQ8/O+32Zh1jbGk4aWOqf/lYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+Lomwf12XDuX0zB6zu3ONJ8+PN8x2amWJWvjGdrjfpEDol5M+KPRrF6dDv+JCsP14tOu+rdG/bDExz4+vrKR7WbFgvUGLmmA7FC/Z9eDZu9eOlusV51Djx6w3jc00MFxLlw+AKOy9fXvx1z0ETi75uvmNGgeJ/Fm10/lyVk3F2V+l399SlmAMax0qUfnPWe9seJxh7K/nrwdPzX+4etmmFaN+Vyfr86O4o51ZfyH+51vsmHVst+pAl3rKLWe88L1Stc5OqIdejfNf2Q8YrZxt1bzCt6NtPbi4p+H2hNm9jXHge3G5zn8O9R90I6lo/78KDazo8npr+Vrikw79c+T7doJTjOqQ7eHb5wpdzdzdfcedtvarXO+b75fuRHZa1KZZtdcbbG649GzqsXZJfV6UYFf1szrgFtkwscaLasx31zkb/9HjE+1kD/evXb5d4w8OVKUtdadZw09CoDZI9zj8g7bIo7RvnOxVSO2T6lK6T9sULnrK5Vcquja7uixkaae5PA4ZW75M1Q947ZdPVfV4j7PDXKQYPif/5/RhflT+Yt+enFSbl2/H05Tdb61yffnlJyzLvr3eOkKbjiG6Lcy8Z0jvoar4E7erXrfzlkjIj3yTum351lkeRf2rbqMLcKN3b13hXrm2RfeFmD2x6t/bvu6OPivVk8dh472smzh2pyOk0uXrE+uKHksHB5ftV+aPQta9OD8xecdXB94PHfHOn18qLy9u1bjz27ORm9VtWqx7nYaTy/UvHWF5/wtsMh67WeHt20YeGwZ9GezNpYbHr/Svc/Pl08N6K4YLTNnx+Ov2+POW+33LwdOEiHTcOyrwr+emQVKd+ittlekjp2REGbPm2/Pqow5curhDm7N6fq3b4uX6TznWPhx5Zu/f4wQ6fxuqTtFWv0flzJQiX4MEvdxo2mj6vWuQ/Lifqky7q8vuFIp/ZcnNijuqDlo9OOqpjrTUZeua+3OJ2z7VfH8mftfKxjMnTFL1YMfqcNuV/ztGp51fFWu79ZeGTjp91PPRNh99KXa2VOuVvHROV2FV3yPXZ0YJ3zGv89ODFqNWWR76Vuuq9jcv6tNocNu7aZnPfT+p/r0y7ltGejxjbdOuEH7snOdEwX45OQ5utOho/zJOZSVo8bpH4wfY/ot5YMz1Ohm6503w2dsWy2Mu+vjox4/Z1C8KeytE8Q8YvUi85OWb77MgpfsuS4vuLl8t9fz9S1HD5+yYNhGv966CxlefHedp+07PDoRmG5M03enupCo3O/py8w6w673ZWStFq/6sk1x5GTdN8RfbPTp/sHrdPvB9iVn+cNNLahmFH5nhaf9KrE1V+iZV6Rur4L5s2mvpLy5PFqt3smm9DjhpPF0TfVOGHWL3OXJ39eZNtv/a5UTaQrfbUXBcevgs6lDpNnK8Of32lX5jIK/dXX73n670dP+Ta8br9ixvNB19YP6lN9aGfFh/bLXAubIa9ewsn2pJjYfkxtXr0bl+qarSMZ9MvXbBuRLcfY3RrkS5j4O6Y8t3fJl+Uf9uukM5nVsfv8GWPt2XjlCn8LNy7ApnvbDqdKXW7YjNGv865NW34pHXu7M2+be3P179rmXP8lYGbngzKeP7upYlRjje7V71MxU6fN2u9bWDd0vd+PNalR/OU2YfFGXhkeOMMEbYn/OSPpjNOXBwd9odeiSImiN3yUJqZH36fV/K3WdtmVTq58PyzNB+G341bIOmGd5smJGnRKtGymAce5Plh/ndJd/YcPumrNaHFe9ztED7XyLJhw6SMuyN0UfIpcX8sVmttnDeNr56IdHNF58mLS+24WORSxF/eDyyYJWmB+QfiLQw58W2jhJvLzAlb6tPdkYrMrR1l2vfZTj7P3P/Q8PA3r61J+O5YpsFZUiWPv3LJutGPLhSIsqfd21lh53Xe0rpSvrbtm4+ekDN+zrS9Og8bf+73pQcmXZy19eTepu8qHLrRICTruLQDrv5288Gb3E3yr2pT7smsJPPi/m/s3EVXEI7zBnq6SwQRaWkQkJLuUuluUFJSGqW7pJsv3Y2AIgjS0i3dLd2lhNzN/b2Ee/7n3DOf7Wyemd1sngWTH5bzWcZCrCuybWYNluZ8nYTLj9gH6HizmxPkm95g/fWh9m5v5PDkpafNwcEh8Ct9lVSVtrAZauE2OY08cCNo9gWl0K/4BV10m8UnQ1cxCyLiKYW8GGXLn/fMoSjl3MikTSg/dhR31QM4jHrozsUZLWc051sMDNpXFtmNqHXJ5mXJiOyps9/lZrrw74T+ltROdbWYeSY5fiDU9kEhsG2Q4PO493pN18uGhNGLGlWcRwHxi8L0WybyHzlF3MLri8pnnvwVDjivRBYsbd7zemQkrZUlJqw+gatA3ciScRy3id2yqUDQ0zWG3v4LrXC0HPE/cnUNDzOvrypkG3ITG90rraoNv3aCJul/jAbHZS8GPSq0Yn8/RdOO95Jf+Q+Wzvc5IZ7WHyZWZ38ZZPFyZsjlzAO4n1gGreV4razEllHR69/74vlmNrxBJG0MLDP3fGynNlhUUfYhBjn2SE2KP32ti9XIxfxrS+gyixp7+Vy00ztqAfUAXrv+QD0/Ws+Mn2o7YfEOuFhk8Xeur/8hrXxvLGyJMJ9sSd8UKnnyUyxz0zKHI0jOu1PX8ZX6Usj7RxcJkvvpQn0IlfwkCY3pD4V7GbG6Xh69z23SqT9HVreWT7y33auUe/PRNkU38kOBwIqqTcD0jW4E41+axXcsH6k89KPVsz+dvMI0IiKQoLZ9I4Lfg4FyfNdNyTCV9oVlUybS2VjVY3CgjhXdZCEgX9NqvH767NEnb9Vn8oJNVF3djkF+F+pPzMeZULgdcG9e1k+522LvkkilurJ3/FmXX36AEBMa9pGOaV+qsFSXS65TNY0sGtt+GztckqKOusdOW317eptLA0/E3Bm9/oFyVubbG6+EjU7LGz1d6zqHlvJJnV+KaZK5Q0KhsxzD73taX4xIW+G/65Sp9Fa6VLlvPOvKbDDoUhj0OvSJ/cupKmTz4Tn/p4X7oe92G9U8dZg6k9MXXXdCKJJaO/TPSJTmjEVQV4uc1Ae4Xpsu2jdUTS8ZJGP93WIY7w2h838zo+VA3f1D7KVVGH5u7fPPk99iCoTXrhJbOhQm/lj8VbS0Ta1t/njwkNIndESHXrqSu/T8vDxs5RF+oWu+FBKBWfDhB2Um9hQaehPj757Mu59SmdvMJoVaqUp/C7Jo8OVRCrh0Z6ARuKjmxMbtq6oeHtuePmCfy+lAjG08WOiJzE6M3mzN62FH934cVBQfaqo/+1EOMXLWN43pIi2MPtvHrjf0YWdIPc+eU2Pp+7r0T6tSE1TTNyNRQ2aalK/PRwRe/HjQNuHMuWcTYUQxKOrpQ1xYGBUp3yaSgPT3Zi46wl6ywJnC5k76IPp6M5OSUyDRwxQLESl94raEXpP3Rj/5t+SKNlq4qoKuSb63TlxvFsrdtOUyNQNdYhb2Z/6lsJAlqSs98iGuYGL1ta2M669hQ50pky0F07turb7vbATyaJyTUx4vdCqaUZhHxzm97y/yfajmSkxMnpXjlRvB3EZxJX4bWIClsL00ELc2UWz754yXgOe0O+F4S6UWr270x35u9au6nyhDJhTNssgrTJ++qlcc6O6JIqLvzPzUCYo13vx7k5Y69k4tj1Nbha+3NpRSSxcJL35cR2n281v3Pe/J5EE8FMLEzhKMjnv7n6qfzcrmU0dlZGq59wYjnfANp3UvSRi+POBrcdZMDfzVNZq+QeqydFRlkxy0u9WBiET97WMmwZZI1x+srbFPGyiXnsWk206hDWesitcG6vitL55MLGJHff0voNDWSZvWW4cSX1qWQeBjqPYruhs90501nnz5B8o3Z1/uOqtY2EbdHyPOPNUaXuyrtm+kz+r69jCa5IyCCeUt6pJ0onstRqZbRbdXTH02aou8uGDTJlOvm87lrUve6EId4148g/+Olv1MqBOqB0dgy38tX5QkP2gZiwwgYG9uL1TJkLTnkfsxaTnVsPPMuJUnDM2/7xwtmhVTeRaGFi7OgSd9e4aoksZATRfuq3+zw4wmtOsYgI2+4UMs9+SsNJ61r9X95Tjv13I/bi2q8vXdO56Dx+8nSFmGM9++qz441fkr+Iu8Bq3+z4Qbbt9ebtY7z+YaJvmXXf/G9B3/6HFRNMtUsaNEbmoQxKL+tG489yS0wjU61vyzHpilWty5p/FZ0DprU+oN0dfaXy2PV3A1Qm6FOrksn9sPbBGL7gmayfVi538ZJmNAFxAiebWekmT5bywxCqFtWnJy+EanncZ38123au0j44Y3PHkEErga33QqWXUdaZ6MUbujqbXU8X4NbHxAm/liutbQAJe0MElR4z3ic1G+horasB+dc1+PQ5u13zxbEsJDngl8rfl2XpL+jTr69/xQ0cOc3eT3ygy7kU3dT+OnWLc60FtFrXqfVpd3F0po4BXYlqswPOpbNyZUvivuL0uJXmL4Ne/tIESZ+tPHgXgkkaNaoqfI4AOdub5TxXb6cim660tDqjupBwlsk/zWBM5dAz4C85mfWBAnefWLXoqYkvbkW56c09JJool6vl0e7Dabkn/+b7ZuSS5+gZZd1BXL1gbNwCi7Kk/62ot5hRRnq8Cu+b2h98fZI30LwRrHv2Q0aw7CtY6WL3zkfbubtFDf35VPfVda4Xb5SRtQ9zCfDC3S/zcygcVVk1ml6VvJ7wRf3aZ6ONX8G1PJdLr+yyXRtdzKVvdJVTcOyZ5GNuW1fXVL7xr2fl/z47sse6ko59/uZNmT3201+n/v3KTOVP0+8z8S/hqj/3Z/w/svwaTwoO6btBwP2eMTenECeX4Bk3ba78/zmYn80Jip3Pa8WR9WOTKt7tB86UBmXrCScNa14vnubMLCUyH7XOZUqGr6Awc67bK6kgAGYtyPHwd82CMmGs2J7Vgt7YqxnLi+eURe+aRLiO6X0jyMuCU6A3yE/NYrtHk+1GlDPZhiWYmKv3hnlDJFkAId+broN2K8drjl+NEYHnAHvu1C6Aue1vovUOqjQPA5UYFZx1XytJTt/b8PVbEcQYRnSpbUdoWOCj8o9+6bX+BFTKH8+KJryj82eZ+6ovf7bGGOkuQxZU3vFQrxH3RzA0otA5Skej1/lLl+cVyeAxVxFf+VLmlCfFw7zJ6v1psPvbaN3tqXfECcap30X394a65AnCKHf9f1L7txInHys9eTER7GHh61ZPVy1I9EWH9Xorh8n5CWqp0kCOtQcWN0bmyah9mvTSacv3WULtLCZyvKMp+OqzOWeZovyXatGvB2j0g5IvElzoLXy0W1/kqE6qA4rEdjO2o3syXMQdza+cGW2zhNZ8Rt70i60vNr42N7Geg6VW5NHBnWZi8QYutQVuc8ZqrpUAUMvbc5Z/+gJafijUta4g/u27V8H0j9atLueYNdWzn51PxVmNjbsf/ECv8UtxSzsR8tff+4LI04XjZLivROOT6cm3WX6l5hD79ksEXbyNrrxiMI44KmWbOmQkgjDdmFctDKi+iFaRqiKkOJ4jAWQ86aLw3DmE4cepFTpERFpRmyzsNC7YmrNQoG9gnhupHbfqspvfMlrFb1deqPx4UnVNbOorVF7bHWYYEPO/iUmstobUv1/6OcnT5I0+9/Nb1o/N8Yv3GWuo2w5I8ZJu0G/7B63s/raJZt0q78Zhl6CJTn6iereBQcSGeTjRQMIpV1u1S+o/pFF2F/+Lo32GudD8N7htVIa9imuDHWcQqPNhSWoqbZRM1nX9Ja6xDsUPld4gjLsuidJ0QkHB0YpTJoNuQpuRR5GZQ/aPo7OBlZTGWAl432zNo7iXawrBlBoDmMs1WhffIdh5TDCRMHVp/E1+96EjhdumOjFhLMKM5Y7H9ISAwR/S1oxr6r+olLDhlaOBImDtz1osjSbd/osH4Z79BUKq7Qr34q833ocC5ryefkvMkr+T/rEQliKUWuoHxrAmGPon0n8V+ojxK4pKZfRbyvSiee57XUNggXQBrd5Hkp9/EReSslbaZdvyK2TB/3t3aMR9MkFhuJ1V8s+93kSVpxcOJ87OhKqBlWd4od6YNfoi5zBEq9Wl4aQJTlUfK6KUOfbMGKoBXHQyJ7EIm5PEJBwmeIczUwE0XshmVr+mW07qn3jQf3yznp3iLiCk1xIawM25bXSEeKmWaPRQxTyGbQ2x6trCImmTCjMJx6Jj0oVwzPrF9evsaMmD4KuhLojCPvNAraZ9LcfHWzj18atKe2m0FAO3OIHh8S/w9ZcsKznbu3rwV7bS87+PA6Pisw13uHMIXDjm2l9Co5ndNNrVS561GE7DUj6T7WYtoC5gLWArbtJUEDIl/pD873ar8IggXdKIq3EvG76JVSYjsEXmhxdk7o1E5pEA3mpSYkWg8ZJUgXvbIsfBU2/ERKGa9BDQMlz1RUMS8jgaV5mqE4AkdpEFfSltgk8YuYg4WKVKX/xAiHyvz8gDCF578YqT3uWzHBvz7hyXIhtTHlhOr714VOd98KX9U4R/9InqYbzO2QItb0PiFMpuJn93JVRTi44VlvxamZEd/g1fXkDn1oaXuqVY0nmvjg+LlAhH2TD9XG+QivNZpXB5Oj22CniY/1klRhOwWVb+IvGZr/GB8fLYW5hqC5PKmXL9dtkadis30slPzx20KtyGiGTG44quR/CBkFifTkk/1bTFpX3tKMJa61Ydau/5BPCETWyF8eIZtWNKfeJtQef3DufIr7Uns5WoNJk6bGSfPxk19dMr9qKPIsiktQBh/lHTP67tMr/khCMMuvirl56ZdwQRmmESfhvLFe6z2F2y+kgkvbqeig/P1ViViKLY4SxVdy9TBinxh9TarOdpXX9I/6Ub26njMlfbzgWtrFEy0/+Xxb8nd0HylnPaDLovXsnGfncv2/Q9/xsK3I356uHteD2ed3OXnP6IUHZBZ8e4ixQ4hQzFDH6B5H00Tp50nu4M+3cSD1WltXkOx/1crvl/JJ4Hh6jPVpcCT5i4iHRS6fV4i5C/Ls4Fuyu+8bL5j7PuB89vjydFo+1rrt1+dLhrpEk79mWT4hq9QkwWiOr80eRjBGpFZpeq8zDkUhk2ZLfOp5Ir9hxkbLYjhbHvmvZRGznll0Ems4BCUgz/G3nanPaUB1WKaQfdzDXvfUmiAVv/oIUw/rI5xmbaHvIR6dRUcUnD91iJ2WQrQkmdPznpMvWThtIPCPq/6JPrGLYnkkHl4WWXFSj+IZ7H/w2/r0QKkgQEu5KzTtNZGmfjga7jear9iT35u4n2Z7ye86vY7jkvM7IjRCDHhAl4+rT6zxx2sgrh8x4qOo7U9vlEIr5T2DWOwJE96KQF2mIgdMO2Z+JTQTn7x5XTIdrdrFMUmL6jNJ8cMUrAY65bfnP8KcPBMktBCwxHZsl7ZwTt5IZnFNnnM5V0y0iM/ISXjZRahi6GFy/DpAfrFQfOvlmamVUZ9t0/wgXXaTO0xV5UI59Jky+Z0Gby4leWuKTU159siFTopqDd3cv/6C0+XN7mF1w/4kT27cdeqEanGDrevu9pYdMzlPmtGVevu99ZigRKsObEu/DRJnVs/c17RHkz7q9w9xJTKo1wcOXH8MYynfYD8LLDt5r5jFOacdVvBUSGd84Z4hjcpK51VdD+5jwSxWA7ssDJqP43k8mcm1g3q+Qjt7pvJLOZ2lukrGVwWyW9zV1q2jDmiqFmG7LHO2hbarUb9X38RqPdNrk9lfP0bK668T+cyGGJjGbMvMcXoWaXmIqSDNGXiLsPTnc7Dd+c94xM2jsQ0ihFMde2S2A9lhxo1fNGnXxk43H/+dd2xvxWvIPXDZeu1Rye+bTCXwRJM3o1n9SqBj7TNVi04xXVXMrupVxfez7QlZ5DX/jrcnj5Lyj0K907ZsOlOwQ3HkUC1PvdnmjszvDVAmBTxwI/8tRnOTxTSMh+V3/O5SoL979I2+jZwy6vl0wqciqjYlJUkTPwtFtm8NZ4/IN417sShR6Ob3ku0IXfI48R10yO5/YQeyPlRvdF5GmNLGKVD3qqJVkVeg+oilyi5Sp9/XxTH8MIg+zta2WljYc+CGuXADxUnuQPoT/0s5zK1PGWcVuc/99lg5XQzMDt/fBLW8NKRGcZ4pYGgsR6fBK85xjfkrlTSoIqc7ddGCY9VW7YbaT5+BORjUf9iRJ8ZCL7Ys04r5gekiSYN7VtHn/cAi4dvrlFZpkaJTFvoT68f2uGEsns6lOPe/p5F93vycmCLD3xtWqrRCYb7+PpGLJ/iL93fxTys889vCzkPuo8OswNMWcjIlq9jJvKKwvm5yP80hFbeGcrHxM/ozmf2DFaGrontywl3lOY3LadZIvsp8pn6lGcvwy13632ZKy0P4YSLR6vI1//i7XgqZn+P/UhYxaZ5N9xPG1S767hJoebHjb4hd9v0I6+/aoNgz1Qrf1odnNE1hnIUbVQJyU2iTAa+Fxy7tyNXsdi/XKBgUODZby7OwWduHbVaTn64Z8cZZVl9nN2M/4xo3LxVpauAWVxcNkwytCXaLPpW0xsoz5jy3+6XqtaxHnE8o8zuQsvyV49HDpolJF+mUzKgnibQv8Tilerk85Ju+LTrbZVv0NJsqMTaQ2GG2B7vi27LFyWQcYGhN1+uV/WxsrY8rzt6X89cR+KnWs/ScEYH67E9pV/mYIPIDbguCGKsXpFV56Me0ng/GXQwKBTpPBMraHfensKOIz7KPz1beEjo/zvO9uXG3oBFwI+SYG17dZR5996y96R85OmJC0++nKOX21O7O+gEK2PtBIU9yOuKRhtod9bVxaBSQNn9or8vFBkdsbKEKzZl8TcmepXSN0zq1JUJhN0dx+Q+7T6PT1BcHXWCnWDvg9tPN7KPUCinXiStFliEizi9hGzZ76IcL1d2tRGZD46ichATZFA5H3y4xmrjcTDp3q8iIFfzH2UYdAjqC3D+bkjANiRmcyKC83Dvtj+/zvw9T4veemdbGdMKZul6NRpeS685dst/FrxjWXZSgwBCeHzw+oM4UL/hksqKwrMt38Vw1Mabh17kDQsof/0XBNHcz2n+aI0sxjy3kOiO6nogZCazmy5Fyso59UkQy1vLh10P4weL/SeM1F8+/PMVLv/AnGP6EOwKJ2q7qtx+yFwO52wl/v/B6PRU5Haqt9JX2Qj3/2WHxjth/12kYsRo5uFUTwmv/3W9cXSW4fsznTe/jeUYxoIJYUvLnIZ6P7ZK+sOBGh1QCDkNHq5XYxAVrYx+PDYnAMh49hST7c4EQQT/e8gb6BfsJDFmj4WbaVM8Nr+UQ7k3HUPdnzL68rRED+CUCOxiJk2/eBATQTditHjb32z0l0xAvrC/ENGiwKQ1jIvtMSsRysv/xj8AHgWSaYLLz5Uq0G40/AW8t03/hJHUsf3TwYcwpQTskdyiZocsV4Fh+pC57F0Lii7s8zHv9vqXTIVTR5POEctvwueAf8tO0qesjBddIJkT8V0Hp8lg2a7iP6Q5m2Zx095LJDH8IVv/ltP0URJ5lI3v63VbP9MMuAY0r9uB3llVHN4pdtMxp/8H8hPVNg2HqNAGcMB510X11rcaVTMZb03etpIr1ba5DDDRVb1jn3j6/DFz1VELCiVe4m+O1JYw2LKv0Szwm2EPAE7ISvuwiNRYRl5UI7hW7iNRKSGnaeElOF6KBWaqkrOSO3DX5TziIqN+Y/h9JSkmJ3cEvmnbMdU4Dm4EBj0JrgUIJs8d+JLUjWdWT/L2E4fdta8OWNdZ1RWlzovnuBqU+rwayyyoaJ/CvNW3ONxvtH6/ar5osrmRzBAR79FE/JFGjpUnm6fc4XMlydshru6OXWYjpIT8M3ZghtuDAKPwxglGrcfqQ70cJHk/Nv26sEcYCpcnnU6rNdYSv5BALlG/suN856KcKpVJERbIQT5KrohRHs60Mhdeo+XDjz7Ha7+EqI33SvLfTfxCC0fHJwHyR8ONbBgqvPrPZ7JI6bqmXhnvKAmRV2i0lzTb2Mc5BQSTpLHjzdjtn1JF3rwMaZ/8Y6AaEdxBpz155R9x/vo5xG9XKGc16vxYU2ED1b0OLhUS/S58c2+ztN0+bgPI/sapCwhx8ColXPX9E/5NQ1R4RiTqel50aDglcK+e9ztAmjJZDc4uWug6P6fJU6P4coiBpeJaSnknUPN8mVJ32yFvHM9UoCcE3Mf0gmsOUBTPlw6ARFxkFdTxBrOaSMkOEAEPGrOhpe92qNslarZ6+dCx1bXnVpQObtxMBHXWKE9+2mczRExT9y+JRMkaRm4AHm+QEItSSWrx6Rawnq6r+7YtEObceHwsxzs2K1pUfzlbpC/4p8gwqkord2CYfGE+3uA3gK6O4JPVA0OzoQ53MjD+kWTiyqKk0lBfOUnjW8JN4aYSnvIdbcoZuL9f8a8pQxLueEznXX1u5lLSUg83v40lfBi5KD+ZvEqawf02Nil3+UV+jmOSLc/QybNiXRXF/Kmvqtdoc7+v0GopoHPPQbN+SyC+7MVmofOcniG6eIzx/H62fn8/elsy10QXVE18Gub2RNjC5N2y9bL+hFcShk7xwMGMz5lsUWs2h3cYJuZJRxNL272iJc/V5MT26/svkLmSLyJUpbi9cl1ZCzkQ2vBoP2YBNJM2ZQvUifAljfz27EfcjDf3fhxrTDewJ9HZ+3Es3Z4UFEof7LpJZ6aOU1fbF/BTcXE7cODoS5OEs2XdFFFFZpDU1FHi2iYRs1uZhcg9eZ7gEx2j/+BGA2HITPTQal+L0WqWrS1Ev+mSYbb20RKNQhrD6IxvSoXCkmfyb1Th6yU08EiYZThQyB5UYhlGZo8o51bafkzLaluuRrxQ2TtDw4+R5OGzVC9vylLGTrmld/1jPdd9+TzCx90xqpXUaYszS++RaGhzq9PjZs3el39ebmDFCHmpb2u7VzThJYniKKCvPXtS9sYq/eYzrdjipyKtD7pUg94vCgTB6gCdyX8PA/dl9GaEc1Q/6+PL5qkBKzcBgXNVCo3K1pqQI3pxRpCtHLGJfAQre+fKDWmvl7knRAAYetCJzyWelOySD48tlbhoZaHr7nD8n57oRfPNJeWgWRu88140SneIc1jsVw8buLgcXn1TQoCYTkiViUd+cRQ5up7f+nX0kXjvOEomH7ve8ME+EfZaTzIu9x+Ebt3DxURLmQJ7li9NJFa8YdanoBnuXJxPolX8pUL35wz5t1/H1Y4YI4xHh7mYEuBRsolcM/aGzxUd+tlAvkuR9dmii+1cuMCOWwEGNoW7dTSueTXWqO6vi6WIZFdNUK7nbuLEIHnfRw/OCg2c6pkLBr044cTt6Nn8baG03cf8UnBiYahhVx46tLWHgCBUXTPXaLE15pLsVmpm3ptQqUSZjUMpXIGu1WxLrFFi7jJ+4Jk+KHS1mz8wth9AuufrpwJebGzE8c+HVB22k6O+d4RkoX8i+yftxLiM/WEeit5DhWjpETGCkJeDb2JNCsv1DKaNdUkeaX3dWjpb005NAm8t4sexXKEHtK/5nzKM909cP4zEZO5qfSobW5GirLg03rzQG4sTZZfsO34QYmtXQoh3w/9N/YOJxYnk2S3JHWIT7jJIPw8YZ49w/mpkUvyg+siOOaqoxwP/tnJou07NNcdb/pCNKLs3ca2jw9W4mpJMDxzIfL/a/TD3Dul07+UqXWTKpqvxYOQLzUr/5/rRWgWwmP39s5fFvahuxOMJ509mAdMKhqNd+QXLvudX/8+7jkc//L32hznPL4Wslcqo3Rc8Htj7auWTdqhKxW7E1aRHJdArExEEbN8kVHif9nHPMwhzbWMFeirnC46TbKwRO7P6+0Rv56hazVRZqtnv5v/L+CuEvsy1fWb8sbYplTnMvR9Ka6iT5LszEYX6U2OX7JFrRsuFaVHuH7cgU52+eDJN9XaOQ0GwIxZrRFYpurJberAeyg+67JrrwOtScPLUgaS08+4ZnSUMf3COomnMtLz6w5Ccz37q2M1zwXAXlI9BRoV+9eKbFiN/iTFlI/fvyW1tmZr20rAFFcHUcTvL8K18Ha0UrbgK3bwvWMWtuUatX36LyfZcJ6L4EE13H8Vk2Zi5VhX1GVOdWfW+d3uJY3UCH+t9p0Wbd+2fNKdPelN2c8pufiDRjLDgNiEmT0T54JaF9bmHpwXiMEr+pU5JKse1Bz3sx19D0YwpNd7rJz/gQl3ktWeWr4mZzowDt+mzNE5T03yZpZQ39LkTtv9jouWbZMx+fakizaCxNqU3dOWiQnz0yx2/iKPPUePLTlbRdNOQTYyrycnx2NeqDCd3mmiODZ5OK18UVN1/SXHvsEsyWJARj1gzeTLiJeY1MoLd/0/PLKH2s+Rn79EGbRqxF6n6DRql0hJGwLA3x/rFo5saVFjEPRk9HUaSJrni1eaW3S5FbfPghV0LA7mkl/RyfWruU0h/stS1xVM1F1rHErQnLWyLeSmKL8r5nrD8D/rDbt7tnlsfsF2VbGknz7ypsEAnrIv/UD1yeSDsjLyJAH3fi1acYxKiSwMMKfxOc/Hz1mGK30smIiwYxAHPBVtSz3hlLbbvVAZc8VCPg+ZHmbnmT/H0CrZ91xxJpekfLbotryscijBr+Bw+wWe5xGJRTMca/KCzS5u59cvz63+j834W02gyhK2KJ+v7tytjMghq2KC6d5/hfvnTV9yK8aPFDzcLbHCnbi/c0fxCB59XjgdUb0pgRmX3lVELMSvjY2oKRL69soLje+oTv2nhGkjT6wc/PWvQPqE/S+fXfzn9496+KAlemyi+dJlfnPbt9e2wsq64PtYOiZtazN5s/lfJ/BdepfOlw6do6HczheW+VEXSBnqdyLMMVGuE5g6Cjsj7VyYEnlHJFVhhyTsRzXlVPoDPk4S7/e/vGbpxV/hWuv9hKYdJtiVjbwLboB1tN5Ivo16ZJwwHPxuRxo6ZXA1pq53bkKcTQbNELPCu73V94eJFu3b1idpP9kswZyd+Kjl2IT9UYFtzG0nvfkXvC6O2aQOvuRsOAvbYYE/H3958qlmYfG5N8xewiRIzLKJfL+KQPFIw1Rw2oyfGCPu6PFqx3n6qzm+chOmlIaavV6egsbDpE4Cmfpah7Fr6huw47Lnny70GV1KWyqvhz9EIj6sfy6xQtU65D6O2p6BsRL5GjDdiFrkh2UgtYbs5PC8gCdVZSKa4bdJjk2S6UKmIjELL1+zUYK9Ljy3ck/DyojtSRDugPUScuJZxqOQjHmykWhFv/Y3y7zhNB9ME3LmmneMO/eHj6saDwcsZER0lwqLrzty/PXv6ni8O1hfAjaIlsjJnpK19gTO77yEak2bcSZzatFeEpuIOXG9e9Fax59SgqnAx+ZCn9eG/wc3+L4tOxx3x8vaBt7/BRZWYhvZk4mlllPuDtNV2jP0k7xoKgPpKHVA1iJZr87UpFFOPI0sSvbp7c822+5DOM3Iq3Js29n7cGsEOXBHnvhk0P6DebUKPUNfJRs+cG3Bmthw56eG9f/84pG3vo1Nj6ulHZkRVPhu5W+ZtWWLk30cSsTEZJUIA0naEu9cRWJOnKi9TtqmmzbcdV+oW6oQOOiMWa44tYsVW323ZqM8a1S7mUEx2kYIW9xrJ28nq/7/ik9iQva+dSFC1UuD9TPRWMe3+t0E0tucAxP6SW6l6M/hmLhUPlaxpCjevJnEX6z+SMrIkhiZU3hL7pneYO9YsoaGwqoxYCTCgGgnIONQ4yiJvWSeMhQUb2yS8ro4eYHkkLoHm+8coSvXV0C3xOGerxaiL3Pabimr5kQQhVKDvbW4tXSlK3dNVqX8TxLF/UbOG1K8/Lu3wTtHEYt43qI3Mh/eLFIP38VOO2Xrx5mo1gYoQae4nmFW4wX62oP38YqwfB1VON0RBvLnaV6Gu1inPjhwosanSXxinrL6ln7EKjroZl5EWy2oT5sywxUqyMM5z55/I5B8uc5jXl7MxSBVOdYqpkUa4kPPFUb4g8axCWEv4hX/2WGntLp0uLPziKaiGkw6S/Mla0pnTvnxeJMF+AsvufjTtVWrNLezWBTkkCvRYz0QGx2iF7PXo0tdfinITMsA5mmxbjhDq2OFZ9d39OXpdAhdvte4yKrit6I/cXpb5qFXz+2H/KijBHA7P/8nukZG5RexMbcCvUMD7+YYaANBycs8bKjObIkWcdJI/ciWEk/kM63STFKXjmQbzVyMiY0tjzZNXMITvyzwZumA8+zwWq2qSaZf1AsL4xaQzE988vCaC8sklTelE4chxo84L/W7LQUeD+/eAosv7SS8TopNqZlwVTUxd7/Ih8JCanaR+cD1t+qkv4y9LJjx3T/SwxY959OewcR+otJuMX901OajXlG30cVm4sfyg+Z1qyfLAkzrBPyIyBM/PP4MmyFWPkVHXZ1LUa3TAVO8rrh/WIQZlm8lumCWjjKAUvYrrWsIjrr7v+WptIhttLmAt9Q+ND9FrFZEXleeAsH5glmNMZ+Kolc863QvTvPXLlg9yGkNySqhpvURSGb4TXfxI2ZadONVpVilbpHmkNTRXy1Q0saZKPY33AD+qs+eF95j+owLTx0JiafMRgmlspOEN8NSqPC/frdTDJGWI7L15OpPMkZjfXXsJ2cpBhYENBbU9iCMnE7ZJMwpXCnDf+FQEb/iXbKS5DOEHazRjzi2dvqfMltmgPrXhvjdLxhiUeV/WcidkGBV15ZX6lxW7xe3ogyEGjqr+/39plMDwQM3ei71g2wYqFHvUE5WufApFpwO2TLqnBWtOup778DXmppmGHepfm9tJyioQ/ixAoOOvJ3CbpzEhsm6IEai8O7T5PSh0Q/TQl0Wcm/U0pH8fk8HPhdJI7Q7mKouHJ/n+xLKF7lktTq1/e4WqpbyIKS6vZKvSSqlDSvHuMnhPdb9dVoDy3dHbPOvS94ttdgUNrB5o7PR5P2t0uUzZLuI1NyKwgzqGOzt1nt5JX4rlHYjWHgYN+3Yu4EcN/XRvjKRp6nfZS3NPihzSRI9uSWZlJHcyf50ehN+0xPtfj6Ztm3Jq/4PDDlx95UbDij6Q+tHxl/zbaPzhJbqxsf9Fyf0XjrddNeqhgSyO3AbOHMMbLojexqu8J9UdVLfo8fqH2yfy7nvUz7PMJbAg6Q/xMtiuc+2JephH3TogCtXfVOb+RxylEwZQsWg4Rj1DYZtz/22XQpBpeJ82LzCpucZcwtKwyDDrLU2nTV1G02QSv1qZd6/T7SorqBZqQqRMRChUktFo/pMuhKTh3EJqHftSeu0HDFp31ofp80yPFFv1F/U3frv3K9mLhJfryooywp78pSgldk1hWua3VW1PT2VMRF66VlFqcuFtFNSreFm09FwaaEMLht/+mO/I7zN66uoQjI2g+c6r0adfDWuWLqZjAWQ27OleuxSp36k18Ij8yIjZN24WUcP1kZawTvUSRhrGfDYNESLMz2ZmSaCEzPXfKWJ+L3725MIkfUdGgZv2x4N+XawSIT9N7H1QZz0VOqiDZ7/9dU/ObkVaY6okk+kW++GW88UECv3bfYPKvTCQ88vTw0bAin4yVyUQufpuy0p8SGccfbBZjfn9/v7aBjsPDkIkd2TUxMftZ5ftxLt/R71tu1JarPt2TVuTMKvGBf3paLg0ULt+q/3J49QtZLdwhZd2TmS6IOlcxMwQZPeqdaCvUN7YVPfyoS30ma8JxUMmqmu046vUr7t/mdJ+vL8/yzvgzAt5gmmdbczy+KUV/zXvMTPaWme+/u/ygfER9bKgbLst2iLWEpVZa+2TCFEd0cucnSwDRDUXt6Y5TTtrfMnZ0zvYFZ3wJF1FVMszpXWPXW0wiM5uiDKMyGoPwmAERnPW75LfaYb8m2Fa5O8r0hQIlOfEUAp+E52SSVBQ4yXSv1k340kjl7LlefHZct7BLbB/PY9aafdegEnQlLDNyVkqwpr07z/7OGoPmiryJu9p1kOaM9TBbnf8XRxZ/M/0k1ylTclvfub54aumXGs1T2f2q/MkYWhSkEaruCuV1l2CXsm+yNe5RLCbdRm9Y2TH+W8E1qPHDZnErV6VlSj/sG/ad7VEcsOE8usxkjqf6Yyq+bMb1nnsIsYqw2sF34ipbFDc84rP1ggYyO6Miq39/oKr5IUlnieGwa/hN54Rnl/lxbOB/mRTip/HpfsoV/wKqLYvDE4XQRivIAofatXtzLvp25Df3hvPC335YaeDRxzF/0HAdHG207zTdy8TaQPo1898ZoUr/pRUBsbDXaMZGudar76SY7LFJBNcy44sVAWnVV+Nd/smvPUTie5ZJBhg/6u+tv+J/8dvKQYBNxZXojvPhB8SPMt0mewGFZ4IP0IzC9LBneXsb8HysUqaueCofvQzjxlnoPJmnxhlQv3viVfTd8qAAIR3pw03ZFvrDB6bSFdnUdd8TLLpep/4I3A73N+n8bzj8zrTavvJLx1NMG2KP6ubgd+1xC0I6C9ePRNB2+TgOaSJt+eO+lqg/Yh6y6uEoWLNJPU/fuWa1Hu67ued9lJJhPMHq2lVKw3//O2zVaK9vvJPNhERT1oqLc0KCey61t/OjCWetXsEImvjC+1VL5HUSxPcvn3KLjP47LRs1mXDFobTs6+rzoGje8DCoUXsacki5L5K37Iz78cNYX1MS6eA8EdI42Soxll5BtPdlj8vOqZZh05T5szazdVqhL8p49Sq7DBtBlH98f569pS3HjmiOa6myClyRZBsVH6jE91r8ZL+c+Ma332pXZekCuynYc/yimfzvn/ZukSFWQneSOcJQl9dMs06yxDZLjEafiJQ05P0Ib70ztlLnsTtjKjP3Y5JqzPQ4RkTDzlsresXctzW3B3Q1coWWVlGGRjx5XQYIxS7fu5ZLdQV2MVb6RmRK7udbpep86PsPBd18eJ3EeO8Mgdf/W8Bc79vU+HABhDmHMpU9F6Z3jl0bhUbTaX49jq25dTlxavKNnOwI8S/qHr4iP3toVm/VuUJ1mr/yjulM6u7lChWGQrWxJMqnNXui3KO1F5tuGBbUdeGKr6pWNTecanbG/1PmPbfZCSCIUr7WE7ksL1CtlEZWxxOaGQ1/vN9a5Ta0l9ltQupA5HpvSr01L+ITZr5SnxhIj28oysqHPzbzo+MQlRKPpOd26C5Ld80Sr8W8U+mG5dtR9V+PQ9EbiZ/2dmvo4qtPJM82JdPMh2jplWzfH+apXyCkKvij+2lW438b5SQrlMXYMhjyyjh8Y1hBnto/evqBqAGJ+8Sx49CYUtarTkDaF9Vt9Ld4HzmSdXpa8UNsnUj+gw30efV4RkGCFzEa8kh543t6Sha/2yw1trjs6SiZf7QzPOzYkYvyycufMp2SVL/Tp0cvYy4IWAjG2pUNtcoPySbcnfQfmNPGoQjIPYzO6k0q/vCpvNUSaelk31uujnrm+wn9f+u7H49R+lDL1WPcrnuHy1zFPJu+lbwWs1Q26LJvQzW4+P2RBmOCHdcVaQVtavEWA1F3Af0bVScKjX4Ul7hSdWpbfMKn0DvcvPhADuwzpw/TYrgWaBQxtuxZIy3FIwUZe2jz7mYEqUQH8y0hkunzr0ub8NsH0T60ZGZmkOZ+LHgiUMX+pxLHUJXHtomoJnztC0cmMkO8cI9AoGTKN3TtmS5OavKs5Dl+MlHlkAc/NK9lefweIgjgP7T8iuTf9jUPIV6ZtHVHZCR60V21LNzxxfeMlQHVj5tkEtcuGmy9VPXqAQJf2UzdkuiX22Ty7tOzj/Xaky3kMMZGpjN5r79j8Myw/7A2XEsNdERaKvhm8vQL8k/XuKcXXJu/GSfRdVJOH2tTcCqJ8YX2Kbdd9qCh4HtXNVKm66sfT2X+u7XUwVuv6ebBoPOsQ8yRYHCLet5eY2N9MTcjwlTu9HQUIcHGT5T6mZRf/tJguHwwagkqYxlCnZRwWnkPflvFMVtVn6l6wQkOeu6bPlXdFbRdqRQ3/T/oAj0hPF1ZkSRhktcVhLqs0cscTTvWFr0eRU+8upeMFccOCv9tB1mYZVfozb0qGl4podLtx7gpdI5l8tNek6QQF7zbm3jszeWWe4K7noDp+YhD4m60q1sapeFb536LRW8JHxaZp3eZPt7TMrZyn0dDPpWyV09G4hr0LIY35tB9l0ixHAskzKQjZGIv5SrQONZ7qRRD3ikU98WjP3pGea0Y5LyCb19HP2tgTIm8fk56TaITi4RbsmNb/Jla2N260TCl/YtkHXdTx1BJqzrdTfvt9PKAe+u8sew577WjbOW5LlaJLfVVvNnPqdexNDnaYir21HOSGf5JPZJ61e93lCW/UPe91hhU+s6FjjjxAc9cPhxHayA1aEe1LSvsua+jaorUUw8yauSO4Jnt332xJ1dIkUZevs9n7S9zmn5sK9q9fbpnVdNaitOOgyTlhOjbSiIcQniI8dQvJJRTA9NI8gfmgMDpynXAajojObUwtdv9c3GHiJmNrwYiVvzG3KqnHz9mdaD3vfj6V4dwZBDvtA61aKy70Chlq9/iWPCc1l9+MvPp845pt4Mt1xv1TR0qjujiqnmcAuKGUvHn2/91389F6UWHU6p5NjboSR/qREUqYTnScRoq01pxZgtmrOwXK+8V/whs3VRPzjgSNPoZ/F0jv9VcWjbJlmsKvWK9WjxZW+GS4s6ejektq+opMeHAB89mLmnhdYNGU5R86y6+PR9Lr0WUVoYjjFCSxrHiFWlEV79HS/6S9+zZR9X0rochEtz7O8EmhCWVSmjxhbjtkX/+vPtDjvhm85kxEoW6ozGb3eVVCRamhpXvFyfjYvbqTQeft03iScwco2eVAsrzT+0uvPXPAiILUGy4XPWb+mO60HMIbnuof59FTvhS7R4WO6DljiVkJfA2FalGTkksSKl+6rIzce1WDawtR68Z3c7gyTXI6FRCfvHw3OULHb3j2cRBBD128d9ubZHgGYKVlHnhkr88v5cKS/saVlcS0zGGRozdWzvF/UVLPrjLzORVDPclKtad8kiFqhAPPTakY5KmNzFeWdUONRS6ev5qP17aUrNWu+Dvw/kSdXNsn2o6khJ93J6RaG+y+Gcmh9mNmrdhdhYRuAqvRcXwCnfr/a17jX3fWu9kOtT6o2mYCpUnuXqM4/hcjzT4SO2o2vDsXX1qiBp1TVRsICEUs3HEUQx9fhd1qXP9CtOarrRsip9q9UKxhFZCbFeTpdVHxpgzA4WOzeCf+drLxranrmS6Im9nJ/tL5GzviKILczhL3mhdl794TJxp81DJ6/i+EYW4W+W+KmYXrbwJ6SX/BpMMzWIM6c1t1Ktj2r9ZhofRzhjP53WDEMZ8qdEMJwaeapQuDbUy+ZAS6raqcUZ8fChOto5nPIs7b9YUHOkYpElhJB+aUVveHm3cjbRrgjE59riajs1Ty0WI9mTMGIcaNT4uUG/ji9/PvVz1NzV0z+tM25EZl+TzrokVD7QCZvFUEsiS+4tSDgLe+Q0a0n2bf6ySwMSBMEy1u2do5cFhhInG94sxuT9mqur5e91Krd2ensUIBcI5Ijms97KZJlVJQzKDB8xCRto0JQ7f/msWy1A6WOxMEF67QR+7v7k+1mbKSl1q3f737V95B5/XSUsgZoTccUbAa5HvaPOeE4oDxDebpQiaFDgVXYtre0kyvSMfRS2MfPrki/w7fx1HGUd0/aGqEjPKHDzM3SaZt39CUJWxni2pfCazZFRN9hFv4C8z0reZVX29+3NlqjGhFAGh81A8rf2ZD1oYHC5FmMuEpMS8aAg55ev5oYHZbc7VX8mWhwIb9onNAznn1Z4sKpVsSCDzqlHxDOWXYeimJPEhu58TGO/vc1AQhftN9VnvGz6+ura/kZ0Tv7COc2exGUI6jltLcXQJ0d75Q4UYe32LabqnWTIVidy4srHkPmT+PmoAS/FBN9+/R5kCbEkoo0IIhDtDqIY/dqlz329aE6SZJzMRfug7RM+LREu24kwmCbNa7PByqAoNTuUMeaBVWxa0SBQbv/ZYMNfhIIj19kNa9yK98DamW0fTgKm/3qY/mihmhyjlca6o2ApVrYWIRX9pqcZXxxusstLvlMZthvIVvzutCSzUiBeGPyM8DONinIphlzUc/IBTmbamTxKQK1RUFV5npsfnxK0XZpGk8G0tpefdip0cvzHqTItGsmfWhfd2hPxeedlpPnZbwrGI1YejL+06O952ISop6yTty1fH3kaxNc9IMEPlQ8kGMr2WWP/wiQ68/ieXasc4+d+W/Rr6q7xewd/1WqcR6yjvcysenm64bZ9sBbF+eP10UJVL/1fJf+i6Wq+iPUO97qzHhU6E671o5ZZyUaWjJOu9TKMK7kiTi9AV3J1x2QKugxR48/W4JwYRbILa/vlo4/Hpqd9j/5rr9nj5e/I+1sBDFUv14NCEJML7li07o8GWGvOz6i3+52xj9JoSEUWy6+O1Ac5H83LNN+Ez6z9584L1xvYTrs9Z7Hif3NLKVhfhnKE/yNOdfxx6mfNmGNP/6Q+ZqdC0Dyc/T+JYHrTZfkwzk7mLCd8avXEzMSxOTCYMKuEoH9LCs0woIs/UKo5bGXd664vz7q3sRP4YOXPXbV7mmyfcwwkYEWmMNJ/Z29lPxj99empC1v9QtmimQv6Pd+UTSerDdyxndE/8/w4WOl9aHtcQ5z36/eZODK/oJDni9wt6bq33tphnONuvR+Ycniw6ti2EpWG7mRQ3qhWfjRyJCYgrseykJ+Bsm1IOiKCbNCBk3ynksx/sofYfoK1RlGolBNaUoK9Zzb4I7xLYCkpJIXn8ABf1228DfoTZ+qJZ5chfuxJnTY0FrTSh4Q59Z3vvia8MFaPdBM/NDi+M/zH/yTGd9TWTSV7cbo6mE6165EOTgj2UtIdsnLW2gc4YjeAe+PrPWcHuHnr/6MXKy7iEReO0a2MXPLPxn2wsyGP9M+k17mu1jaiVFnqpCKe2SGs6dcotWkbETqTC/2rM1hg/5yrSNxAyLDLw+XVgYyZT8VbYxPNXrJD3Giozm8Y9l0lpnRIcJGZc+ltq9OS0NvBTgn+5oyGfMIXgvD9DsGmn5IshC1sqtE/sZfk6/fJSLHntlrLfkS75GJwqmd4VnrQUHonZm2+Qes59NeBGrB0v/jasdnRRuzK5ofBa6KIyTAK9jLR5ykT8t47j+BxLTqXXcdT5/oO8L8z78oE/SpNfnyImaqtMpcv/KtV7krJTf5yE68iR0OSnrYOInjzZ94asp7aDPre2CNvm9J4laLz5BFtjb40A/yvh8Ei6z7N2ZhOKWPH21d0ZFhP5sJZexwas/s451Iv02p9leeOO2yKBLj+ezrEVvfz00QXdvFImI2Mv5suUxPX7pkkZFdMpupLpN6/6M3VoeD0lZcV76jgIWwhnHXOY/FJbexsmD9mdfuqzGTZbmM4KDpay0vMNPHI0GH+5GCSAXRctGSmFM90gwvvph2r+04qzwO8SlAieRFzoodaVP75eU7lJel/p7Rp1GkhiGtU8N2uaePYR8zbEKIcOV/tVnEJJ6f3mX5ERD/IvVfIrv8auuRHH1hB+P2BPPgrADdj5UjOF1F9dj+rOTNzCkjFttmb4qfAdY+Ze+teArEGqA1EBE0FWtqt9NpuPKpp8SKN8IcF8Unhy29m9SQokatv/IaW2uZ10plEzsOkP+wZfdOE/bRb8UEnl6qg7fo07/clUvOYWibNdcHqleEOEvYbrqUPNUAf/k9kezWb3QgopiZNSdAJD5e4UJLV+68SOqf0kxZsX3wcfFAvIvvjnqMiMTaGSPPpOyd1M6DSlgYz5WSkW6UEafdUUl/tq+nGlliW3+bu+nGk+ozTP2kWzYv5BDxZGFU/TiAKJ6nVL5e80y3G6bjUu36mPPvLglJ3rH0rNVqt9eZ+U0Z34UIAy6iBsaQHR3vK4PuIaO5jVUigCacLya4bSf6X6vzj8Roi/ZSb+8pTN/I77yqpxQROr/YtsEgu5FfGTbbnVdEIuuTcNG4wErpZuke67Am/CUVgyZPhsyIhTYybTLN5o6ae1PgoatlRErepf+nprJTMUJ83hQ61LW6Tqep2B5C75r+R+mZOUs35D5B+9tVA33XUJqhJhcKnB8cQ0VrGsiX5W4A1GwrzxJxVifTy6cFFkI+vi/W5dvOds7NpnMseadhobmo/IA74F/wpzOWn5bKTcj8hhLbc2pBCQdJGQlbnxJ8db6Z/v568635yX/3VhE75FMirH5xqYqyimEtf1Zn1ZGvn7q/b69HlqpBI9s8US/Q2pZf/shme7dYBWXJMLDxpvSO5c4KqeUabQI6tq+xkP64mAkf+cH6qyGI0+yjGLaJi2uWVjiRH4VD4/YSxuoi5C69b042rOap64ZP5ha5+wUJVpe9p6qvaSKf7C4p3ji/v5aIOJKNKk/k5d99KUMftzw67epyoI60oqzZa/B022KzEEwtue2eWgX39Y7X5s/fuXqo74BovB7HMC+px9kc0U9G4pRXExnKv4jUHvtAzzULwHKKU39U9XuP1m+TDfes/lL+0wDjStff1LPGp8VD0UGXTmYok+t/x/3T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8zYi3V387X1Nmdyjlg4Ee4rW09e1u/qDU3OW9YGvTo6fHSi6uWFzINyjcj0rgz6SJVMz6kRUjh3YRb/lNU2kSFO631ASqelga2Hp88DWJZtfeu5+n0Qu+TyInu1HHluR5IcFUYpez+wtmQ0rZwPOQgdw2vscSO05bMJ5N7/bYB9caETZO56hyLUv4ERX/w3q8m/n+5UBAQEB7/354GAAAAAAAAAAD4/411BDHpG4ZyM0nr1/uVUkJy//vDEf/fOQoCBsJjBFQEVLHolee9rMxRBkF1xGV2ofN1CL3R30sLnCY+p6XxHNI4LwTpPD2NP/s/XgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/yFj+qG+5nnyiekMv8tK0us9bevZ2/pFrTkL4U2q0oqOhUMCtRaUe/e3J+dONnbmEmyErmEU01t07z6/w/OIdj4K3epifWM6IdiDbrM5qsgTeE9642e7hE2ITdpko0BzdOwWjIhlEf+0SpKPaHEFdbXh9atPfAf2yy/WMWvIvT6TI1CxHHWSuyEeTK3cc52RDHZ//l8uFASE/4f9Oo3yue7jBv7HTIO4LKHJku1CtkIkskWGoZGoGVwNoyGRkLHUmGpajDLGIGPPMsZSTZdJJtmmUNkqhcrQtFiyj7Uu24z7Sc65n9/nOs657tfr6fvJ9/f+nPM75x0ICbq13QAAAMD/iqMlsmOitn+eVGfwH13iLmecvrnDg//OgwLFAyFBVQN/vPhutbkF3xTeNSJsc7XQGuWqvhX4bEfqCwkL7xyw48fnL6z5rNkje9u80q9BQqPppbYd71190I8rYhKLJj/ZePF3oZu7v9ojbf8rTx2+lPVc7ytFv+j1Yr1uz/ecVfpE7s4t4S1uf+Cd5W1jFrX84YfYMgXTAp/PaVnkyy/Hbdu08WKL14q175maszn6SnjLDmUSO+0ttfW3A5v6Ddj9aKvaS1I6fdO2+m15v72Uft9L78e/XfLY/Y2+qTBq19XhW37pX6Ll2a3vVeyQvf2dkv0m3WjZrev0iCmH+3Z/61+Vl9z77E+vll14I/7L2DFlJkx8pNm6KdfTrm2ZlHWLzwAAAAD/VRkvNNtSdGWD5lEf35mUOrRE+s39H/J3HhQoGwgJqhi4lL/v8iM/zgqteXBeuwutZgz4PTaiILrnUw37vNh29Re9B3W/GNEmrMrJvA+6/lwY3G9P/rvtFr2e+Pa3d4eP+fzDiOCC4rv3LGtc/LF2Mwoi1nxQ4pOlB7/su2dvlbNtntz+1ql29e463n7XuQonik1ISOxZZ9rAuvvLxFS5GFInf9pnhY1O3Dvth9ysd5ZUfrBTq2qzXz1bYkGZ91c0XVTxYNPhs2qP6TfypekpkQuzyy1cWu78zxsTm/W6xXUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBQKDWXYPmVDxbaVLnzMLI8TtTL0UNy72+Ni/yQMvs4IfK1EqZvuFG7u2bRwwJX/TrtKe2LK4/6+MWh/9o+9KR1SeeTFg5dHiF7KrHvkrbld4mreOdx448dz7ijy7Bm8eG3zOsTu7K3VEvFJl1JCJ+94bCkbWvPnYyY/68yBuD0ne0H7o9+NdB+U+sHHWs5JHipx7tnr3mwfhpD42qkn37W43Tb74rKBAIhN7aagAAAOB/Rvf2I0u3Ld84buiLX2T/mris1M0dXuTvPChQPBAaqBZ4ovqUx/ftP1a8SMTkQ4OL/La1dlhEhbgZFVsffGFzneKpSfmRz837sFpYyIgWsenrJkc8Mv7IpIwTzdKrD7/eMWH7l5XCK8082Kbewl7lr+b8eXp016r9utzZqX1Q9tkV9Wc1+nZmTmaNY8cnNnn44RYbWx0YMzv92tbkkuElw/KD6tV//6dqOVFxtyelbFq48OywwujI6Oornx244K+Qu8uk3Lc+csmmdYsnPjGuVfFF3QK5mdkzpke+26t1eI9ey8e3GHBs6Zu7qpd+e8XY8mmXPj59qnq3Qd93CP8w+lBG3XFPP9D5uV/K59fLXtmvdWHsxXI/r8p8reeBkF1H642+xecAAACA/4r11wv6fnr65f90bdXpnRqnYvrc3P/Bf+dBgbKBkKARgfkfxZ/4JGb1c9OKXkjq3bDfzL4dnkltsXXNG0eydqbOnDWzZqmslOgfD93Zd/vOajnt9ldof290m5e/mh0SlnEhbkDFMWfiN054tFzChYoLlk8cuHLe3RMiv/noYMPSz9e58PTcRhfX9C94P2vuqM6Rf105WHHJmX6fXjv6/eKC5VmhWT0PHRk6ICjzjrvW7+768sn+0eEbsx/9YdmSBbWvVtzXuMRPlac0uPLG3j+bh5a/Uuv0gMpbw7+s1GPVw8uSisQv/+DRC4ndY28c7JU1LXhkk5LhH6ZG7UiqXW9++3f71J8efcdtk6vFzb37ldcqbQsrui/qxfphbZJn3x++5L0Ns19bVf7qiGILXk3PPXDip9T+K/qN3TEwZP8fYTWeKrIh/+GvNtxzef/w4ODvpk9a3Lv6jqOlMqo2/faX+Y9nxZ1ueP7diCYfDS2Ze99rKYU9zq1a0jR17ethyXtWnQwv99e2BzL6PFm+2fwON8a17RRaWPq217+ZtXr0gJpx/3orN/no5JMnXm/XLDLm041Tvht7aEL+06XOvJ+WtmhNp+Aaw85Ve/NCSvNfav31bc6aT8J+K7u7/L4ROWs/Tex/Y2HW2hV9e2ZEb1hZp/eZzOL39e6WvLlnzbsye2YFJeU/NOuZAy37Ny2fNDSvZtjRr/J392/f453fF//jhQp3nm/Vb0NuUMIreTk3tpZ7+o/MKQuygjq+W7bP4IFxKztvrD8oPffrx0fNfn1z5ZZX1vW5o2bzr/e3iGj4SWZiZny3rKv750+/Xjej16U+KasK9509eya40fiKEVNKng+NqpvZJH5Us2f2FRx4NWztjtmXrzYtdnLf5okDZz4Rt6x+ctce1RrVTlnX71yF+Jg2xRL23dFxRlSJzpXHZ4cdia7SKq/YVyMPjZq2qX/9nBpXb2sysX5sfs+na7286HDCm23mFq2xLObz66d6Xdn6QIv1SeeOjW0cPOLzsPuHVSrzc7Gce5v3f3Zjs7p5TfP7LusV/nRBkRkxW65d27Bu6tJmNasEb86oWiOuSsP+ZSql7+pSptzxtvOWbQvEN+w4/cNZh2s+eE9oTNV/pM9deT5t3cCuJ68XTl0W33zqkdm13hz727XMnrEDer907Y3sO17868TxiROa39jwdde0BodjBkUvn3y5yaY5j79YODO8ZvHfq86qub5r10nZcxMfaD0o7rVvLkwtyNqatH1vhQ/fyiro9tiodut2/TF/yXOXZ1e9UOnCxWoTz1VNnPtEVnpuyuOdFzVfH/bBMynnhtxfsVLav1skXXppZ1ByhQHvLN0U+t0t/i0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPw/O/zpoLQtyWvju4XuzCu9/bH3o4blXl+bF3ng4z7Jx4cM25O1sUP5+6c2X/Blg53DH+tx/7hlDcu9knD95wbPnA8a2Xby+89WmNJl6rtFd7VN/nfPdnV7NB06ZkJa4fKkBwb+MOPlxvVW/zox8eIjjb+v9tSFd/7zYPshv3z/yIOfbLt8/e03v3340/nhj73R5OVv6w4urJi8JiOv/JB6VcuOT2h4811BgUAgJOjWdgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/vzmzvUm7xTldJxVt2rvaip9aFEYNy72+Ni/ywKH3UtcNqXBlWYN7lnTtkbL6vqHHGsc+O/b876P+kT99w/PvlQq/Z+8L17o0Sz4xu3JEj95vbX3zo021Ss+bfvTs6aJ1w6u8Vju9+4KPJv+QO693kx2NgrdNO7VsfethHZY0KDvw3ioJ7fdc/imjWbH9y0OzUhMK3l5/94qIybvPt65ypPiP2TffFRQIBEJvbTUAAADwPyOqzr5f0sqPH/trz5D+wdnPVr25w4v8nQcFigdCA7cFzpQ6Hj1wdOfKYyqeG/zzuKUJi/7cOq5F5KYnUutMuhr7XYtP1kyYETv1gbsrx9ebO3LKqVMVbvFnAQAAAP+XAXX27R1Rs899t2+dHPlEZl7izf0f9HceFCgbCAn6Z+Djr9tEFBk2p/6hS83rf3pb6OEy762e9+qWJafjuo89eSUvZsG4Pddj/xwzvtub+zYtbzPwg4ODh1Zq/UVI05wPvq0wOa1hyTIN+pSa0/f+J78/GFtuVZ05QzqXjWoafHtQm3++FDs3uuMHn0/eVvqjqTO2dLxYrEvO5qWfxNxV73Tq2XmdS9ye1nhO5Zqt/908onvHyBmb5o4q2Lx2dLvRKz7OKb2nXsHl/L9Gp9wzfP+I9c/FxJXpUC2zw4Kvq3SfUGXurEttFtc/UuzhlU/Nqde8/JOrZv6+9urjIxf1/vizZZ+3yeg29PlOjz30xSNDE38d+/zPw1/5aMig1b9kjX6l1eBaT35/KrXO3nETbis3cHBUl/+cSf7tjd0f9o/YsPqrqt2W1ii/veOFpJ+m9OpcUHLFtFU/LNjZYmvYPfOO5s2499FbfEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+DztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYr5/QOKoHDuBvdje/bLNtf9v6J7EtmKpQEg2U9lL/gRSiVSEVPIgWpWjTltrW1B6MKDVVJEsEifUieNAW6sGDppSC7UFEaRBTSBHUk1BbD+L/IpEiaCTJTLKZZkyzag7184Hl7Xsz85333ry87AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/efWFpvFy8MW9v3Ysa//k+c6R5zac2LX/0K672of3t9/zyh8HHzl8dPcb9Tua1mzZvfG2I7cfPbv1qo7fZw3uniha4moxhGgkCmH7gXNf9p4cahxri0II+ajcE8KSKHdySZRKWP1bCGHLZD+nH3xvZO3WsbLnpfpp7f9PhaTHFUr5pD8TytP7y+WlGK+z12/46YcdXXcP9T9w050ty7of7pk6JSpWracQFm9OX5+bIffRx7a3tj7e+XTTpn179lz97duFL3ofav308FfnOs9e29c3nPvxu5vvPf3ZvifrQggL4s+YZLU2JTePy/tCCA1V+etmGdd1lzj+toz6irj8X1yWZslJjq+8xPPTCqmyYY7Xz9VMz+zftHCe75dIxrk4Lk/EZcscc/LJJwq5KBQm9+Kd0dQaCVXPLQpRqKvaR6OQG6/nJuthvB6m6lGqnkvV83WpcY3fN15o+Sia3p6cl2pvjtsLcfvK6r1+BvdntF8Tl8X4D/VCUg/pLxNKF32ZHNe4pF9n/qIv8yFXtQfN1J70d138MEpxWylaetE1ozNIjr2/s7Jt6In1L5Qz+hENRHF+VFP+rV3Lj5UqbYeasvI35+L8XE35w+dvWf518fNjmfn9SX6+pvziUNfLz3z/4arM+fk5mZ9CTfkf9Xe/euX6bzY2Z+W/meQXa8o/X9h0arTnyIHM/q9O5mdBTfkDDx7vuLD2nb7M/JDkN9SU31wZPP5Wb+PBzPwPkvkp1ZR/fdtA5ePK3g2Z8386yV9UU/6Z0TW/NJ4afDdzfd6RzE+5pvyl21atKD/17I1Ze2fUM9//YQEuL1fEv7Eqcb3W99S/q+p94bVyNPGbb2H8WfRP3iglqnp3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZAcOZAAAAACE+Vvn0X4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CgAAP//8ZNNEw==") 2.251548569s ago: executing program 3 (id=4627): unshare(0x68040200) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) unshare(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff060060001f000000560000002500000019001a001500020007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 2.193648239s ago: executing program 2 (id=4628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000040)="03", 0x1) 2.041127541s ago: executing program 4 (id=4629): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000130400000000000000010000050011000000000000030000000000000000"], 0x0, 0x4a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240)={0x6}, 0x8}, 0x90) 1.970619722s ago: executing program 2 (id=4630): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x505, 0x0) 1.924786592s ago: executing program 4 (id=4631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xe, 0x3, 0x4a}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.749997408s ago: executing program 2 (id=4632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.519006205s ago: executing program 3 (id=4633): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000003c0)=0x1, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private1, 0x101}, @in6={0xa, 0x4e24, 0x1ff, @mcast1, 0x18000}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000380)=0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) listen(r2, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc0000000000000000000000000000002001000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000002b000000ff02000000000000000000dc00000001000000000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970000000000000000000000000000000000000000000a000200000000000000000014000e00"/188], 0x104}}, 0x0) 1.509166371s ago: executing program 2 (id=4634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000c40)={@val, @val={0x0, 0x4, 0x1, 0x1}, @x25={0x0, 0x0, 0x0, "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"}}, 0xfce) 1.33328877s ago: executing program 3 (id=4635): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&@\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x6c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.315459594s ago: executing program 4 (id=4636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', 0x5}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000a0000001b0000000600050088a8000008000500", @ANYRES32=r6, @ANYRES32=r1], 0x60}}, 0x0) 1.120237722s ago: executing program 3 (id=4637): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, 0x0) 1.061278291s ago: executing program 4 (id=4638): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000340)='ext4_remove_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 712.808528ms ago: executing program 4 (id=4639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) poll(0x0, 0x0, 0x9d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 135.843404ms ago: executing program 2 (id=4640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 133.235899ms ago: executing program 3 (id=4641): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x505, 0x0) 49.870231ms ago: executing program 2 (id=4642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}}, 0x1c}}, 0x0) 0s ago: executing program 3 (id=4643): unshare(0x68040200) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) unshare(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff060060001f000000560000002500000019001a001500020007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) kernel console output (not intermixed with test programs): kB [ 459.993012][T14686] 58801 total pagecache pages [ 459.998163][T14686] 0 pages in swap cache [ 460.002493][T14686] Free swap = 124728kB [ 460.012626][T14686] Total swap = 124996kB [ 460.017322][T14686] 2097051 pages RAM [ 460.021168][T14686] 0 pages HighMem/MovableOnly [ 460.026866][T14686] 400873 pages reserved [ 460.031727][T14686] 0 pages cma reserved [ 460.499855][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.575134][T14714] bond0: entered promiscuous mode [ 460.586809][T14714] bond_slave_0: entered promiscuous mode [ 460.592727][T14714] bond_slave_1: entered promiscuous mode [ 460.627525][T14714] bridge0: entered promiscuous mode [ 460.898695][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.039272][T14578] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.068516][T14578] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.079150][T14578] bridge_slave_0: entered allmulticast mode [ 461.111532][T14578] bridge_slave_0: entered promiscuous mode [ 461.129344][T14578] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.141758][T14578] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.158725][T14578] bridge_slave_1: entered allmulticast mode [ 461.184179][T14578] bridge_slave_1: entered promiscuous mode [ 461.254883][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.294757][T14578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.353673][T11440] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 461.399795][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.431989][T14578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.530785][T14578] team0: Port device team_slave_0 added [ 461.547679][T11440] usb 2-1: too many configurations: 119, using maximum allowed: 8 [ 461.573993][T11440] usb 2-1: config index 0 descriptor too short (expected 65299, got 72) [ 461.586687][T11440] usb 2-1: config index 1 descriptor too short (expected 65299, got 72) [ 461.601757][T14578] team0: Port device team_slave_1 added [ 461.604673][T11440] usb 2-1: config index 2 descriptor too short (expected 65299, got 72) [ 461.644405][T14772] loop0: detected capacity change from 0 to 64 [ 461.648761][T11440] usb 2-1: config index 3 descriptor too short (expected 65299, got 72) [ 461.668488][T11440] usb 2-1: config index 4 descriptor too short (expected 65299, got 72) [ 461.680919][T11440] usb 2-1: config index 5 descriptor too short (expected 65299, got 72) [ 461.701217][T11440] usb 2-1: config index 6 descriptor too short (expected 65299, got 72) [ 461.719585][T11440] usb 2-1: config index 7 descriptor too short (expected 65299, got 72) [ 461.738314][T11440] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 461.758113][T11440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.776834][T11440] usb 2-1: Product: syz [ 461.790694][T11440] usb 2-1: Manufacturer: syz [ 461.795329][T14578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.795351][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.795374][T14578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.843928][T11440] usb 2-1: SerialNumber: syz [ 461.866835][T11440] hub 2-1:1.0: bad descriptor, ignoring hub [ 461.883745][T11440] hub 2-1:1.0: probe with driver hub failed with error -5 [ 461.891384][T11440] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 461.932386][ T5173] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.043413][ T5086] Bluetooth: hci1: command tx timeout [ 462.197002][T14578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.238635][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.282697][T14578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.394154][T14785] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.3171'. [ 462.789908][ T62] bridge_slave_1: left allmulticast mode [ 462.810887][ T62] bridge_slave_1: left promiscuous mode [ 462.829380][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.848730][ T62] bridge_slave_0: left allmulticast mode [ 462.862864][ T62] bridge_slave_0: left promiscuous mode [ 462.873626][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.976686][ T62] ip6gretap0 (unregistering): left promiscuous mode [ 463.003384][ T5173] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 463.014194][ T5173] ath9k_htc: Failed to initialize the device [ 463.066630][ T5173] usb 2-1: ath9k_htc: USB layer deinitialized [ 463.235627][ T62] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 463.606401][ T5129] usb 2-1: USB disconnect, device number 28 [ 463.738053][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.750231][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.761313][ T62] bond0 (unregistering): Released all slaves [ 463.788165][T14578] hsr_slave_0: entered promiscuous mode [ 463.815033][T14578] hsr_slave_1: entered promiscuous mode [ 463.844428][T14578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.856582][T14578] Cannot create hsr debugfs directory [ 463.862425][T14774] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3168'. [ 463.895458][T14774] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.936542][T14774] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3168'. [ 464.136273][ T5129] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 464.233799][ T5173] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 464.352118][ T5129] usb 2-1: Using ep0 maxpacket: 8 [ 464.370358][ T5129] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 464.390177][ T5129] usb 2-1: config 0 has no interface number 0 [ 464.404874][ T5129] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.415722][ T5173] usb 1-1: Using ep0 maxpacket: 32 [ 464.417739][ T62] batadv_slave_0: left promiscuous mode [ 464.427859][ T5129] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 464.435426][ T5173] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.440900][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.448489][ T5173] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.466153][ T5173] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 464.476825][ T5173] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 464.489868][ T5173] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 464.501504][ T5129] usb 2-1: config 0 descriptor?? [ 464.509371][ T62] hsr_slave_0: left promiscuous mode [ 464.517455][ T62] hsr_slave_1: left promiscuous mode [ 464.523527][ T5173] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 464.535108][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.543123][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.557980][ T5129] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 464.571332][ T5173] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.580866][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.594190][ T5173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.602514][ T5173] usb 1-1: Product: syz [ 464.608212][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.628932][ T5173] usb 1-1: Manufacturer: syz [ 464.634092][ T5173] usb 1-1: SerialNumber: syz [ 464.686873][ T62] veth1_macvtap: left promiscuous mode [ 464.692536][ T62] veth0_macvtap: left promiscuous mode [ 464.699357][ T62] veth1_vlan: left promiscuous mode [ 464.705068][ T62] veth0_vlan: left promiscuous mode [ 464.835569][ T25] usb 2-1: USB disconnect, device number 29 [ 464.848969][ T25] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 464.879920][ T5173] cdc_ncm 1-1:1.0: bind() failure [ 464.908699][ T5173] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 464.929062][ T5173] cdc_ncm 1-1:1.1: bind() failure [ 464.950345][ T5173] usb 1-1: USB disconnect, device number 39 [ 465.772589][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3179'. [ 465.801619][ T62] team0 (unregistering): Port device team_slave_1 removed [ 465.854376][T14837] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.3180'. [ 465.864459][T14837] net_ratelimit: 368 callbacks suppressed [ 465.864478][T14837] netlink: zone id is out of range [ 465.875608][T14837] netlink: zone id is out of range [ 465.876238][ T62] team0 (unregistering): Port device team_slave_0 removed [ 465.880757][T14837] netlink: zone id is out of range [ 465.893925][T14837] netlink: zone id is out of range [ 465.899351][T14837] netlink: zone id is out of range [ 465.914310][T14837] netlink: zone id is out of range [ 465.920765][T14837] netlink: zone id is out of range [ 465.926088][T14837] netlink: zone id is out of range [ 465.931382][T14837] netlink: zone id is out of range [ 465.937359][T14837] netlink: zone id is out of range [ 466.557077][T14519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.623477][T14519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.671781][T14519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 466.761191][T14519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.589519][T14519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.695800][T14875] netlink: 'syz.0.3193': attribute type 2 has an invalid length. [ 467.726307][T14519] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.740538][T14875] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3193'. [ 467.808598][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.816450][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.838205][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.845444][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.933362][T14578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.966714][T14578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.013685][T14578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.140366][T14578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.367978][T14900] netlink: 'syz.2.3202': attribute type 2 has an invalid length. [ 468.445136][T14902] netlink: 'syz.1.3203': attribute type 2 has an invalid length. [ 468.453078][T14902] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3203'. [ 468.574851][T14906] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3204'. [ 468.617390][T14906] xt_TPROXY: Can be used only with -p tcp or -p udp [ 468.889975][T14578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.931671][T14519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.946763][T14922] netlink: 'syz.2.3207': attribute type 2 has an invalid length. [ 468.955787][T14882] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3195'. [ 468.975723][T14922] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3207'. [ 469.013079][T14882] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.039755][T14882] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3195'. [ 469.350012][T14578] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.395184][T11440] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.402345][T11440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.479160][T11440] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.486429][T11440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.895483][T14519] veth0_vlan: entered promiscuous mode [ 469.950945][T14519] veth1_vlan: entered promiscuous mode [ 470.121104][T14519] veth0_macvtap: entered promiscuous mode [ 470.168048][T14519] veth1_macvtap: entered promiscuous mode [ 470.257459][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.271396][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.289911][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.313549][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 470.328488][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.363444][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.387755][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.409928][T14519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.430972][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.442963][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.455828][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.467549][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.492524][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.508338][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.520708][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 470.525948][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3223'. [ 470.534785][T14519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.550779][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 470.572956][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.602623][T14519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.612777][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.623598][T14519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.632689][T14519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.641738][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.653018][ T25] usb 2-1: config 0 descriptor?? [ 470.661494][T14519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.671491][T14968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 470.682527][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'. [ 470.804744][T14578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.989608][T15002] netlink: 'syz.0.3228': attribute type 10 has an invalid length. [ 471.099491][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.125454][T14578] veth0_vlan: entered promiscuous mode [ 471.131334][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.147591][ T25] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 471.177343][ T25] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 471.240449][T14578] veth1_vlan: entered promiscuous mode [ 471.247510][ T25] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 471.285106][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.333984][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.390426][T14578] veth0_macvtap: entered promiscuous mode [ 471.435712][ T25] usb 2-1: USB disconnect, device number 30 [ 471.480087][T14578] veth1_macvtap: entered promiscuous mode [ 471.549138][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.579159][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.606470][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.636388][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.662259][T15027] Bluetooth: MGMT ver 1.22 [ 471.663525][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.693400][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.726005][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.743377][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.775102][T14578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.824251][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.843748][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.884424][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.913368][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.936970][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.969821][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.992978][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.013873][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.062930][T14578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.108465][T14578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.142673][T14578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.181985][T14578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.253415][T14578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.376449][T15055] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3244'. [ 472.396257][T15055] net_ratelimit: 116 callbacks suppressed [ 472.396277][T15055] openvswitch: netlink: Message has 512 unknown bytes. [ 472.466775][T15053] netlink: 'syz.4.3243': attribute type 10 has an invalid length. [ 472.505000][T15053] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.512883][T15053] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.554297][T15053] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.561534][T15053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.569169][T15053] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.576409][T15053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.638162][T15053] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 472.825619][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.855811][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.865758][ T5173] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 472.982895][ T2871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.008082][ T2871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.088415][ T5173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 473.137040][ T5173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 473.173505][ T5173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.217556][ T5173] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.238238][ T5173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.270670][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3257'. [ 473.283530][ T5173] usb 2-1: config 0 descriptor?? [ 473.289486][T15066] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 473.310724][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3258'. [ 473.561221][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'. [ 473.748016][ T5173] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 473.775026][ T5173] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 473.831511][ T5173] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 473.995230][ T5173] usb 2-1: USB disconnect, device number 31 [ 476.925955][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3258'. [ 477.474031][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 477.526299][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3276'. [ 478.764578][T15171] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.3286'. [ 478.793379][T15171] netlink: zone id is out of range [ 478.798564][T15171] netlink: zone id is out of range [ 478.833092][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 478.849800][T15171] netlink: zone id is out of range [ 478.877387][T15171] netlink: zone id is out of range [ 478.882560][T15171] netlink: zone id is out of range [ 478.945004][T15171] netlink: zone id is out of range [ 478.970143][T15171] netlink: zone id is out of range [ 478.983260][T15171] netlink: zone id is out of range [ 478.988430][T15171] netlink: zone id is out of range [ 479.003645][T15171] netlink: zone id is out of range [ 479.025996][T15182] fuse: Bad value for 'fd' [ 479.415461][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 479.946970][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3300'. [ 480.055994][ T29] audit: type=1804 audit(1719283210.501:110): pid=15214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3303" name="/root/syzkaller.LUeu1f/113/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 480.251882][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3305'. [ 480.682961][T15232] loop2: detected capacity change from 0 to 8 [ 480.780578][T15232] SQUASHFS error: zlib decompression failed, data probably corrupt [ 480.842116][T15232] SQUASHFS error: Failed to read block 0x4e8: -5 [ 480.925416][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 481.006645][ T29] audit: type=1800 audit(1719283211.401:111): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3312" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 482.119165][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 482.165660][T15258] loop3: detected capacity change from 0 to 64 [ 482.335323][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.383264][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 482.417244][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 482.450282][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.484172][ T25] usb 3-1: Product: syz [ 482.510984][ T25] usb 3-1: Manufacturer: syz [ 482.541995][ T25] usb 3-1: SerialNumber: syz [ 482.774302][T15247] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.001266][T15247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.033808][T15247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.436581][T15289] loop4: detected capacity change from 0 to 64 [ 483.461281][T15247] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.536468][T15290] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.3332'. [ 483.592655][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3332'. [ 483.697406][ T25] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 483.710857][ T25] cdc_ncm 3-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 483.753393][ T25] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 483.872216][T15298] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.3339'. [ 483.893529][T15298] net_ratelimit: 242 callbacks suppressed [ 483.893554][T15298] netlink: zone id is out of range [ 483.923846][ T25] cdc_ncm 3-1:1.0: setting tx_max = 28 [ 483.941289][T15298] netlink: zone id is out of range [ 483.972238][T15298] netlink: zone id is out of range [ 483.989749][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3339'. [ 484.013560][T15298] netlink: zone id is out of range [ 484.015253][ T25] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 484.040604][T15298] netlink: zone id is out of range [ 484.080035][T15298] netlink: zone id is out of range [ 484.081691][ T25] usb 3-1: USB disconnect, device number 35 [ 484.095477][T15298] netlink: zone id is out of range [ 484.107535][ T25] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 484.129415][T15298] netlink: zone id is out of range [ 484.163277][T15298] netlink: zone id is out of range [ 484.185661][T15298] netlink: zone id is out of range [ 485.125198][T15333] netlink: 'syz.2.3354': attribute type 10 has an invalid length. [ 485.143116][ T29] audit: type=1804 audit(1719283215.591:112): pid=15340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3358" name="/root/syzkaller.MSQI1t/618/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 485.188197][T15333] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.399912][T15315] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3342'. [ 485.543807][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.594081][T15315] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3342'. [ 485.891524][T15378] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.3371'. [ 485.932152][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 485.981316][T15379] ip6gretap0: entered promiscuous mode [ 485.986247][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3372'. [ 486.025503][T15379] batadv_slave_0: entered promiscuous mode [ 486.823389][ T25] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 487.182548][ T25] usb 1-1: too many configurations: 119, using maximum allowed: 8 [ 487.203807][ T25] usb 1-1: config index 0 descriptor too short (expected 65299, got 72) [ 487.225868][ T25] usb 1-1: config index 1 descriptor too short (expected 65299, got 72) [ 487.244462][ T25] usb 1-1: config index 2 descriptor too short (expected 65299, got 72) [ 487.268635][ T25] usb 1-1: config index 3 descriptor too short (expected 65299, got 72) [ 487.289149][ T25] usb 1-1: config index 4 descriptor too short (expected 65299, got 72) [ 487.317803][ T25] usb 1-1: config index 5 descriptor too short (expected 65299, got 72) [ 487.340455][ T25] usb 1-1: config index 6 descriptor too short (expected 65299, got 72) [ 487.354414][ T25] usb 1-1: config index 7 descriptor too short (expected 65299, got 72) [ 487.369868][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 487.409555][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.426052][ T25] usb 1-1: Product: syz [ 487.430279][ T25] usb 1-1: Manufacturer: syz [ 487.436037][ T25] usb 1-1: SerialNumber: syz [ 487.445883][ T25] hub 1-1:1.0: bad descriptor, ignoring hub [ 487.454038][ T25] hub 1-1:1.0: probe with driver hub failed with error -5 [ 487.461614][ T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 487.481388][T11440] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 487.532217][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3383'. [ 488.523544][T11440] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 488.532422][T11440] ath9k_htc: Failed to initialize the device [ 488.569206][T11440] usb 1-1: ath9k_htc: USB layer deinitialized [ 488.914287][ T25] usb 1-1: USB disconnect, device number 40 [ 489.351206][T15424] __nla_validate_parse: 2 callbacks suppressed [ 489.351224][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3387'. [ 490.820654][T15411] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3384'. [ 490.865794][T15411] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3384'. [ 492.396183][T15461] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.3400'. [ 492.534451][T15466] binder: 15456:15466 ioctl 4018620d 0 returned -22 [ 492.597367][T15466] loop4: detected capacity change from 0 to 1024 [ 492.758709][T15466] hfsplus: invalid attributes max_key_len 768 [ 492.767971][T15466] hfsplus: failed to load attributes file [ 492.958051][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'. [ 493.417726][T15475] bond0: entered promiscuous mode [ 493.434386][T15475] bond_slave_0: entered promiscuous mode [ 493.444983][T15475] bond_slave_1: entered promiscuous mode [ 493.874179][T15490] loop1: detected capacity change from 0 to 4096 [ 493.902302][T15490] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 494.018341][T15490] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 494.217966][T15502] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.3417'. [ 494.246519][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3417'. [ 494.705162][T15520] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.3426'. [ 494.776992][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3426'. [ 494.842844][T15486] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3411'. [ 494.856634][T15486] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3411'. [ 494.885563][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 494.987933][T15531] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.3431'. [ 495.049507][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3431'. [ 495.080829][T15537] loop1: detected capacity change from 0 to 64 [ 495.269298][T15534] loop2: detected capacity change from 0 to 4096 [ 495.312190][T15534] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 495.444265][T15534] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 495.467204][T15547] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 495.783680][T15553] 9pnet_fd: Insufficient options for proto=fd [ 495.890995][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 495.942253][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 496.126038][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 496.333101][T15574] binder: 15563:15574 ioctl 4018620d 0 returned -22 [ 496.413836][T15574] loop3: detected capacity change from 0 to 1024 [ 496.699476][T15574] hfsplus: invalid attributes max_key_len 768 [ 496.706795][T15574] hfsplus: failed to load attributes file [ 497.337130][T15582] loop3: detected capacity change from 0 to 4096 [ 497.357195][ T29] audit: type=1804 audit(1719283227.811:113): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.3451" name="/root/syzkaller.PSMqwk/487/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 497.400067][T15582] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 497.437167][T15593] tipc: Started in network mode [ 497.463596][T15593] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 497.468063][T15582] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 497.495628][T15593] tipc: Enabled bearer , priority 10 [ 497.499244][T15585] 9pnet_fd: Insufficient options for proto=fd [ 497.662702][T15600] : entered promiscuous mode [ 497.723938][ T25] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 497.970884][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.015079][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 498.070823][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.095949][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.129434][ T25] usb 5-1: Product: syz [ 498.139649][ T29] audit: type=1804 audit(1719283228.591:114): pid=15624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3466" name="/root/syzkaller.LUeu1f/148/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 498.173499][ T25] usb 5-1: Manufacturer: syz [ 498.188467][ T25] usb 5-1: SerialNumber: syz [ 498.394328][T15633] 9pnet_fd: Insufficient options for proto=fd [ 498.421632][T15594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 498.619948][T11444] tipc: Node number set to 15444650 [ 498.656315][T15594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.683855][T15594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.976782][ T29] audit: type=1804 audit(1719283229.431:115): pid=15652 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.3479" name="/root/syzkaller.1hhaI5/42/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 499.043403][T11444] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 499.137195][T15594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.245445][T11444] usb 2-1: too many configurations: 119, using maximum allowed: 8 [ 499.274846][T11444] usb 2-1: config index 0 descriptor too short (expected 65299, got 72) [ 499.302324][T11444] usb 2-1: config index 1 descriptor too short (expected 65299, got 72) [ 499.364587][ T25] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 499.371088][ T25] cdc_ncm 5-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 499.379006][T11444] usb 2-1: config index 2 descriptor too short (expected 65299, got 72) [ 499.402779][T11444] usb 2-1: config index 3 descriptor too short (expected 65299, got 72) [ 499.405157][ T25] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 499.418597][T11444] usb 2-1: config index 4 descriptor too short (expected 65299, got 72) [ 499.438986][T11444] usb 2-1: config index 5 descriptor too short (expected 65299, got 72) [ 499.453430][T11444] usb 2-1: config index 6 descriptor too short (expected 65299, got 72) [ 499.468057][T15670] net_ratelimit: 392 callbacks suppressed [ 499.468081][T15670] netlink: zone id is out of range [ 499.484221][T15670] netlink: zone id is out of range [ 499.490420][T11444] usb 2-1: config index 7 descriptor too short (expected 65299, got 72) [ 499.502211][T15670] netlink: zone id is out of range [ 499.512443][T15670] netlink: zone id is out of range [ 499.521750][T15670] netlink: zone id is out of range [ 499.530287][T11444] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 499.566750][T11444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.568589][ T25] cdc_ncm 5-1:1.0: setting tx_max = 28 [ 499.576522][T15670] netlink: zone id is out of range [ 499.576540][T15670] netlink: zone id is out of range [ 499.576549][T15670] netlink: zone id is out of range [ 499.576558][T15670] netlink: zone id is out of range [ 499.576569][T15670] netlink: zone id is out of range [ 499.581170][T11444] usb 2-1: Product: syz [ 499.620154][T11444] usb 2-1: Manufacturer: syz [ 499.640467][T11444] usb 2-1: SerialNumber: syz [ 499.646568][T15672] netlink: 'syz.3.3489': attribute type 10 has an invalid length. [ 499.663628][T11444] hub 2-1:1.0: bad descriptor, ignoring hub [ 499.664913][ T25] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 499.669581][T11444] hub 2-1:1.0: probe with driver hub failed with error -5 [ 499.669942][T11444] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 499.697164][T15672] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.748328][ T5129] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 499.748444][T15672] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.765094][T15672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.789254][ T25] usb 5-1: USB disconnect, device number 42 [ 499.832663][ T25] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 499.874953][T15672] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 499.903048][T15679] __nla_validate_parse: 10 callbacks suppressed [ 499.903071][T15679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3492'. [ 499.967447][ T29] audit: type=1804 audit(1719283230.411:116): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.3493" name="/root/syzkaller.PSMqwk/501/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 500.261989][T15693] netlink: 'syz.2.3499': attribute type 4 has an invalid length. [ 500.756787][T15707] netlink: 'syz.2.3505': attribute type 10 has an invalid length. [ 500.845703][ T5129] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 500.857312][ T5129] ath9k_htc: Failed to initialize the device [ 500.915456][ T5129] usb 2-1: ath9k_htc: USB layer deinitialized [ 501.133385][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 501.189153][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3510'. [ 501.256309][T11444] usb 2-1: USB disconnect, device number 32 [ 501.345327][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.377286][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 501.422985][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.440072][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.470134][ T8] usb 4-1: Product: syz [ 501.489267][ T8] usb 4-1: Manufacturer: syz [ 501.509571][ T8] usb 4-1: SerialNumber: syz [ 501.741478][T15743] input: syz1 as /devices/virtual/input/input22 [ 501.752837][T15711] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 501.849156][T15746] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3524'. [ 501.904147][T15746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 502.006153][T15711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.026888][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3526'. [ 502.046455][T15711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.126720][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.133236][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.462495][T15711] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 502.548387][T15764] loop4: detected capacity change from 0 to 4096 [ 502.561414][T15764] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 502.610612][T15764] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 502.677136][ T8] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 502.684827][ T8] cdc_ncm 4-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 502.697834][ T8] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 502.882290][ T8] cdc_ncm 4-1:1.0: setting tx_max = 28 [ 502.974397][ T8] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 503.022309][ T8] usb 4-1: USB disconnect, device number 24 [ 503.057341][ T8] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 503.319396][ T29] audit: type=1804 audit(1719283233.771:117): pid=15791 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3543" name="/root/syzkaller.MSQI1t/647/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 503.416655][T15794] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3545'. [ 503.459525][T15794] bridge_slave_1: left allmulticast mode [ 503.478692][T15794] bridge_slave_1: left promiscuous mode [ 503.513860][T15794] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.546678][T15794] bridge_slave_0: left allmulticast mode [ 503.581398][T15794] bridge_slave_0: left promiscuous mode [ 503.587971][T15794] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.623482][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3548'. [ 503.675498][T15794] bond0: (slave bridge0): Releasing backup interface [ 503.697178][T15794] bridge0 (unregistering): left promiscuous mode [ 503.907540][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3550'. [ 505.144215][ T5131] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 505.411079][ T5131] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.433706][ T5131] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 505.459911][ T5131] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.475049][ T5131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.495276][ T5131] usb 5-1: Product: syz [ 505.520849][ T5131] usb 5-1: Manufacturer: syz [ 505.543593][ T5131] usb 5-1: SerialNumber: syz [ 505.715638][T15861] netlink: 'syz.0.3576': attribute type 10 has an invalid length. [ 505.747862][T15861] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.777226][T15827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.800285][T15827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.816384][T15827] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.255272][ T5131] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 506.261390][ T5131] cdc_ncm 5-1:1.0: bind() failure [ 506.314512][ T5131] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 506.337235][ T5131] cdc_ncm 5-1:1.1: bind() failure [ 506.446696][T15900] netlink: 'syz.0.3593': attribute type 10 has an invalid length. [ 506.910279][T15923] tipc: Failed to remove unknown binding: 66,1,1/0:981993649/981993651 [ 506.945466][T15923] tipc: Failed to remove unknown binding: 66,1,1/0:981993649/981993651 [ 507.094301][T15931] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3607'. [ 507.350872][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3612'. [ 507.592577][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3616'. [ 507.914291][T11441] usb 5-1: USB disconnect, device number 43 [ 507.994631][T15964] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3622'. [ 508.039153][ C1] net_ratelimit: 117 callbacks suppressed [ 508.039174][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 508.265009][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'. [ 508.594734][T15984] binder: 15976:15984 ioctl 4018620d 0 returned -22 [ 508.659372][T15984] loop0: detected capacity change from 0 to 1024 [ 509.021082][T15984] hfsplus: invalid attributes max_key_len 768 [ 509.028470][T15984] hfsplus: failed to load attributes file [ 509.243516][T15985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 509.509651][T15988] loop1: detected capacity change from 0 to 4096 [ 509.525801][T15988] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 509.568312][T16001] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3637'. [ 509.600816][T15988] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 509.687812][T11441] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 509.896537][T11441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.938594][T11441] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 509.965030][T11441] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.976461][T11441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.986637][T11441] usb 1-1: Product: syz [ 509.991051][T11441] usb 1-1: Manufacturer: syz [ 510.002036][T11441] usb 1-1: SerialNumber: syz [ 510.244512][T15992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.263720][T15992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.316297][T15992] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 510.786392][T11441] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 510.802668][T11441] cdc_ncm 1-1:1.0: bind() failure [ 510.829208][T11441] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 510.873353][T11441] cdc_ncm 1-1:1.1: bind() failure [ 511.086789][T16040] netlink: 'syz.4.3655': attribute type 10 has an invalid length. [ 511.104068][T16040] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.111935][T16040] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.134615][T16048] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 511.157463][T16048] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 511.170755][T16048] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 511.185961][T16048] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 511.195137][T16048] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 511.213861][T16048] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 511.426340][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.434027][T16054] 9pnet_fd: Insufficient options for proto=fd [ 511.632780][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.762464][ T29] audit: type=1326 audit(1719283242.211:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 511.794030][ T29] audit: type=1326 audit(1719283242.251:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 511.834853][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.837002][ T29] audit: type=1326 audit(1719283242.251:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 511.890430][T16074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3669'. [ 511.900637][ T29] audit: type=1326 audit(1719283242.251:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 511.973612][ T29] audit: type=1326 audit(1719283242.251:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 511.998764][ T29] audit: type=1326 audit(1719283242.251:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 512.023565][ T29] audit: type=1326 audit(1719283242.251:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 512.046847][ T29] audit: type=1326 audit(1719283242.251:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 512.070991][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.074707][ T29] audit: type=1326 audit(1719283242.251:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 512.109416][ T29] audit: type=1326 audit(1719283242.251:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 512.169963][T16076] netlink: 'syz.4.3670': attribute type 10 has an invalid length. [ 512.417134][T16046] chnl_net:caif_netlink_parms(): no params data found [ 512.461859][ T5080] usb 1-1: USB disconnect, device number 41 [ 512.627574][T16093] 9pnet_fd: Insufficient options for proto=fd [ 513.323342][ T5086] Bluetooth: hci4: command tx timeout [ 513.923414][T16137] loop1: detected capacity change from 0 to 4096 [ 513.976554][T16137] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 514.092485][T16137] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 514.503540][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.522825][ T35] bond_slave_0: left promiscuous mode [ 514.558975][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.574016][ T35] bond_slave_1: left promiscuous mode [ 514.594200][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 514.615843][ T35] mac80211_hwsim hwsim19 wlan1: left promiscuous mode [ 514.642923][ T35] bond0 (unregistering): Released all slaves [ 514.741876][ T35] : left promiscuous mode [ 514.870048][T16151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3693'. [ 514.925385][T16153] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3694'. [ 514.936431][ T35] tipc: Left network mode [ 515.039708][T16147] loop3: detected capacity change from 0 to 32768 [ 515.173535][T16147] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 515.291103][T16046] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.298955][T16046] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.308198][T16046] bridge_slave_0: entered allmulticast mode [ 515.319499][T16046] bridge_slave_0: entered promiscuous mode [ 515.366760][T16046] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.379386][T16046] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.399298][T16046] bridge_slave_1: entered allmulticast mode [ 515.409322][ T5086] Bluetooth: hci4: command tx timeout [ 515.429055][T16046] bridge_slave_1: entered promiscuous mode [ 515.531988][T16147] XFS (loop3): Ending clean mount [ 515.592203][ T5131] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x10 [ 515.674253][ T5131] XFS (loop3): Unmount and run xfs_repair [ 515.702324][ T5131] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 515.726885][ T5131] 00000000: 46 49 42 33 00 00 48 00 ff ff ff ff ff ff ff ff FIB3..H......... [ 515.761173][ T5131] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 515.780719][ T5131] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 515.829987][ T5131] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 515.863278][ T5131] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 515.872196][ T5131] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 515.913283][ T5131] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 515.929958][ T5131] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 516.004691][T16147] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 4 error 74 [ 516.034224][ T35] hsr_slave_0: left promiscuous mode [ 516.053877][T16147] XFS (loop3): Failed to initialize disk quotas. [ 516.063829][ T35] hsr_slave_1: left promiscuous mode [ 516.082126][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.110066][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.174482][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.193971][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.204303][T14578] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 516.250151][T14578] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 516.302676][ T35] veth1_macvtap: left promiscuous mode [ 516.344794][ T35] veth0_macvtap: left promiscuous mode [ 516.350558][ T35] veth1_vlan: left promiscuous mode [ 516.394170][ T35] veth0_vlan: left promiscuous mode [ 516.928115][T16102] syz.0.3676 (16102): drop_caches: 1 [ 517.466572][ T35] team0 (unregistering): Port device team_slave_1 removed [ 517.483389][ T5086] Bluetooth: hci4: command tx timeout [ 517.542918][ T35] team0 (unregistering): Port device team_slave_0 removed [ 518.292821][T16046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.314626][T16046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.392493][T16211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3709'. [ 518.612875][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3713'. [ 518.629946][T16046] team0: Port device team_slave_0 added [ 518.679100][T16046] team0: Port device team_slave_1 added [ 518.949340][T16046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.970091][T16046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.095874][T16046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.173423][T16239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3723'. [ 519.269047][T16046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.285057][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 519.321730][T16046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.520141][T16046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.563716][ T5086] Bluetooth: hci4: command tx timeout [ 519.659936][T16248] netlink: 'syz.3.3726': attribute type 10 has an invalid length. [ 519.683437][T16248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3726'. [ 519.743849][T16248] bridge0: port 3(bond0) entered blocking state [ 519.792191][T16248] bridge0: port 3(bond0) entered disabled state [ 519.820781][T16248] bond0: entered allmulticast mode [ 519.833129][T16248] bond_slave_0: entered allmulticast mode [ 519.839561][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3728'. [ 519.853306][T16248] bond_slave_1: entered allmulticast mode [ 519.859660][T16248] bridge0: entered allmulticast mode [ 519.872382][T16248] bond0: left allmulticast mode [ 519.879372][T16248] bond_slave_0: left allmulticast mode [ 519.893377][T16248] bond_slave_1: left allmulticast mode [ 519.902432][T16248] bridge0: left allmulticast mode [ 519.911550][T16248] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 520.328052][T16243] loop1: detected capacity change from 0 to 32768 [ 520.358383][T16046] hsr_slave_0: entered promiscuous mode [ 520.400724][T16046] hsr_slave_1: entered promiscuous mode [ 520.464796][T16243] [ 520.464796][T16243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.464796][T16243] [ 520.606731][T16280] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3736'. [ 520.658703][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3738'. [ 520.699240][ T6748] [ 520.699240][ T6748] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.699240][ T6748] [ 520.787337][ T6748] [ 520.787337][ T6748] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.787337][ T6748] [ 521.093407][ T5131] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 521.324649][ T5131] usb 1-1: Using ep0 maxpacket: 8 [ 521.350999][ T5131] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.388160][ T5131] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 521.415902][ T5131] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 521.476391][ T5131] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 521.518068][T16308] loop1: detected capacity change from 0 to 1024 [ 521.528834][ T5131] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 521.563397][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.589133][T16308] hfsplus: unable to parse mount options [ 521.589645][ T5131] hub 1-1:1.0: bad descriptor, ignoring hub [ 521.641119][ T5131] hub 1-1:1.0: probe with driver hub failed with error -5 [ 521.667171][ T5131] cdc_wdm 1-1:1.0: skipping garbage [ 521.704772][ T5131] cdc_wdm 1-1:1.0: skipping garbage [ 521.715342][T16305] loop1: detected capacity change from 0 to 512 [ 521.740986][ T5131] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 521.764493][ T5131] cdc_wdm 1-1:1.0: Unknown control protocol [ 521.857618][T16305] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 521.909345][T16305] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 521.992406][T16305] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.3739: bad orphan inode 16 [ 522.157069][T16305] ext4_test_bit(bit=15, block=4) = 0 [ 522.177410][T16305] EXT4-fs (loop1): 1 orphan inode deleted [ 522.255598][ T5167] usb 1-1: USB disconnect, device number 42 [ 522.277598][T16305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.429573][T16046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 522.468576][T16046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 522.500134][T16046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 522.530576][T16046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 522.820090][T16046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.907746][T16046] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.971171][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.978496][T11441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.047479][T16339] netlink: 'syz.4.3755': attribute type 10 has an invalid length. [ 523.066093][T16339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3755'. [ 523.134220][T16339] bridge0: port 3(bond0) entered blocking state [ 523.143504][T16339] bridge0: port 3(bond0) entered disabled state [ 523.166499][T16339] bond0: entered allmulticast mode [ 523.171827][T16339] bond_slave_0: entered allmulticast mode [ 523.214893][T16339] bond_slave_1: entered allmulticast mode [ 523.229049][T16339] bridge0: entered allmulticast mode [ 523.250189][T16339] bond0: left allmulticast mode [ 523.262730][T16339] bond_slave_0: left allmulticast mode [ 523.272566][T16339] bond_slave_1: left allmulticast mode [ 523.281802][T16339] bridge0: left allmulticast mode [ 523.293974][T16339] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 523.354900][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.362163][T11441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.559545][ T6748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.638145][T16348] xfrm0: entered promiscuous mode [ 523.656245][T16348] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 523.718535][T16347] 9pnet_fd: Insufficient options for proto=fd [ 524.081216][T16365] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.3763'. [ 524.132293][T16365] netlink: zone id is out of range [ 524.150644][T16046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.170995][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3763'. [ 524.218020][T16365] netlink: zone id is out of range [ 524.245452][T16365] netlink: zone id is out of range [ 524.254587][T16365] netlink: zone id is out of range [ 524.288303][T16365] netlink: zone id is out of range [ 524.300819][T16365] netlink: zone id is out of range [ 524.318029][T16365] netlink: zone id is out of range [ 524.328265][T16046] veth0_vlan: entered promiscuous mode [ 524.337578][T16365] netlink: zone id is out of range [ 524.342965][T16365] netlink: zone id is out of range [ 524.381074][T16365] netlink: zone id is out of range [ 524.381450][T16046] veth1_vlan: entered promiscuous mode [ 524.405650][T16365] netlink: zone id is out of range [ 524.411815][T16365] netlink: zone id is out of range [ 524.474766][T16365] netlink: zone id is out of range [ 524.493699][T16365] netlink: zone id is out of range [ 524.498898][T16365] netlink: zone id is out of range [ 524.526296][T16046] veth0_macvtap: entered promiscuous mode [ 524.557992][T16046] veth1_macvtap: entered promiscuous mode [ 524.655050][T16046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.701615][T16046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.724743][T16046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.759764][T16046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.790639][T16046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.817538][T16046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.830577][T16046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.852058][T16046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.871642][T16046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.903633][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3768'. [ 524.919587][T16046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.942556][T16046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.971565][T16046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.002862][T16046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.038705][T16046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.080246][T16046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.097379][T16046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.119388][T16046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.164160][T16046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.242345][T16046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.303229][T16046] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.323408][T16046] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.332168][T16046] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.670488][T16419] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.3778'. [ 525.730740][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.743298][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'. [ 525.770095][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.860670][ T2841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.897065][ T2841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.362665][T16447] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.3786'. [ 526.421986][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3786'. [ 527.260689][T16461] 9pnet_fd: Insufficient options for proto=fd [ 527.732687][T16477] netlink: 'syz.0.3796': attribute type 10 has an invalid length. [ 528.120708][T16434] loop1: detected capacity change from 0 to 32768 [ 528.459770][T16434] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 528.475705][T16434] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 528.538427][T16434] bcachefs (loop1): alloc_read... done [ 528.546774][T16434] bcachefs (loop1): stripes_read... done [ 528.552536][T16434] bcachefs (loop1): snapshots_read... done [ 528.577653][T16434] bcachefs (loop1): journal_replay... done [ 528.633728][T16434] bcachefs (loop1): resume_logged_ops... done [ 528.640607][T16434] bcachefs (loop1): going read-write [ 528.661701][T16513] loop4: detected capacity change from 0 to 512 [ 528.698819][T16434] bcachefs (loop1): done starting filesystem [ 528.742586][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 528.742607][ T29] audit: type=1800 audit(1719283259.191:141): pid=16434 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.3782" name="file1" dev="loop1" ino=4101 res=0 errno=0 [ 528.846914][T16513] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3804: invalid indirect mapped block 4294967295 (level 1) [ 528.962156][T16513] EXT4-fs (loop4): Remounting filesystem read-only [ 528.974405][T16513] EXT4-fs (loop4): 2 truncates cleaned up [ 528.992547][ T6748] bcachefs (loop1): shutting down [ 529.000005][ T6748] bcachefs (loop1): going read-only [ 529.008927][ T6748] bcachefs (loop1): finished waiting for writes to stop [ 529.018709][T16513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.068391][ T6748] bcachefs (loop1): flushing journal and stopping allocators, journal seq 9 [ 529.119247][T16522] 9pnet_fd: Insufficient options for proto=fd [ 529.126026][ T6748] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 529.158951][T14519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.176313][ T6748] bcachefs (loop1): shutdown complete, journal seq 11 [ 529.189088][ T6748] bcachefs (loop1): marking filesystem clean [ 529.268133][ T6748] bcachefs (loop1): shutdown complete [ 533.418233][T16529] netlink: 'syz.4.3809': attribute type 10 has an invalid length. [ 533.443411][T16542] netlink: 'syz.2.3814': attribute type 10 has an invalid length. [ 533.530075][T16542] batman_adv: batadv0: Adding interface: team0 [ 533.608827][T16542] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.659531][T16554] loop3: detected capacity change from 0 to 512 [ 533.682220][T16542] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 533.754140][T16557] trusted_key: syz.0.3815 sent an empty control message without MSG_MORE. [ 533.798596][T16554] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3818: invalid indirect mapped block 4294967295 (level 1) [ 533.901469][T16554] EXT4-fs (loop3): Remounting filesystem read-only [ 533.915644][T16554] EXT4-fs (loop3): 2 truncates cleaned up [ 533.922751][T16554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.014036][T16568] process 'syz.0.3821' launched './file1' with NULL argv: empty string added [ 534.026897][T16570] tipc: Started in network mode [ 534.063535][T16570] tipc: Node identity ac1414, cluster identity 4711 [ 534.081830][T16570] tipc: New replicast peer: 0.0.0.0 [ 534.101481][T16570] tipc: Enabled bearer , priority 10 [ 534.169338][T14578] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.475899][T16584] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.3829'. [ 534.509811][T16584] net_ratelimit: 363 callbacks suppressed [ 534.509833][T16584] netlink: zone id is out of range [ 534.528851][T16584] netlink: zone id is out of range [ 534.564855][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3829'. [ 534.622599][T16584] netlink: zone id is out of range [ 534.639099][T16584] netlink: zone id is out of range [ 534.656599][T16584] netlink: zone id is out of range [ 534.706682][T16584] netlink: zone id is out of range [ 534.717108][T16584] netlink: zone id is out of range [ 534.733383][T16584] netlink: zone id is out of range [ 534.742705][T16584] netlink: zone id is out of range [ 534.757010][T16584] netlink: zone id is out of range [ 534.804069][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 534.851356][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 535.213407][ T8] tipc: Node number set to 2886996992 [ 535.284314][T16629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3843'. [ 535.440968][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3847'. [ 535.497100][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3847'. [ 535.984227][ T29] audit: type=1326 audit(1719283266.441:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16668 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 536.065424][ T29] audit: type=1326 audit(1719283266.441:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16668 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 536.155940][ T29] audit: type=1326 audit(1719283266.441:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16668 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 536.186321][ T29] audit: type=1326 audit(1719283266.441:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16668 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 536.274982][ T29] audit: type=1326 audit(1719283266.441:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16668 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 536.309032][T16676] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3861'. [ 536.309453][ T29] audit: type=1326 audit(1719283266.451:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16668 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b2dd75d39 code=0x7ffc0000 [ 536.380331][T16678] xt_TPROXY: Can be used only with -p tcp or -p udp [ 540.223832][ T29] audit: type=1804 audit(1719283270.671:148): pid=16716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.3875" name="/root/syzkaller.1hhaI5/129/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 540.302074][T16722] loop1: detected capacity change from 0 to 1024 [ 540.997296][T16740] 9pnet_fd: Insufficient options for proto=fd [ 544.260007][ T29] audit: type=1804 audit(1719283274.711:149): pid=16763 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3892" name="/root/syzkaller.zOOGEy/145/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 544.713329][T16787] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3904'. [ 545.090895][T16810] netlink: 'syz.2.3916': attribute type 10 has an invalid length. [ 545.160120][T16810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3916'. [ 545.233546][T16810] bond_slave_1: entered promiscuous mode [ 545.254773][T16810] bond_slave_1: entered allmulticast mode [ 545.302826][T16810] bond0: (slave bond_slave_1): Releasing backup interface [ 545.319232][T16810] bridge0: port 3(bond_slave_1) entered blocking state [ 545.332470][T16810] bridge0: port 3(bond_slave_1) entered disabled state [ 546.039814][ T2894] tipc: Subscription rejected, illegal request [ 546.082509][T16819] tipc: Enabling of bearer rejected, failed to enable media [ 546.204477][T16826] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.3923'. [ 546.251089][T16826] net_ratelimit: 116 callbacks suppressed [ 546.251105][T16826] netlink: zone id is out of range [ 546.268646][T16826] netlink: zone id is out of range [ 546.277578][T16826] netlink: zone id is out of range [ 546.287624][T16826] netlink: zone id is out of range [ 546.322844][T16826] netlink: zone id is out of range [ 546.372011][T16826] netlink: zone id is out of range [ 546.404641][T16826] netlink: zone id is out of range [ 546.410258][T16826] netlink: zone id is out of range [ 546.472709][T16826] netlink: zone id is out of range [ 546.503789][T16842] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.3930'. [ 546.517745][T16826] netlink: zone id is out of range [ 546.560870][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3930'. [ 546.573636][T16847] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3932'. [ 546.798467][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3937'. [ 547.335800][T16880] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.3948'. [ 547.392527][T16880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3948'. [ 547.715796][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3956'. [ 547.952689][T16917] tipc: Enabling of bearer rejected, failed to enable media [ 548.972108][T16959] vlan3: entered promiscuous mode [ 549.127183][T16964] xfrm0: entered promiscuous mode [ 549.156448][T16964] vlan3: entered promiscuous mode [ 549.178681][T16964] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 549.255684][T16971] loop3: detected capacity change from 0 to 64 [ 549.734741][T16993] __nla_validate_parse: 6 callbacks suppressed [ 549.734762][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3998'. [ 550.809104][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'. [ 551.939260][T17051] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4021'. [ 551.979774][T17051] xt_TPROXY: Can be used only with -p tcp or -p udp [ 552.196957][T17055] xfrm0: entered promiscuous mode [ 552.220662][T17055] vlan3: entered promiscuous mode [ 552.228053][T17055] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 552.233586][T17059] loop2: detected capacity change from 0 to 64 [ 552.443509][ T5129] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 552.503602][T17064] netlink: 'syz.1.4026': attribute type 10 has an invalid length. [ 552.653000][ T5129] usb 1-1: too many configurations: 119, using maximum allowed: 8 [ 552.675964][ T5129] usb 1-1: config index 0 descriptor too short (expected 65299, got 72) [ 552.703577][ T29] audit: type=1804 audit(1719283283.151:150): pid=17068 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.4028" name="/root/syzkaller.MSQI1t/745/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 552.724572][ T5129] usb 1-1: config index 1 descriptor too short (expected 65299, got 72) [ 552.756413][ T5129] usb 1-1: config index 2 descriptor too short (expected 65299, got 72) [ 552.787480][ T5129] usb 1-1: config index 3 descriptor too short (expected 65299, got 72) [ 552.829788][ T5129] usb 1-1: config index 4 descriptor too short (expected 65299, got 72) [ 552.873939][ T5129] usb 1-1: config index 5 descriptor too short (expected 65299, got 72) [ 552.894970][ T5129] usb 1-1: config index 6 descriptor too short (expected 65299, got 72) [ 552.914811][ T5129] usb 1-1: config index 7 descriptor too short (expected 65299, got 72) [ 552.944022][ T5129] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 552.964982][ T5129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.983391][ T5129] usb 1-1: Product: syz [ 552.991374][ T5129] usb 1-1: Manufacturer: syz [ 553.004730][ T5129] usb 1-1: SerialNumber: syz [ 553.049742][ T5129] hub 1-1:1.0: bad descriptor, ignoring hub [ 553.066434][ T5129] hub 1-1:1.0: probe with driver hub failed with error -5 [ 553.089029][ T5129] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 553.141257][ T5167] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 554.203600][ T5167] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 554.242010][ T5167] ath9k_htc: Failed to initialize the device [ 554.298611][ T5167] usb 1-1: ath9k_htc: USB layer deinitialized [ 554.584254][ T29] audit: type=1804 audit(1719283285.031:151): pid=17092 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.4039" name="/root/syzkaller.1hhaI5/158/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 554.624864][T17091] netlink: 'syz.1.4038': attribute type 10 has an invalid length. [ 554.670337][ T5173] usb 1-1: USB disconnect, device number 43 [ 554.982481][T17101] loop0: detected capacity change from 0 to 64 [ 555.144879][T17104] ubi0: attaching mtd0 [ 555.158399][T17104] ubi0: scanning is finished [ 555.175894][T17104] ubi0: empty MTD device detected [ 555.312269][T17104] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 555.331197][T17104] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 555.345135][T17104] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 555.360895][T17104] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 555.377706][T17104] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 555.393317][T17104] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 555.414438][T17104] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4041725663 [ 555.438876][T17104] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 555.470142][T17107] ubi0: background thread "ubi_bgt0d" started, PID 17107 [ 556.143710][T17115] loop1: detected capacity change from 0 to 1024 [ 556.377508][T17115] hfsplus: invalid attributes max_key_len 768 [ 556.384916][T17115] hfsplus: failed to load attributes file [ 556.945939][ T29] audit: type=1804 audit(1719283287.401:152): pid=17119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.4050" name="/root/syzkaller.MSQI1t/754/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 557.079579][T17106] loop0: detected capacity change from 0 to 32768 [ 557.117721][T17106] btrfs: Deprecated parameter 'usebackuproot' [ 557.154917][T17106] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 557.201897][T17106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4045 (17106) [ 557.279037][T17106] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 557.293583][T17106] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 557.328445][T17106] BTRFS info (device loop0): using free-space-tree [ 557.480640][ T1048] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 557.492525][T17147] loop3: detected capacity change from 0 to 64 [ 557.565369][T17106] BTRFS error (device loop0): failed to load root extent [ 557.603311][T17106] BTRFS warning (device loop0): try to load backup roots slot 1 [ 557.629463][T15394] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 557.668331][T17106] BTRFS warning (device loop0): couldn't read tree root [ 557.688086][T17106] BTRFS warning (device loop0): try to load backup roots slot 2 [ 557.715210][ T2841] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 557.746312][T17106] BTRFS warning (device loop0): couldn't read tree root [ 557.780027][T17106] BTRFS warning (device loop0): try to load backup roots slot 3 [ 557.848703][T17106] BTRFS info (device loop0): rebuilding free space tree [ 557.918422][T17106] BTRFS info (device loop0): checking UUID tree [ 558.058392][T17159] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4059'. [ 558.105165][T17159] xt_TPROXY: Can be used only with -p tcp or -p udp [ 558.124455][T13611] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 558.689846][T17172] xfrm0: entered promiscuous mode [ 558.735390][T17172] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 559.119533][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4070'. [ 559.123875][T17192] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.4073'. [ 559.178561][ T29] audit: type=1804 audit(1719283289.631:153): pid=17196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.4074" name="/root/syzkaller.LUeu1f/271/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 559.205341][T17192] net_ratelimit: 746 callbacks suppressed [ 559.205363][T17192] netlink: zone id is out of range [ 559.229960][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4073'. [ 559.249378][T17192] netlink: zone id is out of range [ 559.287681][T17192] netlink: zone id is out of range [ 559.329735][T17192] netlink: zone id is out of range [ 559.333894][T17199] netlink: 'syz.1.4075': attribute type 10 has an invalid length. [ 559.354764][T17192] netlink: zone id is out of range [ 559.365986][T17192] netlink: zone id is out of range [ 559.386405][T17192] netlink: zone id is out of range [ 559.406583][T17192] netlink: zone id is out of range [ 559.415742][T17192] netlink: zone id is out of range [ 559.420551][T17199] team0: left allmulticast mode [ 559.421183][T17192] netlink: zone id is out of range [ 559.449368][T17199] team_slave_0: left allmulticast mode [ 559.471680][T17199] team_slave_1: left allmulticast mode [ 559.489558][T17199] team0: left promiscuous mode [ 559.500637][T17199] team_slave_0: left promiscuous mode [ 559.516069][T17199] team_slave_1: left promiscuous mode [ 559.522093][T17199] bridge0: port 3(team0) entered disabled state [ 559.568049][T17199] batman_adv: batadv0: Adding interface: team0 [ 559.582255][T17199] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.611821][T17199] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 559.628760][T17206] netlink: 'syz.1.4075': attribute type 10 has an invalid length. [ 559.637754][T17206] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4075'. [ 559.648528][T17206] team0: entered promiscuous mode [ 559.657306][T17206] team_slave_0: entered promiscuous mode [ 559.663812][T17206] team_slave_1: entered promiscuous mode [ 559.672221][T17206] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.685293][T17206] batman_adv: batadv0: Interface activated: team0 [ 559.699203][T17206] batman_adv: batadv0: Interface deactivated: team0 [ 559.708603][T17206] batman_adv: batadv0: Removing interface: team0 [ 559.721150][T17206] bridge0: port 3(team0) entered blocking state [ 559.739351][T17206] bridge0: port 3(team0) entered disabled state [ 559.748320][T17206] team0: entered allmulticast mode [ 559.758823][T17206] team_slave_0: entered allmulticast mode [ 559.771245][T17206] team_slave_1: entered allmulticast mode [ 559.953673][ T5173] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 560.022606][T17229] team_slave_0: entered promiscuous mode [ 560.029058][T17229] team_slave_1: entered promiscuous mode [ 560.052379][T17229] vlan3: entered promiscuous mode [ 560.065447][T17229] team0: entered promiscuous mode [ 560.089284][T17229] team0: left promiscuous mode [ 560.101667][T17229] team_slave_0: left promiscuous mode [ 560.108139][T17229] team_slave_1: left promiscuous mode [ 560.165087][ T5173] usb 3-1: too many configurations: 248, using maximum allowed: 8 [ 560.203391][ T5173] usb 3-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 560.220489][ T5173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 560.232816][ T5173] usb 3-1: Product: syz [ 560.239632][ T5173] usb 3-1: Manufacturer: syz [ 560.248148][ T5173] usb 3-1: SerialNumber: syz [ 560.250153][T17231] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4087'. [ 560.255600][ T5173] usb 3-1: config 0 descriptor?? [ 560.288053][ T5173] cdc_acm 3-1:0.0: Zero length descriptor references [ 560.291499][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4087'. [ 560.302398][ T5173] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 560.543440][T17166] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 560.571850][ T5173] usb 3-1: USB disconnect, device number 36 [ 560.928177][T17166] usb 1-1: too many configurations: 119, using maximum allowed: 8 [ 560.944399][T17166] usb 1-1: config index 0 descriptor too short (expected 65299, got 72) [ 560.954641][T17166] usb 1-1: config index 1 descriptor too short (expected 65299, got 72) [ 560.959902][T17256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4098'. [ 560.964637][T17166] usb 1-1: config index 2 descriptor too short (expected 65299, got 72) [ 560.987519][T17166] usb 1-1: config index 3 descriptor too short (expected 65299, got 72) [ 561.008846][T17259] loop3: detected capacity change from 0 to 1024 [ 561.019343][T17259] hfsplus: invalid attributes max_key_len 768 [ 561.025845][T17259] hfsplus: failed to load attributes file [ 561.035879][T17166] usb 1-1: config index 4 descriptor too short (expected 65299, got 72) [ 561.048654][T17166] usb 1-1: config index 5 descriptor too short (expected 65299, got 72) [ 561.058977][T17166] usb 1-1: config index 6 descriptor too short (expected 65299, got 72) [ 561.073994][T17166] usb 1-1: config index 7 descriptor too short (expected 65299, got 72) [ 561.090285][ T5096] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 561.115520][T17166] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 561.127381][T17166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.142576][T17166] usb 1-1: Product: syz [ 561.156156][T17166] usb 1-1: Manufacturer: syz [ 561.160826][T17166] usb 1-1: SerialNumber: syz [ 561.192870][T17166] hub 1-1:1.0: bad descriptor, ignoring hub [ 561.213585][T17166] hub 1-1:1.0: probe with driver hub failed with error -5 [ 561.241354][T17166] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 561.274112][T11445] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 561.574272][T17276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4107'. [ 562.380727][T11445] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 562.402859][T11445] ath9k_htc: Failed to initialize the device [ 562.477465][T11445] usb 1-1: ath9k_htc: USB layer deinitialized [ 562.839703][T17332] netlink: 544 bytes leftover after parsing attributes in process `syz.2.4132'. [ 562.871925][ T29] audit: type=1326 audit(1719283293.321:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17334 comm="syz.1.4133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46d9375d39 code=0x0 [ 562.899564][ T5131] usb 1-1: USB disconnect, device number 44 [ 563.253314][ T5173] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 563.464841][ T5173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.495462][T17359] netlink: 544 bytes leftover after parsing attributes in process `syz.2.4144'. [ 563.499016][ T5173] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 563.565639][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.572209][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.580780][ T5173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.620389][ T5173] usb 2-1: config 0 descriptor?? [ 563.645421][ T5173] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 563.683105][ T5173] usb 2-1: No valid video chain found. [ 564.604464][T17411] netlink: 'syz.3.4165': attribute type 10 has an invalid length. [ 564.612703][T17411] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.783335][T17166] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 564.966445][T17166] usb 3-1: too many configurations: 119, using maximum allowed: 8 [ 564.998700][T17166] usb 3-1: config index 0 descriptor too short (expected 65299, got 72) [ 565.012972][T17166] usb 3-1: config index 1 descriptor too short (expected 65299, got 72) [ 565.031774][T17166] usb 3-1: config index 2 descriptor too short (expected 65299, got 72) [ 565.050947][T17166] usb 3-1: config index 3 descriptor too short (expected 65299, got 72) [ 565.073646][T17166] usb 3-1: config index 4 descriptor too short (expected 65299, got 72) [ 565.100192][T17166] usb 3-1: config index 5 descriptor too short (expected 65299, got 72) [ 565.110910][T17166] usb 3-1: config index 6 descriptor too short (expected 65299, got 72) [ 565.121626][T17166] usb 3-1: config index 7 descriptor too short (expected 65299, got 72) [ 565.135728][T17166] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 565.145630][T17166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.179972][T17166] usb 3-1: Product: syz [ 565.190074][T17166] usb 3-1: Manufacturer: syz [ 565.200810][T17166] usb 3-1: SerialNumber: syz [ 565.216126][T17166] hub 3-1:1.0: bad descriptor, ignoring hub [ 565.227681][T17166] hub 3-1:1.0: probe with driver hub failed with error -5 [ 565.242171][T17166] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 565.280417][ T5130] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 565.484868][T17431] loop3: detected capacity change from 0 to 1024 [ 565.498072][T17431] hfsplus: invalid attributes max_key_len 768 [ 565.504643][T17431] hfsplus: failed to load attributes file [ 565.608075][T17435] netlink: 'syz.0.4176': attribute type 10 has an invalid length. [ 565.878134][T17166] usb 2-1: USB disconnect, device number 33 [ 566.365285][ T5130] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 566.433963][ T5130] ath9k_htc: Failed to initialize the device [ 566.497607][ T5130] usb 3-1: ath9k_htc: USB layer deinitialized [ 566.635117][T17467] vlan4: entered allmulticast mode [ 566.640308][T17467] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 566.681221][T17441] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4178'. [ 566.756744][T17441] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4178'. [ 566.896991][ T5173] usb 3-1: USB disconnect, device number 37 [ 567.273057][T17486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4200'. [ 567.421468][T17489] : entered promiscuous mode [ 567.770389][ T29] audit: type=1804 audit(1719283298.221:155): pid=17513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.4208" name="/root/syzkaller.MSQI1t/786/file0" dev="sda1" ino=1941 res=1 errno=0 [ 567.806580][T17515] netlink: 'syz.3.4209': attribute type 10 has an invalid length. [ 567.855534][T17515] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4209'. [ 568.433523][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 568.493540][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 568.654733][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4217'. [ 568.761043][T17544] loop0: detected capacity change from 0 to 1024 [ 568.805437][T17544] hfsplus: invalid attributes max_key_len 768 [ 568.811982][T17544] hfsplus: failed to load attributes file [ 569.152886][ T29] audit: type=1804 audit(1719283299.601:156): pid=17551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.4222" name="/root/syzkaller.MSQI1t/789/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 569.522711][T17560] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4225'. [ 569.542787][ T5132] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 569.578283][T17560] net_ratelimit: 242 callbacks suppressed [ 569.578305][T17560] netlink: zone id is out of range [ 569.590482][T17529] loop3: detected capacity change from 0 to 32768 [ 569.614067][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4225'. [ 569.644352][T17560] netlink: zone id is out of range [ 569.649528][T17560] netlink: zone id is out of range [ 569.665528][T17560] netlink: zone id is out of range [ 569.691742][T17560] netlink: zone id is out of range [ 569.704335][T17560] netlink: zone id is out of range [ 569.740826][T17560] netlink: zone id is out of range [ 569.754636][ T5132] usb 3-1: too many configurations: 119, using maximum allowed: 8 [ 569.763797][T17560] netlink: zone id is out of range [ 569.801245][T17560] netlink: zone id is out of range [ 569.823998][ T5132] usb 3-1: config index 0 descriptor too short (expected 65299, got 72) [ 569.835451][T17560] netlink: zone id is out of range [ 569.835778][ T5132] usb 3-1: config index 1 descriptor too short (expected 65299, got 72) [ 569.852223][ T5132] usb 3-1: config index 2 descriptor too short (expected 65299, got 72) [ 569.871428][ T5132] usb 3-1: config index 3 descriptor too short (expected 65299, got 72) [ 569.885394][ T5132] usb 3-1: config index 4 descriptor too short (expected 65299, got 72) [ 569.901039][ T5132] usb 3-1: config index 5 descriptor too short (expected 65299, got 72) [ 569.916947][ T5132] usb 3-1: config index 6 descriptor too short (expected 65299, got 72) [ 569.951115][ T5132] usb 3-1: config index 7 descriptor too short (expected 65299, got 72) [ 569.962445][ T5132] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 569.975295][T17529] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 570.003258][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.011944][ T5132] usb 3-1: Product: syz [ 570.030685][T17529] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 570.038907][ T5132] usb 3-1: Manufacturer: syz [ 570.051350][ T5132] usb 3-1: SerialNumber: syz [ 570.064310][ T5132] hub 3-1:1.0: bad descriptor, ignoring hub [ 570.074960][ T5132] hub 3-1:1.0: probe with driver hub failed with error -5 [ 570.112029][ T5132] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 570.165959][ T5131] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 570.194132][T17529] bcachefs (loop3): alloc_read... done [ 570.206829][T17529] bcachefs (loop3): stripes_read... done [ 570.212799][T17529] bcachefs (loop3): snapshots_read... done [ 570.231084][T17529] bcachefs (loop3): journal_replay... done [ 570.243633][T17529] bcachefs (loop3): resume_logged_ops... done [ 570.295554][T17529] bcachefs (loop3): going read-write [ 570.473441][T17529] bcachefs (loop3): done starting filesystem [ 570.636378][T17596] loop0: detected capacity change from 0 to 1024 [ 570.648822][T17596] hfsplus: invalid attributes max_key_len 768 [ 570.655423][T17596] hfsplus: failed to load attributes file [ 570.941110][T17529] syz.3.4213 (17529) used greatest stack depth: 14424 bytes left [ 570.942563][ T5096] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 570.991182][T14578] bcachefs (loop3): shutting down [ 571.007169][T14578] bcachefs (loop3): going read-only [ 571.023094][T14578] bcachefs (loop3): finished waiting for writes to stop [ 571.036286][T14578] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 571.081659][T14578] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 571.118996][T14578] bcachefs (loop3): shutdown complete, journal seq 14 [ 571.149430][T14578] bcachefs (loop3): marking filesystem clean [ 571.256710][ T5131] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 571.307016][ T5131] ath9k_htc: Failed to initialize the device [ 571.334932][T14578] bcachefs (loop3): shutdown complete [ 571.376866][ T5131] usb 3-1: ath9k_htc: USB layer deinitialized [ 571.414032][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4240'. [ 571.466563][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4240'. [ 571.608982][T17608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4240'. [ 571.871438][T11441] usb 3-1: USB disconnect, device number 38 [ 571.873536][T11445] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 572.116280][T11445] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 572.145100][T11445] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.181753][T11445] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 572.224490][T11445] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.277456][T11445] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 572.280358][T17632] netlink: 'syz.2.4250': attribute type 10 has an invalid length. [ 572.295607][T11445] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 572.319077][ T29] audit: type=1804 audit(1719283302.771:157): pid=17630 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.4252" name="/root/syzkaller.MSQI1t/803/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 572.321011][T11445] usb 5-1: Product: syz [ 572.361429][T17632] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.369277][T17632] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.393405][T11445] usb 5-1: Manufacturer: syz [ 572.441599][T11445] cdc_wdm 5-1:1.0: skipping garbage [ 572.450960][T17632] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.458236][T17632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.458475][T11445] cdc_wdm 5-1:1.0: skipping garbage [ 572.465916][T17632] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.478296][T17632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.494215][T11445] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 572.538729][T17632] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 572.592496][T17641] loop3: detected capacity change from 0 to 64 [ 572.652351][T11445] usb 5-1: USB disconnect, device number 44 [ 572.764803][T17643] 9pnet_fd: Insufficient options for proto=fd [ 572.787298][ T5095] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 573.156229][T17667] netlink: 'syz.0.4264': attribute type 5 has an invalid length. [ 574.527390][T17703] loop2: detected capacity change from 0 to 1024 [ 574.917519][T15394] hfsplus: b-tree write err: -5, ino 4 [ 575.100634][ T29] audit: type=1804 audit(1719283305.551:158): pid=17729 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.4290" name="/root/syzkaller.zOOGEy/213/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 575.680040][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4299'. [ 575.888892][ T5091] Bluetooth: hci2: command 0x0406 tx timeout [ 575.941604][T17759] syzkaller0: entered promiscuous mode [ 575.955113][T17759] syzkaller0: entered allmulticast mode [ 575.973452][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 576.198533][T17751] loop3: detected capacity change from 0 to 32768 [ 576.375863][T17751] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 576.391853][T17751] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 576.459532][T17751] bcachefs (loop3): alloc_read... done [ 576.465290][T17751] bcachefs (loop3): stripes_read... done [ 576.473052][T17751] bcachefs (loop3): snapshots_read... done [ 576.521261][T17751] bcachefs (loop3): journal_replay... done [ 576.532744][T17751] bcachefs (loop3): resume_logged_ops... done [ 576.544058][T17751] bcachefs (loop3): going read-write [ 576.560049][T17751] bcachefs (loop3): done starting filesystem [ 576.766431][T14578] bcachefs (loop3): shutting down [ 576.772117][T14578] bcachefs (loop3): going read-only [ 576.778928][T14578] bcachefs (loop3): finished waiting for writes to stop [ 576.810569][T14578] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 576.869176][T14578] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15 [ 576.882004][T14578] bcachefs (loop3): shutdown complete, journal seq 16 [ 576.890741][T14578] bcachefs (loop3): marking filesystem clean [ 576.967109][T14578] bcachefs (loop3): shutdown complete [ 577.842534][T17808] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.4307'. [ 577.855307][T17808] net_ratelimit: 116 callbacks suppressed [ 577.855331][T17808] netlink: zone id is out of range [ 577.867630][T17808] netlink: zone id is out of range [ 577.875116][T17808] netlink: zone id is out of range [ 577.880721][T17808] netlink: zone id is out of range [ 577.886151][T17808] netlink: zone id is out of range [ 577.892087][T17808] netlink: zone id is out of range [ 577.907234][T17808] netlink: zone id is out of range [ 577.928724][T17808] netlink: zone id is out of range [ 577.937087][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4307'. [ 577.943664][T17808] netlink: zone id is out of range [ 577.965173][T17808] netlink: zone id is out of range [ 578.409711][T17821] 9pnet_fd: Insufficient options for proto=fd [ 578.869535][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4327'. [ 578.996145][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4327'. [ 580.688849][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4327'. [ 581.171515][T17856] loop0: detected capacity change from 0 to 64 [ 581.453510][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'. [ 581.490579][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'. [ 581.561529][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4340'. [ 581.956761][T17892] loop4: detected capacity change from 0 to 64 [ 583.302868][T17941] loop4: detected capacity change from 0 to 1024 [ 583.337186][T17941] hfsplus: invalid attributes max_key_len 768 [ 583.368603][T17941] hfsplus: failed to load attributes file [ 583.476531][T17944] loop0: detected capacity change from 0 to 64 [ 583.826418][T17956] netlink: 'syz.1.4378': attribute type 10 has an invalid length. [ 583.890830][T17958] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.4379'. [ 583.933496][T17958] net_ratelimit: 116 callbacks suppressed [ 583.933517][T17958] netlink: zone id is out of range [ 583.976562][T17958] netlink: zone id is out of range [ 583.981746][T17958] netlink: zone id is out of range [ 584.032003][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4379'. [ 584.061589][T17958] netlink: zone id is out of range [ 584.085203][T17958] netlink: zone id is out of range [ 584.108114][T17958] netlink: zone id is out of range [ 584.126946][T17958] netlink: zone id is out of range [ 584.141814][T17958] netlink: zone id is out of range [ 584.173433][T17958] netlink: zone id is out of range [ 584.182797][T17958] netlink: zone id is out of range [ 584.623282][T17986] netlink: 'syz.3.4393': attribute type 10 has an invalid length. [ 584.783461][T11445] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 584.810128][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4397'. [ 584.979893][T18001] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.4400'. [ 584.990737][T11445] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.007183][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4400'. [ 585.042188][T11445] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 585.089696][T11445] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.105695][T11445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.146214][T11445] usb 1-1: Product: syz [ 585.150448][T11445] usb 1-1: Manufacturer: syz [ 585.170182][T11445] usb 1-1: SerialNumber: syz [ 585.405101][T17987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 585.932735][T17987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.958045][T17987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.099110][T18020] netlink: 'syz.4.4407': attribute type 10 has an invalid length. [ 586.461650][T18036] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.4414'. [ 586.493822][T17987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 586.496722][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'. [ 586.742182][T11445] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 586.754241][T11445] cdc_ncm 1-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 586.778235][T11445] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 586.958354][T11445] cdc_ncm 1-1:1.0: setting tx_max = 28 [ 587.024800][T11445] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 587.062194][T11445] usb 1-1: USB disconnect, device number 45 [ 587.082588][T11445] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 587.263590][T18068] loop1: detected capacity change from 0 to 1024 [ 587.395982][ T1048] hfsplus: b-tree write err: -5, ino 4 [ 587.484564][T18074] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.4431'. [ 587.554406][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4431'. [ 587.593736][T17166] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 587.806208][T17166] usb 5-1: too many configurations: 119, using maximum allowed: 8 [ 587.826495][T17166] usb 5-1: config index 0 descriptor too short (expected 65299, got 72) [ 587.846667][T17166] usb 5-1: config index 1 descriptor too short (expected 65299, got 72) [ 587.867014][T17166] usb 5-1: config index 2 descriptor too short (expected 65299, got 72) [ 587.880192][T17166] usb 5-1: config index 3 descriptor too short (expected 65299, got 72) [ 587.894081][T17166] usb 5-1: config index 4 descriptor too short (expected 65299, got 72) [ 587.983740][T17166] usb 5-1: config index 5 descriptor too short (expected 65299, got 72) [ 588.018727][T17166] usb 5-1: config index 6 descriptor too short (expected 65299, got 72) [ 588.055820][T17166] usb 5-1: config index 7 descriptor too short (expected 65299, got 72) [ 588.085360][T17166] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 588.104416][T17166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.134382][T17166] usb 5-1: Product: syz [ 588.148921][T17166] usb 5-1: Manufacturer: syz [ 588.169830][T17166] usb 5-1: SerialNumber: syz [ 588.204177][T17166] hub 5-1:1.0: bad descriptor, ignoring hub [ 588.223373][T17166] hub 5-1:1.0: probe with driver hub failed with error -5 [ 588.238740][T17166] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 588.278061][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 588.510584][T18111] loop0: detected capacity change from 0 to 64 [ 589.299596][T18136] loop3: detected capacity change from 0 to 1024 [ 589.329744][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4462'. [ 589.371165][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4462'. [ 589.404541][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 589.441339][ T9] ath9k_htc: Failed to initialize the device [ 589.463024][T18136] hfsplus: invalid attributes max_key_len 768 [ 589.496274][T18146] loop0: detected capacity change from 0 to 64 [ 589.510085][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 589.517924][T18136] hfsplus: failed to load attributes file [ 589.538917][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4462'. [ 590.684881][T11441] usb 5-1: USB disconnect, device number 45 [ 591.085829][T18179] loop1: detected capacity change from 0 to 64 [ 591.176850][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4477'. [ 591.264106][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4477'. [ 592.048092][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4477'. [ 592.726865][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4493'. [ 593.979671][T18251] loop3: detected capacity change from 0 to 32768 [ 594.134437][T17694] Bluetooth: hci2: command 0x0406 tx timeout [ 594.141760][T18251] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 594.169793][T18251] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 594.241174][T18251] bcachefs (loop3): alloc_read... done [ 594.249254][T18251] bcachefs (loop3): stripes_read... done [ 594.256794][T18251] bcachefs (loop3): snapshots_read... done [ 594.266445][T18251] bcachefs (loop3): journal_replay... done [ 594.272363][T18251] bcachefs (loop3): resume_logged_ops... done [ 594.280129][T18251] bcachefs (loop3): going read-write [ 594.296269][T18251] bcachefs (loop3): done starting filesystem [ 594.535183][T14578] bcachefs (loop3): shutting down [ 594.540295][T14578] bcachefs (loop3): going read-only [ 594.553305][T14578] bcachefs (loop3): finished waiting for writes to stop [ 594.561017][T14578] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 594.631527][T14578] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 594.659098][T14578] bcachefs (loop3): shutdown complete, journal seq 15 [ 594.669390][T14578] bcachefs (loop3): marking filesystem clean [ 594.702282][T14578] bcachefs (loop3): shutdown complete [ 594.855984][ T5086] Bluetooth: hci4: command tx timeout [ 596.401466][T18284] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.4515'. [ 596.418427][T18284] net_ratelimit: 494 callbacks suppressed [ 596.418452][T18284] netlink: zone id is out of range [ 596.429757][T18284] netlink: zone id is out of range [ 596.436830][T18284] netlink: zone id is out of range [ 596.441998][T18284] netlink: zone id is out of range [ 596.448248][T18284] netlink: zone id is out of range [ 596.451571][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4515'. [ 596.454732][T18284] netlink: zone id is out of range [ 596.468301][T18284] netlink: zone id is out of range [ 596.474143][T18284] netlink: zone id is out of range [ 596.479307][T18284] netlink: zone id is out of range [ 596.486589][T18284] netlink: zone id is out of range [ 597.143549][T18227] netlink: 'syz.1.4490': attribute type 10 has an invalid length. [ 598.177555][T18318] vlan3: entered promiscuous mode [ 598.207654][T18318] bond0: entered promiscuous mode [ 598.212878][T18318] bond_slave_0: entered promiscuous mode [ 598.274378][T18318] bond_slave_1: entered promiscuous mode [ 598.280446][T18318] bridge0: entered promiscuous mode [ 598.305450][T18318] vlan2: entered promiscuous mode [ 598.325004][T18318] bond0: left promiscuous mode [ 598.330240][T18318] bond_slave_0: left promiscuous mode [ 598.337073][T18318] bond_slave_1: left promiscuous mode [ 598.355894][T17694] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 598.378796][T17694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 598.381691][T18318] bridge0: left promiscuous mode [ 598.402072][T17694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 598.422162][T17694] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 598.430830][T17694] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 598.432633][T18318] vlan2: left promiscuous mode [ 598.443445][T17694] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.759071][ T1048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.831372][T18322] loop1: detected capacity change from 0 to 32768 [ 599.078686][T18322] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 599.123584][T18322] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 599.165193][T18322] bcachefs (loop1): alloc_read... done [ 599.178998][T18322] bcachefs (loop1): stripes_read... done [ 599.185549][T18322] bcachefs (loop1): snapshots_read... done [ 599.201111][T18322] bcachefs (loop1): journal_replay... done [ 599.207374][T18322] bcachefs (loop1): resume_logged_ops... done [ 599.216450][T18322] bcachefs (loop1): going read-write [ 599.227823][T18322] bcachefs (loop1): done starting filesystem [ 599.439722][T18322] syz.1.4533 (18322) used greatest stack depth: 14328 bytes left [ 599.482354][ T6748] bcachefs (loop1): shutting down [ 599.494386][ T6748] bcachefs (loop1): going read-only [ 599.499680][ T6748] bcachefs (loop1): finished waiting for writes to stop [ 599.520182][ T6748] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 599.587965][ T6748] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 599.618869][ T6748] bcachefs (loop1): shutdown complete, journal seq 15 [ 599.644181][ T6748] bcachefs (loop1): marking filesystem clean [ 599.711464][ T6748] bcachefs (loop1): shutdown complete [ 600.142326][T18363] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4544'. [ 600.226202][T18364] xt_TPROXY: Can be used only with -p tcp or -p udp [ 600.534613][T17694] Bluetooth: hci0: command tx timeout [ 602.613728][T17694] Bluetooth: hci0: command tx timeout [ 602.834048][ T1048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.848817][T18343] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4538'. [ 602.862477][T18343] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4538'. [ 602.994918][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4549'. [ 603.101744][ T1048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.366780][ T1048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.496010][T18397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4556'. [ 603.697430][T18406] net_ratelimit: 116 callbacks suppressed [ 603.697454][T18406] netlink: set zone limit has 8 unknown bytes [ 603.876664][T18333] chnl_net:caif_netlink_parms(): no params data found [ 603.970420][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4562'. [ 604.077911][ T1048] bridge_slave_1: left allmulticast mode [ 604.088294][ T1048] bridge_slave_1: left promiscuous mode [ 604.103527][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.123903][ T1048] bridge_slave_0: left allmulticast mode [ 604.130056][ T1048] bridge_slave_0: left promiscuous mode [ 604.137125][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.159852][ T1048] tipc: Resetting bearer [ 604.442120][ T1048] bond0 (unregistering): (slave vlan3): Releasing backup interface [ 604.452860][ T1048] vlan3 (unregistering): left promiscuous mode [ 604.596028][ T1048] tipc: Disabling bearer [ 604.633441][ T1048] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 604.641989][ T1048] bridge0 (unregistering): left promiscuous mode [ 604.703280][T17694] Bluetooth: hci0: command tx timeout [ 604.931167][ T1048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.940216][ T1048] bond_slave_0: left promiscuous mode [ 604.950690][ T1048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.959996][ T1048] bond_slave_1: left promiscuous mode [ 604.968759][ T1048] bond0 (unregistering): Released all slaves [ 605.041726][T18435] vlan3: entered promiscuous mode [ 605.049592][T18435] bond0: entered promiscuous mode [ 605.060425][T18435] bond_slave_0: entered promiscuous mode [ 605.066575][T18435] bond_slave_1: entered promiscuous mode [ 605.072697][T18435] bridge0: entered promiscuous mode [ 605.086153][T18435] vlan2: entered promiscuous mode [ 605.119470][T18435] bond0: left promiscuous mode [ 605.125612][T18435] bond_slave_0: left promiscuous mode [ 605.131488][T18435] bond_slave_1: left promiscuous mode [ 605.137955][T18435] bridge0: left promiscuous mode [ 605.143461][T18435] vlan2: left promiscuous mode [ 605.270433][ T1048] tipc: Left network mode [ 605.555069][T18333] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.574315][T18333] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.582485][T18333] bridge_slave_0: entered allmulticast mode [ 605.645334][T18333] bridge_slave_0: entered promiscuous mode [ 605.667527][T18447] netlink: 'syz.3.4572': attribute type 10 has an invalid length. [ 605.858827][T18333] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.880562][T18333] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.916839][T18333] bridge_slave_1: entered allmulticast mode [ 605.944964][T18333] bridge_slave_1: entered promiscuous mode [ 605.964650][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4579'. [ 606.232059][T18333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.261796][T18445] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4571'. [ 606.291603][T18445] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4571'. [ 606.382308][T18333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.549487][ T1048] hsr_slave_0: left promiscuous mode [ 606.571450][ T1048] hsr_slave_1: left promiscuous mode [ 606.587707][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.610742][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.636764][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.652324][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.736620][ T1048] veth1_macvtap: left promiscuous mode [ 606.743030][ T1048] veth0_macvtap: left promiscuous mode [ 606.756914][ T1048] veth1_vlan: left promiscuous mode [ 606.762319][ T1048] veth0_vlan: left promiscuous mode [ 606.773414][T17694] Bluetooth: hci0: command tx timeout [ 607.005950][T18511] loop2: detected capacity change from 0 to 64 [ 607.561823][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4596'. [ 607.791040][ T1048] team0 (unregistering): Port device team_slave_1 removed [ 607.857431][ T1048] team0 (unregistering): Port device team_slave_0 removed [ 608.605183][T18509] netlink: 'syz.1.4588': attribute type 10 has an invalid length. [ 608.677596][T18333] team0: Port device team_slave_0 added [ 608.716722][T18333] team0: Port device team_slave_1 added [ 608.916854][T18333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.932449][T18533] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4601'. [ 608.948857][T18333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.977847][T18539] loop3: detected capacity change from 0 to 64 [ 608.986564][T18533] netlink: zone id is out of range [ 609.003712][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4601'. [ 609.026238][T18533] netlink: zone id is out of range [ 609.031899][T18333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.043400][T18533] netlink: zone id is out of range [ 609.048561][T18533] netlink: zone id is out of range [ 609.060516][T18333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.076385][T18533] netlink: zone id is out of range [ 609.104483][T18533] netlink: zone id is out of range [ 609.114517][T18333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.154881][T18533] netlink: zone id is out of range [ 609.162770][T18533] netlink: zone id is out of range [ 609.168221][T18533] netlink: zone id is out of range [ 609.173765][T18533] netlink: zone id is out of range [ 609.214140][T18333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.494152][T18333] hsr_slave_0: entered promiscuous mode [ 609.507843][T18333] hsr_slave_1: entered promiscuous mode [ 609.524252][T18333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.531868][T18333] Cannot create hsr debugfs directory [ 609.593617][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4607'. [ 612.860360][T18556] netlink: 'syz.1.4608': attribute type 10 has an invalid length. [ 613.139969][T17694] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 613.343367][T18587] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4616'. [ 613.361014][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4616'. [ 613.745351][T18599] netlink: 'syz.4.4620': attribute type 10 has an invalid length. [ 614.989128][T18635] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4627'. [ 615.029737][T18635] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4627'. [ 615.716457][T18625] loop1: detected capacity change from 0 to 32768 [ 615.817164][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4636'. [ 616.545558][T18625] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 616.663606][T18625] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 616.671819][T18625] bcachefs (loop1): Version upgrade required: [ 616.671819][T18625] Version upgrade from 0.19: freespace to 1.7: mi_btree_bitmap incomplete [ 616.671819][T18625] Doing incompatible version upgrade from 0.19: freespace to 1.7: mi_btree_bitmap [ 616.671819][T18625] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_subvolume_structure,check_directory_structure,check_nlinks,delete_dead_inodes,set_fs_needs_rebalance [ 616.826397][T18333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 616.900794][T18333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 616.915234][T18625] bcachefs (loop1): alloc_read... done [ 616.922367][T18625] bcachefs (loop1): stripes_read... done [ 616.939484][T18333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 616.943397][T18625] bcachefs (loop1): snapshots_read... done [ 616.976939][T18625] bcachefs (loop1): check_allocations... [ 616.996299][T18333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 616.997672][T18625] [ 617.011179][T18625] ====================================================== [ 617.018222][T18625] WARNING: possible circular locking dependency detected [ 617.025254][T18625] 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 Not tainted [ 617.032375][T18625] ------------------------------------------------------ [ 617.039496][T18625] syz.1.4626/18625 is trying to acquire lock: [ 617.045596][T18625] ffff888074c80988 (&c->sb_lock){+.+.}-{3:3}, at: bch2_gc_mark_key+0xc6a/0x1010 [ 617.054694][T18625] [ 617.054694][T18625] but task is already holding lock: [ 617.062077][T18625] ffff888074c81a58 (&c->btree_root_lock){+.+.}-{3:3}, at: bch2_check_allocations+0x2e31/0xccc0 [ 617.072435][T18625] [ 617.072435][T18625] which lock already depends on the new lock. [ 617.072435][T18625] [ 617.082927][T18625] [ 617.082927][T18625] the existing dependency chain (in reverse order) is: [ 617.091948][T18625] [ 617.091948][T18625] -> #1 (&c->btree_root_lock){+.+.}-{3:3}: [ 617.101386][T18625] lock_acquire+0x1ed/0x550 [ 617.107561][T18625] __mutex_lock+0x136/0xd70 [ 617.112619][T18625] bch2_btree_roots_to_journal_entries+0xbb/0x980 [ 617.119590][T18625] bch2_fs_mark_clean+0x2cc/0x6d0 [ 617.125160][T18625] bch2_fs_read_only+0x1101/0x1210 [ 617.130828][T18625] __bch2_fs_stop+0x105/0x540 [ 617.136035][T18625] generic_shutdown_super+0x136/0x2d0 [ 617.141923][T18625] bch2_kill_sb+0x41/0x50 [ 617.146768][T18625] deactivate_locked_super+0xc4/0x130 [ 617.152688][T18625] cleanup_mnt+0x41f/0x4b0 [ 617.157639][T18625] task_work_run+0x24f/0x310 [ 617.162753][T18625] syscall_exit_to_user_mode+0x168/0x370 [ 617.168904][T18625] do_syscall_64+0x100/0x230 [ 617.174018][T18625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.180459][T18625] [ 617.180459][T18625] -> #0 (&c->sb_lock){+.+.}-{3:3}: [ 617.187775][T18625] validate_chain+0x18e0/0x5900 [ 617.195508][T18625] __lock_acquire+0x1346/0x1fd0 [ 617.201099][T18625] lock_acquire+0x1ed/0x550 [ 617.206488][T18625] __mutex_lock+0x136/0xd70 [ 617.211677][T18625] bch2_gc_mark_key+0xc6a/0x1010 [ 617.217140][T18625] bch2_check_allocations+0x3e06/0xccc0 [ 617.223195][T18625] bch2_run_recovery_pass+0xf0/0x1e0 [ 617.228994][T18625] bch2_run_recovery_passes+0x19e/0x820 [ 617.235054][T18625] bch2_fs_recovery+0x2386/0x3730 [ 617.240591][T18625] bch2_fs_start+0x356/0x5b0 [ 617.245722][T18625] bch2_fs_open+0xa8d/0xdf0 [ 617.250748][T18625] bch2_mount+0x6b0/0x13a0 [ 617.255685][T18625] legacy_get_tree+0xee/0x190 [ 617.261047][T18625] vfs_get_tree+0x90/0x2a0 [ 617.265980][T18625] do_new_mount+0x2be/0xb40 [ 617.270994][T18625] __se_sys_mount+0x2d9/0x3c0 [ 617.276191][T18625] do_syscall_64+0xf3/0x230 [ 617.281211][T18625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.287626][T18625] [ 617.287626][T18625] other info that might help us debug this: [ 617.287626][T18625] [ 617.297866][T18625] Possible unsafe locking scenario: [ 617.297866][T18625] [ 617.305312][T18625] CPU0 CPU1 [ 617.310684][T18625] ---- ---- [ 617.316123][T18625] lock(&c->btree_root_lock); [ 617.320880][T18625] lock(&c->sb_lock); [ 617.327457][T18625] lock(&c->btree_root_lock); [ 617.334732][T18625] lock(&c->sb_lock); [ 617.338791][T18625] [ 617.338791][T18625] *** DEADLOCK *** [ 617.338791][T18625] [ 617.347006][T18625] 4 locks held by syz.1.4626/18625: [ 617.352188][T18625] #0: ffff888074c80278 (&c->state_lock){+.+.}-{3:3}, at: bch2_fs_start+0x45/0x5b0 [ 617.361497][T18625] #1: ffff888074ca68d0 (&c->gc_lock){++++}-{3:3}, at: bch2_check_allocations+0x258/0xccc0 [ 617.371496][T18625] #2: ffff888074c842d8 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x9d2/0xe30 [ 617.381924][T18625] #3: ffff888074c81a58 (&c->btree_root_lock){+.+.}-{3:3}, at: bch2_check_allocations+0x2e31/0xccc0 [ 617.394902][T18625] [ 617.394902][T18625] stack backtrace: [ 617.400806][T18625] CPU: 1 PID: 18625 Comm: syz.1.4626 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 617.410980][T18625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 617.421030][T18625] Call Trace: [ 617.424313][T18625] [ 617.427256][T18625] dump_stack_lvl+0x241/0x360 [ 617.431962][T18625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.437182][T18625] ? print_circular_bug+0x130/0x1a0 [ 617.442401][T18625] check_noncircular+0x36a/0x4a0 [ 617.447342][T18625] ? __pfx_check_noncircular+0x10/0x10 [ 617.452793][T18625] ? lockdep_lock+0x123/0x2b0 [ 617.457461][T18625] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 617.463438][T18625] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 617.469849][T18625] ? _find_first_zero_bit+0xd3/0x100 [ 617.475130][T18625] validate_chain+0x18e0/0x5900 [ 617.480013][T18625] ? __pfx_validate_chain+0x10/0x10 [ 617.485384][T18625] ? vsnprintf+0x1ccd/0x1da0 [ 617.490965][T18625] ? printbuf_do_indent+0x99a/0x9d0 [ 617.496261][T18625] ? __pfx_vsnprintf+0x10/0x10 [ 617.501031][T18625] ? bch2_extent_ptr_to_text+0x58/0x5d0 [ 617.506814][T18625] ? __pfx_lock_release+0x10/0x10 [ 617.511938][T18625] ? mark_lock+0x9a/0x350 [ 617.516282][T18625] __lock_acquire+0x1346/0x1fd0 [ 617.521217][T18625] lock_acquire+0x1ed/0x550 [ 617.525709][T18625] ? bch2_gc_mark_key+0xc6a/0x1010 [ 617.530816][T18625] ? __pfx_lock_acquire+0x10/0x10 [ 617.535832][T18625] ? __pfx___might_resched+0x10/0x10 [ 617.541130][T18625] ? bch2_fsck_err+0x1b7/0x1450 [ 617.546006][T18625] __mutex_lock+0x136/0xd70 [ 617.550523][T18625] ? bch2_gc_mark_key+0xc6a/0x1010 [ 617.555666][T18625] ? bch2_bkey_ptrs_to_text+0xef6/0x1470 [ 617.561308][T18625] ? __pfx_bch2_fsck_err+0x10/0x10 [ 617.566439][T18625] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0 [ 617.572265][T18625] ? bch2_gc_mark_key+0xc6a/0x1010 [ 617.577377][T18625] ? __pfx___mutex_lock+0x10/0x10 [ 617.582401][T18625] ? bch2_bkey_val_to_text+0xf0/0x160 [ 617.587867][T18625] bch2_gc_mark_key+0xc6a/0x1010 [ 617.596793][T18625] ? __pfx_bch2_gc_mark_key+0x10/0x10 [ 617.602263][T18625] ? __mutex_lock+0x2ef/0xd70 [ 617.607164][T18625] ? __gc_pos_set+0x1a4/0x2c0 [ 617.611907][T18625] ? bch2_check_allocations+0x3d0f/0xccc0 [ 617.617647][T18625] ? __pfx_bch2_trans_begin+0x10/0x10 [ 617.623024][T18625] ? __asan_memset+0x23/0x50 [ 617.627609][T18625] ? bch2_trans_iter_exit+0x295/0x3e0 [ 617.632975][T18625] bch2_check_allocations+0x3e06/0xccc0 [ 617.638519][T18625] ? __asan_memset+0x23/0x50 [ 617.643107][T18625] ? bch2_btree_node_iter_init+0x36bb/0x4280 [ 617.649086][T18625] ? validate_chain+0x11e/0x5900 [ 617.654022][T18625] ? __bch2_journal_key_search+0x9c2/0x10e0 [ 617.659905][T18625] ? __bch2_btree_node_iter_advance+0x577/0xaa0 [ 617.666143][T18625] ? validate_chain+0x11e/0x5900 [ 617.671072][T18625] ? __pfx_bch2_check_allocations+0x10/0x10 [ 617.677042][T18625] ? bch2_btree_node_iter_advance+0x3c8/0xc70 [ 617.683101][T18625] ? desc_read+0x200/0x3f0 [ 617.687514][T18625] ? desc_read+0x1a2/0x3f0 [ 617.692006][T18625] ? prb_first_seq+0x131/0x210 [ 617.696761][T18625] ? __pfx_prb_first_seq+0x10/0x10 [ 617.701896][T18625] ? this_cpu_in_panic+0x4f/0x80 [ 617.706836][T18625] ? _prb_read_valid+0xa39/0xac0 [ 617.711769][T18625] ? validate_chain+0x11e/0x5900 [ 617.716705][T18625] ? __pfx__prb_read_valid+0x10/0x10 [ 617.721984][T18625] ? data_push_tail+0x6c6/0x730 [ 617.726835][T18625] ? __pfx_validate_chain+0x10/0x10 [ 617.732028][T18625] ? prb_read_valid+0xa9/0xf0 [ 617.736698][T18625] ? __pfx_prb_read_valid+0x10/0x10 [ 617.741888][T18625] ? desc_read+0x200/0x3f0 [ 617.746299][T18625] ? desc_read+0x1a2/0x3f0 [ 617.750709][T18625] ? prb_first_seq+0x131/0x210 [ 617.755465][T18625] ? __pfx_prb_first_seq+0x10/0x10 [ 617.760571][T18625] ? this_cpu_in_panic+0x4f/0x80 [ 617.765502][T18625] ? _prb_read_valid+0xa39/0xac0 [ 617.770438][T18625] ? bch2_check_allocations+0x3197/0xccc0 [ 617.776161][T18625] ? console_unlock+0x239/0x4d0 [ 617.781011][T18625] ? console_unlock+0x447/0x4d0 [ 617.785972][T18625] ? __pfx_console_unlock+0x10/0x10 [ 617.792483][T18625] ? __bch2_print+0x17a/0x220 [ 617.797252][T18625] ? __bch2_print+0x17a/0x220 [ 617.801919][T18625] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 617.808618][T18625] ? bch2_check_allocations+0x83d/0xccc0 [ 617.814268][T18625] ? __wake_up_klogd+0xd5/0x110 [ 617.819126][T18625] ? bch2_check_allocations+0x83d/0xccc0 [ 617.824860][T18625] ? __pfx_bch2_check_allocations+0x10/0x10 [ 617.830750][T18625] ? __wake_up_klogd+0xcc/0x110 [ 617.835687][T18625] bch2_run_recovery_pass+0xf0/0x1e0 [ 617.840971][T18625] bch2_run_recovery_passes+0x19e/0x820 [ 617.846526][T18625] bch2_fs_recovery+0x2386/0x3730 [ 617.851555][T18625] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 617.856968][T18625] ? __pfx_lock_release+0x10/0x10 [ 617.862161][T18625] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 617.867872][T18625] ? __pfx_lock_release+0x10/0x10 [ 617.872891][T18625] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 617.878516][T18625] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 617.884233][T18625] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 617.889862][T18625] ? llist_reverse_order+0x72/0x90 [ 617.895405][T18625] bch2_fs_start+0x356/0x5b0 [ 617.899990][T18625] bch2_fs_open+0xa8d/0xdf0 [ 617.904497][T18625] ? __pfx_bch2_fs_open+0x10/0x10 [ 617.909553][T18625] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 617.915906][T18625] ? __pfx_bch2_test_super+0x10/0x10 [ 617.921197][T18625] ? sget+0x2b8/0x620 [ 617.925174][T18625] ? __pfx_bch2_noset_super+0x10/0x10 [ 617.930545][T18625] bch2_mount+0x6b0/0x13a0 [ 617.934969][T18625] ? __pfx_bch2_mount+0x10/0x10 [ 617.939823][T18625] ? vfs_parse_fs_string+0x190/0x230 [ 617.945189][T18625] ? kfree+0x4e/0x360 [ 617.949179][T18625] ? vfs_parse_fs_string+0x190/0x230 [ 617.954513][T18625] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 617.960143][T18625] ? cap_capable+0x1b4/0x250 [ 617.964722][T18625] legacy_get_tree+0xee/0x190 [ 617.969601][T18625] ? __pfx_bch2_mount+0x10/0x10 [ 617.974469][T18625] vfs_get_tree+0x90/0x2a0 [ 617.978890][T18625] do_new_mount+0x2be/0xb40 [ 617.983448][T18625] ? __pfx_do_new_mount+0x10/0x10 [ 617.988587][T18625] __se_sys_mount+0x2d9/0x3c0 [ 617.993449][T18625] ? __pfx___se_sys_mount+0x10/0x10 [ 617.998992][T18625] ? exc_page_fault+0x590/0x8c0 [ 618.004466][T18625] ? __x64_sys_mount+0x20/0xc0 [ 618.009504][T18625] do_syscall_64+0xf3/0x230 [ 618.014022][T18625] ? clear_bhb_loop+0x35/0x90 [ 618.018705][T18625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.024637][T18625] RIP: 0033:0x7f46d937743a [ 618.029163][T18625] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.048872][T18625] RSP: 002b:00007f46da1ace78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 618.057309][T18625] RAX: ffffffffffffffda RBX: 00007f46da1acf00 RCX: 00007f46d937743a [ 618.065276][T18625] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 00007f46da1acec0 [ 618.073239][T18625] RBP: 0000000020000100 R08: 00007f46da1acf00 R09: 0000000001200014 [ 618.081228][T18625] R10: 0000000001200014 R11: 0000000000000206 R12: 0000000020000040 [ 618.089221][T18625] R13: 00007f46da1acec0 R14: 00000000000119f4 R15: 00000000200004c0 [ 618.097200][T18625] [ 618.173253][T18697] netlink: 'syz.4.4645': attribute type 10 has an invalid length. [ 618.194820][T18697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4645'. [ 618.208159][T18697] net_ratelimit: 242 callbacks suppressed [ 618.208181][T18697] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 618.230829][T18625] bucket 0:40 data type btree ptr gen 0 missing in alloc btree [ 618.230847][T18625] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2b7c77101c276712 written 8 min_key POS_MIN durability: 1 ptr: 0:40:0 gen 0, shutting down [ 618.275801][T18703] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4643'. [ 618.275832][T18703] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4643'. [ 618.321736][T18625] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 10 [ 618.344419][T18625] bcachefs (loop1): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 618.376865][T18625] bcachefs (loop1): bch2_gc_btrees(): error fsck_errors_not_fixed [ 618.389385][T18625] dev 0 has wrong free buckets: got 83, should be 84, fixing [ 618.408700][T18625] dev 0 has wrong btree buckets: got 11, should be 10, fixing [ 618.417305][T18625] dev 0 has wrong btree sectors: got 2816, should be 2560, fixing [ 618.427212][T18625] fs has wrong btree: got 2816, should be 2560, fixing [ 618.434740][T18625] fs has wrong btree: 1/1 [0]: got 2816, should be 2560, fixing [ 618.442581][T18625] done [ 618.448095][T18625] bcachefs (loop1): going read-write [ 618.455671][T18625] bcachefs (loop1): journal_replay... done [ 618.461600][T18625] bcachefs (loop1): check_alloc_info... [ 618.464666][T18625] hole in alloc btree missing in freespace btree [ 618.464684][T18625] device 0 buckets 40-41, shutting down [ 618.485238][T18625] bcachefs (loop1): bch2_check_alloc_info(): error fsck_errors_not_fixed [ 618.493858][T18625] bcachefs (loop1): bch2_fs_recovery(): error fsck_errors_not_fixed [ 618.501949][T18625] bcachefs (loop1): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 618.512143][ T5130] bcachefs (loop1): going read-only [ 618.517511][ T5130] bcachefs (loop1): finished waiting for writes to stop [ 618.526027][T18625] bcachefs (loop1): shutting down [ 618.531202][ T5130] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 618.540433][ T5130] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 618.551617][ T5130] bcachefs (loop1): unshutdown complete, journal seq 10 [ 618.559361][ T5130] bcachefs (loop1): done going read-only, filesystem not clean [ 618.593483][T18625] bcachefs (loop1): shutdown complete [ 618.605356][T18333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.632641][T18333] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.645870][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.653034][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.696810][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.703992][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.761190][T18333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 618.782918][T18333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.989794][T18333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.081526][T18333] veth0_vlan: entered promiscuous mode [ 619.105933][T18333] veth1_vlan: entered promiscuous mode [ 619.157873][T18333] veth0_macvtap: entered promiscuous mode [ 619.178769][T18333] veth1_macvtap: entered promiscuous mode [ 619.208623][T18333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.219656][T18333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.234362][T18333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.248007][T18333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.260562][T18333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.271410][T18333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.288349][T18333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.299981][T18333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.324778][T18333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.340530][T18333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.356557][T18333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.368664][T18333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.379458][T18333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.391610][T18333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.402333][T18333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.423315][T18333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.440112][T18333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.453105][T18333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.468566][T18333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.481158][T18333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.490965][T18333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.502706][T18333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.551409][T18333] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht' [ 619.582366][ T2851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.585547][T18333] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 619.609877][ T2851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.635821][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.647933][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.015123][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.021523][ T1248] ieee802154 phy1 wpan1: encryption failed: -22