last executing test programs: 8m1.22954278s ago: executing program 32 (id=185): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'bond0\x00', 0x8000}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000140)={0x40001, "02e7a14aa978094eaf0c8bbcfbc4648d428dc3bb40af0f69ac15a529f935c8e3", 0x2, 0x200000b4, 0x5, 0xff0000, 0x2000121, 0x4}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6m6.837850219s ago: executing program 33 (id=350): socket$packet(0x11, 0x2, 0x300) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x20000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x2, 0x7}}, 0xe8) utime(&(0x7f0000000e00)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a0000000000001000"/196], 0x119) syz_usb_connect$hid(0x2, 0x3f, 0x0, 0x0) open(0x0, 0x40c2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) 3m59.139212506s ago: executing program 0 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$getregs(0xe, 0x0, 0x6, &(0x7f00000006c0)=""/190) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x64000600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x21000}], 0x2, 0x1800, 0x0, 0x3) futimesat(0xffffffffffffffff, &(0x7f0000000800)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m57.05990169s ago: executing program 0 (id=599): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x72, 0xa0, 0x66, 0x10, 0x2058, 0x1005, 0xe81f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb4, 0x2, 0x0, 0x90, 0x27, 0xd0, 0x80}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 3m53.569345014s ago: executing program 0 (id=608): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0xc, &(0x7f0000000000)={0x0, 0x11, 0x2, {0x2, 0xd}}, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m48.001304429s ago: executing program 0 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$getregs(0xe, 0x0, 0x6, &(0x7f00000006c0)=""/190) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x64000600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1800, 0x0, 0x3) futimesat(0xffffffffffffffff, &(0x7f0000000800)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m46.006000652s ago: executing program 0 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3}}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 3m43.219969358s ago: executing program 0 (id=628): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0xf7}, 0x2}}, {0x0, 0x0, 0x0, 0x0, @time={0x800, 0x7fff}, {0x0, 0x96}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x1}, @ext={0x0, 0x0}}, {0x3, 0x0, 0x0, 0x0, @time={0xdb, 0x7}, {0x1, 0x82}, {}, @connect}], 0x70) r3 = socket(0x1a, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='gre0\x00', 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1e) 3m31.262148503s ago: executing program 34 (id=621): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) pipe(0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x7, 0x0, 0x0, 0x0, [0x0], [0xfd, 0x5, 0x40, 0x10], [0x0, 0x0, 0xa, 0xfffffff5], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 3m25.44445247s ago: executing program 35 (id=628): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0xf7}, 0x2}}, {0x0, 0x0, 0x0, 0x0, @time={0x800, 0x7fff}, {0x0, 0x96}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x1}, @ext={0x0, 0x0}}, {0x3, 0x0, 0x0, 0x0, @time={0xdb, 0x7}, {0x1, 0x82}, {}, @connect}], 0x70) r3 = socket(0x1a, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='gre0\x00', 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1e) 3m8.970139421s ago: executing program 6 (id=674): r0 = socket$inet6(0xa, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$video4linux(0x0, 0x4000003, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x0, 0x0, '\x00', {0x0, @bt={0x1, 0x3, 0x0, 0x1, 0x100000, 0x104, 0x3, 0x0, 0xc, 0x5, 0x25, 0x7, 0x0, 0xfb, 0xa, 0x0, {0xc000000, 0xe3a}, 0x3, 0x3}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x0, 0x1da, &(0x7f0000000180)={0x7, 0x80000000001}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000000300), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xff, 0x9c159fada6902b91}, 0x20) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000480)={0x2c, 0xc, 0x1, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @local, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}]}, 0x68) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private2}, 0x20) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000000c0)={0x10, r6}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}]]}, 0x38}}, 0x0) 3m6.774408044s ago: executing program 6 (id=678): socket$inet6(0xa, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$video4linux(0x0, 0x4000003, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000002c0)={0x0, 0x0, '\x00', {0x0, @bt={0x1, 0x3, 0x0, 0x1, 0x100000, 0x104, 0x3, 0x0, 0xc, 0x5, 0x25, 0x7, 0x0, 0xfb, 0xa, 0x0, {0xc000000, 0xe3a}, 0x3, 0x3}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x0, 0x1da, &(0x7f0000000180)={0x7, 0x80000000001}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000000300), &(0x7f0000000280)) 3m6.004072144s ago: executing program 6 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m5.61829189s ago: executing program 6 (id=681): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 3m5.36061793s ago: executing program 6 (id=682): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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") syz_init_net_socket$netrom(0x6, 0x5, 0x0) rmdir(&(0x7f0000000180)='./file1\x00') setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000008c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x8100000000000000}, 0x8c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)="2184", 0x2, 0xb5e) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000003900), 0x4) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000180)) lseek(0xffffffffffffffff, 0x3fc04000000000, 0x0) 3m1.712095953s ago: executing program 6 (id=688): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x162) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xf, &(0x7f00000001c0)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001bc0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.424243262s ago: executing program 36 (id=688): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x162) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xf, &(0x7f00000001c0)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001bc0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 44.15622339s ago: executing program 5 (id=995): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x80, 0x7, 0x0, 0x0, 0x3}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) listen(r0, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 43.753575496s ago: executing program 5 (id=999): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 43.532272759s ago: executing program 5 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000001300)="e0e90947c50d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x74, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x40, 0xe, {{{}, {}, @device_b, @device_a, @random="0bbaacd61418"}, 0x0, @default, 0x0, @void, @val, @void, @val={0x4, 0x6, {0x1, 0x9d, 0x8000, 0x400}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xd5, 0xab, 0x6}}, @void, @void, @void, @val={0x76, 0x6, {0xfe, 0x9, 0x16, 0x8}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x74}, 0x1, 0x0, 0x0, 0x6000011}, 0x0) 43.345226818s ago: executing program 5 (id=1002): gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r1, &(0x7f0000000480)=[@t={0x4, 0x0, 0x0, 0x0, @generic}, @t={0x81, 0x8}], 0x10) read(r0, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1, {0x3, 0x2}}) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000300)={0x3, 0x80, 0x0, 'queue0\x00', 0x80a6}) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x14812, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=iso8859-%,utf8=1,shortname=lower,uni_xlate=1,shortname=win95,iocharset=cp775,uni_xlate=1,rodir,utf8=1,uni_xlate=0,tz=UTC,rodir,uni_xlate=0,utf8=0,codepage=1255,nonumtail=0,\x00'], 0x25, 0x2a1, &(0x7f0000002300)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000480)={0x2}, 0x8, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x4800) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) ioctl$FS_IOC_SETFLAGS(r4, 0x4c02, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) 43.243465824s ago: executing program 8 (id=1003): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@nogrpid}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd}, 0xc) (async) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) truncate(&(0x7f0000000000)='./file1\x00', 0x2ba4) 42.322955627s ago: executing program 5 (id=1006): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x20000000) 42.255144987s ago: executing program 8 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="34005a802c"], 0x50}}, 0x0) 41.759320004s ago: executing program 8 (id=1009): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x200006, 0x0, 0x0, 0x0, 0x9d2cacc33863fe00, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f00000009c0)={[{@errors_remount}, {@noblock_validity}]}, 0x1, 0x517, &(0x7f0000000140)="$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") open(&(0x7f0000000100)='./file1\x00', 0x100, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000030000000900010073797a30000000005c000000030a05000000000000000000030000000900010073797a300000000014000480080002400000000008000140000000000900030073797a30000000001c0008800c00014000000000000000000c0002"], 0xa4}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x73, 0x42082) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000001140)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r4 = socket$inet6(0xa, 0x100000003, 0x3c) dup2(r4, r0) 41.412263347s ago: executing program 5 (id=1012): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000011a40)='./file0\x00', 0x1200014, &(0x7f0000000040)=ANY=[@ANYBLOB="617461cd056865636b73756d3d7878686173682c7370725f686173683d736970686173682c646174615f638465636b73756d3d7878686173682c636f6d7072657373696f6e3d7a7374642c00", @ANYRES32=0x0], 0x1, 0x11a08, &(0x7f0000011a80)="$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") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) close_range(r1, r2, 0x0) r3 = gettid() r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r4, &(0x7f0000000cc0)=""/384, 0x180) tkill(r3, 0xb) r5 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 40.945640979s ago: executing program 37 (id=1012): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000011a40)='./file0\x00', 0x1200014, &(0x7f0000000040)=ANY=[@ANYBLOB="617461cd056865636b73756d3d7878686173682c7370725f686173683d736970686173682c646174615f638465636b73756d3d7878686173682c636f6d7072657373696f6e3d7a7374642c00", @ANYRES32=0x0], 0x1, 0x11a08, &(0x7f0000011a80)="$eJzs+QlYjt/D7/1fDSpSKqIUGVJEIVQoc1GGyFwkRRMpUsrQYEhEGoQohUoSyZSSCKkUEQqFCs0qomjgf9y/zb1/+7vv7x5+/+e593E8+/06jsu61lrn9bnWua7l7FzHKQAAAAAA/F/hwR7Xlnl9DR/uXPvNe1aak69AUuQf7RJ/DpD5XXr8nxoh/jOJiyr8o/zrujjtNNOwwNfQJPjnKcvYKxuixB0VtNdsMNVPNrhSYSs/r/N/lvtnPQ37r3Whb0ICgX3I+zd7s/L6/FubkEAgEBGS8REIZIWEs2SF/hIxqk0gEKz593H+t503vo2x/bfSJ0D8v2nv8ZcQ1vv/3SR+r7MTqo2fHF2M84KWjjAa1tdjpc+/H+H7j3//rCeBQNrqr58X/g9yrW3sNTTWrfVUsPDauLF3bYJo8V5zjcLY8vdrK1T27y8QbqgbP/vJC69NXQQCQdffr3/zZ7Uq/C7/LPr5AoGg2z/l6/1PzmvQ/+L5a/5NXfl3Kfa7lPyf5PzpH/i/ePxfif6l7Pa/+fn/Xf/Rb/b/pu7/yd/3x5/zlP5dpv0uh/1v5oj8eQkJhIUEov9+LV4v9F/XiOCffjchgZCgyz9dR4UEwv+oC/97XfCPuuC/1oX+Uhf+S12ky1/O6x/f+3uhiQgJ/bftf477S/uA3+2iv9sH/vO1/j+w8G/aFX+XEr//o37/Uxf89c1/Ifnfvfn38/qHP+Mq+x+M5T+D8D9dg/6j9j/j1fv9Y0j+bpMUkvvvPvPrP/CnL2O9v12e87RdMn8zDqFLQr/zhf6l/IkuStck/TVPK/xdvpXw73zhfym/4PMEpQ8SRdf+Nj/oT77Iv5QvkecSuK3+rvrfzk/Tn/kR/Zfy7wV5hPaaVm064O/yo//kS/xL+Z9FLfJ/+SSH/O34R/2Zn67/Uv6l5anzvo+5uP9v8wV/8rv9S/kD/B+kxu3tc+pv8+/8mR/Jfyl/sOYl/xx/11l/O/9P/uRL/Uv5Zb+0m/vkP0j62/U55c/8yPxL+XJ26soyW7YP/7trp5DPf/ZfWAD4/5aev++x/H/X/36fKhCS+B/sU///9U/7hWMyQv/lnq/775fU/5Nf9BdC/7R3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD832u182nxGVGGSvoLJN0ntTycE2QwpFL6ap8Nor/7xUUFgn97LyQiELw/WpP/JHrK3uU3zuVs8982aJx4StEkGctTz6rqFgbHb7/tGV3Yd7JV110LTUtFxwVmZJafbZpnGX1J0Xn0shcjb98Y4mdnecLLInviqNG11wTxk4xd4zacf9iSpnOr14xTB1Z3ydvQu6/0w8BnWxMfaXe7WiATfu75+/ouX7/PbK4d03NE9/Y1YTmfx3wrly29cT3KV3+lduH8u811WgqRUr1aXofkzmx4v+nh4UO3+hzWER1me3NhmY7xJCN57V1f1HspWGYKfVmZ89Nkrp7Og/PSX7KjHKZIyoq5FIQsDdr5dUsPtQvzKwpKzk7NGKfp4a/wUWNcipLozyfnVmfPsxi7tHDN2wOyorELhm/z1JhsPdxuaA/p0F5v9P2ObJoT1m41957D4LJYs0fxZ3oU7ZrQJBbq/XSg+Ne09fsanzwuMB97zVwz1O3Zuda0nq5G+d8/LfWJcLFo23Kup6fXHOGEK+MU11crRF+T7lMUc/tW4IseY1yz2nbI1qtkRnufWGtlO9W/5ZxBtod8bvFTkY2BQyc074nLiB4+xsOzZLb3AU+DrAJZixmKYnk/tj7ZeGHpxorQ4a3O4kY5u94v1CsOspAct95jy2O7nx+jXTO0rR0KFOV/vmtsnrLCMl2yeZvszfFSHSmdDzcZXx64oOGCivnnXuJCGZ4+OhqfJjW9mLp1qk9pz15zRnQYv11o7zVMYKVSJHb7h8z2DXt/jBWRUBggdyp/0rz4Kwnq8ZZaXdduWONa4fVYs/aGeuOLRvVPQ96khZ09pJ6+QnmV373182/e+xFsrl67xEhyzfZfh777Bn9yn/fi/aVfB6Rv+dWuUrKoeZD1XGNzdx2H9Xu7TBvmJDYleNhzu++7/a33rTN5ud5wo38vp2sTTqc9GJB7r6zPz36+Jyo3a6081VUz4vK43vPFzq+5ZJApfdWsT1lNyHOZL9FGr+yWjSuu1DYpiQt0nJ0ta1Q9cuqPyx9nuhdWi+zWSrV+HDfIrDRn9MUYz2+p3h/7Ju5sXzJ84xEng24j6yXkREJtkkZeMfykvuDepMRH/S92CbbwCn+1/1inUv/Sh2t6vlKs1TkXf1E0Z4fUSdt5VrVXzyzNntineEbpx4FnN0w+d2pDeljRPKs17afHvRPVXdinuUEv4qaP8xDTltGzauKCteqvXi5WrQ52jOi6K8beSzp9UIf4wPCTYZ4H3xo/lu+29cX8+KFaug9tjSLTf6gtLjXf/kN6n81tNc9z780mN14r7euSrmvs4vYmoLTB/kx/+/6n/KI8Zy2v3PzgbbFVxLCfnsvPhxpWrggPHON5w/zW/QPzLTT0zEtHSg0WDluS9z3BpkCpdvqttpn+d3JGJBvbdGo42vQXfu8+KHDQt+HVIbUVye4Kwn1sFXYeqvZKknszxGhW/34jVXxDxTqyC2osA47GxxvNXvTdSqM5INL9XMt0odauyVqP7fdphRVJDgs5kbIvUbFQvVVfpHqf7HGPS/KT5SKXFmsEvk2dL5M9ZXhN7be+j3qGP/uppxtfGPLReNpeG/l+l53nn5tfarbi3Rq7dcqRK6cq3PR2qH711uq49pCVrxxidVWNzOqi7dfcOTSoJOZbn9th2sr3H8heH3C9yFl5Ra7NmG6hEfdsF1h5bUwMlCmPWT+x0Uh+sZu58Mypl6rC5CpNax40ZMhnWpkEznizQPVTD+WK4+YtVl32lQ03ezK0UV++u7PjxWnSPufFfu7PPl+ZfM1A3nezycue5mmXDB5MXjM2qcqxr8WiC/v9j9QMfHnovm2iWE/7R09lLHZMPrd1Vw/Dl4rmyjrX541IvSd2cd4Gy86vcgopW3I9Vlb17XJ2iHegnOShRU+D/TrXp/iXW5/82V/FtK3pQY8S0/mTy4ffEDYfLHx96C47c6e1i3Sbjg30vpA8S2nHq23bn4uX76hMOqOuv67QzVnJ8uhcsxq9suTqkau7afiOkV0oVHVwo9SlNPezMaIpC+Z+ybEbEbE0qG3czudPN5iPdjkUYnzPp8fLsutFWdLvlaWK5H8K/Jwkx6sUDFi+6oumYVVm2ZSQOYXaLwY/mWD6znbf8pcJkW87Qt6fH7DRvVY7qF2oLC060GmudK2CrYKRuGr2zuTxnwz2XJyaJ3Kim7HRPLPSGy9LNIYcMVt9q0uVudpo6aCVWjW59Uc3pTlFPj+sEurmO6fsfU/N+qpRWeIO7a5LH23P2b6xcLBaNw/FnjLahxcsXJ5ZN8Pnx65wyd1pcndlB6S/6mr4SeKafYBQ/PXQa0MH5rg93zvxrNivxnHDa8euXuh7ZMhOi3KFaVefhOckv00fPHertFKr5I4br/3GfK2K6fr91vQPaqs133TJfNU3cW9cj4k7jA6ektxp0r3XvVkr3pmZ6ZxKfHN8WmlZSdcS7bXJ/ZUijAQ3uojd6KjduWVbW0KJs0je9FOGtUd39NfNc9C8U1bTTeaR/+3FNtuf7juTnmWn1K/J8uE7n8zbFnouS5Q7BjcNTOvwcVrZPE4ozXDk5gE7F+hrfnrpJnJs+hK1w6v2uAraR21+qXTQyObExvavO79YP382V1L6uJummlzUU2EJEc30D+eOiaRdOOCZtCw/d3WgepbbvuMSvrvPzQpfF5ygYyyhoamfeihr5ft9I7ZWGMyNqfJ46/S88qXrcaFRRhuXTTl3SltOSKnFrHjxyBiXi+PXFpnYnTG3yJVr/nkl+OfpwJOd0X7fDO777h/4M7J9X/06jb0GoeZJPV5tv+o4d5B+44p4vZB2kZfbZgU4d4oOlX3pa/D8SYje8X4XDhWpzR80S8g6VmzR/IuzDgx7MmGTV4aF4167o5ElGr7bT97QGa6V7Wa9UWh/2IuEQJlhMyqEli/p0Lz37nP9Cf/0I6Nma6ZNXHLP88WKcds/BuWWhCc2miVePLpl4d2omTVdBvSeIVm4331FTXdBcrCpTW1g5K2BFYNNDjVc2Nm9796JbqWR+VILe/spPqqyjSs6tHSrWPJpidCvxwssKnLvvUuYsipt86JXDXJvq07esg4dpJM19FTHzBM+84ZE14p3k5/zyvf4Sqv0d7oSFQFRRsMiT6T1yyg8dyVs2qA+tsKGdR/bSqqvZQSHuw672u3xqjKr74prI1TtJ3reSm84sNxd2tPSrl14cYqEUFTAK5X6xzdM9ucecsuRDB40xyv5RuOpinFOvnuMet6aKJasv1yt+HX6VJV5MsMEj9p2PjueOd3z5oi1Dw63pNauPPGkS83NetPB41WualR1rj4jPG9Ir9uv6hNGBU3tMvmWTkTiZZnUmtfz7t+YM33XuzHeMu6i/fdPenpKxeS6y1qd7WO+GT23MHNN95taMPDdMYe8rff3KM24oNB7z4Jt+zMz7KcdTY64oFjtfbwqrC7gld/3hJZnheqrvmhN77lvipOHW0bOkSvfko4OuHPwbvCGsaoHi19X2fnUZug/GTF7yLarJx/oSkh8THMU79vtwPJNbnI/jxu1DF4z4fmLAoNvAduMusp22fU2a7J6k670lclyr+dF38jbKZhkGFFfnhqe7HBnhteauvPBr+caBK6P0D/covQi1LN93ZSZ69d1vf51noO7n9miUVXprztEr4wy1lAa32fRg2GJ+TnWBlG9b8Xu8JFyDrtWus8/OG2X/8Ahs1o6ZuuO+25T0GTnmajW2DnkdnP4zMvJigXL2lbN3ZHUfKS1LfCDSdSttOtjfD4IiQ48+vaFn27+hjjVxFG7D3Y/oy/3xMDLLaX2V7VfUt7+L9N+tOrkyBk8aLW4cLCP93Blsc5Ibz//wRIPzv3wa9v//qJhh+/gx3lmlS0q3vJtU3/MVn9qk9s6y/XY9VHLv1xwiZKzftfgv0fxa97Djoz6x3qrrCbLjtAOvOee67Lro19016gfBhYWe/K7NWnqxnSbtVVhp+S+lSsFpfOkN2fdTT4l9t3lXMK+7aUjJsWJXWtae0pOpOHNh8mfdhfHf9K2e3Kj7dVjRQV/n71BghdiMcd2379p8LltfcyESGW1cRaKW5SfTw/oeTv81DVT4Us9RetHpTgn3TK7VWITMqf/wOXC8VcmXtj8+Gt3n8W/fNTuPD0QsmWs+Fk1l4nvJwT2kbjX+bVt2oXC79/6BKXnpw81am5ssVz2PS/A7cu1+MNnGq0qjO0dFkjdrPec/vBD98JX7+ZfOf+iW+fiA0+M1D+qvE6/OOe4atWx14t/bfp471riwPEpvSfrR7z16CzXWWz403HhQQM16S8W3cz2XLXaqbLav0bG86x5+3irZTrqg5VOrdlo3XD74279Id9Tp4RF+5qOaUjt4rVGaY2wlFSS6K0Dw5UcG+4fetr3+MOsGf1SzSUeaM96cnJM1FwdfS0vx27pW6fNPhKg/NjxSE65U2fH+ugpSWGhtzana2a/GNYyuvVN9EMF+55bp1qpxf56avh66xLzG8q6wy27NV5doV4fd/nFLJ8tyxuOJp53d3IuEpJTfeZnGf/NJ/HhCCkZt8HvQ2PqFme7192Ju2hQN0XSuUp3SEv38Mpue+vbBZ4tJbnC+3IupS3wtLzZsn5NeU7r+L2Jevvy7h/W/T68250QHf+L9jW7nhRZr1gxNflEXml95aoNK5eJ9Hj2KfmUq6rhCfmtsjpZbYIr2nUrhJ8dW6CrqpLv5LGy59AX52erbfa89HyZidjn1X5Dz4yt1HsqO/HZm/aE19N/7Nt6+9DE60HZYQa5r3I3vXi35nTV7JbLkaf331YQEQofbjhYNuXgrY3LvUYZLZ3iHemSnGlTlbHtiI/KeCHps+annCTDQueqnpIacrDnxf6xMhla3auXuT9teVywumBMRe3R4l/+Nu29QjIkMoc869wwK/FJt+lJCuP33o842NJNdXN+9Zqzl2yuyXwMyd5VltV99wb/WN/ip4Ndd68+vnfgdEnbjWHBWseVJ1xtmr4yqTz75pwAjbjyYyce1RsWVgU0izsvTr/2pHHk9tgT7RmRF1ckF4+4/LSgo/fmhuF2K19bJPmtXzxu+Kehpueywk76SmtsOtFe9m3mk+/BRfmXi7rFjpRTqzOovtS58MsymcDbFbuyMpPXX+89sZ+TrUrWtw3iF6YmSFeXPCzedqc29NbcxriM0lKd4Q8Ue/p5bXu6NmPpluu/BB+C9C/lByQfT+qM1Pf4tFgr8/z+zo228iLL8+yO3b9hsmhHX2vNHz0HaE1OV+7d/lF4kohy4XEpkTq9OqsfEoomLmJVhk1Lb8n0CzeT6e/Y/Gxw5cmTgxbujav1KzP/kiFhJbRsYry/QMLrR0Wjbe6Ald3EQ/JXTB13csiGaZ/c5y+xnjFoQ9R09a9TV4Rai7eJiXXMHX55q/nAERO2+mu/C87QvTGlRjrh5161+yFej4TnTHot2mPUHo9I4yTxLRWPxloFp5xpWHplxcBPLn2dpud8O26zsC68/nPP9AUpL+enbD8rEzcxVWly9bdZmffvVY0R2a9Z2Ho79Zhftn62v9jnuAMRDzRnBIxQPtjZKbovxFhOQf5+dWybtu0yLyFfZRk/t902b8JMjf03Hn2VohO9u7/xq/Cf6uUL1kYOPjHpkF3muMbzdh09FPdL3Tc3V59+YtaxcvUecocVrXadnh4mdHv2uKiTwu2peaMUv5pLp6/weGEqN1Rz5hnrT1OtewrW+G3X2pSVM8dRTtn6bPmk1Prx8dWynRlVbQuSP605sLRz90fLh8PvLE3v59jD8tybqhql7fNWia04WNXjrUXWi+v9jl4JvRUd1qTSrafL4iQHu5tLPXZ2tRO9ebDcYYl98BH7RvlBDY3DvXRCh0nVTtqhmZh3omd/49d6g8cPGamsN6jHusiDYToT6uMmiyfcNg54fG6L++2feeoZF01i2mRy6s1bNxt2eB0wPGTU2nvdBHnRvKEPnjsdW7hWqfe8vh2HbQVu54qOf9tjqq6VpvKs0E/27dnJmrtOyfd1fypVelDjk++qywkfvkQKPPQOBWyfuCpl8wGPsJc54cGCKrmOhsWFkRNEBS/MwqR11Z9N73RRnSO/SuXl2/EmFgtmjB09skF5xLjkk5V62k0ey9/6T+tn8e2iUsNWxWLZr/LPM61dHmm45r/qlWSgfXGJ+7OrWy51KIf6OgRtSdq8bu/kI3v73a3ZOU6g0+1Ys7fEyebh6XIaL5zmu2y4MDDx2aKsrXFiX/wijpj3MUzrNPlydmyPU76zZ5dONPk57fWXuLwPC/3WacclHhi6tFx38ef5s6yujXh/0OhC9sjeY82Kg0+GnpaTPBc5I9b+xKnBEwsrP3QeadsaXntQoXRN8bIhGRXZsru0bdeVS8ouqRiyo75mlPqi6ijDAsfP6R99FXM8ZfrluuR4yCflhlrqHVsprvNgm47kc7UYE82XEvITBot/M91naHVOUGDRuumyR+HiCpnycvkE544xljLvNB8tSluYOWLqRbeQjtm5p2f3P35ju7rt8dmLXkbfPuYcuDFa9e1Q+/Fr7WYfnJ096nV+QHC/vPhJ6xODdp3fGnJyTdt1zW2D8mILpz5cs+dUZs+Pg7cM6bE5bskF+4pPJl/lBv3q87Us+ZlP850JvbY9m/Q0YO3OEqkSg8kZymqDjEaOHBE/qeyB6pzHqrP0iqVmPtqwZ8y7ia+spL0NN0d32Ry2ynmqwlsFfdWH5fYTjU62WWkeSUm8dubIh8qlxqkWI2U/eWUcsfs5N+bE+pMiX7S+LM1+V+22wbIlRNO+tW7lQV/HSbvmflxbc0LlfF+nZi1XQ6uk7fHZDgLTKudJFzsj6m45nNzw/rHTO0+H/j9tPG5/2Olcv7tfyJURZWtDbmzJsQzo5XD+8obXb5wsHGJdPhsP2Vb5I2qDf7/alp6TVUPaW7cZhDnG31a5udlq7MzYbU2G2wafua6cM2dNyyO/CZJnnx46dttZW/bXlNYZnjtETs6YNu/rgys39fbKRB2W+WH/ZEfMCJ9Vzd8W7RlYdnOGxGuDvKIjn3YPDF5uKNMxxk9OWqlL+W5xxzf7dOT9LObpyB0ImrvifIf79yrt8LCJn3urLf512U1IZdq7wud+dv3L3uqGTXDwCDUbUmczzbgoy8G1ZdCZ0/7H7Pr5dW35HuwZPOqU0fWZb8+ISJx+o2E0eNI3nbaDXXRPzdZ6ZtL4YcXaUbuu64UY+sisnnOw54bM28LBoaZ20/Z9ylXtE7VomPW9X0vs37VKSU2Nzxqp1NctaU/QHYH38q6HVa6YOp8qcG0zyW4cWjg+rmCj5QvV3sWff04bfNmxbGrYvf3rKt9Xe3tGvjed1j7lp2psP8OAhm6F7z50c3n3QCo75vkEqc2aCsN+DFF8c2O7d9QCW5kjl63jlyWPklcPvL7r9I7bJ4y9Hn4xf28WZ1DVkOI1yW/6fcVtDvvcikXnuaXpNVz6lHfii/GV5EGxMzc9SDH0Epusv7TuxenJht2W27oOUnxwfZrEt5wPV8+8mua1bXtbUq9xC3/subzM+HH49tC6oCffjgjd944WjRy+vdiheu5Ii/z4NmuVdZ9zSy5Nd9ry1WxPyJrDAfqHNu1sPXO8RTbhXWFa0/vGWwIdU6Omb17mqh57d69qsZKQXVWVL2c2eIXFhf4WUlvV7sgsrhCusfHpqrFs24DI4ixB8eZz3Tc1qa5Trvhc3OAWOe/OuWj7k98n+UzdaXhMea/lnLM/fkZl5c2eFu82YE67pl5XI9magXZB7997G/mcTdadeMvz/qOsnEmLn7VnCYVMlAy/ltWg+bzlsc/Q+IVVvSan/Krr1+SWdOFu+orIWsUdPmlzloikpuTFyGX0P9aaoe7bEat1qXHCkjvxMW5br+SPSEw4n/B4/9Y9uSY1MR42+7TzXHe8Lf6QumiEqvc6x5yk6pBwqdSKxJJf7dXVpfaf0ksPvUzae3Li/odRZ7tuUAlKqc1YlGPfMizO+bhy900GS4du+6lRrFvbw0bO4UfQha8eR48nfpdzv35e5kXrscaP4WstN83S2F7fp1JpfWykkMzk0jHSw0y3W9xZ6LhpadruURILE5rN+618Oq5pQGiKsPvIe93sW8Mmh3sPVfmy4pVItsa+K+Kvp29ovmp72Wvm5yFvRn29orJvzllPBwtNrxe5B7uHrRbyCbuX9L1qmP0zPfWLE5fJDPuV8OB9oZylScmjfQl9s+fNObR4R8uQ2Ibctx6x7UE+Txx/ynd3coowVogXGX3X5f6QDzalJYvLlyp3PgwarnzqdePI9s5mvVhnU+WLS+dVLG3YFtWj8E7kzLeLXPrruly+nOAY2RLVJVe6sWZG++xwB5HwBStnHs97cbU083uWfcF8Zb+ZUx/H5Rh9PBO9f806s9Zu1oEl752TcnY6+CV1n3HbNmTN9DE3K5Xdlis9lV7r2pnpOcqzTfuF+tPQU17HDrZJhsqUuzocWbBdSGW6f/ga9SmiA8x9beMk9sWfDniz40no1UuJMdVqgVWLN4zdHDDLZPHjH886ewky2kdb7GyZdrhCrjS4S5Gt8HM7+1jbpLYt5yQ+n+lYeLKrb4bDusS7+p866vZsD9TwDlo8UMGoNaExInednPOck6PljT181r902zezSmFPnvrGqFkrxT71Gv0xVcXO3HqZ5uIJq7eoTz0kWldkIftG8X6OUuzSPb+evJh90am3+rT6Zp/48UdnD4pzGPV+UtXYZr3CNW6Bp5Wa/w8/vgAAAP8CU9E93R+/Uhik3jww5/wAV+E/z/+7/O7/8/zfXkggeDJjXoNIYf3GW7L+cWVa1aM86iQ0RM5ILbfqrzpJ5ev9mZf7TIoUE94/UenXodolb6+O19+/IjuvJje40dhxSvmObjkJ8p2ZO4c6npScON57quH02JxA1ZIVY1rmNbZN2J3dR2pC8PSWfeu85b+8lHsyynzEwfzF04LqTK7IHb4teaxYSWpQ3+CxEXuOpSdaH/MbZC5zYmhnc8nH3NFqJjd33GuNHbLeZeCQcb3brAsfm8y59XjjVMf6Hn0to797nh8/x9xthluVg1jg1YHHUkvmt31o9wysa38n8aaysHdEcd2ycxLvZKReJP3a9WtJtcpp+xtf9shaPts7N8frdHPOxJxqjdUKMRPtxGP2ekyqKH5zYMr8E2qSYWK1C5dIS60PFl+UMTsiwyrgpXNQ28Wn8yqzFZqUFa/KLxqV3l0lpG2Wrs6GSYdLQhIUUp4/v1yYbzZLVudXeXCu0rvj+i+9nX+kNAQpXkoMzRRf32nsPu1ww7mqdU8WXBox8mrlMqcc06ubA9anfqyyqt//9lHN9cwbKza0daxTlyqxaI/bnz7PZYq7WPfaR308XoT239Drq4GlnqDzXkrR5nV9bg3w1KiPjZmf+vNnWPaiovgci8hr92qKOrTcRM8mCY395fw5eZeNrrq7bWuZRdLT81drilY0xlQtNIvYJXq9rGV4VV/5HNMp2XJHm4rTFQ+F7aj/rr9tmuqp8pemy5QOrX31yjw1besv/5iMhwdTMneWXT4yrMthZcuxI/qpZehqd8mUcO1WGP0jvLaH+Mmbn1+Hj1aJve554dFMIVE/henXVrkMiCqJrrprrzg6ckOz+zN9x7fXTexT100ZN3bfYsF15XVza1ZHFwcMn9vX7IHXeosCV3mfK1tHuXbMt4gU6xr8cMhyh626u9atc55u7j5dLF+vV+XDx5c2t553nSe69aH+96NdvPu9WVig3jbV08W45w4r9S8jRz7r1n9FZvvuH9rFihtVtO4lFMz8FOQ7u6pY+YqV5/1uG3t6xn/T8XxnucDddbx+9shllgrj7952yhr8qD5r9VkteV/HxUM+S6ulvbldkTt/tK3IqIvf1+9TCy7s86194qUzVdfPH5/v5FwQ7Tkqe8nJd26B3cO9bCOGhgYk2XwabTwkeODtW1f75m+LWDmvpmfdwWkOoxt3Dsu+Mq5k+aHIH6PidUuMj35MTbpwXrnuzklV/1cjhe2CA84mOFv9ej1X52y/c8F9vW2bzKd4lq8W0pV9bp0+tKhEyeXyhw/essqNd17fjVlV9eDaUMsLLaHhI7rmfP4YVO/4SbAtu9uOptLA5nRFterO24fqO++kzO84eqZ9zj1hmcFFNo+Xv8899aPlwaFd9wy8D7a97J72Lr3Qx3Lj2APWD/tde/n+mtCMN6vC99qEDSvuv+f+kZysmW9qRluXGuqOvNshF5D75KfX8ys91vdd5L23+InLTM1PWTfVmnQyRzmlxy3JCoy7Wrt6hbbtHgmfnDKVzRoxv+SGRZnYPOt1OWNG4eCj4aPse15Um1Jf8speQ2FJQKu+8DvrrPGDmtf4Jh55Nmq1tdh6vfw+68P1TBdUZvW4s7VLTN7o6g2H/Yeuej5kel54ifY4Z6FhFzqH/pxx1P/4oC82Beqj3xx5otVyLTJPZ5zJkpKz3wc5a2y1NKhYFDdxk5Wk9Ej9s08dzS3Ob9nTK/rBQq3hXh7TQtbdaZr0euNG4zGyHT+kf8w6vSli4P1fLbbTfEc3yCrcO9vL7M1ZbZ19P15sP1Xb5UaOclbOUfULJYlXAk7dGrE1JGOKRdLCl/kS5Vate2ZMqRhQrm6rcHe9//Sbd4eqm9uXSodb3b8W81Tb5HX1iObLe/cJnZ4j/v7k5NtXd01w358lefXMhbk6EdGp8geemTrNzknYslx34fSQ1ZKZPhZuFXWFxwTatVmtF5rsLqYcP5zaN17syfR6C+PnBx/ua4mIj2ktTnceedNxhllhlOwJj6M2Gj9VjsTmjGzpdU524wdNO12B7wqDFW7fFtyL/Rr73XDZHYmnbpa7BM81kvf09jBwfKh9YYuxkVz9hBXZW4v0X7jeWWpRLbRrtaXW24QGJQ1JY5PqKNW1r2JPmW7TKciunzB1YeCluCt+AwcZ2PUs9dkx8VFU0tTb06WfLotwc/0xq+3gFe9tK60OS3/pWWTxdEVmi9Kb8ttPdqcc7pF1uiC2YV/vszvbxL0GRdkpNG06vjetYMyzb8VT7rsuL1neuWR60FSZDzc3Zd0NC1xeHtkgnvB1rt4Q4f35Cy/rf15/xnVoZNZS6fA5vyKUMg+oRTuIXuzysnKdXY9JL/J6HDRUW3u1Y4DraM0up4tebj7VO3z8osPdVXwvRcu6ni0ZcaI638Vt1YWWyqhhl01XROm92f9W2fBVxMi6wu+q6xeft3bSHd8a823us9mHJXVX9Ht8eL/Fkat3zxbohBmNO2End/rtZo0eWU2Wy46Eud1vCtlb4fDV46bGudy0X8NcZll9NzjifdhnqH2PtAuHbec4jGyXym3ySV5V4Xn81DFXG+cNFiIiovkRPWYGLPy+WrtSZvLwJJfR+wPrLBuGH9o1/+70105zg6LOt8Z/jA6MSwvf/9NtwEv9ijv7zDyiA+eXbw3RNvlyYfsAm/xrPUoePW1tilZtN5VWNbNKXpkmIpQXesm2bbsgsyhxz67mCfq59jGXv0lWLvSb/XrmtgTZjhED5DoGV/jLT0lXfnl1jJvNiLLpM6NuvA94cihTcFL9ab/ILlfXrT4Xu6V7aEHg8qrlu3VjrFpcUm4diVRtPrJsgYRi+fVdk7VUJt8LqE3RsRmdvWy1WXDOtgWjnyl4C9ts0Z15s8J7tiDIuVt3qT6jzvpZ3Nbp5/vqQ36XY/GpJ4XlYo+XOZdevK/lWTX2xd0Roteepr/Tnz5+yeJxFq8n382JKfHXXv2jdavoSqM2td1bVNQbVlefrLvUxyXfZKnc2eQP38Q05G9HWJ936nb8oZnuzbyUQToDPu0qlddo6+q7VXev12tvn+Q14q01j/Zqtl6vrIqM3VOtst42eljL/ivH2u/ukDj2qffmur7H9GJWhEutTZUY2WuX3myp1GPeO/v+qvhW0/FlXvuq81fuyJSu+Sld5d24caNGmUycSbtJ8/Gzx3M7hRaOdu/xruj8vGrtxoRFIQu0cruoOfYJ7xxYq9857LnI5S4/llSqyTmtXOk4bewFvyblZZdb/DMUv665+Lzgp/uhwhN2My5lHoz4Uvv5R71v8qSFOztPdxk9rf3R8jPXuzf88hkvo24qmZh9wC0s4dD3jqolO0arDCpYvtjnlXjWiwybbzlH3DS0Ri2Kc4jQn6/bMWLLpdjSgOljZENbnBe5aGtErhIt/3ZBOmbl1Vkidg/izZYdM/nYMKRL0fFt87ePnn2xp0GQyFBJuYRvib+q9zv6nczaZB26YfWzHo9bFPa6HL50bpLmTncpx+UR944WWLrEWdo1frAv6n5vU1V5qPPssIqRQy3LP9gtKTzdSzAl9KhIYs/5N799tclITDjQNlJh//ixsnJjRhgYX0/+mOc4fu/3kOq9DePHnU5xPtGS/ilsw1lFlVHpFVk3rW73NvJ5ZBWlZnwrKKrcWl5y4UpxB9FGnefiHXlz+p+c+qmx3XTDzfPhDlNXn9cUqWt/8vGc6lDlm2kjROpfpYaoTfUc2tYrzK2sKVJ47O4LRXJR23qPs236nN8rMGDwh7p1b7teGCqb9DgtJz0xynashZn4gPTZZz5ti1syoG1p+aKyBWqhXd4Z+AYOn2mveM/y5ayzWq+lZp5/6eehZnTSWcxFtuPyJaPhdWoyrpMutwZYazllbStVGpC4p8+VTdmXZyvPy5y0I7GkNK1hXW83U9XyToFx+NSW248yyqT0XH7tWGkcKuH44KWfxNFd8W+Ddql9Hdwct9nZR6u14fy9fV8jLraPa7gt7HA3On1G7IrFZ9/bKK7d3f2jQcq59wUfGzUHbUi5vsHx9YLJH3rM8p+RK1biOGJJQcagMqOkt/WvasryNy01eXBEaUDaML9HGSIPHylIH1gU1G+Sw//h234AEBRVnylLGvB6VuOxloQpXSJ7/Nn/i/3u/7f9v6pAIPgsEAiMYhNe3O4qlOswbN3nkoIhbUZaRccejnPe6yAkOktQlr3AKKLC8fUbp8mFIzedfJrz46Vu/uOELsdem0ZHhK5ef+3SFs3ktDOmNz5UWT/Jdendc06lj7TEq19O1ouz+k0Sc3pfId5L13vL5hMzZo8c8cwj1XxqyzPl6YNyigRBNxXnS+WodWZun7c5xWaMhfgAy6iKH3E3xs4qqwlMGdghOa96j4K9nrD0zMk7tdfZbLYpmtXsnXLt8PO3lwQndT8dm9IwM8umf5RXX8PdJzLah0c9NO1uff7mkc8/Dgw2Fve6m3Ht1v7Gqggnj+G3uoYMX/XrmeeIz5XX9SbtWT09OfC5+2rhpGN7tg58o94/rryw35fE3WWK2T2XP5kulXV5WsG23uWXPTcZPhoXbP+jm2u+6+tLc98MsH01Z0RwvmHqHbERq9ISAgv6D14XMzsrcrtH47VxNo11l0MKJnnqLj9uW9PaO0VOdbm2tbqd+s5fCzI/hz5++qPo0ulLlee3j24+eXiLotKhWQPHHJqW9uHIkqTFNwOab4mEetRXrghc2yS38fHK/IkKX6SXq+qLiMXHeWSfcXM8KnVi6orK7REfvjt/jGze+u1N4tg7nuN3bhuiYCgpE9c7QPOCnFTNkdfT+uzWExKXvHKz1kPebMuJ+UatDVfu67jufyM8c/n60i02QUqDnXU1yss29Kq+q12edNv9pFD5kPni1qqGKqc/WHu0Dzg3rlSk8V3Fh3cKzrobxWUf1a2qPpwjWKZfOLEz8lbWyrprRe+UlncdIFMVcqute1hJwfK3e/WdV89t76e3Q0Qq02/jgGeJfaof6xeLdG+uGG+yP+Z2gEa9e9bomspNSsaeGStVx+iskfEuXXJxz5W80Mwy86bVVVKTZQa6P0oQc3dqcq3dHFFQ3bQztsO3UPAzX/dN/nctNVfzAVHSGuNWvD31IGzO4SkKOgO8ouxio+JUF/TxNBLfFmypnh5ck7CvbfZ893E7Rw+IOf32rMNjq2dPkj4eFI179WbxjzzPO6Krd92rWZZQc7+3z547tn7utfPsVi4+0OWD3A2l2DGGFq4/rvtEnDLb6LpZTj42pa/pmRMb2+3CUotmjFEdelfK89rcNQfW/oj28+uRnmcyvs+Uiw53ptYbBPXUzTCTKPu2qatPeVl+dNrOV6UP+yRItM0xCBgd7F9oPEY0a87UYU/lT32sCk6rvi8u7V4z0ty44b5q4gtp01bVGRZlq2cu7tcZeUYm6tnTN0/KRq7ZPr/6XGJv0SuDvOc0+u7e3VSslTy576vr7484H5rt8c6zwiTW9qFo6j05syKbQa+sBsTcHW561fmF1onO8R07FaLvCJQGbPEyGD/zeXbZ/cMTdl1YXyB/WmNzr8A+sekjt399NH+1y2W/462PXF23HlXzmvXg4SiRbJGEAnfxgFSjaemP1x3vuaa/3A3Tyk1jbdKO1/Y8mB8695lcs017n4HSyoVL2xt2HOm1xb3fCJ0BAXe6nO1SmW8uoXDgrFKcffqWFWbKe3WTLD6vubprwdLXkXIDsyZ4n4xZYnY3qS7o4fmzyYqh8oPkBi7+cvh4Tu3jfZ/nmAlkAtWPFoluNSmeLOs9WSnXetRPbc+8lwkR69dkafaYZue0/PLE1x2xOq+HCH2TWDzGaN6tFaVPhV3Tbdc2BHmO1CvfZrRINdbp0wj3ies2O+sdUN2t3jFDVLHtZfDhcT0/TJp7bua8VE2HiT71ZifizzVLj32kfcYr4/zPw9cl52ktNX3a5WOMafX5oaNNYsMfTPnVrjV+n0la+J7ihXM9Um0T991tM0xQd5ap8Ehdfrer5NuFbpL9exzsNWzQiKE9Rn5P8nqQqzbl2eLMKwcdln6cufbw+25tfRTUzy39KrfZw0B75VTp18Ms7k09q6Wceq7P2k13QqZ/SZX+KdRz04mS1XZblXNvpTRGyW77WHlp1/5M814fRjaHFOofjs6JqTl/7kZqVPLHlZdKGiob+y43WCC2WvWibMWjVWHprqeXjLvU9dTbgPXuWpnqmhHGsf3HPUz9LBV/6cuqTWkp0RmlFxYkDz+a/DRAxlLq8uzK+AODdBe7SHnuNlRtKjqx3neUddf6NFHNzWahG18MvlQ3s7/9tO4VOktVtG4amow3bdToNemjkqnziQkLgh7cWLWqrpe4Ut/S5qdeCRM9ZtS+PbDtjfae3NHi1631N+qJL5jZ+7LAo05sbUqqZu8kXT3F0Gv1g1rCpXyTSoXHnxlQ+Wtz7Lxc3aazRzzXSUwbuWiV6+CnzgXF247181+7NV3hlFWG1b2q+GK1u2Pe7jgwcfGcnrsSNo4uX7B2nvnX/x87fx6N1fv3jf+nWRRRpgiZKsmsJDKFIqRImZIhQ8icIfOUoaTMY4ZkKBkzJ0JCyJhCqIyRyJz81nXd7/c1fNZ9r+u+/vh9P/e11vOx1rle63W+9j72PtY+1t77cKBWwznMU45rtfL50N4J8/ozb3WI13+IT28Zf67LG/3d8LSSaTg6u/5m5BH6Mj9X5uCkGGoRRwOqhBRxN4mQSEvWKubrOqNEm+r11OzV3q3GAzoq4yRWn1IKU5I1Ltk2DzbynK486tFW1kb+e1hPdatUTurxME14uALjh1fcjMLXTR13PbK/Y+o98L0hT6NcWoJE0EjS/LjVib54+Zjm8J762AdHdkxsPd2iadnyDk2O6A1yInp0LNTCZdk0i2FvrfX5hvfXzw15Xm6r669RlegIM1XtvjMzRTyo97Jws2voUYC2e/0WB4N24NuRxMNuM/v36gRrPn5+q8tSJv4zafaY+zWDw3Vt91JZk18xvBimVjciFbNZCJY8f/gXyz/59QEAAAD+B7pKHzk/2+7hr800cmD0/Yrv3/N/ir/qf8//FwkEwrmc+yc46wePnej8YxS6e43c3vD43DDvVf4ywS2yYFKr9cjiEimZ0e3o1Qky19PfFWLS9vcmH1lPaN00niXje/l9s0bg2vC+G2123i8+bHs+XS1x2XibI1guSsyiV59Z88SpeCe72MeTp78X1cvaGi+9P3IjmMnkUuDoeersd/ZWFodv+p/sDwk35qAxzZS4Idw2GhecGFKaK7c1opkhL8tqTfem0PT3HU+qJ2W/j+jYLn++0NqhtGPu60Rc1F1pvtqHTr8UvevPchztzrw/LninaebAEa92ryOjigTH9Tu3p1jmJTb1/lw/dYnygkLNRkeM1yXtY86mAV7crv7awkelvo22b5YHnHTpjvl51mL/xbPxDNIx5QkuSWS3YmYXjIRWqA7myBgbZlcll+z/lVx4fV8hh/9xheZy3VN7fM40jsWzRjjsHyMSLqkl2rGgcj6vr23bh5GmeyFmhHk/kejJuj3bmYsHM14ytT2a9+eJqn2tThY92KJ3npi3nlH8AIX+qY2wha3B96MjUjd5aodYwwSMVujfPpZtlEm5uXt6y267inf9leYCtcPPN3budvQJTQbcDiRVs6EHNFXPjKyeofhEEhz+dqWDJEbBvt1ChkHdsTef4KZFPxV/3G2Do4rgHBdz6OK9+eTGuV7dt3bhdx6lZF1TXdJp8ym67MvqGvNxukg4yfFiwe2shJXlT0STBo+Er8/99O4NeWYWbPVHOsExhH/rzbflyk/vP3zMl79FGmHpfkSF/cq3w/kcfgclCJ/DWKk0M9ay7vH/Yul4r2/zjVPoXvP0A7IXb50DnqoMdpbVxkiWlu1KPh99+55DSjSfniHNmEF0fZZHeghNvVsR9YWN+IQ+VfPygHOTorb+28qtb3x/rbI4N8be81hvvkHS4HHx8MU7p7Q6bqj5UT1sOrc89erF+z5fHolOhoRsQ9Hju/2y3aPfXUqkiN9DV69quN5OfDjdZ2+8+l6uklzH8Xcht48xfTxKds/mNKHWKEqtxuXb5xiysAm1Pxa+VnNSXQPjpI6qKedLwlNJdz9YjntPOmbxRO9CEH/VkgjXml2XCUMF5+HLOUR1a/qLU9KanO3D3K8Y53dR0h6rZbd3/0Zy+8xetdqQec3p10oz/Wfv2Sy4Sp1Y0az2mBOLrqjkKGXcfnDuN9Mc58kDpZddxMRF/LjcFHXyTlVTvXjUfjxZt9s2m8gm422nl+nlQDGhh98Nyxs4Uk1Z31mkn3nzUUicxt8zf2Kl0dZevig2T98vnnLyU75UbfvlLtloTR36y/u/Ctq2iR92mt/bLNXzg2fvwx2WLW8918zcGD2mMloTG8+fFTyT8c1Wc2Ss4sSPB0eu0bamme7Z86g7kPPEi2+jN21txXNU5J/XnmAM6ZPrJSdWmp6S83Gsit0ray/JvipT5fl4n4/lw7WDObkLqrGiXmfubwoVW55o2OE9M3B4xUnE8AJTLN8vEaIvXFQeX504zCi2Rj2l2Lli136e02/pFb50KuTqeeWUgZmyIuIpRhNaIhGjO2/UWU+X5O/09yoh5Xjd+KZy+pyS2paGeK1VCsFp/d0n5193D8rOB6e+rE+9wK5PrD74Ii9ZsYXIeywypcVu1Puw9PqF1Ce5yjernxJzbViect305uGwfsds4iVH+Caye2efjqCXcb76QJBxgsktqbld7zyK2el4NYV51KXpa5+e3kMRLOQxNvzkwMDz5mob09tvzrw12cwKEp65TCXnzzukoPS28MkV6YmjqXTWrhdMJF8JXvD4+JB5gJ+qJPhaENO4lch19uVrTnwJGpfpg1vU0q0PNoYpupWNCynk2x4p41hcPD4a9fL3uTHnXBXFPnqu2PdxHgZ1cnrOiXHnGosGladFrFy0KnrjNK6Y3XS+s5UUv5OSSLJ+Nl+f3+L11wP9ZGrvaFpadPT0jp5mDH32pY+c+rN6g6fOts9SenvoGq/F2ca58tmRPY48LX6TrUZt7VsrdD2UPmpDo4bh0qu36xb5C8UjtMQzLMxynuwyNbbZ1xSj8VlXz0khd33D93H1G5pXB30WY3Vnjlk1GO1w0L/Nr61qUZdPv85zpVhBkoNXzLVUKGCsdyuz/sOSJ5MN4w1XAU0dmaLW50VuTor5Xi8a97QkBlK9kE1knO9gF5cUcvtqakPsejz1zbMoe/Ufz56JXp+MuX8hhl75Ue8C/0fhW1lcFy5R+Ck3x9n9qaykY2m1jRWoPn/p+H4y0/WbycPLj/Y9Ouv3g7z0yOXFogRLzxDmXqJD399siSp6ZnHfEbD6opdY/yW2yNHgaXZgjH7e0Yj3Uw+NuwnfBsUDScqfLE0Lt2Uqfme7N7qPf+6P2cWfmpLuMS+Zm0PCbj3gVzB97Vf+0f3Q0rC5csfLjq8dQ6XFlG/8x05W0xuzHOAU4p1Xvup6wUB0W/qd1q9FrtSfqUfevvNeqz/O3zlikFzuTzVu+c55uZhC93GBxPp6znR6eeBGdb1bSF6fI+eT6nXtSs6IGA7nY1+6NAakko7vPifZefA4b52Mltf0lsDGcVN3T+Kulr7Kd/Vjzi9dCYSPqs59XuafSjs+5jSvFvk2buUycN9f8XhN4fGpqVd8KsBC5xRJIfuxUZoLk1+I8l/4vLPW5KCnipS98tohNNg0QKXn2Iuf3s8MjDhMHHceG65q2TT8J79GAAAAwP8gLue+6ww5N4vqGWdY+p99V/f3/J/yr/rf8//XBAJhmK1dIfur1suY2mNqwl+PaXuavLGPfCH7SS2Y9si143GWjvFejfd1WQ9o7jLPUPuktXpVk1DH8HrW7f344QGhoC8eAeIRrmT3ZOc8DjvPF7AINEba/14xuB4z8naldl3Jtp73/RVP2ZuOKcesw8QS79rnnh58pcLm80YptSVz1o7HaHmt+yCJVHe2d8GhP3cbZKdLl4u/L0j+3NswSZ7IzOziWapV8VpcucH0ERHf6icz7zoD6xIxpjt8R856zTK1Vdwe36wV9/kRGxhnFkN6UjLT0fKyoZdl4LMjYso9V0OKElK7h3kIuxPbr2nfCyffaNwV2iySdPL5VbrXPkXqQfO7r7pKTwc6G3l1OFQ+Iz4k3RmirPPq04K36UvaWfWKQW/uF59rkq/O21DtvLXdETxA974p03RphaDWsrBPK5h4zNztUU+ucpOquDrRNHltf1ZYmERh4FKgMbWvB/dPrq/+QQo6VAs9P0lsxEdSF26nisz2tKYl3UztvXOy5QtpR417XrDJVYtnV89HdO39mCOWqB8XX6qf+tU8K2+2+a05p2Xn+G2/AbYYuyHHXp9s6i3l1mfyoqbjOQ8W/HfaqsyfPTLwXPe2vmDQIPU9M6999rN1RgKRgZbXhYqUj59QLniQYqvEqLd+/MuyDm/+brmdLfSm8ccM59Pjr2nctxQVTTqbo0e3cCpheSTD9PahPaKvFw30sij3XCOdLGT8EXA2/QpXxNaGeO3czPlL5AHeOTEcGWnefdzyaUw/s54w17jtamF5JXGzmHGA/uTLfrHSNsbzxbefS33+wGlTd310u+6JN1+mY2WrO7WhDrFIgYzmrpCWM8qXPJRiNt4wun/9djN2bFycgv/gnBbB5fDbqFR919Rk5c3rJMy0FneuhNfcD58fsGbh+GDGqvyyddPvnHd9TQQJkZJhF/fUyK0Niu464RXzqWT+V1kafgM8e8cIH0JS3fVXgm5QhixySCZ6c5bxPv2TuIcgvf458ODY4XKTegM9c50ihXeer4e9BUi2RVptV4qtBm1D5u98IPp+5LTrs+7yagt7laIw/ay1n3naM/GhOY4DXmO6bcyZjZ6jWVf8jwurTrd+aO8a6w+Vpj+YzKS9Un3C4xfJlAS3bhRn9NEl/3tSIu9v1jk2Fcq/0F5rK5SXoHq9zpfYKuob1vs4pU6XTpHs2UBh8EYb+c29UWwHx36O8ncEuV/bWD//lDJ8QKrrBW0aHQ/LI8HhMp1ihUO0Y7J6Zkw8DX++VWb1FD1ZdSBSjd4trjf7S+tFUuad3Sm+pJ4nxijlwyZFQvUW3pZUxEhb36DZ8eK52EXjoMrIR1eIVjjn0+IWXZyfdwotCqrtyx6VF+ZoztWtf/fnLV/jAaYXY+vFmn9sLRrF95VJiO6cqW14KZdGzbmi80KF+teWy8qEitbxaG75vux9PYUb4aYCj76U7aTiqVm3Kuv3cBP6ynZahPXyKjsZzy4zD16WbFLOu5ZfGnQ65tuZyr9e/TnlE15xSnf41WZb3UiugUCEns/paXfR/tA4j2IBiui7H13kK7hbY5tGmnLdI/uik7UD/XdvGN8+3b3wTZP41OeLvj5qZZ2tRX23yhhDEpYPs8iZOVE4JvcavrQ7Ohh4y9dQvzZfb8/WE6E+Jr5xYxd+f0VHkZPSd4n1Pie99vbsLqiru+WvYbqQzlZ34lDlaaqvElkvMho22A1NmYU3ZMYTlYOHbGOUJ14PaESlHJYbeypcN5HewKpHWTjvor+kv+ZuE13Vc/eW8qct9f5EH9IxVa7JPRf1BAy/nzLS2SNPZK6+8uRTEjV3+7fBSuGH2SU/x23ULc6v90Ts5vbP+zKb8pXz2PBMhP2zTrIzTENTsVqa5DS0d9VlTy0vlQsUtFiVz/46p6DUrhMtJGn8MaJDxdL4dztRYlXwYBtpoX98TFV5l/ubXXl5EQ2WCRxbapJDWk3rcZ6njkhd5PJmv86Zza/LGbaLz+EWhdcTuY+H1SWKm4zLyON87ey29qtvBtBIx57e7j5/I/VkAdsftnulLtmy5lkyu4ZSzbi0Kkco/Af0mouTyiid9Kb+iL6+YxdorBUtSUhvtLiTkKBrvCEQ2+PzjcJ16Jav+5sXmi0jkw5B1vtfrex6lfCK5bcgjfbACP4eHAAAAOD/cYOLkTKKBF6ai7cJyWwJLHx/z/93/FX/j/P/4u8JZArTTuykc6qXjdWIA4i+Cle/6nK+/1WLpynoQ4KPS9dob/ROGY6rgvYbIrt+sZvpPgqz5x875XEmmKEn2SSzUt3GbF6OrodrvyfD6JGzH8wMDkYd3c57W6iQRlIj9OV89k654VjnA63vAxwtH91jluwdeL92lqR8W3K56E9QQLfjEd8qQqXoQfOLlTdcP7Pf4tis2Xmi91jKL7tS4epbunqSjlTpL1bsGJONrVSmRT+0pll/JbpVyScT/fvoL47tK8MmOm5H35OzM4n3p2/2b24KLkRO5c8TPhipnp/Q8OSgngh8HtP53EpMes/dUk0uV9I97cpmn5yuFXjuY2OUsztUUtEt+vzyY+pUfmNqoqwypyXtT9/eZnO7/hF66ukRlsVsIDYxrio3122eyLWD3cmlrbzotTvxn53HHfXUrxCfeMbHTZXR2NKVWdErmWbDvU/5YZ6P4hk2+5dZCvddx3xvmM6SmD+2JjqpnZB8YKqKclLmbqmjZ3k5S6b6JvVyOZs2ddTA9bwQ+wxTh6fmI58kfdS6djet73tLVSosxpZA86q/ae3S9q0S1RrLFwP9Jd4XslzcLMtoA4vF94Ve+PGk69cV/kTZz58NlrpcnZhDqhmehfRlipKIial/rDUireXe+sFvGrjIkHzIW129ee2CUJHzoBsJ1w1XC9rQve6Hf2g/D7F2rr+o88qmYWMPv2eHA636TzcHqoyxe8ZaxCcWz17Zbsydy1PcpclexL5FHcIgdWpV2HP3I97VfqUP972y9xufyKFr18q7d3IjTohWLu6htN3OKD33qrVaW5eyFx8L1l8ZVx5ppLcT+lnoJW5w+8vDVwxvBhfuj1p9+dqsKDsq7GXxvC+ebsdQ8jHuxYtpiWNlDt5WAWammfo+GcuXg2XP8M5PjMenBrGcZc1OnimSY6DTFkwUK+ctqnx8czKFkifnvbn6UvY3oYfWKgcGGOc/UyUbb6ZadCVONVI+XZEibZCpmO58U9DGwnfRLiRhnU2VJmS8LbSkt9y2gaRfNFxVsDOF6lTBF84AldKlwmszVIwNL9UU9ZlLxzIebYVwtjCTmJPekG4wH8psO9SgEdQdzhz1fjbB6LLusXg9gyc9O7q/kgnkdXnwX9+7Y0t0hkQwXFIuRG7R7nNVs3eVdbup65AMbRIFef0l5WuGg6/21ck7uyckaWtzE3k9HlgO6tr8SfZkefup3pm9ctwLw5mfukjumkjpmMZp6nXd+T2z5/1FBZ/xu0/vCucHnu67bO1Swj5+1PpGd/nbCy03r1a7zJJYdY7IyA3SsoU8uzZ6tXJYi1ZBeLpf8phPx+BKZs/VTxpuv/44M00wReut3j45bWgq8CxEcUZTKHXqk8bd0G2LihedSn9+KR1eGj1tG3DB6u1823TF7qcEruB7wQOfm6rSyTrluH4ebzF4Vre42pnu+u1aKP/v4l+GJ4oPuTud+xiS9S3Tfq2gweeHwdNbt14+rJFg5ZmbDfeIYd03QCRXr8QnGWxmxeJflTzkcDTCk32FpSGOT+BAXksGA1OM5wfieAbqrKY3LdkWdHqye2tL3V4QM5z4ev7O8kT5+fsGDDodW80BjXc//tKlmjCU1zmSTn/2aw6l6W8tbbWBvInuyH0T8rTfGruavLePxwaerv58zDFK10BsOsJacIqIb6l1sm3+Io3bYm9n/S61T7ss/hweN7iuZE/3pqQv8AFlccV3Je9U1Ywq3obi49sN32QEFDjNRkmz/YQDaMbt+2f7Tx8WfiA+P8Jc7769xnon5vX7EpML+sIKpb8LSB9k0T5U1OJL3PYlfhgUcCt9z9DFqtVsoT7DFLUa5YfLtAfOXzI3Stb5qcF70b5B5wLx5xXjE10nvyomk3IuT52rc1Lj3c+oOL/EW1HBnVLjYbf/7dNnu+rDQh5mkD0SaZB//OZEY9zEo5m4mftDx28YHov98dkg0If5boDq5QOCHHmCBoZLvw/V6kZ0L79it3fS6/S6b9YvmrqSERZ5bfhcneOPgwVvLwvs5l0d0ziUNnlQ51rG9QhVisfZd3h9XRZ0tBhNZ9QEyWgoFapqumhunyTqjLsXcFM47Xx6/PvdCTaarGuaFwypRvIoistIv3zbGza5sLPkl3Z98VSHkDi5K4neFiPJUT4P0X/y4wwAAAAA/gstqwq7GG6vZgZ5P7he0Tvy4O/5P9Vf9b///18jgUAg8nPtzKc8nHXsSH72zkNH6w/dyL7numNp88xIvE19oIlJmNaY3If34X3XibYoPQK4I8bGtGJUE1voEp/f4JG14U58Heux+7G/1M6kJ269rDIMjH/OWHEd6+D2pGJ6fI5l3sdUrK74buBjzd6szNOGonGUjA1ZZxPeJLTlNt6R0mueTQvWV6v1U5lu03u/ThPqbZ1FHGp+qPkpZ/eXxh/n2J9Gk5edCYw3fxb+oGpeOG8tgWdzhJ9vnKqYTDTJnb3p6HPSMP8bcxUdugXGDE3+XFc11oJDIxTuW7SQ2Y3mHU3gdq6p+SRfcO/oftVcfdnvb1+VU14anT5MRxl+uV3tMmmVhat6VfLXAE3NdB0ti9baR++S3NQ2hvcW1PQ+GVG7TKr2UWJ80OabPNufJdL4lPgi89K+DyPZHn7DmWN9qzOGzETfb2adv+PNm97bMPBwQOb02nDe6N1XXPqkXO8eHN3Z8F2L9FqaYfh0b3M6ddoE167g6eX+b8T7Bh6+l6i9a7C8o7b8d1My+X0OXqrTfoFOl66KuH2sn5FsJxvY7gtKXNh79VFqxP7NErkNO+a+3j6NQ/etOfrLIsRL1h8E2ps9fM3JQfuJv8525qDq2UTzlNu1qtNS3B+Zh0xjTjqxdOmkFHS8KNCxC34gyLala3PytDZlubfDemHeFeterW/Dzras06ttbWpZDy123dMkxAXRJjp2V04x/SFhzlm7NeX2YojadvWrys4YuzUPnamaCAa75IrKZ6lZT3M5+puC1bSOiny3sG4zEo2m9C+89JjuFx2BJ8o+h69p5c62Idu1iqJvIrwdbzWkG8ufTyVn8TEaK/Y8OH9D9s6sAtdvPs3IXP3S/MGbLy74Bb5v3g6+/PDwRmvuO4dCiY/BgjLptMOst9+RsTfPegk5BhRMMLJvF84Qh+b+dm3p5kzNdueftPo4T/XuGFvnpsJ+h6idVmutOW5R4U+XlwjHpn5I9EqKxnY+mOtetA+SF/5mmHJneT/LQVEthVQBhX0ny1ujZRxDL2vGXtizX9apKduHSvROAMvNL5SRvWFrkRyV19eaWulLqHR6dxVckN3TStNQlNjawauV9yHq50WyapYklYv1mknHPWuX+E5QXXggtrv2iiSp7ecuuStUCaKUXhI9ekHvqho3iqfuq04/36FEsyoVWOyWcSpbRcb5Ydz8TTtLVSNb3z8V5zoJOSYU7z5d+uGxS+yNmLtvuav8nbTHCfe0CLvS64keEs4rNJSRHjzRamc64DaVGGFhqJnedFIk6oOxya6f1drcy7qvnlzJ3ZanemXS43d4ezphUmWRJumoq8julNNBjTP3Ty7wPyluPnBza4zdazNkpXZGxcd6TFzv/t7z4+PB7yIPy19YTwntbOGOuvrtXQk7k5j6z8S2r4smQcLOi/YBn5VV8lbz8irXZh+Ix0fPCnnGLMT+GH/4lo8x6EZ6Aov3wg7eF9ZCj5lEirxWd55YcbkgHeRtflWVVj986LWPzPcY4qgLk2eF9M+MVb1r+yb8nDeUOrhM0vC+k22umbCbXgp/77Dw2VGCJ2euRl5yLveZl0425i08n9r6r72+9JuzS3uAciJ1cJZtOyBQv36hmfzA6fPqyrkHFfYo5+0vPnT7Xg0Fn8XvgNONkXwcV/ifzMrq9dcc8RHtk4+JLddLSQo+elN2ef5gxBJFfbycppam3ecrAazR9efzJ6g5wtWCbtxfUz17gyqBfbXaeeKJfhkpzXmV+1qdVTv6Tr8sPW3cfWTjrlZPfb7warpmyOfG/coHRzc4RFoK26tvDa7tzltXj1yYtPtts8B54vnSqhTzAAM/t35r4vXmKwZ+CUcta90jBqoefpbmvF7k/2CQUTxJyWjh5cfvFHcNncPaRVzOS/P7NtbkH5fOvadc/8k/9NINrY0kF5LkMZ/DgQPZk52WmnQ9u6gd2Vnah9N1lV8nM53fQyctJPbJvup2S5qGSNmnynMrlt8zKxme+N+hORNCs31Zj1S72nthTqamYXbRTqQ42rCP0vbsl5yY0ZwRe1UnroaC4fyDvQUSehdvShCftrdh1qh65u6r/F098/OMjb43a+axfY93ZIwy2v6wTW2vnfCnnKO7d6VXiFivZKxkQjHmMs3Ooh7y+dzWJNt4dYZD3dVbZW07ItUHB/7JjzUAAAAA+D9QTP7Vu//WcbLuuHpp58Jfr86I0tePKf4SEB73d5Pb6fHl5Bfz2O8cnhsJqcU9Y3cl00qa1m1+mCctsz0tfDnJFWxT2BxeT1Phnp1tpf6HLn35htIB1wcPR998sUjdY5KnzxVyffIUSdjorZjwR1d6e9xcjjiQ7ybRDY3Tb9ATOVJ9jrxbNyXW48xNHtLdHN+b+Cv5lkQZe7KIS+UrdlAUapaEEuk6bSpXFjSm/DwtNUpTdGPwJI3O+zfR/Pfxe6YAAAAAAAAA/w237vF5Dl0N1/TvMiGz3dKs+Hv9n/ivOjPhf63/axETCCkiI1KBbxbPjrc40996OX/3tlZ7g9B6W2zc2+aVJ/ZUSuOXR6XLliVMLl8+O32jkONHfEd4BX81v+5730LefDKzpZnQeT+aGwK9NQLUD86pz6b73ehRszxzjj/OvqRa7JpE1AdhUdXKYqF40apzzQFLX+516IrccpXuEsocolc+d9x8vEGF2rf3gc7e+wUsDX+IFSY7voo0f+IMsbpq3H85W6EjO2Hl80RtEmO9afqoWv5aIXlka18UrUuHTkcq7c+093aL9gGUj7szJk2ujD2im7vl+XviS0nc3EPKq0KTqzktMRxrba6aJ7xpLsbRyUTvO3EpO5G4sX73u9slFgMfSgtZu03o5QgvaLVeVInuoy802fN2+sm7soz55+I/eLRmYpPSRrrrr1wLZX+rR8KuwsZ3JSZ3QeRXxrn5nReLY538tmLUTlfahBloNbl9Sz7oVNdxhqVlTYnx9s+SNxUbTLmkZ52+1ogziqbuez4jSHXAWUdYUeHbn+RJ36fqPCpp3tpLlIG0e1gPqbza/axTOyrnGZPd3ler0+yNWxOjN005JjQPtjIVyXUZvy/6cX8ttzVpaee78XWJl+pROgojEZwlqw1fToXRnqnYYF/U8ntxb6eiX0NEA1f6qdsMUpvaVix8GbmvNQad6yQWf35R03XQ7f6j+9Wzsnny4Pc8g477lyJltt39k/omBT9oDGk4SJzpvMJevkrmZ2jRyy8w7r3zsOQPGZ4Cgdu6St5N9HbkhGy/do9UymyTG6Q5TNovjol7Vpuz0LavWd8xOSD1yf2ciFT+nGnZimBEZnCMnQqJFTH1u2KT6WfavOVF/Kl3rzMbO+Rp8pQWXeHScrQ89ZG5SbF0Ie/B3dtB4kwfuaUPnDv5mTRnd75h5OuESz7dNKFqB+LCblIXcSx/luH48IXxkqbk1gEejyX9p/J2ydaVlzN0FObTm8yK/Q45DqyL+nz3Y+5NGrv7JPb8vn0shdy9oU3egcKm7deeP5wbeu8dFUT1x+H29Wzysrdi6qzUFwttq4VfnRyo26vGnZKl8Xzw0ieW0y7zgr5q7TFj0nWu/H58amr7f58mPxxpQSk7VqHYfePIPek8LYHvu77IPaPVlrQ5XsI8SHzPSEXQtIWN18a2cWdKw6KhQa7qTZrGzJqK5OZ4Fhfuphvpju5vV5cmvrfJ2jEkmKW+LXk6lFEv7Kvtudd5fZw8mzpd0oG2pnpiSLgteXcVWUqRvxWxtYz3yuL5McuWPZK2kl75P/XkCY+YeYeVXMNdZWid5vzW+m9H2c8lh8hYFx24pcCbICz6of5YURpjg1zukTS6ISc68gOCw1rdEiw0hh/FbMd91GLXUth4cncWRmc0n1Q/1zYqsPfK8m0VufzfUcYvMg8NJVhJhtcNW68Nvja8EGTOaj5XIPRVoIO1n3LU8OD+gDSBGj42kRWxveq/jYdUtZhtZC6cqzB/rvHHQ0bz4s2rE8T9VxSj2Kt4Snc+YRops/ZWCf6+UNPj9YKpps1BPvOrImW9mKW5RvnZtoOdzz+7XODbr9xbfdMktcKl9mwfq9LVxLQ7pHTP+rjlvL3PiSVvmVGrMaT3POoQYAts0vE7vcHW12PaE97JRfgU+UPwAqE9daZIj5TvsGp2c5yl4Sy55eRJr1ekVqc2RDq2GDgV/APrSdaHqXiq/d+qVX1OcH5sfjxUqUO0wI849lT14R1fv1yg5/yzWm+2fd9Gzcyoju5mFi+93WA6S3lP0GBoa31UZM/JMdKJLr9j+55SHFr7s/g8++GBLCe+mVVti3555e8MHNNHGnZov+e6XruHK2yd4VUK2SUBTw9exqRh5fN1eXQ/0s6o51TrDp7h2khKcfSqDKTskRAo/1RhRK3i0dLL6rX/pbZmWq0kUTBNvLqfU3wXj4Dz8NMQuZ7658nJ7YWHukSyjNwibWo5/e5VH1KuKDcd323FO8L5JWFl3TcgID/K6OUNFiqGvMcivYpnfTTFfh8MuMRs/vi+VZT+McewO9+9wk1VX/oclw37IJJ75i3t4GUqV7rmGlGXAzzv05eoRN2znJaLTI/QxA7fC8ml82hz1bkm3WRu7Pu5/2yNyCNHF2/WM5L5iW8yz5i+Kbxz0FvBQO6aZMlOl6bIKy3HSDjfd/S0seZ46xUIO44lR1vwt0WlT9juYiku1TJK2R0gExJ/+9J+d5XuLWa1E0O2ItTtZ7kZeCgiSeiti9JyP2+KtkfvOP/W/qRrhsoTuoVy/9SdNBpc5yftt3vOHdVQyRd9Rh5usNrtX3PjgFapOBcxZ+G+kYf8T7i0n1mMpKgcTNsen+5zPcZ2nTKI/cFZo9+6eSvSLOkDlzyL/JQPuBxeuWoiusZqEqr23UrQOjswS+Lqt67snZUTTP32x3NCP/LNqGnwLBPFa026lXpIfb82c8P76pD7tsPJlGPBbPGKip9JNng+2mw4cxlovIqhYSKa2JO/ZJRT+lKK5PTvdzbXj6555BZGSomxkbxkDf/A/JJJf1NlpbPZ9JrfdEB2mdGd9p3jSpVm1UUX5SNfuWi4UBwMrCde954asslWNxRqTP5TTG+gW+13NVr8jF6T1fqVvrWd9w9t6O0Lfn5Xccnn1fMaJamSgrE0FmoZhacabKP8v9TyzW0vGAQ//+378syTGKrT/BITW3N6boOKmZHPkgYX1U/70h1+NClWc4Fl6jPbh4bJo+58AR0vuinW1UbUXqycuavCcjNg6PhPqQMSeePcJQJPYkrtRHdc0j4hMh77um85TpjveMEVhfYdG/cf2d5vVKJkFPtSItzx1kig8Uytulqzr/Lok1s9KrWPZPdZ28ZtUB8QoTQz9E/roJu9/+ojj3R/+qTK07zp9I6oiSfkI8sWW8m77zOar/sqTOXm50RlsXM6fJfbuPcr+fer7F9uX5R2Jke2zAga6OaxcNIu99IHqs/61rB+UAvSuxqkZGFy/c2eX1VGkaofjYbfPM39dGyTztR00S4sNyjOva2VZ394Jp+AWyehRMD1wVz1cry/fqyhoW+GQUMAVeippwU/fsrJTGVMyO6IP/rd08t17BlDRWhiREOlsnDTzM88O2mtb6Xxrsp+1Wzny6PTflEvcHwNFoy0+0P8w6GHivZ01L1bh0y4RPyWOxZyfRzf0p/ZOrFbKO1+/CVObz7fgtBvktThZWlFbVZ+UdLOdm77TGX7PD7x/DmRVayReXDqiPeH55dmebIu5dNdi9m47RwTb7znmkWweG7PtuLjn9WKydsx3fn9Nt3RXGZ9OlfFVYW8/kSTBLEWaSQNyWnvFzgV9JDDbHBdzT9s1nK8U7eOn7KF/pPSTu5hwvOh/WwRU3dl71TR86et/BTZKzPNJljFc/hDmXqBYr3N2INwfn+PcJ3JuOmeit4WzYcJqe+f7tct1a/hv85q/Urr1QO5eHGaOMuEuzclQ+TzPGm3DoZ3ana8HjiSe9y/1Tdh3ifmo7yarsSOJkarJ0LFd0Y39/LVFJo9phbXEPabjqXvVKY74EoaIVB7Y6RiLvp4+1Cy+X7vQ1VdbTM7puYzIo+zJPLY/TmmM0wbwJ9e++UV2evhwy7SxxUvXqguZlh3t2aseWy65purWVKXLiam6lLfXFLZkTn1NTmVJjlZ0teL6qjcN2K9I1fq27MKBdjXJtPGosLUt7gv2SmaBhqfU5i8Z6sYoBa44yrR17f8gq+s9/G0NBVIszLzMigpOhJITrSMeT0+eqrA8JQ5cyERaxKbTj7vWTOz4gz6wHVKsrLTr6f0BIm0PEvtM3X7dn1gq8qoUe+l4yaJ++aZmebAI/nBbqE17lmLTXqUmsRSQ8T3GysTP43ruqZZ5nno1WaiPtdeeKD7pbkk1bs5KlGVmeX7pFvwb/IDH69wnhh5Zx+nR6t060G127E7O6v3S9dGkp+R/2z5sLU407Uvy6WZ2ZLplPzNW53US7KnTyr65iyWnC4ZzPAglVL8mB1DNPTnF6XdPQu9jxnRg9a2Nn4FRF9Trfmv+FRGbE2SCC0aLzRkk12ZcOlajZjM/x1zmdBgde+FzaKxdmMs3/5taXHmq0MHQ5UHnEVtXfJaX3Ze3+sWe+Lx+TOKgqeK8tgESV63TRzwM3t2zF+Ne66Oe6TDOLuXgcVR9JpXhzZLGJXHuHj/b1qXYemc/C8swnR693/W/OrR2hDTV5RYnSwSl9CfC7U7TxH3zCz3yqBp16ppt4x30i/yVN69Okmr8sefFmi03R213Zt+e3zgIEsRWbfpxPOzBxZUrTWn83uypm51f1diPPGUy36cQaerQnRf3+R2umndXaXHp/vrfxgfjVIKPffw55tUxZPqqcbbTxbEmXrGc6Xkn5UwLj8/UBsYHqpepXQyoTt+4D1r5tjWgUje6nyXxLBD58R2cYmzOSk6rEoltjw+q7h200CeqX9sd3CG9Z5oVpULXFo2852hTpfsFF5+2yffJjBXyJ0fI74YUNRR/1xrL2EyUewKnW43jdDO4zniukMHu8yr4prsjTTl8oOiorp9MtVMvv3Yz/N47W3s3Q3VkqSWYYr7IwbfRhMPzJMX/Ewq63zWmZf165Vqy4vqpo8XGjgyz7YJUlW+9PhOyF/k5Wg/rqydJVafvWIeoWJKHSujXHl8rOWjklrAQEWTTx0l+YePrxc0lZZMNO1XD2j6GB3K4E3w6nnbX0YuGJbfU+LszEr/QCLGTm52KG+o5FPbdQcj+kV9diKlX5ZpT9jOPq8WJOXYaWK0VRgSvp+532Yg0V7gsWxg6XM1N0Iil1zlgezUuQLa3hE6tpZZvsexIe1pzN77BuVcSzOGfy8Iz31U3T1yZepmmCP7Gevxrgch76wi3xikR5z79NrqXcJpci2KMe/qKrv9kbOu35qzGPxWT2h/ODDSXzdwtLcn5xFJ6XCZqtut1icFE/Z9kv4JU4FV3ZZ3KsOs0mPUvm+k0/wYUjjbFFTuNbVLLlkq0XBOfUxS/M3SLE1sJN8xxXWD6ah2noRh6/p++cmJFkeTXoPvvRRLvYf3M5IHTece2XRO1N9JsmJLFu7ieMdAuXnkQARDYJvUdO6d9vLpxabjnItSlW9mAs3Lf6l/rBKS8u+6XChnFbBWLJH5ZlLyO2tusr+UWI/Q3uCKSzlMe9PW2WNe3ks8xL/31JjxegHruWLCdxbunx1df1jvnlMotLykNn1fSZO7SiPDrKG+aQfB6sHLLQofLsuLdE9PH3yTPqwRkbmPct6Bn0lhVsbC013rKrtTlsVTp3NcO7N/WpaLhe280hK5YPlH9wtv4a43DuyRcTGm17g6KxjYKk515eyOVR2gFYumZ5n7cZZN9gJFsNQ+scsPLeX9PjU9Tz9bdD7No6tu5KeB2GJkz8HNvIBhd8Yoq88s2joOntyJX0Kor7sPlOy5fc+ZZZnC+kCC10Qv39nyTx/66Td5H1IYMR2lZE5LPkLUxkgZuGfsnLfljexav/ejOctWfqmuGxP1W/sd42OP8uZL6xDtOlKsbCxXlHgskfPUbo/+G01Muba+mc8pyQ9JENqUxeczZFuuOahx+uQxqE+rKh1l2fvHPc4+z3qs4vN9LnOHp17kvIdU+44wd94I0rnrLFQ4zKp+h5c3XNDRYXZW5GsgWwprh6VlJDPnXr4TfQ23rEwk5lip379v0pul0HcODbtH/nqw9F3bMWke3d/1dRlelz5prahPTqcKpfMcosjK82bYV8hX9WS7W8VLNOTojdEKp2NHal5Gm6WMzXk+aGabJXyfoSzalFV9WFtSn2D3ilHu+IN52ctFwge7uNjpqzgrk0TtdpucsuufpeZmqTs8dyH9AulvcqVA+uXNq5pyY9cck9vcKh+1n8sZJWf5aHXiJkW/1bsNVadzkv6P3AXkyXKz5x92hbxLqRlI2JsWLN/42lquwXmH7T3mxhvF3AkML/Rs2+wPl/JQ6n81os3xTw3hmr1UZL3MkfyL2+hdaKrhldVOVeo5NpoLd8+tCMuvW17r7Z5To6wTS3j5TO34doXPy5rqvSrO4mLxxx5QnLlJMFqhHtawXum4tWOvs3dPRyd3TqquZjVRcwf3uV9mhedirRxfqLWldPoIyMiT3CZuu6y69LCKUaLk/XoE6YdBAZHSJR/ZnJ8UToYmXdHalZdkop+s5myYt02qUpD5zblF8zfrW/IuhiR6lWV+GL44xD5f73D2TIB5AqP3aaNy9dTTDXm7lC5nnOa9sctIQDfuaf2U39j8XpVBPvO4A1e3Wh2n/Sz7GDi0vy2qbapUnre4Xxt99r6s/iNKwVtjmzLLHLOTz1PuKoYdHdv8kF8vInlBlpb453zx/MBWVIvBnEIrx9VR4Z0Zm5alV7qSFG1+DTHKioY/cTj+cNyTTOV+zT5+qwLyeCebnwW7lRgS7LrIVM5Kx0zRLDM+vL3rmG521+6jVp86b9vwPe+3ZIsSlPqp9Ww69fzVmzFNhXuYJbUz7pxTpa5NOC8vTq/V9D4kaHL65Y/DQZX6U33aFI7eHvqTHZ+kO3P7TfSCmhroArqvKv+Tf3wGAAAAAADwP0Z/z+Qxp8ywF0qqkU9TH8c/+3v9n+Sv+t/r/+EEAuFo9nmaHTVcRxR7P+TUGF+63Wy/3Mb+Lo0ytyiupjV8W32gf/32yR9Xg+gNCkVEhqKEDtcmWy8nrbEe6p3+0lgwMkveE1HsOp/6Ozz3896PT7uY27sr33pSvBX0dPWRvU0n5/Sj+/SjNcb4xS7now8HFRmN0v7oOyreWLq40/jYs27aOVad4PdLMzWxpZMGIbx50VMsuuVRlpsFny5e73h5dl3Z3a/gFVmr08LTZCaFuJWJiqF3ZZdrNGN7OZ9dOSbac4q9cU36RVrD5OJeARI9sap9ZszPG9afsR1MkxTaOPhulJr8l5Opbnogl7Lc/kTzMzFvhChduu9fdPhNStt9/YP+SX5SXkJZkdHk1RAJOy8exuJ2VwfpUHmuNV3Ld2/jauOj2IlMNA7/NqeNPknFUpYg6mI4tCjRoMD2hOyP9gOyVb2AyzICHoFL+f0tD844KLWzyGsPPoo7Yn+YiOxCMm2GyUih8nZSQFJi7nEyHo7S0ZPLAeZW/XpSs2mRWff5gm7EaGlZ8r7SddPRSxphTQ26mBzfwxlv2GLfeFmzNG47Pli4SjQsyZzp8pSvc18e4winvCHpqWuP381mJRr+ka2+ykcwLdh160U8M+tO+59W1Q5mJndiPqoWqpJ3kPhSUPnTZSuMxxN3T7F7e8pb0BNfP5joMkssN/j8wWf3pwIzxGrJc/SrDYx+QtH+74M6LxRfol3ofOGgyl0l9iygmp/pqa3vp2xtk+5O0SeqB0kE2/1upnPS6VatiXAdKJqpoIz/Xd/rFKXoE5S90S74ZMyMW+PW0uvE+atGvgZ/Bj5QtzbQ85skqWrdjYmkLyi3oDRtfcau+IShkbJq+Ajf6AbFwalQrcJSJZKq/bJup660SPWQ2/iX8e3Pzr3EHHpRc7GGdM83l6QdM5354hO1IbySoRm+2oJ3dzgIXE4gSDxtE5GZW2fui3xH3hO+tXJ99kr1b/nd87Kr5JZuv3dsUK7teuOrxJdFaArX2bhyKlOlKfhrAX9gcEbOPaZ7+goSZyoVMtSqaRsf5YR9NZQ4Srb5cnGZVypnbwp5GcuZ9z1Sy+xN/IZb0hrkokcyxKS3gos8ZXc/5XPpyF/n62HzkHGQlWUUTnALO7L5I6VkxtKm3YxJrmCI93AAFYeZ92aE0/QdC/NjEvU7tKxu5C0V3mk/7kJgMSnb2mPlcvTNLu9dM4cShQPDcjuuzZzU/S20Z589yRLP2watiIrNPP2F78SO5P18QlJuEmoxc5QNgiHtpBd+qFcKatO7LL/YzzbKfnbsTfaOCIarV5LEw+8HtGaeWv3wjvi4IWm4Fx2R4JvNgIg7pix/zuXXHvn96f3TPe0OwZQFnSyEOGuHk5WNdZrl9esfAiM69wfy5ydqpFgdrT6yIrI714bs7ZH3ARr9zVb9ruYyygcK9zL/6OTZTUJw2HdUo+2Np/q+l37XHTS0jHyyLov+sLmn/KGrY8fe5HqmhbEVtqF7GruOdX+p/Dkp6r7Nd6Rk9yu/O2RDUc/6pa+mSXyln32yFbEnJlpqV90/+XYIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/ywKUuZ/jc1BTisa+5Ra/c2Xfc5U2fpl2KoodfopqUb9STd6XGKXRmHNLGpmpyldJFMyfp1BY+u/bHj3/wqH/0opCQSiZSICwfLBl+GQpjamf/mOiEAgkBDt9iUQ6IiIm+iI/qEF4Q0CgWD2b+f5n4sVy2LX/yX6hlP8p+9p/6GRf+wXgZrk7/P5T+dJcPsvewT/A1H+Nc6SeH7MWdufbbuvK6B8eJ+boe+/b0JE+R/GE4FAY/yP+xP/b9o1MbXk579h7s6s7+3gwDiTRzoQosff/Xjsi/k4R1hYJ/H87Am1rj5vRzICgbDjr8+/+Hu0Mv998L/ieQKBQPUf2pf8L/rF9X/Z/6P/h5ztr0j+V6T+L9r5u37g/3L7f0T6D5Hqv7n/f9f/7pr9/9PO/4+P97e/+0nzV6z6Kx7+b7ZD8veHiEBMRCD9t3uxDdG/jxHCf7huRAQiAtl/uI8SEYj/NSf+t5zwrznh33Oif8iJ/yEnIfuHfv3rcf8aaCT/P/brAkjKs90bfAODE4K7BHd3CRosWJDgDsE1JDgDQQeCuzsBgkPQ4AQL7sHdXYLLVu2BrXfPd7K1ld09+fb9fr+qqem+75n/XPfVzzzdV6hQ/+f1jz/3n9Y/+7Ae9GE92b/e6/8LVf5iPf6H7xE+/KO++Pg88J8f/IfI/8OD/+Nc/7uPdV38v6jlv0Pof7kH/VfrH+vN++HFiPxhLXKoGP/D77z/L3zc29Q6pNnedsX6RvuLOkItC/UhP9Tfyi/QPuGqyCGZZsX7q/wGoT/kh/5b+Qcf5U94NcKJVX+ZP+Jjfpi/lR9hb/th3e9uS/OX/Xn4sT9Bfyt/+4guo2MVu1nxs7/Kn/ExP8Lfyn8UVHvf+97LR/1l/Vk/9ifi38pfVnNdhRc5lgz+y/zAx/xIfyv/s5Cd634aGHfmX+Zv+difyH8rP0WmZSG7QzqW/sv+H/qY/8nfyr/4PvuTuPt2Lv3L67PIx/5E+1v5MZqlSRStc48Mf3XvDNX7v/sdFuDfS8wPn7FCPjz/u3Pq/1P/Mi9MiBbqPz7zRfnw9cn/m3/oPwn1L7MLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/vsq3fdhuZoqVg/J9s6dd6WX3w1VveerNmnPVTt+Ycvf15jerC2TON/l0o5NJM6U7cGTbkajJbta/2rPMgW1na36bufbYzOuuD8r5bZj6f/Qo0aT8vaMxLoV7cjj+7Thtpo/JvPD2u6Qz+k8e8UWd4yc/j5O9badJBQdsWjKo7sTm9So/PzGgbMjploGrV0quGTDlRNyjy0+cCmwf0WV0rGI3K36sKygQCMT7Z1sDAAAA/zaqvdhxLvb5i41Sp+nSPPOmp0c+zuGhP+wHBSIE4gU6hxrTPvuFCXG+y7VwfO/n797VbPry1q44C0oMLtJyYMFx4W9UiZjz2dQMB4f8knzH11umhL5TPs6fXUc1Hd4m59kBI8sWX7vvVtm0sZ6VqVYrRck246vPnpygWMSta5NsP5/5VvKY01K2vFhizp6r6+K2r3K52OPH15sU6FiizqU8u1os7TF07fZzQYnmnF7atmrbuqM+W/lqQs3H7U6+O1636OJCEzI1/z7drcs/Hzh7+vbWm1kO9prxR9S2Decdu1k90YHUZzfeKvjl9MT9O97NvvXGw7ftD/2c5GWCHE9WT0ue6cFPHRJnjpY2YYISBeK3/yxp+AYjGqc4W7BOvotP91VZ3HTw71sSzX/R+VH+S/PaR1mVrXX7p7HTRZjVe8tnQy9Werh7+tlwj/Os+LHD1EanHg4P+aJcy0/j9y49ekT6uo9e3tx6/3zxoMsrli1ZNGN/+q3zet6O3StpinHj5mYOytPtp2Z94v7xpsyZCOHjFGmWM9zw+OOWdM5xPfeBWOkutDlz/f53c9aFDsl9cteIrpffDjx6On3UJBc6RBv3sveb4LGZBv95eW3tgo1i5HuQq8T0z6vkW1+6ybSBAyYuL1b9fdxSB7PPGbk67JXUKdrNyrti6s5Kx5dGD7W8ftxLJWZXepz90IHFzfIXf11vbKqC4apPG5q2X6ZkjxqOTrU98a9fH/qjwG/1Dq69tmDwscQ/FXqe/EL5nDN3paw6O8Hwqzl/qxxtWcjPg6IWLDKhfvCFE4nCNHiedEzT1zEGr9yY9Oivi6NcqVavdeiyRWdtvF76Xbh3RXJXLZDzwbHQDdIva5EzWYHqnarFjjR56sDZvZskSrN1WsdF46eFf9tzUOquV4YWrp+x8beTgppm6VY7Sbv7Tb/cOXpAlNF9l165PnLu82NV8h389NWfCbfvK/xd6NlNrk16WKvZuaAGccLviXVn+Kny6xe0q1j8kyVhmkUN7I47ccsXWRZ+lSnV+Z7528c732NHrTF3Jtet12DK0I4z5swe9v52qeafPNid/c6x982TVApJfz7G5e5je/Xrni5o9r4op59eeNl3U8lho8bHztNh1Kxrnc+MOHLz2E+P38eOnild3TPNWpw8P3fY/pqZxpXq/sXWXSU3R2/zw9bOP2Uu/+bbJi2vdSwb6X3hu5mj/jEo6oQWd+8vexj8IGOq0VVW5f49Uf1cMze3KVTs1ILru05kmBP3wpgpZXPdGbklaZjM5zN9PSvFoGgVgtK2WXBn1O/pww+s9eX4qIGpXR7vKXiiypbc46OX2FI81N0HXdZ1epn5YPVdhxY0rxZ4UHpo/5RNDvTa+aDwo5W5Zw6vuvnzbjvv1XlXJ1+eOY/H7Ss0bPlP4Tefefdl2w4pCv58+kjGQYnH3OrU8NW7ob9d3jchdrYxlb9OWPPk8z8i3e4/pEfa0T2ad8tweMHzSrVLjB0doXjplummJ8kSZ9eOeW/z5InT/9uz3TNEWB73QrsCG7OnOXrp+NEkGcu96FW9yCfPnu0Zfebct++zLy1z5cTj5R2D544bd6l26emDo6zsHiln10aHTwVVnVSiTLKgrffihpq7td6qobvybD/V57sa0dKHu9d6W77XbytUXtSk2qhaJeKXHXb7TpkobRdPafrJL4/PZQwVu+L3Mc8U63vu+sxSzXN8kaff4ftxInb/dnXR3DHm3t2UMGPj9IeeN1zU7PCmLYd6/FzgceHOdR83v3C2wqwbu97tXFT71YxwG36pMaVbkjqrN1UcG+rLU8lyvx2db1aZXe8KnR9epOCx+qFnRbu7cmyOfllKZ8lSoWfMG9/F25p548VyCzpMmN8nUZoBn486UfHx6rEz1o++/0uNaIX77p6ebuWUhIW/X10w7/HtYUu/rt0sX+hoFxdvupbtaombY4K/DLvicMtaBa+OapY3RdtEZ//oFvR57Otpq78MlWfpxILBZ94+PpTq2oGvX9acmXDfqc3Xxv6SLrjf+cJFJxz5cfmXb3f2ud583Po3F8OViVupxaKauTPlSFX02zBnf76QYkeeoVsjjp3ccXXJUTNrl2l8oVXvkuvSzJmde9vTEp1/z3W846d3Og1PmDlbikDTcT+uf3s46b5eoy/fDGpza9LEoT/0yHuxQZMiMzdmLPxV9lu12jR5E3Hyu5I9b9faeHt2r11jy4Q9HnZJ8qZ7499tVSve8koN465PsLZfh3O/TBsc+GNQnoNHM0S6UvPnUI8jjmg5ON6RxqPjnZjedWO+wK3mh68eGPDrmj69DiYf37v5760zjI5RJErl7CMmNioYM3Tn+bNuFx/fpUPu3cv/KBc14o7Dh5aFS9lu6O7gixdi5L44Zvenpyu2LxEybXW8YUlzlOqx8PrzzlUODCxXKN+j2yv7hRvx7dXhrWI3KXI855CpFfdNjhJ6z4pJIyuGv5is8tP21a8tC9X/Ua0Uszd3vv5NzV5pSkee3mt2zO93x4qx//SeiMEv1qWqHS34i7sndx3t3DDdzo5nY95ueGPay5rDC3S4G5x+W5HAiNGhEheZsC5/7MCDpBf33X5bL1W22Rs+q59/w5Itz6+mKPJJyvTfN+g+e8KQw03OnRvRcn+TsZe21g5b8kyerI+6xEqU8Xr2X+qULDKz2oRkl3d1ztgo0bL1MyK86lTrYPlCaXJ9lm9f2drPK3ZIH2pmniyFpw7PGz7+g/41r1eZWiXxwOQ7tw0f1Pdi9G4HBs/Zduz+5Dat58U91aZgtop/dhxbO9/kdM2Of9W+8qDxVXvvThm06dm14f071s0X8c2EOS/2Jrze6X7aSevfhCp/dkSW18l/KLQvxsB+b150rDYo77b7axs0z5dn+fJVUZ/FPHGrYLJTu+ZN6Dkvx6vTLedGTjq4T2D5z2t+K/Hr86Klls3P1fnXRQuW/BH/coxiN6Yd67Dw+dVQS8tEmXD6TdFpMaK2e1LoWPpvs3UoPeni6MizxpzpOrXUpLZr02W4OXJ61B/HjsgZLe+0zTlq5Q90WXh4+N66oXtNHd+3U5pf86fOm3BLhcY33/956ejOYuOefvNV5OP17q3Ks6zDLyu6bK479/XsWJ2jf7XsUPiiiV7sG/xy2L1uka9XflJ9aaM+o9Jen34h8mdfb987IH7Zq4unpoyaevmOOsN3Xc2eK3PBDatqxa+/9FWu8EEnGp0cEnzz4TchBXPX+3Hh0tgdU+1dv3xbpa2zX7e9EzvoXKtlkzPGTR1leugXP3UN6rZu2PrcjQqfThAyPX+VFhMS5FlwsN/ZJvumfF9icvNlFUN+blO51Nsk13pFHz4oa7TnMTI0L3X5zBfTN52N+OhB2RKDk/56p/6xhLk2bN7SK3zUHSdXrsk8f1/NkPhXWyS9d7v9/FUxJlSfNS9S5SHvMtVuuzN35iQ1H+4Obn08cvbpowdVjTBxdbgr0041i77owfOj0ePH7FBk0KIb50anKRA8aVLw+UUPM9QY223AzEyBRzvbJJo55tbbR42Td1lYcn7L1j+k7Nri5ScRY4x+2L/jhUuNy4SNOXd9yePjM9w51bRW34W31/X49nDte8PPDpx0r2H6pG3vbb5aOs7WnQUSJTs2tvbp7RGKX+i8rHyiKel2Tc7Xb0zDpOO6FQhpVO7ktR6JxmS7F/lt0yjRHr+ts6jOsFVXZj1t3Kn7kL691xZYfaV4yntnztVMtq9bSIsVoYYOTrg07rsLpdrOPZq6eLatwUXjrWmQtXrjHEOjj+3yzdZ+ObpnGLTt5uk5Sy9u/y4wd2DbXxLPbnH3xcinM6euHRMnZ8bXCe98837vzLBHfjh++dnuU+9C10qWZ0D1a3n6bp508OHd4aUP/xCx0NK0JcuWq/Q+1uzCxx8/afJwQfR8zXONSVU23Mp3FQvHL56s5Se3wz8/MHHU6SMX10V/H2pHUPvgynXDLPi1ebGYSY5+dftE9tHdn0Vptz1yk8hX8t9oMOVC/yVhNsX7osHMzMnLvbybbEPFASt2FUh4Z1qoEqEbzG1Xrs7wVjVm3V22O+tXEyuPKnlzaKE2TTcWu5O34KC8p+7kPZfoZuRwKQbm+HTL9m8SLNwb5vHljDWGVBzZN93JIjfXpY93sUC1Q5PvFi31sumqKxfK37/8a/dEmy//fGP4wAXfPEqeMXhijEkZzhztsrtvpLyDPs0ZI/hxpOB3HXJkad3zz1a/Ljl0uvDiB+9bpK3ydnXhpqs/67123Iwt4bNd7jm5wtp2U57Hi1Ps1uGYy6aWW5zh0PPBVUYuzFPnYccHZUak79+/07CeR6YPObI1waBLhcc8b71iat6ku3P13LHom3Ip+qW6vD9U6idhtoTOH/Lwzsxrebvdflkz1vGjdVt1aXZ8ZM2HR29e+G1Qm1Rdely5GRQh4rzDfQ40GFag6PhiJepv69JyX+ITk/MX/fHYLwWOxrz+rP7Q4t32D7q4YWa8tgMePzk7IvnJ5iny1yzW9Xz+fY0m/9A5+rGzWTKdn7JiYqqg1blO5slV7ObzNq0iBe34h8cL4H9ijxp8U/LFrePBEecdeRju1oToH+f/cB/2gwLRAuGDsgfG5E2bMVzZ3V8+inns5KUYiRZdyjuhza/Doq2JtPr5rjaJrhzffStczW1b/uxTdkDOjb3Xtbgd6/s7jfa2SLe1YOVvk0Qp/XWaFSNfJkow93y+pMc/y3St2KXiZerWaZu18vKjQ0blqdzmxoz2havdyvjprWuBQNlm/cocTH1p3Io4KSYPi9U9/70CO/LcrjUoa5xWq74edaZ6rG2JNqcqtTZkU7iGFRav3H9wcKRQtSdl/KJhnq/HHcpRbE/hor8O/iR5s2KfXxh28kWTr9psPhloVSb2F/UXFXkaM0LdbQnjbqsbaWy30ZPP1mnS80jE9DGTRMnaZ02s1G3LPRjxNHGC7e0HP57ZYeHC1bme18zQ9/G7oU3HvdrXcViSShNaN5u2aliXi8/6xUpwdEuGiZX6Pvm8cZ7GXeLl2fZ21+iDRXLcHdjqxowJLf6sOrdcyxInG+eL3rFA/M4lbt14PeN8pyk/zurfYm+2QUVSL7ySuMOQruNr7dob+dSMZXdfb97X/+rWkNLtik4/1uByq4RlXrwMHaH802RXVlXOnrbKk1ZFV6e+2nlPpzC7QmolWxb54MXFzV8cX7Ej1e6dp550+IcvGwAAAP5/5sj+PRcGr/mxceeaLRvuedF678f5P/yH/aBAvED4oEiB4ImX8meuum9XyuhJc9S4EmvHmIntLp55VCj2rCPbBwzrVqL34+YbuobLsqFGxJA7z9c03p8xxqkBA0/dzP1+wfz4s6tOzlV8QJHinQbfK769WbGhEUIXevDdP3xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4B8QfO5c9SVN//y+Z+tCJf5cd3Vw9Zan3qw5V+10led5Bjd8kL7wnVKliyap0bx34byzns16823zmGvW1zlUusY3pdPW+G1zjj5TYh9tl3Xs7SlRVw75fMyk240G3X4bMWWDPNVyTn13NtSk+sMat1+QrdSfd38tNSfisZ9XRcrZasKgZXt2hv6l8IYvclXqMf9ayxNdui9ZlHnpxk2tQ5rtbVes78e6ggKBQPigf7Y3AAAA8O8i/9JQJRvmLrGyxt6UvRIl/mXtxzk87If9oECEQPigHIHVDcKPvfvmZaoofyT6NWq5mGdmF86wsNj8dhMztC3T9nnn2/1PVkiQLmOE07PjNZmxct6aylHbJktb6EKndVMef3+wyoJ264of2Pl5xciRyyS/PLjtN4Vmf968/P2DQ6uVSfFTgdSJoxbbO7Jxm3uNUh+4XzFq7f1nX/2Ya1bGh3WfHo75JtOf1x9/Ev1p2NLRbkaaFT7UnG7Jawa+7F25f8a8Kf8oMur1g3tfFy8Uo0vdjFnytm6T9vN5WfuN6D83fbZUi5LPa/h5yK41HUZVLvNJqEUpsh+osq3z1Exx8iXOmaltiz3jBuwoejn6ibQJzk5pFZIp5pNJXTa2SN+u2tQ1T8NveXXh5dAHlctlyfCq7E8p5q1PGulmsdszSl4J/1nf3avWhoq4ckjJW+WqfVmxxbo13QtM2BupfsOFyRf12FukZcwS33ZqFTx4UZQDE9evurb66daVE7t0zLN/x/TbX3+X+e6o4xFqnRjwLFeLPZePDum8KLjt0cLf7U+8KvmBFb8ERve8cLbVucQtUybe9fXvU5Le6b649s6nWYt9X61yyifhErevvb3V8an92q3rs3bzjb3ty1ydUyHCgC+2XEkyNmyXKqmiZv6HLx8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4XM6RgzRsRgmbs2Tinc6wqB56tr97y1Js156qdLhBm0IZX37WqeOlModdpGr0dVP/d7mpTkh2Mn7FDt+utk1wslXjJ2xzd1ze8/PLwoFAp7285+uJF+sx5hgzu0ODT/8h9Pvnk7lVRj1+eN6NN8eMbbva4XSnaV2d2Dh5Y5OCuSXfKhS83/WzcFs3jhAsu+2blg23Demf+LGTnup8Gxp35sa6gQCAQPugfbAwAAAD8Gwk+mCVXuLez81UuUGL/5r37N36cw8N+2A8KRAiEDwoTCH8tamBmUL6r9WY3vlrtWe4W9wusSffNiZeR/uHyAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/0aT9pT8/HjJmUV73+vUbfGUfY+qtzz1Zs25aqdrzm1aIWXKmjmnn2vVYk2Ua1N2jvlt+CczR+48/luZaIGcZwYXfr+hwu/PZuwsd21f3tOlY2edOTZMjLmvF43b33jsuiQPXo++ffvPHb+fXd/k53y/pDoUkqFg6Nkta8yJ0LPpgLo3S+Sc3znctYoLPg1VI32VTfOv7/hj0vbkKTItC9kd0rH0x7qCAoFAvH+2NQAAAPBvY3K0zNtW3h+W6uX3y4sUz1b07Mc5PPSH/aBAhEC8QIpA+7bDnm77uu2RkPL9660Y2SzKk7Bhj6crmWFOruvPa7VLniry+H5F1r3KEX337vTTG8bdumDXuuM1Hyxp+key+c2bDs9/826uLlEGVu74y5RXrV5UnX9jVvUakz/NOGNs2E+/2/LNnRIVM55LO/7F1K9jf9b303CPC81uFfrIsSHpCt173H/t91XKxJ99bsP4YwdeTwzOHrNvjpj1QifM9OOOavVLNsl0c0jRhbtqbalVuvx3QXNOtbzX50z4OF+tnVwm9pbxleOXrfHl6LAvi23Lmn9Uz6mbqnTdkTrVpNYF+hX8JmyH6MOyp4zYbm2WnAnffhV/4IJWYyJ2r/htwqhtRnY/PiBjzb6lHuWf8q5ztCfxnnV/1+DsnRSpivYckbtylvZDT5/adLt/0feFToaL8Lx271Gf98pz4sY//PIBAADA/y3fxBycaFzYNamHvp52sHb8llk+zv/hPuwHBaIFwgfFC0R6dfdgtY4JwlzIuC3v2d8HZ25T9UCvW3Wn13qfcmKSS9dKtmp55H7Wnc1+eJk8U962gzrkbza3SckjpUpt3zO5fM9CAyusfVVjxLGho2+Wanp8X4xEperdCZ81Z7XkISWKxZ7zvNovFapsL524+9hk+z+Pvjxs9WE7R5aq3aT185iF+oep2/X2jaKjcxQtt2HGjlwjo/ZNlLV7yuBX7w+8SPdmZJors2afvNBrZO1M4wq/GRHnVNR82ad1eLKs3dF9EYsmvL49dMtcu969q/9p0oR3xpa+/OofbjMAAAD8o2odXBcxUcu+oXOUb794ceLfvvg4/4f/sB8UiBcIHxQhsGBBwtJ5q5xPkHN4zJ+yLAze+GTMhfJ341SvtzR/zOy/x717c0j3WJPyjoiXKmT11rfpYrzZGdIyfp/oKT/fN+DsD7WnD/v6s3/4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/0RqTXrSc2y6flX3/hY6yYPc/bZXb3nqzZpz1U7P779u+oppU6ONznptWZdueZcVLN51a61oo673Wrei//A20aNkTnTv6KVm8z8ZGeFM99W1n92ZdOVVuXedTo4fEPuP08V/6hP/9fcvftubvfuNSFUXXIyxe/qZal9VfNizc7WZu5/nPTQ0X+x5mdo2e1XtVZ2nl692nfyyTdIYEfa2H9b97rY0H+sKCgQC4YP+2d4AAADAv4tev8W+2jBwecyyt89e7y3VLuPHOfzj6B0UiBAIHxQpEO27zyZMH3+wUq5y9cqULjTi0I3d2TsFN7z7bHaCuTeal6tVIvPFt8NHpuzS59b6ayMKn059c2/lU02CJ++4lWBZqboxwgaWlKsyLtB+0p7uZY8k6BItb7vgf/jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA31BzZ+/hUaKXHbdm6LXfsg8+Pbd6y1Nv1pyrdrpGzkzpW9/qtXBywbPXV16eXq35k5n1D/Udu+7PkMnlzt2o2vXMrBJPBkSrsSXlneZLMpc71PvOgAk1yy88POfV4zhTnmzItqv1nI4Nhk9aPK9xov6pHyY6vaZeqcW/1i2SM3vnxZu2Fxi8KeXxnau/ql7vRs7Z7WPGPt86ZrhlNddVeJFjyeCPdQUFAoF4/2xrAAAA4N/GyXAxKny/dWiZR7NWbdqf/sihj3N4qA/7QYEIgXiBcIE4v32zufy6DsOjhHsXacPlulNulLoVt2781lXnx60z/m7Y6JWvXo9QLuzs1NuadYy2ueGkDSn+4WMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/x+KtG1cl/Vn984csKpzj8fNjzXPe3Bmsll5x3S61qRDyJTgPyv0aBSrQ79jQzL/cKXIvK/SvGkzMNX1SteSPajZsF6g+MwxHYoV6PvgTOzqx0p2i/WwccJX68fnmBgmONL7weV3XLq0uFLPQROLvGq+fUb+Yn8WaXTubJUTsXZV6Xfn5MXoAxrHSJB2U+a7Wx/FG3sz6avB0/Nd6h66afko35bO/OzIrkhnV53Pd6nWuyYdWy16nynOsguZbz8rWK1zk6rB1yJ92/Z9+stnGnVvMK3Im09uLCnwXcE2b6Kdf5an3aY+h3qPuh7UtX7uhQdWd3g0Ne3NMImHf7nyXZpBycd1SHPgzPKFL+buar7i9pt6Va91zPvzdyM7LGtTNMuq9LfWX306dFi7RL/+kmxU1DPZY+ffPLH48WpPt9c7E/XTY+HvZQ70r1+/XcL1D1YmL3m5WcONQyM3SPIo34DUyyK1b5z3ZHDt4OlTuk7aGyfPlE2tkndtdGVv9JAIc38cMLR6n8zpct8uk6busxqhh79KNnhI3M/vRfuq3IHcPT8tPynv9icvvt5S59r0S0taln53rXO4VB1HdFucc8mQ3kFX8sZrV79u5S+XlB75OmHftKsyPYz4Y9tG5edG6t6+xtuybQvvDTN7YNM7tX/fFXVUjMeLx8Z5VzNhzgiFT6XK0SPGF9+XyJOnXL8qfxS8+tWpgVkr/HLg3eAxX9/utfLC8natG489M7lZ/ZbVqsd6EKFc/1LRltef8CbdwSs13pxZ9L5hnk+jvJ60sOi1/uVv/HQqz54KYfKkbvjsVNq9ucp+t/nAqUKFO24YlHFn0lPBKU7+GLvL9OBSs8MN2PxNuXWRhy9dXD7UmT0/Ve3wU/0mneseCzm8Zs+xAx0+jdEncateo/PliBcm3v2fbzdsNH1etYh/XErQJ03k5fcKRjy9+cbEbNUHLR+deFTHWqvT9cx5qcWtnmsqHc6XufLR9ElTFblQIeqcNuV+ytap51dFW+75eeHjjp91PPh1h99KXqmVMvlvHRMU31l3yLXZUfJsn9f4yYELkastj3gzZdW7G5b1abUpdOw1zea+m9T/bul2LaM8GzG26ZYJP3RPdLxh3mydhjb75UjcUI9nJmrxqEXC+9v+iHx99fRY6brlTPXZ2BXLYi6rdGVi+m1rF4Q+ma15uvRfpFxyYsy22RGT/ZYp2XcXLpX97l6EyGHy9U0cCNP610FjK8+P9aT9xqeHQtINyZ139LaS5Rud+Slph1l13u6omKzVvpeJrj6InKr5iqyfnTrRPXafON9Hr/4ocYQ1DUOPzPak/qSXx6v8HCPljJRxXzRtNPXnlieKVrvRNe/6bDWeLIi6sfz3MXqdvjL78yZbf+1zvUwgS+2pOc4/eBt0MGWqWF8dqnS5X6iIK/dVX7W70p6O73Nsf9X++fXmg8+vm9Sm+tBPi43tFjgbOt2ePYUSbM62sNyYWj16ty9ZNUr6M2mXLlg7otsP0bq1SJM+cGdMue5vki7Kt3VncOfTq+J2+LLHmzKxShd6GuZt/oy3N57KkLJd0RmjX2Xfkjps4jq392Tduuana9+2zD7+8sCNjwelP3fn4sRIx5rdrV66QqfPm7XeOrBuqbs/HO3So3nyrMNiDTw8vHG6cNvif/JH0xnHL4wO/X2vBOHjxWx5MNXM97/PK/HbrK2zKp5YeO5pqvfD78TOn3j9240TErVolWBZ9P33c30//9vEO3oOn/TV6pBiPe50CJtjZJnQoZLH3h6yKOmU2D8UrbUm1uvGV45HuLGi8+TFJbdfKHwx/M/vBhbIlDj//P1xFgYf/6ZR/E2l54Qu+emuCIXn1o407bssJ55l7H9weNgbV1fHf3s0w+BMKZLGXblk7eiH5/NH2t3uzazQ8zpvbl0xb9v2zUdPyB43e+penYeNP/v70v2TLszacmJP07flD15vEJx5XOoBV37739i5i64gHKBd4HSXCCLS0iAgJd2l0t2gpKQ0SndJN3+6GwFFEKSlW7pbuksJuZv7foR73nPumd92NjOzezbP1uENj5nAVzv50zzyYuIFkx+W81nGQqwrsm1mDZbmfJ2Ey4/YB+h4s5sT5JveYP31ofZub+Tw5KWnzcHBIfArfZVUlbawGWrhNjmNPHAjaPYFpdCv+AVddJvFJ0NXMQsi4imFvBhly5/3zKEo5dzIpE0oP3YUd9UDOIx66M7FGS1nNOdbDAzaVxbZjah1yeZlyYjsqbPf5Wa68O+E/pbUTnW1mHkmOX4g1PZBIbBtkODzuPd6TdfLhoTRixpVnEcB8YvC9Fsm8h85RdzC64vKZ578FQ44r0QWLG3e83pkJK2VJSasPoGrQN3IknEct4ndsqlA0NM1ht7+C61wtBzxP3J1DQ8zr68qZBtyExvdK62qDb92gibpf4wGx2UvBj0qtGJ/P0XTjveSX/kPls73OSGe1h8mVmd/GWTxcmbI5cwDuJ9YBq3leK2sxJZR0evf++L5Zja8QSRtDCwz93xspzZYVFH2IQY59khNij99rYvVyMX8a0voMosae/lctNM7agH1AF67/kA9P1rPjJ9qO2HxDrhYZPF3rq//Ia18byxsiTCfbEnfFCp58lMsc9MyhyNIzrtT1/GV+lLI+0cXCZL76UJ9CJX8JAmN6Q+Fexmxul4evc9t0qk/R1a3lk+8t92rlHvz0TZFN/JDgcCKqk3A9I1uBONfmsV3LB+pPPSj1bM/nbzCNCIikKC2fSOC34OBcnzXTckwlfaFZVMm0tlY1WNwoI4V3WQhIF/Tarx++uzRJ2/VZ/KCTVRd3Y5BfhfqT8zHmVC4HXBvXtZPudti75JIpbqyd/xZl19+gBATGvaRjmlfqrBUl0uuUzWNLBrbfhs7XJKijrrHTlt9e3qbSwNPxNwZvf6Bclbm2xuvhI1Oyxs9Xes6h5bySZ1fimmSuUNCobMcw+97Wl+MSFvhv+uUqfRWulS5bzzrymww6FIY9Dr0if3LqSpk8+E5/6eF+6HvdhvVPHWYOpPTF113QiiSWjv0z0iU5oxFUFeLnNQHuF6bLto3VE0vGSRj/d1iGO8NofN/M6PlQN39Q+ylVRh+bu3zz5PfYgqE164SWzoUJv5Y/FW0tE2tbf548JDSJ3REh166krv0/Lw8bOURfqFrvhQSgVnw4QdlJvYUGnoT4++ezLufUpnbzCaFWqlKfwuyaPDlUQq4dGegEbio5sTG7auqHh7bnj5gn8vpQIxtPFjoicxOjN5szethR/d+HFQUH2qqP/tRDjFy1jeN6SItjD7bx6439GFnSD3PnlNj6fu69E+rUhNU0zcjUUNmmpSvz0cEXvx40DbhzLlnE2FEMSjq6UNcWBgVKd8mkoD092YuOsJessCZwuZO+iD6ejOTklMg0cMUCxEpfeK2hF6T90Y/+bfkijZauKqCrkm+t05cbxbK3bTlMjUDXWIW9mf+pbCQJakrPfIhrmBi9bWtjOuvYUOdKZMtBdO7bq2+72wE8mick1MeL3QqmlGYR8c5ve8v8n2o5kpMTJ6V45UbwdxGcSV+G1iApbC9NBC3NlFs++eMl4DntDvheEulFq9u9Md+bvWrup8oQyYUzbLIK0yfvqpXHOjuiSKi78z81AmKNd78e5OWOvZOLY9TW4WvtzaUUksXCS9+XEdp9vNb9z3vyeRBPBTCxM4SjI57+5+qn83K5lNHZWRqufcGI53wDad1L0kYvjzga3HWTA381TWavkHqsnRUZZMctLvVgYhE/e1jJsGWSNcfrK2xTxsol57FpNtOoQ1nrIrXBur4rS+eTCxiR339L6DQ1kmb1luHEl9alkHgY6j2K7obPdOdNZ58+QfKN2df7jqrWNhG3R8jzjzVGl7sq7ZvpM/q+vYwmuSMggnlLeqSdKJ7LUamW0W3V0x9NmqLvLhg0yZTr5vO5a1L3uhCHeNePIP/jpb9TKgTqgdHYMt/LV+UJD9oGYsMIGBvbi9UyZC055H7MWk51bDzzLiVJwzNv+8cLZoVU3kWhhYuzoEnfXuGqJLGQE0X7qt/s8OMJrTrGICNvuFDLPfkrDSeta/V/eU479dyP24tqvL13Tueg8fvJ0hZhjPfvqs+ONX5K/iLvAat/s+EG27fXm7WO8/mGib5l13/xvQd/+hxUTTLVLGjRG5qEMSi/rRuPPcktMI1Otb8sx6YpVrcuafxWdA6a1PqDdHX2l8tj1dwNUJuhTq5LJ/bD2wRi+4Jmsn1Yud/GSZjQBcQInm1npJk+W8sMQqhbVpycvhGp53Gd/Ndt2rtI+OGNzx5BBK4Gt90Kll1HWmejFG7o6m11PF+DWx8QJv5YrrW0ACXtDBJUeM94nNRvoaK2rAfnXNfj0Obtd88WxLCQ54JfK35dl6S/o06+vf8UNHDnN3k98oMu5FN3U/jp1i3OtBbRa16n1aXdxdKaOAV2JarMDzqWzcmVL4r7i9LiV5i+DXv7SBEmfrTx4F4JJGjWqKnyOADnbm+U8V2+nIpuutLQ6o7qQcJbJP81gTOXQM+AvOZn1gQJ3n1i16KmJL25FuenNPSSaKJer5dHuw2m5J//m+2bkkufoGWXdQVy9YGzcAouypP+tqLeYUUZ6vArvm9offH2SN9C8Eax79kNGsOwrWOli985H27m7RQ3yOWT31XWuF2+UkbUPcwnwwt0v83MoHFVZNZpelbye8EX92mejjV/BtTyXS6/ssl0bXcylb3SVU3DsmeRjbltX11S+8a9n5f8+O7LHupKOff7mTZk99tNfp/79ykzlT9PvM/Ev4ao/92f8P7L8Gk8KDum7QcD9njE3pxAnl+AZN22u/P85mJ/NCYqdz2vFkfVjkyre7QfOlAZl6wknDWteL57mzCwlMh+1zmVKhq+gMHOu2yupIABmLcjx8HfNgjJhrNie1YLe2KsZy4vnlEXvmkS4jul9I8jLglOgN8hPzWK7R5PtRpQz2YYlmJir94Z5QyRZACHfm66DdivHa45fjRGB5wB77tQugLntb6L1Dqo0DwOVGBWcdV8rSU7f2/D1WxHEGEZ0qW1HaFjgo/KPfum1/gRUyh/Piia8o/NnmfuqL3+2xhjpLkMWVN7xUK8R90cwNKLQOUpHo9f5S5fnFcngMVcRX/lS5pQnxcO8yer9abD722jd7al3xAnGqd9F9/eGuuQJwih3/X9S+7cSJx8rPXkxEexh4etWT1ctSPRFh/V6K4fJ+QlqqdJAjrUHFjdG5smofZr00mnL91lC7SwmcryjKfjqszlnmaL8l2rRrwdo9IOSLxJc6C18tFtf5KhOqgOKxHYztqN7MlzEHc2vnBlts4TWfEbe9IutLza+NjexnoOlVuTRwZ1mYvEGLrUFbnPGaq6VAFDL23OWf/oCWn4o1LWuIP7tu1fB9I/WrS7nmDXVs5+dT8VZjY27H/xAr/FLcUs7EfLX3/uCyNOF42S4r0Tjk+nJt1l+peYQ+/ZLBF28ja68YjCOOCplmzpkJIIw3ZhXLQyovohWkaoipDieIwFkPOmi8Nw5hOHHqRU6RERaUZss7DQu2JqzUKBvYJ4bqR236rKb3zJaxW9XXqj8eFJ1TWzqK1Re2x1mGBDzv4lJrLaG1L9f+jnJ0+SNPvfzW9aPzfGL9xlrqNsOSPGSbtBv+wet7P62iWbdKu/GYZegiU5+onq3gUHEhnk40UDCKVdbtUvqP6RRdhf/i6N9hrnQ/De4bVSGvYprgx1nEKjzYUlqKm2UTNZ1/SWusQ7FD5XeIIy7LonSdEJBwdGKUyaDbkKbkUeRmUP2j6OzgZWUxlgJeN9szaO4l2sKwZQaA5jLNVoX3yHYeUwwkTB1afxNfvehI4XbpjoxYSzCjOWOx/SEgMEf0taMa+q/qJSw4ZWjgSJg7c9aLI0m3f6LB+Ge/QVCqu0K9+KvN96HAua8nn5LzJK/k/6xEJYilFrqB8awJhj6J9J/FfqI8SuKSmX0W8r0onnue11DYIF0Aa3eR5KffxEXkrJW2mXb8itkwf97d2jEfTJBYbidVfLPvd5ElacXDifOzoSqgZVneKHemDX6IucwRKvVpeGkCU5VHyuilDn2zBiqAVx0MiexCJuTxCQcJniHM1MBNF7IZla/pltO6p940H98s56d4i4gpNcSGsDNuW10hHiplmj0UMU8hm0NserawiJpkwozCceiY9KFcMz6xfXr7GjJg+CroS6Iwj7zQK2mfS3Hx1s49fGrSntptBQDtziB4fEv8PWXLCs527t68Fe20vO/jwOj4rMNd7hzCFw45tpfQqOZ3TTa1UuetRhOw1I+k+1mLaAuYC1gK27SVBAyJf6Q/O92q/CIIF3SiKtxLxu+iVUmI7BF5ocXZO6NROaRAN5qUmJFoPGSVIF72yLHwVNvxEShmvQQ0DJc9UVDEvI4GleZqhOAJHaRBX0pbYJPGLmIOFilSl/8QIh8r8/IAwhee/GKk97lsxwb8+4clyIbUx5YTq+9eFTnffCl/VOEf/SJ6mG8ztkCLW9D4hTKbiZ/dyVUU4uOFZb8WpmRHf4NX15A59aGl7qlWNJ5r44Pi5QIR9kw/VxvkIrzWaVweTo9tgp4mP9ZJUYTsFlW/iLxma/xgfHy2FuYaguTyply/XbZGnYrN9LJT88dtCrchohkxuOKrkfwgZBYn05JP9W0xaV97SjCWutWHWrv+QTwhE1shfHiGbVjSn3ibUHn9w7nyK+1J7OVqDSZOmxknz8ZNfXTK/aijyLIpLUAYf5R0z+u7TK/5IQjDLr4q5eemXcEEZphEn4byxXus9hdsvpIJL26nooPz9VYlYii2OEsVXcvUwYp8YfU2qznaV1/SP+lG9up4zJX284FraxRMtP/l8W/J3dB8pZz2gy6L17Jxn53L9v0Pf8bCtyN+erh7Xg9nndzl5z+iFB2QWfHuIsUOIUMxQx+geR9NE6edJ7uDPt3Eg9VpbV5Dsf9XK75fySeB4eoz1aXAk+YuIh0Uun1eIuQvy7OBbsrvvGy+Y+z7gfPb48nRaPta67dfnS4a6RJO/Zlk+IavUJMFojq/NHkYwRqRWaXqvMw5FIZNmS3zqeSK/YcZGy2I4Wx75r2URs55ZdBJrOAQlIM/xt52pz2lAdVimkH3cw1731JogFb/6CFMP6yOcZm2h7yEenUVHFJw/dYidlkK0JJnT856TL1k4bSDwj6v+iT6xi2J5JB5eFllxUo/iGex/8Nv69ECpIEBLuSs07TWRpn44Gu43mq/Yk9+buJ9me8nvOr2O45LzOyI0Qgx4QJePq0+s8cdrIK4fMeKjqO1Pb5RCK+U9g1jsCRPeikBdpiIHTDtmfiU0E5+8eV0yHa3axTFJi+ozSfHDFKwGOuW35z/CnDwTJLQQsMR2bJe2cE7eSGZxTZ5zOVdMtIjPyEl42UWoYuhhcvw6QH6xUHzr5ZmplVGfbdP8IF12kztMVeVCOfSZMvmdBm8uJXlrik1NefbIhU6Kag3d3L/+gtPlze5hdcP+JE9u3HXqhGpxg63r7vaWHTM5T5rRlXr7vfWYoESrDmxLvw0SZ1bP3Ne0R5M+6vcPcSUyqNcHDlx/DGMp32A/Cyw7ea+YxTmnHVbwVEhnfOGeIY3KSudVXQ/uY8EsVgO7LAyaj+N5PJnJtYN6vkI7e6bySzmdpbpKxlcFslvc1datow5oqhZhuyxztoW2q1G/V9/Eaj3Ta5PZXz9GyuuvE/nMhhiYxmzLzHF6Fml5iKkgzRl4i7D053Ow3fnPeMTNo7ENIoRTHXtktgPZYcaNXzRp18ZONx//nXdsb8VryD1w2XrtUcnvm0wl8ESTN6NZ/UqgY+0zVYtOMV1VzK7qVcX3s+0JWeQ1/463J4+S8o9CvdO2bDpTsENx5FAtT73Z5o7M7w1QJgU8cCP/LUZzk8U0jIfld/zuUqC/e/SNvo2cMur5dMKnIqo2JSVJEz8LRbZvDWePyDeNe7EoUejm95LtCF3yOPEddMjuf2EHsj5Ub3ReRpjSxilQ96qiVZFXoPqIpcouUqff18Ux/DCIPs7WtlpY2HPghrlwA8VJ7kD6E/9LOcytTxlnFbnP/fZYOV0MzA7f3wS1vDSkRnGeKWBoLEenwSvOcY35K5U0qCKnO3XRgmPVVu2G2k+fgTkY1H/YkSfGQi+2LNOK+YHpIkmDe1bR5/3AIuHb65RWaZGiUxb6E+vH9rhhLJ7OpTj3v6eRfd78nJgiw98bVqq0QmG+/j6Riyf4i/d38U8rPPPbws5D7qPDrMDTFnIyJavYybyisL5ucj/NIRW3hnKx8TP6M5n9gxWhq6J7csJd5TmNy2nWSL7KfKZ+pRnL8Mtd+t9mSstD+GEi0eryNf/4u14KmZ/j/1IWMWmeTfcTxtUu+u4SaHmx42+IXfb9COvv2qDYM9UK39aHZzRNYZyFG1UCclNokwGvhccu7cjV7HYv1ygYFDg2W8uzsFnbh21Wk5+uGfHGWVZfZzdjP+MaNy8VaWrgFlcXDZMMrQl2iz6VtMbKM+Y8t/ul6rWsR5xPKPM7kLL8lePRw6aJSRfplMyoJ4m0L/E4pXq5POSbvi0622Vb9DSbKjE2kNhhtge74tuyxclkHGBoTdfrlf1sbK2PK87el/PXEfip1rP0nBGB+uxPaVf5mCDyA24LghirF6RVeejHtJ4Pxl0MCgU6TwTK2h33p7CjiM+yj89W3hI6P87zvblxt6ARcCPkmBte3WUeffesvekfOTpiQtPvpyjl9tTuzvoBCtj7QSFPcjrikYbaHfW1cWgUkDZ/aK/LxQZHbGyhCs2ZfE3JnqV0jdM6tSVCYTdHcfkPu0+j09QXB11gp1g74PbTzeyj1Aop14krRZYhIs4vYRs2e+iHC9XdrURmQ+OonIQE2RQOR98uMZq43Ew6d6vIiBX8x9lGHQI6gtw/m5IwDYkZnMigvNw77Y/v878PU+L3npnWxnTCmbpejUaXkuvOXbLfxa8Y1l2UoMAQnh88PqDOFC/4ZLKisKzLd/FcNTGm4de5A0LKH/9FwTR3M9p/miNLMY8t5Dojup6IGQms5suRcrKOfVJEMtby4ddD+MHi/0njNRfPvzzFS7/wJxj+hDsCidqu6rcfshcDudsJf7/wej0VOR2qrfSV9kI9/9lh8Y7Yf9dpGLEaObhVE8Jr/91vXF0luH7M503v43lGMaCCWFLy5yGej+2SvrDgRodUAg5DR6uV2MQFa2Mfjw2JwDIePYUk+3OBEEE/3vIG+gX7CQxZo+Fm2lTPDa/lEO5Nx1D3Z8y+vK0RA/glAjsYiZNv3gQE0E3YrR4299s9JdMQL6wvxDRosCkNYyL7TErEcrL/8Y/AB4FkmmCy8+VKtBuNPwFvLdN/4SR1LH908GHMKUE7JHcomaHLFeBYfqQuexdC4ou7PMx7/b6l0yFU0eTzhHLb8LngH/LTtKnrIwXXSCZE/FdB6fJYNmu4j+kOZtmcdPeSyQx/CFb/5bT9FESeZSN7+t1Wz/TDLgGNK/bgd5ZVRzeKXbTMaf/B/IT1TYNh6jQBnDAeddF9da3GlUzGW9N3raSK9W2uQww0VW9Y594+vwxc9VRCwolXuJvjtSWMNiyr9Es8JthDwBOyEr7sIjUWEZeVCO4Vu4jUSkhp2nhJTheigVmqpKzkjtw1+U84iKjfmP4fSUpJid3BL5p2zHVOA5uBAY9Ca4FCCbPHfiS1I1nVk/y9hOH3bWvDljXWdUVpc6L57galPq8GsssqGifwrzVtzjcb7R+v2q+aLK5kcwQEe/RRPyRRo6VJ5un3OFzJcnbIa7ujl1mI6SE/DN2YIbbgwCj8MYJRq3H6kO9HCR5Pzb9urBHGAqXJ51OqzXWEr+QQC5Rv7LjfOeinCqVSREWyEE+Sq6IUR7OtDIXXqPlw48+x2u/hKiN90ry3038QgtHxycB8kfDjWwYKrz6z2eySOm6pl4Z7ygJkVdotJc029jHOQUEk6Sx483Y7Z9SRd68DGmf/GOgGhHcQac9eeUfcf76OcRvVyhnNer8WFNhA9W9Di4VEv0ufHNvs7TdPm4DyP7GqQsIcfAqJVz1/RP+TUNUeEYk6npedGg4JXCvnvc7QJoyWQ3OLlroOj+nyVOj+HKIgaXiWkp5J1DzfJlSd9shbxzPVKAnBNzH9IJrDlAUz5cOgERcZBXU8QazmkjJDhABDxqzoaXvdqjbJWq2evnQsdW151aUDm7cTAR11ihPftpnM0RMU/cviUTJGkZuAB5vkBCLUklq8ekWsJ6uq/u2LRDm3Hh8LMc7NitaVH85W6Qv+KfIMKpKK3dgmHxhPt7gN4CujuCT1QNDs6EOdzIw/pFk4sqipNJQXzlJ41vCTeGmEp7yHW3KGbi/X/GvKUMS7nhM5119buZS0lIPN7+NJXwYuSg/mbxKmsH9NjYpd/lFfo5jki3P0MmzYl0Vxfypr6rXaHO/r9BqKaBzz0GzfksgvuzFZqHznJ4huniM8fx+tn5/P3pbMtdEF1RNfBrm9kTYwuTdsvWy/oRXEoZO8cDBjM+ZbFFrNod3GCbmSUcTS9u9oiXP1eTE9uv7L5C5ki8iVKW4vXJdWQs5ENrwaD9mATSTNmUL1InwJY389uxH3Iw3934ca0w3sCfR2ftxLN2eFBRKH+y6SWemjlNX2xfwU3FxO3Dg6EuThLNl3RRRRWaQ1NRR4tomEbNbmYXIPXme4BMdo//gRgNhyEz00Gpfi9Fqlq0tRL/pkmG29tESjUIaw+iMb0qFwpJn8m9U4eslNPBImGU4UMgeVGIZRmaPKOdW2n5My2pbrka8UNk7Q8OPkeThs1Qvb8pSxk65pXf9Yz3Xffk8wsfdMaqV1GmLM0vvkWhoc6vT42bN3pd/Xm5gxQh5qW9ru1c04SWJ4iigrz17UvbGKv3mM63Y4qcirQ+6VIPeLwoEweoAncl/DwP3ZfRmhHNUP+vjy+apASs3AYFzVQqNytaakCN6cUaQrRyxiXwEK3vnyg1pr5e5J0QAGHrQic8lnpTskg+PLZW4aGWh6+5w/J+e6EXzzSXloFkbvPNeNEp3iHNY7FcPG7i4HF59U0KAmE5IlYlHfnEUObqe3/p19JF47zhKJh+73vDBPhH2Wk8yLvcfhG7dw8VES5kCe5YvTSRWvGHWp6AZ7lycT6JV/KVC9+cM+bdfx9WOGCOMR4e5mBLgUbKJXDP2hs8VHfrZQL5LkfXZoovtXLjAjlsBBjaFu3U0rnk11qjur4uliGRXTVCu527ixCB530cPzgoNnOqZCwa9OOHE7ejZ/G2htN3H/FJwYmGoYVceOrS1h4AgVF0z12ixNeaS7FZqZt6bUKlEmY1DKVyBrtVsS6xRYu4yfuCZPih0tZs/MLYfQLrn66cCXmxsxPHPh1QdtpOjvneEZKF/Ivsn7cS4jP1hHoreQ4Vo6RExgpCXg29iTQrL9QymjXVJHml93Vo6W9NOTQJvLeLHsVyhB7Sv+Z8yjPdPXD+MxGTuan0qG1uRoqy4NN680BuLE2WX7Dt+EGJrV0KId8P/Tf2DicWJ5NktyR1iE+4ySD8PGGePcP5qZFL8oPrIjjmqqMcD/7ZyaLtOzTXHW/6QjSi7N3Gto8PVuJqSTA8cyHy/2v0w9w7pdO/lKl1kyqar8WDkC81K/+f60VoFsJj9/bOXxb2obsTjCedPZgHTCoajXfkFy77nV//Pu45HP/y99oc5zy+FrJXKqN0XPB7Y+2rlk3aoSsVuxNWkRyXQKxMRBGzfJFR4n/ZxzzMIc21g0BASEwuOk2ysETuz+vtEb+eoWs1UWarZ7+b/y/grhL7MtX1m/LG2KZU5zL0fSmuok+S7MxGF+lNjl+yRa0bLhWlR7h+3IFOdvngyTfV2jkNBsCMWa0RWKbqyW3qwHsoPuuya68DrUnDy1IGktPPuGZ0lDH9wjqJpzLS8+sOQnM9+6tjNc8FwF5SPQUaFfvXimxYjf4kxZSP378ltbZma9tKwBRXB1HE7y/CtfB2tFK24Ct28L1jFrblGrV9+i8n2XCei+BBNdx/FZNmYuVYV9RlTnVn1vnd7iWN1Ah/rfadFm3ftnzSnT3pTdnPKbn4g0Yyw4DYhJk9E+eCWhfW5h6cF4jBK/qVOSSrHtQc97MdfQ9GMKTXe6yc/4EJd5LVnlq+Jmc6MA7fpszROU9N8maWUN/S5E7b/Y6Llm2TMfn2pIs2gsTalN3TlokJ89Msdv4ijz1Hjy05W0XTTkE2Mq8nJ8djXqgwnd5pojg2eTitfFFTdf0lx77BLMliQEY9YM3ky4iXmNTKC3f9Pzyyh9rPkZ+/RBm0asRep+g0apdISRsCwN8f6xaObGlRYxD0ZPR1Gkia54tXmlt0uRW3z4IVdCwO5pJf0cn1q7lNIf7LUtcVTNRdaxxK0Jy1si3kpii/K+Z6w/A/6w27e7Z5bH7BdlWxpJ8+8qbBAJ6yL/1A9cnkg7Iy8iQB934tWnGMSoksDDCn8TnPx89Zhit9LJiIsGMQBzwVbUs94ZS2271QGXPFQj4PmR5m55k/x9Aq2fdccSaXpHy26La8rHIowa/gcPsFnucRiUUzHGvygs0ubufXL8+t/o/N+FtNoMoStiifr+7crYzIIatigunef4X7501fcivGjxQ83C2xwp24v3NH8QgefV44HVG9KYEZl95VRCzEr42NqCkS+vbKC43vqE79p4RpI0+sHPz1r0D6hP0vn1385/ePevigJXpsovnSZX5z27fXtsLKuuD7WDombWszebP5XyfwXXqXzpcOnaOh3M4XlvlRF0gZ6ncizDFRrhOYOgo7I+1cmBJ5RyRVYYck7Ec15VT6Az5OEu/3v7xm6cVf4Vrr/YSmHSbYlY28C26AdbTeSL6NemScMBz8bkcaOmVwNaaud25CnE0GzRCzwru91feHiRbt29YnaT/ZLMGcnfio5diE/VGBbcxtJ735F7wujtmkDr7kbDgL22GBPx9/efKpZmHxuTfMXsIkSMyyiXy/ikDxSMNUcNqMnxgj7ujxasd58iIJjnITppSGmr1enoLGw6ROApn6Woexa+obsOOy558u9BldSlsqr4c/RCI+rH8usULVOuQ+jtqegbES+Row3Yha5IdlILWG7OTwvIAnVWUimuG3SY5NkulCpiIxCy9fs1GCvS48t3JPw8qI7UkQ7oD1EnLiWcajkIx5spFoRb/2N8u84TQfTBNy5pp3jDv3h4+rGg8HLGREdJcKi687cvz17+p4vDtYXwI2iJbIyZ6StfYEzu+8hGpNm3Emc2rRXhKbiDlxvXvRWsefUoKpwMfmQp/Xhv8HN/i+LTscd8fL2gbe/wUWVmIb2ZOJpZZT7g7TVdoz9JO8aCoD6Sh1QNYiWa/O1KRRTjyNLEr26e3PNtvuQzjNyKtybNvZ+3BrBDlwR574ZND+g3m1Cj1DXyUbPnBtwZrYcOenhvX//OKRt76NTY+rpR2ZEVT4buVvmbVli5N9HErExGSVCANJ2hLvXEViTpyovU7apps23HVfqFuqEDjojFmuOLWLFVt9t2ajPGtUu5lBMdpGCFvcaydvJ6v+/4pPYkL2vnUhQtVLg/Uz0VjHt/rdBNLbnAMT+klupejP4Zi4VD5WsaQo3ryZxF+s/kjKyJIYmVN4S+6Z3mDvWLKGhsKqMWAkwoBoJyDjUOMoib1knjIUFG9skvK6OHmB5JC6B5vvHKEr11dAt8Thnq8Woi9z2m4pq+ZEEIVSg721uLV0pSt3TVal/E8Sxf1GzhtSvPy7t8E7RxGLeN6iNzIf3ixSD9/FTjtl68eZqNYGKEGnuJ5hVuMF+tqD9/GKsHwdVTjdEQby52lehrtYpz44cKLGp0l8Yp6y+pZ+xCo66GZeRFstqE+bMsMVKsjDOcsRAQEAbLnOY15ezMUgVTnWKqZFGuJDzxVG+IPGsQlhL+IV/9lhp7S6dLiz84imohpMOkvzJWtKZ0758XiTBfgLL7n407VVqzS3s1gU5JAr0WM9EBsdohez16NLXX4pyEzLAOZpsW44Q6tjhWfXd/Tl6XQIXb7XuMiq4reiP3F6W+ahV8/th/yoowRwOz//J7pGRuUXsTG3Ar1DA+/mGGgDQcnLPGyozmyJFnHSSP3IlhJP5DOt0kxSl45kG81cjImNLY82TVzCE78s8GbpgPPs8FqtqkmmX9QLC+MWkMxPfPLwmgvLJJU3pROHIcaPOC/1uy0FHg/v3gKLL+0kvE6KTamZcFU1MXe/yIfCQmp2kfnA9bfqpL+MvSyY8d0/0sMWPefTnsHEfqLSbjF/dNTmo15Rt9HFZuLH8oPmdasnywJM6wT8iMgTPzz+DJshVj5FR12dS1Gt0wFTvK64f1iEGZZvJbpglo4ygFL2K61rCI66+7/lqbSIbbS5gLfUPjQ/RaxWRF5XngLB+YJZjTGfiqJXPOt0L07z1y5YPchpDckqoab1EUhm+E138SNmWnTjVaVYpW6R5pDU0V8tUNLGmSj2N9wA/qrPnhfeY/qMC08dCYmnzEYJpbKThDfDUqjwv363UwyRliOy9eTqTzJGY3117CdnKQYWBDQW1PYgjJxO2STMKVwpw3/hUBG/4l2ykuQzhB2s0Y84tnb6nzJbZoD614b43S8YYlHlf1nInZBgVdeWV+pcVu8Xt6IMhBo6q/v9/aZTA8EDN3ou9YNsGKhR71BOVrnwKRacDtky6pwVrTrqe+/A15qaZhh3qX5vbScoqEP4sQKDjrydwm6cxIbJuiBGovDu0+T0odEP00JdFnJv1NKR/H5PBz4XSSO0O5iqLhyf5/sSyhe5ZLU6tf3uFqqW8iCkur2Sr0kqpQ0rx7jJ4T3W/XVaA8t3R2zzr0veLbXYFDaweaOz0eT9rdLlM2S7iNTcisIM6hjs7dZ7eSV+K5R2I1h4GDft2LuBHDf10b4ykaep32UtzT4oc0kSPbklmZSR3Mn+dHoTftMT7X4+mbZtyav+Dww5cfeVGw4o+kPrR8Zf822j84SW6sbH/Rcn9F463XTXqoYEsjtwGzhzDGy6I3sarvCfVHVS36PH6h9sn8u571M+zzCWwIOkP8TLYrnPtiXqYR906IArV31Tm/kccpRMGULFoOEY9Q2Gbc/9tl0KQaXifNi8wqbnGXMLSsMgw6y1Np01dRtNkEr9amXev0+0qK6gWakKkTEQoVJLRaP6TLoSk4dxCah37UnrtBwxad9aH6fNMjxRb9Rf1N3679yvZi4SX68qKMsKe/KUoJXZNYVrmt1VtT09lTEReulZRanLhbRTUq3hZtPRcGmhDC4bf/pjvyO8zeurqEIyNoPnOq9GnXw1rli6mYwFkNuzpXrsUqd+pNfCI/MiI2TduFlHD9ZGWsE71EkYaxnw2DREizM9mZkmghMz13ylifi9+9uTCJH1HRoGb9seDfl2sEiE/Tex9UGc9FTqog2e//XVPzm5FWmOqJJPpFvvhlvPFBAr9232Dyr0wkPPL08NGwIp+MlclELn6bstKfEhnHH2wWY35/f7+2gY7Dw5CJHdk1MTH7WeX7cS7f0e9bbtSWqz7dk1bkzCrxgX96Wi4NFC7fqv9yePULWS3cIWXdk5kuiDpXMTMEGT3qnWgr1De2FT38qEt9JmvCcVDJqprtOOr1K+7f5nSfry/P8s74MwLeYJpnW3M8vilFf817zEz2lpnvv7v8oHxEfWyoGy7Ldoi1hKVWWvtkwhRHdHLnJ0sA0Q1F7emOU07a3zJ2dM72BWd8CRdRVTLM6V1j11tMIjObogyjMhqD8JgBEZz1u+S32mG/JthWuTvK9IUCJTnxFAKfhOdkklQUOMl0r9ZN+NJI5ey5Xnx2XLewS2wfz2PWmn3XoBJ0JSwzclZKsKa9O8/+zhqD5oq8ibvadZDmjPUwW53/F0cWfzP9JNcpU3Jb37m+eGrplxrNU9n9qvzJGFoUpBGq7grldZdgl7JvsjXuUSwm3UZvWNkx/lvBNajxw2ZxK1elZUo/7Bv2ne1RHLDhPLrMZI6n+mMqvmzG9Z57CLGKsNrBd+IqWxQ3POKz9YIGMjujIqt/f6Cq+SFJZ4nhsGv4TeeEZ5f5cWzgf5kU4qfx6X7KFf8Cqi2LwxOF0EYryAKH2rV7cy76duQ394bzwt9+WGng0ccxf9BwHRxttO803cvE2kD6NfPfGaFK/6UVAbGw12jGRrnWq++kmOyxSQTXMuOLFQFp1VfjXf7Jrz1E4nuWSQYYP+rvrb/if/HbykGATcWV6I7z4QfEjzLdJnsBhWeCD9CMwvSwZ3l7G/B8rFKmrngqH70M48ZZ6DyZp8YZUL974lX03fKgACEd6cNN2Rb6wwem0hXZ1HXfEyy6Xqf+CNwO9zfp/G84/M602r7yS8dTTBtij+rm4HftcQtCOgvXj0TQdvk4DmkibfnjvpaoP2IesurhKFizST1P37lmtR7uu7nnfZSSYTzB6tpVSsN//zts1Wivb7yTzYREU9aKi3NCgnsutbfzowlnrV7BCJr4wvtVS+R1EsT3L59yi4z+Oy0bNZlwxaG07Ovq86Bo3vAwqFF7GnJIuS+St+yM+/HDWF9TEungPBHSONkqMZZeQbT3ZY/LzqmWYdOU+bM2s3VaoS/KePUquwwbQZR/fH+evaUtx45ojmupsgpckWQbFR+oxPda/GS/nPjGt99qV2XpArsp2HP8opn875/2bpEhVkJ3kjnCUJfXTLNOssQ2S4xGn4iUNOT9CG+9M7ZS57E7Yyoz92OSasz0OEZEw85bK3rF3Lc1twd0NXKFllZRhkY8eV0GCMUu37uWS3UFdjFW+kZkSu7nW6XqfOj7DwXdfHidxHjvDIHX/1vAXO/b1PhwAYQ5hzKVPRemd45dG4VG02l+PY6tuXU5cWryjZzsCPEv6h6+Ij97aFZv1blCdZq/8o7pTOru5QoVhkK1sSTKpzV7otyjtRebbhgW1HXhiq+qVjU3nGp2xv9T5j232QkgiFK+1hO5LC9QrZRGVscTmhkNf7zfWuU2tJfZbULqQOR6b0q9NS/iE2a+Up8YSI9vKMrKhz8286PjEJUSj6TnduguS3fNEq/FvFPphuXbUfVfj0PRG4mf9nZr6OKrTyTPNiXTzIdo6ZVs3x/mqV8gpCr4o/tpVuN/G+UkK5TF2DIY8so4fGNYQZ7aP3r6gagBifvEsePQmFLWq05A2hfVbfS3eB85knV6WvFDbJ1I/oMN9Hn1eEZBghcxGvJIeeN7ekoWv9ssNba47OkomX+0Mzzs2JGL8snLnzKdklS/06dHL2MuCFgIxtqVDbXKD8km3J30H5jTxqEIyD2MzupNKv7wqbzVEmnpZN9bro565vsJ/X/rux+PUfpQy9Vj3K57h8tcxTybvpW8FrNUNuiyb0M1uPj9kQZjgh3XFWkFbWrxFgNRdwH9G1UnCo1+FJe4UnVqW3zCp9A73Lz4QA7sM6cP02K4FmgUMbbsWSMtxSMFGXto8+5mBKlEB/MtIZLp869Lm/DbB9E+tGRmZpDmfix4IlDF/qcSx1CVx7aJqCZ87QtHJjJDvHCPQKBkyjd07ZkuTmryrOQ5fjJR5ZAHPzSvZXn8HiII4D+0/Irk3/Y1DyFembR1R2QketFdtSzc8cX3jJUB1Y+bZBLXLhpsvVT16gECX9lM3ZLol9tk8u7Ts4/12pMt5DDGRqYzea+/Y/DMsP+wNlxLDXREWir4ZvL0C/JP17inF1ybvxkn0XVSTh9rU3AqifGF9im3XfagoeB7VzVSpuurH09l/ru11MFbr+nmwaDzrEPMkWBwi3reXmNjfTE3I8JU7vR0FCHBxk+U+pmUX/7SYLh8MGoJKmMZQp2UcFp5D35bxTFbVZ+pesEJDnrumz5V3RW0XakUN/0/6AI9ITxdWZEkYZLXFYS6rNHLHE071ha9HkVPvLqXjBXHDgr/bQdZmGVX6M29KhpeKaHS7ce4KXSOZfLTXpOkEBe825t47M3llnuCu56A6fmIQ+JutKtbGqXhW+d+i0VvCR8Wmad3mT7e0zK2cp9HQz6VsldPRuIa9CyGN+bQfZdIsRwLJMykI2RiL+Uq0DjWe6kUQ94pFPfFoz96RnmtGOS8gm9fRz9rYEyJvH5Oek2iE4uEW7JjW/yZWtjdutEwpf2LZB13U8dQSas63U377fTygHvrvLHsOe+1o2zluS5WiS31VbzZz6nXsTQ52mIq9tRzkhn+ST2SetXvd5Qlv1D3vdYYVPrOhY448QHPXD4cR2sgNWhHtS0r7Lmvo2qK1FMPMmrkjuCZ7d99sSdXSJFGXr7PZ+0vc5p+bCvavX26Z1XTWorTjoMk5YTo20oiHEJ4iPHULySUUwPTSPIH5oDA6cp1wGo6Izm1MLXb/XNxh4iZja8GIlb8xtyqpx8/ZnWg9734+leHcGQQ77QOtWisu9AoZavf4ljwnNZffjLz6fOOabeDLdcb9U0dKo7o4qp5nALihlLx59v/dd/PRelFh1OqeTY26Ekf6kRFKmE50nEaKtNacWYLZqzsFyvvFf8IbN1UT844EjT6GfxdI7/VXFo2yZZrCr1ivVo8WVvhkuLOno3pLavqKTHhwAfPZi5p4XWDRlOUfOsuvj0fS69FlFaGI4xQksax4hVpRFe/R0v+kvfs2UfV9K6HIRLc+zvBJoQllUpo8YW47ZF//rz7Q474ZvOZMRKFuqMxm93lVQkWpoaV7xcn42L26k0Hn7dN4knMHKNnlQLK80/tLrz1zwIiC1BsuFz1m/pjutBzCG57qH+fRU74Uu0eFjug5Y4lZCXwNhWpRk5JLEipfuqyM3HtVg2sLUevGd3O4Mk1yOhUQn7x8NzlCx2949nEQQQ9dvHfbm2R4BmClZR54ZK/PL+XCkv7GlZXEtMxhkaM3Vs7xf1FSz64y8zkVQz3JSrWnfJIhaoQDz02pGOSpjcxXlnVDjUUunr+aj9e2lKzVrvg78P5EnVzbJ9qOpISfdyekWhvsvhnJofZjZq3YXYWEbgKr0XF8Ap36/2te41931rvZDrU+qNpmAqVJ7l6jOP4XI80+EjtqNrw7F19aogadU1UbCAhFLNxxFEMfX4Xdalz/QrTmq60bIqfavVCsYRWQmxXk6XVR8aYMwOFjs3gn/nay8a2p65kuiJvZyf7S+Rs74iiC3M4S95oXZe/eEycafNQyev4vhGFuFvlvipmF628Cekl/waTDM1iDOnNbdSrY9q/WYaH0c4Yz+d1gxDGfKnRDCcGnmqULg21MvmQEuq2qnFGfHwoTraOZzyLO2/WFBzpGKRJYSQfmlFb3h5t3I20a4IxOfa4mo7NU8tFiPZkzBiHGjU+LlBv44vfz71c9Tc1dM/rTNuRGZfk866JFQ+0AmbxVBLIkvuLUg4C3vkNGtJ9m3+sksDEgTBMtbtnaOXBYYSJxveLMbk/Zqrq+XvdSq3dnp7FCAXCOSI5rPeymSZVSUMygwfMQkbaNCUO3/5rFstQOljsTBBeu0Efu7+5PtZmykpdat3+9+1feQef10lLIGaE3HFGwGuR72jznhOKA8Q3m6UImhQ4FV2La3tJMr0jH0UtjHz65Iv8O38dRxlHdP2hqhIzyhw8zN0mmbd/QlCVsZ4tqXwms2RUTfYRb+AvM9K3mVV9vftzZaoxoRQBofNQPK39mQ9aGBwuRZjLhKTEvGgIOeXr+aGB2W3O1V/JlocCG/aJzQM559WeLCqVbEgg86pR8Qzll2HopiTxIbufExjv73NQEIX7TfVZ7xs+vrq2v5GdE7+wjnNnsRlCOo5bS3F0CdHe+UOFGHt9i2m6p1kyFYncuLKx5D5k/j5qAEvxQTffv0eZAmxJKKNCCIQ7Q6iGP3apc99vWhOkmSczEX7oO0TPi0RLtuJMJgmzWuzwcqgKDU7lDHmgVVsWtEgUG7/2WDDX4SCI9fZDWvcivfA2pltH04Cpv96mP5ooZoco5XGuqNgKVa2FiEV/aanGV8cbrLLS75TGbYbyFb87rQks1IgXhj8jPAzjYpyKYZc1HPyAU5m2pk8SkCtUVBVeZ6bH58StF2aRpPBtLaXn3YqdHL8x6kyLRrJn1oX3doT8XnnZaT52W8KxiNWHoy/tOjvediEqKesk7ctXx95GsTXPSDBD5UPJBjK9llj/8IkOvP4nl2rHOPnflv0a+qu8XsHf9VqnEeso73MrHp5uuG2fbAWxfnj9dFCVS/9XyX/oulqvoj1Dve6sx4VOhOu9aOWWclGloyTrvUyjCu5Ik4vQFdydcdkCroMUePP1uCcGEWyC2v75aOPx6anfY/+a6/Z4+XvyPtbAQxVL9eDQhCTC+5YtO6PBlhrzs+ot/udsY/SaEhFFsuvjtQHOR/NyzTfhM+s/efOC9cb2E67PWex4n9zSylYX4ZyhP8jTnX8cepnzZhjT/+kPmanQtA8nP0/iWB602X5MM5O5iwnfGr1xMzEsTkwmDCrhKB/SwrNMKCLP1CqOWxl3euuL8+6t7ET+GDlz121e5psn3MMJGBFpjDSf2dvZT8Y/fXpqQtb/ULZopkL+j3flE0nqw3csZ3RP/P8OFjpfWh7XEOc9+v3mTgyv6CQ54vcLem6t97aYZzjbr0fmHJ4sOrYthKVhu5kUN6oVn40ciQmIK7HspCfgbJtSDoigmzQgZN8p5LMf7KH2H6CtUZRqJQTWlKCvWc2+CO8S2ApKSSF5/AAX9dtvA36E2fqiWeXIX7sSZ02NBa00oeEOfWd774mvDBWj3QTPzQ4vjP8x/8kxnfU1k0le3G6OphOteuRDk4I9lLSHbJy1toHOGI3gHvj6z1nB7h56/+jFysu4hEXjtGtjFzyz8Z9sLMhj/TPpNe5rtY2olRZ6qQintkhrOnXKLVpGxE6kwv9qzNYYP+cq0jcQMiwy8Pl1YGMmU/FW2MTzV6yQ9xoqM5vGPZdJaZ0SHCRmXPpbavTktDbwU4J/uaMhnzCF4Lw/Q7Bpp+SLIQtbKrRP7GX5Ov3yUix57Zay35Eu+RicKpneFZ60FB6J2ZtvkHrOfTXgRqwdL/42rHZ0UbsyuaHwWuiiMkwCvYy0ecpE/LeO4/gcS06l13HU+f6DvC/M+/KBP0qTX58iJmqrTKXL/yrVe5KyU3+chOvIkdDkp62DiJ482feGrKe2gz63tgjb5vSeJWi8+QRbY2+NAP8r4fBIus+zdmYTiljx9tXdGRYT+bCWXscGrP7OOdSL9NqfZXnjjtsigS4/ns6xFb389NEF3bxSJiNjL+bLlMT1+6ZJGRXTKbqS6Tev+jN1aHg9JWXFe+o4CFsIZx1zmPxSW3sbJg/ZnX7qsxk2W5jOCg6WstLzDTxyNBh/uRgkgF0XLRkphTPdIML76Ydq/tOKs8DvEpQInkRc6KHWlT++XlO5SXpf6e0adRpIYhrVPDdrmnj2EfM2xCiHDlf7VZxCSen95l+REQ/yL1XyK7/GrrkRx9YQfj9gTz4KwA3Y+VIzhdRfXY/qzkzcwpIxbbZm+KnwHWPmXvrXgKxBqgNRARNBVrarfTabjyqafEijfCHBfFJ4ctvZvUkKJGrb/yGltrmddKZRM7DpD/sGX3ThP20W/FBJ5eqoO36NO/3JVLzmFomzXXB6pXhDhL2G66lDzVAH/5PZHs1m90IKKYmTUnQCQ+XuFCS1fuvEjqn9JMWbF98HHxQLyL7456jIjE2hkjz6TsndTOg0pYGM+VkpFulBGn3VFJf7avpxpZYlt/m7vpxpPqM0z9pFs2L+QQ8WRhVP04gCiep1S+XvNMtxum41Lt+pjz7y4JSd6x9KzVarfXmflNGd+FCAMuogbGkB0d7yuD7iGjuY1VIoAmnC8muG0n+l+r84/EaIv2Um/vKUzfyO+8qqcUETq/2LbBILuRXxk2251XRCLrk3DRuMBK6WbpHuuwJvwlFYMmT4bMiIU2Mm0yzeaOmntT4KGrZURK3qX/p6ayUzFCfN4UOtS1uk6nqdgeQu+a/kfpmTlLN+Q+QfvbVQN911CaoSYXCpwfHENFaxrIl+VuANRsK88ScVYn08unBRZCPr4v1uXbznbOzaZzLHmnYaG5qPyAO+Bf8Kczlp+Wyk3I/IYS23NqQQkHSRkJW58SfHW+mf7+evOt+cl/91YRO+RTIqx+camKsophLX9WZ9WRr5+6v2+vR5aqQSPbPFEv0NqWX/7IZnu3WAVlyTCw8ab0juXOCqnlGm0COravsZD+uJgJH/nB+qshiNPsoxi2iYtrllY4kR+FQ+P2EsbqIuQuvW9ONqzmqeuGT+YWufsFCVaXvaeqr2kin+wuKd44v7+WiDiSjSpP5OXffSlDH7c8Ou3qcqCOtKKs2WvwdNtisxBMLbntnloF9/WO1+bP37l6qO+AaLwexzAvqcfZHNFPRuKUVxMZyr+I1B77QM81C8ByilN/VPV7j9Zvkw33rP5S/tMA40rX39SzxqfFQ9FBl05mKJPrf8v90/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Y8Raqr+dr6mzO5VzwMCPcFvbeva2flFrbnLesDTo0dPjpRdXLS9kGpRvRqRxZ9JFqmZ8SIuQwrsJt/ynqLSJCnda6wNUPC0NbD0+eRrEsmrvXc/T6YXeJ5ET3anjynM9kOCqMErZ/YWzIaVt4XjIQe4aXmOJHactmU8m9/ptA+qNCZsmc9U5FqX8CYr+4L1fTfz/7IWCgIDw+H/3NQAAAAAAAAAAwP831hHEpG8Yys0krV/vV0oJyf1PDkf8v3MUBAyExwioCKhi0SvPe1mZowyC6ojL7ELn6xB6o7+XFjhNfE5L4zmkcV4I0nl6Gn/2v3wOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P8hY/qhvuZ58onpDL/LStLrPW3r2dv6Ra05C+FNqtKKjoVDArUWlHv3tyfnTjZ25hJshK5hFNNbdO8+v8PziHY+Ct3qYn1jOiHYg26zOarIE3hPeuNnu4RNiE3aZKNAc3TsFoyIZRH/tEqSj2hxBXW14fWrT3wH9ssv1jFryL0+kyNQsRx1krsh/h/26zTK57r/H/gXMw3isoQmS7YfshUikS0yDI1EzeBqGA2JhIylxlTTYpQxBhl7ljGWarpMMsk2hcpWKVSGpsWSfax12Wb87+Sc/83/Of9zHedcv8fj7vPO6/N8n/M553nmx99uNLt459dfrbp5V1AgEAgJurXdAAAAwH+LoyWyY6K2f55UZ/AfXeIuZ5y+ucOD/86DAsUDIUFVA3+8+G61uQXfFN41ImxztdAa5aq+FfhsR+oLCQvvHLDjx+cvrPms2SN727zSr0FCo+mlth3vXX3QjytiEosmP9l48Xehm7u/2iNt/ytPHb6U9VzvK0W/6PVivW7P95xV+kTuzi3hLW5/4J3lbWMWtfzhh9gyBdMCn89pWeTLL8dt27TxYovXirXvmZqzOfpKeMsOZRI77S219bcDm/oN2P1oq9pLUjp907b6bXm/vZR+30vvx79d8tj9jb6pMGrX1eFbfulfouXZre9V7JC9/Z2S/SbdaNmt6/SIKYf7dn/rn5WX3PvsT6+WXXgj/svYMWUmTHyk2bop19OubZmUdYufAQAAAP6jMl5otqXoygbNoz6+Myl1aIn0m/s/5O88KFA2EBJUMXApf9/lR36cFVrz4Lx2F1rNGPB7bERBdM+nGvZ5se3qL3oP6n4xok1YlZN5H3T9uTC43578d9stej3x7W/vDh/z+YcRwQXFd+9Z1rj4Y+1mFESs+aDEJ0sPftl3z94qZ9s8uf2tU+3q3XW8/a5zFU4Um5CQ2LPOtIF195eJqXIxpE7+tM8KG524d9oPuVnvLKn8YKdW1Wa/erbEgjLvr2i6qOLBpsNn1R7Tb+RL01MiF2aXW7i03PmfNyY263WL6wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBQK27Bs2peLbSpM6ZhZHjd6ZeihqWe31tXuSBltnBD5WplTJ9w43c2zePGBK+6NdpT21ZXH/Wxy0O/9H2pSOrTzyZsHLo8ArZVY99lbYrvU1axzuPHXnufMQfXYI3jw2/Z1id3JW7o14oMutIRPzuDYUja1997GTG/HmRNwal72g/dHvwr4Pyn1g56ljJI8VPPdo9e82D8dMeGlUl+/a3GqffvCsoEAiE3tpqAAAA4L9G9/YjS7ct3zhu6ItfZP+auKzUzR1e5O88KFA8EBqoFnii+pTH9+0/VrxIxORDg4v8trV2WESFuBkVWx98YXOd4qlJ+ZHPzfuwWljIiBax6esmRzwy/sikjBPN0qsPv94xYfuXlcIrzTzYpt7CXuWv5vx5enTXqv263NmpfVD22RX1ZzX6dmZOZo1jxyc2efjhFhtbHRgzO/3a1uSS4SXD8oPq1X//p2o5UXG3J6VsWrjw7LDC6Mjo6iufHbjgr5C7y6Tctz5yyaZ1iyc+Ma5V8UXdArmZ2TOmR77bq3V4j17Lx7cYcGzpm7uql357xdjyaZc+Pn2qerdB33cI/zD6UEbdcU8/0Pm5X8rn18te2a91YezFcj+vynyt54GQXUfrjb7FzwEAAAD/EeuvF/T99PTL/+7aqtM7NU7F9Lm5/4P/zoMCZQMhQSMC8z+KP/FJzOrnphW9kNS7Yb+ZfTs8k9pi65o3jmTtTJ05a2bNUlkp0T8eurPv9p3Vctrtr9D+3ug2L381OyQs40LcgIpjzsRvnPBouYQLFRcsnzhw5by7J0R+89HBhqWfr3Ph6bmNLq7pX/B+1txRnSP/unKw4pIz/T69dvT7xQXLs0Kzeh46MnRAUOYdd63f3fXlk/2jwzdmP/rDsiULal+tuK9xiZ8qT2lw5Y29fzYPLX+l1ukBlbeGf1mpx6qHlyUViV/+waMXErvH3jjYK2ta8MgmJcM/TI3akVS73vz27/apPz36jtsmV4ube/crr1XaFlZ0X9SL9cPaJM++P3zJextmv7aq/NURxRa8mp574MRPqf1X9Bu7Y2DI/j/CajxVZEP+w19tuOfy/uHBwd9Nn7S4d/UdR0tlVG367S/zH8+KO93w/LsRTT4aWjL3vtdSCnucW7Wkaera18OS96w6GV7ur20PZPR5snyz+R1ujGvbKbSw9G2vfzNr9egBNeP++VZu8tHJJ0+83q5ZZMynG6d8N/bQhPynS515Py1t0ZpOwTWGnav25oWU5r/U+uvbnDWfhP1Wdnf5fSNy1n6a2P/Gwqy1K/r2zIjesLJO7zOZxe/r3S15c8+ad2X2zApKyn9o1jMHWvZvWj5paF7NsKNf5e/u377HO78v/scLFe4836rfhtyghFfycm5sLff0H5lTFmQFdXy3bJ/BA+NWdt5Yf1B67tePj5r9+ubKLa+s63NHzeZf728R0fCTzMTM+G5ZV/fPn369bkavS31SVhXuO3v2THCj8RUjppQ8HxpVN7NJ/Khmz+wrOPBq2Nodsy9fbVrs5L7NEwfOfCJuWf3krj2qNaqdsq7fuQrxMW2KJey7o+OMqBKdK4/PDjsSXaVVXrGvRh4aNW1T//o5Na7e1mRi/dj8nk/XennR4YQ328wtWmNZzOfXT/W6svWBFuuTzh0b2zh4xOdh9w+rVObnYjn3Nu//7MZmdfOa5vdd1iv86YIiM2K2XLu2Yd3Upc1qVgnenFG1RlyVhv3LVErf1aVMueNt5y3bFohv2HH6h7MO13zwntCYqv9In7vyfNq6gV1PXi+cuiy++dQjs2u9Ofa3a5k9Ywf0funaG9l3vPjXieMTJzS/seHrrmkNDscMil4++XKTTXMef7FwZnjN4r9XnVVzfdeuk7LnJj7QelDca99cmFqQtTVp+94KH76VVdDtsVHt1u36Y/6S5y7Prnqh0oWL1Saeq5o494ms9NyUxzsvar4+7INnUs4Nub9ipbR/tUi69NLOoOQKA95Zuin0u1v8WwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P92+NNBaVuS18Z3C92ZV3r7Y+9HDcu9vjYv8sDHfZKPDxm2J2tjh/L3T22+4MsGO4c/1uP+ccsalnsl4frPDZ45HzSy7eT3n60wpcvUd4vuapv8r57t6vZoOnTMhLTC5UkPDPxhxsuN663+dWLixUcaf1/tqQvv/PvB9kN++f6RBz/Zdvn6229++/Cn88Mfe6PJy9/WHVxYMXlNRl75IfWqlh2f0PDmXUGBQCAk6NZ2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/bnNnepN3inK6TijbtXW3FTy0Ko4blXl+bF3ng0Hup64ZUuLKswT1LuvZIWX3f0GONY58de/73Uf/In77h+fdKhd+z94VrXZoln5hdOaJH77e2vvnRplql500/evZ00brhVV6rnd59wUeTf8id17vJjkbB26adWra+9bAOSxqUHXhvlYT2ey7/lNGs2P7loVmpCQVvr797RcTk3edbVzlS/Mfsm3cFBQKB0FtbDQAAAPzXiKqz75e08uPH/tozpH9w9rNVb+7wIn/nQYHigdDAbYEzpY5HDxzdufKYiucG/zxuacKiP7eOaxG56YnUOpOuxn7X4pM1E2bETn3g7srx9eaOnHLqVIVb/FkAAADA/2VAnX17R9Tsc9/tWydHPpGZl3hz/wf9nQcFygZCgv4n8PHXbSKKDJtT/9Cl5vU/vS30cJn3Vs97dcuS03Hdx568khezYNye67F/jhnf7c19m5a3GfjBwcFDK7X+IqRpzgffVpic1rBkmQZ9Ss3pe/+T3x+MLbeqzpwhnctGNQ2+PajN/7wUOze64wefT95W+qOpM7Z0vFisS87mpZ/E3FXvdOrZeZ1L3J7WeE7lmq3/1Tyie8fIGZvmjirYvHZ0u9ErPs4pvadeweX8v0an3DN8/4j1z8XElelQLbPDgq+rdJ9QZe6sS20W1z9S7OGVT82p17z8k6tm/r726uMjF/X++LNln7fJ6Db0+U6PPfTFI0MTfx37/M/DX/loyKDVv2SNfqXV4FpPfn8qtc7ecRNuKzdwcFSXf59J/u2N3R/2j9iw+quq3ZbWKL+944Wkn6b06lxQcsW0VT8s2Nlia9g9847mzbj30f/3xuv+p54SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/ww4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX26yc0juqBA/ib3c0v22zb37b+SWwLpiqURAOlvdR/IIVoVUgFD6JFKdq0pbY1tQcjSk0VyRJBYr0IHrSFevCgKaVgexBRGsQUUgT1JNTWg/i/SKQIGkkyk2ymGdOsmkP9fGB5+97MfOe9Ny8vOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf1p9oWm8HHxx768dy9o/eb5z5LkNJ3btP7Trrvbh/e33vPLHwUcOH939Rv2OpjVbdm+87cjtR89uvarj91mDuyeKlrhaDCEaiULYfuDcl70nhxrH2qIQQj4q94SwJMqdXBKlElb/FkLYMtnP6QffG1m7dazseal+Wvv/UyHpcYVSPunPhPL0/nJ5Kcbr7PUbfvphR9fdQ/0P3HRny7Luh3umTomKVesphMWb09fnZsh99LHtra2Pdz7dtGnfnj1Xf/t24Yveh1o/PfzVuc6z1/b1Ded+/O7me09/tu/JuhDCgvgzJlmtTcnN4/K+EEJDVf66WcZ13SWOvy2jviIu/xeXpVlykuMrL/H8tEKqbJjj9XM10zP7Ny2c5/slknEujssTcdkyx5x88olCLgqFyb14ZzS1RkLVc4tCFOqq9tEo5Mbrucl6GK+HqXqUqudS9Xxdalzj940XWj6Kprcn56Xam+P2Qty+snqvn8H9Ge3XxGUx/kO9kNRD+suE0kVfJsc1LunXmb/oy3zIVe1BM7Un/V0XP4xS3FaKll50zegMkmPv76xsG3pi/QvljH5EA1GcH9WUf2vX8mOlStuhpqz8zbk4P1dT/vD5W5Z/Xfz8WGZ+f5Kfrym/ONT18jPff7gqc35+TuanUFP+R/3dr165/puNzVn5byb5xZryzxc2nRrtOXIgs/+rk/lZUFP+wIPHOy6sfacvMz8k+Q015TdXBo+/1dt4MDP/g2R+SjXlX982UPm4sndD5vyfTvIX1ZR/ZnTNL42nBt/NXJ93JPNTril/6bZVK8pPPXtj1t4Z9cz3f1iAy8sV8W+sSlyv9T3176p6X3itHE385lsYfxb9kzdKiareXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2YEDGQAAAABh/tZ5tB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KAAD//zIbSLQ=") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) close_range(r1, r2, 0x0) r3 = gettid() r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r4, &(0x7f0000000cc0)=""/384, 0x180) tkill(r3, 0xb) r5 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 40.920782284s ago: executing program 8 (id=1014): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="780000000001010400000000141a000002000000240001801400018008000100e000000108000200e00082b04ce874abc50b0100000000002400118353e70180080001000000000008000200ac1e00010c0002800500010000000000080007400000000114001080080001400000000008000240000000002fc0896ea5e4f383d303fe306a780da219af44985791b5d024eebaee97c968fd3a1178b4fb898dacecf411358a160e4ac379507a641d155dc0ac2c75d2798dd94fa9a58901d46d97bedea1ce3ba3e9c680d9eacdd9a2a7d767ed"], 0x78}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2bd6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffff8, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xc, &(0x7f00000009c0)=ANY=[@ANYRES8=r5, @ANYRES64=r1, @ANYRES8=r0, @ANYBLOB="e655cda9714d27d29a00100aaab732273edfdb3921c03cc43a73a552504756df855cc2a722c4dbf2967dfbbd88683aab40995163d35854e37bde20815353e562da6d8c80dc0ecd39d5dd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@noinit_itable}, {@acl}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0xc4, 0x452, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 39.799322862s ago: executing program 8 (id=1016): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETA(r2, 0x5432, 0xffffffffffffffff) unshare(0x8000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x580, 0x0) getdents64(r3, &(0x7f0000000540)=""/239, 0xef) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[], 0x0) 38.390820941s ago: executing program 7 (id=1019): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) syz_usb_disconnect(r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x749ee000) (fail_nth: 1) 37.988451532s ago: executing program 8 (id=1020): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000005c0)={{0x0}, 0x0}, 0x20) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) syz_usb_disconnect(r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x749ee000) 37.588797623s ago: executing program 38 (id=1020): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000005c0)={{0x0}, 0x0}, 0x20) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) syz_usb_disconnect(r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x749ee000) 35.172383127s ago: executing program 7 (id=1028): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x14) (fail_nth: 1) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5100) 34.744684818s ago: executing program 7 (id=1031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x2a500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xfffffff9, 0x98b, 0xd4000000}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f0000000340)={[{@acl}, {@heartbeat_none}, {@heartbeat_none}, {@coherency_full}, {@coherency_full}, {@coherency_buffered}, {@err_cont}, {@user_xattr}, {@barrier={'barrier', 0x3d, 0x6603}}, {@data_writeback}, {@intr}, {@journal_async_commit}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x34) socket(0x2b, 0x1, 0x101) symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') rename(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='./file0\x00') socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x8000, 0x7ffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r5, &(0x7f0000000040), 0x10) dup3(r4, r5, 0x0) ptrace$getenv(0x4201, 0x0, 0x937c, &(0x7f0000000000)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000880000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007afe59b56e8f92123705bead769a5e36d6eac0602aa116616dced67fc2973813f1dfffa0eaeb37a12ee90c5e21aeb8271234c94033d42ec1a5dad54c5cbffad72a793446616742922b701d8d215a29b805dbf2cc77a7675550fc519c15f0757f615dca20dc9022d980b71e44b5cb2bae56273d3fc8eafebe931132322b2bb575f7df0f9065eff1748dc762daf5bf6b8ec5d8e2e53a8979d5e9784a215a97b55d831857bb8459d6427472a7c5a978eaf4db7728c8d8210971ab11ff09e1573d3979a43c5c37da3e"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) unshare(0x40000000) 30.235917141s ago: executing program 7 (id=1038): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="780000000001010400000000141a000002000000240001801400018008000100e000000108000200e00082b04ce874abc50b0100000000002400118353e70180080001000000000008000200ac1e00010c0002800500010000000000080007400000000114001080080001400000000008000240000000002fc0896ea5e4f383d303fe306a780da219af44985791b5d024eebaee97c968fd3a1178b4fb898dacecf411358a160e4ac379507a641d155dc0ac2c75d2798dd94fa9a58901d46d97bedea1ce3ba3e9c680d9eacdd9a2a7d767ed"], 0x78}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2bd6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffff8, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xc, &(0x7f00000009c0)=ANY=[@ANYRES8=r5, @ANYRES64=r1, @ANYRES8=r0, @ANYBLOB="e655cda9714d27d29a00100aaab732273edfdb3921c03cc43a73a552504756df855cc2a722c4dbf2967dfbbd88683aab40995163d35854e37bde20815353e562da6d8c80dc0ecd39d5dd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@noinit_itable}, {@acl}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0xc4, 0x452, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 28.346347661s ago: executing program 7 (id=1040): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) 27.624109668s ago: executing program 7 (id=1042): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0x9a0001, 0x937}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeff}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xe10, 0x870, 0x1, 0x3, 0xd59f80, 0x19f2, 0x0, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x23, 0xfffffffd}) lseek(r0, 0x1000000, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x94, 0xa, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xd46}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x95}, 0x20000010) 27.346367045s ago: executing program 39 (id=1042): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0x9a0001, 0x937}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeff}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="08000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xe10, 0x870, 0x1, 0x3, 0xd59f80, 0x19f2, 0x0, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x23, 0xfffffffd}) lseek(r0, 0x1000000, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x94, 0xa, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xd46}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x95}, 0x20000010) 8.53646258s ago: executing program 4 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlinkprop={0x20, 0x6c, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48000, 0x22000}}, 0x20}, 0x1, 0x0, 0x0, 0x404c811}, 0x24004000) 7.918282855s ago: executing program 4 (id=1119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 7.516496866s ago: executing program 4 (id=1121): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 7.382956351s ago: executing program 4 (id=1124): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="06a705eee2c5189d"], 0x6, 0x635, &(0x7f0000000c80)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 6.86873451s ago: executing program 4 (id=1130): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f00000007c0)={[{@resgid}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@nodiscard}, {@noauto_da_alloc}]}, 0x2, 0x269, &(0x7f0000000400)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @aes256, 0x4, @desc2}) 6.329549593s ago: executing program 4 (id=1136): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000001180040200000000000000", 0x14, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 6.153234291s ago: executing program 40 (id=1136): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000001180040200000000000000", 0x14, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 4.156535005s ago: executing program 2 (id=1152): sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000480)=ANY=[]) 3.722560111s ago: executing program 3 (id=1156): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@orlov}, {@nombcache}, {@lazytime}, {@lazytime}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.722379565s ago: executing program 2 (id=1157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xfffffffffffffffd}) 3.344273907s ago: executing program 3 (id=1162): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.229491685s ago: executing program 2 (id=1163): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0) read$FUSE(r0, &(0x7f0000002e00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000000c0)={0x10, 0xfffffffffffffff5, r1}, 0x10) 2.545780079s ago: executing program 2 (id=1167): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x4004084) 2.362430918s ago: executing program 1 (id=1169): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b031000f3ff030002004788aa96a13bb1000000000081000500", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.100449382s ago: executing program 1 (id=1171): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x100c845, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00694ba7e2ae8959c3a1a1006a809454d1b9e49ca9bcfc4fc4988c654d24bf47f27cf5182a66907790f63da0382e7e8b6fa7bc01215b438ad0a0c54300383d371f98a51969e94000800000d1a09c066c83c90eb1659f642d9740b323fc7da8f03a2e547ee2dd62af8c0b51da0e3b75a1ccf23bb04d83fa977502819dcc5fbe622c4c35880cfe115f8743ddf5255ed6532d8ce9391e704bb6c64bf7bd3c353b218ccf99b00749bc4d22cdc096d92b7eaf583df7f136a59dade8dafa14bcefad343a259d07d5b6e7152b1031acbba628c1f5310e53cd87b92cdfd51281dba68af9b738f0a097f69b277ef9a9bd361570f431b43d9a107367e5ed6f27bd9ef071148bc60b4845accf826763066baf9b092754602e7fe53fbd347a39262850be890a0300863518f5cd8e1d6d388c66123eac43a65f0b3a585c80576666c4ee5d579c349d415741bd3de7fd5af2fa9b50f63bbd192fa1ee4eb9d2eb2b4afffa5dd5a32f292bffcecbcc18071375b13a01e4643601001601b7a1eca9816df0137b589441fca8b569993caed53c6d9deae2183ebdb1d37c31837dd8"], 0x1, 0x249, &(0x7f00000001c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) getdents64(r0, &(0x7f0000002ec0)=""/4096, 0x1000) 1.757323264s ago: executing program 9 (id=1173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000340)={[0xfffffffffffffff9]}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x38, 0x0) 1.671407412s ago: executing program 1 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040090) 1.468515834s ago: executing program 9 (id=1175): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 1.452154655s ago: executing program 3 (id=1176): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) writev(r1, &(0x7f0000000940)=[{&(0x7f0000000200)="c127a4d609322fe9b64f319c2b0bbd03f1cf5e62f2d1d6d36d01c28a", 0x1c}], 0x1) 1.382821227s ago: executing program 3 (id=1177): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.202269786s ago: executing program 9 (id=1178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="fffffff5b3aacc6e83140c9b4783ceb8fd07bed96d178856be27ecb3d9bad5afafc05b4864c8727912f454c150b006201e"], 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xe5, 0x2, 0x0, 0x101, 0x2, 0x4, 0x3, 0x80, 0x0, 0x51, 0x2, 0x0, 0x1, 0x8, 0x9, 0x2, 0x7d, 0xa, '\x00', 0x81, 0x10001}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000000070000040"]) 1.201995543s ago: executing program 1 (id=1179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@barrier}]}, 0x1, 0x7ae, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1.201864719s ago: executing program 2 (id=1180): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 1.115733351s ago: executing program 3 (id=1181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0xc0000001, 0xf, 0x0, 0x0, 0x80, 0xf4, 0x2}, {0x80000008, 0x2, 0x2, 0x3, 0x3, 0x3, 0x49cb}]}) 839.625925ms ago: executing program 1 (id=1182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x0, 0x0) 740.323486ms ago: executing program 9 (id=1183): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2000000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x2002, 0x0) 607.663432ms ago: executing program 3 (id=1184): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) 470.391121ms ago: executing program 9 (id=1185): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 465.782666ms ago: executing program 2 (id=1186): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001"], 0x30}}, 0x4000004) 407.005363ms ago: executing program 1 (id=1187): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000040)={0x200d54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 0s ago: executing program 9 (id=1188): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000055c0), 0x80000, 0x0) ppoll(&(0x7f0000005600)=[{r0, 0x1}], 0x1, &(0x7f0000005640)={0x0, 0x989680}, 0x0, 0x0) kernel console output (not intermixed with test programs): 00 00 40 00 00 00 01 00 00 00 40 .......@.......@ [ 606.804722][ T5923] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 606.831847][ T5923] 00000030: 00 00 00 00 d8 a6 7b fc 00 00 05 00 00 00 00 37 ......{........7 [ 606.848511][ T5923] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 606.873110][ T5923] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 606.908815][T10308] loop8: detected capacity change from 0 to 16 [ 606.919790][ T5923] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 606.950582][T10308] erofs: (device loop8): mounted with root inode @ nid 36. [ 606.960533][ T5923] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 606.985486][T10264] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x18 len 8 error 74 [ 607.005170][T10264] XFS (loop7): Failed to read root inode 0x500, error 117 [ 608.094904][ T5823] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.249338][T10319] loop7: detected capacity change from 0 to 16 [ 608.292559][T10319] erofs: (device loop7): mounted with root inode @ nid 36. [ 609.269413][T10330] loop8: detected capacity change from 0 to 256 [ 609.622581][T10335] loop9: detected capacity change from 0 to 4096 [ 609.821686][T10346] FAULT_INJECTION: forcing a failure. [ 609.821686][T10346] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 609.859778][T10346] CPU: 1 UID: 60929 PID: 10346 Comm: syz.7.862 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 609.870358][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 609.880456][T10346] Call Trace: [ 609.883769][T10346] [ 609.886729][T10346] dump_stack_lvl+0x241/0x360 [ 609.891446][T10346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.896681][T10346] ? __pfx__printk+0x10/0x10 [ 609.901308][T10346] should_fail_ex+0x3b0/0x4e0 [ 609.906020][T10346] _copy_from_user+0x2f/0xc0 [ 609.910643][T10346] __se_sys_memfd_create+0x2a1/0x840 [ 609.915975][T10346] do_syscall_64+0xf3/0x230 [ 609.920513][T10346] ? clear_bhb_loop+0x35/0x90 [ 609.925218][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.931136][T10346] RIP: 0033:0x7f735777e719 [ 609.935574][T10346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.955190][T10346] RSP: 002b:00007f73584efe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 609.963617][T10346] RAX: ffffffffffffffda RBX: 0000000000001510 RCX: 00007f735777e719 [ 609.971594][T10346] RDX: 00007f73584efef0 RSI: 0000000000000000 RDI: 00007f73577f1e82 [ 609.979606][T10346] RBP: 00000000200037c0 R08: 00007f73584efbb7 R09: 00007f73584efe40 [ 609.987585][T10346] R10: 000000000000000a R11: 0000000000000202 R12: 000000002001f980 [ 609.995561][T10346] R13: 00007f73584efef0 R14: 00007f73584efeb0 R15: 000000002001fa00 [ 610.003550][T10346] [ 610.422295][ T5878] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 610.552269][T10364] loop7: detected capacity change from 0 to 1024 [ 610.576892][T10364] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 610.588010][T10364] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 610.598503][T10364] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 610.624868][T10364] EXT4-fs (loop7): invalid journal inode [ 610.630829][T10364] EXT4-fs (loop7): can't get journal size [ 611.321010][T10364] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.866: blocks 2-2 from inode overlap system zone [ 611.336504][T10364] EXT4-fs (loop7): failed to initialize system zone (-117) [ 611.343920][T10364] EXT4-fs (loop7): mount failed [ 611.366103][ T5139] Bluetooth: hci6: command 0x0406 tx timeout [ 611.380957][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 611.428226][ T5878] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.438549][ T5878] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.467353][ T5878] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 611.479385][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 611.498969][ T5878] usb 6-1: Product: syz [ 611.503690][ T5878] usb 6-1: Manufacturer: syz [ 611.508312][ T5878] usb 6-1: SerialNumber: syz [ 611.630194][ T5878] appletouch 6-1:1.0: Could not find int-in endpoint [ 611.640936][ T5878] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 611.684518][ T5878] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 612.349449][T10373] loop5: detected capacity change from 0 to 2048 [ 612.362105][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 612.417834][T10373] EXT4-fs: Ignoring removed mblk_io_submit option [ 612.580907][T10373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.838646][T10373] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.983830][T10391] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 612.990796][T10391] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 613.402885][T10391] vhci_hcd vhci_hcd.0: Device attached [ 613.611820][T10396] vhci_hcd: connection closed [ 613.670068][ T6931] vhci_hcd: stop threads [ 613.704489][ T6931] vhci_hcd: release socket [ 613.732201][ T6931] vhci_hcd: disconnect device [ 614.207392][T10417] netlink: 'syz.9.874': attribute type 3 has an invalid length. [ 614.757005][ T8816] usb 6-1: USB disconnect, device number 9 [ 615.012739][T10430] ip6t_REJECT: ECHOREPLY is not supported [ 615.103981][T10435] FAULT_INJECTION: forcing a failure. [ 615.103981][T10435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.124848][T10435] CPU: 1 UID: 0 PID: 10435 Comm: syz.7.880 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 615.135068][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 615.145165][T10435] Call Trace: [ 615.148477][T10435] [ 615.151435][T10435] dump_stack_lvl+0x241/0x360 [ 615.156150][T10435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.161382][T10435] ? __pfx__printk+0x10/0x10 [ 615.166023][T10435] ? __pfx_lock_release+0x10/0x10 [ 615.171107][T10435] should_fail_ex+0x3b0/0x4e0 [ 615.175822][T10435] _copy_from_user+0x2f/0xc0 [ 615.180448][T10435] copy_msghdr_from_user+0xae/0x680 [ 615.185687][T10435] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 615.191535][T10435] ? __fget_files+0x2a/0x410 [ 615.196197][T10435] ? __fget_files+0x2a/0x410 [ 615.200833][T10435] __sys_sendmmsg+0x32b/0x720 [ 615.205643][T10435] ? __pfx___sys_sendmmsg+0x10/0x10 [ 615.210887][T10435] ? __pfx_lock_release+0x10/0x10 [ 615.215949][T10435] ? kstrtouint_from_user+0x128/0x190 [ 615.221392][T10435] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 615.227335][T10435] ? ksys_write+0x22a/0x2b0 [ 615.231875][T10435] ? __pfx_lock_release+0x10/0x10 [ 615.236956][T10435] ? vfs_write+0x730/0xd30 [ 615.241415][T10435] ? __mutex_unlock_slowpath+0x21e/0x790 [ 615.247102][T10435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 615.253137][T10435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 615.259502][T10435] ? do_syscall_64+0x100/0x230 [ 615.264330][T10435] __x64_sys_sendmmsg+0xa0/0xb0 [ 615.269219][T10435] do_syscall_64+0xf3/0x230 [ 615.273803][T10435] ? clear_bhb_loop+0x35/0x90 [ 615.278517][T10435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.284442][T10435] RIP: 0033:0x7f735777e719 [ 615.288918][T10435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.308559][T10435] RSP: 002b:00007f73584f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 615.317077][T10435] RAX: ffffffffffffffda RBX: 00007f7357935f80 RCX: 00007f735777e719 [ 615.325106][T10435] RDX: 0000000004924b68 RSI: 0000000020000140 RDI: 0000000000000003 [ 615.333114][T10435] RBP: 00007f73584f0090 R08: 0000000000000000 R09: 0000000000000000 [ 615.341113][T10435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.349165][T10435] R13: 0000000000000000 R14: 00007f7357935f80 R15: 00007ffd48636f18 [ 615.357230][T10435] [ 615.398535][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.878'. [ 615.455512][T10429] loop9: detected capacity change from 0 to 32768 [ 615.475186][T10429] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.879 (10429) [ 615.507346][T10429] BTRFS info (device loop9): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 615.523697][T10429] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 615.535803][T10429] BTRFS info (device loop9): using free-space-tree [ 616.076726][T10479] loop8: detected capacity change from 0 to 16 [ 616.137965][T10479] erofs: (device loop8): mounted with root inode @ nid 36. [ 616.180722][ T29] kauditd_printk_skb: 6557 callbacks suppressed [ 616.180743][ T29] audit: type=1804 audit(1731417746.406:6578): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.879" name="/newroot/17/bus/cgroup.controllers" dev="loop9" ino=263 res=1 errno=0 [ 616.223977][T10475] loop5: detected capacity change from 0 to 1024 [ 616.231398][T10475] EXT4-fs: Ignoring removed nobh option [ 616.310505][T10450] loop7: detected capacity change from 0 to 32768 [ 616.342795][T10450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.881 (10450) [ 616.510994][T10450] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.550157][T10475] loop5: detected capacity change from 0 to 1024 [ 616.567602][T10450] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 616.594253][T10475] EXT4-fs: Ignoring removed nobh option [ 616.614142][T10450] BTRFS info (device loop7): using free-space-tree [ 616.658453][T10475] loop5: detected capacity change from 0 to 1024 [ 616.736371][ T9388] BTRFS info (device loop9): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 616.751611][T10475] EXT4-fs: Ignoring removed nobh option [ 616.827240][ T9173] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.836749][T10475] loop5: detected capacity change from 0 to 1024 [ 616.865821][T10475] EXT4-fs: Ignoring removed nobh option [ 617.001419][T10475] loop5: detected capacity change from 0 to 1024 [ 617.008417][T10475] EXT4-fs: Ignoring removed nobh option [ 617.127651][T10475] loop5: detected capacity change from 0 to 1024 [ 617.162648][T10475] EXT4-fs: Ignoring removed nobh option [ 617.474441][T10475] loop5: detected capacity change from 0 to 1024 [ 617.491366][T10475] EXT4-fs: Ignoring removed nobh option [ 617.513819][T10526] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 617.560935][T10475] loop5: detected capacity change from 0 to 1024 [ 617.580702][T10475] EXT4-fs: Ignoring removed nobh option [ 617.719187][T10475] loop5: detected capacity change from 0 to 1024 [ 617.795309][T10475] EXT4-fs: Ignoring removed nobh option [ 617.973936][T10475] loop5: detected capacity change from 0 to 1024 [ 617.990123][T10475] EXT4-fs: Ignoring removed nobh option [ 618.175123][T10475] loop5: detected capacity change from 0 to 1024 [ 618.232631][T10475] EXT4-fs: Ignoring removed nobh option [ 618.270907][ T5909] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 618.335748][T10541] loop8: detected capacity change from 0 to 2048 [ 618.342052][T10475] loop5: detected capacity change from 0 to 1024 [ 618.383332][T10475] EXT4-fs: Ignoring removed nobh option [ 618.506178][T10475] loop5: detected capacity change from 0 to 1024 [ 618.558066][T10475] EXT4-fs: Ignoring removed nobh option [ 618.592146][T10545] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 618.630182][ T5909] usb 10-1: Using ep0 maxpacket: 32 [ 618.671393][ T5909] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 618.678200][T10541] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 618.679656][ T5909] usb 10-1: config 0 has no interface number 0 [ 618.700996][ T5909] usb 10-1: config 0 interface 12 has no altsetting 0 [ 618.712468][ T5909] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 618.721827][ T5909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.729927][ T5909] usb 10-1: Product: syz [ 618.735237][ T5909] usb 10-1: Manufacturer: syz [ 618.750517][ T5909] usb 10-1: SerialNumber: syz [ 618.758414][ T5909] usb 10-1: config 0 descriptor?? [ 618.795194][T10475] loop5: detected capacity change from 0 to 1024 [ 618.813720][T10475] EXT4-fs: Ignoring removed nobh option [ 618.835387][T10541] Remounting filesystem read-only [ 618.884933][T10550] loop7: detected capacity change from 0 to 16 [ 618.921690][T10550] erofs: (device loop7): mounted with root inode @ nid 36. [ 620.235314][T10563] loop7: detected capacity change from 0 to 16 [ 620.266264][T10563] erofs: (device loop7): mounted with root inode @ nid 36. [ 620.543539][ T8] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 620.680948][ T8] usb 6-1: device descriptor read/64, error -71 [ 620.931425][ T8] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 620.955657][ T5909] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 620.965136][ T5909] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 620.983332][ T5909] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 621.012045][ T5909] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 621.031519][T10585] loop1: detected capacity change from 0 to 2048 [ 621.045858][T10585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.051449][ T5909] usb 10-1: USB disconnect, device number 4 [ 621.094702][T10548] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 621.213025][ T8] usb 6-1: device descriptor read/64, error -71 [ 621.335256][ T8] usb usb6-port1: attempt power cycle [ 621.384001][T10595] FAULT_INJECTION: forcing a failure. [ 621.384001][T10595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.427311][T10595] CPU: 0 UID: 0 PID: 10595 Comm: syz.7.905 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 621.437545][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 621.447646][T10595] Call Trace: [ 621.450961][T10595] [ 621.453922][T10595] dump_stack_lvl+0x241/0x360 [ 621.458654][T10595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.463914][T10595] ? __pfx__printk+0x10/0x10 [ 621.468552][T10595] ? __pfx_lock_release+0x10/0x10 [ 621.473623][T10595] should_fail_ex+0x3b0/0x4e0 [ 621.478347][T10595] _copy_from_user+0x2f/0xc0 [ 621.483001][T10595] __sys_bpf+0x1a4/0x810 [ 621.487275][T10595] ? __pfx___sys_bpf+0x10/0x10 [ 621.492086][T10595] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 621.498104][T10595] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 621.504476][T10595] ? do_syscall_64+0x100/0x230 [ 621.509285][T10595] __x64_sys_bpf+0x7c/0x90 [ 621.513750][T10595] do_syscall_64+0xf3/0x230 [ 621.518298][T10595] ? clear_bhb_loop+0x35/0x90 [ 621.523035][T10595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.528972][T10595] RIP: 0033:0x7f735777e719 [ 621.533426][T10595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.553071][T10595] RSP: 002b:00007f73584f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 621.561529][T10595] RAX: ffffffffffffffda RBX: 00007f7357935f80 RCX: 00007f735777e719 [ 621.569543][T10595] RDX: 0000000000000094 RSI: 0000000020000540 RDI: 0000000000000005 [ 621.577556][T10595] RBP: 00007f73584f0090 R08: 0000000000000000 R09: 0000000000000000 [ 621.585569][T10595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.593574][T10595] R13: 0000000000000001 R14: 00007f7357935f80 R15: 00007ffd48636f18 [ 621.601592][T10595] [ 621.970994][ T8] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 621.992645][ T8] usb 6-1: device descriptor read/8, error -71 [ 622.005226][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.7.909'. [ 622.231117][ T8] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 622.242841][T10623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.268690][T10623] FAULT_INJECTION: forcing a failure. [ 622.268690][T10623] name failslab, interval 1, probability 0, space 0, times 0 [ 622.285906][ T8] usb 6-1: device descriptor read/8, error -71 [ 622.294973][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.8.912 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 622.305172][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 622.315257][T10623] Call Trace: [ 622.318567][T10623] [ 622.321522][T10623] dump_stack_lvl+0x241/0x360 [ 622.326249][T10623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.331493][T10623] ? __pfx__printk+0x10/0x10 [ 622.336125][T10623] ? fs_reclaim_acquire+0x93/0x130 [ 622.341270][T10623] ? __pfx___might_resched+0x10/0x10 [ 622.346604][T10623] should_fail_ex+0x3b0/0x4e0 [ 622.351330][T10623] should_failslab+0xac/0x100 [ 622.356051][T10623] __kmalloc_noprof+0xdd/0x4c0 [ 622.360852][T10623] ? kstrtouint_from_user+0x128/0x190 [ 622.366256][T10623] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 622.371999][T10623] tomoyo_realpath_from_path+0xcf/0x5e0 [ 622.377573][T10623] tomoyo_path_number_perm+0x236/0x860 [ 622.383043][T10623] ? __lock_acquire+0x1397/0x2100 [ 622.388078][T10623] ? tomoyo_path_number_perm+0x206/0x860 [ 622.393725][T10623] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 622.399745][T10623] ? __fget_files+0x2a/0x410 [ 622.404365][T10623] ? __fget_files+0x2a/0x410 [ 622.409002][T10623] security_file_ioctl+0xc6/0x2a0 [ 622.414034][T10623] __se_sys_ioctl+0x46/0x170 [ 622.418631][T10623] do_syscall_64+0xf3/0x230 [ 622.423145][T10623] ? clear_bhb_loop+0x35/0x90 [ 622.427834][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.433734][T10623] RIP: 0033:0x7f993e97e719 [ 622.438156][T10623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.457780][T10623] RSP: 002b:00007f993f772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.466206][T10623] RAX: ffffffffffffffda RBX: 00007f993eb35f80 RCX: 00007f993e97e719 [ 622.474180][T10623] RDX: 0000000020000180 RSI: 0000000000003b89 RDI: 0000000000000003 [ 622.482157][T10623] RBP: 00007f993f772090 R08: 0000000000000000 R09: 0000000000000000 [ 622.490128][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.498102][T10623] R13: 0000000000000000 R14: 00007f993eb35f80 R15: 00007fff1dc0c368 [ 622.506092][T10623] [ 622.532226][ T8] usb usb6-port1: unable to enumerate USB device [ 622.550044][T10585] xt_TCPMSS: Only works on TCP SYN packets [ 622.555801][ T29] audit: type=1804 audit(1731417752.776:6579): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.903" name="/newroot/215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=1367 res=1 errno=0 [ 622.649021][T10623] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.696291][ T29] audit: type=1804 audit(1731417752.776:6580): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.903" name="/newroot/215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=1367 res=1 errno=0 [ 622.868655][T10629] loop9: detected capacity change from 0 to 16 [ 623.106752][T10629] erofs: (device loop9): mounted with root inode @ nid 36. [ 624.239766][T10621] loop7: detected capacity change from 0 to 32768 [ 624.282783][T10621] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 624.322417][ T5823] UDF-fs: warning (device loop1): udf_evict_inode: Inode 1367 (mode 100000) has inode size 81393 different from extent length 81408. Filesystem need not be standards compliant. [ 624.348836][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.916'. [ 624.600710][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.610322][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.724705][T10621] XFS (loop7): Ending clean mount [ 625.219822][T10670] random: crng reseeded on system resumption [ 625.437575][T10663] Restarting kernel threads ... done. [ 625.527414][ T9173] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 626.086042][T10667] loop5: detected capacity change from 0 to 40427 [ 626.131327][T10667] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 626.175565][T10667] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 626.229728][T10667] F2FS-fs (loop5): Found nat_bits in checkpoint [ 626.443844][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.921'. [ 626.465382][T10667] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 626.486765][T10667] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 627.020655][T10706] kernel read not supported for file /rmdF¼ì (pid: 10706 comm: syz.1.925) [ 627.088834][ T29] audit: type=1800 audit(1731417757.316:6581): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.925" name=726D64461716BCEC dev="mqueue" ino=23311 res=0 errno=0 [ 627.389804][T10714] No control pipe specified [ 627.594980][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 627.895320][ T5833] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 627.952919][T10731] loop5: detected capacity change from 0 to 128 [ 627.984295][T10731] befs: Bad value for 'uid' [ 628.034600][T10731] befs: Bad value for 'uid' [ 628.090967][ T5833] usb 10-1: Using ep0 maxpacket: 32 [ 628.127769][T10739] FAULT_INJECTION: forcing a failure. [ 628.127769][T10739] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.156260][ T5833] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 628.230175][ T5833] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 628.274277][T10739] CPU: 0 UID: 0 PID: 10739 Comm: syz.8.934 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 628.284493][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 628.294616][T10739] Call Trace: [ 628.297903][T10739] [ 628.300850][T10739] dump_stack_lvl+0x241/0x360 [ 628.305546][T10739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 628.310758][T10739] ? __pfx__printk+0x10/0x10 [ 628.315366][T10739] should_fail_ex+0x3b0/0x4e0 [ 628.320056][T10739] prepare_alloc_pages+0x1da/0x5b0 [ 628.325183][T10739] __alloc_pages_noprof+0x16f/0x710 [ 628.330391][T10739] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 628.336115][T10739] ? register_lock_class+0x102/0x980 [ 628.341408][T10739] ? __pfx_register_lock_class+0x10/0x10 [ 628.347045][T10739] ? __lock_acquire+0x1397/0x2100 [ 628.352092][T10739] ? mark_lock+0x9a/0x360 [ 628.356430][T10739] ___kmalloc_large_node+0x8b/0x1d0 [ 628.361638][T10739] __kmalloc_large_node_noprof+0x1a/0x80 [ 628.367284][T10739] __kmalloc_noprof+0x339/0x4c0 [ 628.372148][T10739] ? iovec_from_user+0x87/0x240 [ 628.377009][T10739] iovec_from_user+0x87/0x240 [ 628.381698][T10739] __import_iovec+0x152/0x870 [ 628.386408][T10739] import_iovec+0xeb/0x120 [ 628.390833][T10739] vfs_writev+0x1c2/0xba0 [ 628.395177][T10739] ? trace_contention_end+0x3c/0x120 [ 628.400468][T10739] ? __mutex_lock+0x37f/0xee0 [ 628.405154][T10739] ? __pfx_lock_acquire+0x10/0x10 [ 628.410207][T10739] ? __pfx_vfs_writev+0x10/0x10 [ 628.415080][T10739] ? __fget_files+0x2a/0x410 [ 628.419682][T10739] ? __fget_files+0x395/0x410 [ 628.424402][T10739] ? __fget_files+0x2a/0x410 [ 628.429031][T10739] do_writev+0x1b6/0x360 [ 628.433294][T10739] ? __pfx_do_writev+0x10/0x10 [ 628.438088][T10739] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 628.444362][T10739] ? syscall_user_dispatch+0x4e/0x90 [ 628.449672][T10739] do_syscall_64+0xf3/0x230 [ 628.454190][T10739] ? clear_bhb_loop+0x35/0x90 [ 628.458923][T10739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.464838][T10739] RIP: 0033:0x7f993e97e719 [ 628.469257][T10739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.488878][T10739] RSP: 002b:00007f993f751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 628.497323][T10739] RAX: ffffffffffffffda RBX: 00007f993eb36058 RCX: 00007f993e97e719 [ 628.505306][T10739] RDX: 100000000000022d RSI: 00000000200003c0 RDI: 0000000000000005 [ 628.513284][T10739] RBP: 00007f993f751090 R08: 0000000000000000 R09: 0000000000000000 [ 628.521267][T10739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.529244][T10739] R13: 0000000000000000 R14: 00007f993eb36058 R15: 00007fff1dc0c368 [ 628.537239][T10739] [ 628.580820][ T5833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 629.028252][ T54] Bluetooth: hci5: unexpected event for opcode 0x0021 [ 629.296478][ T5833] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 629.307300][ T5833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 629.317674][ T5833] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 629.327628][ T5833] usb 10-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 629.356690][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.936'. [ 629.367739][ T5833] usb 10-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=30.76 [ 629.378881][ T5833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.394111][ T5833] usb 10-1: Product: syz [ 629.398430][ T5833] usb 10-1: Manufacturer: syz [ 629.408770][ T5833] usb 10-1: SerialNumber: syz [ 629.480251][T10753] FAULT_INJECTION: forcing a failure. [ 629.480251][T10753] name failslab, interval 1, probability 0, space 0, times 0 [ 629.505953][ T5833] usb 10-1: config 0 descriptor?? [ 629.520880][T10753] CPU: 0 UID: 0 PID: 10753 Comm: syz.1.938 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 629.531208][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 629.531904][T10755] No control pipe specified [ 629.541279][T10753] Call Trace: [ 629.541311][T10753] [ 629.541322][T10753] dump_stack_lvl+0x241/0x360 [ 629.541359][T10753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.541386][T10753] ? __pfx__printk+0x10/0x10 [ 629.541414][T10753] ? fs_reclaim_acquire+0x93/0x130 [ 629.541436][T10753] ? __pfx___might_resched+0x10/0x10 [ 629.541472][T10753] should_fail_ex+0x3b0/0x4e0 [ 629.541502][T10753] should_failslab+0xac/0x100 [ 629.586314][T10753] __kmalloc_noprof+0xdd/0x4c0 [ 629.591099][T10753] ? kstrtouint_from_user+0x128/0x190 [ 629.596485][T10753] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 629.602222][T10753] tomoyo_realpath_from_path+0xcf/0x5e0 [ 629.607793][T10753] tomoyo_path_number_perm+0x236/0x860 [ 629.613270][T10753] ? __lock_acquire+0x1397/0x2100 [ 629.618314][T10753] ? tomoyo_path_number_perm+0x206/0x860 [ 629.623978][T10753] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 629.629990][T10753] ? __fget_files+0x2a/0x410 [ 629.634597][T10753] ? __fget_files+0x2a/0x410 [ 629.639201][T10753] security_file_ioctl+0xc6/0x2a0 [ 629.644234][T10753] __se_sys_ioctl+0x46/0x170 [ 629.648830][T10753] do_syscall_64+0xf3/0x230 [ 629.653379][T10753] ? clear_bhb_loop+0x35/0x90 [ 629.658068][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.663972][T10753] RIP: 0033:0x7f489c57e719 [ 629.668405][T10753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.688023][T10753] RSP: 002b:00007f489d38b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.696466][T10753] RAX: ffffffffffffffda RBX: 00007f489c735f80 RCX: 00007f489c57e719 [ 629.704445][T10753] RDX: 0000000020000080 RSI: 00000000c040565f RDI: 0000000000000003 [ 629.712419][T10753] RBP: 00007f489d38b090 R08: 0000000000000000 R09: 0000000000000000 [ 629.720392][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.728369][T10753] R13: 0000000000000000 R14: 00007f489c735f80 R15: 00007ffc63883518 [ 629.736385][T10753] [ 629.801224][T10753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 629.864284][T10722] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 629.891799][T10758] loop8: detected capacity change from 0 to 1024 [ 629.958057][ T5833] ums-sddr09 10-1:0.0: USB Mass Storage device detected [ 629.968705][T10758] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 630.001129][ T5882] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 630.088704][ T5833] ums-sddr09 10-1:0.0: probe with driver ums-sddr09 failed with error -22 [ 630.173319][T10722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.208253][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 630.214171][T10722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.272957][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 630.299605][T10582] usb 10-1: USB disconnect, device number 5 [ 630.360812][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 630.378561][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 630.500959][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 630.535462][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.652170][ T5882] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 630.681345][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.704810][ T5882] usb 6-1: Product: syz [ 630.709034][ T5882] usb 6-1: Manufacturer: syz [ 630.734509][ T5882] usb 6-1: SerialNumber: syz [ 630.756731][ T5882] usb 6-1: config 0 descriptor?? [ 630.991135][ T5882] appledisplay: Apple Cinema Display connected [ 631.115884][T10760] loop1: detected capacity change from 0 to 32768 [ 631.160936][T10760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.941 (10760) [ 631.233971][ T5882] usb 6-1: USB disconnect, device number 14 [ 631.239948][ C0] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 631.270237][T10760] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 631.301015][ T5882] appledisplay: Apple Cinema Display disconnected [ 631.331018][T10760] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 631.339773][T10760] BTRFS info (device loop1): using free-space-tree [ 631.759776][T10785] loop8: detected capacity change from 0 to 40427 [ 631.914494][T10785] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x1fffff [ 631.958143][T10781] loop7: detected capacity change from 0 to 32768 [ 631.972269][T10785] F2FS-fs (loop8): invalid crc value [ 632.027685][T10785] F2FS-fs (loop8): Found nat_bits in checkpoint [ 632.169558][T10790] loop9: detected capacity change from 0 to 40427 [ 632.322409][T10790] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 632.330163][T10790] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 633.208225][T10790] F2FS-fs (loop9): Found nat_bits in checkpoint [ 633.363177][T10785] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 633.371637][T10790] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 633.389352][T10790] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 633.443435][ T29] audit: type=1800 audit(1731417763.656:6582): pid=10790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.947" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 633.566995][ T5823] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 633.611387][ T9200] bio_check_eod: 2 callbacks suppressed [ 633.611406][ T9200] syz-executor: attempt to access beyond end of device [ 633.611406][ T9200] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 633.635863][ T9200] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 633.915196][T10827] loop5: detected capacity change from 0 to 32768 [ 634.110808][T10827] [ 634.110808][T10827] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 634.110808][T10827] [ 634.354538][T10825] [ 634.354538][T10825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 634.354538][T10825] [ 634.399445][T10825] [ 634.399445][T10825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 634.399445][T10825] [ 634.449820][T10825] [ 634.449820][T10825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 634.449820][T10825] [ 634.819639][T10852] loop8: detected capacity change from 0 to 32768 [ 634.878005][T10852] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.951 (10852) [ 635.039148][ T111] [ 635.039148][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.039148][ T111] [ 635.187306][T10852] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 635.197639][T10852] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 635.206387][T10852] BTRFS info (device loop8): using free-space-tree [ 635.240428][ T6852] [ 635.240428][ T6852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.240428][ T6852] [ 635.318603][ T6852] [ 635.318603][ T6852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.318603][ T6852] [ 635.755869][T10893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.763889][T10893] IPv6: NLM_F_CREATE should be set when creating new route [ 635.860044][T10898] FAULT_INJECTION: forcing a failure. [ 635.860044][T10898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.873377][T10898] CPU: 1 UID: 0 PID: 10898 Comm: syz.5.954 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 635.883574][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 635.893669][T10898] Call Trace: [ 635.897000][T10898] [ 635.899962][T10898] dump_stack_lvl+0x241/0x360 [ 635.904686][T10898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.909931][T10898] ? __pfx__printk+0x10/0x10 [ 635.914555][T10898] ? __pfx_lock_release+0x10/0x10 [ 635.919617][T10898] should_fail_ex+0x3b0/0x4e0 [ 635.924335][T10898] _copy_from_user+0x2f/0xc0 [ 635.928961][T10898] copy_msghdr_from_user+0xae/0x680 [ 635.934201][T10898] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 635.940050][T10898] ? __fget_files+0x2a/0x410 [ 635.944679][T10898] ? __fget_files+0x2a/0x410 [ 635.949318][T10898] __sys_sendmmsg+0x32b/0x720 [ 635.954022][T10898] ? __pfx___sys_sendmmsg+0x10/0x10 [ 635.959322][T10898] ? __pfx_lock_release+0x10/0x10 [ 635.964357][T10898] ? kstrtouint_from_user+0x128/0x190 [ 635.969750][T10898] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 635.975650][T10898] ? ksys_write+0x22a/0x2b0 [ 635.980156][T10898] ? __pfx_lock_release+0x10/0x10 [ 635.985215][T10898] ? vfs_write+0x730/0xd30 [ 635.989650][T10898] ? __mutex_unlock_slowpath+0x21e/0x790 [ 635.995321][T10898] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 636.001318][T10898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.007659][T10898] ? do_syscall_64+0x100/0x230 [ 636.012439][T10898] __x64_sys_sendmmsg+0xa0/0xb0 [ 636.017304][T10898] do_syscall_64+0xf3/0x230 [ 636.021820][T10898] ? clear_bhb_loop+0x35/0x90 [ 636.026523][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.032420][T10898] RIP: 0033:0x7f39e737e719 [ 636.036835][T10898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.056446][T10898] RSP: 002b:00007f39e80b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 636.064879][T10898] RAX: ffffffffffffffda RBX: 00007f39e7535f80 RCX: 00007f39e737e719 [ 636.072862][T10898] RDX: 0000000000000001 RSI: 0000000020008c80 RDI: 0000000000000003 [ 636.080858][T10898] RBP: 00007f39e80b6090 R08: 0000000000000000 R09: 0000000000000000 [ 636.088835][T10898] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 636.096810][T10898] R13: 0000000000000000 R14: 00007f39e7535f80 R15: 00007ffd00de2fd8 [ 636.104798][T10898] [ 636.181405][T10893] loop9: detected capacity change from 0 to 1024 [ 636.247560][T10893] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 636.292363][T10903] FAULT_INJECTION: forcing a failure. [ 636.292363][T10903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.305567][T10903] CPU: 1 UID: 0 PID: 10903 Comm: syz.7.959 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 636.308289][T10893] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #11: comm syz.9.958: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 636.315723][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 636.315742][T10903] Call Trace: [ 636.315751][T10903] [ 636.315761][T10903] dump_stack_lvl+0x241/0x360 [ 636.315797][T10903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.315825][T10903] ? __pfx__printk+0x10/0x10 [ 636.315852][T10903] ? __pfx_lock_release+0x10/0x10 [ 636.315877][T10903] ? vfs_write+0x730/0xd30 [ 636.315902][T10903] should_fail_ex+0x3b0/0x4e0 [ 636.315933][T10903] _copy_from_user+0x2f/0xc0 [ 636.315958][T10903] get_timespec64+0x97/0x280 [ 636.315985][T10903] ? __pfx_get_timespec64+0x10/0x10 [ 636.316007][T10903] ? __fget_files+0x2a/0x410 [ 636.316043][T10903] __x64_sys_recvmmsg+0x140/0x250 [ 636.403213][T10903] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 636.408768][T10903] ? do_syscall_64+0x100/0x230 [ 636.413539][T10903] ? do_syscall_64+0xb6/0x230 [ 636.418228][T10903] do_syscall_64+0xf3/0x230 [ 636.422750][T10903] ? clear_bhb_loop+0x35/0x90 [ 636.427436][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.433337][T10903] RIP: 0033:0x7f735777e719 [ 636.437754][T10903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.457395][T10903] RSP: 002b:00007f73584f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 636.465821][T10903] RAX: ffffffffffffffda RBX: 00007f7357935f80 RCX: 00007f735777e719 [ 636.473802][T10903] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 636.481782][T10903] RBP: 00007f73584f0090 R08: 0000000020003700 R09: 0000000000000000 [ 636.489753][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.497728][T10903] R13: 0000000000000000 R14: 00007f7357935f80 R15: 00007ffd48636f18 [ 636.505717][T10903] [ 636.527028][T10893] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.958: couldn't read orphan inode 11 (err -117) [ 636.553149][T10893] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.623883][T10893] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.958: Invalid block bitmap block 0 in block_group 0 [ 636.776115][T10893] Quota error (device loop9): write_blk: dquota write failed [ 636.779279][ T9200] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 636.786098][T10893] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 636.804508][T10893] EXT4-fs error (device loop9): ext4_acquire_dquot:6925: comm syz.9.958: Failed to acquire dquot type 0 [ 637.015087][ T9388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.313876][T10917] loop8: detected capacity change from 0 to 128 [ 637.343415][T10917] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 637.387175][T10917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.425042][T10902] loop5: detected capacity change from 0 to 32768 [ 637.711128][T10902] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 637.764128][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.966'. [ 637.873803][T10948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.074828][T10954] loop9: detected capacity change from 0 to 1024 [ 638.103073][T10902] XFS (loop5): Ending clean mount [ 638.111746][T10954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.161127][T10954] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.251060][ T29] audit: type=1804 audit(1731417768.466:6583): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.960" name="/newroot/140/file0/bus" dev="loop5" ino=9289 res=1 errno=0 [ 638.294090][T10965] loop8: detected capacity change from 0 to 128 [ 638.337814][T10965] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 638.352013][T10954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.360076][T10965] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 638.372402][ T29] audit: type=1804 audit(1731417768.596:6584): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.960" name="/newroot/140/file0/bus" dev="loop5" ino=9289 res=1 errno=0 [ 638.516436][ T9388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.668739][ T6852] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 639.009931][T10977] loop9: detected capacity change from 0 to 32768 [ 639.158205][T10977] [ 639.158205][T10977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 639.158205][T10977] [ 639.203129][T10991] loop5: detected capacity change from 0 to 2048 [ 639.216133][T10977] [ 639.216133][T10977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 639.216133][T10977] [ 639.255637][T10991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.264916][T10977] [ 639.264916][T10977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 639.264916][T10977] [ 639.338496][T10977] [ 639.338496][T10977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 639.338496][T10977] [ 639.375797][T10977] [ 639.375797][T10977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 639.375797][T10977] [ 639.413233][T10977] [ 639.413233][T10977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 639.413233][T10977] [ 639.565923][ T112] [ 639.565923][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 639.565923][ T112] [ 640.855089][ T9388] [ 640.855089][ T9388] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 640.855089][ T9388] [ 640.956492][ T9388] [ 640.956492][ T9388] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 640.956492][ T9388] [ 641.574004][T11005] loop7: detected capacity change from 0 to 32768 [ 641.620870][ T46] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 641.655660][T11005] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.655660][T11005] [ 641.723024][T11005] ERROR: (device loop7): remounting filesystem as read-only [ 641.743485][T11032] vlan2: entered promiscuous mode [ 641.749629][T11032] bond0: entered promiscuous mode [ 641.755405][T11005] xtLookup: xtSearch returned -5 [ 641.760392][T11005] add_index: get/read_metapage failed! [ 641.763139][T11034] FAULT_INJECTION: forcing a failure. [ 641.763139][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 641.773303][T11005] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.773303][T11005] [ 641.790557][T11032] bond_slave_0: entered promiscuous mode [ 641.799593][T11032] bond_slave_1: entered promiscuous mode [ 641.806963][T11005] xtLookup: xtSearch returned -5 [ 641.813551][T11005] free_index: error reading directory table [ 641.813578][ T46] usb 10-1: Using ep0 maxpacket: 32 [ 641.819558][T11005] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.819558][T11005] [ 641.835641][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.5.982 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 641.839507][T11005] xtLookup: xtSearch returned -5 [ 641.845826][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 641.845844][T11034] Call Trace: [ 641.845854][T11034] [ 641.845864][T11034] dump_stack_lvl+0x241/0x360 [ 641.845899][T11034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.845927][T11034] ? __pfx__printk+0x10/0x10 [ 641.845955][T11034] ? fs_reclaim_acquire+0x93/0x130 [ 641.845977][T11034] ? __pfx___might_resched+0x10/0x10 [ 641.853134][T11005] free_index: error reading directory table [ 641.860954][T11034] should_fail_ex+0x3b0/0x4e0 [ 641.860994][T11034] should_failslab+0xac/0x100 [ 641.861023][T11034] __kmalloc_noprof+0xdd/0x4c0 [ 641.861048][T11034] ? kstrtouint_from_user+0x128/0x190 [ 641.865183][T11005] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.865183][T11005] [ 641.867263][T11034] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 641.867309][T11034] tomoyo_realpath_from_path+0xcf/0x5e0 [ 641.874928][T11005] xtLookup: xtSearch returned -5 [ 641.877176][T11034] tomoyo_path_number_perm+0x236/0x860 [ 641.877212][T11034] ? __lock_acquire+0x1397/0x2100 [ 641.882311][T11005] free_index: error reading directory table [ 641.886878][T11034] ? tomoyo_path_number_perm+0x206/0x860 [ 641.886911][T11034] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 641.886974][T11034] ? __fget_files+0x2a/0x410 [ 641.896200][T11005] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.896200][T11005] [ 641.898186][T11034] ? __fget_files+0x2a/0x410 [ 641.898230][T11034] security_file_ioctl+0xc6/0x2a0 [ 641.903499][T11005] xtLookup: xtSearch returned -5 [ 641.907589][T11034] __se_sys_ioctl+0x46/0x170 [ 641.907623][T11034] do_syscall_64+0xf3/0x230 [ 641.907652][T11034] ? clear_bhb_loop+0x35/0x90 [ 641.907685][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.916011][T11005] free_index: error reading directory table [ 641.917780][T11034] RIP: 0033:0x7f39e737e719 [ 641.917806][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.917826][T11034] RSP: 002b:00007f39e80b6038 EFLAGS: 00000246 [ 641.928588][T11005] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.928588][T11005] [ 641.933490][T11034] ORIG_RAX: 0000000000000010 [ 641.933504][T11034] RAX: ffffffffffffffda RBX: 00007f39e7535f80 RCX: 00007f39e737e719 [ 641.933522][T11034] RDX: 0000000020001d80 RSI: 0000000000003b70 RDI: 0000000000000003 [ 641.933547][T11034] RBP: 00007f39e80b6090 R08: 0000000000000000 R09: 0000000000000000 [ 641.933561][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.933573][T11034] R13: 0000000000000000 R14: 00007f39e7535f80 R15: 00007ffd00de2fd8 [ 641.933605][T11034] [ 641.963145][T11034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 641.980611][ T9200] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.001106][ T46] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 642.041082][T11005] xtLookup: xtSearch returned -5 [ 642.053367][ T46] usb 10-1: config 0 has no interface number 0 [ 642.095607][T11032] bond0: left promiscuous mode [ 642.098899][ T46] usb 10-1: config 0 interface 12 has no altsetting 0 [ 642.170547][T11005] free_index: error reading directory table [ 642.178812][T11005] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 642.178812][T11005] [ 642.189658][T11005] xtLookup: xtSearch returned -5 [ 642.194751][T11005] add_index: get/read_metapage failed! [ 642.269518][T11032] bond_slave_0: left promiscuous mode [ 642.294470][T11032] bond_slave_1: left promiscuous mode [ 642.302728][T11005] xt_CT: No such helper "pptp" [ 642.354264][ T46] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 642.363707][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.371902][ T46] usb 10-1: Product: syz [ 642.376168][ T46] usb 10-1: Manufacturer: syz [ 642.381246][ T46] usb 10-1: SerialNumber: syz [ 642.390815][ T46] usb 10-1: config 0 descriptor?? [ 642.414458][T11040] loop8: detected capacity change from 0 to 512 [ 642.422702][T11040] EXT4-fs (loop8): blocks per group (255) and clusters per group (8192) inconsistent [ 642.445652][T11042] loop5: detected capacity change from 0 to 64 [ 642.893904][ T46] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 642.902907][ T46] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 642.919795][ T46] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 642.930171][ T46] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 642.946388][T11055] FAULT_INJECTION: forcing a failure. [ 642.946388][T11055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.970912][ T46] usb 10-1: USB disconnect, device number 6 [ 642.998737][T11055] CPU: 0 UID: 0 PID: 11055 Comm: syz.9.987 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 643.008945][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 643.019041][T11055] Call Trace: [ 643.022345][T11055] [ 643.025295][T11055] dump_stack_lvl+0x241/0x360 [ 643.029982][T11055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.035203][T11055] ? __pfx__printk+0x10/0x10 [ 643.039801][T11055] should_fail_ex+0x3b0/0x4e0 [ 643.044506][T11055] _copy_from_user+0x2f/0xc0 [ 643.049138][T11055] copy_from_sockptr+0x62/0xa0 [ 643.053927][T11055] packet_setsockopt+0xbb0/0x1970 [ 643.058966][T11055] ? __pfx_packet_setsockopt+0x10/0x10 [ 643.064445][T11055] ? __lock_acquire+0x1397/0x2100 [ 643.069535][T11055] ? aa_sk_perm+0x96d/0xab0 [ 643.074049][T11055] ? __pfx_aa_sk_perm+0x10/0x10 [ 643.078904][T11055] ? __pfx_lock_acquire+0x10/0x10 [ 643.083933][T11055] ? aa_sock_opt_perm+0x79/0x120 [ 643.088901][T11055] ? __pfx_packet_setsockopt+0x10/0x10 [ 643.094376][T11055] do_sock_setsockopt+0x3af/0x720 [ 643.099437][T11055] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 643.105029][T11055] ? __fget_files+0x395/0x410 [ 643.109727][T11055] ? __fget_files+0x2a/0x410 [ 643.114333][T11055] __x64_sys_setsockopt+0x1ee/0x280 [ 643.119566][T11055] do_syscall_64+0xf3/0x230 [ 643.124084][T11055] ? clear_bhb_loop+0x35/0x90 [ 643.128830][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.134756][T11055] RIP: 0033:0x7ff70ed7e719 [ 643.139187][T11055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.158814][T11055] RSP: 002b:00007ff70fb3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.167243][T11055] RAX: ffffffffffffffda RBX: 00007ff70ef35f80 RCX: 00007ff70ed7e719 [ 643.175221][T11055] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 643.183196][T11055] RBP: 00007ff70fb3c090 R08: 000000000000001c R09: 0000000000000000 [ 643.191184][T11055] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 643.199198][T11055] R13: 0000000000000000 R14: 00007ff70ef35f80 R15: 00007ffce7d66fa8 [ 643.207211][T11055] [ 643.210373][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.219216][ T8816] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 643.381106][ T8816] usb 2-1: Using ep0 maxpacket: 32 [ 643.418950][ T8816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.424241][T11067] loop9: detected capacity change from 0 to 1024 [ 643.447806][ T8816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.473821][T11067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.535956][ T8816] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 643.558386][T11067] UDF-fs: error (device loop9): udf_read_inode: (ino 832) failed !bh [ 643.581444][ T8816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.600300][T11067] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 643.612880][ T8816] usb 2-1: config 0 descriptor?? [ 643.632098][ T8816] hub 2-1:0.0: USB hub found [ 643.737735][T11070] loop5: detected capacity change from 0 to 8192 [ 643.821041][ T8816] hub 2-1:0.0: 1 port detected [ 644.053010][ T8816] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 644.060350][ T8816] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 644.101678][ T8816] usbhid 2-1:0.0: can't add hid device: -71 [ 644.118893][ T8816] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 644.216132][ T8816] usb 2-1: USB disconnect, device number 14 [ 644.354732][T11097] FAULT_INJECTION: forcing a failure. [ 644.354732][T11097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.380914][T11097] CPU: 1 UID: 0 PID: 11097 Comm: syz.9.993 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 644.391137][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 644.401218][T11097] Call Trace: [ 644.404518][T11097] [ 644.407474][T11097] dump_stack_lvl+0x241/0x360 [ 644.412194][T11097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.417450][T11097] ? __pfx__printk+0x10/0x10 [ 644.422095][T11097] ? snprintf+0xda/0x120 [ 644.426380][T11097] should_fail_ex+0x3b0/0x4e0 [ 644.431105][T11097] _copy_to_user+0x31/0xb0 [ 644.435552][T11097] simple_read_from_buffer+0xca/0x150 [ 644.440953][T11097] proc_fail_nth_read+0x1e9/0x250 [ 644.446001][T11097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.451609][T11097] ? rw_verify_area+0x55e/0x6f0 [ 644.456489][T11097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.462081][T11097] vfs_read+0x1fc/0xb70 [ 644.466268][T11097] ? __pfx___mutex_lock+0x10/0x10 [ 644.471325][T11097] ? __pfx_vfs_read+0x10/0x10 [ 644.476026][T11097] ? __fget_files+0x2a/0x410 [ 644.480641][T11097] ? __fget_files+0x395/0x410 [ 644.485341][T11097] ? __fget_files+0x2a/0x410 [ 644.489969][T11097] ksys_read+0x18f/0x2b0 [ 644.494216][T11097] ? __pfx_ksys_read+0x10/0x10 [ 644.498987][T11097] ? do_syscall_64+0x100/0x230 [ 644.503770][T11097] ? do_syscall_64+0xb6/0x230 [ 644.508458][T11097] do_syscall_64+0xf3/0x230 [ 644.512971][T11097] ? clear_bhb_loop+0x35/0x90 [ 644.517665][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.523568][T11097] RIP: 0033:0x7ff70ed7d15c [ 644.528014][T11097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 644.547634][T11097] RSP: 002b:00007ff70fb1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.556059][T11097] RAX: ffffffffffffffda RBX: 00007ff70ef36058 RCX: 00007ff70ed7d15c [ 644.564068][T11097] RDX: 000000000000000f RSI: 00007ff70fb1b0a0 RDI: 0000000000000005 [ 644.572039][T11097] RBP: 00007ff70fb1b090 R08: 0000000000000000 R09: 0000000000000000 [ 644.580022][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.587994][T11097] R13: 0000000000000001 R14: 00007ff70ef36058 R15: 00007ffce7d66fa8 [ 644.595980][T11097] [ 645.108010][T11119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.702515][T11141] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 645.815687][T11144] loop5: detected capacity change from 0 to 256 [ 645.840485][T11140] loop8: detected capacity change from 0 to 4096 [ 645.920710][ T29] audit: type=1800 audit(1731418032.143:6585): pid=11144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1002" name="bus" dev="loop5" ino=1048655 res=0 errno=0 [ 645.924703][T11144] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 645.967680][T11148] loop1: detected capacity change from 0 to 1024 [ 645.998249][T11148] EXT4-fs: Ignoring removed oldalloc option [ 646.021961][T11144] FAT-fs (loop5): Filesystem has been set read-only [ 646.032894][T11148] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 646.128713][T11140] EXT4-fs (loop8): Test dummy encryption mode enabled [ 646.165898][T11148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.188428][T11140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.208787][T11144] loop5: detected capacity change from 256 to 0 [ 646.225288][T11121] loop9: detected capacity change from 0 to 32768 [ 646.235206][T11149] syz.5.1002: attempt to access beyond end of device [ 646.235206][T11149] loop5: rw=0, sector=0, nr_sectors = 4 limit=0 [ 646.249206][T11149] FAT-fs (loop5): unable to read boot sector to mark fs as dirty [ 646.284030][T11099] loop7: detected capacity change from 0 to 40427 [ 646.347395][T11099] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1fffff [ 646.441373][T11099] F2FS-fs (loop7): invalid crc value [ 646.455115][ T6852] syz-executor: attempt to access beyond end of device [ 646.455115][ T6852] loop5: rw=0, sector=12, nr_sectors = 4 limit=0 [ 646.469199][ T6852] FAT-fs (loop5): Directory bread(block 3) failed [ 646.477979][ T29] audit: type=1800 audit(1731418032.693:6586): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.998" name="file1" dev="loop9" ino=7 res=0 errno=0 [ 646.570979][T11099] F2FS-fs (loop7): Found nat_bits in checkpoint [ 646.595770][ T9200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.610538][ T12] kworker/u8:1: attempt to access beyond end of device [ 646.610538][ T12] loop5: rw=0, sector=12, nr_sectors = 4 limit=0 [ 646.650188][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.676956][ T12] FAT-fs (loop5): unable to read inode block for updating (i_pos 196) [ 646.753855][ T6852] syz-executor: attempt to access beyond end of device [ 646.753855][ T6852] loop5: rw=0, sector=0, nr_sectors = 4 limit=0 [ 646.797916][ T6852] FAT-fs (loop5): unable to read boot sector to mark fs as dirty [ 646.807116][T11099] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 646.867914][T11099] syz.7.994: attempt to access beyond end of device [ 646.867914][T11099] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 646.872754][T11175] loop1: detected capacity change from 0 to 1024 [ 646.897876][T11099] syz.7.994: attempt to access beyond end of device [ 646.897876][T11099] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 646.917232][T11099] syz.7.994: attempt to access beyond end of device [ 646.917232][T11099] loop7: rw=2049, sector=45104, nr_sectors = 112 limit=40427 [ 646.933614][T11099] F2FS-fs (loop7): inject no more block in inc_valid_block_count of f2fs_commit_atomic_write+0xa1b/0x1470 [ 646.951937][T10633] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 646.963532][T11177] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1007'. [ 647.070174][ T9173] syz-executor: attempt to access beyond end of device [ 647.070174][ T9173] loop7: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 647.098767][T11183] loop8: detected capacity change from 0 to 512 [ 647.125817][T11183] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 647.141429][T10633] usb 10-1: Using ep0 maxpacket: 16 [ 647.143727][ T9173] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 647.193720][T11183] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 647.256334][T11183] EXT4-fs error (device loop8): ext4_orphan_get:1389: comm syz.8.1009: inode #15: comm syz.8.1009: iget: illegal inode # [ 647.291824][T10633] usb 10-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 647.301136][T10633] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.309143][T11188] loop1: detected capacity change from 0 to 512 [ 647.309222][T10633] usb 10-1: Product: syz [ 647.320091][T10633] usb 10-1: Manufacturer: syz [ 647.325287][T10633] usb 10-1: SerialNumber: syz [ 647.338610][T10633] usb 10-1: config 0 descriptor?? [ 647.365446][T11183] EXT4-fs (loop8): Remounting filesystem read-only [ 647.367408][T10633] pegasus_notetaker 10-1:0.0: Invalid number of endpoints [ 647.373785][T11183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.383906][T10633] pegasus_notetaker 10-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 647.453929][T11188] EXT4-fs: Ignoring removed mblk_io_submit option [ 647.529006][T11188] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 647.599005][T11188] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 647.621381][T10633] usb 10-1: USB disconnect, device number 7 [ 647.708287][T11188] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1011: bg 0: block 18: invalid block bitmap [ 647.740681][ T9200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.766891][T11188] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 647.822665][T11188] EXT4-fs (loop1): 1 truncate cleaned up [ 647.915127][T11188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.964390][T11188] ext2 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.290509][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1014'. [ 648.346805][T11213] loop8: detected capacity change from 0 to 512 [ 648.487160][T11213] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 648.502526][T11213] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1014: invalid indirect mapped block 2683928664 (level 1) [ 648.532140][T11213] EXT4-fs (loop8): 1 truncate cleaned up [ 648.543671][T11213] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.609924][T11213] EXT4-fs: user quota file already specified [ 648.976466][ T9200] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 649.047991][ T9200] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 649.114167][T11218] loop7: detected capacity change from 0 to 2048 [ 649.154916][ T9200] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 649.174901][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.186989][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.196829][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.203232][T11218] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.210633][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.220440][ T5139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 649.223394][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.228090][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.350519][ T9200] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 649.467793][ T9200] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 649.641187][ T8] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 650.632272][T11221] chnl_net:caif_netlink_parms(): no params data found [ 650.675417][ T9200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.940648][ T8] usb 10-1: unable to get BOS descriptor or descriptor too short [ 650.967923][ T8] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 651.014332][ T8] usb 10-1: can't read configurations, error -71 [ 651.105742][ T2860] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.252076][T11230] loop1: detected capacity change from 0 to 32768 [ 651.298048][ T2860] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.356308][ T5139] Bluetooth: hci3: command tx timeout [ 651.507455][ T2860] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.688540][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 651.700062][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.721471][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 651.741261][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 651.754690][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.770953][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 651.781944][T11221] bridge_slave_0: entered allmulticast mode [ 651.782075][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 651.798679][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 651.815441][T11221] bridge_slave_0: entered promiscuous mode [ 651.928667][T11293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.974486][T11291] loop9: detected capacity change from 0 to 2048 [ 652.069649][ T2860] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.458782][T11294] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 652.484554][T11221] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.600715][T11221] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.608105][T11221] bridge_slave_1: entered allmulticast mode [ 652.615251][T11221] bridge_slave_1: entered promiscuous mode [ 652.714298][T11221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.844951][T11221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.961996][T11221] team0: Port device team_slave_0 added [ 652.975444][ T2860] bridge_slave_1: left allmulticast mode [ 652.981428][ T2860] bridge_slave_1: left promiscuous mode [ 652.987125][ T2860] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.012220][ T2860] bridge_slave_0: left allmulticast mode [ 653.017941][ T2860] bridge_slave_0: left promiscuous mode [ 653.033308][ T2860] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.431081][ T54] Bluetooth: hci3: command tx timeout [ 653.476470][T11294] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 653.498809][T11294] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 653.540674][T11294] Remounting filesystem read-only [ 653.598635][ T9388] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 653.624293][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 653.693946][T11309] FAULT_INJECTION: forcing a failure. [ 653.693946][T11309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.707211][T11312] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1029'. [ 653.725880][T11309] CPU: 0 UID: 0 PID: 11309 Comm: syz.7.1028 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 653.736189][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 653.746279][T11309] Call Trace: [ 653.749589][T11309] [ 653.752555][T11309] dump_stack_lvl+0x241/0x360 [ 653.757285][T11309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.762505][T11309] ? __pfx__printk+0x10/0x10 [ 653.767107][T11309] ? snprintf+0xda/0x120 [ 653.771393][T11309] should_fail_ex+0x3b0/0x4e0 [ 653.776119][T11309] _copy_to_user+0x31/0xb0 [ 653.780573][T11309] simple_read_from_buffer+0xca/0x150 [ 653.785970][T11309] proc_fail_nth_read+0x1e9/0x250 [ 653.791022][T11309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.796587][T11309] ? rw_verify_area+0x55e/0x6f0 [ 653.801448][T11309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.807026][T11309] vfs_read+0x1fc/0xb70 [ 653.811205][T11309] ? __pfx___mutex_lock+0x10/0x10 [ 653.816260][T11309] ? __pfx_vfs_read+0x10/0x10 [ 653.820958][T11309] ? __fget_files+0x2a/0x410 [ 653.825575][T11309] ? __fget_files+0x395/0x410 [ 653.830290][T11309] ? __fget_files+0x2a/0x410 [ 653.834923][T11309] ksys_read+0x18f/0x2b0 [ 653.839254][T11309] ? __pfx_ksys_read+0x10/0x10 [ 653.844046][T11309] ? do_syscall_64+0x100/0x230 [ 653.848833][T11309] ? do_syscall_64+0xb6/0x230 [ 653.853529][T11309] do_syscall_64+0xf3/0x230 [ 653.858055][T11309] ? clear_bhb_loop+0x35/0x90 [ 653.862758][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.868671][T11309] RIP: 0033:0x7f735777d15c [ 653.873104][T11309] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 653.892737][T11309] RSP: 002b:00007f73584f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 653.901166][T11309] RAX: ffffffffffffffda RBX: 00007f7357935f80 RCX: 00007f735777d15c [ 653.909161][T11309] RDX: 000000000000000f RSI: 00007f73584f00a0 RDI: 0000000000000007 [ 653.917173][T11309] RBP: 00007f73584f0090 R08: 0000000000000000 R09: 0000000000000000 [ 653.925154][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.933136][T11309] R13: 0000000000000000 R14: 00007f7357935f80 R15: 00007ffd48636f18 [ 653.941125][T11309] [ 653.950726][ T54] Bluetooth: hci4: command tx timeout [ 654.161861][T11314] FAULT_INJECTION: forcing a failure. [ 654.161861][T11314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.175168][T11314] CPU: 0 UID: 0 PID: 11314 Comm: syz.9.1026 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 654.185554][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 654.195638][T11314] Call Trace: [ 654.198918][T11314] [ 654.201847][T11314] dump_stack_lvl+0x241/0x360 [ 654.206533][T11314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.211740][T11314] ? __pfx__printk+0x10/0x10 [ 654.216339][T11314] ? __pfx_lock_release+0x10/0x10 [ 654.221392][T11314] should_fail_ex+0x3b0/0x4e0 [ 654.226077][T11314] _copy_from_user+0x2f/0xc0 [ 654.230672][T11314] core_sys_select+0x508/0x910 [ 654.235451][T11314] ? __pfx_core_sys_select+0x10/0x10 [ 654.240771][T11314] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 654.246788][T11314] ? __pfx_vfs_write+0x10/0x10 [ 654.251553][T11314] ? __pfx_set_user_sigmask+0x10/0x10 [ 654.256932][T11314] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 654.262931][T11314] ? __fget_files+0x2a/0x410 [ 654.267545][T11314] __se_sys_pselect6+0x323/0x3f0 [ 654.272509][T11314] ? __pfx___se_sys_pselect6+0x10/0x10 [ 654.277968][T11314] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.284296][T11314] ? do_syscall_64+0x100/0x230 [ 654.289092][T11314] ? __x64_sys_pselect6+0x21/0xf0 [ 654.294124][T11314] do_syscall_64+0xf3/0x230 [ 654.298628][T11314] ? clear_bhb_loop+0x35/0x90 [ 654.303304][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.309198][T11314] RIP: 0033:0x7ff70ed7e719 [ 654.313611][T11314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.333232][T11314] RSP: 002b:00007ff70fb3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 654.341729][T11314] RAX: ffffffffffffffda RBX: 00007ff70ef35f80 RCX: 00007ff70ed7e719 [ 654.349717][T11314] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000040 [ 654.357689][T11314] RBP: 00007ff70fb3c090 R08: 0000000000000000 R09: 0000000000000000 [ 654.365664][T11314] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 654.373631][T11314] R13: 0000000000000000 R14: 00007ff70ef35f80 R15: 00007ffce7d66fa8 [ 654.381613][T11314] [ 654.738967][ T2860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.764318][ T2860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.783873][ T2860] bond0 (unregistering): Released all slaves [ 654.807496][T11221] team0: Port device team_slave_1 added [ 654.867144][ T5882] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 654.879014][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.888969][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.941680][T11320] bridge0: entered promiscuous mode [ 654.974158][T11320] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 654.990047][ T5878] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 655.010941][ T5882] usb 2-1: device descriptor read/64, error -71 [ 655.088351][T11321] loop7: detected capacity change from 0 to 32768 [ 655.112710][T11221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.143667][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.170030][ T5878] usb 10-1: Using ep0 maxpacket: 8 [ 655.192445][ T5878] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 655.203464][ T5878] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 655.224582][T11221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.235916][ T5878] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 655.248853][T11221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.256268][ T5878] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.260936][ T5882] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 655.269900][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.292771][T11321] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 655.321822][T11221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.378112][ T5878] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 655.399887][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.441807][ T5882] usb 2-1: device descriptor read/64, error -71 [ 655.517675][ T54] Bluetooth: hci3: command tx timeout [ 655.551099][ T5882] usb usb2-port1: attempt power cycle [ 655.590258][T11221] hsr_slave_0: entered promiscuous mode [ 655.629042][ T5878] usb 10-1: GET_CAPABILITIES returned 0 [ 655.640450][T11221] hsr_slave_1: entered promiscuous mode [ 655.660934][ T5878] usbtmc 10-1:16.0: can't read capabilities [ 655.828130][ T2860] hsr_slave_0: left promiscuous mode [ 655.831502][T11325] FAULT_INJECTION: forcing a failure. [ 655.831502][T11325] name failslab, interval 1, probability 0, space 0, times 0 [ 655.846876][ T2860] hsr_slave_1: left promiscuous mode [ 655.860467][T11325] CPU: 1 UID: 0 PID: 11325 Comm: syz.9.1033 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 655.870756][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 655.880844][T11325] Call Trace: [ 655.884147][T11325] [ 655.887088][T11325] dump_stack_lvl+0x241/0x360 [ 655.890944][ T5882] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 655.891804][T11325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.891843][T11325] ? __pfx__printk+0x10/0x10 [ 655.909172][T11325] ? fs_reclaim_acquire+0x93/0x130 [ 655.914309][T11325] ? __pfx___might_resched+0x10/0x10 [ 655.914662][ T5882] usb 2-1: device descriptor read/8, error -71 [ 655.919623][T11325] should_fail_ex+0x3b0/0x4e0 [ 655.919664][T11325] should_failslab+0xac/0x100 [ 655.935164][T11325] __kmalloc_noprof+0xdd/0x4c0 [ 655.939952][T11325] ? kstrtouint_from_user+0x128/0x190 [ 655.945354][T11325] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 655.951097][T11325] tomoyo_realpath_from_path+0xcf/0x5e0 [ 655.956704][T11325] tomoyo_path_number_perm+0x236/0x860 [ 655.962178][T11325] ? rcu_read_lock_any_held+0xb7/0x160 [ 655.967678][T11325] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 655.973597][T11325] ? tomoyo_path_number_perm+0x206/0x860 [ 655.979342][T11325] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 655.985007][T11325] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 655.991015][T11325] ? sb_end_write+0xe9/0x1c0 [ 655.995632][T11325] ? vfs_write+0x730/0xd30 [ 656.000111][T11325] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 656.006105][T11325] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 656.012447][T11325] security_file_ioctl+0xc6/0x2a0 [ 656.017488][T11325] __se_sys_ioctl+0x46/0x170 [ 656.022092][T11325] do_syscall_64+0xf3/0x230 [ 656.026607][T11325] ? clear_bhb_loop+0x35/0x90 [ 656.031303][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.037225][T11325] RIP: 0033:0x7ff70ed7e719 [ 656.041659][T11325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.061284][T11325] RSP: 002b:00007ff70fb3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.069709][T11325] RAX: ffffffffffffffda RBX: 00007ff70ef35f80 RCX: 00007ff70ed7e719 [ 656.077692][T11325] RDX: 0000000020000040 RSI: 0000000040015b19 RDI: 0000000000000004 [ 656.085672][T11325] RBP: 00007ff70fb3c090 R08: 0000000000000000 R09: 0000000000000000 [ 656.093650][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.101625][T11325] R13: 0000000000000000 R14: 00007ff70ef35f80 R15: 00007ffce7d66fa8 [ 656.109613][T11325] [ 656.116516][ T2860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.120856][ T54] Bluetooth: hci4: command tx timeout [ 656.139482][T11325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 656.157395][T11321] (syz.7.1031,11321,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 656.161044][ T2860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.176940][ T2860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.184550][ T2860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.206985][ T2860] veth1_macvtap: left promiscuous mode [ 656.213238][ T2860] veth0_macvtap: left promiscuous mode [ 656.218818][ T2860] veth1_vlan: left promiscuous mode [ 656.224528][ T2860] veth0_vlan: left promiscuous mode [ 656.270882][ T5882] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 656.301741][ T5882] usb 2-1: device descriptor read/8, error -71 [ 656.416451][ T5882] usb usb2-port1: unable to enumerate USB device [ 656.676290][ T5878] usb 10-1: USB disconnect, device number 10 [ 656.750291][T11349] loop9: detected capacity change from 0 to 256 [ 656.757878][T11349] exfat: Unknown parameter 'discar4YºçâŒ?ñV7d' [ 656.892293][ T2860] team0 (unregistering): Port device team_slave_1 removed [ 656.964973][ T2860] team0 (unregistering): Port device team_slave_0 removed [ 657.601671][ T54] Bluetooth: hci3: command tx timeout [ 657.659464][T11355] loop1: detected capacity change from 0 to 512 [ 657.739936][T11355] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 657.750461][T11355] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1036: invalid indirect mapped block 2683928664 (level 1) [ 657.772666][T11355] EXT4-fs (loop1): Remounting filesystem read-only [ 657.779567][T11355] EXT4-fs (loop1): 1 truncate cleaned up [ 657.787907][T11355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.942931][T11278] chnl_net:caif_netlink_parms(): no params data found [ 658.097827][T11364] IPVS: set_ctl: invalid protocol: 44 172.20.20.0:0 [ 658.170886][ T54] Bluetooth: hci4: command tx timeout [ 658.360870][ T8816] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 658.520925][ T8816] usb 10-1: device descriptor read/64, error -71 [ 658.780638][ T9173] ocfs2: Unmounting device (7,7) on (node local) [ 658.793623][ T8816] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 658.927748][T11278] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.955909][T11278] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.976362][T11278] bridge_slave_0: entered allmulticast mode [ 659.041999][T11278] bridge_slave_0: entered promiscuous mode [ 659.070489][ T8816] usb 10-1: device descriptor read/64, error -71 [ 659.097388][T11278] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.137489][T11278] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.176710][T11278] bridge_slave_1: entered allmulticast mode [ 659.194781][T11278] bridge_slave_1: entered promiscuous mode [ 659.218456][ T8816] usb usb10-port1: attempt power cycle [ 659.633089][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.664829][T11278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.671101][ T8816] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 659.742788][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1038'. [ 659.800325][T11385] loop7: detected capacity change from 0 to 512 [ 659.995673][T11385] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 660.007122][T11385] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1038: invalid indirect mapped block 2683928664 (level 1) [ 660.030560][T11385] EXT4-fs (loop7): 1 truncate cleaned up [ 660.042182][T11385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.086583][T11385] EXT4-fs: user quota file already specified [ 660.323356][T11278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.336178][ T54] Bluetooth: hci4: command tx timeout [ 660.435902][ T9173] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 660.462237][ T8816] usb 10-1: device descriptor read/8, error -71 [ 660.506882][ T9173] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 660.545649][ T9173] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 660.574702][ T9173] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 660.604542][ T9173] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 660.702709][ T8816] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 660.732002][ T8816] usb 10-1: device descriptor read/8, error -71 [ 660.770929][T10633] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 660.875637][ T8816] usb usb10-port1: unable to enumerate USB device [ 660.931058][T10633] usb 2-1: Using ep0 maxpacket: 8 [ 660.946474][T11278] team0: Port device team_slave_0 added [ 660.959223][T11278] team0: Port device team_slave_1 added [ 660.984462][T10633] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 660.996373][T11278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.001893][T10633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.015766][T10633] usb 2-1: Product: syz [ 661.019977][T10633] usb 2-1: Manufacturer: syz [ 661.024629][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.024663][T11278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.026697][T11278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.098401][T10633] usb 2-1: SerialNumber: syz [ 661.103254][ T9173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.128931][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.157371][T11278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.169727][T10633] usb 2-1: config 0 descriptor?? [ 661.213438][T10633] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 661.447736][ T9376] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.475697][T10633] gspca_sn9c2028: read1 error -71 [ 661.483010][T10633] gspca_sn9c2028: read1 error -71 [ 661.511474][T10633] gspca_sn9c2028: read1 error -71 [ 661.516591][T10633] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 661.578381][T10633] usb 2-1: USB disconnect, device number 19 [ 661.662246][T11423] FAULT_INJECTION: forcing a failure. [ 661.662246][T11423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.720920][T11423] CPU: 1 UID: 0 PID: 11423 Comm: syz.1.1044 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 661.731319][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 661.741400][T11423] Call Trace: [ 661.744707][T11423] [ 661.747664][T11423] dump_stack_lvl+0x241/0x360 [ 661.752399][T11423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.757793][T11423] ? __pfx__printk+0x10/0x10 [ 661.762430][T11423] ? __pfx_lock_release+0x10/0x10 [ 661.767504][T11423] should_fail_ex+0x3b0/0x4e0 [ 661.772223][T11423] _copy_from_user+0x2f/0xc0 [ 661.776931][T11423] copy_msghdr_from_user+0xae/0x680 [ 661.782176][T11423] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 661.788021][T11423] ? __fget_files+0x2a/0x410 [ 661.792657][T11423] ? __fget_files+0x2a/0x410 [ 661.797291][T11423] __sys_sendmsg+0x209/0x350 [ 661.801920][T11423] ? __pfx_lock_release+0x10/0x10 [ 661.806982][T11423] ? __pfx___sys_sendmsg+0x10/0x10 [ 661.812140][T11423] ? __pfx_vfs_write+0x10/0x10 [ 661.816962][T11423] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 661.823329][T11423] ? do_syscall_64+0x100/0x230 [ 661.828144][T11423] ? do_syscall_64+0xb6/0x230 [ 661.832863][T11423] do_syscall_64+0xf3/0x230 [ 661.837407][T11423] ? clear_bhb_loop+0x35/0x90 [ 661.842173][T11423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.848099][T11423] RIP: 0033:0x7f489c57e719 [ 661.852547][T11423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.872207][T11423] RSP: 002b:00007f489d36a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.880663][T11423] RAX: ffffffffffffffda RBX: 00007f489c736058 RCX: 00007f489c57e719 [ 661.888669][T11423] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 661.896672][T11423] RBP: 00007f489d36a090 R08: 0000000000000000 R09: 0000000000000000 [ 661.904672][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.912670][T11423] R13: 0000000000000001 R14: 00007f489c736058 R15: 00007ffc63883518 [ 661.920684][T11423] [ 661.942196][T11420] team0: entered promiscuous mode [ 661.966648][T11420] team_slave_0: entered promiscuous mode [ 661.991235][T11420] team_slave_1: entered promiscuous mode [ 662.076763][ T9376] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.137546][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 662.152529][ T5139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 662.165579][ T5139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 662.187936][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 662.208564][ T5139] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 662.217906][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 662.219846][ T9376] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.235035][T11410] loop9: detected capacity change from 0 to 32768 [ 662.243185][T11410] jfs: Unknown parameter '“P?‘ª¿AüŒ§<ûnŒ|fpyEqeÚ1¹ífWOµêo‰ *1îÄ\†^Êw™Ì¡Hé«U5ÎræÔšLûšlµþÇå‡Ú' [ 662.283451][T11278] hsr_slave_0: entered promiscuous mode [ 662.322455][T11278] hsr_slave_1: entered promiscuous mode [ 662.337181][T11278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.361546][T11278] Cannot create hsr debugfs directory [ 662.367187][T11419] team0: left promiscuous mode [ 662.372888][T11419] team_slave_0: left promiscuous mode [ 662.381175][T11419] team_slave_1: left promiscuous mode [ 662.485285][ T9376] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.736533][T11439] loop9: detected capacity change from 0 to 512 [ 662.744548][T11439] EXT4-fs: Ignoring removed oldalloc option [ 662.750513][T11439] EXT4-fs: Ignoring removed orlov option [ 662.937363][T11439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 663.027702][T11221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 663.072814][T11439] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 663.492943][T11439] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 663.553617][T11439] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 663.573838][T11221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 663.637953][T11221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 663.680475][T11446] loop1: detected capacity change from 0 to 512 [ 663.720448][T11446] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 663.735011][T11221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 663.754091][T11446] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1047: invalid indirect mapped block 2683928664 (level 1) [ 663.784372][T11446] EXT4-fs (loop1): Remounting filesystem read-only [ 663.791950][T11446] EXT4-fs (loop1): 1 truncate cleaned up [ 663.798588][T11446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.869622][T11221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.999652][T11221] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.217747][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.225034][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.301985][ T9376] bridge_slave_1: left allmulticast mode [ 664.307703][ T9376] bridge_slave_1: left promiscuous mode [ 664.311186][ T5139] Bluetooth: hci1: command tx timeout [ 664.318436][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.371631][ T9376] bridge_slave_0: left allmulticast mode [ 664.377467][ T9376] bridge_slave_0: left promiscuous mode [ 664.385034][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.529198][T11439] loop9: detected capacity change from 0 to 40427 [ 664.613695][T11439] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 664.671252][T11439] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 664.706891][T11439] F2FS-fs (loop9): Unrecognized mount option "fault_injection=00íØ ™00000000041160" or missing value [ 665.266609][ T9376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.278058][ T9376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.290244][ T9376] bond0 (unregistering): Released all slaves [ 665.317787][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.325003][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.338890][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1046'. [ 665.360471][T11439] bridge0: entered promiscuous mode [ 665.389222][T11439] bridge0: left promiscuous mode [ 665.409081][ T9285] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 665.574089][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.591442][ T9285] usb 10-1: Using ep0 maxpacket: 8 [ 665.602649][ T9285] usb 10-1: config 0 has an invalid interface number: 112 but max is 1 [ 665.625990][ T9285] usb 10-1: config 0 has an invalid interface number: 17 but max is 1 [ 665.654619][ T9285] usb 10-1: config 0 has no interface number 0 [ 665.679429][ T9285] usb 10-1: config 0 has no interface number 1 [ 665.738275][ T9285] usb 10-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14 [ 665.758087][ T9285] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.782722][ T9285] usb 10-1: Product: syz [ 665.790788][ T9285] usb 10-1: Manufacturer: syz [ 665.806814][ T9285] usb 10-1: SerialNumber: syz [ 665.837065][ T9285] usb 10-1: config 0 descriptor?? [ 665.920267][T11428] chnl_net:caif_netlink_parms(): no params data found [ 666.057228][ T5923] usb 10-1: USB disconnect, device number 15 [ 666.392302][ T5139] Bluetooth: hci1: command tx timeout [ 666.750620][T11428] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.771072][T11428] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.795404][T11428] bridge_slave_0: entered allmulticast mode [ 666.812191][T11428] bridge_slave_0: entered promiscuous mode [ 666.832181][T11428] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.860919][T11428] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.868210][T11428] bridge_slave_1: entered allmulticast mode [ 666.886344][T11428] bridge_slave_1: entered promiscuous mode [ 666.949316][T11501] FAULT_INJECTION: forcing a failure. [ 666.949316][T11501] name failslab, interval 1, probability 0, space 0, times 0 [ 666.984713][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.9.1053 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 666.995028][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 667.005302][T11501] Call Trace: [ 667.008613][T11501] [ 667.011584][T11501] dump_stack_lvl+0x241/0x360 [ 667.016326][T11501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.021598][T11501] ? __pfx__printk+0x10/0x10 [ 667.026233][T11501] ? fs_reclaim_acquire+0x93/0x130 [ 667.031382][T11501] ? __pfx___might_resched+0x10/0x10 [ 667.036723][T11501] should_fail_ex+0x3b0/0x4e0 [ 667.041448][T11501] should_failslab+0xac/0x100 [ 667.046169][T11501] __kmalloc_noprof+0xdd/0x4c0 [ 667.050970][T11501] ? kstrtouint_from_user+0x128/0x190 [ 667.056382][T11501] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 667.062155][T11501] tomoyo_realpath_from_path+0xcf/0x5e0 [ 667.067765][T11501] tomoyo_path_number_perm+0x236/0x860 [ 667.073280][T11501] ? __lock_acquire+0x1397/0x2100 [ 667.078342][T11501] ? tomoyo_path_number_perm+0x206/0x860 [ 667.084030][T11501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 667.090088][T11501] ? __fget_files+0x2a/0x410 [ 667.094739][T11501] ? __fget_files+0x2a/0x410 [ 667.099377][T11501] security_file_ioctl+0xc6/0x2a0 [ 667.104445][T11501] __se_sys_ioctl+0x46/0x170 [ 667.109094][T11501] do_syscall_64+0xf3/0x230 [ 667.113656][T11501] ? clear_bhb_loop+0x35/0x90 [ 667.118381][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.124303][T11501] RIP: 0033:0x7ff70ed7e719 [ 667.128754][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.148415][T11501] RSP: 002b:00007ff70fb3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.156883][T11501] RAX: ffffffffffffffda RBX: 00007ff70ef35f80 RCX: 00007ff70ed7e719 [ 667.164895][T11501] RDX: 0000000020000000 RSI: 00000000c008561c RDI: 0000000000000004 [ 667.172913][T11501] RBP: 00007ff70fb3c090 R08: 0000000000000000 R09: 0000000000000000 [ 667.180942][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.188957][T11501] R13: 0000000000000000 R14: 00007ff70ef35f80 R15: 00007ffce7d66fa8 [ 667.196991][T11501] [ 667.235797][T11501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 667.310285][ T9376] hsr_slave_0: left promiscuous mode [ 667.351782][ T9376] hsr_slave_1: left promiscuous mode [ 667.365284][ T9376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.380817][ T9376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.398358][ T9376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.421279][ T9376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.458932][ T9376] veth1_macvtap: left promiscuous mode [ 667.481005][ T9376] veth0_macvtap: left promiscuous mode [ 667.487101][ T9376] veth1_vlan: left promiscuous mode [ 667.500893][ T9376] veth0_vlan: left promiscuous mode [ 667.714707][T11508] overlayfs: failed to resolve './file0': -2 [ 668.088543][T11512] loop9: detected capacity change from 0 to 512 [ 668.121615][T11512] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 668.737259][ T5139] Bluetooth: hci1: command tx timeout [ 670.811877][ T5139] Bluetooth: hci1: command tx timeout [ 671.520694][ T9376] team0 (unregistering): Port device team_slave_1 removed [ 671.663272][ T9376] team0 (unregistering): Port device team_slave_0 removed [ 672.646178][T11428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.684836][T11428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.016717][T11428] team0: Port device team_slave_0 added [ 673.112996][T11428] team0: Port device team_slave_1 added [ 673.449530][T11428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.498255][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.603563][T11428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.668423][T11428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.721427][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.791290][T11428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.846506][T11278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 674.061100][T11278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 674.107665][T11278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 674.140882][T11278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 674.186692][T11428] hsr_slave_0: entered promiscuous mode [ 674.195449][T11428] hsr_slave_1: entered promiscuous mode [ 674.202250][T11428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.209959][T11428] Cannot create hsr debugfs directory [ 674.224693][ T9376] IPVS: stop unused estimator thread 0... [ 674.266284][T11221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.917956][T11278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.283774][T11278] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.336952][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.344208][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.633596][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.640822][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.851207][T11221] veth0_vlan: entered promiscuous mode [ 675.903202][T11629] syz.9.1081 (11629) used obsolete PPPIOCDETACH ioctl [ 676.622766][T11221] veth1_vlan: entered promiscuous mode [ 676.699398][T11221] veth0_macvtap: entered promiscuous mode [ 676.750381][T11221] veth1_macvtap: entered promiscuous mode [ 676.844369][T11278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.896873][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.909291][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.971006][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.004071][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.036647][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.070877][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.092471][T11221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.127670][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.173034][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.183495][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.194613][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.204778][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.215298][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.227333][T11221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.320212][T11221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.343797][T11221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.370115][T11221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.401092][T11221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.477807][T11428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 677.502479][T11428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 677.528634][T11683] syz.1.1095[11683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 677.528732][T11683] syz.1.1095[11683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 677.564523][T11683] syz.1.1095[11683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 677.644393][T11428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 677.661404][T11428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 677.743621][T11278] veth0_vlan: entered promiscuous mode [ 677.789015][T11278] veth1_vlan: entered promiscuous mode [ 677.825554][ T6963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.878061][ T6963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.964240][ T9376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.988529][ T9376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.005117][T11278] veth0_macvtap: entered promiscuous mode [ 678.038897][T11278] veth1_macvtap: entered promiscuous mode [ 678.155640][T11278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.206227][T11278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.241253][T11278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.267710][T11278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.277745][T11278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.288383][T11278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.298328][T11278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.308941][T11278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.320702][T11278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.329434][T11710] mmap: syz.4.1013 (11710) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 678.331483][T11278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.352867][T11278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.363468][T11278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.374313][T11278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.384453][T11278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.395029][T11278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.404969][T11278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.415521][T11278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.426790][T11278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.449915][T11428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.469172][T11428] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.503455][T11428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 678.513935][T11428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.527566][T11708] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 678.590943][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.598124][ T6963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.619406][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.626625][ T6963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.695049][T11278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.716307][T11278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.780840][T11278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.789606][T11278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.185717][ T6931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.197275][ T6931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.250400][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.258406][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.378120][T11428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.594644][T11428] veth0_vlan: entered promiscuous mode [ 679.666194][T11751] netlink: 176 bytes leftover after parsing attributes in process `syz.9.1107'. [ 679.699098][T11428] veth1_vlan: entered promiscuous mode [ 679.780592][T11756] loop4: detected capacity change from 0 to 512 [ 679.870363][T11756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 679.893949][T11756] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.899641][T11428] veth0_macvtap: entered promiscuous mode [ 679.967840][T11756] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 680.003037][T11428] veth1_macvtap: entered promiscuous mode [ 680.025805][T11756] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 680.053733][T11756] EXT4-fs error (device loop4): ext4_acquire_dquot:6925: comm syz.4.1110: Failed to acquire dquot type 0 [ 680.114962][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.159504][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.169951][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.208038][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.236102][T11770] loop1: detected capacity change from 0 to 4096 [ 680.250303][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.270591][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.281294][T11770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 680.289853][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.316253][T11770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.329084][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.360786][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.380779][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.396971][T11428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.409459][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.420230][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.430286][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.440978][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.450903][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.461429][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.471513][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.482100][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.492001][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.502875][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.514527][T11428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.525249][T11428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.534164][T11428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.542924][T11428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.551885][T11428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.574644][T11221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 680.701169][T11790] loop9: detected capacity change from 0 to 512 [ 680.802249][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.921618][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.929557][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.996481][T11790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.054119][T11790] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 681.083063][ T6931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.107611][ T6931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.169104][T11803] loop3: detected capacity change from 0 to 256 [ 681.221420][T11804] Cannot find set identified by id 65534 to match [ 681.305394][ T9388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.390203][T11806] loop2: detected capacity change from 0 to 2048 [ 681.531576][T11806] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 681.558732][T11813] loop9: detected capacity change from 0 to 1024 [ 681.579668][T11806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.618679][T11813] EXT4-fs (loop9): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 681.634593][T11815] loop4: detected capacity change from 0 to 1024 [ 681.681236][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 681.689558][T11813] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.691403][T11815] hfsplus: Bad value for 'gid' [ 681.776805][T11821] loop3: detected capacity change from 0 to 256 [ 681.857806][T11821] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 681.885843][ T9388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.016952][T11821] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 682.206555][T11831] loop1: detected capacity change from 0 to 256 [ 682.284018][T11831] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 682.799821][T11847] loop2: detected capacity change from 0 to 128 [ 682.885312][T11848] loop3: detected capacity change from 0 to 1024 [ 683.000020][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.013030][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.126560][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.158923][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.178383][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 683.188916][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.226307][ T9376] hfsplus: b-tree write err: -5, ino 4 [ 683.260328][T11847] FAT-fs (loop2): Directory bread(block 32) failed [ 683.267758][T11847] FAT-fs (loop2): Directory bread(block 33) failed [ 683.280594][T11847] FAT-fs (loop2): Directory bread(block 34) failed [ 683.287358][T11847] FAT-fs (loop2): Directory bread(block 35) failed [ 683.294146][T11847] FAT-fs (loop2): Directory bread(block 36) failed [ 683.300715][T11847] FAT-fs (loop2): Directory bread(block 37) failed [ 683.307528][T11847] FAT-fs (loop2): Directory bread(block 38) failed [ 683.314397][T11847] FAT-fs (loop2): Directory bread(block 39) failed [ 683.321272][T11847] FAT-fs (loop2): Directory bread(block 40) failed [ 683.327847][T11847] FAT-fs (loop2): Directory bread(block 41) failed [ 683.368510][T11857] loop1: detected capacity change from 0 to 512 [ 683.375735][T11857] EXT4-fs: Ignoring removed i_version option [ 683.381910][T11857] EXT4-fs: Ignoring removed nobh option [ 683.421172][T11857] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 683.500229][T11847] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 683.506003][T11857] EXT4-fs (loop1): 1 truncate cleaned up [ 683.519596][T11857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.536071][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.539325][T11847] FAT-fs (loop2): Filesystem has been set read-only [ 683.710653][T11864] loop3: detected capacity change from 0 to 256 [ 683.802223][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.037275][T11876] loop2: detected capacity change from 0 to 128 [ 684.058387][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.093307][T11876] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 684.108418][T11865] syzkaller0: entered promiscuous mode [ 684.131093][T11865] syzkaller0: entered allmulticast mode [ 684.168157][T11876] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.286998][T11881] loop3: detected capacity change from 0 to 256 [ 684.290032][T11428] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 684.302722][T11881] exfat: Deprecated parameter 'namecase' [ 684.324065][T11881] exfat: Deprecated parameter 'namecase' [ 684.404203][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 684.419523][T11881] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 684.469495][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.583421][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.883342][T11849] chnl_net:caif_netlink_parms(): no params data found [ 685.225114][T11904] loop3: detected capacity change from 0 to 1024 [ 685.236276][ T35] bridge_slave_1: left allmulticast mode [ 685.249791][T11904] EXT4-fs: Ignoring removed orlov option [ 685.272735][T11905] loop1: detected capacity change from 0 to 1024 [ 685.301131][ T35] bridge_slave_1: left promiscuous mode [ 685.311487][T11904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.317966][T11913] netlink: 452 bytes leftover after parsing attributes in process `syz.9.1159'. [ 685.346441][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.431049][ T54] Bluetooth: hci3: command tx timeout [ 685.462859][T11278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.472787][ T35] bridge_slave_0: left allmulticast mode [ 685.526917][ T35] bridge_slave_0: left promiscuous mode [ 685.561230][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.710666][T11924] loop1: detected capacity change from 0 to 128 [ 685.762910][T11925] loop2: detected capacity change from 0 to 512 [ 685.791173][T11925] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 685.798621][T11925] UDF-fs: Scanning with blocksize 512 failed [ 685.802308][T11924] FAT-fs (loop1): Directory bread(block 32) failed [ 685.834783][T11924] FAT-fs (loop1): Directory bread(block 33) failed [ 685.846203][T11925] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 685.849380][T11924] FAT-fs (loop1): Directory bread(block 34) failed [ 685.860830][T11925] UDF-fs: Scanning with blocksize 1024 failed [ 685.879737][T11924] FAT-fs (loop1): Directory bread(block 35) failed [ 685.886744][T11924] FAT-fs (loop1): Directory bread(block 36) failed [ 685.900887][T11924] FAT-fs (loop1): Directory bread(block 37) failed [ 685.907679][T11924] FAT-fs (loop1): Directory bread(block 38) failed [ 685.915249][T11925] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 685.924578][T11924] FAT-fs (loop1): Directory bread(block 39) failed [ 685.933078][T11925] UDF-fs: Scanning with blocksize 2048 failed [ 685.939429][T11924] FAT-fs (loop1): Directory bread(block 40) failed [ 685.951056][T11924] FAT-fs (loop1): Directory bread(block 41) failed [ 685.973516][T11925] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 685.983687][T10633] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 686.014473][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.028729][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.046987][T11925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 686.057029][T11927] loop9: detected capacity change from 0 to 1024 [ 686.101984][T11924] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 686.110363][T11924] FAT-fs (loop1): Filesystem has been set read-only [ 686.118671][T11927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 686.128235][ T29] audit: type=1800 audit(1731418072.363:6587): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1163" name="file1" dev="loop2" ino=26 res=0 errno=0 [ 686.185465][T10633] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.194616][T11927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.213275][T10633] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 686.223739][T10633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.256621][T10633] usb 4-1: config 0 descriptor?? [ 686.413276][ T9388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.722643][T11940] loop1: detected capacity change from 0 to 256 [ 686.728714][ T5879] usb 4-1: USB disconnect, device number 9 [ 686.786417][T11940] FAT-fs (loop1): Directory bread(block 64) failed [ 686.811337][T11940] FAT-fs (loop1): Directory bread(block 65) failed [ 686.818040][T11940] FAT-fs (loop1): Directory bread(block 66) failed [ 686.827992][T11940] FAT-fs (loop1): Directory bread(block 67) failed [ 686.840000][T11940] FAT-fs (loop1): Directory bread(block 68) failed [ 686.847180][T11940] FAT-fs (loop1): Directory bread(block 69) failed [ 686.855760][T11940] FAT-fs (loop1): Directory bread(block 70) failed [ 686.863094][T11940] FAT-fs (loop1): Directory bread(block 71) failed [ 686.868605][T11942] loop9: detected capacity change from 0 to 2048 [ 686.891292][T11942] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 686.900477][T11940] FAT-fs (loop1): Directory bread(block 72) failed [ 686.911890][T11940] FAT-fs (loop1): Directory bread(block 73) failed [ 687.048338][ T9388] UDF-fs: warning (device loop9): udf_evict_inode: Inode 1347 (mode 100755) has inode size 9000 different from extent length 9216. Filesystem need not be standards compliant. [ 687.320541][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.372013][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.397296][ T35] bond0 (unregistering): Released all slaves [ 687.460418][T11930] netlink: 'syz.2.1167': attribute type 3 has an invalid length. [ 687.530867][ T54] Bluetooth: hci3: command tx timeout [ 687.627049][T11956] loop2: detected capacity change from 0 to 512 [ 687.636036][T11849] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.648371][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.659723][T11849] bridge_slave_0: entered allmulticast mode [ 687.678349][T11849] bridge_slave_0: entered promiscuous mode [ 687.686129][T11956] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1180: casefold flag without casefold feature [ 687.702683][T11849] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.732946][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.740265][T11849] bridge_slave_1: entered allmulticast mode [ 687.747911][T11849] bridge_slave_1: entered promiscuous mode [ 687.803132][T11960] loop1: detected capacity change from 0 to 2048 [ 687.826655][T11956] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1180: couldn't read orphan inode 15 (err -117) [ 687.861595][T11960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.874800][T11956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.999771][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.002565][T11849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.050486][T11849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.182728][T11972] loop9: detected capacity change from 0 to 512 [ 688.383981][T11428] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.407230][T11849] team0: Port device team_slave_0 added [ 688.449742][T11849] team0: Port device team_slave_1 added [ 793.600711][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 793.607724][ C1] rcu: 0-...!: (1 GPs behind) idle=3cdc/1/0x4000000000000000 softirq=50160/50161 fqs=1 [ 793.619329][ C1] rcu: (detected by 1, t=10506 jiffies, g=42457, q=496 ncpus=2) [ 793.627097][ C1] Sending NMI from CPU 1 to CPUs 0: [ 793.627144][ C0] NMI backtrace for cpu 0 [ 793.627162][ C0] CPU: 0 UID: 0 PID: 11979 Comm: syz.1.1187 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 793.627182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 793.627193][ C0] RIP: 0010:rcu_is_watching+0x17/0xb0 [ 793.627242][ C0] Code: 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 18 d4 7e 7e e8 bb 3b 3f 0a 89 c3 <83> f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 fa 30 [ 793.627257][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00000086 [ 793.627274][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802f8fbc00 [ 793.627287][ C0] RDX: ffff88802f8fbc00 RSI: ffffffff8c605b40 RDI: ffffffff8c605b00 [ 793.627301][ C0] RBP: 0000000000000001 R08: ffffffff89c9e842 R09: 1ffffffff2857110 [ 793.627314][ C0] R10: dffffc0000000000 R11: fffffbfff2857111 R12: dffffc0000000000 [ 793.627328][ C0] R13: ffff88807c1b6808 R14: ffff88807c1b6800 R15: ffff88802717f360 [ 793.627342][ C0] FS: 00007f489d38b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 793.627359][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.627372][ C0] CR2: 00007f489c5618a0 CR3: 000000007c734000 CR4: 00000000003526f0 [ 793.627387][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 793.627398][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 793.627409][ C0] Call Trace: [ 793.627417][ C0] [ 793.627425][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 793.627454][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 793.627476][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 793.627501][ C0] ? nmi_handle+0x2a/0x5a0 [ 793.627529][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 793.627555][ C0] ? nmi_handle+0x14f/0x5a0 [ 793.627574][ C0] ? nmi_handle+0x2a/0x5a0 [ 793.627600][ C0] ? rcu_is_watching+0x17/0xb0 [ 793.627622][ C0] ? default_do_nmi+0x63/0x160 [ 793.627647][ C0] ? exc_nmi+0x123/0x1f0 [ 793.627670][ C0] ? end_repeat_nmi+0xf/0x53 [ 793.627694][ C0] ? advance_sched+0xa32/0xca0 [ 793.627714][ C0] ? rcu_is_watching+0x17/0xb0 [ 793.627738][ C0] ? rcu_is_watching+0x17/0xb0 [ 793.627761][ C0] ? rcu_is_watching+0x17/0xb0 [ 793.627784][ C0] [ 793.627789][ C0] [ 793.627795][ C0] ? advance_sched+0xa02/0xca0 [ 793.627813][ C0] advance_sched+0xa3b/0xca0 [ 793.627838][ C0] ? __pfx_advance_sched+0x10/0x10 [ 793.627856][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 793.627890][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 793.627912][ C0] ? sched_clock+0x4a/0x70 [ 793.627937][ C0] ? read_tsc+0x9/0x20 [ 793.627961][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 793.627984][ C0] hrtimer_interrupt+0x403/0xa40 [ 793.628018][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 793.628040][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 793.628059][ C0] [ 793.628065][ C0] [ 793.628072][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 793.628093][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 793.628112][ C0] Code: 2b 00 74 08 4c 89 f7 e8 7a 52 8f 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 793.628126][ C0] RSP: 0018:ffffc9000cbaf4e0 EFLAGS: 00000206 [ 793.628141][ C0] RAX: 0000000000000001 RBX: 1ffff92001975ea8 RCX: ffff88802f8fc6d8 [ 793.628154][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0aea60 RDI: ffffffff8c605b60 [ 793.628168][ C0] RBP: ffffc9000cbaf628 R08: ffffffff942b8897 R09: 1ffffffff2857112 [ 793.628181][ C0] R10: dffffc0000000000 R11: fffffbfff2857113 R12: 1ffff92001975ea4 [ 793.628195][ C0] R13: dffffc0000000000 R14: ffffc9000cbaf540 R15: 0000000000000246 [ 793.628220][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 793.628241][ C0] ? mon_bin_open+0x35/0x500 [ 793.628263][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 793.628285][ C0] ? fs_reclaim_acquire+0x93/0x130 [ 793.628304][ C0] fs_reclaim_acquire+0xaf/0x130 [ 793.628319][ C0] ? fs_reclaim_acquire+0x93/0x130 [ 793.628337][ C0] __kmalloc_cache_noprof+0x41/0x390 [ 793.628361][ C0] ? mon_bin_open+0xe0/0x500 [ 793.628383][ C0] mon_bin_open+0xe0/0x500 [ 793.628414][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 793.628451][ C0] ? __pfx_exact_match+0x10/0x10 [ 793.628473][ C0] chrdev_open+0x521/0x600 [ 793.628497][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 793.628518][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 793.628543][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 793.628564][ C0] do_dentry_open+0xbe1/0x1b70 [ 793.628598][ C0] vfs_open+0x3e/0x330 [ 793.628620][ C0] path_openat+0x2c84/0x3590 [ 793.628651][ C0] ? __pfx_path_openat+0x10/0x10 [ 793.628675][ C0] do_filp_open+0x27f/0x4e0 [ 793.628692][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 793.628707][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 793.628746][ C0] do_sys_openat2+0x13e/0x1d0 [ 793.628769][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 793.628797][ C0] __x64_sys_openat+0x247/0x2a0 [ 793.628820][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 793.628843][ C0] ? __secure_computing+0x125/0x370 [ 793.628868][ C0] do_syscall_64+0xf3/0x230 [ 793.628887][ C0] ? clear_bhb_loop+0x35/0x90 [ 793.628906][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.628924][ C0] RIP: 0033:0x7f489c57d0b0 [ 793.628938][ C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 793.628951][ C0] RSP: 002b:00007f489d38ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 793.628967][ C0] RAX: ffffffffffffffda RBX: 0000000000082002 RCX: 00007f489c57d0b0 [ 793.628978][ C0] RDX: 0000000000082002 RSI: 00007f489d38ac10 RDI: 00000000ffffff9c [ 793.628989][ C0] RBP: 00007f489d38ac10 R08: 0000000000000000 R09: 00236e6f6d627375 [ 793.629000][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 793.629010][ C0] R13: 0000000000000000 R14: 00007f489c735f80 R15: 00007ffc63883518 [ 793.629028][ C0] [ 793.629133][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g42457 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 794.225567][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 794.235556][ C1] rcu: RCU grace-period kthread stack dump: [ 794.241467][ C1] task:rcu_preempt state:R running task stack:25392 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 794.253257][ C1] Call Trace: [ 794.256563][ C1] [ 794.259512][ C1] __schedule+0x1850/0x4c30 [ 794.264060][ C1] ? __pfx___schedule+0x10/0x10 [ 794.268949][ C1] ? __pfx_lock_release+0x10/0x10 [ 794.273999][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 794.280348][ C1] ? schedule+0x90/0x320 [ 794.284623][ C1] schedule+0x14b/0x320 [ 794.288801][ C1] schedule_timeout+0x15a/0x290 [ 794.293676][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 794.299075][ C1] ? __pfx_process_timeout+0x10/0x10 [ 794.304402][ C1] ? prepare_to_swait_event+0x330/0x350 [ 794.309982][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 794.314875][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 794.320108][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 794.326028][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 794.331346][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 794.337287][ C1] ? finish_swait+0xd4/0x1e0 [ 794.341908][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 794.346535][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 794.351753][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 794.357684][ C1] ? __kthread_parkme+0x169/0x1d0 [ 794.362743][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 794.367971][ C1] kthread+0x2f0/0x390 [ 794.372077][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 794.377304][ C1] ? __pfx_kthread+0x10/0x10 [ 794.381925][ C1] ret_from_fork+0x4b/0x80 [ 794.386374][ C1] ? __pfx_kthread+0x10/0x10 [ 794.390992][ C1] ret_from_fork_asm+0x1a/0x30 [ 794.395806][ C1] [ 794.398842][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 794.405175][ C1] CPU: 1 UID: 0 PID: 6963 Comm: kworker/u8:12 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 794.415609][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 794.425684][ C1] Workqueue: events_unbound toggle_allocation_gate [ 794.432221][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0 [ 794.439009][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 86 f6 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 31 f2 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 15 f2 [ 794.458638][ C1] RSP: 0018:ffffc90018fa76e0 EFLAGS: 00000293 [ 794.464768][ C1] RAX: ffffffff819389fb RBX: 1ffff110170c8c61 RCX: ffff88801db71e00 [ 794.472756][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 794.480739][ C1] RBP: ffffc90018fa78e0 R08: ffffffff819389ca R09: 1ffffffff2857110 [ 794.488726][ C1] R10: dffffc0000000000 R11: fffffbfff2857111 R12: dffffc0000000000 [ 794.496717][ C1] R13: ffff8880b8646308 R14: ffff8880b873f980 R15: 0000000000000000 [ 794.504704][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 794.513652][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.520256][ C1] CR2: 000000110c285fa4 CR3: 000000000e738000 CR4: 00000000003526f0 [ 794.528253][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 794.536243][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 794.544231][ C1] Call Trace: [ 794.547528][ C1] [ 794.550387][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 794.556742][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 794.562426][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 794.568283][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 794.574558][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 794.579952][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 794.585610][ C1] ? update_process_times+0x242/0x2f0 [ 794.591003][ C1] ? tick_nohz_handler+0x37c/0x500 [ 794.596142][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 794.601636][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 794.607073][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 794.612817][ C1] ? sched_clock+0x4a/0x70 [ 794.617273][ C1] ? read_tsc+0x9/0x20 [ 794.621372][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 794.627472][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 794.632633][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 794.638808][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 794.644628][ C1] [ 794.647576][ C1] [ 794.650525][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 794.656718][ C1] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 794.662913][ C1] ? smp_call_function_many_cond+0x1a0b/0x2ca0 [ 794.669090][ C1] ? smp_call_function_many_cond+0x19f3/0x2ca0 [ 794.675271][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 794.681364][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 794.686425][ C1] ? __pfx___text_poke+0x10/0x10 [ 794.691391][ C1] ? process_scheduled_works+0x976/0x1850 [ 794.697147][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 794.703529][ C1] ? __pfx___might_resched+0x10/0x10 [ 794.708842][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 794.714775][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 794.719821][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 794.724957][ C1] text_poke_bp_batch+0x352/0xb30 [ 794.730055][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 794.736080][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 794.742281][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 794.747960][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 794.754253][ C1] ? process_scheduled_works+0x976/0x1850 [ 794.760004][ C1] text_poke_finish+0x30/0x50 [ 794.764703][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 794.770722][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 794.776649][ C1] static_key_enable+0x1a/0x20 [ 794.781439][ C1] toggle_allocation_gate+0xbc/0x260 [ 794.786751][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 794.792671][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 794.799029][ C1] process_scheduled_works+0xa63/0x1850 [ 794.804635][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 794.810653][ C1] ? assign_work+0x364/0x3d0 [ 794.815286][ C1] worker_thread+0x870/0xd30 [ 794.819920][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 794.825939][ C1] ? __kthread_parkme+0x169/0x1d0 [ 794.830993][ C1] ? __pfx_worker_thread+0x10/0x10 [ 794.836125][ C1] kthread+0x2f0/0x390 [ 794.840223][ C1] ? __pfx_worker_thread+0x10/0x10 [ 794.845355][ C1] ? __pfx_kthread+0x10/0x10 [ 794.849971][ C1] ret_from_fork+0x4b/0x80 [ 794.854490][ C1] ? __pfx_kthread+0x10/0x10 [ 794.859099][ C1] ret_from_fork_asm+0x1a/0x30 [ 794.863907][ C1]