last executing test programs: 2m8.541890016s ago: executing program 1 (id=811): ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000000c0)=0x60) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0xa, 0x801, 0x84) r3 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) close(r3) 2m8.454265991s ago: executing program 3 (id=898): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @exit, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000380)='GPL\x00', 0x3, 0x1000, &(0x7f0000001080)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1fe50, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000000c0), 0xe, 0x4f7, &(0x7f0000002a80)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f00000003c0)='./bus\x00', 0x14bb42, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101499, 0x0) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 2m6.676588715s ago: executing program 1 (id=902): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r1) 2m6.550701343s ago: executing program 3 (id=903): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m5.660313184s ago: executing program 1 (id=904): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x5d, 0x95, 0x8d, 0x8, 0xbaf, 0xf5, 0xdfc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xf5, 0x0, 0x0, 0x46, 0x4b, 0xcf}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d0101400001020301090292000301000000090400000001"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x5451, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000005ec0)={0x4, 0x2, 0x64, 0xb, "a2196bf0ae9048ced3900813726203ea0333b065c6b388e3cdf73cb18bbd1b04"}) syz_usb_connect(0x3, 0x2c2, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xb, 0x2a, 0x9c, 0x8, 0x421, 0x445, 0xe3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b0, 0x3, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x7f, 0x4, 0x5, 0x2, 0x2, 0xff, 0x6, [], [{{0x9, 0x5, 0xad1746bf19c01474, 0x10, 0x400, 0x9, 0xa, 0x5, [@generic={0xa1, 0x21, "44178e5992893f190bde37c2d6ac21cbd45d37432798bf897b597723049047d7876f772dfb3821a6b2d6df76dabd5d57f13e898978438e4b3782dfc555c38528ad09b8b6f130664410f079172283c8aecbeef12126b1a181f8e73d5be6330df9bc029a5cad46dc276da936c10161d8a7470e6e758fb423533957356505443019b1a5f3c5119850258e8109af5a2fcda7086254d8c72981cfd01705dc3dfebe"}, @generic={0x4f, 0x22, "06e7406577dadb276992f7e4490a503d406131e480a4dca201d8be958d58e57c88d7a9c0090cc1c0ce06c16f06a075ee52cf44a311c141377e0ab8a877ccd4ce9e37a2aae9bb487a094d000695"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0xf0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xb5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xf82f}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x5, 0xff, 0x7f}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0xb, 0x5, 0x7f}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xfc, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xfffb}]}}]}}, {{0x9, 0x4, 0xb4, 0x4, 0x6, 0xcf, 0x3b, 0x27, 0x2, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "b5"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xc, 0x1, 0xa}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xa8, 0x4}]}], [{{0x9, 0x5, 0x1, 0x771e56741f25af3b, 0x40, 0x9, 0x7, 0x0, [@generic={0xd9, 0x5, "7f24ae113f660c44d86d93079ae60d490ec3b09d9353094eb910e88de6c8270614ac6e7fcaff52ea911dc429f17286c3e081f0a486beb4d4b385f5af3238d63106851735a6fc26c12cdbec6772ea3b7315fec5adb7aedc2baae11ab7f73b8a9949d1bbb4a82745d2352965372fe0c0c434d4f3ac0a4e2ef15daeceea5c083da661a5ff3e9acd04d5b5089fd3d67793317bab8e2fd49c3653bd4d7cb9c91c7baf4e87a30bda641bb4b0bfd7d29a12f8d70f96d1577de2ed1fb7a4b752da4c246a9a1e3bb8fa5327cf5c91d0a83a23b8e86459d586b9e31b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x6a, 0x0, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x1, 0x0, 0x1}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x9, 0x7, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x50, 0x7, 0x9, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x9, 0x3, 0x94}}]}}, {{0x9, 0x4, 0x68, 0x1, 0x0, 0x41, 0x57, 0xef, 0x3, [@generic={0x2, 0xa}]}}]}}]}}, 0x0) 2m5.530981462s ago: executing program 3 (id=906): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) socket$inet(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = io_uring_setup(0x77f, &(0x7f0000000340)={0x0, 0x198d}) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) read$hiddev(r3, &(0x7f0000000740)=""/43, 0x2b) close_range(r2, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000080), 0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) r6 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000140)) socket$kcm(0x2, 0x0, 0x84) 2m1.920585829s ago: executing program 1 (id=919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 1m41.002341288s ago: executing program 5 (id=954): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) 1m39.625683711s ago: executing program 5 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = add_key$fscrypt_provisioning(0x0, &(0x7f00000002c0)={'syz', 0x0}, &(0x7f00000004c0)=ANY=[@ANYBLOB="020068696a6b6c5c7e6f70a3af7bb4d0fb1f26ccf4722dec2e90c19682e92e32e01d827bfd50012ceb8d1842cd8b7283e592db10ed160c72f64f7bdca63859a0d770c8950ca1886fa3a296cc6eca7879f41c4b6c9dec516af6af286b2a92544b1b2d627271161a87b4a5e2aa277cf00c2145d6bdde212f59c3735917e3ef02f4d31174c8ceb9d2c53139b3420a874ff59f1a187004618f6d73f487ade1e3aeb70b0341b16dffca3c1a2a4c39a45b78af91ef0ca7cd59d83beab15996e28963e2d8c2e51eac4d48c181c600af1af8df593917a9a84b3d591e7c9d879ecfd9e5cf87"], 0x18, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000900020073797a30000000000500040000000000050101000600000016000300686173683aead54d725709fed720b28f6e65744d706f72742c6e65740000000500050002000000086e35dd98e7e42c7a76f574e04e0a6df9f6dec312888ac0e8abc3aa4864d45ee265ec9d71"], 0x50}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) 1m38.423214393s ago: executing program 5 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r1, &(0x7f0000001a00)=""/177, 0xb1) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x86) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x330, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000002400)={0x8, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) unshare(0x26020280) 1m35.509712276s ago: executing program 5 (id=968): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getdents64(r3, &(0x7f0000002ec0)=""/4096, 0x1000) 14.048795316s ago: executing program 4 (id=1108): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 13.342301408s ago: executing program 4 (id=1109): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 13.039345563s ago: executing program 4 (id=1111): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@grpjquota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@quota}, {@noauto_da_alloc}, {@orlov}]}, 0x3, 0x59b, &(0x7f0000002800)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) 10.042238023s ago: executing program 3 (id=930): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000740)="53c4f905cb13a831e03fdba11c3a28ec6455ca58e44163fce97900a002d28d46d062539056bf9fc2a27e9dcf72da3108413c046930356da28d35fa500f70a0dba80c78d927f3481f54dacce96f2b94c9418eb9d5cf27141d23dd57074b8de02ce88bcc02b862e537541286307b902296406a8450a429b7bad721921cfc7cd09522414c0cac13a27d6e0fb8adcee4f7f49a616a3ee7f3ee375b2a1362ed46f73f212616815a1948735847fd98f9a1434bd430c8741f4017ff311df5d263124b084e954eae5590edc525a0ba9ed8c7942fccea73aea9ffd1a6b4a63f3061bbaa050c2e0a4bbc1d249907fc8b75d5f3b9f934c3cfe453e3bcd0a04301e79489d373b7ada737561760274671fb6b6788d631072ca23d8aea4f332d9812be3c21620dde33948cf485019d78d26da497494b5cd44499420af88cceba5e8b53d909ce407af5fc5e105a23abaf975e399b6d8b5ba777830b94d490404d3d14ccbd3c6a5e2afbdd3b22fb11eb10b0e44f54bb829a0fbb8b3b8f2599ea8ef95e1774b19e250de0ef28b5deff60a16b891992eb5809b5dbe85f75de2fd2219991417d38a3caab858ca06330fc7babad8732d59c2b0a6637e7b3c70476146f3c0ea621e13ef3bc49ec598c43c627f573f4d7bf6480039ff65fb55a0b686c845387ca2b95b1fa2c65f9e965c06e8c24350f38c7bf3851f4ca47b89492f5cf07fe53a53dfd6361797394d52b75a6ecfe1a28a005c14fce4aa72594dcf375a86a06d5c6a5957bb96b75159096cfb7aa9ead48f56e852c2f0e71d44046e5d526fdf18ff443a9373f06f9f22e6e94aafb52b85d3371d10dcdc74542f58e745264e634ea3e8e0172df20a17d4e1e3c05718028df3006e528cfb3f553c27c85f8fb641151e722e20253fd624be2fb2fe73c692bc9d0f2a6badf6112491f5e22818c959cbc998932c701162eb40f53bdfe84adee83006d1101e558645b5bc8784e205902b5d3c0b6c814963239a015ad3cca26f66d8a3743787f5e409a918244fd9e49888ff0548ffaa245ec020bc9fc88d67c3d0156af23894c5c96a4e0dd53f8c9b63798fc7fbfff59780b4ca1d2dc054d1604964c468049379241e8b4154374d70af3ec8bb251ca9d6499557a24c9b99a4824a5ad8e39c548a4de24bf8f68756b51dddea9b0198a385e19bc915d6b7fdd23886764e7fca36b02d5de46122b654a3f53a0f2bd4445c47a6f7d990def9b99d5e19f51c76532790bc2df07396e6f320992e71b5169f20702478148487e2370cdd2b5e8316d3ed79896a556da87fea29af47fa2d9c0e634d55e715a7981ce3023f4d65707158e6f79993949e4e3fe4bc1c1ba413dd7702ce0369f7e57da635fd03e52098e4251d8cf216ec9c5af98cac3850de23cd568855f4d69506f81a49f0ad2a122dcac99af7e2d4b78e9f9cfaa700d7f7e8e52ed35d2e8370811d9cea4763d6a6e99abc9669160be13a648f1758a25abb72e857406817e9b74f7dc6a694bfecbacf033546994c34faf868d363eeed0eed1423f34f1ae9dc78980fef49aa06015a569e96a7f03a5d15023523b86db762ea4614a5e1cde97ab0abbb917646468f4a6b30c13906ba003598d829705a0aba745e7431e9def215375d7f0180ee0528755a07d980178d788c82e1da520625dc6f89168ad44d08bc514eb8483505bf727f073e78dae7a1853ffcecce5b4640e33645979f4af10f6e85785e9557e74a1f2c12666a7232134f81c034fd5c870222675eb90964e3a1a0469f8adeb01f68c560088f6b5ca98a96dc773f00e3a3cc66c2b54a3aeafdd323d9e36e87d7c99f40dec8f903845992d44ff805ffa28a72b102a2462bf6099ca00d3c1e212176bf7afe2fba604d2471c0f1db8f57ab3f1dbee1f3cead6995596ce18ac0f64b27bef279df4cc8c9088527ea5dc78c7abd1395d95656943e38a5047a42d29a0528a71c37525ab82f05ec74bc04e2f91215751f4a7f77daa7729c11b2823461de02a4659357eac8bc37c14e1e3de4d5b69ebbefb386f2bb6f71a3468e534adfbc8a9c9c1adf434d4b01aafd1d73f50cec3a4fbeae535b9ac081ef7b161ef6966bb95045ffac98cf30071effe21c6f51c5e115bbc432a196da96ba37d419b27bfa39a250a57e22a672fe5e070def0f64f85f6752e2fc06f2b8a290903e7494121322e131e7340e3122849177b218234333e3d53354bc4ffbc197c39ac9bdae4becb66f9359f6d763a8e810793c58359add69d79daebb8642c6420b06c7f9f5d94858693fdcbccd59a54c7a10eb8117bb9d5bffb6db6f0e1015e78bf5a8f7fab1c3ee93ca7f6402fcfd4434864eeec1e9e2a773529f1fa9ab1046ff93c439db999dc2023fde4da4ce73e3a7870a1b559840cb019179b75b29e3961449d61e1d3e7fcc901646421daabba9dec858b376f34d63fd86e23f85350b347c5ba8c9156b4332b99a29ef1484917a922503ee3866f07663d49463de82ae221c565d512de03fdb098b15dc1c31be580f36bab5e40472100611d9bc08f6e38baabf45b637447aa7d1e66a2174e1ea5a27d08d1b42ff58640627777ec3492231e326f010bd7b3a8e02f145cb16b23de4d7456afebb0ac2eed8c6e213004c575a986708b726e5aa462f37963e26d2ec40d8d78df70ad97d14bf3be526e7b857886054045a08ef852cacde8fd4629279b8cbdbfdbee79d3c36afa66cc59008f689e431c25d1ff360a2227182498ff6df8207f17f538186d8bb80f4239ceb1e53dd508911db01a0b00fbd7b60c680143268cdfe97ad9a87eb9352796c9cd64bd350be491b3b4d8c1be48024d93ce7b43ae7a938608bb22780c841f40991b9bbf72d9c44a73850166994dbf73c8f2c9aca6f602a943236d47efbbacd1208978ba361ae9d99f595a09f1ebc20f12d0943f89e88b8234ac3237eba668039b5bc3563d9d54def73b1aea8b8b9f5c4103e03404131c5335f72836c4039c733f761e158e81cab5f1d6aa534753f7e4514b9833ab551a656182c2f45019912339d20df857cd1174c22092dfc6e46966ff3681a3ce8f0227c279d4cd35a6ff18acfd0342a3d538599abfad4439bda099d343938e11703109a07f7fd5d483fd13d188c4638da98dfeb752cd9df41fb6da0e0f6905addee4c0a2996aefcbfc698da7ee6a60bce6e76e6826f6e768f5dd1ed7f89d38007e6fd37dd1530338f471f4482d7f7fb2a8b6d623c155fe982f82031be502dafaeb4a6500cd090d17b2655be87b90030dea94638a170b6a11f01f11f2fb343357239f74100e8d3048c959e508652147874fa218138b616563844906f4e4a5dbff5fed92c27eab2150c8d5e69a2a2dc256c979f26613fa25e75db5fa350291039682ec7614321ecc54a97193a4e0bad1ed564a76c8d5c96d726f7f343a88f1b39bd5d6e329f1161920285be15334c8a4c100fe03329a2d7cad65bb5cc91820e18f182ce8444a6cdb31c62cc1cad708083797e0bd7c0eda2338c7fd60f53eb788711b216c6f64ea9ee8e7dd09488994e18cb31e29613191bdb999e466d4d01506ec79a6c25de2fab951625caa77d78706d7449b95a47d085d25600d968c479b77a031bfab0f3b2fe0b7a772bcd2cccb3faf027c67161bd90a09ef6971c4eabeb78fedd40f3d3395c59f3886e8df57b86a3e3cb45329e9d04c784b17edb383a8d0c21ad5aad436036eea82c5e22190a318b4c4aa6117c4e5446f103b9dd964d6d4b95872bd16d35be9e0942ed584aebdc71d7f5b8ccf6e3b10b816b88463392044b979d87e22fa0db414da721b90fddf2e50efb3ce1f43dba1a4c0859de53368ccb8de5434fa5ad1f27f4ad9fad2e82daf635ace1dbeee9db32f28aa7d0d620bb35e52fc423f3e032b3cc9ea373203370f558290e38d0144b082524edd3fca2d63718edae0a235ffc763b9b19164d713b8db24d240820a263377f1fc2fed0a669876094e3b142352dce12273de1f50ab28202d3076fedcd823ff6d8281cb3bd1791e93c31f01800ba407727d115f2e4a7b9d765b3c35331afeba7d565de17c90b9e9ae0f31257cec0841ea3f5f1b33035b7878f1f96c29359c9e6c86e0c8246a9d03fe2aab2e21d1fdf7d46b24196a67e3be4ebcfdd4213d6cd9ffa521d0b8e115ebbdf36c9b5c9f84da11fcc0e98481a7935b91ec09846070395de066ff35d8df8e3d82754cca652c6979a61fc712f6bf9631d1ba47f580b84f34450efd64ecc3324fd0e250ddbbf25ca1bb4e5ec833f809a8c8c41808ab759abcfd25bf24b6d2e42b65b9d4a31a65d8de33a211076fef6470920c7bd0b1ac2c1f167ba984b9a2d1080c168aeee658faa3b3c607f6139e3057c7ca4aee468aa4df83691dd7d81c434299a0dbe87bc10add76ca0b601d5e2c3cbc2450923ec43debd951e2753437f44439b91f2fec6c601627ce35698267fe8543b4af2dda12694e80cba6b6aba38d382400349b0aec44102858ac946419a0806540c7072cdbec61462f0ed821f6d0925dfa306ae6dda560e88478892320519f111d556ba918cff1feb044925443c2680665230df24af2fe4002f6a34d8da3399f9a39320fd43da51780849ee6b01709eee78ea3df604c7e0ac9bcba2c09428ddca0518cee730915251f887f0ced71e227eabf25bdc04f0cd88e229e5306c198f985fcb044bf255d7c18d67ad427cdb8a48d674cc231f70519e864d6341cfd9f25cb0528a11681a420c12912a971f02c9906084e1983548e16b56c54e62e9fd42627a12098fd1358bbb69538c38eed061d5f594f5aa17eef7d3d29f52d105cc784bbc44663635e5d4614d89b01f9704cc158d7010abc35dd2da01b51deccd0bdae22dc0dbf0a5ac692f4947e0d83ac639f67c1d2ac334d6972a55e5953bf6d2ccf932d4b68a15bfcbec90108420cce61d136994274ea020e5019e347eecdbcb361738f58aa91b779de08276140518bcde5cebb0b2f07a8a9c931eaeb82a5fed406c209cc10b960f29fdb819ecf17c736fa77fdf110c88505d60ea309269f4803cf306f2095f61d3072d7c3fb7de244430e464f61ddae39cc7d442bcc396a589e73eb83e70411663c14174d509a666ccd8276a9c11bfeb73cf37e895d0bb31ab8f1b10fb4c3b44052b4d6da2326cb59058dfbcabc8571dc47fbccbd042727fe7f13992f0bfc87c0956b26c2e397ff1869dd0faaab9e5e0711234e0aec39315037160c471e8bae9bb8464a77f46e220e6a5d8a0a57cec9e8d1919d54b1dc3ac06988eff9ff97ea1f27bb541b93914703a6e6eec31ab8c8b883caf33284704092121580647454dd3983daf7cf8eeb7b05e0b3960f9944eea2e0d28b9c8c7ae1d1f10dacd5e8e61c68eed8d7090ce253375bce372cefaab51948761864a5be21b6d85350e3a609dfb983b61aa1f84ce9084f69f23e626a88f55d32697a1188211be3de48795e361a53504c02e2127d50744685028f624851907105d0d1795adcf4486ed30297352413dc5c7bfd954a7d9641a3b0d7cd7413c018e0d7752d29e863538a", 0xf42) unlink(0x0) 9.902053414s ago: executing program 2 (id=1114): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xc, 0x0, &(0x7f0000000500)="69d387051eaf71a0486e5c66", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="700084801000010072213a37314985f82566aa242400010034558714857ddf7d3c4dd20d8f31e83750813ddd36af1a3a79a093be591b5fba080002000000000008000200ff7f00000a00010002020202020200001c0006800800050000000000080003000000008008000100feffffff100084800b0001008c040c668f28620006009800010000000400ff000a00f500da8bd33bb3e700000a00060008021100000000000400ec000400ff0008009e"], 0xd4}}, 0x0) 9.551486071s ago: executing program 2 (id=1115): socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1a14008, &(0x7f0000000040), 0xf9, 0x7c0, &(0x7f0000000f80)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000"], 0x1, 0x1a2, &(0x7f0000000000)="$eJzs0L9r1GAcx/H390nul1DlVBwq2AOLMUe1yVUdnA6nEy7g4CJ46HGNvWKqXHODLS10kYJU+y/oIHVUQScRBefiIDhoXLpJbygO4iAnyT0V/Bt8XpB88v1Aki9PN+7FBeD33kqHOhmLg3xEsIEJGXVKjfK1nr/r3BwFl/S8ofOZzvF4afl2O4rCxcrFCuV/CuBH1v2t4hccU5SEOvJ5b6XTlpsBwzoLajag3KT6EKtFz33EuD3G0RtYDJ0NLit64jTh0HS/yHS8tHxmfqE9F86Fd2q1mQveOc87n+4fhd4rxH0gises4gYUAkruKrkW97ftA0wJ4nZVYkl1QL7F5rZ1+uTUAOXuMkR45wwofLW7FXWVUxSvp8s3OCI8wQqYbFJS2Nyaj0KvgVxRL8W3P9k/c4rimmWd7dyNZtevKfmV36rLblH8HXKOT63qM5MeDYd5z3rCZEIjYSth5xsT8ib9y/652mvp/bmejnOCp3nutfv9RT8PH8QJqKVXGcayz6lsrzK81e/o4Mv+g2EYhmEYhmEYhvEf+BMAAP//l8hh1g==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x10009) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x4, 0x25a, &(0x7f0000000680)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00'], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.869431737s ago: executing program 4 (id=1117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x54}}, 0x20000000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x138, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cluster={{0x30}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x0, "4731c9de5f971c06c0ae6f333f5a692cf3d811600bda567a3ae6b3b786cb"}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@gettaction={0xa0, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)={0xd4, 0xa, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x70, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4080}, 0x4000001) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000006480)={[{@numtail}, {@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@rodir}]}, 0x3, 0x354, &(0x7f00000068c0)="$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") r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2000c12, &(0x7f0000000000)={[{@dmode={'dmode', 0x3d, 0x1}}, {@session={'session', 0x3d, 0x37}}, {@nocompress}, {}, {@gid}, {@map_normal}, {@check_relaxed}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@session={'session', 0x3d, 0x62}}]}, 0x1, 0xa00, &(0x7f0000000dc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa9d, {r6, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000010c0)=ANY=[], 0x1a3) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.30444708s ago: executing program 2 (id=1119): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x404c534a, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) 4.809620867s ago: executing program 0 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070000000000000000ac1e000100000000001414aa000000000000000000000000000000000000000002000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) pipe2(0x0, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r4, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001100)='K', 0x1}], 0x1, 0x9) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000e00)={0x50}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth0_to_bridge\x00', 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x9, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x6, 0xdf, &(0x7f0000000440)=""/223, 0x41100, 0x2, '\x00', r5, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x3, 0x8, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, r6, r7, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000000780), 0x10, 0x101, @void, @value}, 0x94) 4.809126577s ago: executing program 3 (id=1121): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4.680697596s ago: executing program 4 (id=1122): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}}, 0x0) capget(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) 4.658193078s ago: executing program 1 (id=932): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x5d, 0x95, 0x8d, 0x8, 0xbaf, 0xf5, 0xdfc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xf5, 0x0, 0x0, 0x46, 0x4b, 0xcf}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109029200030100000009040000000101"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x5451, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000005ec0)={0x4, 0x2, 0x64, 0xb, "a2196bf0ae9048ced3900813726203ea0333b065c6b388e3cdf73cb18bbd1b04"}) syz_usb_connect(0x3, 0x2c2, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xb, 0x2a, 0x9c, 0x8, 0x421, 0x445, 0xe3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b0, 0x3, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x7f, 0x4, 0x5, 0x2, 0x2, 0xff, 0x6, [], [{{0x9, 0x5, 0xad1746bf19c01474, 0x10, 0x400, 0x9, 0xa, 0x5, [@generic={0xa1, 0x21, "44178e5992893f190bde37c2d6ac21cbd45d37432798bf897b597723049047d7876f772dfb3821a6b2d6df76dabd5d57f13e898978438e4b3782dfc555c38528ad09b8b6f130664410f079172283c8aecbeef12126b1a181f8e73d5be6330df9bc029a5cad46dc276da936c10161d8a7470e6e758fb423533957356505443019b1a5f3c5119850258e8109af5a2fcda7086254d8c72981cfd01705dc3dfebe"}, @generic={0x4f, 0x22, "06e7406577dadb276992f7e4490a503d406131e480a4dca201d8be958d58e57c88d7a9c0090cc1c0ce06c16f06a075ee52cf44a311c141377e0ab8a877ccd4ce9e37a2aae9bb487a094d000695"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0xf0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xb5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xf82f}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x5, 0xff, 0x7f}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0xb, 0x5, 0x7f}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xfc, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xfffb}]}}]}}, {{0x9, 0x4, 0xb4, 0x4, 0x6, 0xcf, 0x3b, 0x27, 0x2, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "b5"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xc, 0x1, 0xa}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xa8, 0x4}]}], [{{0x9, 0x5, 0x1, 0x771e56741f25af3b, 0x40, 0x9, 0x7, 0x0, [@generic={0xd9, 0x5, "7f24ae113f660c44d86d93079ae60d490ec3b09d9353094eb910e88de6c8270614ac6e7fcaff52ea911dc429f17286c3e081f0a486beb4d4b385f5af3238d63106851735a6fc26c12cdbec6772ea3b7315fec5adb7aedc2baae11ab7f73b8a9949d1bbb4a82745d2352965372fe0c0c434d4f3ac0a4e2ef15daeceea5c083da661a5ff3e9acd04d5b5089fd3d67793317bab8e2fd49c3653bd4d7cb9c91c7baf4e87a30bda641bb4b0bfd7d29a12f8d70f96d1577de2ed1fb7a4b752da4c246a9a1e3bb8fa5327cf5c91d0a83a23b8e86459d586b9e31b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x6a, 0x0, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x1, 0x0, 0x1}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x9, 0x7, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x50, 0x7, 0x9, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x9, 0x3, 0x94}}]}}, {{0x9, 0x4, 0x68, 0x1, 0x0, 0x41, 0x57, 0xef, 0x3, [@generic={0x2, 0xa}]}}]}}]}}, 0x0) 4.505863177s ago: executing program 2 (id=1123): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000700)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.527446112s ago: executing program 0 (id=1124): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x10000, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/415], 0x5, 0x186, &(0x7f0000000980)="$eJzsmD9P+kAYx7935Qf5GROdXTSRBBgsbVEjgwOzgyb+i5tEKkGLGOggbL4KZ1+BM3Eh8WXooE4uuDkx1PR60ANFTYymic9neO57x8P1uae571AQBPFneXx4ub9KJW80AJNIIiHXn7Qwhyv57ale5rayfn1hPN+1O2v50f0YAM/7+vNjADoFDa6ce97wv5Ny3AIf6G1wZKTeBYMu9T44dqS2wbAn9VEv1DU/X9cPK46tH9Scki8MP5h+sPyQG62ve85QUupjyu+NZuu46Dh2/QfFZ/3rFjhWlfrU99XvjaH0zwSHKXUODJtSryDR703QEuX8M7Fwf+2Xz08icgLyDkSlHhKRE6E/eZcMKcWfYop/ZN3qabbRbC1UqsWyXbZPLCu3bCwaxpKVFUYUxA/877/wpwll/39jcuMsjrOi69bNIA7mVhDfc9y48D+O9HwwZ3JNRdyFaTbnD2kNYGOrJQiCIAiCIAiCIAiCIAiC+A6zYOIr6BD5N0vWhsh+DQAA//9MO3Pt") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)={@local, @local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x6, 0x0, 0x5}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffdc7}], 0x5, &(0x7f0000000040)}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) inotify_init1(0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8000}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f524000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) sendmmsg(r6, &(0x7f00000000c0), 0x2c8, 0x0) getdents(r5, 0x0, 0x15180) r7 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40043d0d, 0x0) 1.823086812s ago: executing program 0 (id=1125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="000000f8ffffff00b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f00000001c0)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) write$binfmt_aout(r4, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x40000022) close(0xffffffffffffffff) 1.822262521s ago: executing program 4 (id=1126): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x119881a, &(0x7f0000000180)={[], [{@euid_eq}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, 0x0, 0x0) 1.536776147s ago: executing program 3 (id=1127): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f0000000380)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x64, 0x32, 0x39, 0x65, 0x31, 0x31, 0x31], 0x2d, [0x61, 0x65, 0x61, 0x61], 0x2d, [0x36, 0x35, 0x39, 0x39], 0x2d, [0x37, 0x37, 0x38, 0x63], 0x2d, [0x32, 0x38, 0x62, 0x55, 0x6d, 0x36, 0x31, 0x61]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}, {@audit}]}, 0xfa, 0x244, &(0x7f0000000680)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8b1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffaf4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431410fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6daa790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c7070800000000000000433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf8714d7bb2366fde41f94290c2a5fdecb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1f5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41ffc12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5eae593fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9db25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27832b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bb0800c51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a540f0c10ec3a11667290b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad95971030000007d00000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c6055bb164ab413d5467ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d7ab3753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf06db539f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe6e7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a1914b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c69a795927e3861654736804bed4214040b7724c056d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8adc67ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c027060697a7f10132b1c259d3f28b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000000000000000000000000000915c2cde78db002a20e370600f56b3803786ffff268fa1782c240a1d3b62bb5c9c5712bc58a0f276f5224b6efaceab36d1468b0800000000000000cbefec08ac7cb62a9f6abcc97daf83edafe4409ecba3050a321a180af12bc59b1b2f1a9cfdf4bf2d260000000000a62f09e2ede938ea300cbefada05c356f12cdc84f66c65e669f0ffcb4ad94f6a8ba978f89ab3d2e62bd2c3eae921e9871acbf36c259d3a86dd5d022bac5ee38f6eccd3e462e47a96dc9e653fb7d7a64405a7c97fb3946f6766f937119652e07464910290873e989f3798f5324de8584a1a8772d2bddfc6eea633f7be50d362159914a877d2fe0fc67783b4fb000000000000000000328b4ed8ac2f2d0440488e4b1d32280373df7ce8847683fae1c73ee4cb320ba8a820"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) 643.116562ms ago: executing program 1 (id=1128): socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1a14008, &(0x7f0000000040), 0xf9, 0x7c0, &(0x7f0000000f80)="$eJzs3c9rG9kdAPDvyJLtOGntQqFNT4ZCawiR69RNWijUpYdSaCDQnpMYWTGpZStYcoiNIQml0EsPLT0UmkvOm93sLdf9cd297N+whyUhu+uEzbKHXS8jjRLZlhwnsaws/nxgrPdmRnrvO0/znbFmkAI4tMbTP7mI4xGFtDiazU8imxH5iJnmek821kvplMTm5l8+SxrrPN5YL0Xbc1JHs8qPI+K9f0ScyO1st7a6tjBbqZSXs/pkffHKZG117eTlxdn58nx56fTU9PSpM786c3r/Yv3iw7VjD/79x5+/NfPV339091/vJzETx7Jl7XHsl/EYz7ZJId2EW/xhvxvrs6TfHeClpLvmQHMvj+MxGgO7jOTvDrRnAECvXI+ITQDgkEkc/wHgkGl9DvB4Y73UmqJ5PedGa1mhXx9OHICHv4+I4Wb8reubzSX55jW7j4Yb8Y88ThrXSFqSiBjbh/bHI+LWvfN30il6dB0SoJMbNyPi4tj49vyfZrjt9yy8qF/sYZ3xbfVu+W8/ci2w1Tvp+c+vd57/ReSy/X+48Xf7+c9Qh333ZTx//8/d31Ld55PR9Pzvt233tj1piz8zNpDVvtfIQ4Xk0uVKOc1t34+IiSgMpfWpXdqYePT1o27L2s//Pv/P395I208fn62Ru58f2vqcudn67KvE3O7hzYif5DvF/zT/zxTync9/z+2xjT/95p//77YsjT+NtzXtjL+3Nm9H/Kzj+D+7DyrZ9f7EycbbYbL1pujg7Y//N9Kt/fbxv3UvbWm91Ppf4CCk4z+ye/xjSfv9mrUXb+OD26Pvdlu2Nf7zd9L2t8bf+f0/mPy1UR7M5l2brdeXpyIGkz/vnH/q2XNb9db6afwTP+28/7fyX9Ih/6Vp6GJW3nzOzY/5B5+++fLx91Ya/1w6/kkWxHPH/8ULd58sDHRrf2/jP90oTWRzdua//I7X3WsHX2njAQAAAAAAAAAAAAAAAAAAAAAAAMAe5SLiWCS54tNyLlcsNn/D+4cxkqtUa/UTl6orS3PR+K3ssSjkWl91Odr2fahT2Xc0t+qnttV/GRE/iIj/Dh1p1IulamWu38EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOZol9//T30y1O/eAQA9M9zvDgAAB87xHwAOny7H/8HOs4/0tC8AwMFoHP+TfL+7AQAcIJ//A8Dh4/gPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj507ezadNr/cWC+l9bmrqysL1asn58q1heLiSqlYqi5fKc5Xq/OVcrFUXez6QjeaD5Vq9cp0LK1cm6yXa/XJ2urahcXqylL9wuXF2fnyhXLhwCIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL2rra4tzFYq5eW+F77ZbHpd+rOtcP216MbNbNj6vTUUXovCUET0qon2LHGkP8kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dvg2wAAAP//vEckvQ==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000"], 0x1, 0x1a2, &(0x7f0000000000)="$eJzs0L9r1GAcx/H390nul1DlVBwq2AOLMUe1yVUdnA6nEy7g4CJ46HGNvWKqXHODLS10kYJU+y/oIHVUQScRBefiIDhoXLpJbygO4iAnyT0V/Bt8XpB88v1Aki9PN+7FBeD33kqHOhmLg3xEsIEJGXVKjfK1nr/r3BwFl/S8ofOZzvF4afl2O4rCxcrFCuV/CuBH1v2t4hccU5SEOvJ5b6XTlpsBwzoLajag3KT6EKtFz33EuD3G0RtYDJ0NLit64jTh0HS/yHS8tHxmfqE9F86Fd2q1mQveOc87n+4fhd4rxH0gises4gYUAkruKrkW97ftA0wJ4nZVYkl1QL7F5rZ1+uTUAOXuMkR45wwofLW7FXWVUxSvp8s3OCI8wQqYbFJS2Nyaj0KvgVxRL8W3P9k/c4rimmWd7dyNZtevKfmV36rLblH8HXKOT63qM5MeDYd5z3rCZEIjYSth5xsT8ib9y/652mvp/bmejnOCp3nutfv9RT8PH8QJqKVXGcayz6lsrzK81e/o4Mv+g2EYhmEYhmEYhvEf+BMAAP//l8hh1g==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x10009) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c) socket$nl_generic(0x10, 0x3, 0x10) 570.184897ms ago: executing program 0 (id=1129): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='c', 0x1, 0x810, &(0x7f00000000c0)={0xa, 0x4e22, 0x3ff, @loopback, 0x6}, 0x1c) 459.468535ms ago: executing program 5 (id=969): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 398.689596ms ago: executing program 2 (id=1130): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 278.702107ms ago: executing program 2 (id=1131): syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f000000f680)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0xf633, &(0x7f000000f6c0)="$eJzs2QlYTu+j7/+nOUKDqSgVFRIiJZkiFaJJKSpFRSghZUwKDQhlSiRDaEJFkjQIkULShIhCZUwDIvpfv9/52vu3v2d/zz7nt6999vW/zvt1Xc91P/d9r+ez7rXW/azW3SMAAAAAAPw/oWC7zxfzfsZ3g9zbAqZf9QoUSIn8vV3y9wYyf5Tr/rtGiP+bJETl/17+eV4kXFGvOJBh4hQ4u/mH1bb7t65eOC77ONJoWmK7RdOLnLzO/yj393zS/NeqUJuQQLBtkvOXkFtFff/WKCQQCESEZLYIBLJCcrdkhf4Uof1dIBC4/cs4/21nZpvO4r+VgTsl/k279J9CmO//b5P8Y54J6+SE1J4ySU8zMfzS4JNmsOVfNxH62zZX/phPAkEPlz9//t+zyNVDU3O5+/oTWon1zh/6eiTGzJwzxM7+XLcuTsfC1kWOig19brNw2MWuYgKBoMsfr7/5PVvlf+/8j9JSIBB0/Yd8/f/guAb+bx7/iL+oK/9Riv9RSv0HOb/7Vf9UF/7Tdn/+Ev8m9qey+3+wv/+sP4/rr/zVeP9Pdfsvyv2P8n4f5+/bWNYfpeb/Yb7I75eQQFhIIPovu/MU+tc5IviH6yYkEPr7tZT8l7rw3+vC/zBesX87fqE/1YX/VBcR+9Nx/X2/f0w0ESGhf9v+e7s/tf8+D6J/tKv+L77DfzPnL9oV/igl//iifvtdF/z5zf8g9T+9+Zfj+rvf42r6X4zl/wbhf7gH/Xvt/3Lh/7gYUn+0SQnJ/U+f6fx3/O4THdntSIiMqLnMX4xDKEXoj3yhfypfWLz1xnxDFU35v8p3Ef4jX/ifyh87L2TTmgcBGn+Zv/d3vsg/lf8y6Uyth3xo/788P02/z4/oP5U/WHdAsOR9efkhf5V//He+5D+Vr/HubHP2/aCKvxy/9u/z0+Wfyvds6r7E6/iqyr/MF/zO7/pP5U/e2eBhGP9s31/m5/0+P1L/VH7GEfMaidk3L2v/VX7J7/zu/1T+8KDBP0y2m4z/y/lp+Pv8yPxT+TKzVrk+WS4S9Ff3TqEt/7t/YQEA/56efzxjhf5R/2fXqf9Z/7BeiJIR+h/PfN3+eP1XrtX+tp8e/4X5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/f7DsbFUJvu/okyqqtPZhU9KuIw2mvjZBvdaL/tEvISoQ/O39U2GB4LnEzitSK8ZMks4defjpnbYUvY2nXku0v9Cv8y+Wjgipu2iZ9F6/xC530JcuSU5Dz42PL3KJK33t4KfUqfVhkEn10seCvXFKmYJZKld9uoW7x3gUPk872vLsdtKvPTUnHtUouJnItBYYySQk/Iy/mBYoun6CT+Fa29yvFV7LCiR10xZemiDmlVGbYT+/fPX5QcsV/ZYuqp0xa+jd9RW/BpSKOZqMzHa3vBE3Yti3Bf0c75issRbZPafs28e1+et2VbvJhZd8HqmeWxoR4l/kdNGjaNPTD6V7lZTrZmzIXlT89UrSLMG9iL3+zqcdZWxMu4f88j5/vLLh0Cbz9oEaysd31m0e1FY+clvv4hlGgw/dkvIJnK2XL3vvk3y84+Axb1bmjc55GrSk1845XiFap5uvSankXClZeMt75uIaezvF4E9qYyM67Tpt3i98kvpaYtXRi3fjUndI2qcpPd1yXki/fv2PrCUDVz1v9DefYTHQ1/KHut3RI54OJzzaFyekqAyp/ZkRbH3LMOydQeDzroVjHMNPXdW1/N7zqer+Lqr2xnXtfQr6u4Q8z7oxLHZguMjribJXDjS7JcYflvtZcClFJSXe3+WcZWu3hWUPv6n7Xj9VHabwflnQQumx/j5i0W/FJMvPPbj3yPtz3rHXz4qe+Rtel5p6rl7XU0k3YUizxa2UaNOC0iO3a62Uwj8NHpEbKrlcr1b0VmNpos2992HzPwutcNt78LjayftBseeqs0RCdaxN9F+8nj5PWlzUUlRrcKqO5mxT2VKH0gHmvSoDDIXGKRZKlyZlL6w/c9QmJ+VSSGKKzDTZV/M/bD76c/uFKXdtHl55Ir0zO1Gg02H95oi8T6tezx8jHLMD8xYlfHVzPnbKaeWU72crjl0LXZZRFrRypI1I2qRPmuaeDfIaboplp6KW6ymvkg5dvr9/yK+b0rbTFaJ6uua82HRxb/8BFZtGXZkyp6uD9X7zfVku3ZQ1dL486XRYtuSq90P1rylPglzvKc98ccNNsmXDyx9CJ5q6Fb0Wuh4X4v30Z4+aJmVB//3lNmeCZh5XPnh2hkuRdXTuCzXp1JTxMpd8nCbdj+pSLiG8p6TbfY3zvVxzRBXFL6fe0Ww+MEdwduW1a26vY25rGolvUj8kXj3Jtevnxz4TJjQtWNfDSOP80NkPtGtDo91ClMzLC9oXb/N/4eOwXrM4IPeri1iz6tKL413ffO0clbDRwPO+lV5Lxbf7Dt16TQ46+G5KlwnPH/qY18WtupgpU+bTfjZqiOnaquAHlQcfxfV/mxesZTSic8ed5UJFrbvfrVHY8DY248vBFV6ZC0Yor5txek5y9zTlNJl1s07au0dfHjinT3zgx82LKk9+meS7zK+syyeXLc8awr6MXbW+bLzxkUUP2s4mRX65O0FoxyEP4X56juKx7cW5Z/SVdjeWum90PSxn2Pls/eGUxzl93UMjXorcH6r0uLNEc7K26JpLs69s2L/Z95Vch3QXnbWXw46VW+5MeCkn82J7//qY+/MyD+zXvzz3mrH3wbiNX/arHXrc9VLDUbu7sscuTC1ccWlGjK7egE9fdIcHKQ3LauieUN65afO8ZRrTpjTeGLVlYIaGyPDrpzt01h0cubjPOysp6ymLL6x+9ctNVqvxxjLJyI8NmxvzW3vqLXz3s6T40QUXfc3Lx2eKjHlosbXrEeG11d+nrJKr9jtzRtZd7tO+pY+Fg+zHGjscTbdtzboflbntyNLghbJtswPNR21+vHrOztRkB4GzVIfC4aFFQtZG785vMLLv16TqF3R7QnZL3d7U7jIHrubfmR/2bJGzxbxxh8f4Gw84vK/03qitYVqiZws3va0Mv+1YMiI99qy/j8yECDfXZzpmti/lh783f1U9SmNVWUq9sKCqbH+o8Nl78XLWM/1mXbPZvM/kuO/7aOfaLPVYy+OLk3tdmHxI6vWKVc0SFwdP29OQvdW7Nar9oOoBJ78dLcoq+fXHou6orb365fwq6343dC7Nfbw9z3xk552cOOv+s6L8mzbcmhomLOxdkLDirnKkyxTdAQEnlgkOrJjVZdGjtT4mip+7V5uGiOS4Gfpk750V5/Yo6sPkB9rj7SNHBxoeniOxceiqi6prnYYZuL3yGXXV74v/Ike7pfXZnY4pDx+FSXvnyVgWjuzweza0qGmsgWrV5U2LKhyV5vcMe9lxtqlP8P2T/ZO/rK716lWwoIvuOEmJwNO6T2t7xVvNOyu/tjlXKEA0wDNewjIpOikv6LqXV+K2ZL2FnWI1Vo+9o9c0FYUYHtAsGGt88oOvrrJSPymDI1vnXYl1iwiV1dov19A+oUe+1jVT4eFpPaMfqx49E9bwaMnLesl5r2bW35+kv/LDkm5Nn6RmfR6sFqd4/+X3rROetVZ1C1gQte7SygdXXo9YJJBZqlfn8eJpu8ujd9+V0r0V8nOUxaeUHlrYW9pYReuVyZQHZn03Gk8ePvLpqpLad8KNb2VObzraecGmouRsf++Sjlt+60Q8xo73+uDZftQjfMTbzOXBYUWFEe3REncrFiRKzW/r0Sgz6/q0rdtsI46Ok4lal/QybWN4ceqAyy5DxTr3aJSlmbbIvNk6XP3j5S9vtteMMTm+4plhQdF+69ID08XvPQ8vPJvU7+Xr0cPnZyd7RPuvm9dD+vrnQpuq1DMfo5TWmk6yyyqdtzvqzrW5EeHDY871O7sjZWq+8a+BQotftW1w26forKe9vOse8do7enUdxs3P0ySde60TvI+rHfwmWzT92tYkh4ZzP517FgfVO3XzOLd/2JoR6XLHVfrGlW9Wslw26Yh2ZGjg0GNhv+TPf5pqLDB5p3HpyewP4hFxy3sNid8rO/iG27ypxXdMFbJ1r1XunGm2MXW1yoRR664Y1Qv7RTirvpeJ+CrUa1Hz2AlSny11b78bdEUj1+qC/fsSo75G4X2H7tSc6uuzrk/m3iJZP4d9W6epZT7NujHb/Nw6uataM0esEzVs95XaVm6hODI48I5t+tcdg/2Eo3qozT7T0jHRODlq5WYpqz61MWqmxyYvXm+RPODF4x65Fpbvxe06204/2nxzuO/Xr8pq7VcbxL1XRqi/HbP37VKjwANOWqJ99OYO9Ik8clLzguxOWbu2RZGHltxx0M6rEGu62jZRde2yPUd3NvYyHzKoND0r98TipG7LdWcsr7KqmZP2TfyKuGh61yWvxjRdP285w/ZiZqj4vcc/jWvt3gxZXWLbOahq1+e2soApJgmtnyr6imdU2Vc9sHhvHJMsq6tm5aCzZc8L+yFbHI0m//ohktMa6Om959BkkxVLEqwlE93cJkxMnufsnekV5zf04JSDC4+tHHqrS8nboDXLfip4bVYU297XxUD95z6xYVMjT4uYi3/rPdTedbbQorz6G5VPZhbOiVR9H/ruqfUG0eRur1W+GcgtPRm+L3DEVfmDVktWrUhWHzM6J9M1dqrOx7MGFlUvd2gdSeh988DcCqEAnai31lOaQ2ffrtyyYfXzTHm/vced69QfS+u196tW1nk8wMne2yJ2WFtUwMYr0sOOKC6vEN2n87F0uGylSVnTrx5yW9JPWuopjUsb5phc9cvMQixyr4KlX1D8J6VHIg79wq3vXu8VML76zPk1LsW7XTTD25zTpQ/YDj4X2P+O6dkZlzvkDoqrTbritC05X7Eh9oKEwsjVGqru7ZaXO9bYluy97BuWXKw/8+f01FmmcbLSZ2yWTWp165HecWm3ooNBtuJzu/l9fg7tr3rpQNRaDZ3wW3PfPpRZX9ZnXJi9t+F0o696+yQPfwkRavsgGNJw3kF9y24RA1u5D8afFhomzD4Uf0Rh84LKJTc+DN/vcuCKw+I1u18Nv6tlvnLKfePpo+Y80M3U3bD719rzVXVqyce7/PrQW6Vmae2YXvqB8yeXbU5+pxXjP+TqmynVRdMutU25fX+Wx1d1a/Hiifvnrt93ccS3dOMFSoahxoWmfsemtlz4ZPdDTnntgxadPQHPbzWrTfx8RnV/tNyLfQo/v5m86i4x021ps3BsXGrOBTPVN/Y9vk0wy8/Qm/n50/ZNuiotBy69CbKJfD4iuG3b5fWTMk4nWTeaF3W/Zea+uE/G4hyz+2+0F8UY2409vmCtTegDTcPe2xzuHIn8aFjsPCn6ody3uU7DXFqlftQ37Eg7NzTV/V7uwtOjlxk36cqPGD7F2zX4ed3D1dorh+Q/dQ76mtDD3cLvZdUTlcK9b6d0hpjVD1R9vfSTiPjK4edzLR9OHnxZuuLhy2mbblzeZqYRc+fsBIXnqmMWmnnF27qP0WxXuflGTbmL06QL3mEbpoZMPVnz89qmk32tur3T/ikaMefBlbbzGi7W6kc6HplFvfC2mul7eIBb/DvlLQatDs/uR/ft3zo4MmG6dkvgaJ2M5Fi9nKK8u54Ll+colOe9zngW/Fpkz2Qt8+9d5qhNDPQY6Hl196xNRkIbbV1Fg+ecl27unKEku7n3yqQ4i0WX31tYKAxIHN23KKzrudIuYlN9jy4K+Cij/v6Z+7m9IeIdb8bpzVKbIx6vXv5Nar/ei7jt+3PqE97E2w/2GLZqyPJK7RybJWrusnqR3r1bQoTlfrZOHmmnc3D705Zzb8wunqqZ4hQzJ2ezaGyLW7fM8+ZWeXNDl1pO9oy/qqN2fMCYfW73fIoPmNWm6upYvzzX3KrY8evX5sJUuSMLPp2c2i8q0VNspO3GzS2Knju03D8maE9I+Jh8wX9Y8JXjj7NGh7RKnbh5Qia6RDsy+M5PV+M3XaZ6SPRx/vn9porxt03Nkv1iXYt3j9tgueSH5dANz4JfpmfNbR1XlCeypWhJ2oiJBYUvv086f3vkQ9ewTq8jQ7/1sz2e8vhxt20Jh1MONIneOPPqxvl37VoqSr6dOhae3XIXhS8Vrz0/7c15S99fKtUT3+c+titqc219YTPCz3va0eIT7vmdh2drb/xVsuViYLZjdvpHx9SyrXY1xY1CXQ5uKB9VI1V0elFJo2TE2ZtTuvyqeXffqXBwoVXs7Pvt1Y6pn+sdT2jem3b33U256bvv6g59p2OsJDHYKXFZyEpf/a316aqnZo7bFLVH+eTwDfFRy9ckDFzpJ5CeKfk5SGHJTpcVq73blhr1N7y2fWPGs+b5kg2KU4IOBM58bdMrYPw8KeFvQx5fe6N+pb/E6L77LN/mHUq4XCVqsC+5f0Ovw9O+nh4Y9f6m48zNU/qu+KVyKvTW/mPSoj4WSboGCjX+hnes14trfwoxOjXxqOwWZY8oETXPTfY3b0j/DKlOMZrV53aA0ZqNmjNChL/3qF/QK9JhVN9Zyr1tzLY43tn/+uOezqYLES9+1Qwq/SQVEDtuoHZwT5XpwoYaYk/bp+6JkdnV6D9h/bjBx8I132x0Dxr52WbkQucVyVOq5eMXTFTq+zI3XtDFtzBxUKdlvfZ7Y9+2WlGrJe8Dt05d1lb59EPi1bzFi+18jacueDuj5rBap1pt/LopFi5aQx7e2pD5OXOEQ88Z14+qZTgnrRUfe+LW+JV1s2N7Toztb5a8KW2lqPnHBiv9yc779hqK7zrkfm9stsaJ70+7Ho3y8x0faypz1sSnvH3pixZJi012J7yurV/vcniZZ+GyHRYvJ4fV9sjv1rv5g8Agus9dP99feVd3BZ+Yd18twMdk8NJ93g2L9LscPNtUri06vcez7uPtjOyNJF+7in44VBQXoyphIFH2oWN93fsI6XXSFyTPOSe+n9XRqdT3vHlxeM7lG2cc0nwvyk25PWtDqn/CIxnrayce6jtc/HxndmGsaKTu3VPaVu/Ke3cUHb82fnNak9ubGTMctixcYXbHcOKkEI3Oik2OqqN7+zekVJyol/Ka5JBW8ynjWM/PiyaG+3tZVLW6D9y3Oum73pTLm6a+rbT8GOPw45fZoWkG+XZmqpKVnhG9HihUP3851sDE5Zz1kZdzHwn8utyZdv31fZEeKSa1duGzA8KH7grKyTlpuSdwe3nWk8t7Ox2DPq1TXbf04oTmNl/30uM7V0/TcNU82z7O7cGdikk3BKulih29NOSkxrYqbFPdNqPm3MKjb952brMMf5NREb+lb8vPw20xfU/kaGXeFVasHe9Y7phcIBsRF2ffe9Wxo93ML/VUSRTbnTtK1cDPQF8joeFMp9iJKTubPv0o8lE5WWkybrDyh8F6/bZt1H05tN+DG5eu7X6QIaxVadYt+0xzaVOtxvRbr2IiZ/xw9SrVTf2UEtTW1e7D4v6nvEfpb8ldu99ZtWlCn6z5Be83OQ2Rs3V6uTVpTHjnqG2z9w+cWdL04VG9g3hiu8Ue+Xu50gNE5D+vnZMy0kwhwXNtkNWrYNG986+qlEkFirl3aI7W9d4aWLQ/U+PR5uL84M6C8lXPYkaY7ypd5Ltd8/uvV0fkDbx6rAjKUYxTs7PavfyqsMP9I7pL29xOXZMYlx94pZ/RQ+sQkfqs++lFZ8J1FAN8m47KDVWIm26enPNIuXmyTlvmN6+USwOf7+mT3uWjdfYVs4zHFmkaZ9SNXy7K2KE89O0RrfhXF7wmHwo3lhr7uat5RscjEyn/d8ekLGtfnGlwH3QwXC80e5DLtxPmLteVV/XSHl55SH6PzfO8aauHrAtbJdcQfLn4rajfCU+nFVO7G+ctTTV0mSCIbI14cO+WwVTlD+pWKz6fPjJmX2lJVNrAHXUjDVQcvxVOnnRcZ2DHspjpFWNSl8+QKG+ueaIdczDp0riU+UY6Dfc/2V2dnHzYVu9h89y5G3XDGwTrBgZ6LzZ13X7+4oRxFiV7lkz+Ud90oK2f8wvnmh/fZu9z/XH8qmrtrcw+u7W6D9F/nzJL2n9ySWlYt7QfFaNKRWTc9SyF1Y2NonK7T5g64EzvT2tnOSk/zH3/cbGN7oufG2qHrawWWx0gfcXj3SPdT/I7bEdK1NT1l/Hq/q1byuXN5WXfhKdvuNi98n62+g1p44VPl62MVNOfqjkuzlZ8lbylSVdH8cYAk9avYu7B1c7zjr1ys774Ol9sb3ne+9nKEjblFa6eWQ/9EjqfCyIeF67xdbNQO99FeqlK+qgnIuvr1ysW5r3eK31IYYuQ/ZtPWaVNHot0blw45P91e9jI5PcSq3MP5M+NW9aotf7u1ev3Ow4+e/rG4qV0dLnAb8uuwKpFPdMS3O5FGW+UnfhBxrpSKlokSGnimHMpGRr5Tv3OVr8u3S1id++Km8/QMEHaA+Hy69dKny/33zKx50lH8Umz7A6cCB6o+7hoWcLB3FzxhEpdEePD5/JOGXdXuOEh8D5heMzy+pWV/eZ6VUh5zLl31WHde79ZO31vjKhOd5OVLLhVGvUx7JCLZ+aXG2cz9HRGrYrNq3dP93ROn+ZkUFxZGaMea53jon1Qr8e694Hjt4q5f7lY8/zsREtHxXAtR+/FDwRVXsnbh5UcHCdlU+M0KLFo+oGuttvGvam+YN1L9dqlnbFDDHcZNGiLVqnpR8rs7iOnaFApL+qzO7K5M69tsKGLza5+yps9wjNH3LzZr7bcdMdVi16zVF4eHD69OXHwA2ft9z5vPvc3f99ytG7qWM0FrotXVrh1PGwdOEAvqsDwsNeGjfkRfQcnT56p56btknO3/WHpkFqvmGtZKSuGvq+OCDirpZDdv4fo12yLoIa3453s5YraV/jOrbpztbjjcWRUusCjSd1YvmhDyepdEktbv92b/lxS8eOHEAftBwa3WtTtk7NnjNSJNh157kigSl2/vZMLA5puyYif2tbhofpKvqhEoUur/sKOfT+2unzcPLA0oFHvUL278eHCZbeHrBSV9tPMbL2o/HPu6G/LlLtbWZ4SWh8QF3Sy0TPF4cMonxa7ZpMUdR/ljb/8326wu37y8ZJGk8Z0yesVxYWp+U+7+h86Mvnt1l2+Uz+8+dH6YU63QwMfZq0YqLC9Z2DSO/+lr/QiHKWU3be5Cds8iqvbNGyQ+sd3B09sX6k16/JRIc1dbVu06kx2PAotC5Ia5rxI896qJxK5Cc09U2vXPBQMHXZk0FMj1wjJDsGeaQb25uVDb6TG+vfr6dXP8WqJ8oClXj0OrNerXNLn4SqzcTIX9aYKsn4GjdX5Gr9mbmjJmfy47ynhr7J7VV/OSoyYcfaFeJiizQeL7kavqk70PP3h+NHRdjIqbq7ei8139ts0U7tSItS0Ynfu7utHfzgmHT7xMWb32/yhj+PyR8q/O3utxe+xrmdX/eEmgxKWRI55LuIQvyijcWDE2pzvu5JWdoxvNq4VCQ1tOmLyeNh/87/jAQAA/sv5lnomfZwwzGZ68TOpPivaTX///i/2R//v3/89hASCvA1PJnb0fJvpu8t23Li1yRNMDxivuxN7dnB2UlSmcvgAj367FqYeDU/oLhqxRMX/43zNGcd89H6NeLtzrufxadFxs9saTD+4S1dse3rrVlUXkZq7qzNaHZtcxyb2SG+IeKSe8eTg55UHzwROO/ukepi60GqZHmLr+sdPu5Mif9jMK/5nzGnfjodNv3R3v7701mLEyLQ6/6+rxriOVz/eILI6ODhE0jTWcEfK3XCdyaNVbOseqLgWyGpaLnyioF6du31X1SvFyWV3rz+rn/DRJvxkz9RrpQoeEi+nvw8bFD0s7qbD3vnBr8at2yFhKWsVuXrmYVO3aMHDHBOZ1WUjDVuOjkmsaLRZuNP1ppCdqPG0hONn5owXG9JrTU7pAC8v6wMtI3815yXK3Bo/5nvmvKJjvY0z2pV+5d9eVB1d43Okfd5gxS79bj+M7fpdKsndJqX73kvrBzQaDfYPOT6jSmG8WUHPpoysHWs2DV+ZmzLhinR8uuq0iq1vzPc8LlvX+0LHIxGvwGD9gqS6Z4ptt/3Gu4/qc+eR3sf62I4FpuJmN+bNH9lS7uUsfbN9suLZHI+cc5/6hz5y+fHue87zC13kjIMHimxo6yGcty9o1W7B0UKDMeaHXccs6JAY3zd7/lYRY6+NWt83fLK9uSx07Tvnk61PoietvrhjWXsfg/pN0aLiU+Wv+MenbvtpYyyVN6pn0w3tkha/wSfX+8TfrFtTki+e+eTEjgW9ZR/oPA+91jJesH9QU3G8p9/KoKzN4o2B3nnq14yHDDkcXaoqu13kmbJZibvauJiMTJNiUWejXTtnScjbvxktHDuhWKHaIuhIXVzmT/O3xgMEk3+Nrb5ksjq12yaLyMiSuqBG9zH+HxabZ2Wc+95DKl3vqLleye0LIrozhlqs2OcwfajJtlKtCM9vMhdrg654Jg0/PM9IK7O71mvDdVa3T77wrBA9o1daqDcuetzDkTpK3yyPNVoelXQt+6hW+274nIjNP2oaDg8q3Ldef/+p0sifY26FxnT3n7R9hlnZtJPrq5r7frur8eit48bbn2xzWorTassKXvT++XS0Vrx1rPJ2G8tRP1yLO/rnrPGpkjvWQ2X9wZgTb90eiO2YL786QFLzYkXo3f6iVXlla7JOBs2xXp1oP6CLgnRCtmFv+a4lfi8OvHwlUVO643TpjocuZi5yVk9sr/a/1dh1vbh39a87LQGLN/RdsGfS4udpygWCc3rpR2dsX+Cd/yC9p1Xtap/9gclagadMxw14Y2zdq77Z9OHrI3sbkp2qmgquZm6/eqrfq3yRxWvWpxybmWkVEzbUQdWh9cmV05sCD+64NWzYrqNDs7zLPpu8PFFWd7lzZ02grI7V5/7Fz8/1+HAwSe661qfLM9+MTxqUZGbuVjnk8ZcvSy0ntvwIsrJsabuh6NAS/byiV9ughuWvp1qtk00bq+n62V7iid+e2IzV/S79Or9wl77yvaI3PTZEKMjPG5442SmrLLd+o6tX8MFPkV8Ljm+TXp884Xnnh8Rh67r0aTW5dsbymNQhF+H2Bf3c6uVTerR6nPii2TCo5kTdiCXmgxxqnVKyVM8Kr54pl+L3pVtjw500149FvQq0I8sUxcOd8pMl5G5qvb8sW7Zt6EcpM5/AnobbxFLu9A3ysOtt+nVNf/GAFv2baRWWKiqpF25Fj0lrVBgdOahYu764zr5lzMhzDcHxRUuc+7V2bqvZbFF+a1dty/HFEj8MHh+X8X53e7xS55BjTxr3jvroPCzTyiXt3XKP+z9nPJZ6b7tT2iA5pPbuuiG7Nne/uqX2VXj5Q4Vf2ltqJXoPvO3SPlUjeJNXTXVj4pjJ4X1Hj3/dftDki8bcHuK/No1fbScQyjYWshgwTlg9TPzKxdxPQ62ePgpMsdTpmdEnXFKsu27acNf7dWk3ZybYdR+yQF3GuyNRZlnt6bGFkcXZczyCvEq7OLQdcbggbaE3x6VjtvCvmqhbHoHDIgYPWq655NF0zZlrQyd0k3UKPiFk5aRcLLFz1q3R2vITA16WT+nn5Oxz5+u5+j5ml9u+7J0vZdOnouvP0uPCWtcnx6j4vD1aHfM1eptr8+x0+YFnZngKndzWNEB+3uupOaEdp3uekCqTrt0++8mgMJcv5hIzjGLWXJ2x5px2z97zBzSsEe3SFtOjXWP+zDK72R4Dp1v8UG1rWFgx62H3U5KSQ8zOmGtErt9zPjEmb/r0ZYemDe8zVrrFLWi+yy3hHxsrD9ekndzpVak0M9Us5qfS4akF5pN3qVqWblbfsGdvuNXbRxN/pUe5v3q++avcpBX3r/taLNF4t/3ipoLPCicihy8oTJt5xS/9gqh8QUnlILvCw/NeZao6mL8QL7pWFRfjmp8+yujAeBVLL0PpNw8G5iWcHFE7Uch0Q5+li6rmH/As3mhfOSimt5jpgnzx6VYn1jReDnkoVNW/YMvjZqdeoU/OS734pD4mbVlAtf76zfKqT764tiwQt1yRaJJ5Wlsnaf3QvTcuvt+8Y6XA7WKBZ+7xlXX6E2SN5x206ScnpPpYxdRSEOBW8nay6uEHk2xVr2X3vDExeE3/E0v0j7zfFNV7htP7IBuppQqh6zUW9R41NTvrZLG14gKDA4HfHpU+kTm/oq3F6t0ztfxROyKP7Sho7+o/fE5hg3661nX5nyG2Z42+KG+8bTKiZrmsuuS5detV795OHb+1JGRoxxYDsY7Boicu79iaq7D09rqrnjXPRO8d3vhs2vw9MT337IzV/DmqVf9Ax9Bvhp+62h9cVCbWa8Hc3s1fJeftDGlzvtSoseJsf40SkXiXLeXb7hqdGDM6XkPRaESK3tLZ47W3/PD4HJXx6KXhXJUvH2XGus7Li7iucqFK2TF22OlVo17Mjy0s0w09ZJcg9/PjJZWYJWsVn74bl1F9+9OByyOiY1+NPHuvsuZF6u3tYvKa8T4t1ZNN1l+oDp9XVbdK54VGmtxWx4TMmk1pquclLxYtNtSKfT3SI91DtdHByuLeio6Hry+Fd7ze39/36gwN5cyupcWfI+YdsPaVsMpodvFr3TJ+QnPURgNJV6VG2fVxGzUuL922TuFOyrCM6RGLdQwW39v306Q9LrZ3jOOykb17eZf43r1xcvslgd7c5w9HJ2+cpOIafjvJbtCh8eNmnimZE5HwxaZRYn+0l2L66euLp+gk1DY8l/fS3pBc0OLjpO4bfTp/Vu3LXNOmCpl7Lboulvv0eswZs2JvkWz/stdSHpOsFk35JCo8MWph6qr8s07bhZLc7r/sZWo6un7PhdjEhTrR9QV5AV3WdpO+cHp+p9VHuZ7K9SsGmOfOGb5q2WQHXacLscPz9r86eUR2c4jSEGeFZy/kftzzjIteMUs+KWK14/nvTvNPvbvmuPh44oOGn8/NxqW6VObE7/3unGW/07fx6dsk07JdFzvujLrQbe3oPU/FpA0ODtE+VDBsapdM+eTsgl+v9iTJvKnetnPsZrNrnppRrSaVg3o+uTLh6ar8jU4aW6KCTibcfVXvUXdnUeiBnBCHsVbLhXYtlld6nCWx4kpd9JxOh0sKDzzFWwvMa9pSS6bEfV1dpV/WpdtNxWmV08t3qiy5tnt7XoJTddOTvKqD179E7VNK3fVhsWmsS6+O5vmbI/MrpD7Fr9Eb9t0pcblfkOzyXjcPHT7d+5x4QEbHtawJc64rLqw6tvjuBUFx0o3pWUfSOtUe7Vt7bMSN/h3dV6bETBiauupc+Yyez5W7aR7ICsvseBZ4SPLo3PyP964FJCs+s7+gIOy3I7fWf9ECh1PrzO4a3C3aO+yb4ekzXQ3n2ydrSZ45UFgl4lwj+q5IVfqK7+RO9Sz1QZUfkl/s0JVXz37ma7Z7V0rVqof1Hyo/jLtkeHuhbfeZU4J2x4m/HKn0+VfXvq51BhENPbUezBge6W9qceNi9NpL60vMvgRXxlmH7B51sUhwcVxMP7MVMrbnn+4ee2D2/hf2aYO+JoiJrNn4K2zAwKnu935eGbxB1vR8ZVvYWC3dU+6LE0Y2zv/gcnzJLNHuJReWiY923pJtvMnXbt63heOu9XUxHNIaMXNbgUzaq9XW/82P/QAgmJKa9WL5lWcjdryQth17Wqz09/pf/I/+v63/1QQCQaxAILizc9PouceirT59+P5lgsIufbVDCq8Gjssz7OEZlzGpfc/wJ3u0W1vchfdFuPXd7PAu/PvWqaP7be6iaFXcMHRC9cXet9sjIwb6Zyf0UxMNKKoXVyxfEjh5pUlEom+O45BjqqMtjYd9u3y3tuup3AUmX6w0XJ1fmwhP9SrQe22x526Slra/xmWxyvFjl7WNsn8m/N4nPq7HlMDEMf03WcmW34iSXbfnmN+dl0PMHx8dPV1UdLL98n0KNh4/TF1irr9d+/jb2Nof8VayaaErX4wYN6jhtXjK6HGmHXNvr8pae/NUidrJVSV37y0dvPDc19bxM9Wj2+/l6o654Xz1uqW+3pHVojrv96YPmDTbfobmoa9j9T9G+u6zXlB5M80uZI9m47xdFwePDz/4znCJ5rYZc77vLDyYEBxu2vuK7Q6rKmHhrnsnj1lxWq9lX2S4vn3ck8KTWx6dtP1VfnFb4IVBx+MX9FJrnnxjVrZ9XfOpdKVvOlr6z8917Dp7be4zQeXOU3cDFGI3T3efmajqMKyq0Sbs/PhX94vUyqT0KuKH+vZ9IzYo5UlxD+0bQ52zBfdr1auj9G1vXVZZqNK5cMve62vkLRXXTBl5SMbzq8TmFWP3P+279vxc76I5+3JytpqfTDoXHfyyyCjJefrUwKRhA3VH5j6o7VygJf7Kf/rCQ81KRl/79b5ZKSTbx7Xuk8WDIJkfo/bfOJv8pFnxbUlLy4ugr6N0jL4MC93akrPQdtPam/dsDyrln9kgv2zlq4VWYYuO+Nx+HZlT1dpxfIO0fJxIduOFDSFbtFU8jouJrZjqFCAbut2naq/t/MXpdW4SA1Nl9QffOdKWXl6ldld+5eB1ms5Nj2enfTPu/GE+w0a/YcfZjM1rako+rRzTQ3TAtgX38x+MbLhh++JF71P+B8LmhchcHJBVJrAKXHOvYEpuY8eepp2VZ9zMluu07rabFBNm0zL6upnK9IGFmyS39Jx/J+hG4d41yp5tJ/LMn7+XTVkWMSknZErm2A2bGrs5Hd8z7Ku9wHTwa/fh59v05a1yvAfPOXz6kmHfkcdatyn9/KqxcXfo/K4hcg7bhHvPbF43bYrzXP8FWanOdf7J6qICgeBta9y3QquXM6esNHU+t/uO8rv47rOvJA17aJzax/2GUpeJPTPftskV9pd8ejS97sWagcP0K8Lyx1e/uTC827MdD5/MUBnWaaD/+nuc/bHQqYsrqmt6zy45uXve2HKbDJHec9yKsofm+hbPnudj7tV3lp20f+Zb3ZSrwcVVvzbIuzbsdTxu2dwrdHzYydupd4WchmQY3S8//qPzsMTu7HHPlz8enfHUUm9V1eJEzzLdAIMG4/wvK03Xi0iNS9VVe/qkZ+6vb2FPY4Rix76RCe581NhfofHl0PKWSZZLvytKZvddKxlToxtp3Xf9YQmJ6QaKl23zGu599/4u/7xLVkXm3IpuVft6/DyQ0LWfkbRHD+8jai/n9XpmZC5fUaUSHuP3ZpSK2b4+8hI+2dYZuauOOLeXbYievuNu3+ABGuO27L63bE6GbfmoMbP9cuzmHRN+vFTZymXhwndTeu3qsv/emvAOD0Pv8pFXe5gGFG9JsAjOqLls9GRGcf2XS5OU1DMj3XuYB9qdvzYw/6XwdoW4uhE7h+386nD1sMDx54h3iX32yDzcPszrl+Ecz1Lju+8ePt/gd9ly3cLdZb53e55+Yitj82LnxUKz7g8dvQvDPke+OaZ9U/XBvoJtL/yHpehv2WFUfcrKTXmXsM+ZWaXxX2cGGN9+apVgeyfiwZD8urGyD5oCPxcpNDZeOfbffLsGAAAA/lMUt3zvOPWpRWn/tNka0ttLtv9e/0v80f+P638DnW7tXUQvaasf3rfodZPxT5Wv34erlxdO+qI2Zk6DzaRwX8Xeo+w+WdYVDCj/cPdq6goLM3uXowUZgnF6ipFlAyvHGaSqdPazTJtVMHxJUG9TJbVBzuUPg7uf9Rx0MlH+pKO52DvvUQHpXSdaP0k+kPhyvOaYxAyX4Wtm1Wtd2qu6L2C4hrFHwsya1ICXbk/3nhi84vblvWETLG6rzPJdsWxZ9feCeWNOBKnIB1e39t/hM+1jt+q7p5buPJqn5ul/tGFiUpeTVjMPVj8RvIheJj306uuQHb0Hd8Rs7+bz/n5Ydm8D6wSxVUrTD2Ykiirfe9TDp6RNq279AalTUt1+6Md7i32ovGewykgqt25iZce1/lHlD67MenA2r+zkkiEzTT3016w0yg4WXnzSe+nxdY2SHwSFpvMGT+xR+aDfottpG39VL5xdN2qWYHfITanxPxJjvOQt/K45brhwRF5uZ/N1DbXpG/a9nNYeumyGoEBjvvRe2y5G+4+G3Ds88LxmsLDcyV/bb0a3Ozk75q0OHj9j36gHTqfyZ2judl0xduSFR7PE912pvrz8mZZ02S6f4u9Tlib0l988b/yI/IC6181V7e7750T0E470PXHF/dq2tUK26bbWlmX9R0VmX57o0FppP8dUcOFj3rbB+zaZ68QEKJ/Psxh7pL5gT7B2cJJNiOL26ZIF556cXbsp/YVm6cP5O5Vb63avffq9yaDX1YvfVL9/O6m4uPeU6QXaOuej1SoGnF9wYoSP0um9YwTL9YqMLQ3krRxvy6Seua757W7e+svxguwBhh2xGtuijtZaDMq2t/OcOjzLKKyxLDvUacfP1Sld1ifebMtabnKvQcz14oDXG201p0/YOtZ35Wl763Em2vGFayb+2Dioc6lKt1tZJQPF9kin+Uus6XhdPOHSGrUx/x97dx6W49v3e7+RFBqRIZVQSipFGQq/KFMlzeYKhURJSkoqmgwNUlRCEpklKaIBKcpUmYnSJCFRmXq2+76513X/1vV7rrWuta3nep71vF/bdm57+76f5+fYj+E8jvP7V8PeLdTueJ20T0ckyLamJnWux4pRCk1Whq9P6i1T0pPauH+SZY2Yt8uMAQ16T6bvzXi5qlee5B+PtMttxh/vsSIvIySwl0i5Rq9NmplPvG/u+bBorvXBrfIzvxTtsupf4rbFcEvEK9mIBGuj05kRfgvN/S7NEqseWOutpyDgK3rM9NXqw6WKk+dnjTi7Y7DKNWX/kfpft9Vt65Fe1K/FJuTri6KoUv3b5QdcrFt1Vu2QOFKUc/Xth3uCzsJj7FtKBXft0R1mnJB/XnqdVY6ps+R+Q/8k4bI7GZPbglbt7paraNh5RmNsk63JvI29v0/qt1xpnbj/XYcPAYssv9xevkH2jVDI5k/G5c+Xdb3fcKt+j8JA42GhanLD284W18UfX3ZK+Ye1qeIb/fMdb2NMl02bUD8iWWdM0UI1P/+CG85OMdvnRi57EJVzP+u7i2Hj2qL37v3Oa6nuDr8Q/2VsQYCK5VGXgRpGQfaBZisMH73v55kXMqJPnkbA4XV/9E5MHHTxbI6l8c+SIuHPFxxd9hn4yZrM2t9zufS73WPf37sWHXf9rv2rgbp2/heCYhbnLE/NmPR2v4qjxPllIbEXFR4srRuyK6w2L9VYN8Q261m8303hG3PstvUtn3h+n79BwqRRby4cWXNxdZh+xbIQz5zCpIVeNk21aip3WxzSB8mHJIk8bNXeee2PrTFfIs9OyBNwCx6aa5x8sa3mbsD2uobtWjljR/dZ1z6+oe+TMNfHc0a8WX+zZYD/+fLtskIuSa+79D+37+yj8ETnZPbc+FGK4yu3KZh56o1/oG4oLblYrsnCYrXnFf3XmtN0dWwfy91wlFay23KxtO2H8uWg2D7Xv60doDr/0Pf2BIWXU8Yeklq2ICvf8cCcf/HtGgAAAPhf0t3pYe/IH+WTvi30NctT7j3pd/0v9nv+V/1/U0BA4NhU+e8JztGSdjmLQvPnTDYaNHnXZrvhTVvO3ou7V3v2+CfHci//TrUxY1w93uv9UJaZ2WGhMWvhDslkh6SJS5b2kW+q2JQc8T14ykJz13L/8AN6HhtjjuV+7WF2OramwfT76ItnN2/YOVboivtPTd3pfX/ssN+l8dEq8GrikB2GK6fqOH+o7Lk7v9/Y1J+ufS4qTS7vWlJQrtgzOax2+TYD7++OfnduzY0JSJITPbtUafohg2k968wCItMLeoqUJp8dE+mXryG8w/NNsGCz2pPoxmcdexae0k/qpq5nd21FvHvp/utLWw656rsqLu2alxY2Z/21oIKeE5uniG+PuWh353LRxXMhA3v1vJJpGaC/esmy6tYe/uPancPtLshsDQ1eubnOSUzpfg/7UY5pSe+//ng65bBVw4AAzaul+0tahkxXkT3306nbkKVu8Q0JNx7mNByfMTFhfr122t7UGU65zSFuOjvmPF48aWa2X3XWlZPti08bu9dEH72tMspC1dvO0UpwS5BYi/5lKZ3msweviq4ZOqL7w/XhFXpDtMWrrY1mt1wRzpgd8Efy6dIng5af+FGzoLZR3koqKUeju8ymI8dWj08JkpaLcVvjPGX3N/mxU/w6rdbPd2w7N3DK7jEfNCZX+sqNfaKdd9ZkuPVUjT5iYl7dXGckLdv285rD2Po+qaMPaP+oqtO+di5rfI1cgmlW0u3yhQsqVkyYNyOosEJ7S3er3Dup3mOXvVw9bVvDN+tCI5HlsWoq86dfjDj0WnJMycReAm5Bn0ROxZ/0vTJfdIvv3omG/hnNqa1J8yPfbF28WbUxaaCY5mvF9BNNkzo6S7dYVq+7GKv+wHScTXVz6Y+ht55/eSliHJ19WmuLqaOK4ErljxVFljteLT0UIdQ6vGXuAWN/L8sZVRKphU89lTct6RpcJP7m+DuFYQculiTOOxbkcOS849Ks7kPOe3cclA9cWp5sOzhYXOWu/Er1m2vMbs61mtIkeajOY0BufFKzZfeCncscJipNnFs7omfWEdFHc5fr9RkomVvfN2O0SWx41fBt7Yd2Hzn/5UFhi6xItsrJbQMTs39OCH9a0Pbi2M5kmZUjxDPrBwRNGnJksNPHS7MNzB0DMt+9f1Nwo/9T7VUWU16X1x06GCB+peexq036VQsN4nWX1ercOPxKOD1BNDpwt1Z0e+h0V0+PXlc052Z/m6Kk0lm4b+QzzZ53XBKn3xE/Na2w44Fu3tydjlP0qqwNQj4ND30Te9moc+qRcesnywdJmV3zvTju4/zXc30kZm3fPEBgllKDk03VtqCbSp1Gx4um7n1k4HHSdL2jWVbwWtOL+k39+vp6DV1SqG8xsX3vpqElfnMvqJuuF5cV/Lwzd7i0odT0nQs8U3pIhvkn1Jy619en3VNg4tIAWTWzGSnb628ppqQ2PDMZKO5TrTJKZNHkE1M3DZ93dPl5dalVK+X635dyqEqyfOx87WKhTtj7mcsbP+7PGJ2dUtFXq6rbPanodRKvn5zQ6P86ONDp+9Jtyz1+jJ16OL2uh8+xW9bS9hc+uFqHt63RLRm1ZlTL95MVZ+/nWo1Y9F59f4nzDcWSRWq3Jp49W+brcXzHme8ez8dPDTxo91xTv7u3fm5O9ap7Z/NVPOtk3GovmbXPXVT2tkyodslUh4zvFx8v9i7qvLx+g/LgyuC24ifnUg8N2z3jy2hXEb1wsb6Wd7yL/rBZ0TnigkD+eZ+nGflxC8IbN6V3T++c1Cdr8WTVyeNcpRT6f41LW96kdf+PvZL9v9/LlfiwVHeCc5T91uXp9kdGPttRU/11SLLkxMjekZGpJh9GX9J76qMWNEPf2a5M53KQzWdP47NuU4epOg84PL52vKCkmKPynrJNG4+Zj0t8evShqmm9hHh2Udj20mPfU9e/X7u6t0BMh3GuWKfNTbPLdyqL6gesLDb7+dOuZOqaw8/qrfa/rp3QXzI2Mn/Q7PaNcfa7jMP0713K8Fzkue5Cs5+HSOrr1wsCwyZVDjrstX14j6yt77pV3dVL7VjwIElUt2Of4UAzm+Cm+jtTtw9WVZu5evltVwWF8Z7e5XoPN/a41Ue8x46k3mVel+bZLOl/Ybq/zPDC8z0Tvl6oMvDye2H7brzy9QHd+sgeeB2f+Kbueq7vu7ien1ZJOn4wyrKU0SqyaLBKC7M/n/vQd9OU8Icng21vOB51l5r6Ldj66p4xB98eKw05sTr/1fR7U6ekBch3+fyhor1EeL2xss/MOaczsiztgi417rjrqZnz6F/82AMAAPj/rc6QFKfyQ3KNZzNEZTZWCV76Xf/3+DX/u/4/LiAgsOhzzdQv1acW1y7TG5vm0rPU8pZBabZZ+oT+bVKfn8zK6Rv1pmRP+PCM9zKzNUOazxvL1Ye61j/qOj7yon9stkh63nGT9Mffgz6o9HGqmR337PqGUSnaEqMuL5s3dmJAuV/Jl5pBfSLyLG5VLeqW/Khr/tXgwPL1f/wRnGuZaO3/wPDynMpv+rM8LFVlNz6fGNsZWx0jfP7RTelPxkPSX+tGtV56sqdf8NWRE745X9wVp5R9z+jYc7nIh8fO2+rmvX/5ylZlRd4xcb35moo3itY86nlcOrq5n5dQe5zQ7cJBMtNCm/dUqA6V8elcLWg+cXpRWMHY1u2DWt/3/rnQyVOh96JjDfmZMut7Sg6LzBK95nlfSLxStyjwQq2l9k6r8PnWHSPOtNQHlb78ljhthlLTsWjhrLnr5H2y20Z3DF8t9835+L0Hg5/O/NlUZmr+dZFolFte1fLr3T7WOPz8PFInbe4LwTWqHiHR21bKdosoF8tsW7p+/dpa9zWxqeX7Jia5psWnWS4VrRvVyz43SW1YW/XWXU1L0k5+z91xZmdxaPxdi7r4TV5v84/WWht1exF8sLjBJ22efXTGim0upQ9sdfwOuVjb1dlevG1RUdBP32tlS3jTGKdti2VGOdS/d7jm7nZqSdtM34rrw8o+bkt9ti7rTMb+6KMCV2SeqCg4px3barvixI7pTrtOWMYZWp39slVnb9CthC/nTqYZS0nqeb/tSloiLnlVZGy1uuhmDeN5Y9/PaulrKNZP0vibb9NKtdd265RezT8tqXA/XHGW5cOZ53Kvfpa7cEl4XLedZ9VkY6R+RPTJi5YXeN41qdd9u6ezP8fKnlU1/y4s6yMydVaEcUvVnEjvi1lBx6NvGtSrKMuVz3dfG1sjsUY5rGzA2elHBTasCuzUKMnvko/q1hk/Syk/WXFvxdug/h6DZVSr9Po8LxZxmvPaz1lqT12jR2HW4WuP+886u941w36+sU7SdqUDzyqMBw44lWbZO9qrbOKQT5NufU0aMzl5z+vja39aS3mvL5TxXFTrmPZGYNrH+XbjeiQ4q+8MbDaSXTCr/3tXE4tnqdklJ1qX71EfI253+maqn/+Upqclwnv3PyuqOFQYvnh395GqZV73ygvV7qhtsV8lJdv10uZDgEi4bs9+D6bVzh38RFS4tL+mkMzc4fdnTlthUVJbf8HnWZ5wdlvjuZ8OQwyKzk22sZh1t87ITyL1y4MQ7cUWa48+eC4t+OXAMYsVbxO/xt+Ye89vk9CJNe+md+2rKDZ5miDl2jJ+lrj3NUeVRSE2o719Q9atVXFqFb0Uo1N39JBp/zxTtyR7s4u2uz3Ner0ye3jnyRrFuSXbTkiHzH9n8Naj71vVwK8OEl8efFcR1CkUOXF2zlKJMfnPr+5V7biwdZtBiLn6ayUHvUD11oCBUXvkvWLPpTQeX56isW3G6+g2v1FGCo52N6ZZ3B90oP5RzOWbO98O32HX0nvqkYteQfemjm/rdTA9MmDqh+GRDULdbh2cu9sy4Hur2Gn9JyO/mPvEL1Y2urMiyEO38qq6xKLAbZ9TEsybVnokTF0g4HN1mMv4QcdmGMx49aOmpquxz8QRRpIaYqdmrdNZWruuyUZm7yavo8O6q+ed2TQ7JHpryYALU7oEe6oY32vftufc6xvKKxcuOVXVKG/TvK/PubUl2U9DI4aIftBq7tlr48TW1FETNeZF+h0tCQ59ulEjqbEhdpB+7tvQOzbKHRGhr6x976SGbLHWCc6MfmpWqFR73Ndo+OSuG8ZbJ2iZuJs7HjWxym7T2tio+ExHIqdAJuHsmP42ip1Xqm5paxs/atOuaox5Y3tgxSebcrEF6y/3vzx97qWvkzb0rWtxLlkgFafRS+2z/W3he12GOcZbEgc5T1tgNP7Mi0F3g0ff0NwfJzbnhGPOgFsvLk17tj7CQnTCqH/x4wAAAAD/hwt8bp9wa2/jzG3qI6NTTEeV/a7/xX/N/239r1i+zDS8pnLpsmrpPV3NJu75evsEg0eHvDulPmFB9f0frxb7i+69PLJNu/ZxTf8TdYma2l9nnu2RGfY57FDITq3XKXanLM3vFZvaJXRLMAm+uOdYkMHQQL/Z3Vu7VXj4VabHT9k22PpObse5wNDHeZYztYvfNGvJf8qVMz51oux4q4lVTeOYH8VVe11vRn65cz5wbu2EwIeRm6o1Y3pN75Np+EPiqeWIYM1js82nXRs7+WBiyehxrZIRFwfM2uruYz1v3sASLeHs3PPKPY+umi5RNOfKxvGhdwOv+w9+4W5VeTNllfjlDRbnMwrfTeuRPVzqTWNl8uJXJoNU1rUdHl8+c9KniFMXSn8OTQgYv9jKIKpyttj3MJ20nQbJM9S6mS5v+yybW2C2LMTlrlNYq6ePkKrsof2ire9/bLVpMtFQqXxosmJQ7juH+Zfvp82aqeB5+2Tx+0va9x+0q4/epp7Y7cuajFpfHZfIU9rfzQWWz4x6lZRZuHfn4HU/mnoeKu6I3fLizufUoinmgut+zNl51avrQtmN3KDErXGTLFOlh20zsEpJCcusMu/3ycM04JbfpJQ+knN2NWUFla0Pyc8IGObiYvJjvIWeW9XLJa4td1Jf/PSduCZOaO6D9ku1Z82tl6Qnmuh8fDxggFvhiy9yKxdNP6/eIeM2LUsjtcnTObe3/rMXZjf0YpYU+/SXb1WRHPXUqce2kpbDjVYf72q1+j611PJ9Hhe3a3htnVLNLtf1jcfiVtg1K6fG3Jk8NnjouCDb0mlybx9dmCQpkXZY7eeD7hrHapYv8l2VWHY3/fisKNe2zU4OVcuWZa/TVLfee+xhVcQOteyOvL4yyZFHMxa7tpjEl0h3d5efnrfzh3+3NKXW2Trmp7/nXRndnN25oNVEZJdFhMFJP5+7L+McX7pNTd1yvD2pzvfI2lPjE+9NUpr1umBYQ8C8Y8Leh93fjLKu6dhqVObV7/W3rpmCcpGy79V7Zb8pzVE+3Jax5n5KuPN6p1uGdvPU3saqxTqvOTL9h8naLbHms++YuZ+oaNy0fYLQlrRb3zatrvfNiTG9pf36VPvAkmefpuZuj9v1wy82SD9OtGf409TDEauW7M1PKw5K3NxeUj7VYqh4xVnvKep1KzQlVoz+uLiHnK3Cqb2dyysPD85QO+Amom0jYjHIqaD5+7MQvxtna09ljZTTnBe/s1dKlvkdt4TiD17rhUcs8J1h59nxcJWy34a8pHhNmfHFn1fXJuXffpuXESw7Zs/zYT5bDk+Q3X1qYcjD2rdrFwyYL5Gj+iztxwOrSpMSVxeF4vGr95u7GAY+FxOb1/uQ33C1RQXztPImjr7h4pOjvCo0Nli8+by2r8OpkmVnnrrnKf2hnVRiPKrr0Y9ySRuLSLMpPhn1Ax0rLF4sbgvaaBPtUlWQu1X79bzYH2IzNEYtNTT8Eu4yJ27Cu/2z1fWL/A/ZDHcM3vFi/Dz7ond+Syu+RJk6jdoxJ3G4zonxsf36NwVuFvpuvvnYLAcV19XDqnL8PD9EuAk9Vqtd7pHVM/+6ncC3/rXtrmcFzAPv5TgsXRWQHav0MT6zVCzU74Rg05R36YrSb1+sPiCf7BPtev1W+4kuR5d7NlL95t+Omhy6+/zYxuSDMnObgoIOfVxS+ulrgLRqfuSPmIOtaosENx1f08984Gv7q5aBU2xWKt2Jz75qvE5vtKV6UeiC2x3uTx+88dpjmSmg8+W+853dvnMq5jrMU01xWNq4QlcqdueaFmfNj+XCOSvUB9v7zYnKuLVu6raIQ3XPhY51T06/NtWhvXTr9Q/Fo1Q3X6rurLRXPz12u0StU+LkGb28Ql70OvRh1sCDCcvyo4bOOD45tadgwuNtoydMfbHuiJ65fPShs0bZLp7+n0Pdwz5fqoqt7acyZtLynQnRFTtyzb23bI5ynuo/Wu9uqeW/+HEAAACA/8P1bJg6z3vST+ONfVqfrx+WMvt3/S/xa/53/S8pKCBwYfPye8vqot8ez05eFtWkUuza4PjJ+/DAAte3YibPuj+7HbcqMExtc7zLhyF7G2OVihf0DgvcG6b71GLn0aI9GZMPjNs8ZvSrgSHbdtfu1K3QsLNIj+6+tazxaN/SGyL7K7v7WYxUNOtSSVM98vNY1N7H++rlF96OORdQMW95laiDS9laxcyMxCmj2jPurm5WklTWXrXv+cwE5WHmFQXtabOFanq695OQ33pmy5NnQ+Pbv3jnfcg70TOvQNjWa9rAwSlfTwfHdo0z+DHnjuibXUOvtQ1ZPeay5PYdI8TOLiw5cLvo5MOWg+N9mis/TZtcPVtx3guvBeOfubh/nm+xROr9B7k919wG3N8rVfZ2lcXAd0Ny3twtLAq1O3LG3ePw8BE+XUqV4oadwYO7RctO0FiSXPDhxcghPZ0cMuev9H5yomyLrvLWuNaDu6MODt6ssCfCNfJA9+XzlLaLVaSfFKmYdd7W0kZy1cFCYWFD7dM1RT93Lmiykk7c1x6e33tibWnfNwmB91V2uQzo4S3wZEjcAP/NHydkzvZffEpWsPChstIbM7HjX1WfHG7WrjM94HddwKL57T25o4cGZcXreO2P0ZIefazFM6DaNuqj0da1sj2kmmbPXiSqcFB2Xc7WIMtXPsPSe5+J7DH5xKEMKZsl4lOOl8sYjsuSr3mdWBC8M/lRf5+Zp6bNs8yqbxTNSmqfNeClZ+8BHxVCmosVRfpWXLX8ODShXux0v7EKO1IyV+1KjpV8Up563aE0bGKZgFus0qLjB0N1PgwW8Vi3vKNql/FMdQXFdPkPK1qPi9flP782ZkLU65R7xkGuEwsboz4eipNaMSS5pXyo7PVxI2fMmTf1kvRKdcnpl3JORtrPFihc0S3TusZ6iY99fp7BebnTicGjF64LsW2K0CvN6ZsYOW988Yb7zqrrXveSUakNHuxhsK/KevA9S+szPplKFbdv3Bi7cPCdWQZ6iUYX60pEu/d48GKFScYBveDoEzP19op49igMNNgnNHeX1ZFdcj+dwuyEVHrNK78esFFhk9ryCd9fxpSfXlF52UzCrIfNCJfo0feNuzTNLe7u/7jG9639e+XPhqlnt2UIDHsk9vJ0xE6PsX2V3q063iF292B56Ry1J/dXvXKsC8pU0RtvWyvQILf0RC+flP1m/UMOLe7YFbKmdaRX7ULtiWbZBcM0rrksdfgeKvgpbmW9VN/xyjPCk0+ZlX3d+mBjlF6DSN/VH64PH7TLp9ph+pGXy/3Kjiu6Rbo/qula8DVnRc9b+X2yTQY+WtWlu3Lyxtb7Fqm6ShkJRRGX4j86y6+2T/ok4Llw4Oz4SrNJqzviK9OEkkea2urNte1eHxv1NfyVdMTRKUahvUXDXZ1/XFMwT9u9WDTktM74d7mL9y9uT/CPkInSuJ81R2rCQotaqT0L1kq7hVnZNmwfGzM1W+RFtwHiOYGD39WbWU649O3Gh9tb2+NDbl2okUpZdLz6WpBFXOaNKiXrp1qB0THDjsg6/RwoEPG8ILbv7uxvz2fq3lwZddU3+vPFrWODmypOZC9OHlNX2BjVIpuveSd+3EBh30aZbQ5brs2VXznild5Lm/qKYpHNFwb2XfdkXb997zTffPW+m2JqbCL6bNUeva3lz8JXmCdruKXdeDpsyxHD7z1dr4vpum+setHDOy3YOy2/Quu8fXyqerpLNwPv5JOhTs1SD0PX+q7LcO7XcuGVTvAO5dKNc9rv7LqwSzt+4zO5WPtHV7Kkbfe92WOxvPntl9czrAUiB229eSYz6siERVnO/v1fT5HzajlwtuFtm+WCIY5W4QqX6p2iPzXsfBuw4Pi5wzN2pzeK918kZDbgZX3rYZ32EcKTz6wfaVITaWcYuF1Icd+Y9uRAz7JKs91tH0evjZOXmKu19vnaN0+lNveVnvjm5ulF26WUP5dHpz+IS+8asjZm9MfWZMeNc5a57dfPmZF5ZaB30Hxd/z0FLxseBu6+8qCf16YFKSlNcw8tsal7OUpqzNZhKe4pL7ZPmlrZ9NjGf83KzsUjRaSVlPp90xx34Nr25/KeP5YH+l678sbQ1aTyzOv4OkdluQmzFgkdPvT0+/VQm9U2qhvb5JIUteufJC1TEu9bZjq/7fb06XVtCtUJGkobCk8KF4e7ndFfZjLnvNSLU3dcx13Q79Vj0vilgSuXrpp/1lbtQahzRmzjBbHLR66b+DtV/JHq2vr6tYaHUA+lXikbGoq8RN7XT+rSEquXDtF78jxy/Ufl80oj9nStyAoYvmdgvdH8mfHPm2IOyQ2u+KoSar0y9egpq0M7tOJnWzzMuBE/9EB9zPTHteELy89G36luHJAtPeuyXsD9dJ+Z9Zb3h3SW9/8+9FWxjsfWzd8PHNzzbtu7vQE5ktXd9VSPFN/LUG47Y/ml6+LY855/NCxwvXoupu+X4km93i1LLilx+GB7breLlEXU293B7hsWHvxxUygz68y3b9Z93qx9cErTonWxTbjC8W6JfWzVV3otyHRMfDknrZtLTeCljCSNZUFudzQmmNp2dK1o1V+WPPSplM+Wlz/kunpVHtge/Tb8/IWJ2Xuvesp7CN+77rN9wqmQivd3RVvitvvJWxheV/X9saL1W9rlXgZevlcj2ub0kN1h9LXv5RDtp4EDT2YvejVV1PNuX81mVYvZ8kdyZatqlzsc3z62ZtDmzfcU3SeoZQa+01t9KT3C/aCh8bdsldPFG5x2fpTJPPhiePrgn1VC9WOmjdTxvqAZM9R3tdLAmsb+7skyo5det9IsKhm32PSgpMT9jpCcNR8KjqvMsvPSb3YozjVymS2+f/+8gJwtG6KiN3nm2y3tvnPKUV/F/g29vV5/OhQfceqMbl6D+8vDYkfr7oflpJqPlLQblp+wcmSJ1ZHEngN7aAmf3F32KttyVeWLllTdSceL1U114zZuGbX+pKHRt5Az10uXim8d6manW762LqzW57B6s/uL2Jl7Zo142HYlYty5aTOyZBZdymkIDvUPnDPkkdbPTYKCC3r8CFp+qtveKTH+JsGRPQplX3n2+JhdU2SlO2VqhsHjeNlzW22Un502/Bf/XAIA4P8I7wt3VFhrNfYO3+/ntGqd9K3f9X/PX/O/6/8iAQGBJz8NZkufcFMckyI4ZMWh6SmTwj0e93qQ06E45OGcr6eKJz04PkCv71ed867ua4MPJI9J2dXDcYfjRYOp52dErSnybP4SbmN7KsY/eU9jb0O50TtkHI0KF9YPCd3oNFdqdk+/scNvWH/e3CT1rWumk/2lqvXZFnpnhwdItu0sX+NpbCck07XD67ZekeOWipRR2TH7RznOkp67RthJZPlHl1ixXTqdxt5ndturW0y0uuzjtiv128E0iea8FzlzehxXffy861hOH6ul6ZnDTL1V1RIW6/4w3bzhlKxPte5AcdPq6SMrDu6VDwiIko7funDMznPaD3JbN1x8ufFTc9WF1EvdGiwExlTWG8Xc0w0qmOvVY23TwQkfsiWNxSrShMOdM7UzoyfMbj2p+bZv88lxg8KG94s8d0Xr0Kp+10sujt9tWjA1fG3pKAmR+LSLWptqLsdI3c01GzInquGAzbwvF1LmO+sr1/ap+1RUaL1Gr/RQu/pVA9fRr9amqX9v/nb4eXWQmMXw3bYn9x1O9DfYLme1ZvexGHM/23nxteZqg+vNrgwZVRZ4S9i3/qOb3ZtbuqmViSEiYwsHubluaD9/dsHuOyqP3/08ty4w/Z1J8/XquGVrl996NbB914YlD6VW3nuxx/Gcg67pioDMU/77llVPCxIZuljCeNSOtZMGb8+R0VvjsUi7r9DCYi97tdCRCnWGQz0XP1qicf/IhLdt1bN2qj1+uf7M2mot8zcOCsY9XotHTVqiVXY8vWOU+STdz2PuFn+eG5ho9lQze/vYwybnJ3y9J3Aw5vyNac9S9Is8/W9OjX63Qv/n9LKPqXI5CbfGdD9QL/pzvqZB0daTqxfmy34IHfeh/WG55Sm70Dqdbl0Cp3or6m06s1JU8e7zpKSCP/Z7Fzro3Eo5E3VqQ5qXfeSXS0/0etcdXX3FXFKx+ElEx8+5O3bvcHmjdW6t46cNr8xH3+0zMeJH64i9LtYyRiP3xS/wfFSf+n2x+Jp+Zhcem0xyC3/lXD0g4qZT12Gvge/Nv788q3374bHWcoElnx5offWdHGLSdOl9k00fccPAhfO0br9c0c8mstClrPN0qezJFfMuixd0r/Fx6/towTbhdx/ChFdntmz/vE83dsXbBSONLk5Ts3bdkHU9aXXDWekNezyftNTU/OHzLvGh95kbGw3GyTUnnPXdHnvvhpnE6Y3xl2U3l8a+DdgrLvpgQvUVpRTNiIk65roL3DY4b4yYYR+4Y963TGett04mnYYeNnonn2bVTsvwv7oqZduVvnpLCwz7TK8Zm+00/sZN0cdLb0ctvn157RAdz+5fA4eV3N+5qXJKTcXwI+8e9xs68raZirVen+UfBx5OV6ucsc//DyuzIe1medcdnOcrm/X6NMdYKWxB6/hHH+/N0Ladf3JQj9acF8/lUuTcdRasOrQg3dRqf/ZD4TfCXmt9O5MSx2wZcjnmwo9trSd2BDZoWCb3n3hw+tTSLk9D51NH1g38MaHc41DIGE0Dv84PuRaLCx0H17Wl/eFhl7euRswyXdF61FEl1USpnsXeuwsWbvBMTE83OvDk/sY5imp3O5+W98r3PT+urJdW89YDE4esW1PQ/6y0Ruo0o7tOB2b5HzjwasY68VEjrik1+Txp269vm9foeKbmU6aYgHDbgJX5BsbPVAuWhE59tq5tY5J/S01wYuNoa6Np3b9dNL60562hYbdRurvk5J1uvp+dftFWQXNKYLdeUTXhcjoFnver9be+q5nhM9M3dKClgHrjylMCgxtlE++9uOJ0R1Dce3hJ9Bibi6Vvp/lojLwdKf7EOWlfSVd4kapwg92i7F5KYvtOfkp3aNzxTeSmoO62gbLDh50O8hXs/9l3i2baoJ2dNX8YFBs65cZmPYkP3aHiuVNgwUH9wSMHL5jnXeR0UcBPI+WzlPTCMapH1TusnT/ecvG/1nv7+AubXvWRV/meV7nbfoygQ9/95QbfLGpHpki3fpm/8b6XXsTl7BFyMWuvTy7pN7fbnKqBRUs/iQp3P+KhGKPQ0To6fOClg8M+yb4edbrf9bFJlsO9CuttrGbIL62Njnhs9eqO2YS7e8XDxzy8Zi727Gfvo1eee968JnT025PWKcmlLR6156/P+rglsodfS1fc3RkCZRIzyppD7SKuFCmsLjMTlm9T8rNuvK4wedHCIz1O3dCOiZwn1+/GJZ8xBlfr7W3SZV3OhB4p8P0XP84AAADwD4z3WG3j9F4wzjrUz6SPqtCX3/V/r1/zv////zUBAYFDq6Nbl3a+7rNdzaky50zAyOmr4izlZdtWfSkPDLk6wFNTuW94qZuM9+WyLA2fBXHz9ohrL8pWMTaRF958OG2gu0NX2nD70wMa7PQa03q9XGOr5/A6/6hu1zK7De0ylySGDG1M3CxxxPR86daowkdCd5xKk/K/xdcZLzyQrx0WVfn90eunj6OifzSEL7G507NWMm+2c+tw5yPKArUvBd6rpX4r8Nhs+37z25Qbj/pLTFceNmHTroPmz2ob+2VYl9wWcNx8ddW+zI8Znsai396pGQReljx1QflQskfIzb7ZMc5HVq1V1D2j82nlz7apEQ+fn4g16NNNoHdExfxEt/HflntXh9X13vlsx434NIULczI6Z1WvdJyds2DwomOZeZV16TPD+jiMM22dP7nyzI3CPeUrvaNVL/fPithVU7BurHxI3IZ5sXeHp2QO2mMSvr96u+XOZ8kKyuEpnfc7XCJdFm58I9o+u2qWgbjtBKM1nS/7a0lrrO5onbB43iXNkYcVhx0QmH1UNiJ8+TidKfnf67q/2bIh113UePOyUddf3bzrtKO/keDtFqfig/sCPUq2a00JWXp35r4ZvcpLzi/1Mh813jrtRO3OmRqzNonOijmjq/Dgy6PZP48vuJpbc8V5aaXXxdAdkfGjfGwjv2qm+YZ9Ku70O1ymPGz+gfX2vXXz9242PThsf/sLEV23OqeFxwofOObNa+mVsXG3TXbsldiou20qYT+vfvseZHk/4XH3DR6zd2qWZEtLDt3mo/z+2RO3lfr+oZe7rcvummNo1j1GILBbu5pG1Znp3Z1bv+5JPpI5+uels4K3RpXdbPQUU7ktf1xiiYSsksbgw1VnIlWi/QWTZwjnnTBdONXm1V2jgrT3FXGlgf6H0oxHDHAKKCrUXNfxYL5Sh/fQMfd6amu5uBhvETmvGFY3rvuTex2HZxndWG08b/RqxTWLj7/X+jmjKW/ux+qEM9oZ2RPb+iuWO5cc6p6rcvWZrEn0GOvcRVsGr55vELQx9+gyabVK26ivQ5SVAws8NPZVJcpvueYVuWOBoFlp9/bPo6OM+kd559gGZcbYyXQ+7MwSbdbv8PaRM9c84eqb9mR0QX/z/ZWbG2+O/lx/ocFSLfLtPdVZZcYfV+flKV7Y1rS+LTDxenLnK624lu33S3ebVjeqtSVHKIwbHNW/rj1i0vzeF67eVV0cXbBCXkp+ddqJ+welUiJX9ct4uiRD/9CjbUaVn/3rJlwLdq8bt26nklXv4oL1m9T9LW5K6UnO9RmSdy8ycOrk3f4LX0+8Hlqy5djEplSrq5cvfyxU6LZOddEIr0+7GzKNnCRCFr4MTsyb1C32R2KHRa9Kbaeap25p74RM5QcZzYyXet/jUf00/80Sh1seXAz7IvTgbbV3dbT79sBkwzm1a5W0ZDpGuZmNNvH1EwqNP/JKxdjT5EHWdOnmj5IaRpK6BQER7Yd9tNW+BL23OVI1c2mOglbQgC4ruen2b0bYl7v2PufpHSTb86DLmR1H3Xr/x61kZmhCQ4bUvdFRZn943Vk+bFLojRU218VVT117+TJoTr1Ttee4T8fDtvZtkUh9XHVhnLZ40N7F07O7YhOGTEovc5s9YrBm/piLnVZnR0q3TMmY9rHp64sbiad2q50rH3T4j4qDvt0/7e4b5zDB+fvD6YO+r2oX3mSVmpti7+i59KFaU8qru0mOe0Jb43wTml4cfGLjdLuwyXB0k45tvHhLdZ8GyUkudrVLuzUZtF9ctUf5jJShdOKu2miZMs0RAeG5mU82iw/Kf3Qs50CsWrDpMbvv0vNX1Bwr9jBdscxxcbi6UvbPO6WVJ0ZsmlY547J2qGz0sA/Gg763p25MXuGzLTbhyuxQe9MOh6bdkfu3vQw6WjQypqzHzD6jHA5ftQ7M1l7jmrpuk7Wb3voQLde24hU7cpV7//H00Vod5XE7BhutmqszVfrNIssp+1Tihgg0VDvVSIVrtE2t0u5543rKhummb6NfBI4Uvr+1p9SzlPGTp7StFqouCRhp+b1udLrD6Na424v1w+wOK2QaOFXkXNqZZGk67czuWIHCsBXnx7dsD7RekuP9Mkbz8J6fFZej4kfq+7j3du9oW7LqgFzRnDXyNpsV+5h49pWui5oppDPoivwAkTx9i/xs95ELJLN/7POXb75c0ykhf3lWfNSRY/d27boXbKm0qfb9o13zX0hVLrXX7F8mEv2vfKYBAADgr3mNPin+Qi728c9+PtPWbuv8z/pf+Ne8vMB/1P+RAgIC3Y3XGCZvKnWfrjLRVLAzdWyHrlvVHs9R+qEmLv4ePnE/yofv+ezkoyIqvOnFmcK0DKPExQbdNw0RaVHZI7j9zda+R1Ju5ieKSJycLBYQPEQxtY+kwieLtO4/rrhPX2+hvaDY+uGphGm1y557TxhQ2t5yJUpR5IeM19m3P/dELq2Xz8kcsKerd6ndwNGW9mZ1W3aWhoSl9xzY3a6+tFFowNiJ24ctmXV4Yw9pObM1NyaPyNv/Iqugy3db0PB9BuOz7m4+OsNIP0Z4r8vs58uDBwe0O9Xcb/Zr/sNt248w+7y9o4LtX++UurUyRvaoZv6g6fHXv30P+NJj/1PN6A0pWaEzA2QMngkXKkqPKDB5sjUpeIPzvPXzZELSzfZfNC/t+CLR2mj36LV7WHlcgra0ZUhnY+njNccWL7kxe2hMl2X6GP9px//QNRA5k9YrUjXx0huXnrcCi3oM7+22Or5is5XrQv2XKgvfec7y/xjT5Rc6o7n0XoJv69jPfq7HyqxmruhcIWrx6UW6aNkAoV4jTk98rGwjY1U4bdPASZdMnl086Zm+2sN+/t2VmeZ5Du5yMoOrBix3Ufae5Hd5e32ZzLTibt51W7xmdew6Knm1brDoK3XbgxHXTy6aI3xSOn/NHDt3vcLlDTXrLaJXny83bTU1EhYZX95o1DD8TF7OptUR88cdHPg+7aLyo0jJ7lO2Stbfr2+PX2dc3JIjVBPibJg7+0dBRc83w01ls8yT61/Zju09cXZS1ZqGt0pXau65zZi293qm4+c8UT/1arl4+44khYnDz6evSW6d8i1xVbupusazoDcTnr+9rDJELMohwX6F5O7pz/VT0sK272hN3XJbNF3uUrnfnUdb1pooryiNnnq0/K5nme3J6s/xY04UZXvaCw6yX6RwpTgpvjpbe3KvypNfzFbf2PC9c3tYT233yYsOhe2V9nt21HODm2eM1nXJtT66oWb1929e+nThZtGk2/ZOc/bJe4vn3N16acC4ozkmZ4dHTg9MHzzUqmTiVV8Dy735t+dOU7n3sfOo5RCFV7fX7dSxrBXa+33+cNUx61/NrN9VHll1TyXr5aHnI0+n2Pt9nvRFa3ZM/CS3VFXR8aNM7upreOrnyehtMfHMSFzafGDjKfNN+2z3acTOlLugN+nzQ9s21YUOnr0sZ5QM27LN47v12MmLbbsHpfkarFTV/Vp+vFArSVFJ8rSWgeEzs9tL5WRmP+mh+0LOL+b64e+S0VI21UGBsWPkvZv9tB4XWD3qeJZ49Fz62KzozzryRZYWqlm5HnkfncTiZnqsO5YwxuDVC50FIw7NvRNR57Q1UeFgzoz1Lx8qv3p4N/205NXK2Ib1DXnvrCuOdzxQSHfvK9NVN/aIy8PWlrmeNz6NT/6jV4phuumVw19M8hbH6Es6fI7+2WTjKXz0c5fUmEqVmEjvPqqH+wQ43y3r6fht8EOJnZqDZ/V+dWbALgP3YjHFerfb3h0jKwofzY2qmlVzO+DR884Py9L+2BTe9/ktyTPnpyXnnQp69KE2sWPyZ7ddcww+31odL5EV3Ote57PptnlzKycEF0e2FMovyu73L74dAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/a3UXkf/39sbWdV/MB0wrDVr2efP03NVbjl0cVhWXbbJwi1nrN8uQ8uu5pw9IP44xnprRafGh+kp+1z8MlvqPRv1XV0xAQPCzoIBAiNHiL6HXb/X7tzFBAQEBYUGpQAEBaUGZ69KCf0rQ/iogILD0P9f5XydzPusu/7d2S2T3/zIu+aeQP++XgITw7/X8l3UK+PzDPcL/B4n9us6EdK+Evk41yTpnMvlLw7pz4wP/21sE/+09F39dTwICvZf8+fNCfyfXydlVXX3VMt+DIzPqF7/r55qRPNNKzc7+ZM8eC/eH+8TopIS9sHbUyBQXFRAQ6PHr9W9+X63yvzf+q50jICAg/jf5Bv9gv4b8D+7/qL/oK/5qu/1qJf5Bzu955T/1/3xs/vwl/k30T22vf7C9/1V/75z9PX+13v9ZPf835f6jvN/7+fs2dulXq/4/mS/8+yUoICQoIPKfm3MT/G/XiMDfnDdBAcF/P5di/9kX+ve+0N+sV/S/rl/wT32hP/WFRf+0X/++3V8XmrCg4H8d//2+P43/Pg4iv8aV//Ze/3dY/cV4/1+t2K8vasfvvsCf//gPEv/dH/+5X//u97o+/N+s5f8JQn9zD/p74/954n+dDIlfYxKCMv/dZ7r+jt9zIlo9E0OlRMyl/mIdgmcEf+UL/lP5Qt3aiuZNVlKX/6v8JUK/8oX+qXx9h9BNXnc2D//L/Kjf+cL/VP6r40deu8qHDfzL4/Ph9/ER+afyVccM3iZWLi+vJv4X+Qd+54v9U/nD36a35pUHVf3l+rV/H58e/1S+24deLqsPeDz8y3yB3/ni/1T+pMgG18lHn8f+ZX7+7+Mj8U/lZyeav+xudu2C9l/l3/2d3+ufytcMUv1mstVkwl9en5N/Hx+pv8oX/Hub+T0pNdvD+ckq4aC/uncKBv6PPmEBAH+P7K/fWGG/+v9snfq/6m/qhQQpwf94OPT89frfWav923Z6/2/MBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4vdu0i2Oq7/xb0Bg5O0MDB3d1JcIfgLsHdLbi7BQvuECy4BgnuzsHdHYIEJzhd1fVmfqvrduf2+3+e6Zp8vuu3J6tqAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Z5i368jdUwceHY7Qf0uvyx0aJqi7c2uHp4+rh9T/Orp/zbmzh4Rb1PbDxCajvnuSp0zzkrFebl327GWNDgNOfHO2wpUoUft0ehbt7NkIk9MPTLFy5vTLD1esaJnhVMwuaZf8evvhyXCpr/+2ulDbKMOLNoszucS8ecvGFN5WfU+ajD9Hu9D618hn5oVvfySoQc+jDav2irlmWJQ0uRIPi3A8btx/7goKBAJx/91qAAAA4L9Goyd5ZgwfWapft6/xqwz43G77Pzs89H/yoECEQNxA91Bfdq+f3DNO427nh/3dMEHI+nF9O0foVWrSpmPrKn0TYfiqOReXdIqdIcrbsZeSvvqtbKnptXv3zTR2zaZGGyovHv22zw9Xp+1OUSR77Msp0td89rn8oMljw1cf9vPCVMuvnLmUeuXQ7ul7r1kSc9vphEW33hxT+VRw5+ABd9vtrbl14q0KRUu+el+907F9D8rdyFC9dLdKy1ok6PZX0XRlW6+MOHv9qKs1InaKFf+7j1tzb21R8OXjDakLJitQaUG/XNn2Npg27tqQMyFnN14rt2h8tMCyX3fUrPh6d4OMs3d275z+9z+brEsXZlnO8kfbh8of+naHMpGrpGz/qXT2jwcz5+mW7kTLHsUGpUy1fP7c3AdGtYtVr17gdpWQriPehM/XevbgCMentF0X79ascK2mJRiWbkmGuNFWFI5YOeRTwyF597fa2GDYjDRPap0bW6/E9Kw/1Y3+x8LbFQPtk3apt2La+ll3V10deDZ3gVAbpiRN37Zmwwu3p/6W4kzmFTkKP73f4EXB83+cP5D19oqihRbFDHu2cM7ESzNGTJ/1caR7CR5t+PNjvV6n912YU3Xs0sPL995aFX5dmhm/VZgYM3/NP//Y1Gxa7RMLGkaZl3DRySIty97ofyNi/eRD34y5OqVp2LCxd0buNmRDg6rjFuS7+WF1th5Zcv8yI+X0jNmr3I0Yr0jlXw/WadF1X/D6cKEWRSiy8GqTIrcfdPwtOG3zUg1WVH43tt/umFf6bYjR5uHKjQ8ybp8e9cSOlYsP5bvXIX7NhIWulwiT8cXlkr+lzN8hQZcfuw79I+/lzmGjvPlz1NqQN1fKLHsTcWy2WYGel7OMeVYpepE+SwYXHXt8bdDYPFMHbExeenKpPXOaTKmRqPaFzyPWvmuf7/LHGZVn5tuUb2C+sUs3DSzUu8igepkPHIp+IuKJX/cFlynbrcPptdNf/72myF/fNyicue3k8hvz3vxmV/ges3Pnrby6+ecia1vUDnUwRbaua0o+vffj88d1Bo2fvHB8hzCrRw6tnrTjk1nT/mh2bVvmWdMWrQv1qFepbhejHpoanCj/ifiNO2/5sVPfW2UiH2pS+t0P3U6WeH0r2Zr3iWs3inY9b+f03xeO9mZG9nvv/u4/+fLNk4Nb1x6/dNS+vEum3Xl7rl/VE60qpSx0NGymcT9/n/9jqbS/h+2Q4P7MNKXDZJ6wrtjrLu//iJun2ZQ6NWdPKRhSYeSUxGNGnS9we/KgfalDKv4+J+XndMNu1QyJn3JI1XiBxTmrlxlVPtyqcE0Lv86YM2vsn2KWCDug7ticSbY0q7yzQK3SvQ737zKrzpZz2UqEnDmUr+aWybs+J7sUu1Oi4OIDkiwck3X1q5m5i8SvFbrenr0bfhjQ5Mf80cstOFZ3abbw0ePcKBbyvsTR7f07N58WZkHq8yUSb5p8NnGHEpl2d3t2KH7WQ/tiX3vQrn27bRNKjzsZ/OOd5MN3Lu6bZ8TRgp+jNM3ysMXAtcs6RIn8KGLXysXCRAv+fOdUm9EXBjTpPObz4W9Lbbgz8FPf6bfKf3sj97sxCac+mlWtVeZoTyKtz1z3+I9vL50+MudatyZJ1oy4Vm5xvjonwqdOVuDZjtRBJw4cK7H97pddH6dmPL66QYZy0yb8WqX+7g/5Zy5LHTPH+0GjO/fNfHlV8kPtv9mbp0q9bi+LfJhz4/DshHdP/zl4QK8kMdJ03Ryj0+I/kuSekbnJ/WM5/ioe7mvCqoeedX1+fFm1Gc9vTLv2/HGuWkHbj+fL/jxcpIpx1hb+u+DSZ1tuli9YY//7oF9T7Mj869lxMdfHPV071u15tQ+cCQSmFb6TNOjr3tEhBaMd/HHtmhQT41X+ZcSi1Cdmx/+ScO3wbLtvvfipYnDXcd2qlA95WnVbqs2/h/xZ41rbzFmCrm69dDDWD22qFr1+sN/9kVG2F95YKdOH8ZVCav3185YHvYOzlC1U5Ydji1q363SgcP1fmuwusb5n1Ci9Isw8kKJIvzVJ+x1okKXxuy41NhaJWnHOpNEbdoV+8HhYwuqBdLX31D80JM7U4dODy1ebNHByinfNP/Vpuarfzm6HExwafujnrSGb1yyfn3VsprUz6h3JcfN1lM0fFh1OlP9u1pfTOkQrN6pvud/TPagcKVqlSiOqJI7WIVfJzJuOhJs95WyyXD9FfjKuVa5Gf3WZvXnn+ePR649asG73gXCFfuz63ePcYdJFfn6k0oLJe84/mvbjhW8W9B28unOUwoGLOZstq/G5UOGiR7ItCix8cnZj1Ac/nXoTqVaf9fEKvxldPn7lNemybnxU4emYHI+PHw+cL1gs/bQNwbs6/FKuRv6QKnHaXrueaEuFvwen+9ImY8PWx6+3jXGiy8LsR8ZVe/hgW9he+Z+nXfqmwuixxW8kynC31qree3N/mb94V+iLGYISnrpWP2z5Q9eqxdzUcNe7b9O3H9p/fb9SF+ekzfrjsl0XP+4p1/5E6NaxpmwbG+5c+pAdCbrPurwkTN/Zy66fjtbvmyxrh6z9cUCXu/H+fNM7xYwKyVJV+lBw4efP6zvdLhx1zZ856pxOOWXkxuTzw/VK8dv+OmnSrZqa9FGtH76ECvsiaoEWZXZmC7ma9PyDoysHF619d3HbBTcbt/icuGm85fOqFdq0ItzFp+MnNgp6lHtIofMx3sRP2jX5hsenM1w8dXLf6/qjL4TJfetd0Ipp5T4d6/v2+dXSl8bnip4+S5i8k/rG6JNq866s09OFLVJ/evGOpdttm1OrxdiG9wakr3Y4xS8lFlw/eX9SqRtpZ218OyjTuyf7/li9ftqH473P3vnQp2Ky2gWjZU5e/P6XWqm+33R02c5NDdcX/ZAzR9H3Q7Nu6Vpw6aQGEa5EbrBgac6Nu/YkLzx7Xctx9VKXXPNkWYeyJyeOjdW8RK6fNldd0K995FQvdo/Z9KzK5eczbh6Lfrp1ttcXjiXKGCha9eSfu89+fRyx5px2i9Zt7VszT56Ca6+sGJIifL0J8UsXipek1ZpL05ItXNLu9LX74/plWdd5/pKf0tQITBm7+V64kLQrnwzcOPJK9XlRep4uO7P1gkJR7o2ddavSkbfb5vabcLTJ+8EdctbNcXDDr0/yTnu6buunQWvPb033YcugPR+qfTj3auXO0hNGnK+yLMu7QmdOn/q0b8fsLWMjRg5bJlueUG+7z92XNnjpqiyvWqWZF/v+oSlpz68r+CLVovoxPmzMF3Ruba+wc7OfSDu3R/9fcn8J/TbKt837NCoTpWe57/M2fHM4YfSN1d8PLtO24u3WlZbGLZdr0oaM34fOFrb2o8Ibx8e9vzvGqdP1no54HjI+Ta3aKR6fT7mgUadnUxqv/q10s+Irh0yPn6lGhAl9052rma7NoJkzyzaocGJElVVvj9ZYvH1YxaafWlzdkKZ3880Xi0+8P3zL4eCcJR6XaPd0yoHT2b6Mzx6/3YvQ5TM2utU0ZNP6j40WHamyKPh+wU2D34+7+SlkxJX+b+qHaZI5Y/LMiTauHvBwdvc+sQOVhvRcf+JC0g6nP266Xubghk6BIxEPF6uSe+7FNONDHao7IPkv235N+vhQ61RZi8+dUj/Gysp178X5/eTHtJlOprjZNu6lms2e9Gxb+XPROmHqntn0ePP9Ui0CfSvdizIp/KCo72bseJRjXNvLv8Z9HO7onXqPdpZNdDXB+fCBxmvjr9/0YlvDVQN2dYg2O9fOQNmiSyvG+/1594F3k27ekuZ+pJcL5h9pFVI5//44CZcfenk23Zia3xbPNSbGvLd1Z65ZkDjN61ab+q0eOWpEthoFv010pH6GgSXmlHj+zbCq8d8cLFtz4Nl+6e6f23I8a+O0Ddd9c+VQ/jPb1p9Y9WJSmJL7Qu043iPbxMpDr10q8SzpmlXVmvVcc/jnrV++yR5vZ6zYe+p2W1Niz4JZ8dZu+CtUw1XNH99fXbbOyQntzudpXf7UgETxOq4LXbljy2kJYixscODNmMYFts0pWCpS4+2nFr7J1Wj0sUCpTbO6tkyTKE8gxayruW6uKjwm1sryXdPETN210eU6JzN+zB8h3cW/nmbvvfvmkFV//PH41i/DZ4epdHZui9I5Gl6P/Uu8NAleDmhYpXW/I3NbbTo8bWnsFdkOhyl/59Cszlv3fanxqni41INWNkhf9tof9a51bNaj/bXTO4Pfp/gj7dE28X5Ov/FWsnAVrqZYl+i7rbsO9UyY9Lf1ret1XBs+9OLW7yt0yfLiXOco90tFjpcgae07Q386N3vMkkU3PsRtVaPmxoZH76++saTjw41122WJEOr7ZeOu/tK2QZ9XCSpO+nZum9NTu0Zfm7dyhoN1q1/b3ivshXpvKs493fTg/gwfezTKv23hpw/Tw44Lfr5kdYcVZ5/ViZT76IqcySfFXf1y2OCXT6ZN6j9jfqHtfdLNyn5yUfPk/frHene2V9T8jRKm2JW42bss+Q8eODTtxvntSVJmXH8vTKLgzP1mZSw7OfWzf3leAP8HO9t8fO13LUuMy1Cu+qf0rV4s+2f/h/1PHhSIHggflDhQbErzahnz1PqQeFb2dkP7rbp5onj2B0V/yF0395Y8Vwe+LPYqzoxkwfPyTL8VuUOhzqMWju8xr0e4yodz5q469fTNdLlr7euTfHfRNqHOZEte5krFAaeGDw3zuUn9DYMSrgiTufzD2JNizDsV6HY/wbOp0Yele9Zq/odrP877dlHjX1ftjL+7fPqGL26nbluw3+M7VZO8mjhw/JXPy0eEG543/OAwsd6uGHK3XcaFyVZHK5fm50cTm185UvBokzZdYvSKmfVZ4wQjoyepMOveld/fRs0eoUtw6hhXDh3NEj5/0qmVs90dmCXP0Wjtl3yuUPVI58UfG0+PMC1Okz9zfr7eKKTW7DplsiS9tnriv/xZAAAA4H+rJ7/+0f/nBOcuVr80esDac1nr/7P/I/wnDwrEDYQPihTou+xro2NdYk04dXpH1Dx/T5vYNlyfFJ8qxx1yfdbkOBuWP6l8ucTGxNvmlv5YIm6ppR8fn10xtszLja2jzcz5bf5ISy6EOff9qsEhWzY8G7qpX+7zYwaXnJH8X342AAAA/I+yJn6tu7OuFMqSK+WjzasnHj33z/6P/J88KJA0ED7o28C3068lmbJt9sFsU6eWu1tqROsbp1Mkbtcxw9yRc2Luzb/42MD5vW7cCzV08s48eee8Whj3TpzBsTuHrpFhU5yT50NydksTL0W4SkWCru7dcXzBsde3TsWssifBoCyxOzd8HHZRrfahlmcZO2jem1yRn0zsNyLszPQ/FY3Yev6+xC1H9ntUtcbg8g1yTvtyr2b9Vkm2ZVp6uUD6U40LD6y7/OuQF/d6Xhjyuvq49KsGRfx1woZ/uUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/g9I/LE0348B3tTKm3lc6eqr8t+ru3Nrh6ePqIZX2l/rrzqmQT43rdR3zeHaLLLciv/091t/jZjwek2Fz2x19CtfoXi7lm+lZeicr2/7Nsu0fLl3s0uBm2wI/LEqTb/ehcjvDFIv799pFf45IM7dT540vam1LEFSiV8awS+p+GDBz3c5My0/v+PnwrmYH58YZG6nz/F83XXj6+8SgLFFmDo8eVOGfu4ICgUD4oH+3GwAAAPhvkefF+Qh9W5xO8Phsq20DemV7988OD/ufPCgQIRA+KEfgaI0Rl87fTlT26uILayY9T79wYsKhN/OPDzm3P3hjzCqjcm+I8PnhmU0RmqZ/WnVI5kITxva70fS7UrcuV8p0eu2lF5GPZJleNHPk0w3OX58fp0z4Xu1bXixwv3CocdFKPdtaeMZ39/JeulEtw+hPiSbVzPQ8c/gw/btWzrxq5acUwb0aBlWtMKv0gVDd3tR72Wnu4YVzzp3r/+ZS/s8R5ka8MKTvzrplfp7xYkOj4OaTrsd5N6NfrzmR+/XYfiz9jEu/7Yxb6Hb1+33Pxftt9t0m5+NeaTEx4eUpBQ71bl18bf+UaUZN3trmzZt8F9pNHPMlb/xbEx7tmZu0Wsy4hXKXiH1gUP3KO2uOSTIj46meqUc/TB8oFQhVM2qloKwJoiR/Hurm4qHFp5RO2HpbzOH9ZmR9/cfmie8fjyyd6fIv57Juan266Kf0Z9OVu39gSr8VSUcGZ4s9dOuk/WGyjD0xIGVwmsTvRz8qHLK/2a14FyLev3/nZZ6zBcb/tb7l4OxJgnt2SdL38dRhvTLF77u5cKHfXlcfOGTIjCNxMrWPMGFkkaf3UhUNV/1grwt9yo6pV+qbhrHu/DLpeL7zo6vlqN+nx98Th3X9l38+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8DzOkUKH75QbtT/KqYMakcZNOTlF359YOTx9XD3m5u1rHM6t2nTtU8mvVBAnrTG4Wffa+n+KdqHJj0l+Ny55cPXbntXv1L+yMkqT6ojPnUl5LkCf+jmO/1Rx9tHTVm8Fjxn44eLLUiNzTqy0v0nXD7kTZrzT5/UG64s1KPykbN1rrsCvr1Rtbselv91Z/vLK/TNQ2w7fnOlPredxCox62LLzk2sR/7goKBALhg/7dbgAAAOC/xYw99SLs3l9oYozgvH0/JMr39z87POx/8qBAhED4oDCBXrNLdBi/Z0/qTf0Kl8w1fv787nEORXy3quz9f/l8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/0OnN5/O0GTW6bo7v8b5XGHYxWV1d27t8PRx9ZAhv1Vu2Dzlwj+utskwPGvj7E0aNTq+YN03A9a0z9ZxYJ/qRa5Pu/449booO4r+kTLKtJOf23arVf9smtkLO1btsSB8qZxPnwcylMl/JkGEvU1GJl47dlPLx6kyZxww7vTnqRVqfp+gYNaYP1YsErZ+i+OtK0W8HDZn/X6R5j7eNLPCjfDl9238566gQCAQ99+tBgAAAP5rtGoeLmaiaadizVt7tdWBBym+/2eHh/5PHhSIEIgbSBEITlns/eNxK69uOpO1bqgzl5Z/2nD5erIrNWeNffpdhkEZaz06XuLPVuerJHoSfvrewy+Hfni750aF0Psizzs0Pej0yCU/nbixbsF3eUceKf+1w8rnTTZeeZK0Rt36s+dGDhnZuuHACxczjHk46HHCC1caFyy2YdTi6KnSDGkb5WODyJM2flNs29gRo/Nuy//0zcLmxZb2qD/7Wf0ohzdNTdy6Y7vOEfM0rLFqcbUzHf+ckqvBlLd7P60d1H9Mia6TduQPvnGrfP8cnTPXOLO0XMugG0duDf72m75z1jRIWelS3mhbvh9ZKE30g/OSjRrW7GTOJ9X/6ldt4Ll+xSbsaPTL0+LbQr+5+bBTkzUlf26498H1F0nW/ripzLAt42JNS1MmxtGbg7f9HVRz/nd1ehd9tnLi4J5LJm0s9S9/PgAAAPhf8vuPU3K3TthrRNP3vUsfHN887D/7P+g/eVAgeiB80DeB/h8nnFxfu//KeX9Omjp+ZbwfG9Wf1b1q4pKfm/x6Z2jHSN/17L5jaYzRt0bfeFcnc8Sv9b48vf2417gcY5pWf9Hq9rFqUct9WPSp3prL3w+YG/rLzkcT3measHX6XzG+P1QsdbxC3c+VeHE0f4Piv9b8vkvVPf9yHQAAAPBfaXip+FVPpZw8aObTiRcr9N86/J/9H/Y/eVAgbiB8UITAwh4nuqZIHfXD3+WW9V8RIVu/FKe/+7By74zov069PO9aqviXnu24OChlvkPjcveOVOxj8257571L/fWvd+vb3fw+3aQrvcak/ZefCQAAAP+jnYpx9/qzzJfDrt1y//vXPZeP/Gf/R/hPHhRIGggfFCawOUP6epWCIlRJVuhyndr5slV9s6HHlIM/NBj0L58PAAAA/C+4ffph5eVdWv9dP835NOsitt73z/6P/J88KJD2//7/f5InB/PtSLMj/R/pHxb4MUaSGY8OP6x/ZOMPBR9GGr158Ppah9ZWOdw37O2mjfJWGlSlweeC33cq+6xBqty17/T93HHFgbV9jrcofazcinUvIzd7Evm3v+qHDsxKfLZGig9Frw6atvPurhmHXux4lDjmrP1zl//LdQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8/sPP+kbuh/+qbe+OVCjWevxoYq+7OrR2ePq4esnp3uGn3SlV62e/1nsfd30/d3jzclv0XR63JVaLjytGRsr+LVSVK30Yr0s0sEnnvwTyZVn33etr8WMsrfPny7Pd1JTOM7r6swrk//ky0IVbfElFuD7m3p8ruOFmiDayYqEDvaHdWN+7yaPrecDPX7pqUsUWHM0VvTBwy6/v2J28t/+12y7gjEvxzV1AgEAgf9O92AwAAAP8t4ieeEDfD+zMD1h88HeqHOvuH/rPD/5neQYEIgfBBkQKvRuQOWyL3kFg1m/3VvPfMKTPazTu04f6xD23DBt+M/nVtoO+AA/PGDZg+YULt0YdLBdebtT9WncDj6s2Ln9gecqDFpTTpYnwqkiTTnEPja3ZN/ufjL1sTT/6Xnw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPw/UKjs+haDm+yZm3B+q+O1Ox7ZVXfn1g5PH1cPqVl+2O0Hx4a2WTWjYIYMWdOlXnc46t0t31Xd33HChrTtaneNXaZY+JZlu86sG7XlnUaxHy7PsWR5jLsz58wrnihhirKRuu/cHibfgSuv8hX5JUvVJiW+bDs94qdzLwuM7dY0zbLTe4uGLbosUbNDa7tVK94s3sSNdWtWrrw9Udvn37Ro92unC//cFRQIBOL+u9UAAADAf41Q3TYPaphwdO9710YMbvRp3tZ/dnio/+RBgQiBuIFwgaBBEyNGG/VTmpXLak6rMu236C1fZt+RYvGJO2eSfNia703HBY/7z8u0KNWNNBfazq6RfsaYDf/yswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/F5Wa1D/U8kslb//wY7UY69qP3Zctaeo6LV7cXTr1p+CqJzqFq9m69afmBatt67R13Jsq1cL9XP+vUpNG/X37c5t7ca6X/5q03oi244Y/+dS3eJzaybK0zN6nd85MMUpFShH4+3rpm1HenJ0a98rdFfHfvphd58ipjk2L7Tn447RH0Yp/F+HnBFVSNIl+LUGGjP0e/bIj77ftX+Ts027LjkqDDh368e6sez+VPPq1foWNj2o9fZP3ctj0CTPF/mtL7OPXdkcr/1vmZMOXpg+bbVjm46OXLex9v3z5nNdTdW2ZKk7y0rHvbMjRaeiIRgvaZPg47tXi8CWuLk44PvSyJadSlrhXNG3smdMD+RcU3nMz+ajPNTcOP3Ko9pCnf2VaFLpioyHlb5x9UnzY9C313u3eVuVUjPZvtky/mvP71F/ftn6RLlT4OxH3ha0bs/9P0xPmGzT5TplIbYpFmXFufoLFq5K3mvfm4i8b52dLcbLzpfT7zrToPjtvrmzpek6plS/Z/Cwz4ubp/yVu/G31J0/sk6Lh9B8/LX948FjxQUkL/Zm4Zb5kub50mDF4/43Wf8SYHf3lg9k95k+N9eP1h2/jDjtxrO6SL2lWla4f3Obho8uTP2+o+epGhz8ezKo9Nm+em5uqbL6cNvaLWKWbPCzap36C5fPbvqsyslyzLKViFDwVMVr7/iO+Jp0WXD04yq3cJW7smt61QZ5mLyPvjLf5yo4rB/8+fr7zhmJpoxYrE7vU4mWHZx6skbHRxb/OpnpybHGhl6t35XkxpHvrMTFLv6/f7Fznh6WSpz7xbPHS8Ds+BgKPng+LFmtz3ngvMubr1n1mp7ebSifOVWDbvbONmo1Zuqh9joNNh2eK9TpmiT2J72Rpn/njmW4rF0adV73Jrownc4/Y883lGVG2xUu8OuHtpctSd6l84P6+OhFiNTle/tthKwa0j7f21dgrWSPkL1Q4arhsw9uELVc/Rv78ydL8fDJuvqEx+qU+d3rmya1lDlTPU2Biyhw7spboN2DU4sbPXtZs+nDOdzsLvTiVvdSEdwuaZz1wKvKsyz+f39Vo9w+tstYq3L5659zRk1a4vjzrxDSpIzSvtm9en6hdugxpPGXXpEjtvh7sOLBsndTpF+dbOmLw1vqXN3bqvjDx1kzfzuiT59SswdUjzM0WbtK3D7LtqP9dxPL5JzW7m+FkhJzVYsZo3vtTojjXTrVrUL3epivJ61W40bTi0NO3V7S5f+jczECUZbtfbvxp4on+xf+81zZjv4sXe3+cM3B7hRwh60emy7M71a3keZ51Kt1r3eamt6u+SFqjSvuQVZVyBn9fMsHppfUG1euQ/EuatO2KF5n5aWfklEXX7u/yvMWlO8GvisWuGByzfP6dyRu3rpnrza2Vg2LlT3Mg/oHjpzL3yNi9xslYiTLtDqmw42KZ4+e3d6n8tXSv2O9SZrg1OWWfmwlfvor8KvHnKs/iD+0073Sqy/t6vCn1NOnWWOn3jzh3cEfG4F9Ods5eYFL2FVPzNQpKs27Z3bUNjjasOGLW6E8huSMU6hB7yNQLbVfPKPqg0qHBs2b9GGZ3jR2n48e9m6bxnMT3w+aP/2Tx47AJOywb9q5NzSFdClxrWCFG9xcxL2ysNeXJpg2Nz0RdFeH1lXYxb23uWjPa4TrJSqec8vOHb25ubVA196tl1ea2W51m829pPia+993bWmmHPQt1/WOFqQeDPie4k/tJrfAxZmVZNvHU/pw/7Wr7bvXVeC0qJmtR6eD9HCnW7Wz8JcnDxKebZivV42T3k4mmnT6Ubf7DJ6127WyS4GKNGwlT7j/6/kHECIfaV3298UasrSdTLj/SdGzE5lPmTW8UYffPUz9laxF/Ro6pv+Xqd3BXluTxMz9ZFOqvGaMjRdgVGB/6yYREh5ocaxO33JuzWx5FSjuqSqVfP3U9uDBZ6Q8tCp9o2aBzgjgbM8+MHOV+lE/JMx6cuazmxD3F8gSfzVb9Voa/qg9LPLLcxAYDtzbo9G30TlUr/PHocbvaTzaNPPn548M639YpOPpt57WZ6x7OO+hh3GcTo8/uOKr+vvY96yyZnLL8nNSxL2wLV6pArg0zLrd9Pfzipx1Bv7btWCb3ifq11sYttjzcmRMPFiXJkT37pdh969WYfuLrlEOZVsQKHrV5c9Najfslbhfo+WF8jae96nc5Ve/KmDstm5wseKzEo+/WDVq6f8z+4F0ld+wY+mpVm3cLN9Z9uSr+4pijf9hRJdbqSVPy11v7ptmWPFeuN8uTOHYgEMj1qnOFSyfKVVn+e8KCmefer1Y3apV+heoUDRMz/+cTYy/MeN2mYrng3LsLpDx//XqrtuWj/NZr/HcJCvza/tKSvuH2Nnu/8tzSgzkvtq3WelGmGtVXpe6Uf+u1O5cGvG7R+VWinEGlx1cKbn34bMlOHcLcHtz173O7D58ptjlsj9/3ftxcc3KqJfHGf5ch/paj43qOmRD/Zork/c5369Zj7uMZn4pVmXQ4SewG61uWrX0wfIs+L2dWmjlg99v2pdrUOHjjlxLnfm7bLWWSvc2Or0mWN8/q38sWqVTqSPfcjcOHDixvV6HvjcXrX86ePTFNoVsVs7/O33bc6fa3fgkfNun23V3Dz43UfnzLkalCXd11ovWema1OJn14K06L3RNffhz9vniFqL/0jDSwUo5CY4MT7+v4d3CizQc3XT8w++G77p2ib9z9YH/Kej3vxlg8fEzfyjmGRmx3uVWdWAUT/NLjxqVB3fZFGBM+eMarNAtPnCr755YWNSZtDdXv1OiilaonPNGuZ8kw7yq1mvTs+cJKVz/sb1voQ8jr8ltDJW0z5V7zEf0mPr/Vu8bO6fEq7O545u+fih5rdfdIvvRxk29b/LZUgZJx//zlUcO7s56GOTrwcKhameKdHdrnp4Wvetz9uVnV8/Pb5ElSN6h59Wab6rdL86XrnTH74pXbH2rOwy/LRk+JlHDLt717Dr9etMqgvn8Mu5c/QcpP6xJku9E8w6OjZV9NTTkn4o4XWSu+PnVmTqRymRtN2jRte+d9O7fVy749w6srG+dGCHk2sn3E228GbLuwpMKcPanmxpmc6tHrwlXKVc05smLnESnaVfymffUYIUOvNB+67MLJy/c3llw2MdKIpzWa9A69Yf/emqc+5elbIlexmPE7xD778I/uYVedzfjgz7SL9uQI6XHqVeJ06TOsmFUy0tAc18cnDL/q5qJCX/dlXDIsV9X4X/pEGf565JjpfaskP5p4WfMtj8In7h+l3aDUVfJ902JYlcN/H9l7bMv1QqEnFM0VOV2LjRmvlGi2pfmvWYITFbqScPCpZYuipRxTZEm8OIdKrztZJSj093tCDQnXqM31xqdjh/vhdNc3Oy41qj/lU9gihx8MnlSrXcHqRW7+mOPI9bWXMoTM7zsiZeweSRauzrG2ZK1vPuaa8WVQxUh5MsX++a8XI9OsTZsk3KbZ30dp3iJ583BrHyZu3HDX13hLL05YFff49Yw/7D2c4Gu/C5XWX1p4IXj09fn3oxQd9luYybvarLgwJ/OO1n80jX9gZ6/f77dJsDljxJKn1nVN/7XqpIFVKwyIM/T26kqHGn6cEHpy2v6Zw+WM/UvyWSEfWmdK8LHjhCzTdrSYciVX2C7zLnT87tP+j2uiBnJlr/S+VMqUSX9fXf/e8vbfvs8c4fbBSzfXndqQvHq9KB9etK6e96ftJVeefvJd7daxFx/Im+1ulfY3Rz17uurdkZCMMzZ/Lv+wX5boy3uNaFHx+55Rqnxf8WPyyHlCddgz5pcNL5vG3vDk4LP41TeGH/oq7/txRxMd23Ww15SQ9UGZKh1dOuf4sdvhsyRpUbRA9lwVHvUOGZ81UdM1Z5K9v3Zqb/neJ++HJIt5cFD8xwUXDqq9JkLo3xuPKdH02diXza6/fbAjSpZiDwZnrVf4+a9jOtXbmbH8D3XCd1s8b2mGpT/cubN+Uc7RV5YNPnCn+Z8Llkccn6v9oqWRym7/tskPJY637dqn45I3/etVXfHlQKfEF39YVaBH+lJF/kw5IUvZ+8/CzZ6WoOCSI/XmtyneuX3+WXFf7W4eyNvz/2LXrmKEPKO2UQ8wSHEoXty9SHF3GbQwuLu7uxaH4u5WYKC4u7u7e6G4a2GffE324U7+/Gny7es6vU/Ws1byJnfyBlfP2b/X11LVO6XoHD1rhq33o/RouLzEic2bCrb4tD3oZJbP3zfsyhs94fgD19LWL7Sh77JeU74HdpjWdWbwlNW7BpV79vtvNyYtfn9++fyRaQIeFAn965ZjF/p/vlY1cF7MkvmC5jX4XPXxhP1x4p0oden8xuT3CiY5FDL4lwIdEj59cCh13AZ7Ekd61/Ps7ho3+h88//vk4Q2OpLhe6ffSny78uDlv4Vy3ik08WWtk0z+bDE4f73u1bVVrHCnSZueP0178Viw42fNDP87a9DD7jaBXQQv2NNje7kaTKU0K7Ym0Pfmupn8OKxK35okO1dOVqZppYv2/T2w9czHV8BIzogytkjla/a2NE8wOqRYYkvVWvXZ5tyY7cbzE23wtyqesd3197bQj+42dUrj+mcNTF6VvM+p9q35re8+vVCJN9sZD65fZNeHq9KV9WrarVWrsmXsR+hRc1uP3sDl2r60W89vQb0M+V03asMrUFzEyNA/fZ+/U1mUHjkhRNEX1hyeGX/8WJlS+Ct+O9Ulaet7J7T/cbxgrVecXuasNHvx1RYW5KY+Gy3C/yYmftz4vMGH2ouivi+4aE6rW8oeJM13IG75B4PMqe1YGz8t2bGGsJyPa/RSnVJST47I2y7N9e7cd9WokuZ+w7838d29m6NL1Xtx/khXflSB3n+wpHx0LfW12qx93TV2VYuuzKsOr7pm9u+j0dOnq/JRu+u5QJz8vLTcoZEHZMdNHr+z7ol6NM8talY8UeLL8t/lHotfOcSNe7yyhl5cpGdz+amDkgtdb964fNKF82fvlipTKdOb7n/FmDi+0717bzHe2ZF0aLXK8sblaDP7p0e1bAVsuZaj2qHC+or0HjdrX/+mWu6+aLe8WccC8MAuLBiQ5djfwVbOGE3r3eZJj/I6z86rcCk4UeWfUjc+aNom1OcuUbXfelekfde8/H6o9XRw5d56L9yt1anHz58gdG42aWajj1xwnw8XrmP974+DcOd5WyztvWuYopfOeSLYvebkcgz9nvt5ydtqmI8LsXNjjdKfyb5dGG/RX2EmJFxb8rdPgmLsr5KzWM+LGo7kPDpldYV/Y9b9nGP46ZM8fO+LULfhoy57opdYnTtk7f9UCSR6+n9L28+O8lX+9u+Vt4S+DRnXN03/n1G/rz/VP1yV6mv0hHRc9bnAw8ZBxk9sPqFAq3srefV6cb/pbujx/l6swYnyjwVsOfx1+b2f52buSl13X6WPhMwNvlM7Z+I839cpGP5Km8MmVmUc/2rstxeQS5Ypmu9Ex7/n6f7z6NdGjXz+sajj9Y4mfXr+9sjHRi/zTJ284EmVUyq4fFsRIVfrVtfLnk4SvV3tf94bH1lZM2O5os/6Hfnz1plzMmXHKjc6b4GqqBsELXlVMlP1Dv3x5DlSM33Bvn44NBnbZXSrX9RPtz9eLMHFNswTbJl+9dfBpULU02xYnjl4wbXDniNfeNu73+EKcFusSJNwfZW+SiPerxoqVf8XeUmvH33l2NPSCTau73Zt18u7wpdFXXH8woOzJuuUOTGua/VrxmXfv5v+rwNG557+/iFQrS/NHf8ZtGzXpj29T/tql1J44+ZqMC7Pqt0Q5K9fauC1S/H3dx3bP/uDxkLIZko162Dflq15lk9TKlvBSs1fRP+XPke/77HwlC4RqVGbjl0m1654vdyD753TBaVvdyFAoX6x0dWdum/0xKOe+qu33fxhc5eS79LkvzhyyefriSpmyLvwQJV23cee+Lf4paufd91qMizrwdr9Fibe+O9P76P02rzp3i9d1x8Hp9Ya+md8oVqEfssW9Wjt5o+DIpy9mP794bvg52a4Nf/TX6ao5A1vUiDimaawSIQtz37xWKszkLde2Nd5auE7M5ksKDXiYKPuPbws/fh35c2DrxH2rRE86s97YY1NnRQteHpivydKOSQv3aFvmw4QErWN1OxGxRc5VRzY8OtCxysWxf+bZGDngZMFz+zrMmRrQc3KECcs21C+S4HaUvb3DhAqTdXzaj3dap37Z60arcPVPT160pPWk2PPOt31fZPGQ0R2jjb9QcuXV+Af+HB5/Ueix74s33jZixE+Xu0c6sKzpp7K5KsaPe3/Z1QlVS0efV7H+mnyt3k+ZEhSh1qdSNa6tfx4h/+H0DU6eOd080a2is/rOafisSM6o0f96mvRpnQIru7TosO9kps89o+8ZmDF5obDFq6f9NPtujSeH2jxoPiJXxvKrHm1rWu7d5YNRjx0ZtCJkcrqPQdnzNNlyMff8vm/Df0t3OE+BdpmL779e+HOow4eCzyZfXjrcsVpldsf+cHFIm33jyp75Puj3QdXqdNlyo/Tm6ttz9vz7S3CWoEzD+868mXB6ob7l8rzKXaZv+BdxczSqFu1B8b/X/XUy0dg5/c6l65jryJ1YVz5uvZux2N2++aKtevm56Pyx3fNVTtvj8+sWp5qnWJT8l5BHoUZ8CUz1cULQp+mTDzcpX/7ruy45Z7/Oe3RWhq6tNucKGtav6oxTxXenaZggZMTGha33pSo+quTAFSOv59j3/cb0nr9UPPF4xPuTGwc8/+d8784jTv70IPr5X9oU+177YKSbcV8czFnh0Nb9r3PdCbqTOWbxmc9XHyqY/vLeMHVinyt9M9PKHvGW5f6U8MndBMmPdsnVu1nBvs0qBkYpm+xCkTVpSs1PcDhOpLsriy4PrpHh+ONYgw5vq/Iq1N5oMY++jjZj+Pr43QfWmTc6647ilSLnjFqoX+tE2atkWfTk4JOoi7rmmT3swZPIq7ZH3za8d3CDCgnfrw/d9uXX0guuT0iyP2LD/dUWfrsyctmnhk+3tJpbPkOTnH90ahQl+fOJcyckKll0/Pes56dNGhUuUrfyqXJWibW1dNcyPR+1LFY2MDhz5daF7v99c1DlfSkLVYl0ruGH0IX/iV+p/Yd0cZ7ni3yqVudOc0d3vfGwecKe9Q/MqtJvyrRDt3t1rRl9bNw3PXLfqh0tzPdHt76fizjma8Hm0evXSVFt0l//xPx5eMFlWf6YnDxx8MnFg09P2LSjXJ2dZW5Evh4j7riwFcfNWPZHp4+3L01OOb1clsCAzH2aJSodKXPVJC27Z2i+I3qap4nvLHzVqvOa8/mv/LEm77MGidd3Cz7we++IOU++mphq1cQja9e+CZlc++rKdCsmbbu5OWva8psiZZ05rEbuPsOHPkv/z8Pxda8vXvFw8Jrlb4JHl/sQIcOhtcU+TMz9fWro2G1alMrwsMubxev6l6j1U6PL3yNfy9h/ccx5d9+PyjWg/PJlq1uMznj+VsHFtXtECt9uWJNG4QYExchec1vhjzXuFn92v9Hg3ll2PIn78MO9DCU+rMlR6Fu+813zn8l6ZsTpdO0DZ9aL2Clmi3slN0/oGuvNtRnlxxbck3l6UP2FUVbuv36rQeYBc1Psj5R2yppdNWcn/TNmuG7D0kyctW3e5Pcb+/xY7WntcvW+PN6/4HjR+KWzrJmbc2f3A7WLx41wL8Yvk2Y/XPbntyp1/r4+rf+MUM3mTtwScHr1wODTBTaW6r33dtkHq3KdrXOgyfo1Sfr9k7Trt6eP03do9PPwBKFOpVo4PFToRAdrxlkTfH5M8M9JRxz8WC5W1mj7ly4Jf3hwlAEb7s6MnqxzmTgpkpX6ZW1wpLVVxz3uc+rcnEgJq4Yk7xi5wr1C4fOsPHDv2LRZEwI6dA7qcadhrW+t5w5KGeZzUNn8YZtM+uNKvZgzF/xe5beMhyu2Pz/071zr/gx3Z17jbFnmNVq47ocH9V7++deeHPXXjWv7LaTxH3NvDZ1/J/yOCFvXF6napPrNr8VfX9+cIe+PDUtG2/r+n5qpk1drfardT61Pd6iYKPnF+AemPR54MjjV6XzDU0f9YcHtzJezXKuzLk3NrnUmtpwbM/eyyQcSb130d87xeS8UDHyerszpiYmi7C5z6lFw3sX1C8786VjjG01Ctj7o3LHk4XVfn8RuUWxv41h5bt0alSliYILkAc8b3Kr/eceWAt2XHPrwuXCqPSuTPDg7NUqJcMe+RegzI9Tu5KmPVE8wPEu1r50ml87frNfcKo+W7Z+bqsec+5V2Zbg8LcLcw4fj3brQqXz4u3kGTsnxuU+EHjGzZT6RolnS09fmtur54dqBvPEqr/i7Tp+9706lm7imzauJRa+u6TFhVeS7xcJMHT3xj3hF19xdELnC3wlixMy3OEzeOa13D7+YMPHyiH8MyxfzQszWXT+W77ErqOD3gKl/hIuf6vOKKad+X1hjWZmFxVb1XJtgxpDJuafG2Zd71vGbpX+9tGTGush9KgfFG9JhW9xj/TYfKROSNMXD5UdTVvyS8fqabH++e968yLy2p7s+e1CgYrWV2cMPz/165KqK3Vsn2lu5x++Lyl6J1qzymLlDdvx+M2eGwenTres+eVjH5TuzZsy1Ic6Fk1VbXg0d95fmXxJfLtXuceX489pX6ddi3pYwo5onGjSgz0/NNmabOiBgSa96xXMsipHlUpL0L97cXrg87LL5TQ8P+zGk8ZlUZXp8y5A0VpH4eerG7nyi9b2MGUsM67F05j8bz97N3unAzZsh3e+0zz622fn4c14VOdB1QZmyxbaMjpe9V9vE2UO/KXuwRY12qy68Sbwsaa1fM7fIfuVNmzzR3t7ql7TfnTJvDoR63Whi30Fb9z7ZM//J8QbTph69F3HWLxdHxb21qEnfE4+izX0WKWzuLsXW7rjfaFnLZdMafZwZIenccmGj/1mw++pr9Xc/uPviS6+Lw8bczTkn67hLV2aOmFtxSJj6exMEXe2UokDopJdT7apbo+PTVv1jVt82e1n8EgffpOowItmdFNlTh4TE6HW5V6QwF/esj96w48u4N/ptbZO7ROvjk3PcmnZ35ZWPUfKWmL2kZJjlH/8OlzL8x9h1C81cODLxxtl/Hs00d+i3mZ2i3noxvX7LMDnjF884fcWVBqMz5syypOzDAin/LlztRtzhwyu9fXu+6IWmJ0L3ubS1yPKWyQN+3bkr1rThnaP+9bZF8bqrqlSev/dN9DJ3kkaMPmVblaxRymfcOzdH0z6/r+925euEKAN6F066LuP5oMxhGpYtcH9es5DiQ2J+6b6tYZ5TUY+3ePTtzIR9rUPVG5+14NkjgdHj5x8e9ceqyxoU/Kt4rfGt6j/9q0rCSQt3hvROl2jIwamLcp0r0b3IwJszstd62LfRiTtRsr2N1LT/2PytwjxI0CHZ4kpHeq+PlDtWyZMLox68W/hE5T4PZjdbk67rpccREheIMLzTosI1xn0qWXlR9MRN9q3IWSFJ6ME1atW8f3RUs90te0c5GHFa+AKDwnZZ9FeqdImn5n56ZkOWlLfi5whz6d6y8t2qL50Q8HFTsfVNVn5P0urUj9l7tb4Z6k2c35/+mSRi0yZV3sz9vKVJ2TS9Sv1Yf1zWqHOGhrn9/o/FsTZEnF+nU5jBPevl6zJsaZ1XqYMTl2n8Ys7Hx4Ed22x6UqHBkvvjTtX5afiXBkduPhwXc+Wq4I4v0+688CRr+1p3Ut3scmpB5zf5YmSIeSDkQpnqE/d83RG0udzXsGkmlNq/OFeHOlOm12zYek68iXVubPwY8dOuKgXOpHy4r8OBTJnfntkcMrf2rmsj48YPUyzl3Bnh386qHByvU8q0vzYsOP9Tpnc3lt1bXShSrLHnGjYYtqdQy76p/rlwYW+B9K/mTlnQdkKZXPWXli76oXeBpX1Cfq7VfeHngk9rpt6abHGNKeEX7+p+/EHj7SUP1Lkb/d6ifOHS9X2+uvbHliEdDgdtzhRqVYIDcUt9TvnTuznDJqa8liLBls4N7yYPLnA+a9jJdefsbzd4Zec2V1KMyLxx86gop690mxs18uYIMS/sGN74UZxf2hWPnDAkQoX4j7/v+V7nW45paUPGZy9Wa1HG8H3zZi958Vm6bM869Is9KP+zigMKdb93smvnOPPSTZx9fGXUSInG9TncM3bn9CfSHysz5VGGrJO6rPwzwd2sT/oGrP6rXa1958ZMW9733eJkH2L/3n9+usJPq3ZL9/nOD6WbTI9WvM+DwL71X0072fO3hWmvBPZpMXFe95IRD+zOW7jf5Uu1wu3LGrX24wgzj+/sNq7WhbuLpwXmXj/+xwJbcwzanet16rFlpn48vbz0hNCz167ruWxC0VVZe5Wt3O3YmUsREgxaPOrQ4sXfLhQO2tVib8EVbRrejzOvYMjIFJX7hmu6aMGL6/lLlRuVYGfoLZM2zixeZ1mlS1f3hj86KMmG+iEjL84fn63Q2dhjr5UYeO72xAfHI9+PPetVtyEpfujY7IfaX5Y1eJVkcOQiwddrZesz5MzpZ8OWtN676cbL0s227I4Ye/X5W7nudQ+IPStn/lgvvkwo8e7Q2NAZNiwoW+FlhAEPfuwcmG9dniw1azT9mLXu0OAIL0PXXLird6+/K3wu2CnpkLINtp3tn7Ba+3qvklZNPThTrzTp3le9cWJRq/I/RU9Y5e/8rU6cTHa+wLiUQ8Yv+SdVhu2hpm2/83xC517zrsZevSzP8FLzb3c9FflzmTtfS+Tv1rj8hxgTWmStH+9s27+XvU23fsbYz8vj3271ZnjzVsu3De1a4EzSvbV3zR1WpG+qHLcjjt74vuqq5+WeF/2U+q9Xww9ma/P2w8duTw+GT/N21bRMx5+/zxHppxEN3zzr27b48fGlK3apljncunGr4sVv1yj56ISjdlzrvr5eyps/lIgaJduPR3ZPXt4r+YbCL2I+KHf40qrr5VL9Uuhj7uwnmq3oX+fhgMg/PX77ek37ZJ+zPw1fJsKpyK9rbPxW7/TjTk/XzXpa+0CcCxfiBx88O/vutQ0Fd5/72vPBox7PK8xpePRg2WH1MjcLyLt308fbuQNLb6oRnDvtnwXb5J5cImnExNtj588QJV2mUAuqJk2+8f6UMfdWrHqXeNLj9lFORJzxT/pnY67N2H3s7Q+902SsVmXb9/Wzfzw+8PqpG592tHz8vd0f4TYlLDcwaEC6xifLlYif6MLTdZ1yFrxboOH9BGOX3Ko1u07TaaES/PD75RmJ1vSrmbJlk1oVCrWa0DjxH2mnv9zVZOuNRGV6bklfM/+2U0+qda/YNO/nnlOKnwpVrOKpoM03Vrcuv6XG9zEpEzWsMuNB/1rfK6Z4M3zJ7cfLW3UcuffoqZUbf35bZ+u+sKEXvNwbuX3FJolynY+dpNKlGHtbRRvRIuYPh0bEKn+lVqrHpw6e77/nUN/vReMPS343UqxyUc5sSFw6btDNNsmX3ytWqufFuSfCnaz7pV6f1SMD9j2K2yl+/8XFy8zrMWVF7sT1f8uX8NmE1cmz5t58Jn/D/JOntZqR/sTIaNNHz3v586FoQ64W7hhtxKzA1xt3NElQ6tO4iM3rJT9eJOrePDtSHC5UIMuA2PVvZtkaN+GPLyPcSzEwa/ckcbI8Phe/0fW3EZ+cDrP75NuLfTYO+fTzw0Rdmz9uuKBS0WQty8TLvzlNgogFngyuU+qnh1PrJH5UcVL8HBu+rJy7aWaldzkCN8bckuR4zxMbp82M+NPvUfOcKdfvZsbvxweeCjW+fPORRxc+7BzSIee0mn/vzVmvSsi15MVjpCwROlHGc43WtxlXo/vulnsyT8qc48bXxa377m1xsdS7djXHxm3xT75oyzrNLR/nhzjzFjbfOWnXrUXZsmVskqrIsDx3au4OO/lFus8562evlX7Z06NN+yT9eUzvW19v5ErbO1v89EN6zd1yc3vMZPUjVa8V5myj/QG921Y/Ej7m/RRfNz765UqljZsebuw46djGdefLL27w4NvLY6/eR0w6c+3ZXMHBmRa3TDijUK+QHb8MXDrz8bwoV7P3Hlcs86c5EwruWXi0fefC1w+NSBqwqXTqawdfDp+b95/exz9HWhU3xvs/Koc/n/Pm9pITBlTZkq7q60T1DnWIsObAiL5Rm8cKu2vl5o/Hdh9N0KbqvgNrh00uPi/3n3kO5hxZ5XCcepfuj7w+OPKvr+vdupC1wNbUbdoEFOi19/XK659nzd9SaW3TO19ClQ25eXdYy9OdxyQv3Tb7g14FbqQOqL8tU6RQryrl2zZkavvO3cZF+SNbu9Dbq9dq0SP5vvGJey6uuOL+tv1lsyT+9dOqzSFx5qx9+/OZ7r/8faJykcZnBrbdPz3lh1Grvr+NeSzClnmVHq3vebvexuAUT25cb5x8UPD5qP/1/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8eu97WOtzx2szPOX+rFDnLpss/19m1rf2zJ8En+oQkGR83+pG6waXXJkyzK1unVtdTV68yr3yq3R1PXY5aecKgKE83pwiI963CrPIHDz0aMnFtj/v3b+SP97zQDzU3ZJ75bkKpBg2qNZlza9GksMnK/r6j35Fl7UodSzJ85t1Vic5ub7Wm7sniLQbXDjWv8MDLlVNcv3b5c/sWqZ8sfb3j5KCL/84VGBAQEO+/XQ0AAAD8r/Fl87W+kYJihL1UcVTs/DlD3/m3h4f6nzwwIEJAvICwAfEvX1va5eHtNhnaraowrUftIlUPTwj1qHzz2JdWDLtes9PuUpemJv5WanuY3P/xcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+L4u8tdav8kduPy2b58Wbl8jGz1Nm1rf2zJ8EnNmzv0fF6w68BA3POGHswbP9pNQ+0qpsm1IvZ8yf2PpVn0dDEPZ5uWFe8W8wtXzLWXj3q3vgfYnYp82eYtotiXvuxz4jegxO9bz76ceMWYw8vyDa269nX08LX7Vhkw4dff8t/Y8untwXT9q0eKWKJjpFrv69zt+qb2kt7vGw3NNOgNF9KDi2Z79+5AgMCAsIH/re7AQAAgP8tUkRd1XJltMTjO1ZJXT1fwcK1/u3hEf4nDwyIEBA+MEXAgrAr40Y41b5UuoQFxvb75Xq+dxHHx9ud9eztOTV+Ohamd7bhP83qtWbEsVyV+81tMfFIgXfp20ya8GlT9MJp60xqt/puqclFnmz6rc7GPHM2T8zcu+em95vyX9qcYNfOI+VntG8/YcfNCgWGtc03+NrTpmXrZz/1OW+WTjlXjg2us6HHt7tjwycvHndWikpDJu2q371cxC+HjsQt/2FJ6q7FK6YaM+r7ycSnJy0p8dvPF08eLz943YhKoY9evnp5Zr+bXXJUi9nrcPTWWQ4dulB42uRvPywYduB768W5DryNuqDKuKM7xzZfW6l48hk/ratTLMqJ8q/y5z1+odXtlg87B0ddVC7ykEH5am56vq9p+ubpkxSY1uH4D90r7bk+clSMGOc31D2VvsG6Me3Xr94YvVjt0QNS/zZh9398PgAAAPj/pPH0F2WftB1ZrOW+mZHmnO3c6N/+H+l/8sCA6AHhA6MGVI1/Z0Rg7eqzPvUsELdWxV9zxxo698yA/iVTfnq7/GtAi3UlhkTofGrDrrq3i3dYtPtCrCIzFpZftbRmkz7l444s3fzawoYxOl/aNj3MnQpjLsYqkWjTP1UOLR27oM3AGK1P1mgdvW7PrIc/ZJoxKk2e6lOinizeKahdk2b9/+O1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/wd+23i62bCAkXe7NP66tnL3oGR1dm1r/+xJ8InGrW/GX735Q7HSe7fOultlcsabK+rtjhs9cNbcIwf25m/2Z53viR7tG7Wp+qBstVoU+Ln+8uZFc2QM+8OYSf2WlB61aPOjeUFb4rZbsiXZtbGH5/1z5q9ihcY86fRkV4FVW7On/FQiw8oGlSJO6lzyn79Khl+z5u2I0XNehcQIHe7tvlqFk6b/d67AgICAeP/tagAAAOB/jRdZrm6usDlT9U4zKq+OVjVe0L89PNT/5IEBEQLiBSQKqBz5WJLJsUcvSfHge7Vf7kZ+fqdgrSX9tiadsrnlxOe3O/ffGi6g6d1bp0N3WRK92csHYXM9yjPxXOakn/94ErXgsJing07ka9ngeNCMM8PaPAu4ULxhqz3DG07cuyJGuW+L120uvqRcr+/xS1fo96pFhFL9QuLOrzD/xe7J5a/GXj0u+/IZ8/fFK5pu04Mxc942bfd88INJobs3ftOnbak5i36NNP11+NDj5u3rmOttUJV6lycNvdK7SN6YtQ+tajNp1YNPVULN3LwqsMmAwVtflMhWpfGqRimvjm0x4U63YUX2zY9bZ0eCtS/X378WfkPR6APe1srU+maTeMXOpTtxY2aS//gcAAAA8H/FmbvVfi9wePbFYq2jbF5fN+nEf/t/2P/JAwOiB4QPbBdQYvFflddvOdR6f5/3g2ON2Vki/e0lDb7Nn9L/Uszm++oPK1Mh9uyEabYtjRhj7PuxlT/eXrYx9pyeza51Xtsi+9qMkTe+TnaqZlDicE1y7y8Y8mvPuifu9h4X6dW6RL3mn8wfZtPDXl9aXfqlUOrVDW7s2LDgUNeoEV/WfnvxWrN03wY2P9P2l6wFq/ZIfnZcp5cxdmSqeO1sj6z3nzSfXzT28ZS/B11I8uu69O2rb7wduKzDxsnnAsPUPfRtSOKrEw6/Dxu2cqtGg/OF61CzYbvq55MXenRvad1bT24Xnt5gatnBw2ZFvZToh99PfV00eEvEbVlnb/924EnnDjtyxZ1aYuTKH2dl6Bk6bqSop0/9kKhd33O/ZMkTucnWAmNWrT20vEquqPGKda1zefenCA8Hx1/eNtnU3N123Wwx8u3uK6leDCs7qtzeNtmjrl/V+sKf7w6cKNL9wZuobaKUmxx655cB9yN/TbUh8MjC4sObHwjfuGqBmD2jX166LOfUD/O79kh6t/n2hOtX7qzaZ26DZ/PHxAgVsdGr1W+mRxq1/Nigb+dmZ4g9ZtiCZ5MLbY70rPXU0SXq/7qn+qySh58n7522WrfhR6YH14w+/U3IHy0ql7/RIE3veb/VndP5TZtyHS/c2zlr7MBDJdP1+WdCvGOlW15qMzDj+R/+eXh41tkTHct2yZe9ZdJM0U91WLA+eYXDL7pVzVFkdtn2EzoFxls1dPaeCtk6tEwetOTEmhsTH94+9KHdrG8zPoePdjjkr7Izdr4Jk7hv8+i/HNl+Mm/Tc1ViXz34pVhAwnCzMqXv8LFuh5Dfzq942e5plHKhQzofzB/c++9Xm9Md3vH10q+fJ5YrdHFxvdQvIyfPcH1G5MQ3uj8InbXQlcm3658tEFL35Kn50w/VTHQp1NaEB9qP65E9oPKaVJMapO/e6VLNxGGDjxUKCWrf5V2VfNku33+bqv+k0B1i5VwR5fXYtZ32/12idobzOZe+q9Eg5r1BB68VvfXu9e4Ps8q9KXTiwKlvPXpMqvVH5khBbX9penN02GYvIva92vSnz3uGnp8fod2bpMdPrJhavEbDqJWvdPpQ4u3uZMd2t81zqf28l6vKxNmS+k3ieBe3ZOgdc+CH4FYpT4+OHbwn5+TvFY79FLgm0m/RonaZljJaxaXbi/WtM+zB0qD6K5vMyZS9c8Ck4hG/JPwl1rStGZ4//X330js/ho43I0fsCrcyDOm4+bcueWPvmPTm6OhQhXb0CdvydoW2TQLXHmq0qOrS9RkyTWzZ8ePgr5VDP6oSMyBS2S4jh3163P5Ryexv/uPPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/7Gqwx6kDfMtbI77834ocq/ZvI91dm1r/+xJ8In5hYOGvn/zZ7/3bSp2zVJzddqkR3/OE/55m0EblxzL9OXwpnN/XOjweWSYaZebBiXKknfEjmvD11fOdCVSpeoBSabkKxKm8qr9Q69cnV3zn+21Jp7b/PFVwd6Py+WbkG9I5c+78h3ol2ZjjHnZY08M+OHEm+hrkq0NyRNUNnb0ch0bX20dZtC/cwUGBASED/xvdwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/f9NyzZcwqcZEOlqy26gvg2Yv6FZn17b2z54En0hwY8n+Gk1TH8iw9Mml7QnrNDg2ZOrRAbvz1dj5ver17C8Dp5Se06/O1mlFF8wtVLF3jebpwi14+kvc2N1LP72zfebW1DnSnjzT42uaKX16FLrXLVHuKfvyTCtQtOLdjVNajr62Y9LLZmfT3qu+oEPuxv0nth5Z9G3GHenS18pVc1ifLqf6p/53rsCAgIB4/+1qAAAA4H+NFbuy9G1fZHJwgmLTdsVIuC3Nvz081P/kgQERAuIFhAuI9vfiJrNK1f61xdz0b2K+TvTit1OPgzePHvw4/bs/+qcIeru2SaarUe+9fTekV+duwy7OO5v1P34WAAAA8P8yK1rK2Euaf8o5aN+fkc9XuPD23/4f+D95YED0gPCBKQPu9CzyenGF4PEfhg4uM2zI+GN7aiYY02lIsVaD755oUmD/yyejMtQbn/XK6qQ/x0tRut3ryeP7dryddMCs6fUTzYo9L9GSTYWThMk6Yf2eat23XH1VtubYH0rODpnydX2csz2rZmnX55/HGe73PPu9897tW6LcaR3YJ/HqeANrrFiwf9L0nms3N/69Y9uoHRK9rj01YYIkjZItmfBkS8KLP+8c1XforjQjCvYetnHAsN7ZJj0q0K327Py/lG8ao3C4a3Mn5IiR43vf2Tn7J+kQr9CJb89OD+13I2bGI78mHZYjeN3fvVosXhcSMGxz09rpAselTdqxR+/RLcr0Krm+xPDvzQvXW5Jq/JCgFWEvJ/jn5clbkyf3yJT2VNiGqZamapD087ckYQNGlk6yZXbx9n0jXz97e3fopjdfbU7YYHz6bkn+4zMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NdbaBxVHAfgM7ubZpNN6qY+dFVQK9iWeIsUURQ0oAYRG5UKXqC0WquBtg+lPlQQmoTWRPoiFUEoakTwEhGloq0VS0Hjg0L0qaLgrS8WRAjFBLUPlSQz6Wa647ZboqDfB8vJObP7m/85c3ayAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzvNRcqM+1nu7ZN9V54++eDGyd33HFwy8CbBy4/8vz+nrUDq4+fuHfn+NjBd0Y6vtlz622jf9w98eOhwyfrBm+fbTrjbjGEaDIKYefN66aGxr5YOj0WhRDyUbk/hI5oyVhHlEro+jOE8OhcnfMPfji56rHpdmB387zx81Ih6XmFUj6pZ1Z5fr38txTjfZZbdWjo6Ks97+/r6Z46tm3fjf2n3hJNv+dAvJ9CWLw+/flcjdxHNvR1dm7a+OQrV47+vO7XpX2jL965ZuX9D7zd1rL2pWe277n25eHv73v4ivdam0IILfFrWrJbK8nJ4/aeEEJrVf4NdeZ12RnO/+qM/iVxuyhuS3VykuPLUv302qS/xImmVNte53znqtY1qyWr3rPVtkC59fKSeSa3sY/itvMs8/PJKwq5KBTmTrc5OrVHQtV1i0I0cy2Lc/3cTD9XVW/T/PqjVD+X6uebUvOaOW+80fJRNH88eV9qPFmHQjy+rPpeX8OajPEL4rYYf1F/T/oh/ces0ml/zM1rRlLXxN/U8k/IVd2Dao3PXfj4YpTisVK05LTPnKwhOVa4pm3vULnQW86oI3o3ivOjhvJzi3775KHuSzsrWfnrc3F+rqH86x8ceuqJL3csz8x/NsnPN5T/01uvHe2rDF+UuT4TyfoUGspfcd3FTxfHK5WVWfkjSX6xofzlv7x+/OPxwSOZ9Xcl69NSL79Q3U2ObZ5of3zLyNavM/NDkt/aUP237D7W1/3Gd89l5h9O1qfUUP7+vb0/NK/+9IOurPyvkvz2hvKvGlxxomdXz02Z+7M7WZ9yQ/nlu7Zu+HZTfjDr3hn1n+l/WABqOT/+jTUc9xt9Tj1XVc8LL5Sj2d98bfFrIZ/Vps+zeAHzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Hf8FQAA//9m2ggp") 277.657312ms ago: executing program 0 (id=1132): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x388d062, 0x0) 37.504502ms ago: executing program 5 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x54}}, 0x20000000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x138, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cluster={{0x30}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x0, "4731c9de5f971c06c0ae6f333f5a692cf3d811600bda567a3ae6b3b786cb"}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@gettaction={0xa0, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)={0xd4, 0xa, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x70, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4080}, 0x4000001) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000006480)={[{@numtail}, {@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@rodir}]}, 0x3, 0x354, &(0x7f00000068c0)="$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") r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2000c12, &(0x7f0000000000)={[{@dmode={'dmode', 0x3d, 0x1}}, {@session={'session', 0x3d, 0x37}}, {@nocompress}, {}, {@gid}, {@map_normal}, {@check_relaxed}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@session={'session', 0x3d, 0x62}}]}, 0x1, 0xa00, &(0x7f0000000dc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa9d, {r5, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000010c0)=ANY=[], 0x1a3) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 0s ago: executing program 0 (id=1134): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x0, 0x10, "467b727d89e87f94d14d056d359a6db6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 9'. [ 534.020230][ T9168] loop5: detected capacity change from 0 to 2048 [ 534.060443][ T6982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.118804][ T6982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.242321][ T9168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.044137][ T8841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.518929][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.648'. [ 535.535326][ T9207] No control pipe specified [ 537.404174][ T9222] syzkaller0: entered promiscuous mode [ 537.409723][ T9222] syzkaller0: entered allmulticast mode [ 538.133089][ T9243] loop1: detected capacity change from 0 to 512 [ 538.220369][ T9243] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 538.290979][ T9243] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 538.344806][ T9245] loop0: detected capacity change from 0 to 2048 [ 538.433266][ T9250] netlink: 508 bytes leftover after parsing attributes in process `syz.5.788'. [ 538.461673][ T9248] loop3: detected capacity change from 0 to 2048 [ 538.521815][ T9245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.612896][ T9248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.407045][ T9257] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 539.578134][ T8836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.611341][ T8846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.451678][ T9310] loop5: detected capacity change from 0 to 8 [ 541.646352][ T9310] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 542.263219][ T9315] usb usb1: usbfs: process 9315 (syz.5.797) did not claim interface 0 before use [ 544.623278][ T9327] loop5: detected capacity change from 0 to 512 [ 544.637921][ T9327] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 544.649976][ T9327] EXT4-fs (loop5): blocks per group (71) and clusters per group (32768) inconsistent [ 545.253414][ T9333] loop0: detected capacity change from 0 to 2048 [ 545.317962][ T9335] xt_socket: unknown flags 0x50 [ 545.464376][ T9333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.067423][ T9338] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 546.132451][ T8836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.361077][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 546.372900][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 546.381619][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 546.391710][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 546.399736][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 546.419842][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 546.613361][ T5292] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 546.762854][ T5292] usb 1-1: device descriptor read/64, error -71 [ 547.003126][ T5292] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 547.167009][ T5292] usb 1-1: device descriptor read/64, error -71 [ 547.292416][ T5292] usb usb1-port1: attempt power cycle [ 547.640917][ T5292] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 547.673286][ T5292] usb 1-1: device descriptor read/8, error -71 [ 547.910966][ T5292] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 547.922728][ T9236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.783'. [ 547.941685][ T5292] usb 1-1: device descriptor read/8, error -71 [ 548.218740][ T5292] usb usb1-port1: unable to enumerate USB device [ 548.280213][ T8844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 548.290873][ T8844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 548.300384][ T8844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 548.308401][ T8844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 548.317797][ T8844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 548.328724][ T8844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 548.510803][ T8844] Bluetooth: hci0: command tx timeout [ 550.044929][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 550.059602][ T9369] loop5: detected capacity change from 0 to 512 [ 550.068224][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 550.070197][ T9369] EXT4-fs: Ignoring removed mblk_io_submit option [ 550.092039][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 550.108106][ T9369] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 550.119646][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 550.130550][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 550.141347][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 550.350949][ T5239] Bluetooth: hci2: command tx timeout [ 550.449393][ T9369] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.812: corrupted in-inode xattr: e_value out of bounds [ 550.553594][ T9379] overlay: Unknown parameter '/' [ 550.722692][ T5239] Bluetooth: hci0: command tx timeout [ 550.973136][ T9369] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.812: couldn't read orphan inode 15 (err -117) [ 550.994361][ T9369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.296321][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 551.296345][ T29] audit: type=1804 audit(1726934755.718:204): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.812" name="/newroot/20/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 551.333480][ T29] audit: type=1804 audit(1726934755.758:205): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.812" name="/newroot/20/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 551.367094][ T29] audit: type=1804 audit(1726934755.778:206): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.812" name="/newroot/20/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 551.413969][ T9342] chnl_net:caif_netlink_parms(): no params data found [ 551.559073][ T9352] chnl_net:caif_netlink_parms(): no params data found [ 551.658064][ T8841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.748908][ T9388] loop3: detected capacity change from 0 to 2048 [ 551.757952][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 551.798568][ T9388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.011177][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 552.031423][ T8] usb 1-1: config 0 has no interface number 0 [ 552.037803][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.052925][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.308460][ T8] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 552.352826][ T5239] Bluetooth: hci3: command tx timeout [ 552.436989][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.446946][ T5239] Bluetooth: hci2: command tx timeout [ 552.537170][ T8] usb 1-1: config 0 descriptor?? [ 552.630983][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.657157][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.681871][ T9342] bridge_slave_0: entered allmulticast mode [ 552.689719][ T9342] bridge_slave_0: entered promiscuous mode [ 552.709870][ T8846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.767783][ T5239] Bluetooth: hci0: command tx timeout [ 552.770548][ T9352] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.780412][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.851196][ T9352] bridge_slave_0: entered allmulticast mode [ 552.915139][ T9352] bridge_slave_0: entered promiscuous mode [ 552.971914][ T9352] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.026860][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.035862][ T8] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.000B/input/input25 [ 553.081472][ T9352] bridge_slave_1: entered allmulticast mode [ 553.110914][ T9352] bridge_slave_1: entered promiscuous mode [ 553.130358][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.137795][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.145172][ T9342] bridge_slave_1: entered allmulticast mode [ 553.193697][ T9342] bridge_slave_1: entered promiscuous mode [ 553.624935][ T9383] loop0: detected capacity change from 0 to 256 [ 553.737906][ T9383] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 553.855691][ T8] holtek_kbd 0003:04D9:A055.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 554.066993][ T1830] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.271026][ T8] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 554.380257][ T9352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.402697][ T9352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.420844][ T8] usb 1-1: device descriptor read/64, error -32 [ 554.438860][ T5239] Bluetooth: hci3: command tx timeout [ 554.440926][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.487923][ T9409] xt_SECMARK: invalid mode: 0 [ 554.506977][ T29] audit: type=1326 audit(1726934758.928:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6537def9 code=0x7ffc0000 [ 554.529590][ T29] audit: type=1326 audit(1726934758.928:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6537def9 code=0x7ffc0000 [ 554.553538][ T5239] Bluetooth: hci2: command tx timeout [ 554.560823][ T29] audit: type=1326 audit(1726934758.978:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb6537def9 code=0x7ffc0000 [ 554.585352][ T29] audit: type=1326 audit(1726934758.978:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6537def9 code=0x7ffc0000 [ 554.608627][ T29] audit: type=1326 audit(1726934759.008:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feb6537def9 code=0x7ffc0000 [ 554.631328][ T29] audit: type=1326 audit(1726934759.008:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6537def9 code=0x7ffc0000 [ 554.653892][ T29] audit: type=1326 audit(1726934759.008:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6537def9 code=0x7ffc0000 [ 554.704406][ T8] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 554.741887][ T1830] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.830204][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.831750][ T5239] Bluetooth: hci0: command tx timeout [ 554.880715][ T8] usb 1-1: device descriptor read/64, error -32 [ 555.117509][ T1830] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.131678][ T9412] loop0: detected capacity change from 0 to 512 [ 555.235744][ T9412] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 555.376349][ T9342] team0: Port device team_slave_0 added [ 555.678622][ T9352] team0: Port device team_slave_0 added [ 556.663529][ T5239] Bluetooth: hci3: command tx timeout [ 556.672136][ T5239] Bluetooth: hci2: command tx timeout [ 556.738645][ T5289] usb 1-1: USB disconnect, device number 17 [ 556.745552][ T1830] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.839482][ T9342] team0: Port device team_slave_1 added [ 557.013806][ T9352] team0: Port device team_slave_1 added [ 557.130819][ T5289] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 557.215158][ T9366] chnl_net:caif_netlink_parms(): no params data found [ 557.271154][ T9428] overlay: Unknown parameter '/' [ 557.290998][ T5289] usb 1-1: device descriptor read/64, error -71 [ 557.520346][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.543976][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.579237][ T5289] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 557.637680][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.682872][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.689872][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.800926][ T5289] usb 1-1: device descriptor read/64, error -71 [ 557.810939][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.855136][ T9352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.870644][ T9352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.908408][ T9352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.921459][ T5289] usb usb1-port1: attempt power cycle [ 557.937487][ T9352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.946754][ T9352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.978287][ T9352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.247315][ T9342] hsr_slave_0: entered promiscuous mode [ 558.265558][ T9342] hsr_slave_1: entered promiscuous mode [ 558.291032][ T5289] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 558.322022][ T5289] usb 1-1: device descriptor read/8, error -71 [ 558.374046][ T9438] loop3: detected capacity change from 0 to 2048 [ 558.414876][ T9438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.459029][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.468502][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.488028][ T9366] bridge_slave_0: entered allmulticast mode [ 558.500097][ T9366] bridge_slave_0: entered promiscuous mode [ 558.609758][ T5289] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 558.612238][ T9352] hsr_slave_0: entered promiscuous mode [ 558.797498][ T8844] Bluetooth: hci3: command tx timeout [ 558.828842][ T5289] usb 1-1: device descriptor read/8, error -71 [ 558.955789][ T5289] usb usb1-port1: unable to enumerate USB device [ 558.995629][ T9352] hsr_slave_1: entered promiscuous mode [ 559.083071][ T9352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.100824][ T9352] Cannot create hsr debugfs directory [ 559.326718][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.340480][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.354002][ T9366] bridge_slave_1: entered allmulticast mode [ 559.369243][ T9366] bridge_slave_1: entered promiscuous mode [ 559.461358][ T8846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.505725][ T1830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.729930][ T1830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.772403][ T9366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.902498][ T9366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.711640][ T1830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.894634][ T1830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.018866][ T5289] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 561.056934][ T9366] team0: Port device team_slave_0 added [ 561.152668][ T9454] loop3: detected capacity change from 0 to 512 [ 561.167592][ T9352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.193289][ T9454] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 561.221659][ T5289] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.238157][ T5289] usb 1-1: config 0 has no interface number 0 [ 561.258209][ T5289] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.284709][ T9366] team0: Port device team_slave_1 added [ 561.327495][ T5289] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.382905][ T5289] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 561.408923][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.416434][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.430847][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.603535][ T9366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.787892][ T9352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.876243][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.890886][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.946659][ T9366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.030883][ T5289] usb 1-1: config 0 descriptor?? [ 562.590547][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.605807][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.609637][ T9352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.818804][ T9462] wg2: entered promiscuous mode [ 562.849867][ T9462] wg2: entered allmulticast mode [ 562.856411][ T9448] loop0: detected capacity change from 0 to 256 [ 562.864513][ T5289] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.000C/input/input26 [ 562.972794][ T9448] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 563.049073][ T5289] holtek_kbd 0003:04D9:A055.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 563.152495][ T9352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.296274][ T9471] loop3: detected capacity change from 0 to 256 [ 563.331484][ T9366] hsr_slave_0: entered promiscuous mode [ 563.379074][ T9366] hsr_slave_1: entered promiscuous mode [ 563.419964][ T9366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.448512][ T9366] Cannot create hsr debugfs directory [ 563.876451][ T1830] bridge_slave_1: left allmulticast mode [ 563.879898][ T5292] usb 1-1: USB disconnect, device number 22 [ 563.892498][ T1830] bridge_slave_1: left promiscuous mode [ 563.926711][ T1830] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.969947][ T1830] bridge_slave_0: left allmulticast mode [ 563.996079][ T1830] bridge_slave_0: left promiscuous mode [ 564.029068][ T9478] loop5: detected capacity change from 0 to 2048 [ 564.041077][ T1830] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.078131][ T1830] bridge_slave_1: left allmulticast mode [ 564.096007][ T1830] bridge_slave_1: left promiscuous mode [ 564.098324][ T9478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.104480][ T1830] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.124722][ T1830] bridge_slave_0: left allmulticast mode [ 564.133260][ T1830] bridge_slave_0: left promiscuous mode [ 564.153440][ T1830] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.176315][ T1830] bridge_slave_1: left allmulticast mode [ 564.182392][ T1830] bridge_slave_1: left promiscuous mode [ 564.198108][ T1830] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.243430][ T1830] bridge_slave_0: left allmulticast mode [ 564.250010][ T1830] bridge_slave_0: left promiscuous mode [ 564.324642][ T1830] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.467361][ T5292] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 564.668357][ T5292] usb 1-1: device descriptor read/64, error -71 [ 565.098907][ T5292] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 565.301040][ T5292] usb 1-1: device descriptor read/64, error -71 [ 565.431056][ T5292] usb usb1-port1: attempt power cycle [ 565.432709][ T8841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.900767][ T5292] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 565.923670][ T5292] usb 1-1: device descriptor read/8, error -71 [ 566.181518][ T5292] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 566.314077][ T5292] usb 1-1: device descriptor read/8, error -71 [ 566.581509][ T9508] loop3: detected capacity change from 0 to 512 [ 566.588570][ T5292] usb usb1-port1: unable to enumerate USB device [ 566.640757][ T9508] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 567.329015][ T9513] loop3: detected capacity change from 0 to 2048 [ 567.400687][ T9513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.442276][ T9513] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.487120][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 568.487147][ T29] audit: type=1800 audit(1726934772.788:217): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.843" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 568.539810][ T8846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.083538][ T1830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.118635][ T1830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.141897][ T1830] bond0 (unregistering): Released all slaves [ 569.220847][ T5289] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 569.274090][ T1830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.287494][ T1830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.301357][ T1830] bond0 (unregistering): Released all slaves [ 569.409156][ T5289] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.417394][ T5289] usb 4-1: config 0 has no interface number 0 [ 569.424141][ T5289] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.452002][ T5289] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.462376][ T5289] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 569.483562][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.504502][ T5289] usb 4-1: config 0 descriptor?? [ 569.512599][ T1830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.527655][ T1830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.575965][ T1830] bond0 (unregistering): Released all slaves [ 569.857049][ T9533] loop3: detected capacity change from 0 to 256 [ 569.929603][ T9533] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 570.031991][ T9540] loop0: detected capacity change from 0 to 2048 [ 570.069210][ T9540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.502796][ T9352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 571.178105][ T9352] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 571.189166][ T5289] usbhid 4-1:0.1: can't add hid device: -71 [ 571.204582][ T5289] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 571.259431][ T5289] usb 4-1: USB disconnect, device number 7 [ 571.343616][ T9352] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 571.465672][ T9352] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 571.528892][ T9551] loop3: detected capacity change from 0 to 512 [ 571.616847][ T9551] EXT4-fs (loop3): 1 truncate cleaned up [ 571.622734][ T8836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.630325][ T9551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.740120][ T9551] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.851: Directory hole found for htree leaf block 0 [ 571.760441][ T9554] loop0: detected capacity change from 0 to 256 [ 571.793118][ T9554] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 572.632218][ T8846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.094562][ T9342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 573.111970][ T5305] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 573.182856][ T9342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 573.329957][ T1830] hsr_slave_0: left promiscuous mode [ 573.382247][ T1830] hsr_slave_1: left promiscuous mode [ 573.410917][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.449793][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.482451][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.509398][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.552208][ T1830] hsr_slave_0: left promiscuous mode [ 573.571609][ T1830] hsr_slave_1: left promiscuous mode [ 573.593140][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.614728][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.642018][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.666552][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.710352][ T1830] hsr_slave_0: left promiscuous mode [ 573.730223][ T1830] hsr_slave_1: left promiscuous mode [ 573.753031][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.775522][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.782815][ T5305] usb 4-1: device descriptor read/64, error -71 [ 573.795886][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.804781][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.918992][ T1830] veth1_macvtap: left promiscuous mode [ 573.939063][ T1830] veth0_macvtap: left promiscuous mode [ 573.957557][ T1830] veth1_vlan: left promiscuous mode [ 573.965207][ T9576] loop0: detected capacity change from 0 to 2048 [ 573.980922][ T1830] veth0_vlan: left promiscuous mode [ 574.020862][ T5305] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 574.078377][ T1830] veth1_macvtap: left promiscuous mode [ 574.087087][ T1830] veth0_macvtap: left promiscuous mode [ 574.103193][ T1830] veth1_vlan: left promiscuous mode [ 574.114046][ T9576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.128234][ T9576] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.130889][ T1830] veth0_vlan: left promiscuous mode [ 574.281709][ T1830] veth1_macvtap: left promiscuous mode [ 574.300814][ T1830] veth0_macvtap: left promiscuous mode [ 574.318937][ T1830] veth1_vlan: left promiscuous mode [ 574.337051][ T1830] veth0_vlan: left promiscuous mode [ 574.390943][ T5305] usb 4-1: device descriptor read/64, error -71 [ 575.099955][ T5305] usb usb4-port1: attempt power cycle [ 575.104958][ T8836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.440771][ T5305] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 575.461739][ T5305] usb 4-1: device descriptor read/8, error -71 [ 575.715825][ T5305] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 575.762051][ T5305] usb 4-1: device descriptor read/8, error -71 [ 575.891978][ T5305] usb usb4-port1: unable to enumerate USB device [ 576.555686][ T9599] loop0: detected capacity change from 0 to 2048 [ 576.608139][ T9599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.592710][ T1830] team0 (unregistering): Port device team_slave_1 removed [ 577.732940][ T8836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.842232][ T1830] team0 (unregistering): Port device team_slave_0 removed [ 580.097584][ T1830] team0 (unregistering): Port device team_slave_1 removed [ 580.149267][ T1830] team0 (unregistering): Port device team_slave_0 removed [ 581.237408][ T1830] team0 (unregistering): Port device team_slave_1 removed [ 581.293113][ T1830] team0 (unregistering): Port device team_slave_0 removed [ 581.748965][ T9352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.756061][ T9342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 582.208300][ T9342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 583.152472][ T9352] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.223349][ T9656] loop0: detected capacity change from 0 to 256 [ 583.237449][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.244746][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.501883][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.509110][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.926988][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.963508][ T9366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 584.015883][ T9366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 584.131411][ T9366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 584.246117][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.278200][ T9366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 584.316791][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.323999][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.417365][ T9675] pim6reg1: entered promiscuous mode [ 584.428825][ T9675] pim6reg1: entered allmulticast mode [ 584.449475][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.456692][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.498013][ T9342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 584.508861][ T9342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.529456][ T9352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.859313][ T9683] loop0: detected capacity change from 0 to 8 [ 585.003354][ T9352] veth0_vlan: entered promiscuous mode [ 585.102123][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.305546][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.407038][ T9352] veth1_vlan: entered promiscuous mode [ 585.437745][ T9366] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.507572][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.514874][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.556746][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.564164][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.628617][ T9352] veth0_macvtap: entered promiscuous mode [ 585.687830][ T9352] veth1_macvtap: entered promiscuous mode [ 585.869035][ T9366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.922373][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.105476][ T9683] usb usb1: usbfs: process 9683 (syz.0.876) did not claim interface 0 before use [ 586.321834][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.589862][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.790828][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.801823][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.812814][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.859580][ T9352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.993012][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.041215][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.102316][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.139880][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.175615][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.206906][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.259090][ T9352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.345950][ T9352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.397905][ T9352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.453292][ T9352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.498435][ T9352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.754630][ T9342] veth0_vlan: entered promiscuous mode [ 587.886302][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.989423][ T9342] veth1_vlan: entered promiscuous mode [ 588.619369][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.632610][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.733497][ T9746] loop3: detected capacity change from 0 to 256 [ 588.763016][ T9342] veth0_macvtap: entered promiscuous mode [ 588.799936][ T9342] veth1_macvtap: entered promiscuous mode [ 588.856586][ T9366] veth0_vlan: entered promiscuous mode [ 588.948104][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.964764][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.989927][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.010703][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.050661][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.100830][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.123922][ T9750] loop0: detected capacity change from 0 to 2048 [ 589.145746][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.222446][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.243771][ T9750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.257172][ T9750] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.277941][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.506553][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.965143][ T29] audit: type=1800 audit(1726934794.388:218): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.885" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 590.210818][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.224008][ T8836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.242750][ T9366] veth1_vlan: entered promiscuous mode [ 590.270452][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.284665][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.340729][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.357713][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.367888][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.377323][ T9765] loop3: detected capacity change from 0 to 512 [ 590.378823][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.397641][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.408176][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.431383][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.480268][ T9765] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 590.494229][ T9342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.541601][ T9765] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 590.553484][ T9342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.593945][ T9342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.628612][ T9342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.779034][ T9366] veth0_macvtap: entered promiscuous mode [ 590.915659][ T9366] veth1_macvtap: entered promiscuous mode [ 591.050086][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.065524][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.088996][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.098699][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.139506][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.177163][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.215080][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.259087][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.289383][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.328544][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.373799][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.308857][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.329399][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.414341][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.446128][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.479312][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.498369][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.538649][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.560037][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.589335][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.610321][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.645149][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.674041][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.718596][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.758421][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.766019][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.792846][ T9787] bridge0: entered allmulticast mode [ 592.850881][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.858068][ T9788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.865517][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.872652][ T9788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.894599][ T9788] bridge0: entered promiscuous mode [ 592.956077][ T5964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.003114][ T9366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.013847][ T5964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.050204][ T9366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.077636][ T9366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.120689][ T9366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.550964][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.558925][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.465560][ T5664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.537692][ T5664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.705720][ T9812] loop2: detected capacity change from 0 to 2048 [ 596.201662][ T9828] overlay: Unknown parameter '/' [ 596.626603][ T9812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.648530][ T9812] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.792592][ T9832] loop5: detected capacity change from 0 to 256 [ 598.109241][ T29] audit: type=1800 audit(1726934802.508:219): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.896" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 598.292995][ T9848] loop3: detected capacity change from 0 to 512 [ 598.358601][ T9848] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 598.434305][ T9848] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 598.504650][ T9352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.925687][ T9860] overlayfs: overlapping lowerdir path [ 600.202880][ T932] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 600.426809][ T9883] pim6reg1: entered promiscuous mode [ 600.432450][ T9883] pim6reg1: entered allmulticast mode [ 600.468139][ T9888] loop4: detected capacity change from 0 to 512 [ 600.519416][ T932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.803028][ T932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 600.839105][ T932] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 600.941354][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.409720][ T9888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.426922][ T9901] loop2: detected capacity change from 0 to 2048 [ 601.443938][ T9888] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.530757][ T932] usb 2-1: config 0 descriptor?? [ 601.539013][ T932] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 601.552080][ T932] dvb-usb: bulk message failed: -22 (3/0) [ 601.554421][ T9901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.621158][ T9901] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.694535][ T932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 601.956113][ T932] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 601.966160][ T932] usb 2-1: media controller created [ 601.975100][ T932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.999475][ T932] dvb-usb: bulk message failed: -22 (6/0) [ 602.012215][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.116886][ T9917] bridge0: port 3(bond0) entered blocking state [ 602.153160][ T9917] bridge0: port 3(bond0) entered disabled state [ 602.171549][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.186363][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.237495][ T9917] bond0: entered allmulticast mode [ 602.250392][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.268953][ T932] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 602.290303][ T9917] bond_slave_0: entered allmulticast mode [ 602.309274][ T932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 602.343791][ T9917] bond_slave_1: entered allmulticast mode [ 602.396876][ T9917] bond0: entered promiscuous mode [ 602.410427][ T932] dvb-usb: schedule remote query interval to 150 msecs. [ 602.438425][ T9917] bond_slave_0: entered promiscuous mode [ 602.453651][ T932] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 602.479482][ T9917] bond_slave_1: entered promiscuous mode [ 602.497259][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.573874][ T9917] bridge0: port 3(bond0) entered blocking state [ 602.580934][ T9917] bridge0: port 3(bond0) entered forwarding state [ 602.613524][ T932] dvb-usb: bulk message failed: -22 (1/0) [ 602.620416][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.630069][ T932] dvb-usb: error while querying for an remote control event. [ 602.686543][ T8] usb 2-1: USB disconnect, device number 7 [ 602.856262][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 603.461685][ T9342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.539401][ T9942] overlayfs: overlapping lowerdir path [ 606.939312][ T9960] loop0: detected capacity change from 0 to 1024 [ 607.876828][ T9960] bio_check_eod: 31 callbacks suppressed [ 607.876875][ T9960] syz.0.923: attempt to access beyond end of device [ 607.876875][ T9960] loop0: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 608.415530][ T9352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.855647][ T9994] loop4: detected capacity change from 0 to 512 [ 611.965717][ T9994] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 612.387330][ T9979] coredump: 167(syz.5.928): interrupted: fatal signal pending [ 612.395483][ T9979] coredump: 167(syz.5.928): written to core: VMAs: 34, size 97419264; core: 32842694 bytes, pos 70250496 [ 612.629763][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 612.668785][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 612.678200][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 612.708044][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 612.761073][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 612.779442][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 613.591144][T10001] loop4: detected capacity change from 0 to 512 [ 613.722551][T10001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.758492][T10001] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.917375][ T8844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 613.928195][ T8844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 613.978243][ T8844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 613.992507][ T8844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 614.002617][ T8844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 614.011953][ T8844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 614.919382][ T5239] Bluetooth: hci5: command tx timeout [ 616.002085][T10014] syz.5.935[10014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.002233][T10014] syz.5.935[10014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.193267][ T5239] Bluetooth: hci6: command tx timeout [ 616.302721][ T9342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.322027][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.426752][T10021] loop2: detected capacity change from 0 to 512 [ 616.591073][T10021] EXT4-fs (loop2): 1 truncate cleaned up [ 616.598198][T10021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.617345][T10021] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.939: Directory hole found for htree leaf block 0 [ 616.674077][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.720479][ T9352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.806784][T10026] loop4: detected capacity change from 0 to 1024 [ 617.014695][ T8844] Bluetooth: hci5: command tx timeout [ 617.525561][T10026] syz.4.938: attempt to access beyond end of device [ 617.525561][T10026] loop4: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 617.749334][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.426867][ T5239] Bluetooth: hci6: command tx timeout [ 618.561504][T10033] loop2: detected capacity change from 0 to 512 [ 618.748579][T10033] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 618.775495][T10033] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 619.104768][ T5239] Bluetooth: hci5: command tx timeout [ 619.685590][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.731947][T10043] loop4: detected capacity change from 0 to 512 [ 619.747126][T10043] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 620.510940][ T5239] Bluetooth: hci6: command tx timeout [ 621.066086][T10005] chnl_net:caif_netlink_parms(): no params data found [ 621.151998][ T5239] Bluetooth: hci5: command tx timeout [ 622.376446][T10049] syz.2.945[10049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 622.376585][T10049] syz.2.945[10049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 622.429174][ T81] bridge_slave_1: left allmulticast mode [ 622.472234][ T81] bridge_slave_1: left promiscuous mode [ 622.478055][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.617413][ T5239] Bluetooth: hci6: command tx timeout [ 622.754677][ T81] bridge_slave_0: left allmulticast mode [ 622.760803][ T81] bridge_slave_0: left promiscuous mode [ 622.772776][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.944240][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.950759][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.985112][T10091] loop4: detected capacity change from 0 to 128 [ 625.001341][T10091] ext3: Unknown parameter 'fsuuid' [ 625.711216][T10099] overlay: Unknown parameter '/' [ 625.958372][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 625.964848][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 626.134454][T10103] netlink: 40 bytes leftover after parsing attributes in process `syz.5.957'. [ 626.558069][T10099] input: syz0 as /devices/virtual/input/input29 [ 626.598463][T10104] loop4: detected capacity change from 0 to 256 [ 627.373369][T10111] loop0: detected capacity change from 0 to 256 [ 627.418162][T10111] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 628.019766][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.285854][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.314734][ T81] bond0 (unregistering): Released all slaves [ 628.871073][ T9997] chnl_net:caif_netlink_parms(): no params data found [ 628.926179][T10124] loop4: detected capacity change from 0 to 512 [ 628.941988][T10124] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 630.648829][ T8844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 630.660435][ T8844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 630.670174][ T8844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 630.751930][ T8844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 630.759587][ T8844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 630.772975][ T8844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 631.173556][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.256743][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.269738][T10005] bridge_slave_0: entered allmulticast mode [ 631.293811][T10005] bridge_slave_0: entered promiscuous mode [ 632.433944][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.454390][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.470941][T10005] bridge_slave_1: entered allmulticast mode [ 632.478120][T10005] bridge_slave_1: entered promiscuous mode [ 632.856944][ T8844] Bluetooth: hci1: command tx timeout [ 632.952445][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.165142][T10182] overlay: Unknown parameter '/' [ 633.185095][ T81] hsr_slave_0: left promiscuous mode [ 633.206352][ T81] hsr_slave_1: left promiscuous mode [ 633.241645][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.267369][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.374136][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.418285][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.855092][ T81] veth1_macvtap: left promiscuous mode [ 633.979408][ T81] veth0_macvtap: left promiscuous mode [ 634.098800][ T81] veth1_vlan: left promiscuous mode [ 634.219530][ T81] veth0_vlan: left promiscuous mode [ 634.940755][ T8844] Bluetooth: hci1: command tx timeout [ 635.423878][T10199] syz.0.977[10199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 635.423983][T10199] syz.0.977[10199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 636.513415][ T81] team0 (unregistering): Port device team_slave_1 removed [ 636.643537][ T81] team0 (unregistering): Port device team_slave_0 removed [ 636.996530][ T8844] Bluetooth: hci1: command tx timeout [ 637.588318][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.607190][ T9997] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.617687][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.647783][ T9997] bridge_slave_0: entered allmulticast mode [ 637.664826][ T9997] bridge_slave_0: entered promiscuous mode [ 638.039337][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.090198][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.114424][ T9997] bridge_slave_1: entered allmulticast mode [ 638.448320][ T9997] bridge_slave_1: entered promiscuous mode [ 639.610757][ T8844] Bluetooth: hci1: command tx timeout [ 639.631222][T10005] team0: Port device team_slave_0 added [ 639.748274][T10005] team0: Port device team_slave_1 added [ 639.841928][ T9997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.961872][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.987781][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.045280][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.103466][ T9997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.169239][ T9997] team0: Port device team_slave_0 added [ 640.189898][ T9997] team0: Port device team_slave_1 added [ 640.242932][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.268093][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.345958][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.229671][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.258141][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.314168][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 641.325714][ T9997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.763549][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.770722][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.797140][ T9997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.991594][T10245] syzkaller1: entered promiscuous mode [ 642.997127][T10245] syzkaller1: entered allmulticast mode [ 643.201803][ T9997] hsr_slave_0: entered promiscuous mode [ 643.232774][ T9997] hsr_slave_1: entered promiscuous mode [ 643.249269][ T9997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.285147][ T9997] Cannot create hsr debugfs directory [ 643.353291][T10005] hsr_slave_0: entered promiscuous mode [ 643.361552][T10005] hsr_slave_1: entered promiscuous mode [ 643.370631][T10005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.378213][T10005] Cannot create hsr debugfs directory [ 643.556314][T10142] chnl_net:caif_netlink_parms(): no params data found [ 643.929479][T10273] overlay: Unknown parameter '/' [ 644.091326][T10273] input: syz0 as /devices/virtual/input/input30 [ 644.363264][ T81] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.780466][ T81] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.805918][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.857119][T10142] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.864631][T10142] bridge_slave_0: entered allmulticast mode [ 644.872033][T10142] bridge_slave_0: entered promiscuous mode [ 644.880496][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.887691][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.895112][T10142] bridge_slave_1: entered allmulticast mode [ 644.904456][T10142] bridge_slave_1: entered promiscuous mode [ 645.866661][ T81] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.959694][T10142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.264370][ T81] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.587439][T10142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.289220][T10142] team0: Port device team_slave_0 added [ 648.519957][T10270] coredump: 70(syz.2.989): written to core: VMAs: 34, size 97419264; core: 60023750 bytes, pos 97427456 [ 648.772673][T10142] team0: Port device team_slave_1 added [ 649.965062][T10328] loop0: detected capacity change from 0 to 256 [ 650.057977][T10142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.089994][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.278481][T10328] FAT-fs (loop0): Directory bread(block 64) failed [ 650.424066][T10328] FAT-fs (loop0): Directory bread(block 65) failed [ 650.549529][T10328] FAT-fs (loop0): Directory bread(block 66) failed [ 650.708817][T10142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.746032][T10328] FAT-fs (loop0): Directory bread(block 67) failed [ 651.102586][T10328] FAT-fs (loop0): Directory bread(block 68) failed [ 651.111560][T10333] syzkaller1: entered promiscuous mode [ 651.120776][T10333] syzkaller1: entered allmulticast mode [ 651.149584][T10328] FAT-fs (loop0): Directory bread(block 69) failed [ 651.250490][T10328] FAT-fs (loop0): Directory bread(block 70) failed [ 651.332512][T10328] FAT-fs (loop0): Directory bread(block 71) failed [ 651.419053][T10328] FAT-fs (loop0): Directory bread(block 72) failed [ 651.494518][T10328] FAT-fs (loop0): Directory bread(block 73) failed [ 651.533351][T10323] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.578400][T10323] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.639217][T10323] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.715117][T10323] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.820372][T10142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.838959][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.878152][T10142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.068802][T10323] syz.0.997: attempt to access beyond end of device [ 652.068802][T10323] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 652.357535][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.647910][T10352] overlay: Unknown parameter '/' [ 652.712147][T10353] input: syz0 as /devices/virtual/input/input31 [ 652.763226][T10142] hsr_slave_0: entered promiscuous mode [ 652.778369][T10142] hsr_slave_1: entered promiscuous mode [ 652.804466][T10142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.812592][T10142] Cannot create hsr debugfs directory [ 653.002651][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.206433][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.444873][ T81] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.636335][ T9997] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 653.720994][ T9997] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 653.763635][ T9997] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 653.886424][ T9997] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 653.974581][T10358] loop4: detected capacity change from 0 to 32768 [ 654.173786][ T81] bridge_slave_1: left allmulticast mode [ 654.179518][ T81] bridge_slave_1: left promiscuous mode [ 654.191842][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.241754][ T81] bridge_slave_0: left allmulticast mode [ 654.247486][ T81] bridge_slave_0: left promiscuous mode [ 654.251890][T10360] loop2: detected capacity change from 0 to 32768 [ 654.261337][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.283191][T10360] bcachefs (/dev/loop2): error reading superblock: block size (0) smaller than device block size (512) [ 654.309173][T10360] bcachefs: bch2_fs_get_tree() error: block_size_too_small [ 654.321857][ T81] bridge_slave_1: left allmulticast mode [ 654.330659][ T81] bridge_slave_1: left promiscuous mode [ 654.362435][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.400298][ T81] bridge_slave_0: left allmulticast mode [ 654.406554][ T81] bridge_slave_0: left promiscuous mode [ 654.414309][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.042177][T10385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1011'. [ 658.064584][T10385] No control pipe specified [ 658.726619][T10379] loop2: detected capacity change from 0 to 40427 [ 658.887881][T10379] F2FS-fs (loop2): Found nat_bits in checkpoint [ 658.988459][T10379] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 659.148117][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.176071][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.201106][ T81] bond0 (unregistering): Released all slaves [ 659.416968][T10396] overlay: Unknown parameter '/' [ 659.453612][T10396] input: syz0 as /devices/virtual/input/input32 [ 660.111771][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.160195][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.184706][ T81] bond0 (unregistering): Released all slaves [ 660.724260][T10402] loop4: detected capacity change from 0 to 1764 [ 662.786727][T10418] loop4: detected capacity change from 0 to 512 [ 662.814755][T10418] EXT4-fs: Ignoring removed orlov option [ 662.859938][T10418] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 662.870345][T10419] bridge_slave_0: left allmulticast mode [ 662.914994][T10419] bridge_slave_0: left promiscuous mode [ 662.922467][T10418] EXT4-fs (loop4): 1 truncate cleaned up [ 662.932306][T10418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.952899][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.014506][T10419] bridge_slave_1: left allmulticast mode [ 663.027854][T10419] bridge_slave_1: left promiscuous mode [ 663.034236][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.089898][T10419] bond0: (slave bond_slave_0): Releasing backup interface [ 663.117562][T10419] bond0: (slave bond_slave_1): Releasing backup interface [ 663.179367][T10419] team0: Port device team_slave_0 removed [ 663.202436][T10419] team0: Port device team_slave_1 removed [ 663.218831][T10419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.229273][ T5289] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 663.239022][T10419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.248760][T10419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.259901][T10419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.287117][ T9342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.380643][ T5289] usb 1-1: Using ep0 maxpacket: 32 [ 663.401081][ T5289] usb 1-1: config 1 interface 0 has no altsetting 0 [ 663.410830][ T5289] usb 1-1: language id specifier not provided by device, defaulting to English [ 663.465039][ T5289] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 663.469999][ T9997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.474427][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.532846][ T5289] usb 1-1: Product: 棸呝漕姞㻐漊ꏙࠖ曀埶間䧢⣒棝ꃢ얭ᔬ㝗﹬薞瑩黇︀⛬⵬ᕶ辔棏鰭㦲죑ﱺ [ 663.570840][ T5289] usb 1-1: SerialNumber: ﹋鉝慥뢺佪촷繯榣愼苳譋狳椦㾜ჹ핈達e㣫駵좦ꋭ燎 [ 663.589953][ T81] hsr_slave_0: left promiscuous mode [ 663.602145][ T81] hsr_slave_1: left promiscuous mode [ 663.612213][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.619814][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.657217][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.667975][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.693977][T10439] loop4: detected capacity change from 0 to 2048 [ 663.746185][ T81] hsr_slave_0: left promiscuous mode [ 663.752753][ T81] hsr_slave_1: left promiscuous mode [ 663.759291][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.767476][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.776527][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.786382][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.851840][ T81] veth1_macvtap: left promiscuous mode [ 663.857981][ T81] veth0_macvtap: left promiscuous mode [ 663.864400][ T81] veth1_vlan: left promiscuous mode [ 663.870263][ T81] veth0_vlan: left promiscuous mode [ 663.878372][ T81] veth1_macvtap: left promiscuous mode [ 663.884728][ T81] veth0_macvtap: left promiscuous mode [ 663.940866][ T81] veth1_vlan: left promiscuous mode [ 663.952101][ T81] veth0_vlan: left promiscuous mode [ 663.974910][T10443] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 664.044660][T10444] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1022'. [ 664.059260][T10444] No control pipe specified [ 664.175744][T10427] loop0: detected capacity change from 0 to 128 [ 664.453808][T10427] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 664.828018][T10427] sysv_free_block: trying to free block not in datazone [ 664.974262][T10427] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 666.160962][ T5289] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 45 proto 1 vid 0x0525 pid 0xA4A8 [ 666.184393][ T5289] usb 1-1: USB disconnect, device number 27 [ 666.199505][ T5289] usblp0: removed [ 666.662951][T10460] loop4: detected capacity change from 0 to 2048 [ 666.739475][T10460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.776404][T10460] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.816205][ T9342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.922062][T10470] loop4: detected capacity change from 0 to 2048 [ 668.029395][T10458] loop2: detected capacity change from 0 to 32768 [ 668.711970][ T8844] Bluetooth: hci4: unexpected event 0x1c length: 7 > 5 [ 668.767060][T10458] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 669.263182][T10458] XFS (loop2): Ending clean mount [ 669.326030][ T932] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 [ 669.346581][ T932] XFS (loop2): Unmount and run xfs_repair [ 669.373076][ T932] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 669.391182][ T932] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 669.430825][ T932] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 669.448300][ T932] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 669.468660][ T932] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 669.522517][ T81] team0 (unregistering): Port device team_slave_1 removed [ 669.924915][ T81] team0 (unregistering): Port device team_slave_0 removed [ 670.202642][ T932] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 670.214376][ T932] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 670.223542][ T932] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 670.232571][ T932] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 670.250807][T10458] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74 [ 670.315366][T10458] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 670.330346][T10458] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 670.341640][T10458] syz.2.1026 (10458) used greatest stack depth: 18072 bytes left [ 670.397528][ T9352] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 670.977943][ T5307] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 671.155460][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 671.163788][ T5307] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 671.200860][ T5307] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 671.210278][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.239390][ T5307] usb 3-1: Product: syz [ 671.244421][ T5307] usb 3-1: Manufacturer: syz [ 671.249044][ T5307] usb 3-1: SerialNumber: syz [ 671.291338][ T5307] usb 3-1: config 0 descriptor?? [ 671.517074][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 671.531752][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 671.549028][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 671.560183][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 671.578872][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 671.586501][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 671.704931][ T81] team0 (unregistering): Port device team_slave_1 removed [ 671.763034][ T81] team0 (unregistering): Port device team_slave_0 removed [ 672.034258][ T8840] Bluetooth: hci0: command 0x0406 tx timeout [ 672.111438][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 672.501291][T10005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 672.529728][T10005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 672.563244][T10005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 673.470794][T10005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 673.644125][ T5239] Bluetooth: hci3: command tx timeout [ 673.813018][T10319] usb 3-1: USB disconnect, device number 11 [ 673.890712][ T5307] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 674.035073][T10518] loop2: detected capacity change from 0 to 1024 [ 674.063218][ T5307] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 674.074063][T10518] hfsplus: unable to parse mount options [ 674.084588][ T5307] usb 5-1: config 0 has no interface number 0 [ 674.144633][ T5307] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.216618][ T5307] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.311183][ T5307] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 674.328323][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.382534][ T5307] usb 5-1: config 0 descriptor?? [ 674.556834][T10526] loop2: detected capacity change from 0 to 2048 [ 674.665575][T10526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.724616][T10493] chnl_net:caif_netlink_parms(): no params data found [ 674.750945][T10526] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.976348][ T8844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 674.989246][ T8844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 674.997381][ T8844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 675.005991][ T8844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 675.019685][ T8844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 675.027344][ T8844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 675.084553][T10505] loop4: detected capacity change from 0 to 256 [ 675.103076][ T5307] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.000D/input/input33 [ 675.473070][T10142] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 675.540232][T10505] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 675.578808][T10142] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 675.711089][ T8844] Bluetooth: hci3: command tx timeout [ 675.724980][T10507] loop0: detected capacity change from 0 to 32768 [ 675.810685][T10507] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1035 (10507) [ 675.817572][ T9352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.840310][ T5307] holtek_kbd 0003:04D9:A055.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 675.882596][T10142] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 675.948178][T10507] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 675.960805][T10142] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 676.001845][T10507] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 676.031054][T10507] BTRFS info (device loop0): using free-space-tree [ 676.053997][T10493] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.075683][T10493] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.099808][T10493] bridge_slave_0: entered allmulticast mode [ 676.151925][T10493] bridge_slave_0: entered promiscuous mode [ 676.162008][T10493] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.169222][T10493] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.176692][T10493] bridge_slave_1: entered allmulticast mode [ 676.183919][T10493] bridge_slave_1: entered promiscuous mode [ 676.260873][ T5307] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 676.766613][ T5307] usb 5-1: device descriptor read/64, error -32 [ 677.049434][T10493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.148944][ T8844] Bluetooth: hci5: command tx timeout [ 677.508756][T10493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.785667][ T8836] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 677.807813][T10590] loop4: detected capacity change from 0 to 2048 [ 677.874981][ T8844] Bluetooth: hci3: command tx timeout [ 677.883653][T10493] team0: Port device team_slave_0 added [ 677.967871][T10493] team0: Port device team_slave_1 added [ 678.417943][ T5305] usb 5-1: USB disconnect, device number 17 [ 679.057401][T10493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.070660][T10493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.117315][T10493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.183354][T10493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.190351][T10493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.241849][ T8844] Bluetooth: hci5: command tx timeout [ 679.248112][T10493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.612088][T10612] loop0: detected capacity change from 0 to 16 [ 679.619171][T10612] erofs: Unknown parameter '/dev/video2' [ 679.950740][ T8844] Bluetooth: hci3: command tx timeout [ 679.973212][T10493] hsr_slave_0: entered promiscuous mode [ 680.027707][T10493] hsr_slave_1: entered promiscuous mode [ 680.050849][T10493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.058436][T10493] Cannot create hsr debugfs directory [ 680.073251][T10622] loop4: detected capacity change from 0 to 2048 [ 680.127248][T10622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.144426][T10535] chnl_net:caif_netlink_parms(): no params data found [ 680.218116][T10622] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.850634][ T29] audit: type=1800 audit(1726934885.268:220): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1047" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 681.244337][ T9342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.311088][ T8844] Bluetooth: hci5: command tx timeout [ 681.482098][T10535] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.489253][T10535] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.535769][T10535] bridge_slave_0: entered allmulticast mode [ 681.576437][T10535] bridge_slave_0: entered promiscuous mode [ 681.685042][T10535] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.694092][T10535] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.704972][T10535] bridge_slave_1: entered allmulticast mode [ 681.718919][T10535] bridge_slave_1: entered promiscuous mode [ 681.874384][T10142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.714038][T10668] loop0: detected capacity change from 0 to 4096 [ 682.865004][T10535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.096000][T10535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.120127][T10677] loop2: detected capacity change from 0 to 2048 [ 683.411356][ T8844] Bluetooth: hci5: command tx timeout [ 683.580021][T10142] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.631140][ T29] audit: type=1804 audit(1726934888.048:221): pid=10685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1053" name="/newroot/93/file0/file1" dev="loop0" ino=30 res=1 errno=0 [ 684.508804][T10679] syzkaller1: entered promiscuous mode [ 684.514582][T10679] syzkaller1: entered allmulticast mode [ 684.666601][T10535] team0: Port device team_slave_0 added [ 684.734409][T10535] team0: Port device team_slave_1 added [ 684.835323][T10702] loop0: detected capacity change from 0 to 4096 [ 684.955440][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.962642][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.987060][T10710] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 685.011827][T10708] loop4: detected capacity change from 0 to 2048 [ 685.020317][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.027460][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.101121][T10708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.135530][T10708] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.184294][T10535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.202015][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.427298][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.434445][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.582693][T10535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.064239][ T9342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.114436][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 686.291830][T10535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.299016][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.398236][T10535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.526844][T10722] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1062'. [ 686.543313][T10722] No control pipe specified [ 687.054789][T10723] loop0: detected capacity change from 0 to 256 [ 687.083935][T10142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.395925][T10535] hsr_slave_0: entered promiscuous mode [ 687.679023][T10535] hsr_slave_1: entered promiscuous mode [ 687.784013][T10735] loop2: detected capacity change from 0 to 1024 [ 687.796668][T10735] syz.2.1063: attempt to access beyond end of device [ 687.796668][T10735] loop2: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 687.817817][T10535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.827085][T10535] Cannot create hsr debugfs directory [ 688.970240][ T62] bridge_slave_1: left allmulticast mode [ 689.012624][ T62] bridge_slave_1: left promiscuous mode [ 689.053941][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.105618][ T62] bridge_slave_0: left allmulticast mode [ 689.126566][ T62] bridge_slave_0: left promiscuous mode [ 689.171522][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.219959][T10751] loop0: detected capacity change from 0 to 8192 [ 689.261663][ T62] bridge_slave_1: left allmulticast mode [ 689.267365][ T62] bridge_slave_1: left promiscuous mode [ 689.273526][T10751] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 689.286076][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.308773][T10757] loop2: detected capacity change from 0 to 64 [ 689.393834][T10757] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 689.570355][ T62] bridge_slave_0: left allmulticast mode [ 689.610765][ T62] bridge_slave_0: left promiscuous mode [ 689.616641][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.802274][T10764] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1067'. [ 690.556159][T10748] loop4: detected capacity change from 0 to 32768 [ 690.566116][T10748] bcachefs (/dev/loop4): error reading superblock: block size (0) smaller than device block size (512) [ 690.606419][T10748] bcachefs: bch2_fs_get_tree() error: block_size_too_small [ 691.935179][T10766] loop2: detected capacity change from 0 to 32768 [ 692.026939][T10782] loop0: detected capacity change from 0 to 256 [ 692.456137][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 692.468829][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 692.485376][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 692.495585][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 692.509392][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 692.520761][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 693.207287][T10799] loop4: detected capacity change from 0 to 512 [ 693.219369][T10799] EXT4-fs: Ignoring removed mblk_io_submit option [ 693.333000][T10801] loop2: detected capacity change from 0 to 1024 [ 694.150839][T10799] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 694.191758][T10801] syz.2.1075: attempt to access beyond end of device [ 694.191758][T10801] loop2: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 694.208050][T10799] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1078: corrupted in-inode xattr: e_value out of bounds [ 694.314476][T10799] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1078: couldn't read orphan inode 15 (err -117) [ 694.356476][T10799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.491487][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.560019][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.601792][ T5239] Bluetooth: hci6: command tx timeout [ 694.672089][ T62] bond0 (unregistering): Released all slaves [ 695.931118][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.041103][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.057108][T10819] loop0: detected capacity change from 0 to 32768 [ 696.073199][T10819] (syz.0.1081,10819,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 696.083291][T10819] (syz.0.1081,10819,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 696.171262][ T62] bond0 (unregistering): Released all slaves [ 696.386653][ T9342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.663779][T10822] loop4: detected capacity change from 0 to 512 [ 696.682634][ T5239] Bluetooth: hci6: command tx timeout [ 696.716496][T10822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.798686][T10822] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.087975][T10830] loop0: detected capacity change from 0 to 1024 [ 697.122685][T10830] EXT4-fs: Ignoring removed orlov option [ 697.128405][T10830] EXT4-fs: Ignoring removed orlov option [ 697.188193][ T62] hsr_slave_0: left promiscuous mode [ 697.192539][T10830] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 697.200334][T10830] EXT4-fs (loop0): mount failed [ 697.229116][ T62] hsr_slave_1: left promiscuous mode [ 697.281505][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.341591][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.366507][ T62] hsr_slave_0: left promiscuous mode [ 697.438301][ T62] hsr_slave_1: left promiscuous mode [ 697.451040][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.481116][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.888738][T10829] loop2: detected capacity change from 0 to 32768 [ 697.963398][ T62] team0 (unregistering): Port device team_slave_1 removed [ 698.023961][ T62] team0 (unregistering): Port device team_slave_0 removed [ 698.772738][ T5239] Bluetooth: hci6: command tx timeout [ 699.366814][T10842] netlink: 'syz.2.1086': attribute type 1 has an invalid length. [ 699.400794][T10842] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.1086'. [ 699.409966][T10842] netlink: 'syz.2.1086': attribute type 2 has an invalid length. [ 699.447743][T10842] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1086'. [ 699.504756][ T62] team0 (unregistering): Port device team_slave_1 removed [ 699.609930][ T62] team0 (unregistering): Port device team_slave_0 removed [ 700.331112][T10856] loop0: detected capacity change from 0 to 1024 [ 700.366768][T10856] syz.0.1089: attempt to access beyond end of device [ 700.366768][T10856] loop0: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 700.832527][ T5239] Bluetooth: hci6: command tx timeout [ 701.076123][T10861] loop0: detected capacity change from 0 to 512 [ 701.115444][T10861] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 701.237346][T10493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 701.268057][T10870] loop2: detected capacity change from 0 to 512 [ 701.275294][T10870] EXT4-fs: Ignoring removed mblk_io_submit option [ 701.326976][ T9342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.347781][T10861] EXT4-fs (loop0): 1 truncate cleaned up [ 701.362634][T10493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 701.369727][T10870] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 701.388127][T10861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.520690][T10870] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1091: corrupted in-inode xattr: e_value out of bounds [ 701.638306][T10870] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1091: couldn't read orphan inode 15 (err -117) [ 701.672617][T10493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 701.694137][T10870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.703902][T10493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 702.501063][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 702.510825][T10879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1092'. [ 702.718234][T10786] chnl_net:caif_netlink_parms(): no params data found [ 703.054686][T10786] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.062871][T10786] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.070378][T10786] bridge_slave_0: entered allmulticast mode [ 703.078062][T10786] bridge_slave_0: entered promiscuous mode [ 703.115729][T10786] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.124037][T10786] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.132424][T10786] bridge_slave_1: entered allmulticast mode [ 703.139710][T10786] bridge_slave_1: entered promiscuous mode [ 703.203384][T10786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.247363][T10786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.338756][T10786] team0: Port device team_slave_0 added [ 703.376042][T10786] team0: Port device team_slave_1 added [ 703.449949][T10786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.464504][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.520560][T10786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.636351][T10786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.648948][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.685235][T10786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.712149][T10535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 703.724904][T10535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 703.796516][T10535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 703.808701][T10535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 703.977686][T10786] hsr_slave_0: entered promiscuous mode [ 703.989581][T10786] hsr_slave_1: entered promiscuous mode [ 704.003895][T10786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.012027][T10786] Cannot create hsr debugfs directory [ 704.026381][T10493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.084233][T10493] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.143684][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.150868][ T5720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.173466][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.180702][ T5720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.205577][ T8836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.305266][T10892] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 704.375998][T10892] team0: Failed to send options change via netlink (err -105) [ 704.406217][ T9352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.420833][T10892] team0: Port device netdevsim0 added [ 704.753033][T10902] loop2: detected capacity change from 0 to 1024 [ 704.760268][T10902] EXT4-fs: Ignoring removed orlov option [ 704.766275][T10902] EXT4-fs: Ignoring removed orlov option [ 704.957025][T10902] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 705.006617][T10902] EXT4-fs (loop2): mount failed [ 705.062234][T10493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.823638][ T62] bridge_slave_1: left allmulticast mode [ 705.851324][ T62] bridge_slave_1: left promiscuous mode [ 705.857319][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.930234][ T62] bridge_slave_0: left allmulticast mode [ 705.950776][ T62] bridge_slave_0: left promiscuous mode [ 705.961069][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.179801][T10925] loop4: detected capacity change from 0 to 256 [ 706.979584][ T29] audit: type=1326 audit(1726934911.358:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f57def9 code=0x7ffc0000 [ 707.446580][ T29] audit: type=1326 audit(1726934911.368:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f57def9 code=0x7ffc0000 [ 707.576453][ T29] audit: type=1326 audit(1726934911.368:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f286f57def9 code=0x7ffc0000 [ 707.662140][ T29] audit: type=1326 audit(1726934911.368:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f57def9 code=0x7ffc0000 [ 707.688213][ T29] audit: type=1326 audit(1726934911.368:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f57def9 code=0x7ffc0000 [ 707.721023][ T29] audit: type=1326 audit(1726934911.378:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f286f57def9 code=0x7ffc0000 [ 707.758233][ T29] audit: type=1326 audit(1726934911.378:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f57def9 code=0x7ffc0000 [ 707.777572][T10944] loop0: detected capacity change from 0 to 512 [ 707.800721][ T29] audit: type=1326 audit(1726934911.378:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f57def9 code=0x7ffc0000 [ 707.876107][T10944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.880697][ T29] audit: type=1326 audit(1726934911.378:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f286f57def9 code=0x7ffc0000 [ 707.910741][T10944] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.436989][T10957] loop2: detected capacity change from 0 to 512 [ 708.447854][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.479689][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.524732][T10957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.555044][T10957] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.570485][ T62] bond0 (unregistering): Released all slaves [ 708.733289][ T29] audit: type=1804 audit(1726934913.148:231): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1103" name="/newroot/58/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 708.901870][ T62] hsr_slave_0: left promiscuous mode [ 708.919441][ T62] hsr_slave_1: left promiscuous mode [ 708.926703][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.938691][ T9352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.962791][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.354166][T10974] loop4: detected capacity change from 0 to 8 [ 710.365017][T10974] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 710.563884][T10974] cramfs: Error -5 while decompressing! [ 710.570030][T10974] cramfs: ffffffff9a4d8688(26)->ffff888043f14000(4096) [ 710.577390][T10974] cramfs: Error -3 while decompressing! [ 710.583108][T10974] cramfs: ffffffff9a4d86a2(26)->ffff888043f15000(4096) [ 710.590191][T10974] cramfs: Error -3 while decompressing! [ 710.595884][T10974] cramfs: ffffffff9a4d86bc(16)->ffff888043f16000(4096) [ 710.603540][T10974] cramfs: Error -5 while decompressing! [ 710.609289][T10974] cramfs: ffffffff9a4d8688(26)->ffff888043f14000(4096) [ 711.057107][ T62] team0 (unregistering): Port device team_slave_1 removed [ 711.215120][ T62] team0 (unregistering): Port device team_slave_0 removed [ 711.719132][T10952] bridge0: port 3(bond0) entered blocking state [ 711.738374][T10952] bridge0: port 3(bond0) entered disabled state [ 711.748920][T10952] bond0: entered allmulticast mode [ 711.757792][T10952] bond_slave_0: entered allmulticast mode [ 711.764564][T10952] bond_slave_1: entered allmulticast mode [ 711.775057][T10952] bond0: entered promiscuous mode [ 711.780188][T10952] bond_slave_0: entered promiscuous mode [ 711.792829][T10952] bond_slave_1: entered promiscuous mode [ 711.799899][T10952] bridge0: port 3(bond0) entered blocking state [ 711.806238][T10952] bridge0: port 3(bond0) entered forwarding state [ 711.814099][T10972] netlink: 'syz.2.1107': attribute type 10 has an invalid length. [ 711.830870][T10972] team0: Port device netdevsim0 added [ 712.164802][T10493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.328001][ T29] audit: type=1326 audit(1726934916.738:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7b7def9 code=0x7ffc0000 [ 712.856946][T10996] loop4: detected capacity change from 0 to 1024 [ 712.878919][T10535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.914859][ T29] audit: type=1326 audit(1726934916.738:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7b7def9 code=0x7ffc0000 [ 712.972656][T10996] EXT4-fs: Ignoring removed orlov option [ 712.978428][T10996] EXT4-fs: Ignoring removed orlov option [ 713.016810][ T29] audit: type=1326 audit(1726934916.738:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8cd7b7def9 code=0x7ffc0000 [ 713.041718][ T29] audit: type=1326 audit(1726934916.748:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7b7def9 code=0x7ffc0000 [ 713.109740][T10535] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.116904][T10996] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 713.127929][T10996] EXT4-fs (loop4): mount failed [ 713.134432][ T29] audit: type=1326 audit(1726934916.748:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7b7def9 code=0x7ffc0000 [ 713.158078][ T29] audit: type=1326 audit(1726934916.748:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8cd7b7def9 code=0x7ffc0000 [ 713.267995][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.275226][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.344464][ T29] audit: type=1326 audit(1726934916.748:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7b7def9 code=0x7ffc0000 [ 713.378006][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.385267][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.438114][T10493] veth0_vlan: entered promiscuous mode [ 713.447203][ T29] audit: type=1326 audit(1726934916.748:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7b7def9 code=0x7ffc0000 [ 713.449868][ T8836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.566586][T10493] veth1_vlan: entered promiscuous mode [ 713.570841][ T29] audit: type=1326 audit(1726934916.748:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8cd7b7def9 code=0x7ffc0000 [ 714.003363][T11008] syz.0.1113[11008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 714.003513][T11008] syz.0.1113[11008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 714.012552][T10786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 714.094774][T10493] veth0_macvtap: entered promiscuous mode [ 714.173156][T10786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 714.186785][T10786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 714.212729][T10786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 714.253559][T10493] veth1_macvtap: entered promiscuous mode [ 714.356679][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.377994][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.395118][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.430814][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.454624][T10493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.478178][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.499287][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.509522][T11001] loop2: detected capacity change from 0 to 40427 [ 714.517812][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.535271][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.540822][T11001] F2FS-fs (loop2): build fault injection attr: rate: 76, type: 0x1fffff [ 714.549870][T10493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.586459][T10493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.605952][T10493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.626619][T10493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.628332][T11001] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x30ed/0x46f0 [ 714.646372][T10493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.691311][T11001] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 714.857942][T10535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.950122][T10786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.007086][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.009318][ T6982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.015516][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.087275][ T6982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.105245][T10786] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.134523][T10535] veth0_vlan: entered promiscuous mode [ 715.192024][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.199204][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.231789][T10535] veth1_vlan: entered promiscuous mode [ 715.348778][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.356003][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.461018][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 715.504052][T10535] veth0_macvtap: entered promiscuous mode [ 715.526785][T10535] veth1_macvtap: entered promiscuous mode [ 715.562360][T10786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.634851][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.679823][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.725920][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.766555][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.797009][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.838427][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.864315][T10535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.887082][T11035] loop2: detected capacity change from 0 to 2048 [ 716.012059][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.024253][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.098317][T11035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.123538][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.168161][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.227351][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.253514][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.278047][T10535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.377250][T10535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.418007][T10535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.460685][T10535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.488468][T10535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.536202][T11053] loop0: detected capacity change from 0 to 2048 [ 716.562129][T10786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.608487][T11053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.638452][T11055] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 716.770777][T11055] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 717.877997][T11041] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 719.193306][T11041] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 719.231864][T11055] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 719.253953][T11055] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 719.255578][T11060] loop4: detected capacity change from 0 to 256 [ 719.665026][T11060] FAT-fs (loop4): Directory bread(block 64) failed [ 719.690674][T11060] FAT-fs (loop4): Directory bread(block 65) failed [ 719.760920][T11060] FAT-fs (loop4): Directory bread(block 66) failed [ 719.769833][T11060] FAT-fs (loop4): Directory bread(block 67) failed [ 719.776977][T11060] FAT-fs (loop4): Directory bread(block 68) failed [ 719.811425][T11060] FAT-fs (loop4): Directory bread(block 69) failed [ 719.822210][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.852320][T11060] FAT-fs (loop4): Directory bread(block 70) failed [ 719.865562][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.890169][T11060] FAT-fs (loop4): Directory bread(block 71) failed [ 719.935752][ T8836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.941137][T11060] FAT-fs (loop4): Directory bread(block 72) failed [ 719.952905][ T9352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.965795][T11060] FAT-fs (loop4): Directory bread(block 73) failed [ 720.296429][T11073] netlink: 'syz.2.1119': attribute type 10 has an invalid length. [ 720.335851][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.395285][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.211140][ T5305] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 721.234378][T10786] veth0_vlan: entered promiscuous mode [ 721.335032][T11086] loop4: detected capacity change from 0 to 512 [ 721.365198][T10786] veth1_vlan: entered promiscuous mode [ 721.435179][T11086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.500855][T11086] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.512470][ T5305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.533405][ T5305] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 721.551798][T10786] veth0_macvtap: entered promiscuous mode [ 721.557857][ T5305] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 721.576679][T10786] veth1_macvtap: entered promiscuous mode [ 721.583513][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.662901][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.674662][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.764085][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.780764][ T5292] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 721.830644][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.839534][ T5305] usb 2-1: config 0 descriptor?? [ 721.849071][ T5305] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 721.855915][ T5305] dvb-usb: bulk message failed: -22 (3/0) [ 721.857642][T11093] loop0: detected capacity change from 0 to 16 [ 721.872605][ T5305] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 721.888019][ T5305] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 721.895489][ T5305] usb 2-1: media controller created [ 721.900041][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.903949][ T5305] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.928982][ T5305] dvb-usb: bulk message failed: -22 (6/0) [ 721.935250][ T5305] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 721.944677][T11093] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0xdba51d3d, 0xc32427af expected [ 721.947332][ T5305] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 721.970986][ T5292] usb 3-1: Using ep0 maxpacket: 8 [ 721.977837][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.993675][ T5305] dvb-usb: schedule remote query interval to 150 msecs. [ 722.001180][ T5292] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 722.008394][ T5305] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 722.018109][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.018144][ T5292] usb 3-1: Product: syz [ 722.018165][ T5292] usb 3-1: Manufacturer: syz [ 722.018186][ T5292] usb 3-1: SerialNumber: syz [ 722.025930][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.086395][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.112001][ T5292] usb 3-1: config 0 descriptor?? [ 722.123221][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.163749][ T5307] dvb-usb: bulk message failed: -22 (1/0) [ 722.169722][ T5307] dvb-usb: error while querying for an remote control event. [ 722.282178][ T5292] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 722.306339][T10786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.330846][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.339327][ T5307] dvb-usb: bulk message failed: -22 (1/0) [ 722.360194][ T5307] dvb-usb: error while querying for an remote control event. [ 722.606748][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.775610][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.872510][ T5307] dvb-usb: bulk message failed: -22 (1/0) [ 722.878475][ T5307] dvb-usb: error while querying for an remote control event. [ 723.025310][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.084752][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.107518][ T5292] gspca_sonixj: reg_r err -32 [ 723.112570][ T5292] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 723.122846][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.136146][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.148324][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.158571][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.170220][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.224174][ T5305] dvb-usb: bulk message failed: -22 (1/0) [ 723.230261][ T5305] dvb-usb: error while querying for an remote control event. [ 723.252715][T10786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.260599][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.307281][T11080] loop3: detected capacity change from 0 to 40427 [ 723.328621][T11080] F2FS-fs (loop3): invalid crc value [ 723.377067][T10786] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.386479][T10786] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.395801][T10786] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.404865][T10786] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.434623][T11080] F2FS-fs (loop3): Found nat_bits in checkpoint [ 723.461916][ T9342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.530775][ T5307] dvb-usb: bulk message failed: -22 (1/0) [ 723.536580][ T5307] dvb-usb: error while querying for an remote control event. [ 723.549288][T11080] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 723.573432][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.594228][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.652014][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.668954][T11108] loop4: detected capacity change from 0 to 256 [ 723.677577][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.690451][ T5289] usb 2-1: USB disconnect, device number 8 [ 723.726136][ T5289] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 723.774568][T11108] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 723.865250][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.877641][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.722783][ T8] usb 3-1: USB disconnect, device number 12 [ 724.846334][T11114] loop1: detected capacity change from 0 to 2048 [ 725.024859][T11114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.355762][T11135] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.368911][T11135] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.393041][T11136] loop3: detected capacity change from 0 to 128 [ 725.430687][T11135] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.474832][T11136] ext3: Unknown parameter 'fsuuid' [ 725.483864][T11138] loop5: detected capacity change from 0 to 256 [ 725.537523][T11135] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.783975][T11138] FAT-fs (loop5): Directory bread(block 64) failed [ 725.813878][T11138] FAT-fs (loop5): Directory bread(block 65) failed [ 725.862669][T11138] FAT-fs (loop5): Directory bread(block 66) failed [ 725.887972][T11138] FAT-fs (loop5): Directory bread(block 67) failed [ 725.920064][T11138] FAT-fs (loop5): Directory bread(block 68) failed [ 725.954872][T11138] FAT-fs (loop5): Directory bread(block 69) failed [ 725.982630][T11138] FAT-fs (loop5): Directory bread(block 70) failed [ 726.030847][T11138] FAT-fs (loop5): Directory bread(block 71) failed [ 726.062057][ T5289] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 726.100704][T11138] FAT-fs (loop5): Directory bread(block 72) failed [ 726.107356][T11138] FAT-fs (loop5): Directory bread(block 73) failed [ 726.250716][ T5289] usb 1-1: Using ep0 maxpacket: 16 [ 726.296251][ T5289] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 726.320931][ T5289] usb 1-1: config 0 has no interface number 0 [ 726.350825][ T5289] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 726.405528][ T5289] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 726.420585][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.472792][ T5289] usb 1-1: Product: syz [ 726.477002][ T5289] usb 1-1: Manufacturer: syz [ 726.514822][T11135] syz.5.1133: attempt to access beyond end of device [ 726.514822][T11135] loop5: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 726.528569][ T5289] usb 1-1: SerialNumber: syz [ 726.530891][ T5289] usb 1-1: config 0 descriptor?? [ 726.652085][T11126] loop2: detected capacity change from 0 to 32768 [ 726.665730][T11126] Oops: divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 726.672705][T11126] CPU: 1 UID: 0 PID: 11126 Comm: syz.2.1131 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 726.683137][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 726.693207][T11126] RIP: 0010:__bch2_strtoh+0xb59/0xeb0 [ 726.698596][T11126] Code: ff 0f 88 8f 00 00 00 4c 89 74 24 08 44 89 f8 48 01 c5 48 89 2c 24 e8 56 40 49 fd 4d 89 e6 44 89 e1 48 c7 c0 ff ff ff ff 31 d2 <48> f7 f1 48 89 c5 48 8b 5c 24 18 48 89 df 48 89 c6 e8 91 42 49 fd [ 726.718268][T11126] RSP: 0018:ffffc90004c378e8 EFLAGS: 00010246 [ 726.724368][T11126] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: 0000000000000000 [ 726.732346][T11126] RDX: 0000000000000000 RSI: 00000000000007b1 RDI: 00000000000007b2 [ 726.740324][T11126] RBP: ffff88801fab5062 R08: ffffffff844b7ead R09: ffffffff844b7601 [ 726.748306][T11126] R10: 0000000000000009 R11: ffff888028f00000 R12: 0004000000000000 [ 726.756281][T11126] R13: ffff88801fab5060 R14: 0004000000000000 R15: 0000000000000001 [ 726.764267][T11126] FS: 00007f8cd896a6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 726.773200][T11126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 726.779783][T11126] CR2: 00007f8cd7b60700 CR3: 00000000525b8000 CR4: 0000000000350ef0 [ 726.787763][T11126] Call Trace: [ 726.791045][T11126] [ 726.793980][T11126] ? __die_body+0x5f/0xb0 [ 726.798336][T11126] ? die+0x9e/0xc0 [ 726.802083][T11126] ? do_trap+0x15a/0x3a0 [ 726.806348][T11126] ? __bch2_strtoh+0xb59/0xeb0 [ 726.811150][T11126] ? do_error_trap+0x1dc/0x2c0 [ 726.815929][T11126] ? __bch2_strtoh+0xb59/0xeb0 [ 726.820747][T11126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.826431][T11126] ? kernel_text_address+0xa7/0xe0 [ 726.831569][T11126] ? __pfx_do_error_trap+0x10/0x10 [ 726.836700][T11126] ? arch_stack_walk+0xfd/0x150 [ 726.841567][T11126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.847223][T11126] ? rcu_is_watching+0x15/0xb0 [ 726.852089][T11126] ? exc_divide_error+0x39/0x50 [ 726.856946][T11126] ? __bch2_strtoh+0xb59/0xeb0 [ 726.861716][T11126] ? asm_exc_divide_error+0x1a/0x20 [ 726.866931][T11126] ? __bch2_strtoh+0x281/0xeb0 [ 726.871705][T11126] ? __bch2_strtoh+0xb2d/0xeb0 [ 726.876484][T11126] ? __bch2_strtoh+0xb59/0xeb0 [ 726.881253][T11126] ? __bch2_strtoh+0xb4a/0xeb0 [ 726.886131][T11126] bch2_strtou64_h+0xa5/0x120 [ 726.890843][T11126] ? __pfx_bch2_strtou64_h+0x10/0x10 [ 726.896142][T11126] bch2_opt_parse+0x2dd/0x4c0 [ 726.900830][T11126] bch2_parse_one_mount_opt+0x2d3/0x5e0 [ 726.906391][T11126] ? __pfx_bch2_parse_one_mount_opt+0x10/0x10 [ 726.912492][T11126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.918146][T11126] bch2_fs_parse_param+0x137/0x180 [ 726.923288][T11126] vfs_parse_fs_param+0x1a7/0x420 [ 726.928329][T11126] generic_parse_monolithic+0x2c8/0x400 [ 726.933893][T11126] ? __pfx_generic_parse_monolithic+0x10/0x10 [ 726.939975][T11126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.945643][T11126] do_new_mount+0x28f/0xb40 [ 726.950157][T11126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.955815][T11126] ? __pfx_do_new_mount+0x10/0x10 [ 726.960859][T11126] __se_sys_mount+0x2d6/0x3c0 [ 726.965547][T11126] ? __pfx___se_sys_mount+0x10/0x10 [ 726.970760][T11126] ? exc_page_fault+0x590/0x8c0 [ 726.975623][T11126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.981369][T11126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.987107][T11126] ? __x64_sys_mount+0x20/0xc0 [ 726.991969][T11126] do_syscall_64+0xf3/0x230 [ 726.996498][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.002418][T11126] RIP: 0033:0x7f8cd7b7f69a [ 727.006834][T11126] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.026449][T11126] RSP: 002b:00007f8cd8969e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 727.034872][T11126] RAX: ffffffffffffffda RBX: 00007f8cd8969ef0 RCX: 00007f8cd7b7f69a [ 727.042847][T11126] RDX: 0000000020000040 RSI: 000000002000f680 RDI: 00007f8cd8969eb0 [ 727.050852][T11126] RBP: 0000000020000040 R08: 00007f8cd8969ef0 R09: 0000000000000000 [ 727.058830][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002000f680 [ 727.066806][T11126] R13: 00007f8cd8969eb0 R14: 000000000000f633 R15: 00000000200000c0 [ 727.074790][T11126] [ 727.077994][T11126] Modules linked in: [ 727.084115][T11126] ---[ end trace 0000000000000000 ]--- [ 727.104576][T11126] RIP: 0010:__bch2_strtoh+0xb59/0xeb0 [ 727.110023][T11126] Code: ff 0f 88 8f 00 00 00 4c 89 74 24 08 44 89 f8 48 01 c5 48 89 2c 24 e8 56 40 49 fd 4d 89 e6 44 89 e1 48 c7 c0 ff ff ff ff 31 d2 <48> f7 f1 48 89 c5 48 8b 5c 24 18 48 89 df 48 89 c6 e8 91 42 49 fd [ 727.136902][T11126] RSP: 0018:ffffc90004c378e8 EFLAGS: 00010246 [ 727.145537][T11126] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: 0000000000000000 [ 727.160426][T11126] RDX: 0000000000000000 RSI: 00000000000007b1 RDI: 00000000000007b2 [ 727.174331][T10535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.239930][T11126] RBP: ffff88801fab5062 R08: ffffffff844b7ead R09: ffffffff844b7601 [ 727.284377][T11126] R10: 0000000000000009 R11: ffff888028f00000 R12: 0004000000000000 [ 727.303053][T11126] R13: ffff88801fab5060 R14: 0004000000000000 R15: 0000000000000001 [ 727.332100][T11126] FS: 00007f8cd896a6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 727.352402][T11126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 727.359034][T11126] CR2: 00007fb16e907ab8 CR3: 00000000525b8000 CR4: 0000000000350ef0 [ 727.367267][T11126] Kernel panic - not syncing: Fatal exception [ 727.373733][T11126] Kernel Offset: disabled [ 727.378052][T11126] Rebooting in 86400 seconds..