last executing test programs: 3m53.172362233s ago: executing program 2 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sys_enter\x00', r1}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m53.040227253s ago: executing program 2 (id=2893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) 3m52.504743782s ago: executing program 2 (id=2896): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f00000013c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@inlinecrypt}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@inlinecrypt}, {@data_err_ignore}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3f}}]}, 0x7c, 0x564, &(0x7f00000003c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r2, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0x1}]) 3m52.04594794s ago: executing program 2 (id=2902): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x490, &(0x7f0000000040)=ANY=[], 0x1, 0x2db, &(0x7f0000000400)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8000000000000001, 0x2, 0x0, 0x0, 0x1c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b9000000007fffff00"}) 3m51.67928892s ago: executing program 2 (id=2905): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x80) syz_genetlink_get_family_id$nl80211(0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x20, 0x1e, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x780, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x9, 0x101}, 0x14}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0xc6, 0x8, 0x0, {0x5, 0x4, 0x1, 0x1d, 0x1, 0x66, 0x794, 0x3, 0x6, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}}}, 0x0) socket$phonet(0x23, 0x2, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r7], 0x20}}, 0x0) 3m51.41992828s ago: executing program 2 (id=2909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000440)={{0x32, @broadcast, 0x4e24, 0x1, 'lblc\x00', 0x9, 0x9, 0x31}, {@multicast1, 0x4e22, 0x4, 0x1, 0x3e2, 0xa}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000340)=0x1, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x1]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_MARK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0xfc, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 3m51.036540069s ago: executing program 32 (id=2909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000440)={{0x32, @broadcast, 0x4e24, 0x1, 'lblc\x00', 0x9, 0x9, 0x31}, {@multicast1, 0x4e22, 0x4, 0x1, 0x3e2, 0xa}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000340)=0x1, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x1]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_MARK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0xfc, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 3m50.305443998s ago: executing program 4 (id=2918): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3m50.005481907s ago: executing program 4 (id=2921): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 3m49.651944506s ago: executing program 4 (id=2925): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 3m49.132172185s ago: executing program 4 (id=2928): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYRES64], 0x6, 0x2cc, &(0x7f0000002f40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a4, &(0x7f00000001c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 3m48.914752465s ago: executing program 4 (id=2929): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x47fab000) 3m48.685896684s ago: executing program 4 (id=2930): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3m48.273631483s ago: executing program 33 (id=2930): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 16.354146093s ago: executing program 3 (id=3966): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 15.920983802s ago: executing program 3 (id=3973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}}, 0x0) 14.73053523s ago: executing program 3 (id=3975): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_l2cap(r3, &(0x7f0000000080), 0xe) listen(r2, 0x9) accept4$vsock_stream(r3, 0x0, 0x0, 0x80000) 13.750442628s ago: executing program 3 (id=3978): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f0000000000)={0x30, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc063000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x121000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x8011) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) 10.438580521s ago: executing program 5 (id=3987): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000040)={'rose0\x00', 0x10}) close(r1) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) 9.78831163s ago: executing program 0 (id=3988): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000080), 0xe) listen(r1, 0x9) accept4$vsock_stream(r2, 0x0, 0x0, 0x80000) 9.72396585s ago: executing program 1 (id=3990): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003500), 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=0x8, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r7, 0x1}, 0x8) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r8, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r8, 0x5412, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) read(r0, &(0x7f0000001b00)=""/194, 0xc2) 8.545256168s ago: executing program 1 (id=3991): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000080)}, 0x10) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x60f9d000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0xffffffffffffffff) 8.493945688s ago: executing program 6 (id=3992): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000280)={[{@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'macinuit'}}, {@barrier}, {@force}, {@umask={'umask', 0x3d, 0x1}}, {}]}, 0x3, 0x6b8, &(0x7f00000030c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 8.472970897s ago: executing program 0 (id=3993): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="029993440c7a0c95d3bb8cf253fd63c588ff06000ff0fced840da0b08cb6e72082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c06045346588e2620d36a3ed8e8f2aa891268a9", 0x54}], 0x1}}], 0x1, 0xc0) 8.253954467s ago: executing program 0 (id=3994): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0404"], 0xd) 8.108276007s ago: executing program 6 (id=3995): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x80415, &(0x7f0000000280), 0x1, 0x796, &(0x7f0000001dc0)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) shutdown(r3, 0x2) 7.990612607s ago: executing program 5 (id=3996): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x13, 0x4, 0x4, 0xff, 0x8000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000000c0)=""/97, 0x61) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setgroups(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x80400, 0x100) 7.961397596s ago: executing program 0 (id=3997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}}, 0x0) 7.679696176s ago: executing program 3 (id=3998): msgctl$IPC_RMID(0x0, 0x300) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000140), 0x1, 0x50ed, &(0x7f000000a280)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="05a3000000dfffff4ae20b300000080003"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x695436960f44f734}}, 0x14) io_uring_setup(0xf02, &(0x7f0000000080)={0x0, 0x60273a, 0x400, 0x0, 0x186}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) msgsnd(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(0x0, &(0x7f00000001c0)={0x0, ""/65}, 0x49, 0x0, 0x4800) 5.597688082s ago: executing program 0 (id=3999): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x4}) chdir(&(0x7f0000000140)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.377574861s ago: executing program 5 (id=4000): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1, 0x0, 0x0, 0x7}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.036250801s ago: executing program 6 (id=4001): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003500), 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=0x8, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r7, 0x1}, 0x8) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r8, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r8, 0x5412, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) read(r0, &(0x7f0000001b00)=""/194, 0xc2) 4.68699078s ago: executing program 5 (id=4002): ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0xfdef) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.813546998s ago: executing program 6 (id=4003): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000080), 0xe) listen(r1, 0x9) accept4$vsock_stream(r2, 0x0, 0x0, 0x80000) 3.660337758s ago: executing program 1 (id=4004): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="029993440c7a0c95d3bb8cf253fd63c588ff06000ff0fced840da0b08cb6e72082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c06045346588e2620d36a3ed8e8f2aa891268a9", 0x54}], 0x1}}], 0x1, 0xc0) 3.532978168s ago: executing program 1 (id=4005): syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x4, 0xb1, &(0x7f0000000400)="$eJzs1zFqwmAYBuC3oW3aJT1Ah94gd+hRSsd261Rx8ELunsIjCB7AwU1cIjExZHYwIM8DCby8/wff+P/r4/I9VdK85awZ+fuf/Xz9tv9VBs/hjhRJyiQvbai6vPvsuoe+3+zn35dvNPo40coAAMCVitRJXvubfhZF6rprtsOZj/YtcOjD02i4vOmqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJM4BQAA//8fTCFM") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x20040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 3.512177188s ago: executing program 3 (id=4006): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000040)={'rose0\x00', 0x10}) close(r1) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) 3.326540317s ago: executing program 1 (id=4007): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0404"], 0xd) 3.043352936s ago: executing program 0 (id=4008): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRESHEX, @ANYRES16=0x0], 0x21, 0x9e84, &(0x7f000000a180)="$eJw8mmP0J8fWcP+TiW3bTnZs27ZteweT5Nc2Ytu2bdu2bcy75rn3vmf1h/7Qq6p7n31qVVXXLQO8dYC3DfD2Ad4xwDsHeNcA7x7gPQO8d4D3DfD+AT4wwAcH+NAAHx7gIwN8dICPDfDxAT4xwCcH+NQAnx7gMwN8doDPDfD5Ab4wwBcH+NIAXx7gKwN8dYCvDfD1Ab4xwDcH+NYA3x7gOwN8d4DvDfD9AX4wwA8H+NEAPx7gJwP8dICfDfDzAX4x8gS/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HOBfA/x7gP8M8N8BjhzgUIDDAhwtwJEBjh7gGAGOGeBYAY4d4DgBjhvgeAGOH+AEAU4Y4EQBThzgJAFOGuBkAU4e4BQBThngVAFOHeA0AU4b4HQBTh/gDAHOGOBMAc4c4CwBzhrgbAHOHuAcAc4Z4FwBzh3gPAHOG+B8Ac4f4AIBLhjgQgEuHCABwxYJcNEAFwtw8QCXCHDJAJcKcOkAlwlw2QCXC3D5AFcIcMUAVwpw5QBXCXDVE4aGRvFYPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI0wGMDPC7A4wM8IcARAZ4Y4EkBnjzKhVEIAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7P7rzykBnhrgaQGeHuAZAZ4Z4FkBnh3gOQGeG+B5AZ4f4AUBXhjgRQFeHOAlAV4a4GUBXh7gFQFeGeBVAV4d4DUBXhvgdQFeH+ANAd4Y4E0B3hzgLQHeGuBtAd4e4B0B3hngXQHeHeA9Ad4b4H0B3h/gAwE+GOBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH++996HwpxWDjC0UIcHuLoIY4R4pghjhXi2CGOE+K4IY4X4vghThDihCFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhEuIiIS4a4mIhLh7iEiEuGeJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFDm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh4Z4WIiHh3hEiEeGeFSIR4d4TIiGeGyIx4V4fIgnhDgixBNDPCnEk0e9wwtDQ0GIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2Ip4R4aoinhXh6iGeEeGaIZ4V4dojnhHhuiOeFeH6IF4R4YYgXhXhxiJeEeGmIl4V4eYhXhHhliFeFeHWI14R4bYjXhXh9iDeEeOOo3G0+39BoQ0NDt4R4a4i3hXh7iHeEeGeId4V4d4j3hHhviPeFeH+ID4T4YIgPhThyrKGhoZX+7/q/eDzEJ0J8MsSnQnw6xGdCfDbE50J8PsQXQnwxxJdGH/LlEF8JGevVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx31HfGuJQhMMiHC0aY2hoCEePcIwIx4xwrAjHjnCcCMeNcLwIx49wgggnjHCiCCeOcJIIJ41wsggnj3CKCKeMcKoIp45wmginjXC6CKePcIYIZ4xwpghnjnCWCGeNcLYIZ49wjgjnjHCuCOeOcJ4I541wvgjnj3CBCBeMcKEIF46QCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4lw2QiXi3D5CFeIcMUIV4pw5QhXiXDVCFeLcPUI14hwzQjXinDtCNeJcN0I14tw/Qg3iHDDCDeKcOMIN4lw0wg3i3DzCLeIcMsIt4pw6wi3iXDbCLeLcPsId4hwxwh3inDnCHeJcNcId4tw9wj3iHDPCPeKcO8I94lw3wj3i3D/CA+I8MAID4rw4AgPifDQCA+L8PAIj4jwyAiPivDoCI+J0AiPjfC4CI+P8IQIR0R4YoQnRXhyhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+whPifDUCE+L8PQIz4jwzAjPivDsCM+J8NwIz4vw/AgviPDCCC+K8OIIL4nw0ggvi/DyCK+I8MoIr4rw6givifDaCK+L8PoIb4jwxghvivDmCG+J8NYIhw/h7RHeEeGdEd4V4d0R3hPhvRHD7ovw/ggfiPDBCB+Kxht6OMJHInw0wscifDzCJyJ8MsKnInw6wmcifDbC5yJ8PsIXInwxwpcifDnCVyJ8NcLXInw9wjcifDPCtyJ8O8J3Inw3wvcifD/CDyL8MMKPIvw4wk8i/DTCzyL8PMIvIvwywq8i/DoaZ+ibCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jXDkSByKcViMo8U4PMbRYxwjxjFjHCvGsWMcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxkljnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjJMZFYlw0xsViXDzGJWJcMsalYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjTGY2M8LsbjYzwhxhExnhjjSTGeHOMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7GU2I8NcbTYjw9xjNiPDPGs2I8O8ZzYjw3xvNiPD/GC2K8MMaLYrw4xktivDTGy2K8PMYrYrwyxqtivDrGa2K8NsbrYrw+xhtivDHGm2K8OcZbYrw1xttivD3GO2K8M8a7Yrw7xntivDfG+2K8P8YHYnwwxodifDjGR2J8NMbHYnw8xidifDLGp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg/i4f+dbeDHMX4S46cxfhbj5zF+EeOXMX4V49cxfjMqd6MeP3Fo6PsYf4jxxxh/ivHnGH+J8dcYf4vx9xj/iPHPGP+K8e8Y/4nx3xhHxjiU4LAER0tweIKjJzhGgmMmOFaCYyc4ToLjJjheguMnOEGCEyY4UYITJzjJwzhpgpMlOHmCUyQ4ZYJTJTh1gtMkOG2C0yU4fYIzJDhjgjMlOHOCsyQ4a4KzJTh7gnMkOGeCcyU4d4LzJDhvgvMlOH+CCyS4YIILJZzwX3AukuCiCS6W4OIJLpHgkgkuleDSCS6T4LIJLpfg8gmukOCKCa6U4MoJrpLgqgmuluDqCa6RMM7/2l47wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9EtwzGcO9Etw7wX0S3DfB/RLcP8EDEjwwwYMSPDjBQxI8NMHDEjw8wSMSPDLBoxI8OsFjEjTBYxM8LsHjEzwhwREJnpjgSQmenOAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BUxI8NcHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1waHheHuCdyR4Z4J3JXh3gvckeG+C9yV4f4IPJPhggg8l+HCCjyT4aIKPJfh4gk8M+68JCT6d4DMJPpvgcwk+n+ALCb6Y4EsJvpzgKwm+muBrCb6e4BsJvpngWwm+neA7Cb6b4HsJvp/gBwl+mOBHCX6c4CcJfprgZwl+nuAXCX6Z4FcJfp3gNwl+m+B3CX6f4A8J/pjgTwn+nOAvCf6a4G8J/p7gHwn+meBfCf6d4D8J/pvsOO6o8WYoxWEpjpbi8BRHT3GMFMdMcawUx05xnBTHTXG8FMdPcYIUJ0xxohQnTnGSFCdNcbIUJ09xihSnTHGqFKdOcZoUp01xuhSnT3GGFGdMcaYUZ05xlhRnTXG2FGdPcY4U50xxrhTnTnGeFOdNcb4U509xgRQXTHGhFBdOkRQXSXHRFBdLcfEUl0hxyRSXSnHpFJdJcdkUl0tx+RRXSHHFFFdKceUUV0lx1RRXS3H1FNdIcc0U10px7RTXSXHdFNdLcf0UN0hxwxQ3SnHjFDdJcdMUN0tx8xS3SHHLoSG3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nRFI9N8bgUj0/xhBRHpHhiiieleHKKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FE9J8dQUT0vx9BTPSPHMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+rGHhkY5fGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+k+GSKT6X4dIrPpPhsis+l+HyKL6T4Yoovpfhyiq+k+GqKr6X4eopvpPhmim+l+HaK76T4borvpfh+ih+k+GGKH6X4cYqfpPhpip+l+HmKX6T4ZYpfpfh1it+k+G2K36X4fYo/pPhjij+l+HOKv6T4a4q/pfh7in+k+GeKf6X4d4r/pPhviiNTHMpwWIajZTg8w9EzHCPDMTMcK8OxMxwnw3EzHC/D8TOcIMMJM5wow4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznGHksKFR/c6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGZLhIhkumuFiGS6e4RIZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c/Wffe9UMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nQDI/N8LgMj8/whAxHZHhihidleHKGgwyDDMMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMu+zj/z+PPTXD0zI8PcMzMjwzw7MyPDvDczI8N8PzMjw/wwsyvDDDizK8OMNLMrw0w8syvDzDKzK8MsOrMrw6w2syvDbD6zK8PsMbMrwxw5syvDnDWzK8NcPbMrw9wzsyvDPDuzK8O8N7Mrw3w/syvD/DBzJ8MMOHMnw4w0cyfDTDxzJ8PMMnMnwyw6cyfDrDZzJ8NsPnMnw+wxcyfDHDlzJ8OcNXMnw1w9dm/i+ODN/M8K0M387wnQzfzfC9DN/P8IMMP8zwoww/zvCTDD/N8LMMP8/wiwy/zPCrDL/Oxvr/jL/L8PsMf8jwxwx/yvDnDH/J8NcMf8vw9wz/yPDPDP/K8O8M/8nw3wxHZjiU47AcR8txeI6j5zhGjmPmOFaOY+c4To7j5jhejuPnOEGOE+Y4UY4T5zhJjpPmOFmOk+c4RY5T5jhVjlPnOE2O0+Y4XY7T5zhDjjPmOFOOM+c4S46z5jhbjrPnOEeOc+Y4V45z5zhPjvPmOF/O6PPnuECOC+a4UI4L50iOi+S4aI6L5bh4jkvkuGSOS+W4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqvkuGqOq+W4eo5r5LhmjmvluHaO6+S4bo7r5bh+jhvkuGGOG/2X3yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e4xE5HpnjUTkeneMxOZrjsTkel+PxOZ6Q44gcT8zxpBxPznGQY5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY5/jKTmemuNpOZ6e4xk5npnjWTmeneM5OZ6b43k5np/jBTlemONFOV6c4yU5XprjZTlenuMVOV6Z41U5Xp3jNTlem+N1OV6f4w053pjjTTnenOMtOd6a42053p7jHTnemeNdOd6d4z053pv/39rR+3N8IMcHc3wox4dzfCTHR3N8LMfHc3wixydzfCrHp3N8Jsdnc3wux+dzfCHHF3N8KceXc3wlx1dzfC3H13N8I8c3c3wrx7dzfCfHd3N8L8f3c/wgxw9z/CjHj3P8JMdPc/wsx89z/CLHL3P8Ksevc/wmx29z/C7H73P8Iccfc/wpx59z/CXHX3P8Lcffc/wjxz/zYUN/5fh3jv/k+G+OI3McKnBYgaMVOLzA0Qsco8AxCxyrwLELHKfAcQscr8DxC5ygwAkLnKhg1GDkJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXCAFLlLgogUuVuDiBS5R4JIFLlXg0gUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmw4fcrMDNC9yiwC0L3KrArQvcpsBtC9yuwO0L3KHAHQvcqcCdC9ylwF0L3K3A3Qvco8A9C9yrwL0L3KfAfQvcr8D9CzygwAMLPKjAgws8pMBDCzyswMMLPKLAIws8qsCjCzymQAs8tsDjCjy+wBMKHFHgiQWeVODJBQ4KDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7As8pcBTCzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7h4b5QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FjiywKESh5U4WonDSxy9xDFKHLPEsUocu8RxShy3xPFKHL/ECUqcsMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqc/397MSUuVOLCJVLiIiUuWuJiJS5e4hIlLlniUiUuXeIyJS5b4nIlLl/iCiWuWOJKJa5c4iolrlriaiWuXuIaJa5Z4lolrl3iOiWuW+J6Ja5f4gYlbljiRiVuXOImJW5a4mYlbl7iFiVuWeJWJW5d4jYlblvidiVuX+IOJe5Y4k4l7lziLiXuWuJuJe5e4h4l7lniXiXuXeI+Je5b4n4l7l/iASUeWOJBJR5c4iElHlriYSUeXuIRJR5Z4lElHl3iMSVa4rElHlfi8SWeUOKIEk8s8aQSTy5xUGJQYlhiVGJcYlJiWmJWYl4yVJRYlliVWJfYlNiW2JXYl3hKiaeWeFqJp5d4RolnlnhWiWeXeE6J55Z4Xonnl3hBiReWeFGJF5d4SYmXlnhZiZeXeEWJV5Z4VYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5b4UIkPl/jIqDoYwsdKfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Snx35LD/7/EHJX5Y4kclflziJyV+WuJnJX5e4he/jfxPlPh1id+U+G2J35X4fYk/lPhjiT+V+HOJv5T4a4m/lfh7iX+U+GeJf5X4d4n/lPhviaPaG6pwWIWjVTi8wtErHKPCMSscq8KxKxynwnErHK/C8SucoMIJK5yowokrnKTCSSucrMLJK5yiwikrnKrCqSucpsJpK5yuwukrnKHCGYcPDY3qe+YKZ6lw1gpnq3D2CueocM4K56pw7grnqXDeCuercP4KF6hwwQoXqnDhCqlwkQoXrXCxChevcIkKl6xwqQqXrnCZCpetcLkKl69whQpXrHClCleucJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowo3rnCTCjetcLMKN69wiwq3rHCrCreucJsKt61wuwq3r3CHCnescKcKd65wlwp3rXC3CnevcI8K96xwrwr3rnCfCvetcL8K96/wgAoPrPCgCg+u8JAKD63wsAoPr/CICo+s8KgKj67wmAqt8NgKj6vw+ApPqHBEhSdWeFKFJ1c4qDCoMKwwqjCuMKkwrTCrMK+wqLCssKqwrrCpsK2wq7Cv8JQKT63wtApPr/CMCs+s8KwKz67wnBF4boXnVXh+hRdUeGGFF1V4cYWXVHhphZdVeHmFV1R4ZYVXVXh1hddUeG2F140c/n8O3VDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhkxU+VeHTFT5T4bMVPlfh8xW+UOGLFb5U4csVvlLhqxW+VuHrFb5R4ZsVvlXh2xW+U+G7Fb5X4fsVflDhhxV+VOHHFX5S4acVflbh5xV+UeGXFX5V4dcVflPhtxV+V+H3Ff5Q4Y8V/lThzxX+UuGvFf5W4e8V/lHhnxX+VeHfFf5T4b8VjqxwqMZhNY5W4/AaR69xjBrHrHGsGseucZx62NC4NY5X4/g1TlDjhDVOVOPENU5S46Q1Tlbj5DVOUeOUNU5V49Q1TlPjtDVOV+P0Nc5Q44w1zlTjzDXOUuOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1UuMiNS5a42I1Ll7jEjUuWeNSNS5d4zI1LlvjcjUuX+MKNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTUeXeMxNVrjsTUeV+PxNZ5Q44gaT6zxpFEeDI0cOagxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/GUGk+t8bQaT6/xjBrPrPGsGs+u8Zwaz63xvBrPr/GCGi+s8aIaL67xkhovrfGyGi+v8Yoar6zxqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xtlE+Dw0N3VHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/NY6scajBYQ2O1uDwBkdvcIwGx2xw7CEcu8FxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLhBGlykwUUbXKzBxRtcosElG1yqwaUbXKbBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHZv/8N25wV0a3LXB3RrcvcE9Gtyzwb0a3LvBfRrct8H9Gty/wQMaPLDBgxo8uMFDGjy0wcMaPLzBIxo8smHr8YeGPLrBYxq0wWMbPK7B4xs8ocERDSNGOXBSgyc3OGgwaDBsMGowbjBpMG0wazBvsGiwbLBqsG6wabBtsGuwb/CUBk9t8LQGT2/wjAbPbPCsBs9u8JwGz23wvAbPb/CC5j91OioubvCSBi9t8LIGL2/wigavbPCqBq9u8JoGr23wugavb/CGBm9s8KYGb27wltHx1gZva/D2Bu9o8M4G72rw7gbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGP2nw0wY/a/DzBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wZHNjjU4rAWR2txeIujtzjGf+/HanHsFsdpcdwWx2tx/BYnaHHCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RZpcZEWF21xsRYXb3GJFpdscakWlx6Gy7S4bIvLtbh8O8wVWlyxxZVaXLnFVVpctcXVWly9xTVaXLPFtVpcu8V1Wly3xfVaXL/FDVrcsMWNWty4xU1a3LTFzVrcvMUtWtyyxa1a3LrFbVrctsXtWty+xR1a3LHFnVrcucVdWty1xd1a3L3FPVrcs8W9Wsbcu8V9Wty3xf1a3L/FA1o8sMWDWjy4xUNaPLTFw1o8fFROh/6zvjyqxaNbPKZFWzy2xeNaPL5lgxNaHNHiiS2e1P7HhUGLQYthi1GLcYtJi2mLWYt5i0WLZYtVOzSsbrFpsW2xa7Fv8ZQWT23xtBZPb/GMFs9s8awWz27xnBbPbfG8Fs9v8YIWL2zxohYvbvGSFi9t8bIWL2/xihavbPGqFq9u8ZoWr23xuhavb/GGFsds8aYWb27xlhZvbfG2Fm9v8Y4W72zxrhbvbvGeFu9t8b4W72/xgRYfbPGhFh9u8ZEWH23xsRYfb/GJFp9s8akWn27xmRafbfG5Fp9v8YUWX2zxpRZfbvGVFl9t8bUWX2/xjRbfbPGtFt9u8Z0W323xvRbfb/GDFj9s8aMWP27xkxY/bRkabWhoxc9b/KLFL1v8qsWvW/ymxW9b/K7F71v8ocUfW/ypxZ9b/KXFX1v8rcXfW/yjxT9b/KvFv1v8p8V/Wxw5KucdDutwtA6Hdzh6h2N0OGaHY3U4dofjdDhuh+N1OH6HE3Q4YYcTdThxh5N0OGmHk3U4eYdTdDhlh1N1OHWH03Q4bYfTdTh9hzN0OGOHM3U4c4ezdDhrh7N1OHuHc3Q4Z4dzdTh3h/N0OG+H83U4f4cLdLhghwt1uHCHdLhIh4t2uFiHi3e4RIdLdrhUh0t3uEyHy3a4XIfLd7hChyt2uFKHK3e4Soerdrhah6t347hGh2t2uFaHa3e4Tofrdvzv56sbdLhhhxt1uHGHm3S4aYebdbh5h1t0uGWHW3W4dYfbdLhth9t1uH2HO3S4Y4c7dbhzh7t0uGuHu3W4e4d7dLhnh3t1uHeH+3S4b4f7dbh/hwd0eGCHB3V4cIeHdHhoh4d1eHiHR3R4ZIdHdXh0h8d0aIfHdnhch8d3eEKHI07AEzs8qcOTOxx0GHQYdhh1GHeYdJh2mHWYd1h0WHZYdVh32HTYdth12Hd4Soendnhah6d3eEaHZ3Z4Vodnd3hOh+d2eF6H53d4QYcXdnhRhxd3eEmHl3Z4WYeXd3hFh1d2eFWHV3d4TYfXdnhdh9d3eEOHN3Z4U4c3d3hLh7d2eFuHt3d4R/cfz+/q8O4O7+nw3g7v6/D+Dh/o8MEOH+rw4Q4f6fDRDh/r8PEOn+jwyQ6f6vDpDp/p8NkOn+vw+Q5f6PDFDl/q8OUOX+nw1Q5f6/D1Dt/o8M0O3+rw7Q7f6fDdDt/r8P0OP+jwww4/6vDjDj/p8NMOP+vw8w6/6PDLDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcO/+jwzw7/6vDvDv/p8N8OR47i0uOwHkfrcXiPo/c4Ro9j9jhWj2P3OE6P4/Y4Xo/j9zhBjxP2OFGPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3/znLPGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI/0uEiPi/a4WI+L97hEj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uNr/jmL3uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9GiPx/Z4XI/Hj+Le44geT+zxpB5P7nHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY9/jKT2e2uNpPZ7e4xk9ntnjWT2e3eM5PZ7b43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvjfT3e3+MDPT7Y40M9PtzjIz0+2uNjPT7e4xM9PtnjUz0+3eMzPT7b43M9Pt/jCz2+2ONLPb7c4ys9vtrjaz2+3uMbPb7Z41s9vt3jOz2+2+N7Pb7f4wc9ftjjRz1+3OMnPX7a42c9ft7jFz1+2eNXPX7d4zf/j4h3Dh78CPqtf5tsshtu7GRj68TOxrZt2zjBxvbva2Nj27Zt27b2rTzvc+/9d6qmpqfrdNdnenpmEL8dxO8G8ftB/GEQfxzEnwbx50H8ZRB/HcTfBvH3QfxjEP8cxL8G8e9B/GcQ/x3EsYM4EOCQAMcJcNwAhwY4XoDjBzgswOEBThDghAFOFODEAU4S4KQBjghwsgAnD3CKAKcMcKoApw5wmgCnDXC6AKcPcIYAZwxwpgBnDnCWAEcGOGuAswU4e4BzBDhngHMFA6PnDnCeAOcNcL4A5w9wgQAXDHChABcOcJEAFw2QvQYG/tvH4gEuEeCSAS4V4NIBLhPgsgEuF+DyAa4Q4IoBrhTgygGOCnCVAFcNcLUAVw9wjQDXDHCtANceOuA6Aa4b4HoBrh/gBgFuGOBGAW4c4CYBbhrgZgFuHuAWAW4Z4FYBbh3gNgFuG+B2AW4f4A4B7hjgTgHuHOAuAe4a4G4B7h7gHgHuGeBeAe4d4D4B7hvgfgHuH+ABAR4Y4EEBHhzgIQEeGuBhAR4e4BEBHhngUQEeHeAxAR4boAEeF+DxAZ4Q4IkBjg7wpABPDvCUAE8N8LQATw/wjADPDPCsAM8O8JwAzw3wvADPD/CCAC8M8KIALw7wkgAHAwb+YykMMAowDjAJMA0wCzAPsAiwDLAKsA6wCbANsAuwD3BMgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4B3B3hPgPcGeF+A9wf4QIAPBvhQgA8H+EiAjwb4WICPB/hEgE8G+FSATwf4TIDPBvhcgM8H+EKALwb4UoAvB/hKgK8G+FqArwf4RoBvBvhWgG8H+E6A7wb4XoDvB/hB8P/3830U4McBfhLgpwF+FuDnAX4R4JcBfhXg1wF+E+C3AX4X4PcB/hDgjwH+FODPAf4S4K8B/hbg7wH+EeCfAf4V4N8B/hPg2BE4NsCBEIeEOE6I44Y4NMTxQhw/xGEhDg9xghAnDHGiECcOcZIQJw1xRIiThTh5iFOEOGWIU4U4dYjThDhtiNOFOH2IM4Q4Y4gzhThziLOEODLEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDJMTFQlw8xCVCXDLEpUJcOsRlQlw2xOVCXD7EFUJcMcSVQlw5xFEhrhLiqiGuFuLqIa4R4pohrhXi2iGuE+K6Ia4X4vohbhDihiFuFOLGIW4S4qYhbhbi5iFuEeKWIW4V4tYhbhPitiFuF+L2Ie4Q4o4h7hTiziHuEuKuIe4W4u4h7hHiniHuFeLeIe4T4r4h7hfi/iEeEOKBIR4U4sEhHhLioSED/+dsckSIR4Z4VIhHh3hMiMeGaIjHhXh8iCeEeGKIo0M8KcSTQzwlxFNDPC3E00M8I8QzQzwrxLNDPCfEc0M8L8TzQ7wgxAtDvCjEi0O8JMTBEIMQwxCjEOMQkxDTELMQ8/94G/3/X2dXIdYhNiG2IXYh9iGOCfHSEC/7XzavCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbwrx5hBvCfHWEG8L8fYQ7wjxzhDvCvHuEO8J8d4Q7wvx/hAfCPHBEB8K8eEQHwnx0RAfC/HxEJ8I8ckQnwrx6RCfCfHZEJ8L8fkQXwjxxRBfCvHlEF8J8dUQXwvx9RDfCPHNEN8K8e0Q3wnx3RDfC/H9ED8I8cMQPwrx4xA/CfHTED8L8fMQvwjxyxC/CvHrEL8J8dsQvwvx+xB/CPHHEH8K8ecQfwnx1xB/C/H3EP8I8c8Q/wrx7xD/CfHfEMeGOBDhkAjHiXDcCIdGOF6E40c4LMLhEU4Q4YQRThThxBFOEuGkEY6IcLIIJ49wiginjHCqCKeOcJoIp41wuginj3CGCGeMcKYIZ45wlghHRjhrhLNFOHuEc0Q4Z4RzRTh3hPNEOG+E80U4f4QLRLhghAtFuHCEi0S4aIREuFiEi0e4RIRLRrhUhEtHuEyEy0a4XITLR7hChCtGuFKEK0c4KsJVIlw1wtUiXD3CNSJcM8K1Ilw7wnUiXDfC9SJcP8INItwwwo0i3DjCTSLcNMLNItw8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDZCIzwuwuMjPCHCEyMcHeFJEZ4c4SkRnhrhaRGeHuEZEZ4Z4VkRnh3hORGeG+F5EZ4f4QURXhjhRRFeHOElEQ5GGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4JsJLI7wswssjvCLCKyO8KsKrI7wmwmsjvC7C6yO8IcIbI7wpwpsjvCXCWyO8LcLbI7wjwjsjvCvCuyO8J8J7I7wvwvsjfCDCByN8KMKHI3wkwkcjfCzCxyN8IsInI3wqwqcjfCbCZyN8LsLnI3whwhcjfCnClyN8JcJXI3wtwtcjfCPCNyN8K8K3I3wnwncjfC/C9yP8IMIPI/wowo8j/CTCTyP8LMLPI/wiwi8j/CrCryP8JsJvI/wuwu8j/CHCHyP8KcKfI/wlwl8j/C3C3yP8I8I/I/wrwr8j/CfCfyMcG+FAjENiHCfGcWMcGuN4MY4f47AYh8c4QYwTxjhRjBPHOEnMkEljHBHjZDFOHuMUMU4Z41QxTh3jNDFOG+N0MU4f4wwxzhjjTDHOHOMsMY6McdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGIlxsRgXj3GJGJeMcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnFUjKvEuGqMq8W4eoxrxLhmjGvFuHaM68S4bozrxbh+jBvEuGGMG8W4cYybxLhpjJvFuHmMW8S4ZYxbxbh1jNvEuG2M28W4fYw7xLhjjDvFuHOMu8S4a4y7xbh7jHvEuGeMe8W4d4z7xLhvjPvFuH+MB8R4YIwHxXhwjIfEeGiMh8V4eIxHxHhkjEfFeHSMx8R4bIzGeFyMx8d4Qownxjg6xpNiPDnGU2I8NcbTYjw9xjNiPDPGs2I8O8ZzYjw3xvNiPD/GC2K8MMaLYrw4xktiHIwxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj3FMjJfGeFmMl8d4RYxXxnhVjFfHeE2M18Z4XYzX/2fDrnhjjDfFeHOMt8R4a4y3xXh7jHfEeGeMd8V4d4z3xHhvjPfFeH+MD8T4YIwPxfhwjI/E+GiMj8X4eIxPxPhkjE/F+HSMz8T4bIzPxfh8jC/E+GKML8X4coyvxPhqjK/F+HqMb8T4Zoxvxfh2jO/E+G6M78X4fowfxPhhjB/F+HGMn8T4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/F+HeM/8T4b4xjYxxIcEiC4yQ4boJDExwvwfETHJbg8AQnSHDCBCdKcOIEJ0lw0gRHJDhZgpMnOEWCUyY4VYJTJzhNgtMmOF2C0yc4Q4IzJjhTgjMnOEuCIxOcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDRBElwswcUTXCLBJRNcKsGlE1wmwWUTXC7BgaFD/u/bqZUSXDnBUaMGXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CxhyOYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pIM/7927Z7gHgnumeBeCe6d4D4J7pvgfgnun+AByZgJD0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03QBI9L8PgET0jwxARHJ3hSgicneEqCpyZ4WoKnJ3hGgmcmeFaCZyd4ToLnJnhegucneEGCFyZ4UYIXJ3hJgoMJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gmOSfDSBC9L8PIEr0jwygSvSvDqBK9J8NoEr0vw+gRvSPDGBG9K8OYEb0nw1gRvS/D2BO9I8M4E70rw7gTvSfDeBO9L8P4EH0jwwQQfSvDhBB9J8NEEH0vw8QSfSPDJBJ9K8OkEn0nw2QSfS/D5BF9I8MUEX0rw5QRfSfDVBF9L8PUE30jwzQTfSvDtBN9J8N0E30vw/QQ/SPDDBD9K8OMEP0nw0wQ/S/DzBL9I8MsEv0rw6wS/SfDbBL9L8PsEf0jwxwR/SvDnBH9J8NcEf0vw9wT/SPDPBP9K8O8E/0nw3wTH/hcTKQ5JcXiK46Y4NMXxUhw/xWH/Oz5BihOmOFGKE6c4SYqTpjgixclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVIcmeKsKc6W4uwpzpHinCnOleLcKc6T4rwpzpfi/CkukOKCKS6U4sIpLpLioimS4mIpLp7iEikumeJSKS6d4jIpLpvicikun+IKKa6Y4koprpziqBRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd0U10tx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U90lx3xT3S3H/FA9I8cAUD0rx4BQPSfHQFA9L8fAUj0jxyBSPSvHoFI9J8dgUTfG4FI9P8YQUT0xxdIonpXhyiqekeGqKp6V4eopnpHhmimeleHaK56R4bornpXh+ihekeGGKF6V4cYqXpDiYYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp/imBQvTfGyFC9P8YoUr0zxqhSvTvGaFK9N8boUr0/xhhRvTPGmFG9O8ZYUb03xthRvT/GOFO9M8a4U707xnhTvTfG+FO9P8YEUH0zxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/01xbIoDGQ7JcJwMx81waIbjZTh+hsMyHJ7hBBlOmOFEGU6c4SQZTprhiAwny3DyDKfIcMoMp8pw6gznfHRgYNoMp8tw+gxnyHDGDGfKcOYMZ8lwZIazZjhbhrNnOMd/8zKcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzXCTDRTMkw8UyXDzDJTJcMsOlMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDnDURmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvhnul+H+GR6Q4YEZHpThwRkekuGhGR6W4eEZHpHhkRkeleHRGR6T4bEZmuFxGR6f4QkZnpjh6AxPyvDkDE/J8NQMT8vw9AzPyPDMDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyXAwwyDDMMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMuwz7DMRlemuFlGV6e4RUZXpnhVRleneE1GV6b4XUZXp/hDRnemOFNGd6c4S0Z3prhbRnenuEdGd6Z4V0Z3p3hPRnem+F9Gd6f4QMZPpjhQxk+nOEjGT6a4WMZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+neE7Gb6b4XsZvp/hBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvh2AwHchyS4zg5jpvj0BzHy3H8HIflODzHCXKcMMeJcpw4x0lynDTHETlOluPkOU6R45Q5TpXj1DlOk+O0OU6X4/Q5zpDjjDnOlOPMOc6S48gcZ81xthxnz3GOHOfMca4c585xnhznzXG+HOfPcYEcF8xxoRwXznGRHBfNkRwXy3HxHJfIcckcl8px6RyXyXHZHJfLcfkcV8hxxRxXynHlHEfluEqOq+a4Wo6r57hGjmvmuFaOa+e4To7r5rhejuvnuEGOG+a4UY4b57hJjpvmuFmOm+e4xeD/yvkct85xmxy3zXG7HLfPcYccd8xxpxx3znGXHHfNcbccd89xjxz3zHGvHPfOcZ8c981xvxz3z/GAHA/M8aAcD87xkBwPzfGwHA/P8Ygcj8zxqByPzvGYHI/N0RyPy/H4HE/I8cQcR+d4Uo4n53hKjqfmeFqOp+d4Ro5n5nhWjmfneE6O5+Z4Xo7n53hBjhfmeFGOF+d4SY6DOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY5jsnx0hwvy/HyHK/I8cocr8rx6hyvyfHaHK/L8focb8jxxhxvyvHmHG/J8dYcb8vx9hzvyPHOHO/K8e4c78nx3hzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8cx+Y4UOCQAscpcNwChxY4XoHjFziswOEFTlDghAVOVODEBU5S4KQFjihwsgInL3CKAqcscKoCpy5wmgKnLXC6AqcvcIYCZyxwpgJnLnCWAkcWOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogRS4WIGLF7hEgUsWuFSBSxe4TIHLFrhcgcsXuEKBKxa4UoErFziqwFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tkALPK7A4ws8ocATCxxd4EkFnlzgKQWeWuBpBZ5e4BkFnlngWQWeXeA5BZ5b4HkFnl/gBQVeWOBFBV5c4CUFDhYYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYFzimwEsLvKzAywu8osArC7yqwKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcL/LjARwt8rMDHC3yiwCcLfKrApwt8psBnC3yuwOcLfKHAFwt8qcCXC3ylwFcLfK3A1wt8o8A3C3yrwLeHDgz8F3PvFvhege8X+EGBHxb40f+u/UmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4R4F/FvhXgX8X+E+B/xY4tsCBEoeUOE6J45Y4tMTxShy/xGElDi9HOkGJE5Y4UYkTlzhJiZOWOKLEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+HPY/ta0ZS5ypxJlLnKXEkSXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLloiJS5W4uIlLlHikiUuVeLSJS5T4rIlLlfi8iWuUOKKJa5U4soljipxlRJXLXG1ElcvcY0S1yxxrRLXLnGdEtctcb0S1y9xgxI3LHGjEjcucZMSNy1xsxI3L3GLErcscasSty5xmxK3LXG7ErcvcYcSdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfl37NixHl7iESUeWeJRJR5d4jElHluiJR5X4vElnlDiiSWOLvGkEk8u8ZQSTy3xtBJPL/GMEs8s8awSzy7xnBLPLfG8Es8v8YISLyzxohIvLvGSEgdLDEoMS4xKjEtMSkxLzErMSyxKLEusSqxLbEpsS+xK7EscU+KlJV5W4uUlXlHileMNDPzH6tUlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHinSXeVeLdJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/JY4tcaDCIRWOU+G4FQ6tcLwKx69wWIXDK5ygwgkrnKjCiSucpMJJKxxR4WQVTl7hFBVOWeFUFU5d4TQVTlvhdBUODAyM/k8Oz1jhTBXOXOEsFY6scNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+6v/V7heqcOEKF6lw0QqpcLEKF69wiQqXrHCpCpeucJkKl61wuQqXr3CFClescKUKV65wVIWrVLhqhatVuHqFa1S4ZoVrVbh2hetUuG6F61W4foUbVLhhhRtVuHGFm1S4aYWbVbh5hVtUuGWFW1W4dYXbVLhthdtVuH2FO1S4Y4U7VbhzhbtUuGuFu1W4e4V7VLhnhXtVuHeF+1S4b4X7Vbh/hQdUeGCFB1V4cIWHVHhohYdVeHiFR1R4ZIVHVXh0hcdUeGyFVnhchcdXeEKFJ1Y4usKTKjy5wlOq//cP9ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhYIVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hWMqvLTCyyq8vMIrKryywqsqvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7Kry7wnsqvLfC+yq8v8IHKnywwocqfLjCRyp8tMLHKny8wicqfLLCpyp8usJnKny2wucqfL7CFyp8scKXKny5wlcqfLXC1yp8vcI3KnyzwrcqfLvCdyp8t8L3Kny/wg8q/LDCjyr8uMJPKvy0ws8q/LzCLyr8ssKvKvy6wm8q/LbC7yr8vsIfKvyxwp8q/LnCXyr8tcLfKvy9wj8q/LPCvyr8u8J/Kvy3wrH/xWaNQ2ocp8Zxaxxa43g1jl/jsBqH1zhBjRPWOFGNE9c4SY2T1jiixslqnLzGKWqcssapapy6xmlqnLbG6WqcvsYZapyxxplqnLnGWWocWeOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1LlLjojVS42I1Ll7jEjUuWeNSNS5d4zI1LlvjcjUuX+MKNa5Y40o1rlzjqBpXqXHVGlercfUa16hxzRrXqnHtGtepcd0a16tx/Ro3qHHDGjeqceMaN6lx0xo3q3HzGreoccsat6px6xq3qXHbGrercfsad6hxxxp3qnHnGnepcdcad6tx9xr3qHHPGveqce8a96lx3xr3q3H/Gg+o8cAaD6rx4BoPqfHQGg+r8fAaj6jxyBqPqvHoGo+p8dgarfG4Go+v8YQaT6xxdI0n1XhyjafUeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Xh+jRfUeGGNF9V4cY2X1DhYY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jmBovrfGyGi+v8Yoar6zxqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xthpvr/GOGu+s8a4a767xnhrvrfG+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpmtf/T4/lszU+V+PzNb5Q44s1vlTjyzW+UuOrNb5W4+s1vlHjmzW+VePbNb5T47s1vlfj+zV+UOOHNX5U48c1flLjpzV+VuPnNX5R45c1flXj1zV+U+O3NX5X4/c1/lDjjzX+VOPPNf5S4681/lbj7zX+UeOfNf5V4981/lPjvzWOrXGgwSENjtPguA0ObXC8BsdvcFiDwxucoMEJG5yowYkbnKTBSRsc0eBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNjmxw1gZna3D2BudocM4G52pw7gbnaXDeBudrcP4GF2hwwQYXanDhBhdpcNEGaXCxBhdvcIkGl2xwqQaXbnCZBpdtcLkGl29whQZXbHClBlducFSDqzS4aoOrNbh6g2s0uGaDazW4doPrNLhug+s1uH6DGzS4YYMbNbhxg5s0uGmDmzUM/4+NLRrcssGtGty6wW0a3LbB7RrcvsEdGtyxwZ0a3LnBXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLrBYxo8tkEbPK7B4xs8ocETGxzd4EkNntzgKQ2e2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNDjYYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYNzimwUsbvKzByxu8osErG7yqwasbvKbBaxu8rsHrG7yhwRsbvKnBmxu8pcFbG7ytwdsbvKPBOxu8q8G7G7ynwXsbvK/B+xt8oMEHG3yowYcbfKTBRxt8rMHHG3yiwScbfKrBpxt8psFnm//SwJD/0UovNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNPhlg181+HWD3zT4bYPfNfh9gz80+GODPzX4c4O/NPhrg781+HuDfzT4Z4N/Nfh3g/80+G+DYxscaHFIi+O0OG6LQ1scr8XxWxzW4vAWJ2hxwhYnanHiFidpcdIWR7Q4WYuTtzhFi1O2OFWLU7d4zaQ4bYvTtTh9izO0OGOLM7U4c4uztDiyxVlbnK3F2Vuco8U5W5yrxblbnKfFeVucr8X5W1ygxQVbXKjFhVtcpMVFW6TFxVpcvMUlWlyyxaVaXLrFZVpctsXlWly+xRVaXLHFlVpcucVRLa7S4qotrtbi6i2u0eKaLa7V4totw9Zpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrcbGLXjf77eocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KvFvVvcp8V9W9yvxf1bPKDFA1s8qMWDWzykxUNbPKzFw1s8osUjWzyqxaNbPKbFY1u0xeNaPL7FE1o8scXRLZ7U4sktntLiqS2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4mCLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYtj2pFe2uJlLV7e4hUtXtniVS1e/R9bLV7b4nUtXt/iDS3e2OJNLd7c4i0t3tribS3e3uIdLd7Z4l0t3t3iPS3e2+J9Ld7f4gMtPtjiQy0+3OIjLT7a4mMtPt7iEy0+2eJTLT7d4jMtPtvicy0+3+ILLb7Y4kvt+P+TD15p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8W/2rx7xb/afHfFse2ONDhkA7H6XDcDod2OF6H43c4rMPhHU7Q4YQdTtThxB1O0uGkHY7ocLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5Hdjhrh7N1OHuHc3Q4Z4dzdTh3h/N0OG+H83U4f4cLdLhghwt1uHCHi3S4aId0uFiHi3e4RIdLdrhUh0t3uEyHy3a4XIfLd7hChyt2uFKHK3c4qsNVOly1w9U6XL3DNTpcs8O1Oly7w3U6XLfD9Tpcv8MNOtyww4063LjDTTrctMPNOty8wy063LLDrTrcusNtOty2w+063L7DHTrcscOdOty5w1063LXD3TrcvcM9Otyzw7063LvDfTrct8P9Oty/wwM6PLDDgzo8uMNDOjy0w8M6PLzDIzo8ssOjOjy6w2M6PLZDOzyuw+M7PKHDEzsc3eFJHZ7c4SkdntrhaR2e3uEZHZ7Z4Vkdnt3hOR2e2+F5HZ7f4QUdXtjhRR1e3OElHQ52GHQYdhh1GHeYdJh2mHWYd1h0WHZYdVh32HTYdth12Hc4psNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzsc2+FAj0N6HKfHcXsc2uN4PY7f47Aeh/c4QY8T9jhRjxP3OEmPk/Y4osfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6HNnjrD3O1uPsPc7R45w9ztXj3D3O0+O8Pc7X4/w9LtDjgj0u1OPCPS7S46I90uNiPS7e4xI9LtnjUj0u3eMyPS7b43I9Lt/jCj2u2ONKPa7c46geV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf3RAwP/+WzDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dge7fG4Ho/v8YQeT+xxdI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj2f1eHaP5/R4bo/n9Xh+jxf0eGGPF/V4cY+X9DjYY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY9/jmB4v7fGyHi/v8Yoer+zxqh6v7vGaHq/t8boer+/xhh5v7PGmHm/u8ZYeb+3xth5v7/GOHu/s8a4e7+7xnh7v7fG+Hu/v8YEeHxwyMPCfLx7u8ZEeH+3xsR4f7/GJHp/s8aken+7xmR6f7fG5Hp/v8YUeX+zxpR5f7vGVHl/t8bUeX+/xjR7f7PGtHt/u8Z0e3+3xvR7f7/GDHj/s8aMeP+7xkx4/7fGzHj/v8Ysev+zxqx6/7vGbHr/t8bsev+/xhx5/7PGnHn/u8Zcef+3xtx5/7/GPHv/s8a8e/+7xnx7/7XFsjwNjcMgYHGcMjjsGh47B8cbg+GNw2BgcPgYnGIMTjsGJxuDEY3CSMTjpGBwxBicbw/9H1DkHcXY0a3izsW3sxsYTOxvbtm3jiW3bOjZ+sW3btu29tffLd+9fp46qut7ut6enZ6bbSQOcLMDJA5wiwCkDnCrAqQOcJsBpA5wuwOkDnCHAGQOcKcBhAQ4PcOYAZwlw1gBnC3D2AOcIcM4A5wpw7gDnCXDegN//rYTsAgEuGOBCARLgwgEuEuCiAS4W4OIBLhHgkgEuFeDSAS4T4LIBLhfg8gGuEOCIAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqAAN8OgAjwnw2ACPC/D4AE8I8MQATwrw5ABPCfDUAE8L8PQAzwjwzADPCvDsAM8J8NwAzwvw/AAvCPDCAC8K8OIALwnw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsABwHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+9S8fvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8JcGSAQ0IcLcShIY4e4hghjhniWCGOHeI4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCEOC3F4iDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIiEuHCIi4S4aIiLhbh4iEuEuGSIS4W4dIjLhLhsiMuFuHyIK4Q4IsQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCpEQzw6xGNCPDbE40I8PsQTQjwxxJNCPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCvDrEa0K8NsTrQrw+xBtCvDHEm0K8OcQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xEGIt4R4a4i3hXh7iHeEeGeId4V4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjPhfh8iC+E+GKIL4X4coivhPhqiK+F+HqIb4T4Zohvhfh2iO+E+G6I74X4fogfhPhhiB+F+HGIn4T4aYifhfh5iF+E+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hPhniH+F+HeI/4Q4MsQhEY4W4dAIR49wjAjHjHCsCMeOcJwIx41wvAjHj3CCCCeMcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCIdFODzCmSOcJcJZI5wtwtkjnCPCOSOcK8K5I5wnwnkjnC/C+SNcIMIFI1woQiJcOMJFIlw0wsUiXDzCJSJcMsKlIlw6wmUiXDbC5SJcPsIVIhwR4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFaERHh3hMREeG+FxER4f4QkRnhjhSRGeHOEpEZ4a4WkRnh7hGRGeGeFZEZ4d4TkRnhvheRGeH+EFEV4Y4UURXhzhJRFeGuFlEV4e4RURXhnhVRFeHeE1EV4b4XURXh/hDRHeGOFNEd4cYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hIMJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg+iof/p/x3hxxF+EuGnEX4W4ecRfhHhlxF+FeHXEX4T4bcRfhfh9xH+EOGPEf4U4c8R/hLhrxH+FuHvEf4R4Z8R/hXh3xH+E+HICIfEOFqMQ2McPcYxYhwzxrFiHDvGcWIcN8bxYhw/xglinDDGiWKcOMZJYpw0xslinDzGKWKcMsapYpw6xmlinDbG6WKcPsYZYpwxxpliHBbj8BhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhhH/tv1e8EYF4qRGBeOcZEYF41xsRgXj3GJGJeMcakYl45xmRiXjXG5GJePcYUYR8S4YowrxbhyjKvEuGqMq8W4eoxrxLhmjGvFuHaM68S4bozrxbh+jBvEuGGMG8W4cYybxLhpjJvFuHmMW8Q45N9avFvHuE2M28a4XYzbx7hDjDvGuFOMO8e4S4y7xrhbjLvHuEfM8XvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjMZ4dIzHxHhsjMfFeHyMJ8R4YownxXhyjKfEeGqMp8V4eoxnxHhmjGfFeHaM58R4boznxXh+jBfEeGGMF8V4cYyXxHhpjJfFeHmMV8R4ZYxXxXh1jNfEeG2M18V4fYw3xHhjjDfFeHOMQYxhjFGMcYxJjGmMWYz5KJrEWMZYxVjH2MSMPepZF2Mf4yDGW2K8NcbbYrw9xjtivDPGu2K8O8Z7Yrw3xvtivD/GB2J8MMaHYnw4xkdifDTGx2J8PMYnYnwyxqdifDrGZ2J8NsbnYnw+xhdifDHGl2J8OcZXYnw1xtdifD3GN2J8M8a3Ynw7xndifDfG92J8P8YPYvwwxo9i/DjGT2L8NMbPYvw8xi9i/DLGr2L8OsZvYvw2xu9i/D7GH2L8McafYvw5xl9i/DXG32L8PcY/Yvwzxr9i/DvGf0bxaJRtJjhagkMTHD3BMRIcM8GxEhw7wXESHDfB8RIcP8EJEpwwwYkSnDjBSRKcNMHJEpw8wSlG/fvvJompE5wmwWkTnC7B6ROcIcEZE5wpwWEJDk9w5gRnSXDWBGdLcPYE50hwzgTnSnDuBOdJcN4E50tw/gQXSHDBBBdKkAQXTnCRBBdNcLEEF09wiQSXTHCpBJdOcJkEl01wuQSXT3CFBEckuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH3Cfw/+u1OCOye4S4K7JrhbgrsnuEeCeya4V4J7J7hPgvsmuF+C+yd4QIIHJnhQggcneEiChyZ4WIKHJ3hEgkcmeFSCJnh0gsf8i+lxCR6f4AkJnpjgSQmenOApCZ6a4GkJnp7gGQmemeBZCZ6d4DkJnpvgeQmen+AFCV6Y4EUJXpzgJQlemuBlCV6e4BUJXpngVQleneA1CV6b4HUJXp/gDQnemOBNCd6cYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gIMFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYeS//S0fCTBRxN8LMHHE3wiwScTfCrBpxN8JsFnE3wuwecTfCHBFxN8KcGXE3wlwVcTfC3B1xN8I8E3E3wrwbcTfCfBdxN8L8H3E/wgwQ8T/CjBjxP8JMFPE/wswc8T/CLBLxP8KsGvE/wmwW8T/C7B7xP8IcEfE/wpwZ8T/CXBXxP8LcHfE/wjwT8T/CvBvxP8J8GRCQ5JcbQUh6Y4eopjpDhmimOlOHaK46Q4borjpTh+ihOkOGGKE6U4cYqTpDhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOCzF4SnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpkuLCKS6S4qIpLpbi4ikukeKSKS6V4tIpLpPisikul+LyKa6Q4ogUV0xxpRRXTnGVFFdNcbUUV09xjRTXTHGtlHHWTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN00ZMgrXzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCpFUzw6xWNSPDbF41I8PsUTUjwxxZNSPDnFU1I8NcXTUka5cs9I8cwUz0rx7BTPSfHcFM9L8fwUL0jxwhQvSvHiFC9J8dIUL0vx8hSvSPHKFK9K8eoUr0nx2hSvS/H6FG9I8cYUb0rx5hSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FAcp3pLirSneluLtKd6R4p0p3pXi3Snek+K9Kd6X4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+kf468skUn0rx6RSfSfHZFJ9L8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cOUcf87HnyS4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4sgUh2Q4WoZDMxw9wzEyHDPDsTIcO8NxMhw3w/EyHD/DCTKcMMOJMpw4w0kynDTDyTKcPMMpMpwyw6kynDrDaTKcNsPpMpw+wxkynDHDmTIcluHwDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIH/HgfIkAwXznCRof+5XyzDxTNcIsMlM1wqw6UzXCbDZTNcLsPlM1whwxEZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGZrh0Rkek+GxGR6X4fEZnpDhiRmelOHJGZ6S4akZnpbh6RmekeGZGZ6V4dkZnpPhuRmel+H5GV6Q4YUZXpThxRlekuGlGV6W4eUZXpHhlRleleHVGV6T4bUZXpfh9RnekOGNGd6U4ZB/I6IwwyjDOMMkwzTDLMM8wyLDMsMqwzrDJsM2wy7DPsNBhrdkeGuGt2V4e4Z3ZHhnhndleHeG92R4b4b3ZXh/hg9k+GCGD2X4cIaPZPhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz42S+T18IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/GAIfpjhRxl+nOEnGX6a4WcZfp7hFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/GY4cJXuOo+U4NMfRcxwjxzFzHCvHsXMcJ8dxcxwvx/FznCDHCXOcKMeJc5wkx0lznCzHyXOcIscpc5wqx6lznCbHaXOcLsfpc5whxxlznCnHYTkOz3HmHGfJcdYcZ8tx9hznyHHOHOfKce4c58n/fx49f44L5LhgjgvlSI4L57hIjovmuFiOi+e4RI5L5rhUjkvnuEyOy+a4XI7L57hCjiNyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8Z/RRvnzLHLfKcesct8lx2xy3y3H7HHfIccccd8px53/x3jXH3XLcPcc9hg9xzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rRHI/O8Zgcj83xuByPz/GEHE/M8aQcT87xlBxPzfG0HE/P8Ywcz8zxrBzPzvGcHM/N8bwcz8/xghwvzPGiHC/O8ZIcL83xshwvz/GKHK/M8aocr87xmhyvzfG6HK/P8YYcb8zxphxvzjHIMcwxyjHOMckxzTHLMc+xyLHMscrHGlLn2OTY5tjl2Oc4yPGWHG/N8bYx8PYc78jxzhzvyvHuHO/J8d4c78vx/hwfyPHBHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL8Zpbsh+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T44jR3GqwNEKHFrg6AWOUeCYBY5V4NgFjlPguAWOV+D4BU5Q4IQFTlTgxAX+U+CkBU5W4OQFTlHglAVOVeDUBU5T4LQFTlfg9AXOUOCMBc5U4LAChxc4c4GzFDhrgbMVOHuBcxQ4Z4FzFTh3gfMUOG+B8xU4f4ELFLhggQsVSIELF7hIgYsWuFiBixe4RIFLFrhUgUsXuEyByxa4XIHLF7hCgSMKXLHAlQpcucBVCly1wNUKXL3ANQpcs8C1Cly7wHUKXLfA9Qpcv8ANCtywwI0K3LjATQrctMDNCty8wC0K3LLArQrcusBtCty2wO0K3L7AHQrcscCdCty5wF0K3LXA3QrcvcA9CtyzwL0K3LvAfQrct8D9Cty/wAMKPLDAgwo8uMBDCjy0wMMKPLzAIwo8ssCjCrTAows8psBjCzyuwOMLPKHAEws8qcCTCzylwFMLPK3A0ws8o8AzCzyrwLMLPKfAcws8r8DzC7ygwAsLvKjAiwu8pMBLC7yswMsLvKLAKwu8qsCrC7ymwGsLvK7A6wu8ocAbC7ypwJsLDAoMC4wKjAtMCkyL/42NzQssCiwLrAqsC2yKif43d94V2Bc4KPCWAm8t8LYCby/wjgLvLPCuAu8u8J4C7y3wvgLvL/CBAh8s8KECHy7wkQIfLfCxAh8v8IkCnyzwqQKfLvCZAp8t8LkCnx+F5RB8scCXCny5wFcKfLXA1wp8vcA3CnyzwLcKfLvAdwp8t8D3Cny/wA8K/LDAjwr8uMBPCvy0wM8K/LzALwr8ssCvCvy6wG8K/LbA7wr8vsAfCvyxwJ8K/LnAXwr8tcDfCvy9wD8K/LPAvwr8+1/ejixwSImjlTi0xNFLHKPEMUscq8SxSxynxHFLHK/E8UucoMQJS5yoxIlLnKTESUucrMTJS5yixClLnKrEqUucpsRpS5yuxOlLnKHEGUucqcRhJQ4vceYSZylx1hJnK3H2Eucocc4S5ypx7hLnKXHeEucrcf4SFyhxwRIXKpESFy5xkRIXLXGxEhcvcYkSlyxxqRKXLnGZEpctcbkSly9xhRJHlLhiiSuVuHKJq5S4aomrlbh6iWuUuGaJa5W4donrlLhuieuVuH6JG5S4YYkblbhxiZuUuGmJm5W4eYlblLhliVuVuHWJ25S4bYnblbh9iTuUuGOJO5W4c4m7lLhribuVuHuJe5S4Z4l7lbh3ifuUuG+J+5W4f4kHlHhgiQeVeHCJh5R4aImHlXh4iUeUeGSJR5VoiUeXeEyJx5Z4XInHl3hCiSeWeFKJJ5d4SomnlnhaiaeXeEaJZ5Z4Volnl3hOieeWeF6J55d4QYkXlnhRiReXeEmJl5Z4WYmXl3hFiVeWeFWJV5d4TYnXlnhdideXeEOJN5Z4U4k3lxiUGJYYlRiXmJSYlpiVmJdYlFiWWJVYl9iU2JbYlfjy/Dgo8ZYSby3xthJvL/GOEu8s8a4S7y7xnhLvLfG+Eu8v8YESHyzxoRIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aVRMpT4Somvlvhaia+X+EaJb5b4Volvl/hOie+W+F6J75f4QYkflvhRiR+X+EmJn5b4WYmfl/hFiV+W+FWJX5f4TYnflvhdid+X+EOJP5b4U4k/l/hLib+W+FuJv5f4R4l/lvhXiX+X+E+JI0scUuFoI8ceMuo6eoVjVDhmhWNVOHaF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOKzC4RXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVUuHCFS5S4aIVLlbh4hUuUeGSFS5V4dIVLlPhshUuV+HyFa5Q4YgKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwq1E4/5uy2LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywqMqtMKjKzymwmMrPK7C4ys8ocITKzypwpMrPKXCUys8rcLTKzyjwjMrPKvCsys8p8JzKzyvwvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrvKbCayu8rsLrK7yhwhsrvKnCmysMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsKxxUeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFj1f4RIVPVvhUhU9X+EyFz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71dj/V/dhY8q/LjCTyr8tMLPRo78z6sKv6zwqwq/rvCbCr+t8LsKv6/whwp/rPCnCn+u8JcKf63wtwp/r/CPCv+s8K8K/67wnwpHVjikxtFqHFrj6DWOUeOYNY5V49g1jlPjuDWOV+P4NU5Q44Q1TlTjxDVDJqlx0honq3HyGqeoccoap6px6hqnqXHaGqercfoaZ6hxxhpnqnFYjcNrnLnGWWqctcbZapy9xjlqnLPGuWqcu8Z5apy3xvlqnL/GBWpcsMaFaqTGhWtcpMZFa1ysxsVrXKLGJWtcqsala1ymxmVrXK7G5WtcocYRNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTVa49E1HlPjsfV/YtZRuj+hxhPr/1+3PaXGU2s8rcbTazyjxjNrPKvGs2s8p2bYKLs5r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsara7ymxmtrvK7G62u8ocYba7ypxptrDGoMa4xqjGtMakxrzGrMayxqLGusaqxrbGpsa+xq7Gsc1HhLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb8P/VexNf5V4981/lPjyBqHNDhag0MbHL3BMRocs8GxGhy7wXEaHLfB8Rocv8EJGpywwYkanLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGhzW4PAGZ25wlgZnbXC2BmdvcI4G52xwrgbnbnCeBudtcL4G529wgQYXbHChBmlw4QYXaXDRBhdrcPEGl2hwyQaXanDpBpdpcNkGl2tw+QZXaHBEgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoNrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYP/jBw5crsGt29whwZ3bHCnBnducJcGd21wtwZ3b3CPBvdscK8G925wnwb3bXC/Bvdv8IAGD2zwoAYPbvCQBg9t8LAGD2/wiAaPbPCoBh1lB2MO8ZgGj23wuAaPb/CEBk9s8KQGT27wlAZPbfC0Bk9v8IwGz2zwrAbPbvCcBs9t8LwGz2/wggYvbPCiBi9u8JIGL23wsgYvb8b4v7HtqgavbvCaBq9t8LoGr2/whgZvbPCm/37a/CdvGjUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYNzho8JYGb23wtgZvb/COBu9s+C8TvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsGnG3ymwWcbfK7B5xt8ocEXG3ypwZcbfKXBVxt8rcHXG3yjwTcbfKvBtxt8p8F3G3yvwfcb/KDBD5sxJx6F08cNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N+jbLDBkQ0OaXG0Foe2OHqLY7Q4ZotjtTh2i+O0OG6L47U4fosTtDhhixO1OHGLk7Q4aYuTtTh5i1O0OGWLU7U4dYvTtDhti9O1OH2LM7Q4Y4sztTisxeEtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLdLiwi0u0uKiLS7W4uItLtHiki0u1eLSLS7T4rItLtfi8i2u0OKIFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb32f+uaDdmgxQ1b3KjFjVvcpMVNW9ysxc1b3KLFLVvcqsWtW9ymxW1b3K7F7VvcocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KvFvVvcp8V9W9yvxf1bPKDFA1s8qMWDWzykxUNbPKzFw1s8osUjWzyqRVs8usVjWjy2xeNaPL7FE1o8scWTWjy5xVNaPLXF01o8vcUzWjyzxbNaPLvFc1o8t8XzWjy/xQtavLDFi1q8uMVLWry0xctavLzFK1q8ssWrWry6xWtavLbF61q8vsUbWryxxZtavLnFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsVBi7e0eGuLt7V4e4t3tHhni3e1eHeL97R4b4v3tXh/iw+0+GCLD7X4cIuPtPhoi4+1+HiLT7T4ZItPtfh0i8+0+GyLz7X4fIsvtPhiiy+1+HKLr7T4aouvtfh6i2+0+GaLb7X4dovvtPhui++1+H6LH7T4YYsftfhxi5+0+GmLn7X4eYtftPhli1+1+HWL37T4bYvftfh9iz+0+GOLP7X4c4u/tPhri7+1+HuLf7T4Z4t/tfh3i/+0OHKUDXc4WodDOxy9wzE6HLPDsToce5QX7nDcDsfrcPwOJ+hwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pwWIfDO5y5w1k6nLXD2TqcvcM5Opyzw7k6nLvDeTqct8P5Opy/wwU6XLDDhTqkw4U7XKTDRTtcrMPFO1yiwyU7XKrDpTtcpsNlO1yuw+U7XKHDER2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEd2uHRHR7T4bEdHtfh8R2e0OGJHZ7U4ckdntLhqR2e1uHpHZ7R4ZkdntXh2R2e0+G5HZ7X4fkdXtDhhR1e1OHFHV7S4aUdXtbh5R1e0eGVHV7V4dUdXtPhtR1e1+H1Hd7Q4Y0d3tThzR0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh32HQ46vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDkR0O6XG0Hof2OHqPY/Q4Zo9j9Th2j+P0OG6P4/U4fo8T9DhhjxP1OHGPk/Q4aY+T9Th5j1P0OGWPU/U4dY/T9Dhtj9P1OH2PM/Q4Y48z9Tisx+E9ztzjLD3O2uNsPc7e4xw9ztnjXD3O3eM8Pc7b43w9zt/jAj0u2ONCPdLjwj0u0uOiPS7W4+I9LtHjkj0u1ePSPS7T47I9Ltfj8j2u0OOIHlfscaUeV+5xlR5X7XG1HlfvcY0e1+xxrR7X7nGdHtftcb0e1+9xgx437HGjHjfucZMeN+1xsx4373GLHrfsOWEUzlv3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe47AvXrcu8d9ety3x/163L/HA3o8sMeDejy4x0N6PLTHw3o8vMcjejyyx6N6tMejezymx2N7PK7H43s8occTezypx5N7PKXHU3s8rcfTezyjxzN7PKvHs3s8p8dzezyvx/N7vKDHC3u8qMeLe7ykx0t7vKzHy3u8oscre7yqx6t7vKbHa3u8rsfre7yhxxt7vKnHm3sMegx7jHqMe0x6THvMesx7LHose6x6rHtsemx77Hrsexz0eEuPt/Z4W4+393hHj3f2eFePd/csyJAh3tvjfT3e3+MDPT7Y40M9PtzjIz0+2uNjPT7e4xM9Pvnf8qg9PtPjsz0+1+Pz/dD/m+O81OPLPb7S46v9H+lrPb7e4xs9vtnjWz2+3eM7Pb7b43s9vt/jBz1+2ONHPX7c4yc9ftrjZz1+3uMXPX7Z41c9ft3jNz1+2+N3PX7f4w89/tjjTz3+3OMvPf7a4289/t7jHz3+2eNfPf7d4z89juxxyABHG+DQAY4+wDEGOOYAxxrg2AMcZ4DjDnC8AY4/wAkGOOEAJxrgxAOcZICTDnCyAU4+wCkGOOUApxrg1AOcZoDTDnC6AU4/wBkGOOMAZxrgsAEOH+DMA5xlgLMOcLYBzj7AOQY45wDnGuDcA5xngPMO/n9/2AIDXHCACw2QAS48wEUGuOgAFxvg4gNcYoBLDnCpAS49wGUGuOwAlxvg8gNcYYAjBrjiAFca4MoDXGWAqw5wtQGuPsA1BrjmANca4NoDXGeA6w5wvQGuP8ANBrjhADca4MYD3GSA/0PUO/iBdWzvu0maNKlt23hq27ZtM+VTpLZS23abbaO229S2kTK5n/7OOff7B+w9S+9grXfWbB3gNgFuG+B2AW4f4A4B7hjgTgHuHOAuAe4a4G4B7h7gHgHuGeBeAe4d4D4B7hvgfgHuH+ABAR4Y4EEBHhzgIQEeGuBhAR4e4BEBHhng8ACPCvDoAI8J8NgAjwvw+AAN8IQATwzwpABPDnBEgKcEeGqApwV4eoBnBHhmgGcFeHaA5wR4boDnBXh+gBcEeGGAFwV4cYCXBDgywEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwMcFWAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2Af4GMBPh7gEwE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwGODvDtAN8J8N0A3wvw/QA/CPDDAD8K8OMAPwnw0wA/C/DzAL8I8MsAvwrw6wC/CfDbAL8L8PsAfwjwxwB/CvDnAH8J8NcAfwtwTIC/B/hHgH8G+FeAfwf4T4BjAxz3L55CHBjioBDHC3FwiENCHD/EoSEOC3GCECcMcaIQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhBnDHGmEGcOcZYQZw1xthBnD3GOEOcMca4Q5w5xnhDnDXG+EOcPcYEQFwxxoRAXDnGREBcNcbEQFw+REJcIcckQlwpx6YH/JQqGuFyIy4e4QogrhrhSiCuHuEqIq4a4Woirh7hGiGuGuFaIa4e4TojrhrheiOuHuEGIG4a4UYgbh7hJiJuGuFmIm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh44cOsfw/+p5RIhHhjg8xKNCPDrEY0I8NsTjQjw+REM8IcQTQzwpxJNDHBHiKSGeGuJpIZ4e4hkhnhniWSGeHeI5IZ4b4nkhnh/iBSFeGOJFIV4c4iUhjgzx0hAvC/Hycf+R6coQrwrx6hCvCfHaEK8L8foQbwjxxhBvCvHmEG8J8dYQbwvx9hDvCPHOEO8K8e4Q7wnx3hDvC/H+EB8I8cEQHwrx4RAfCfHREEeFGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2If4WIiPh/hEiE+G+FSIT4f4TIjPhvhciM+H+EKIL4b4Uogvh/hKiK+G+FqIr4f4RohvhvhWiKNDfDvEd0J8N8T3Qnw/xA9C/PC/GPs4xE9C/DTEz0L8PMQvQvwyxK9C/DrEb0L8NsTvQvw+xB9C/DHEn0L8OcRfQvw1xN9CHBPi7yH+EeKfIf4V4t8h/hPi2BDHhTggwoERDopwvAgHRzgkwvEjHBrhsAgniHDCCCeKcOIIJ4lw0ggni3DyCKeIcMoIp4pw6giniXDaCKeLcPoIZ4hwxghninDmCGeJcNYIZ4tw9gjniHDOCOeKcO4I54lw3gjni3D+CBeIcMEIF4pw4QgXiXDRCBeLcPEIiXCJCJeMcKkIl45wmQiXjXC5CJePcIUIV4xwpQhXjnCVCFeNcLUIV49wjQjXjHCtCNeOcJ0I141wvQjXj3CDCDeMcKMIN45wkwg3jXCzCDcfMMwtItzyf/vDCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICIdHeFSER0d4TITHRnhchMdHaIQnRHhihCf9a/8BOCLCUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksiHBnhpRFeFuHlEV4R4ZURXhXh1RFeE+G1EV4X4fUR3hDhjRHeFOHNEd4S4a0R3hbh7RHeEeGdEd4V4d0R3hPhvRHeF+H9ET4Q4YMRPhThwxE+EuGjEY6KMIgwjDCKMI4wiTCNMIswj7CIsIywirCOsImwjbCLsI/wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCEdH+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0T4ZYRfRfh1hN9E/3dH6PsIf4jwxwh/ivDnCH+J8NcIf4twTIS/R/hHhH9G+FeEf0f4T4RjIxwX4YAYB8Y4KMbxYhwc45AYx49xaIzDYpwgxgljnCjGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcYZY5wpxpljnCXGWWOcLcbZY5wjxjljnCvGuWOcJ8Z5Y5wvxvljXCDGBWNcKMaFY1wkxkVjXCzGxWMkxiViXDLGpWJcOsZlYlw2xuViXD7GFWJcMcaVYlw5xlViXDXG1WJcPcY1YlwzxrViXDvGdWJcN8b1Yv5H23HDGDeKceMYN4lx0xg3i3HzGLeIccsYt4px639t99+Ptotx+xh3iHHHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGIfHeFSMR8d4TIzHxnhcjMfHaIwnxHhijCfFeHKMI2I8JcZTYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGkTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjjQzE+HOMjMT4a46gYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xgfi/HxmIH/LUf6VIxPx/hMjM/G+Nz/5vkYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGEfH+HaM78T4bozvxfh+POT/zxt8FOPHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W45gYf4/xjxj/jPGvGP+O8Z8Yx8Y4LsYBCQ5McFCC4yU4OMEhCY6f4NAEhyU4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnSIJLJLhkgksluHSCyyS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzMt7/8/muCe6W4O4J7pH8p5f8XgnuneA+Ce6b4H4J7p/gAQkemOBBCR6c4CEJHprgYQkenuARCR6Z4PAEj0rw6ASPSfDYBI9L8PgETfCEBE9M8KQET05wRIKnJHhqgqcleHqCZyR4ZoJnJXh2guckeG6C5yV4foIXJHhhghcleHGClyQ4MsFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvOV/nRASvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMFRCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJPpbg4wk+keCTCT6V4NMJPpPgswk+l+DzCb6Q4IsJvpTgywm+kuCrCb6W4OsJvpHgmwm+leDoBN9O8J0E303wvQTfT/CDBD9M8KMEP07wkwQ/TfCzBD9P8IsEv0zwqwS/TvCbBL9N8LsEv0/whwR/TPCnBH9O8JcEf03wtwTHJPh7gn8k+GeCfyX4d4L/JDg2wXEJDkhxYIqDUhwvxcEpDklx/BSHpjgsxQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNWXIv2PPnuIcKc6Z4lwpzp3iPCnOm+J8Kc6f4gIpLpjiQikunOIiKS6a4mIpLp4iKS6R4pIpLpXi0ikuk+KyKS6X4vIprpDiiimulOLKKa6S4qoprpbi6imukeKaKa6V4toprpPiuimul+L6KW6Q4oYpbpTixilukuKmKW6W4uYpbpHililuleLWKW6T4rYpbpfi9inukI47eccUd0px5xR3SXHXFHdLcfcU90hxzxT3SnHvFPdJcd8U90tx/xQPSPHAFA9K8eAUD0nx0BQPS/HwFI9I8cgUh6d4VIpHp3hMisemeFyKx6doiiekeGKKJ6V4coojUjwlxVNTPC3F01M8I8UzUzwrxbNTPCfFc1M8L8XzU7wgxQtTvCjFi1O8JMWRKV6a4mUpXp7iFSlemeJVKV6d4jUpXpvidSlen+INKd6Y4k0p3pziLSnemuJtKd6e4h0p3pniXSneneI9Kd6b4n0p3p/iAyk+mOJDKT6c4iMpPpriqBSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FB9L8fEUn0jxyRSfSvHpFJ9J8dkUn0vx+RRfSPHFFF9K8eUUX0nx1RRfS/H1FN9I8c0U30pxdIpvp/hOiu+m+F6K76f4QYofpvhRih+n+EmKn6b4WYqfp/hFil+m+FWKX6f4TYrfpvhdit+n+EOKP6b4U4o/p/hLir+m+FuKY1L8PcU/Uvwzxb9S/DvFf1Icm+K4FAdkODDDQRmOl+HgDIdkOH6GQzMcluEEGU6Y4UQZTpzhJBlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOEiGS6a4WIZLp4hg3CJDJfMcKkMl85wmQyXzXC5DJfPcIUMV8xwpQxXznCVDFfNcLUMV89wjQzXzHCtDNfOcJ0M181wvQzXz3CDDDfMcKMMN85wkww3zXCzDDfPcIsMt8xwqwy3znCbDLfNcLsMt89whwx3zHCnDHfOcJcMd81wtwx3z3CPDPfMcK8M985wnwz3zXC/DPfP8IAMD8zwoAwPzvCQDA/N8LAMD8/wiAyPzHB4hkdleHSGx2R4bIbHZXh8hmZ4QoYnZnhShidnOCLDUzI8NcPTMjw9wzMyPDPDszI8O8NzMjw3w/MyPD/DCzK8MMOLMrw4w0syHJnhpRleluHlGV6R4ZUZXpXh1Rlek+G1GV6X4fUZ3pDhjRnelOHNGd6S4a0Z3pbh7RnekeGdGd6V4d0Z3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGY7KMMgwzDDKMM4wyTDNMMswz7DIsMywyrDOsMmwzbDLsM/wsQwfz/CJDJ/M8KkMn87wmQyfzfC5DJ/P8IUMX8zwpQxfzvCVDF/N8LUMX8/wjQzfzPCtDEdn+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYZfZfh1ht9k+G2G32X4fYY/ZPhjhj9l+HOGv2T4a4a/ZTgmw98z/CPDPzP8K8O/M/wnw7EZjstwQI4DcxyU43g5Ds5xSI7j5zg0x2E5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOZLjEjkumeNSOS6d4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40H5oAEH53hIjofmeFiOh+d4RI5H5jg8x6NyPDrHY3I8NsfjBgwe8K+fzfGEHE/M8aQcT85xRI6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkeG6O5+V4fo4X5HhhjhfleHGOl+Q4MsdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3N8KMeHc3wkx0dzHJVjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+NjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5js7x7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/LcUyOv+f4R45/5vhXjn/n+E+OY3Mcl+OAAgcWOKjA8QocXOCQAscvcGiBwwqcoMAJC5yowIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKjAhQtcpMBFC1yswMULpMAlClyywKUKXLrAZQpctsDlCly+wBUKXLHAlQpcucBVCly1wNUKXL3ANYr/46mvXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuXzBm3LhxHljgQQUeXOAhBR5a4GEFHl7gEQUeWeDwAo8q8OgCjynw2AKPK/D4Ai3whAJPLPCkAk8ucESBpxR4aoGnFXh6gWcUeGaBZxV4doHnFHhugecVeH6BFxR4YYEXFXhxgZcUOLLASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHCxxVYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF/gYwU+XuATBT5Z4FMFPl3gMwU+W+BzBT5f4AsFvljgSwW+XOArBb5a4GsFvl7gGwW+WeBbBY4u8O0C3ynw3QLfK/D9Aj8o8MMCPyrw4wI/KfDTAj8r8PMCvyjwywK/KvDrAr8p8NsCvyvw+wJ/KPDHAn8q8OcCfynw1wJ/K3BMgb8X+EeBfxb4V4F/F/hPgWMLHFfggBIHljioxPFKHFzikBLHL3FoicNKnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLXKTERUtcrMTFS6TEJUpcssSlSly6xGVKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLE4SUeVeLRJR5T4rElHlfi8SVa4gklnljiSSWeXOKIEk8p8dQSTyvx9BLPKPHMEs8q8ewSzynx3BLPK/H8Ei8o8cISLyrx4hIvKXFkiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5Y4qsSgxLDEqMS4xKTEtMSsxLzEosSyxKrEusSmxLbErsS+xMdKfLzEJ0p8ssSnSny6HDD4f+vDcyU+X+ILJb5Y4kslvlziKyW+WuJrJb5e4hslvlniWyWOLvHtEt8p8d0S3yvx/RI/KPHDEj8q8eMSPynx0xI/K/HzEr8o8csSvyrx6xK/KfHbEr8r8fsSfyjxxxJ/KvHnEn8p8dcSfytxTIm/l/hHiX+W+FeJf5f4T4ljSxxX4oAKB1Y4qMLxKhxc4ZAKx69waIXDKpygwgkrnKjCiSucpMJJK5yswskrnKLCKSucqsKpK5ymwmkrnK7C6SucocIZK5ypwpkrnKXCWSucrcLZK5yjwjkrnKvCuSucp8J5K5yvwvkrXKDCBStcqMKFK1ykwkUrXKzCxSukwiUqXLLCpSpcusJlKly2wuUqXL7CFSpcscKVKly5wlUqXLXC1SpcvcI1KlyzwrUqXLvCdSpct8L1Kly/wg0q3LDCjSrcuMJNKty0ws0q3LzCLSrcssKtKty6wm0q3LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywuEVHlXh0RUeU+GxFR5X4fEVWuEJFZ5Y4UkVnlzhiApPqfDUCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6lwZIWXVnhZhZdXeEWFV1Z4VYVXV3hNhddW/K8s6g0V3ljhTRXeXOEtFd5a4W0V3l7hHRXeWeFdFd5d4T0V3lvhfRXeX+EDFT5Y4UMVPlzhIxU+WuGoCoMKwwqjCuMKkwrTCrMK8wqLCssKqwrrCpsK2wq7CvsKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqnB0hW9X+M6/eBsxYMB7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFY6p8PcK/6jwzwr/qvDvCv+pcGyF4yocUOPAGgfVOF6Ng2scUuP4NQ6tcViNE9Q4YY0T1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVuHCNi9S4aI2L1bh4jdS4RI1L1rhUjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rjRv/YYgJvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHA9dMAhNR5a42E1Hl7jETUeWePwGo+q8egaj6nx2BqPq/H4Gq3xhBpPrPGkGk+ucUSNp9R4ao2n1Xh6jWfUeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUOLLGS2u8rMbLa7yixitrvKrGq2u8psZra7yuxutrvKHGG2u8qcaba7ylxltrvK3G22u8o8Y7a7yrxrtrvKfGe2u8r8b7a3ygxgdrfKjGh2t8pMZHaxxVY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jYzU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNY6u8e0a36nx3Rrfq/H9Gj+o8cMaP6rx4xo/qfHTGj+r8fMav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q3FMjb/X+EeNf9b4V41/1/hPjWNrHFfjgAYHNjiowfEaHNzgkAbHb3Bog8ManKDBCRucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG6TBJRpcssGlGly6wWUaXLbB5RpcvsEVGlyxwZUaXLnBVRpctcHVGly9wTUaXLPBtRpcu8F1Gly3wfUaXL/BDRrcsMGNGty4wU0a3LTBzRrcvMEtGtyywa0a3LrBbRrctsHtGty+wR0a3LHBnRrcucFdGty1wd0a3L3BPRrcs8G9Gty7wX0a3LfB/Rrcv8EDGjywwYMaPLjBQxo8tMHDGjy8wSMaPLLB4Q0e1eDRDR7T4LENHtfg8Q36X31PbPCkBk9ucESDpzR4aoOnNXh6g2c0eGaDZzV4doPnNHhug+c1eH6DFzR4YYMXNXhxg5c0OLLBSxu8rMHLG7yiwSsbvKrBqxu8psFrG7yuwesbvKHBGxu8qcGbG7ylwVsbvK3B2xu8o8E7G7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHGxzVYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/gYw0+3uATDT7Z4FMNPt3gMw0+2+BzDT7f4AsNvtjgSw2+3OArDb7a4GsNvt7gGw2+2eBbDY5u8O0G32nw3Qbfa/D9Bj9o8MMGP2rw4wY/afDTBj9r8PMGv2hG+2WDXzX4dYPfNPhtg981+H2DPzT4Y4M/Nfhzg780+GuDvzU4psHfG/yjwT8b/KvBvxv8p8GxDY5rcECLA1sc1OJ4LQ5ucUiL47c4tMVhLU7Q4oQtTtTixC1O0uKkLU7W4uQtTtEO+3/noqlanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8RVpcosUlW1yqxaVbXKbFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1sc3uJRLR7d4jEtHtvicS0e36ItntDiiS2e1OLJLY5o8ZQWT23xtBZPb/GMFs9s8awWz27xnBbPbfG8Fs9v8YIWL2zxopa50hYvaXFki5e2eFmLl7d4RYtXtnhVi1e3eE2L17Z4XYvXt3hDize2eFOLN7d4S4u3tnhbi7e3eEeLd7Z4V4t3t3hPi/e2eF+L97f4QIsPtvhQiw+3+EiLj7Y4qsWgxXB8jFqMW0xa/FfOrMW8xaLFssWqxbrFpsW2xa7FvsXHWny8xSdafLLFp1p8usVnWny2xedafL7FF1p8scWXWny5xVdafLXF11p8vcU3WnyzxbdaHN3i2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKv/8bXgAEDxrT4e4t/tPhni3+1+HeL/7Q4tsVxLQ7ocGCHgzocr8PBHQ7pcPwOh3Y4bNy4/zy31eFEHU7c4SQdTtrhZB1O3uEUHU7Z4VQdTt3hNB1O2+F0HU7f4QwdztjhTB3O3OEsHc7a4Wwdzt7hHB3O2eFcHc7d4TwdztvhfB3O3+ECHS7Y4UIdLtzhIh0u2uFiHS7eIR0u0eGSHS7V4dIdLtPhsh0u1+HyHa7Q4YodrtThyh2u0uGqHa7W4eodrtHhmh2u1eHaHa7T4bodrtfh+h1u0OGGHW7U4cYdbtLhph1u1uHmHW7R4ZYdbtXh1h1u0+G2HW7X4fYd7tDhjh1jd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOh3d4VIdHd3hMh8d2eFyHx3dohyd0eGKHJ3V4cocjOjylw1M7PK3D0zs8o8MzOzyrw7M7PKfDczs8r8PzO7ygwws7vKjDizu8pMORHV7aMdu/cXJ5h1d0eGWHV3V4dYfXdHhth9d1eH2HN3R4Y4c3dXhzh7f8N95u6/D2Du/o8M4O7+rw7g7v6fDeDu/r8P4OH+jwwQ4f6vDhDh/p8NEOR3UYdBh2GHUYd5h0mHaYdZh3WHRYdlh1WHfYdNh22HXYd/hYh493+ESHT3b4VIdPd/jMvzj5bwLj+Q5f6PDFDl/q8OUOX+nw1Q5f6/D1Dt/o8M0O3+pwdIdvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHYzr8vcM/Ovyzw786/LvDfzoc2+G4Dgf0OLDHQT2O1+PgHof0OH6PQ3sc1uMEPU7Y40Q9TtzjJD1O2uNkPU7e4xQ9TtnjVD1O3eM0/X/ypNP1OH2PM/Q4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiP9LhEj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/6r23/9t0qPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4Uc//fuGmPW7W4+Y9btHjlj1u1ePWPW7T47Y9btfj9j3u0OOOPe7U48497tLjrj3u1uPuPe7R45497tXj3j3u0+O+Pe7X4/49HtDjgT0e1OPBPR7S46E9Htbj4T0e0eORPQ7v8agej+7xmB6P7fG4Ho/v0R5P6PHEHk/q8eQeR/R4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOj+f2eF6P5/d4QY8X9nhRjxf3eEmPI3u8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7eryzx7t6vLvHe3q8t8f7ery/xwd6fLDHh3p8uMdHeny0x1E9/n8BAAD//6ySuqI=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) 2.990110606s ago: executing program 1 (id=4009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}}, 0x0) 2.680487776s ago: executing program 34 (id=4009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}}, 0x0) 2.675511766s ago: executing program 5 (id=4011): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x80415, &(0x7f0000000280), 0x1, 0x796, &(0x7f0000001dc0)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) shutdown(r3, 0x2) 2.675254236s ago: executing program 6 (id=4012): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1, 0x0, 0x0, 0x7}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.310407535s ago: executing program 6 (id=4013): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003500), 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=0x8, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r7, 0x1}, 0x8) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r8, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r8, 0x5412, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) read(r0, &(0x7f0000001b00)=""/194, 0xc2) 0s ago: executing program 5 (id=4014): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000080)}, 0x10) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x60f9d000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0xffffffffffffffff) kernel console output (not intermixed with test programs): e bond_slave_1): Releasing backup interface [ 328.636031][ T5702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.024899][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 329.158183][ T5702] bond0 (unregistering): Released all slaves [ 329.222579][T12360] device hsr_slave_0 entered promiscuous mode [ 329.230144][T12360] device hsr_slave_1 entered promiscuous mode [ 329.237709][T12360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.245651][T12360] Cannot create hsr debugfs directory [ 329.252573][T12453] netlink: 'syz.0.3126': attribute type 39 has an invalid length. [ 329.497612][T12478] loop6: detected capacity change from 0 to 1024 [ 329.610465][T12478] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 329.646369][T12478] EXT4-fs (loop6): unmounting filesystem. [ 329.693840][ T4300] net_ratelimit: 8 callbacks suppressed [ 329.693863][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 329.736463][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3133'. [ 329.853790][ T46] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 329.975346][ T11] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 330.084004][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 330.233871][ T11] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 330.373761][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 330.439736][T12506] netlink: 'syz.5.3143': attribute type 39 has an invalid length. [ 330.595799][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 330.621203][T12360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.666685][T12360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.691105][T12360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.744645][T12360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.815227][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 330.974383][T12516] loop1: detected capacity change from 0 to 4096 [ 330.981516][T12516] ext4: Unknown parameter 'obj_type' [ 330.989129][T12360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.007937][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 331.070800][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.099743][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.107401][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 331.135641][T12360] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.145488][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 331.199986][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.212256][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.222376][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.229640][ T5702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.274741][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.291375][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.303575][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.361660][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.368896][ T5702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.409887][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.434275][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.458962][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 331.458979][ T27] audit: type=1326 audit(1737684342.070:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12526 comm="syz.0.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 331.528953][T12512] loop6: detected capacity change from 0 to 32768 [ 331.534075][ T27] audit: type=1326 audit(1737684342.070:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12526 comm="syz.0.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 331.573943][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.592127][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.612450][T12512] XFS (loop6): Mounting V5 Filesystem [ 331.638138][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.665174][ T27] audit: type=1326 audit(1737684342.120:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12526 comm="syz.0.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 331.690402][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.700325][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.709696][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.719086][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.728590][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.743579][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.765994][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.801448][T12512] XFS (loop6): Ending clean mount [ 331.830591][ T27] audit: type=1326 audit(1737684342.120:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12526 comm="syz.0.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 331.845447][T12512] XFS (loop6): Quotacheck needed: Please wait. [ 331.923130][ T27] audit: type=1326 audit(1737684342.120:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12526 comm="syz.0.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 331.960708][T12512] XFS (loop6): Quotacheck: Done. [ 332.274989][T12559] loop0: detected capacity change from 0 to 128 [ 332.292461][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.303350][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.319389][T12360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.349664][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.363187][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.404587][T12559] syz.0.3161: attempt to access beyond end of device [ 332.404587][T12559] loop0: rw=2049, sector=145, nr_sectors = 240 limit=128 [ 332.417780][T12360] device veth0_vlan entered promiscuous mode [ 332.431389][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.433221][T11836] XFS (loop6): Unmounting Filesystem [ 332.444434][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.480169][T12360] device veth1_vlan entered promiscuous mode [ 332.485319][T12559] syz.0.3161: attempt to access beyond end of device [ 332.485319][T12559] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 332.489153][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.509639][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.519503][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.558650][T12559] syz.0.3161: attempt to access beyond end of device [ 332.558650][T12559] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 332.641965][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.663225][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.684802][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.705518][T12360] device veth0_macvtap entered promiscuous mode [ 332.745925][T12360] device veth1_macvtap entered promiscuous mode [ 332.820875][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.856348][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.883420][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.908424][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.929846][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.962411][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.996004][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.013462][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.037235][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.058626][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.096518][T12360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.133818][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.134134][ T27] audit: type=1326 audit(1737684343.750:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.1.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c79f8cd29 code=0x7ffc0000 [ 333.181468][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.185508][T12567] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3162'. [ 333.223401][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.252075][ T27] audit: type=1326 audit(1737684343.790:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.1.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c79f8cd29 code=0x7ffc0000 [ 333.260448][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.298771][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.319279][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.332395][ T27] audit: type=1326 audit(1737684343.790:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.1.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f7c79f8cd29 code=0x7ffc0000 [ 333.339894][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.378588][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.383048][T12572] netlink: 'syz.1.3166': attribute type 29 has an invalid length. [ 333.399428][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.407945][ T27] audit: type=1326 audit(1737684343.790:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.1.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c79f8cd29 code=0x7ffc0000 [ 333.419644][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.457128][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.459407][ T27] audit: type=1326 audit(1737684343.790:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.1.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c79f8cd29 code=0x7ffc0000 [ 333.490660][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.512204][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.522465][T12574] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3166'. [ 333.546850][T12360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.571538][T12572] netlink: 'syz.1.3166': attribute type 29 has an invalid length. [ 333.585162][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.604519][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.618490][T12360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.628346][T12360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.639342][T12360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.648623][T12360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.662200][T12573] netlink: 'syz.1.3166': attribute type 29 has an invalid length. [ 333.807858][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.827967][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.836306][T12578] netlink: 'syz.0.3168': attribute type 1 has an invalid length. [ 333.860783][T12578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.897052][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.934578][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.955961][T12581] loop1: detected capacity change from 0 to 1764 [ 333.966378][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.991936][T12581] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 334.046311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.734034][ T5695] net_ratelimit: 17 callbacks suppressed [ 334.734107][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 335.014503][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 335.424312][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 335.458836][T12608] netlink: 'syz.5.3178': attribute type 29 has an invalid length. [ 335.472214][T12609] loop6: detected capacity change from 0 to 256 [ 335.492249][T12608] netlink: 'syz.5.3178': attribute type 29 has an invalid length. [ 335.537937][T12611] netlink: 'syz.1.3180': attribute type 1 has an invalid length. [ 335.553918][T12612] netlink: 'syz.5.3178': attribute type 29 has an invalid length. [ 335.568923][T12608] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3178'. [ 335.579770][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 335.724017][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 335.818360][T12620] fuse: Bad value for 'fd' [ 335.844384][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 335.974429][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 336.067671][T12627] loop1: detected capacity change from 0 to 1024 [ 336.085214][T12629] fuse: Bad value for 'fd' [ 336.104011][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 336.159037][T12627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 336.223544][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 336.355515][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 336.477721][T12642] syz.3.3189[12642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.477840][T12642] syz.3.3189[12642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.510878][T12151] EXT4-fs (loop1): unmounting filesystem. [ 336.655433][T12601] loop0: detected capacity change from 0 to 65536 [ 336.700525][T12601] XFS (loop0): Mounting V5 Filesystem [ 336.761773][T12660] netlink: 'syz.5.3193': attribute type 1 has an invalid length. [ 336.772748][T12601] XFS (loop0): Ending clean mount [ 336.807827][ T27] audit: type=1326 audit(1737684347.420:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 336.844155][ T27] audit: type=1326 audit(1737684347.420:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 336.868012][ T27] audit: type=1326 audit(1737684347.430:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 336.891101][T12660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.892465][ T27] audit: type=1326 audit(1737684347.430:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 336.920659][ T27] audit: type=1326 audit(1737684347.430:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 336.943977][ T27] audit: type=1326 audit(1737684347.430:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 336.981505][ T27] audit: type=1326 audit(1737684347.440:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 337.005178][ T27] audit: type=1326 audit(1737684347.440:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 337.029507][ T27] audit: type=1326 audit(1737684347.470:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 337.074334][T11188] XFS (loop0): Unmounting Filesystem [ 337.088045][ T27] audit: type=1326 audit(1737684347.470:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d8cd29 code=0x7ffc0000 [ 337.607881][T12682] fuse: Bad value for 'fd' [ 337.631876][T12682] loop6: detected capacity change from 0 to 512 [ 337.693212][T12682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.3202: inode #1: comm syz.6.3202: iget: illegal inode # [ 337.749040][T12689] netlink: 'syz.3.3206': attribute type 1 has an invalid length. [ 337.810277][T12682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.3202: error while reading EA inode 1 err=-117 [ 337.865505][T12682] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 337.892628][T12682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.3202: inode #1: comm syz.6.3202: iget: illegal inode # [ 337.938373][T12682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.3202: error while reading EA inode 1 err=-117 [ 338.024621][T12682] EXT4-fs (loop6): 1 orphan inode deleted [ 338.030437][T12682] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 338.091021][T12682] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.3202: deleted inode referenced: 15 [ 338.152206][T12705] syz.0.3210[12705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.152314][T12705] syz.0.3210[12705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.382462][T11836] EXT4-fs (loop6): unmounting filesystem. [ 338.787571][T12717] loop6: detected capacity change from 0 to 1764 [ 338.919274][T12709] loop1: detected capacity change from 0 to 32768 [ 338.959286][T12709] XFS: ikeep mount option is deprecated. [ 339.025889][T12709] XFS (loop1): Mounting V5 Filesystem [ 339.106829][T12709] XFS (loop1): Ending clean mount [ 339.127827][T12709] XFS (loop1): Quotacheck needed: Please wait. [ 339.215764][T12709] XFS (loop1): Quotacheck: Done. [ 339.318964][T12151] XFS (loop1): Unmounting Filesystem [ 339.428905][T12749] smb3: Unknown parameter 'rdma ' [ 339.774654][ T5702] net_ratelimit: 28 callbacks suppressed [ 339.774675][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 339.905049][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 340.019489][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 340.160891][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 340.194413][T12772] loop0: detected capacity change from 0 to 512 [ 340.430813][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 340.498327][T12772] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 340.857490][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 340.978757][T12772] EXT4-fs (loop0): 1 truncate cleaned up [ 341.003766][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 341.033054][T12772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 341.123803][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 341.253775][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 341.373949][T12782] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 341.429840][T12758] loop6: detected capacity change from 0 to 32768 [ 341.496312][T12758] XFS (loop6): Mounting V5 Filesystem [ 341.610817][T12758] XFS (loop6): Ending clean mount [ 341.687362][T11836] XFS (loop6): Unmounting Filesystem [ 341.742737][T12775] loop1: detected capacity change from 0 to 32768 [ 341.828926][T12775] XFS (loop1): Mounting V5 Filesystem [ 341.965117][T12772] overlayfs: './file2' not a directory [ 342.021756][T12775] XFS (loop1): Ending clean mount [ 342.043273][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 342.043292][ T27] audit: type=1804 audit(1737684352.650:752): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3234" name="/newroot/104/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 342.074305][T12775] XFS (loop1): Quotacheck needed: Please wait. [ 342.160664][T12775] XFS (loop1): Quotacheck: Done. [ 342.226173][ T27] audit: type=1804 audit(1737684352.690:753): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3234" name="/newroot/104/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 342.299929][ T27] audit: type=1326 audit(1737684352.870:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8538cd29 code=0x7ffc0000 [ 342.477792][ T27] audit: type=1326 audit(1737684352.870:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8538cd29 code=0x7ffc0000 [ 342.555139][T12151] XFS (loop1): Unmounting Filesystem [ 342.591484][ T27] audit: type=1326 audit(1737684352.880:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e8538cd29 code=0x7ffc0000 [ 342.627036][ T27] audit: type=1326 audit(1737684352.880:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8538cd29 code=0x7ffc0000 [ 342.670937][T11188] EXT4-fs (loop0): unmounting filesystem. [ 342.752324][ T27] audit: type=1326 audit(1737684352.880:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6e8538cd29 code=0x7ffc0000 [ 342.837475][ T27] audit: type=1326 audit(1737684352.880:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8538cd29 code=0x7ffc0000 [ 342.926260][T12835] loop3: detected capacity change from 0 to 512 [ 342.985358][T12835] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 343.004756][T12835] EXT4-fs (loop3): orphan cleanup on readonly fs [ 343.013412][T12835] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 343.027654][T12835] EXT4-fs warning (device loop3): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 343.042857][T12835] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 343.068020][ T27] audit: type=1326 audit(1737684353.680:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz.5.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbc98cd29 code=0x7ffc0000 [ 343.091184][T12835] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3251: bg 0: block 40: padding at end of block bitmap is not set [ 343.128190][T12835] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 343.148849][T12835] EXT4-fs (loop3): 1 truncate cleaned up [ 343.163934][T12835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 343.176662][T12835] EXT4-fs (loop3): unmounting filesystem. [ 344.534683][T12859] overlayfs: missing 'lowerdir' [ 344.788315][ T4385] net_ratelimit: 21 callbacks suppressed [ 344.788340][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 344.927297][T12868] loop0: detected capacity change from 0 to 512 [ 344.944728][T12868] EXT4-fs: inline encryption not supported [ 345.042673][T12873] loop6: detected capacity change from 0 to 128 [ 345.090425][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 345.314790][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 345.399238][T12868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 345.689369][T12868] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.738824][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 345.814830][T12883] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 345.832745][T11188] EXT4-fs (loop0): unmounting filesystem. [ 345.884279][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.069511][T12894] loop1: detected capacity change from 0 to 1024 [ 346.098251][T12894] EXT4-fs: inline encryption not supported [ 346.112098][T12894] EXT4-fs: inline encryption not supported [ 346.118878][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.148683][T12894] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.227144][T12894] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 346.250549][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.542700][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.921515][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.054056][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.204079][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3275'. [ 347.251114][T12151] EXT4-fs (loop1): unmounting filesystem. [ 347.775113][T12933] loop3: detected capacity change from 0 to 512 [ 348.092478][T12933] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 348.114868][T12933] EXT4-fs (loop3): 1 truncate cleaned up [ 348.120734][T12933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 348.156582][T12933] EXT4-fs (loop3): unmounting filesystem. [ 349.333530][T12929] loop3: detected capacity change from 0 to 131072 [ 349.352307][T12929] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 349.389089][T12929] F2FS-fs (loop3): invalid crc value [ 349.477914][T12929] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 349.534835][T12929] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=60000, run fsck to fix. [ 349.550876][T12929] F2FS-fs (loop3): Bad quota inode 2:393216 [ 349.557138][T12929] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 349.567926][T12929] F2FS-fs (loop3): Cannot turn on quotas: error -22 [ 349.585546][T12929] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 349.894230][T12853] net_ratelimit: 17 callbacks suppressed [ 349.894252][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 350.140031][T12961] loop6: detected capacity change from 0 to 32768 [ 350.245933][T12961] XFS (loop6): Mounting V5 Filesystem [ 350.286574][T12972] fuse: Bad value for 'fd' [ 350.297665][T12972] syz.5.3293[12972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.297782][T12972] syz.5.3293[12972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.304169][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 350.475702][T12961] XFS (loop6): Ending clean mount [ 351.623680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 351.632195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 351.640562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 351.648890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 351.657300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 351.665608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 351.673929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 351.682198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 355.303773][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 355.413894][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 355.434093][T11836] XFS (loop6): Unmounting Filesystem [ 356.853870][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.003893][T12782] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.113954][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.281940][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.395229][T13008] xt_l2tp: unknown flags: 10 [ 357.531193][T13011] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 357.565796][T13011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.574681][T13014] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 357.604787][T13003] loop0: detected capacity change from 0 to 4096 [ 357.611938][T13003] ntfs3: Unknown parameter 'windows_names' [ 357.623801][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.829696][T13019] fuse: Bad value for 'fd' [ 357.848197][T13019] syz.1.3305[13019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.848313][T13019] syz.1.3305[13019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.133971][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 358.293775][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 358.318141][T13031] netlink: 'syz.5.3311': attribute type 1 has an invalid length. [ 358.347117][T13032] loop0: detected capacity change from 0 to 256 [ 358.367346][T13033] loop1: detected capacity change from 0 to 128 [ 358.425213][T13031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.493179][T13032] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 358.507979][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 358.568093][ T4322] device bond0 left promiscuous mode [ 358.592050][ T4322] device hsr_slave_0 left promiscuous mode [ 358.744050][ T4322] device hsr_slave_1 left promiscuous mode [ 358.798051][ T4322] device veth1_macvtap left promiscuous mode [ 358.824683][ T4322] device veth1_vlan left promiscuous mode [ 358.832545][ T4322] device veth0_vlan left promiscuous mode [ 358.968266][T13043] loop3: detected capacity change from 0 to 2048 [ 359.413553][T13050] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 359.633974][T13053] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.694034][T13057] xt_l2tp: unknown flags: 10 [ 359.862203][T13053] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 359.865248][ T4322] bond8 (unregistering): Released all slaves [ 359.886132][T13053] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 359.940131][T13053] Remounting filesystem read-only [ 359.966502][ T4322] bond7 (unregistering): Released all slaves [ 359.978219][T13065] loop6: detected capacity change from 0 to 64 [ 360.017733][ T4322] bond6 (unregistering): Released all slaves [ 360.089320][T12360] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 360.096940][T13065] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 360.113350][T12360] NILFS (loop3): discard dirty page: offset=57344, ino=15 [ 360.134445][ T4322] bond5 (unregistering): Released all slaves [ 360.156173][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 360.185941][ T4322] bond4 (unregistering): Released all slaves [ 360.196063][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 360.224905][ T4322] bond3 (unregistering): Released all slaves [ 360.230567][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 360.256170][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 360.273182][T12360] NILFS (loop3): discard dirty page: offset=61440, ino=15 [ 360.280210][ T4322] bond2 (unregistering): Released all slaves [ 360.281928][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 360.463247][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 360.486797][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 360.503718][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 362.154026][T12360] NILFS (loop3): discard dirty page: offset=65536, ino=15 [ 362.167683][T13078] loop1: detected capacity change from 0 to 128 [ 362.193334][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 362.217056][T13078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 362.243982][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 362.253236][T13078] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.288283][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 362.349602][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 362.367418][T13082] autofs4:pid:13082:autofs_fill_super: called with bogus options [ 362.383266][T12360] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 362.390326][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.407993][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.427345][T12360] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 362.462569][T12360] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 362.501794][T12360] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 362.511003][T12360] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 362.525517][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.537928][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.538849][ T4322] bond1 (unregistering): Released all slaves [ 362.547335][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.559726][T12151] EXT4-fs (loop1): unmounting filesystem. [ 362.569978][T12360] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 362.588903][T12360] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 362.601587][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.617758][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.636625][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.651904][T12360] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 362.662472][T12360] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 362.694781][T12360] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 362.718402][T12360] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 362.753726][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.765060][T12360] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 362.786539][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.798981][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.820515][T12360] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 362.848586][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 362.881570][T13089] loop0: detected capacity change from 0 to 8 [ 362.895505][T13089] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 362.935659][T12360] NILFS (loop3): discard dirty page: offset=233472, ino=3 [ 362.942896][T12360] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 362.961772][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.995247][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.018245][T12360] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.398427][T13086] cramfs: Error -5 while decompressing! [ 363.405457][T13086] cramfs: ffffffff974e4568(26)->ffff88804e782000(4096) [ 363.412409][T13086] cramfs: Error -3 while decompressing! [ 363.418463][T13086] cramfs: ffffffff974e4582(26)->ffff888041c61000(4096) [ 363.425526][T13086] cramfs: Error -3 while decompressing! [ 363.435743][T13086] cramfs: ffffffff974e459c(16)->ffff88804e569000(4096) [ 363.442777][T13086] cramfs: Error -5 while decompressing! [ 363.448417][T13086] cramfs: ffffffff974e4568(26)->ffff88804e782000(4096) [ 363.547756][T13090] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 364.912910][T13106] xt_l2tp: unknown flags: 10 [ 365.316658][T13114] syz.1.3338[13114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.316767][T13114] syz.1.3338[13114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.293130][T13120] autofs4:pid:13120:autofs_fill_super: called with bogus options [ 367.549618][ T4322] bond0 (unregistering): Released all slaves [ 367.631561][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3317'. [ 367.647019][T13054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3317'. [ 367.656138][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3317'. [ 367.666071][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3326'. [ 367.860241][T13129] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 367.868643][T13092] netlink: 'syz.3.3323': attribute type 1 has an invalid length. [ 367.915342][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.050118][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.194006][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.326232][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.456381][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.567140][T13147] loop0: detected capacity change from 0 to 128 [ 368.587755][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.725529][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.924797][T12782] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 369.013498][T13146] xt_l2tp: unknown flags: 10 [ 369.374898][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 369.523745][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 370.529162][T13167] netlink: 'syz.1.3353': attribute type 1 has an invalid length. [ 370.555161][T13133] loop3: detected capacity change from 0 to 32768 [ 370.569455][T13167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.652352][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3354'. [ 370.668576][T13133] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3343 (13133) [ 370.731118][T13173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3354'. [ 370.801758][T13177] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 370.847421][T13133] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.895479][T13133] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 370.957188][T13133] BTRFS info (device loop3): turning off barriers [ 370.987315][T13133] BTRFS info (device loop3): setting nodatasum [ 371.011895][T13133] BTRFS info (device loop3): force zlib compression, level 3 [ 371.042496][T13133] BTRFS info (device loop3): use no compression [ 371.076199][T13184] netlink: 'syz.6.3359': attribute type 10 has an invalid length. [ 371.076331][T13133] BTRFS info (device loop3): turning on flush-on-commit [ 371.097872][T13184] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.105483][T13184] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.135072][T13133] BTRFS info (device loop3): unrecognized rescue option 'imetacsums' [ 371.143519][T13133] BTRFS error (device loop3): unrecognized rescue value imetacsums [ 371.161539][T13184] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.168930][T13184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.176450][T13184] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.183616][T13184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.228952][T13133] BTRFS error (device loop3): open_ctree failed [ 371.245476][T13184] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 372.536192][T13189] loop0: detected capacity change from 0 to 4096 [ 372.639660][T13199] xt_hashlimit: size too large, truncated to 1048576 [ 372.956433][T12877] net_ratelimit: 23 callbacks suppressed [ 372.956464][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 373.030903][T13206] xt_l2tp: unknown flags: 10 [ 373.167193][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 373.298731][T13211] device ip6tnl1 entered promiscuous mode [ 373.843867][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 373.983846][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 374.097971][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3368'. [ 374.132263][T13216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3368'. [ 374.163750][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 374.274121][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 374.275620][T13219] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 374.368654][T13221] loop3: detected capacity change from 0 to 1024 [ 374.386803][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 374.466728][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 374.480049][T13221] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 39753 - 0 [ 374.489743][T13221] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 39753 - 0 [ 374.499737][T13221] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 39753 - 0 [ 374.510003][T13221] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 39753 - 0 [ 374.519538][T13221] device geneve2 entered promiscuous mode [ 374.553883][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 374.681333][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 374.794179][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 375.981304][T13234] loop5: detected capacity change from 0 to 8 [ 377.005988][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3381'. [ 377.103078][T13247] netlink: 'syz.3.3380': attribute type 1 has an invalid length. [ 377.222876][T13247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.025464][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 378.049665][T13250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3380'. [ 378.071883][T13256] device ip6tnl1 entered promiscuous mode [ 378.123953][ T5695] net_ratelimit: 16 callbacks suppressed [ 378.123973][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.140543][T13255] loop0: detected capacity change from 0 to 128 [ 378.286646][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.379123][T13263] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 378.403764][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.533782][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.626155][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.632593][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.653752][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.696076][T13267] loop0: detected capacity change from 0 to 2048 [ 378.726445][T13267] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.978677][T13271] netlink: 'syz.3.3388': attribute type 39 has an invalid length. [ 379.017877][T13272] hub 2-0:1.0: USB hub found [ 379.024446][T13272] hub 2-0:1.0: 1 port detected [ 379.175791][T13275] netlink: 'syz.6.3389': attribute type 29 has an invalid length. [ 379.184453][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 379.192602][T13275] netlink: 'syz.6.3389': attribute type 29 has an invalid length. [ 379.212394][T13275] netlink: 'syz.6.3389': attribute type 29 has an invalid length. [ 379.239643][T13275] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3389'. [ 379.294991][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 379.443753][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 379.573707][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 379.725194][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 379.751319][T13284] netlink: 'syz.3.3394': attribute type 1 has an invalid length. [ 379.811925][T13284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.017962][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 380.037912][T13289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3394'. [ 381.247953][T13279] loop5: detected capacity change from 0 to 32768 [ 381.277975][T13299] loop3: detected capacity change from 0 to 4096 [ 381.286077][T13299] ext4: Unknown parameter 'obj_type' [ 381.467672][T13279] XFS (loop5): Mounting V5 Filesystem [ 381.558531][T13279] XFS (loop5): Ending clean mount [ 381.650767][T13316] loop0: detected capacity change from 0 to 256 [ 382.444258][T11766] XFS (loop5): Unmounting Filesystem [ 382.529627][T13320] netlink: 'syz.0.3402': attribute type 29 has an invalid length. [ 382.568917][T13320] netlink: 'syz.0.3402': attribute type 29 has an invalid length. [ 382.600933][T13326] netlink: 'syz.0.3402': attribute type 29 has an invalid length. [ 382.806311][T13334] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 382.877403][T13337] loop3: detected capacity change from 0 to 64 [ 382.898564][T13341] loop6: detected capacity change from 0 to 64 [ 382.910029][T13334] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.960468][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3409'. [ 382.975129][T13338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3409'. [ 383.196585][ T53] net_ratelimit: 20 callbacks suppressed [ 383.196608][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.479603][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.574243][T13348] Trying to free block not in datazone [ 383.633820][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.646464][T13348] Trying to free block not in datazone [ 383.652117][T13348] Trying to free block not in datazone [ 383.682817][T13348] Trying to free block not in datazone [ 384.120862][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 384.146104][T13351] loop0: detected capacity change from 0 to 64 [ 384.251975][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 384.393697][T13235] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 384.479921][T13363] netlink: 'syz.0.3419': attribute type 29 has an invalid length. [ 384.513150][T13363] netlink: 'syz.0.3419': attribute type 29 has an invalid length. [ 384.552147][T13364] netlink: 'syz.0.3419': attribute type 29 has an invalid length. [ 384.578597][T13235] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 384.705742][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 384.836735][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 384.847544][T13347] loop1: detected capacity change from 0 to 32768 [ 384.908360][T13347] XFS (loop1): Mounting V5 Filesystem [ 384.965059][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 385.039024][T13347] XFS (loop1): Ending clean mount [ 385.147149][T13354] loop5: detected capacity change from 0 to 32768 [ 385.176119][T13354] XFS: attr2 mount option is deprecated. [ 385.213930][T13384] netlink: 'syz.0.3426': attribute type 1 has an invalid length. [ 385.258003][T13384] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.279882][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 385.309939][T13354] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 385.360876][T12151] XFS (loop1): Unmounting Filesystem [ 385.380187][T13354] XFS (loop5): Quotacheck needed: Please wait. [ 385.388013][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 385.400547][T13382] loop6: detected capacity change from 0 to 32768 [ 385.420559][T13382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.3424 (13382) [ 385.444246][T13382] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 385.463697][T13382] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 385.474689][T13382] BTRFS info (device loop6): use no compression [ 385.481016][T13382] BTRFS info (device loop6): force zlib compression, level 3 [ 385.490355][T13382] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 385.494792][ T53] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x336/0xf80, inode 0x2448 dinode [ 385.500776][T13382] BTRFS info (device loop6): use lzo compression, level 0 [ 385.519638][T13382] BTRFS info (device loop6): turning on flush-on-commit [ 385.528929][T13382] BTRFS info (device loop6): enabling auto defrag [ 385.535861][T13382] BTRFS info (device loop6): using free space tree [ 385.547651][ T53] XFS (loop5): Unmount and run xfs_repair [ 385.553445][ T53] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 385.562139][ T53] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 385.572548][ T53] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 385.582252][ T53] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 385.591731][ T53] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 64 4.Xh...=.......d [ 385.601668][ T53] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 385.614478][ T53] 00000050: 00 00 18 ff 00 00 00 00 00 00 00 00 a7 ae dc a3 ................ [ 385.638317][ T53] 00000060: ff ff ff ff 4b 8f a7 16 00 00 00 00 00 00 00 05 ....K........... [ 385.648585][ T53] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 385.697037][T13354] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 385.800552][T11766] XFS (loop5): Unmounting Filesystem [ 386.753414][T13382] BTRFS info (device loop6): enabling ssd optimizations [ 387.071329][T13425] netlink: 'syz.0.3432': attribute type 29 has an invalid length. [ 387.090018][T13425] netlink: 'syz.0.3432': attribute type 29 has an invalid length. [ 387.099343][T13426] loop1: detected capacity change from 0 to 1024 [ 387.393439][T11836] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 387.449334][T13435] loop0: detected capacity change from 0 to 2048 [ 387.495827][T13435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.613909][T12853] hfsplus: b-tree write err: -5, ino 4 [ 388.047911][T13444] hub 2-0:1.0: USB hub found [ 388.054743][T13444] hub 2-0:1.0: 1 port detected [ 388.217185][T12853] net_ratelimit: 20 callbacks suppressed [ 388.217232][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.861543][T13443] loop1: detected capacity change from 0 to 128 [ 388.916742][T13447] validate_nla: 1 callbacks suppressed [ 388.916765][T13447] netlink: 'syz.5.3439': attribute type 1 has an invalid length. [ 389.087755][T13447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.104843][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3439'. [ 389.143713][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3439'. [ 389.204064][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 389.345069][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 389.464979][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 389.686357][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 389.893793][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 389.951408][T13462] binder: BINDER_SET_CONTEXT_MGR already set [ 390.074093][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 390.203270][T13462] binder: 13457:13462 ioctl 4018620d 20000040 returned -16 [ 390.303937][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 390.414016][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 390.502338][T13470] loop3: detected capacity change from 0 to 2048 [ 390.553920][ T11] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 390.586254][T13470] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 390.684945][T13476] netlink: 'syz.1.3447': attribute type 39 has an invalid length. [ 391.520301][T13489] netlink: 'syz.6.3451': attribute type 1 has an invalid length. [ 391.604364][T13489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.688050][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3451'. [ 391.717421][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3451'. [ 391.819698][T13495] loop5: detected capacity change from 0 to 128 [ 391.916546][T13500] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 391.948606][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3455'. [ 392.026919][T13483] loop0: detected capacity change from 0 to 32768 [ 392.097387][T13512] xt_l2tp: unknown flags: 10 [ 392.100548][T13483] XFS (loop0): Mounting V5 Filesystem [ 392.131697][T13514] loop3: detected capacity change from 0 to 2048 [ 392.163476][T13514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 392.177071][T13514] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.212578][T13514] fs-verity: sha512 using implementation "sha512-avx2" [ 392.228881][T13483] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 392.313054][T13483] XFS (loop0): Starting recovery (logdev: internal) [ 392.545379][ T4269] Bluetooth: hci1: command 0x2016 tx timeout [ 392.920255][T12360] EXT4-fs (loop3): unmounting filesystem. [ 393.238186][ T33] net_ratelimit: 8 callbacks suppressed [ 393.238210][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.256221][T13483] XFS (loop0): Ending recovery (logdev: internal) [ 393.354052][ T11] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.464202][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.579044][T11188] XFS (loop0): Unmounting Filesystem [ 393.594396][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.647629][T13537] netlink: 'syz.5.3461': attribute type 1 has an invalid length. [ 394.074052][T13535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.183072][T13542] netlink: 'syz.1.3466': attribute type 1 has an invalid length. [ 394.386087][T13542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.437665][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 394.503912][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 394.634333][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 394.743991][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 394.863848][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 394.974196][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 395.113813][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 395.520090][T13529] loop3: detected capacity change from 0 to 32768 [ 395.699691][T13529] XFS (loop3): Mounting V5 Filesystem [ 395.840724][T13529] XFS (loop3): Starting recovery (logdev: internal) [ 395.908725][T13529] XFS (loop3): Ending recovery (logdev: internal) [ 396.052963][T12360] XFS (loop3): Unmounting Filesystem [ 396.063685][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 396.519619][T13571] loop6: detected capacity change from 0 to 32768 [ 396.538116][T13571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3473 (13571) [ 396.582504][T13571] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 396.608673][T13571] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 396.610826][T13568] loop1: detected capacity change from 0 to 32768 [ 396.637827][T13571] BTRFS info (device loop6): using free space tree [ 396.715409][T13599] loop5: detected capacity change from 0 to 64 [ 396.735096][T13600] netlink: 'syz.3.3478': attribute type 1 has an invalid length. [ 396.903099][T13605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.175221][T13615] Cannot find add_set index 0 as target [ 397.182035][T13616] Trying to free block not in datazone [ 397.224854][T13616] Trying to free block not in datazone [ 397.230491][T13616] Trying to free block not in datazone [ 397.259599][T13616] Trying to free block not in datazone [ 397.498054][T13571] BTRFS info (device loop6): enabling ssd optimizations [ 397.823253][T13620] loop3: detected capacity change from 0 to 1024 [ 397.871997][T11836] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.295546][ T4269] Bluetooth: Wrong link type (-22) [ 398.325299][ T4269] Bluetooth: Unknown BR/EDR signaling command 0xff [ 398.331930][ T4269] Bluetooth: Wrong link type (-22) [ 398.345050][ T4269] Bluetooth: hci0: link tx timeout [ 398.376831][ T4269] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 398.388659][T13630] loop5: detected capacity change from 0 to 128 [ 398.397391][ T53] net_ratelimit: 23 callbacks suppressed [ 398.397409][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 398.416124][T13630] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.440840][T13632] loop0: detected capacity change from 0 to 128 [ 398.584953][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 398.713827][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 398.824110][T12782] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 398.954104][ T4241] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 398.973767][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 399.087503][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 399.836348][T13645] loop6: detected capacity change from 0 to 256 [ 399.845743][T13645] exfat: Unknown parameter 'Õ(g¢Zz‚–d5܈¥´9­ÄÐG•õ³¿±ÈÿPA7Šâe{{ÕðwòšÐçDKDÿâSß÷Q«' [ 399.916074][ T4241] usb 2-1: device descriptor read/64, error -71 [ 399.942023][T12782] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 400.024182][T13642] loop6: detected capacity change from 0 to 4096 [ 400.054005][T13642] NILFS (loop6): invalid segment: Checksum error in segment payload [ 400.064151][T13642] NILFS (loop6): trying rollback from an earlier position [ 400.085976][T13642] NILFS (loop6): recovery complete [ 400.105558][T13647] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.131700][T13649] netlink: 'syz.0.3495': attribute type 1 has an invalid length. [ 400.339143][ T4241] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 400.463806][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 400.503758][ T4241] usb 2-1: device descriptor read/64, error -71 [ 400.631336][ T4241] usb usb2-port1: attempt power cycle [ 401.008400][T13649] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.142888][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'. [ 401.319380][T13662] loop3: detected capacity change from 0 to 64 [ 401.540398][ T4241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 401.583972][ T46] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 401.594601][ T4241] usb 2-1: device descriptor read/8, error -71 [ 402.787665][T13668] Trying to free block not in datazone [ 402.803062][T13668] Trying to free block not in datazone [ 402.808719][T13668] Trying to free block not in datazone [ 402.837107][T13668] Trying to free block not in datazone [ 403.196775][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 403.345293][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 403.420435][T13676] loop3: detected capacity change from 0 to 16 [ 403.499235][T13676] erofs: (device loop3): mounted with root inode @ nid 36. [ 403.533957][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 403.586516][ T4269] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 403.644056][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 403.682705][T13676] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 403.813852][ T4790] tipc: Left network mode [ 403.837496][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 403.837514][ T27] audit: type=1800 audit(1737684414.450:822): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3501" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 404.293013][T13686] loop6: detected capacity change from 0 to 128 [ 404.335794][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 404.565442][T13686] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 404.575533][T13686] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.706590][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 404.918417][T13692] netlink: 'syz.5.3507': attribute type 1 has an invalid length. [ 405.003138][T13692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 405.438058][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3507'. [ 405.527969][T11836] EXT4-fs (loop6): unmounting filesystem. [ 405.697228][T13707] netlink: 'syz.1.3509': attribute type 39 has an invalid length. [ 405.739858][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 405.881722][T13720] 9pnet_fd: Insufficient options for proto=fd [ 405.927912][T13715] netlink: 'syz.6.3511': attribute type 1 has an invalid length. [ 406.144101][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 406.316910][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 406.337760][T13734] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3521'. [ 406.494554][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 407.379338][T13743] netlink: 'syz.5.3522': attribute type 1 has an invalid length. [ 407.394294][T13727] loop1: detected capacity change from 0 to 32768 [ 407.440644][T13727] XFS (loop1): Mounting V5 Filesystem [ 407.457183][T13743] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.482878][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3522'. [ 407.666961][T13764] 9pnet_fd: Insufficient options for proto=fd [ 407.700539][T13727] XFS (loop1): Ending clean mount [ 407.807853][T13747] netlink: 'syz.3.3524': attribute type 39 has an invalid length. [ 407.844063][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 407.951792][T12151] XFS (loop1): Unmounting Filesystem [ 407.977779][T13769] loop6: detected capacity change from 0 to 512 [ 407.985134][T13769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.037793][T13770] loop5: detected capacity change from 0 to 512 [ 408.120622][T13774] loop3: detected capacity change from 0 to 512 [ 408.133050][T13770] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 408.184617][T13770] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.186767][T13756] loop0: detected capacity change from 0 to 32768 [ 408.207765][T13774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 408.240486][T13769] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 408.252344][T13774] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.268606][T13741] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 408.819541][ T46] net_ratelimit: 1 callbacks suppressed [ 408.821334][ T46] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 410.573902][T13235] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 410.658992][T13782] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #2: comm syz.5.3530: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 410.729714][T12360] EXT4-fs (loop3): unmounting filesystem. [ 410.864789][T13791] Bluetooth: MGMT ver 1.22 [ 410.899491][T11766] EXT4-fs (loop5): unmounting filesystem. [ 410.919967][T13789] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3533'. [ 410.944867][T13787] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 411.153950][T13787] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 411.393832][ T4790] device hsr_slave_0 left promiscuous mode [ 411.414479][ T4790] device hsr_slave_1 left promiscuous mode [ 411.456934][ T4790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.503824][ T4790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.512172][ T4790] device bridge_slave_1 left promiscuous mode [ 411.533911][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.541709][T13808] Cannot find add_set index 0 as target [ 411.552293][ T4790] device bridge_slave_0 left promiscuous mode [ 411.567207][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.886725][ T4790] bond11 (unregistering): Released all slaves [ 412.554819][ T4790] bond10 (unregistering): Released all slaves [ 412.591732][ T4790] bond9 (unregistering): Released all slaves [ 413.111123][T13827] Cannot find set identified by id 0 to match [ 413.132537][T13827] loop0: detected capacity change from 0 to 64 [ 413.892710][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 413.941452][T13818] loop3: detected capacity change from 0 to 32768 [ 414.013437][ T4790] bond8 (unregistering): Released all slaves [ 414.022373][T13818] XFS (loop3): Mounting V5 Filesystem [ 414.027967][ T4790] bond7 (unregistering): Released all slaves [ 414.036391][ T4790] bond6 (unregistering): Released all slaves [ 414.051848][ T4790] bond5 (unregistering): Released all slaves [ 414.101792][T13818] XFS (loop3): Ending clean mount [ 414.269092][T12360] XFS (loop3): Unmounting Filesystem [ 414.271188][ T4790] bond4 (unregistering): Released all slaves [ 414.299248][ T4790] bond3 (unregistering): Released all slaves [ 414.323296][ T4790] bond2 (unregistering): Released all slaves [ 414.338480][ T4790] bond1 (unregistering): Released all slaves [ 414.968377][ T4790] team0 (unregistering): Port device team_slave_1 removed [ 415.031322][ T4790] team0 (unregistering): Port device team_slave_0 removed [ 415.092950][ T4790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.156528][ T4790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.996074][T13853] syz.3.3548[13853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.996189][T13853] syz.3.3548[13853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.078130][ T4790] bond0 (unregistering): Released all slaves [ 416.204605][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 416.533601][T13862] Cannot find add_set index 0 as target [ 416.607875][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 416.733795][ T11] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 416.797621][T13868] loop1: detected capacity change from 0 to 8 [ 416.880012][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.045517][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.306803][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.344518][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3556'. [ 417.465664][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.614141][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.834049][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.974280][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 418.142571][T13884] loop6: detected capacity change from 0 to 512 [ 418.301064][T13889] syz.5.3559[13889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.301302][T13889] syz.5.3559[13889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.336503][T13882] loop1: detected capacity change from 0 to 128 [ 418.353522][T13891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3562'. [ 418.376447][T13884] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 418.386207][T13884] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.531242][T13884] Quota error (device loop6): do_check_range: Getting block 100663301 out of range 1-5 [ 418.556245][T13884] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 418.578868][T13884] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.3560: Failed to acquire dquot type 0 [ 418.731690][T11836] EXT4-fs (loop6): unmounting filesystem. [ 419.139847][T13911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3568'. [ 419.385672][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3570'. [ 419.436939][T13922] Cannot find add_set index 0 as target [ 419.556954][T13926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3574'. [ 419.932258][T13931] loop3: detected capacity change from 0 to 128 [ 420.319088][T13940] 9pnet_fd: Insufficient options for proto=fd [ 420.344849][T13940] 9pnet_fd: Insufficient options for proto=fd [ 420.406639][T13945] syz.0.3579[13945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.406751][T13945] syz.0.3579[13945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.674070][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3585'. [ 420.781622][T13934] loop1: detected capacity change from 0 to 32768 [ 420.918880][T13934] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 420.935647][T13934] XFS (loop1): Mounting V5 Filesystem [ 421.245750][ T4300] net_ratelimit: 22 callbacks suppressed [ 421.245796][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.634957][T13934] XFS (loop1): Ending clean mount [ 421.674314][T13934] XFS (loop1): Quotacheck needed: Please wait. [ 421.704033][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 421.710105][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 421.734982][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.865585][T13934] XFS (loop1): Quotacheck: Done. [ 421.923806][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 422.003367][T13982] loop3: detected capacity change from 0 to 128 [ 423.021427][T12151] XFS (loop1): Unmounting Filesystem [ 423.041354][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.205078][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.335174][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.405336][T13998] loop3: detected capacity change from 0 to 2048 [ 423.436423][T13998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.476627][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.553980][ T4301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 423.559840][T14005] 9pnet_fd: Insufficient options for proto=fd [ 423.569945][T14005] 9pnet_fd: Insufficient options for proto=fd [ 423.593938][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.640306][T14007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3599'. [ 423.705418][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.833889][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.898209][ T4301] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 423.911527][ T4301] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 423.926879][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.249659][ T4301] usb 1-1: config 0 descriptor?? [ 424.663194][ T4301] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 424.736194][T14018] loop5: detected capacity change from 0 to 1024 [ 424.826780][ T4335] usb 1-1: USB disconnect, device number 2 [ 424.922691][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3602'. [ 425.022322][T14032] loop1: detected capacity change from 0 to 128 [ 425.049541][T14018] EXT4-fs (loop5): Test dummy encryption mode enabled [ 425.100676][T14018] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 425.210494][T11766] EXT4-fs (loop5): unmounting filesystem. [ 426.127239][T14047] 9pnet_fd: Insufficient options for proto=fd [ 426.134623][T14047] 9pnet_fd: Insufficient options for proto=fd [ 426.196158][T14049] loop3: detected capacity change from 0 to 512 [ 426.312525][T14049] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 426.332100][T13983] net_ratelimit: 21 callbacks suppressed [ 426.332123][T13983] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.383773][T14049] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.413330][T14038] loop5: detected capacity change from 0 to 32768 [ 426.424978][T14054] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3611'. [ 426.514783][T13656] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.549010][T14038] XFS (loop5): Mounting V5 Filesystem [ 426.624687][T13656] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.745742][T13656] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.808987][T12360] EXT4-fs (loop3): unmounting filesystem. [ 426.896713][T13656] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.244967][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.431402][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.491316][T14038] XFS (loop5): Ending clean mount [ 427.608220][T13983] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.664009][T11766] XFS (loop5): Unmounting Filesystem [ 427.761241][T13983] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.872290][T14083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3617'. [ 427.936147][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 428.193445][T14088] device ip6tnl1 entered promiscuous mode [ 429.132786][T14102] loop1: detected capacity change from 0 to 128 [ 429.178360][T14101] loop0: detected capacity change from 0 to 2048 [ 429.307878][T14104] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.243313][T14121] netlink: 'syz.6.3629': attribute type 1 has an invalid length. [ 431.321847][T14123] bond3: (slave gretap1): making interface the new active one [ 431.437219][T14123] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 431.513811][T12781] net_ratelimit: 15 callbacks suppressed [ 431.513836][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.673680][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.810208][T14129] loop6: detected capacity change from 0 to 64 [ 431.823117][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.989898][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.363934][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.432190][T14136] Trying to free block not in datazone [ 432.447879][T14136] Trying to free block not in datazone [ 432.453525][T14136] Trying to free block not in datazone [ 432.515513][T14136] Trying to free block not in datazone [ 432.570259][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.903927][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 433.023965][T13741] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 433.092720][T14143] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3637'. [ 433.135535][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 433.284578][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.263047][T14151] loop0: detected capacity change from 0 to 4096 [ 434.300211][T14158] loop3: detected capacity change from 0 to 512 [ 434.379770][T14158] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.3642: bad orphan inode 13 [ 434.403996][T14158] ext4_test_bit(bit=12, block=4) = 1 [ 434.409348][T14158] is_bad_inode(inode)=0 [ 434.414121][T14158] NEXT_ORPHAN(inode)=0 [ 434.418322][T14158] max_ino=32 [ 434.421734][T14158] i_nlink=1 [ 434.427156][T14158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 434.443700][T14158] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.3642: Unrecognised inode hash code 20 [ 434.455407][T14158] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3642: Corrupt directory, running e2fsck is recommended [ 434.842334][T14172] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.3642: Unrecognised inode hash code 20 [ 434.854370][T14172] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3642: Corrupt directory, running e2fsck is recommended [ 435.608483][T12360] EXT4-fs (loop3): unmounting filesystem. [ 435.706047][T14179] loop3: detected capacity change from 0 to 64 [ 436.160344][T14186] Trying to free block not in datazone [ 436.167650][T14186] Trying to free block not in datazone [ 436.173334][T14186] Trying to free block not in datazone [ 436.201750][T14186] Trying to free block not in datazone [ 436.604438][T14016] net_ratelimit: 21 callbacks suppressed [ 436.604461][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.783835][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.913708][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.978004][T14197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3651'. [ 437.033701][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 437.178547][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 437.464403][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 438.050594][T14210] loop1: detected capacity change from 0 to 256 [ 438.803821][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 438.955628][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 439.064973][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 439.213744][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 439.333673][T12877] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 439.952985][T14241] ceph: No mds server is up or the cluster is laggy [ 439.980252][ T4241] libceph: connect (1)[c::]:6789 error -101 [ 440.061165][ T4241] libceph: mon0 (1)[c::]:6789 connect error [ 440.074124][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.081473][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.255043][T14244] loop3: detected capacity change from 0 to 128 [ 440.615267][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3668'. [ 441.638755][T14265] loop6: detected capacity change from 0 to 512 [ 441.667914][T14265] EXT4-fs: Ignoring removed orlov option [ 441.713911][T12853] net_ratelimit: 17 callbacks suppressed [ 441.713932][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.783131][T14259] loop5: detected capacity change from 0 to 32768 [ 441.792221][T14265] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 441.806485][T14259] XFS: noikeep mount option is deprecated. [ 441.826854][T14275] loop0: detected capacity change from 0 to 512 [ 441.827617][T14265] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 441.834985][T14275] EXT4-fs: Ignoring removed oldalloc option [ 441.850825][T14275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.857622][T13235] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.942412][T14263] loop1: detected capacity change from 0 to 32768 [ 441.985371][T14263] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3672 (14263) [ 442.002647][T14259] XFS (loop5): Mounting V5 Filesystem [ 442.009718][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.068997][T14275] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3676: inode #1: comm syz.0.3676: iget: illegal inode # [ 442.132745][T14259] XFS (loop5): Ending clean mount [ 442.138476][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.154623][T14263] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 442.169224][T14259] XFS (loop5): Quotacheck needed: Please wait. [ 442.179023][T14263] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 442.205324][T14263] BTRFS info (device loop1): setting nodatacow, compression disabled [ 442.226767][T14275] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3676: error while reading EA inode 1 err=-117 [ 442.230117][T14263] BTRFS info (device loop1): turning on flush-on-commit [ 442.246389][T14263] BTRFS info (device loop1): enabling auto defrag [ 442.255424][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.263037][T14263] BTRFS info (device loop1): max_inline at 0 [ 442.280303][T14275] EXT4-fs (loop0): 1 orphan inode deleted [ 442.286359][T14275] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 442.332334][T14263] BTRFS info (device loop1): using free space tree [ 442.423009][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.447317][T11188] EXT4-fs (loop0): unmounting filesystem. [ 442.465383][T14259] XFS (loop5): Quotacheck: Done. [ 442.577075][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.382716][T11766] XFS (loop5): Unmounting Filesystem [ 443.543916][T13235] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.663391][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.704189][T14263] BTRFS info (device loop1): enabling ssd optimizations [ 443.722146][T14263] BTRFS info (device loop1): checking UUID tree [ 443.794950][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.880514][T14314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3681'. [ 443.892924][T11836] EXT4-fs (loop6): unmounting filesystem. [ 444.434401][T14330] loop3: detected capacity change from 0 to 64 [ 444.488732][T12151] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 444.833949][T14333] Trying to free block not in datazone [ 444.841943][T14333] Trying to free block not in datazone [ 444.848523][T14333] Trying to free block not in datazone [ 444.876544][T14333] Trying to free block not in datazone [ 445.755179][T14341] autofs4:pid:14341:autofs_fill_super: called with bogus options [ 445.866557][T14345] loop3: detected capacity change from 0 to 2048 [ 446.209110][T14355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3695'. [ 446.533404][T14357] loop3: detected capacity change from 0 to 128 [ 446.838172][ T4790] net_ratelimit: 22 callbacks suppressed [ 446.838220][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.063750][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.194854][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.215121][T14339] loop6: detected capacity change from 0 to 32768 [ 447.222575][T14339] XFS: attr2 mount option is deprecated. [ 447.244061][T14339] XFS: ikeep mount option is deprecated. [ 447.249778][T14339] XFS: noikeep mount option is deprecated. [ 447.263805][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 447.328994][T14339] XFS (loop6): Mounting V5 Filesystem [ 447.393685][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.504834][T14339] XFS (loop6): Ending clean mount [ 447.514595][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.519183][T14339] XFS (loop6): Quotacheck needed: Please wait. [ 447.545119][T14381] loop0: detected capacity change from 0 to 64 [ 447.775259][T13656] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.788466][T14339] XFS (loop6): Quotacheck: Done. [ 448.034203][T14387] Trying to free block not in datazone [ 448.072338][T14387] Trying to free block not in datazone [ 448.078131][T14387] Trying to free block not in datazone [ 448.106062][T14387] Trying to free block not in datazone [ 448.323914][T13235] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.508605][ T27] audit: type=1804 audit(1737684459.120:823): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3690" name="/newroot/134/file1/file1" dev="loop6" ino=1062 res=1 errno=0 [ 448.596594][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.629671][T14390] autofs4:pid:14390:autofs_fill_super: called with bogus options [ 448.743806][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.839452][T11836] XFS (loop6): Unmounting Filesystem [ 448.874083][ T5702] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 450.370827][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3708'. [ 451.143568][ C0] sched: RT throttling activated [ 451.856242][ T4322] net_ratelimit: 7 callbacks suppressed [ 451.856263][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 451.899499][T14423] loop1: detected capacity change from 0 to 512 [ 451.933456][T14423] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3712: Invalid inode bitmap blk 4 in block_group 0 [ 451.984667][T14423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 451.994166][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.043834][T14423] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 452.134487][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.243686][ T46] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.322323][T12151] EXT4-fs (loop1): unmounting filesystem. [ 452.366078][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.514912][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.528507][T14434] loop1: detected capacity change from 0 to 128 [ 452.608976][T14434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 452.644034][T14434] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 452.759929][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.923702][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.936803][T12151] EXT4-fs (loop1): unmounting filesystem. [ 453.054466][T14448] autofs4:pid:14448:autofs_fill_super: called with bogus options [ 453.064509][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 453.393782][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 454.605613][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3722'. [ 456.348121][T14486] autofs4:pid:14486:autofs_fill_super: called with bogus options [ 456.389370][T14463] loop5: detected capacity change from 0 to 32768 [ 456.438168][T14463] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3723 (14463) [ 456.574426][T14463] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 456.602403][T14463] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 456.631010][T14463] BTRFS info (device loop5): setting nodatacow, compression disabled [ 456.667365][T14463] BTRFS info (device loop5): max_inline at 0 [ 456.687881][T14463] BTRFS info (device loop5): enabling disk space caching [ 456.695690][T14463] BTRFS info (device loop5): turning off barriers [ 456.702343][T14463] BTRFS info (device loop5): turning on flush-on-commit [ 456.709656][T14463] BTRFS info (device loop5): doing ref verification [ 456.716404][T14463] BTRFS info (device loop5): force clearing of disk cache [ 456.724357][T14463] BTRFS info (device loop5): enabling ssd optimizations [ 456.731442][T14463] BTRFS info (device loop5): max_inline at 4096 [ 456.737816][T14463] BTRFS info (device loop5): disk space caching is enabled [ 456.996795][T13787] net_ratelimit: 19 callbacks suppressed [ 456.996841][T13787] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.414427][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.517362][T14463] BTRFS info (device loop5): rebuilding free space tree [ 457.626860][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.712148][T14463] BTRFS info (device loop5): disabling free space tree [ 457.733302][T14463] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 457.747171][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.764879][T14463] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 457.885531][T14524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3737'. [ 458.095152][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.314148][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.476646][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.579683][T14525] x_tables: unsorted entry at hook 2 [ 458.614467][T11766] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 458.744070][ T11] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.863901][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.991766][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 459.089236][T14545] loop0: detected capacity change from 0 to 2048 [ 459.121098][T14545] EXT4-fs: Ignoring removed mblk_io_submit option [ 459.203294][T14549] autofs4:pid:14549:autofs_fill_super: called with bogus options [ 459.217472][T14545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 459.231560][T14544] loop3: detected capacity change from 0 to 8192 [ 459.303450][T14545] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3741: bg 0: block 234: padding at end of block bitmap is not set [ 459.404467][T14545] EXT4-fs (loop0): Remounting filesystem read-only [ 459.529210][T11188] EXT4-fs (loop0): unmounting filesystem. [ 459.697916][T14563] loop0: detected capacity change from 0 to 64 [ 460.169606][T14567] Trying to free block not in datazone [ 460.182951][T14567] Trying to free block not in datazone [ 460.188697][T14567] Trying to free block not in datazone [ 460.205565][T14567] Trying to free block not in datazone [ 460.767810][T14544] loop3: detected capacity change from 0 to 32768 [ 460.870023][T14544] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3742 (14544) [ 460.947062][T14544] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 460.976481][T14571] loop6: detected capacity change from 0 to 256 [ 460.989472][T14544] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 461.040743][T14544] BTRFS info (device loop3): using free space tree [ 462.402135][T14544] BTRFS error (device loop3): open_ctree failed [ 462.974310][ T9] net_ratelimit: 12 callbacks suppressed [ 462.974333][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.022482][T14603] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3752'. [ 463.135435][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.229840][ T4304] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 463.295068][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.300333][T14620] loop0: detected capacity change from 0 to 64 [ 463.433697][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.553775][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.684586][ T4304] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 463.702907][T14629] Trying to free block not in datazone [ 463.711053][T14629] Trying to free block not in datazone [ 463.716755][T14629] Trying to free block not in datazone [ 463.745981][T14629] Trying to free block not in datazone [ 463.766936][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.983836][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.123827][T13655] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.287175][ T4304] usb 6-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 464.296802][ T4304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.316121][ T4304] usb 6-1: config 0 descriptor?? [ 464.325912][ T46] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.541450][ T4304] usb 6-1: can't set config #0, error -71 [ 464.551151][ T4304] usb 6-1: USB disconnect, device number 2 [ 464.560723][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 465.236499][T14648] input: syz0 as /devices/virtual/input/input6 [ 467.518556][T14665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3769'. [ 468.003890][ T4385] net_ratelimit: 11 callbacks suppressed [ 468.003913][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.010750][T14671] loop6: detected capacity change from 0 to 2048 [ 468.144568][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.263907][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.373713][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.530480][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.695998][T14680] loop6: detected capacity change from 0 to 128 [ 468.745920][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.171770][ T4304] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 469.200686][T13657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.253472][T14662] loop3: detected capacity change from 0 to 32768 [ 469.309100][T14662] XFS (loop3): Mounting V5 Filesystem [ 469.327966][T14690] netlink: 'syz.5.3775': attribute type 10 has an invalid length. [ 469.402615][T14690] team0: Port device netdevsim0 added [ 469.426137][T14662] XFS (loop3): Ending clean mount [ 469.444904][T14693] netlink: 'syz.5.3775': attribute type 10 has an invalid length. [ 469.460374][ T4304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 469.493468][ T4304] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 469.504391][ T4304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.514932][ T4304] usb 2-1: config 0 descriptor?? [ 469.549870][ T4304] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 469.576215][T14693] team0: Port device netdevsim0 removed [ 469.585325][T14693] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 469.604279][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.697357][T12360] XFS (loop3): Unmounting Filesystem [ 469.812275][ T4241] usb 2-1: USB disconnect, device number 6 [ 469.812873][T13983] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.952269][T14015] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 471.137001][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3783'. [ 471.447238][T14722] loop6: detected capacity change from 0 to 4096 [ 471.502424][T14722] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 471.583941][T14722] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 471.591587][T14709] loop0: detected capacity change from 0 to 32768 [ 471.622621][T14709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.3781 (14709) [ 471.682291][T14709] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 471.693031][T14709] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 471.709344][T14709] BTRFS info (device loop0): setting nodatacow, compression disabled [ 471.720076][T14709] BTRFS info (device loop0): max_inline at 0 [ 471.733683][T14709] BTRFS info (device loop0): enabling disk space caching [ 471.776029][T14709] BTRFS info (device loop0): turning off barriers [ 471.813903][T14709] BTRFS info (device loop0): turning on flush-on-commit [ 471.866673][T14709] BTRFS info (device loop0): doing ref verification [ 471.874324][T14709] BTRFS info (device loop0): force clearing of disk cache [ 471.881617][T14709] BTRFS info (device loop0): enabling ssd optimizations [ 471.888762][T14709] BTRFS info (device loop0): max_inline at 4096 [ 471.895311][T14709] BTRFS info (device loop0): disk space caching is enabled [ 471.960856][ T27] audit: type=1804 audit(1737684482.570:824): pid=14722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3785" name="/newroot/153/file0/file1" dev="loop6" ino=30 res=1 errno=0 [ 472.969654][T14717] loop3: detected capacity change from 0 to 32768 [ 472.977644][T14717] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3776 (14717) [ 472.981432][T14709] BTRFS info (device loop0): rebuilding free space tree [ 473.003813][T14717] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 473.014131][T14717] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 473.016495][ T53] net_ratelimit: 19 callbacks suppressed [ 473.016515][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.022796][T14717] BTRFS info (device loop3): using free space tree [ 473.062918][T14709] BTRFS info (device loop0): disabling free space tree [ 473.076585][T14709] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 473.137399][T14709] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 473.215534][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.324134][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.406935][T14717] BTRFS info (device loop3): enabling ssd optimizations [ 473.452562][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3791'. [ 473.513965][T14015] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.633734][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.765713][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.855861][T12360] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 473.894029][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.026252][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.167919][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.233979][T11188] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 474.310392][ T5695] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 476.547475][T14808] loop5: detected capacity change from 0 to 512 [ 476.571478][T14808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.625325][T14808] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.645538][T14808] EXT4-fs: Ignoring removed oldalloc option [ 476.652383][T14808] EXT4-fs: group quota file already specified [ 476.691043][T14817] loop1: detected capacity change from 0 to 16 [ 476.834080][T14817] erofs: (device loop1): mounted with root inode @ nid 36. [ 476.937311][ T4269] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 476.963519][T14817] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 477.035886][ T27] audit: type=1800 audit(1737684487.650:825): pid=14817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3802" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 477.067448][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3796'. [ 477.570146][T14845] loop3: detected capacity change from 0 to 1024 [ 478.041830][ T4385] net_ratelimit: 12 callbacks suppressed [ 478.041877][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 478.596021][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 478.758142][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 479.200490][T12782] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 479.466884][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 479.716938][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 480.125836][T14869] xt_l2tp: unknown flags: 10 [ 480.187496][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 480.323900][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 480.463758][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 480.675376][T12603] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 480.886044][ T4271] Bluetooth: hci3: command 0x040a tx timeout [ 482.051802][T14884] loop6: detected capacity change from 0 to 32768 [ 482.067734][T14884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.3818 (14884) [ 482.167701][T14896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3822'. [ 482.185495][T14884] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 482.221399][T14884] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 482.267282][T14884] BTRFS info (device loop6): setting nodatacow, compression disabled [ 482.291039][T14884] BTRFS info (device loop6): max_inline at 0 [ 482.304101][T14884] BTRFS info (device loop6): enabling disk space caching [ 482.321874][T14884] BTRFS info (device loop6): turning off barriers [ 482.336340][T14884] BTRFS info (device loop6): turning on flush-on-commit [ 482.352590][T14884] BTRFS info (device loop6): doing ref verification [ 482.366280][T14884] BTRFS info (device loop6): force clearing of disk cache [ 482.382407][T14884] BTRFS info (device loop6): enabling ssd optimizations [ 482.408525][T14884] BTRFS info (device loop6): max_inline at 4096 [ 482.431816][T14884] BTRFS info (device loop6): disk space caching is enabled [ 483.113979][ T33] net_ratelimit: 16 callbacks suppressed [ 483.114024][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.470684][T14884] BTRFS info (device loop6): rebuilding free space tree [ 483.514072][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.605425][T14884] BTRFS info (device loop6): disabling free space tree [ 483.634009][T14884] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 483.653670][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.679260][T14937] autofs4:pid:14937:autofs_fill_super: called with bogus options [ 483.687542][T14884] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 483.774047][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.070590][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.242257][T13656] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.693823][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.768605][T11836] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 485.860627][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.994748][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 486.113456][T14964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3839'. [ 486.153374][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 486.543209][T14977] autofs4:pid:14977:autofs_fill_super: called with bogus options [ 486.756933][T14981] loop0: detected capacity change from 0 to 64 [ 488.103797][T15003] loop6: detected capacity change from 0 to 2048 [ 488.128034][T14917] net_ratelimit: 15 callbacks suppressed [ 488.128080][T14917] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.343923][T14917] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.683777][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.043666][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.153687][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.322037][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.668623][T13235] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.712318][T15017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3855'. [ 490.448616][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 490.563092][T15022] autofs4:pid:15022:autofs_fill_super: called with bogus options [ 490.653701][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 490.763906][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 490.872236][T15032] netlink: 'syz.1.3859': attribute type 1 has an invalid length. [ 490.888412][T15031] loop6: detected capacity change from 0 to 64 [ 490.939766][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3859'. [ 490.978047][T15034] device bond4 entered promiscuous mode [ 491.017877][T15034] 8021q: adding VLAN 0 to HW filter on device bond4 [ 492.804023][T15059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3870'. [ 492.980516][T15057] loop5: detected capacity change from 0 to 8192 [ 493.106923][T15057] loop5: AHDI p2 p3 [ 493.112245][T15057] loop5: p2 size 4294965248 extends beyond EOD, truncated [ 493.163698][T12853] net_ratelimit: 13 callbacks suppressed [ 493.163720][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.188008][T15057] loop5: p3 start 4294903296 is beyond EOD, truncated [ 493.454488][T15070] Cannot find add_set index 0 as target [ 493.984022][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 494.103733][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 494.164311][T15081] netlink: 'syz.5.3874': attribute type 1 has an invalid length. [ 494.253016][T15083] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3874'. [ 494.300866][T15083] device bond7 entered promiscuous mode [ 494.345070][T15083] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.433808][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 494.598400][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.434302][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.474992][T15072] loop6: detected capacity change from 0 to 32768 [ 495.544918][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.570052][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.600398][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.616287][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.625084][T15072] XFS (loop6): Mounting V5 Filesystem [ 495.630829][T15102] loop3: detected capacity change from 0 to 8 [ 495.643712][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.651544][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.671516][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.691810][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.707045][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.715026][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.722487][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.730415][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.738219][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.746353][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.754136][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.761729][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.770118][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.778035][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.785876][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.791787][T15102] SQUASHFS error: Unable to read inode 0xa7 [ 495.793375][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.808459][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.816260][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.824316][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.831765][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.838593][T15072] XFS (loop6): Ending clean mount [ 495.870001][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.890238][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.902382][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.919721][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.932071][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.940222][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.970470][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.991061][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 496.011931][ T6889] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 496.032201][ T6889] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 496.073716][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 496.203666][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 496.240164][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3884'. [ 496.304562][T11836] XFS (loop6): Unmounting Filesystem [ 496.314910][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 496.819120][T15099] loop1: detected capacity change from 0 to 32768 [ 496.912289][T15099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3881 (15099) [ 496.949910][T15099] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 496.990718][T15099] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 497.021030][T15099] BTRFS info (device loop1): using free space tree [ 497.162493][T15125] Cannot find add_set index 0 as target [ 497.482726][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3886'. [ 497.772241][T15135] netlink: 'syz.3.3891': attribute type 39 has an invalid length. [ 497.860234][T15099] BTRFS info (device loop1): enabling ssd optimizations [ 498.064836][T12151] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 498.240430][T13544] net_ratelimit: 10 callbacks suppressed [ 498.240455][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 498.287194][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3897'. [ 498.930171][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 498.977682][T15179] loop6: detected capacity change from 0 to 1024 [ 498.997097][T15179] EXT4-fs (loop6): Test dummy encryption mode enabled [ 499.055383][T15179] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 499.064897][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.203874][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.297558][T15187] netlink: 'syz.5.3903': attribute type 1 has an invalid length. [ 499.314987][T11836] EXT4-fs (loop6): unmounting filesystem. [ 499.355609][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.368131][T15187] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3903'. [ 499.388945][T15187] device bond8 entered promiscuous mode [ 499.398244][T15187] 8021q: adding VLAN 0 to HW filter on device bond8 [ 499.543705][T14015] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.653825][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.779680][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3908'. [ 499.835252][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.987738][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 500.153871][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 500.481187][T15173] loop0: detected capacity change from 0 to 40427 [ 500.590739][T15173] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 500.671509][T15173] F2FS-fs (loop0): invalid crc value [ 500.733291][T15173] F2FS-fs (loop0): Found nat_bits in checkpoint [ 500.804916][T15224] loop6: detected capacity change from 0 to 512 [ 500.860731][T15173] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 500.892109][T15224] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 500.922941][T15231] netlink: 'syz.5.3916': attribute type 1 has an invalid length. [ 500.932763][T15224] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.049246][T15233] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3916'. [ 501.117535][T15233] device bond9 entered promiscuous mode [ 501.138981][T15233] 8021q: adding VLAN 0 to HW filter on device bond9 [ 501.329278][T15235] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #2: comm syz.6.3914: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 501.508571][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.520024][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.887458][T11188] syz-executor: attempt to access beyond end of device [ 501.887458][T11188] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 501.926967][T11836] EXT4-fs (loop6): unmounting filesystem. [ 503.160985][T15264] loop1: detected capacity change from 0 to 4096 [ 503.194384][T15264] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 503.335118][ T4322] net_ratelimit: 22 callbacks suppressed [ 503.335141][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.413844][T15269] netlink: 'syz.0.3930': attribute type 1 has an invalid length. [ 503.480979][T15271] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3930'. [ 503.507969][T15271] device bond7 entered promiscuous mode [ 503.514285][T15271] 8021q: adding VLAN 0 to HW filter on device bond7 [ 503.523717][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.664043][T12781] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.784988][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.893642][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 504.018004][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 504.157464][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 504.283732][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 504.365368][T15292] loop1: detected capacity change from 0 to 64 [ 504.403679][ T4322] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 504.533673][ T4385] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 505.473167][T15299] loop1: detected capacity change from 0 to 1024 [ 505.663378][T15303] hfsplus: xattr exists yet [ 505.743800][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 505.815245][T15281] loop0: detected capacity change from 0 to 32768 [ 505.835291][T14484] hfsplus: b-tree write err: -5, ino 4 [ 505.855161][T15275] loop3: detected capacity change from 0 to 40427 [ 505.882260][T15275] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 505.908171][T15281] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 505.942876][T15281] XFS (loop0): Mounting V5 Filesystem [ 505.995500][T15275] F2FS-fs (loop3): invalid crc value [ 506.082059][T15281] XFS (loop0): Ending clean mount [ 506.099542][T15281] XFS (loop0): Quotacheck needed: Please wait. [ 506.241345][T15275] F2FS-fs (loop3): Found nat_bits in checkpoint [ 506.593257][T15322] device ip6tnl1 entered promiscuous mode [ 506.974387][T15281] XFS (loop0): Quotacheck: Done. [ 507.051284][T11188] XFS (loop0): Unmounting Filesystem [ 507.456031][T15331] loop1: detected capacity change from 0 to 64 [ 507.677656][T15334] autofs4:pid:15334:autofs_fill_super: called with bogus options [ 508.290950][T15345] loop5: detected capacity change from 0 to 4096 [ 508.313279][T15345] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 508.363724][T14950] net_ratelimit: 21 callbacks suppressed [ 508.363747][T14950] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.523766][T13235] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.643826][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.773677][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.893741][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 509.003864][ T4790] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 509.125493][T15364] device ip6tnl1 entered promiscuous mode [ 509.834202][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 509.946988][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.111411][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.165416][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3966'. [ 510.265440][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.587465][T15387] loop6: detected capacity change from 0 to 128 [ 512.223970][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 512.263440][T15369] loop0: detected capacity change from 0 to 40427 [ 512.295607][T15369] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7 [ 512.338871][T15369] F2FS-fs (loop0): Unrecognized mount option "barrier" or missing value [ 513.543913][T14950] net_ratelimit: 22 callbacks suppressed [ 513.543936][T14950] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 513.893742][T14950] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.016358][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.153831][T13235] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.336099][T15418] device ip6tnl1 entered promiscuous mode [ 515.093732][T13544] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.306075][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.477874][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.582521][T15433] syz.0.3986 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 515.641148][T15433] loop0: detected capacity change from 0 to 1024 [ 515.654163][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.672263][T15433] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 515.691836][T15433] EXT4-fs (loop0): invalid journal inode [ 516.018651][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 516.305327][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 517.123768][ T4271] Bluetooth: hci5: command 0x040a tx timeout [ 517.908508][T15452] loop6: detected capacity change from 0 to 1024 [ 518.092686][ T53] hfsplus: b-tree write err: -5, ino 4 [ 518.352063][T15460] loop6: detected capacity change from 0 to 2048 [ 518.554705][T14484] net_ratelimit: 14 callbacks suppressed [ 518.554727][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 520.554069][ T4271] Bluetooth: hci5: command 0x0409 tx timeout [ 520.580076][T15466] device ip6tnl1 entered promiscuous mode [ 520.704580][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 520.833720][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 520.973831][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 521.176700][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 521.333731][ T4300] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 521.352933][T15472] loop3: detected capacity change from 0 to 32768 [ 521.379038][T15472] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3998 (15472) [ 521.453938][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 521.526543][T15472] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 521.560306][T15472] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 521.849130][T15472] BTRFS info (device loop3): using free space tree [ 522.259550][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 522.383793][T12853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 522.538786][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 522.571618][T15475] loop0: detected capacity change from 0 to 32768 [ 522.581027][T15475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3999 (15475) [ 522.615189][T15472] BTRFS info (device loop3): enabling ssd optimizations [ 522.622427][T15475] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 522.645723][T15475] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 522.659195][T15475] BTRFS info (device loop0): using free space tree [ 522.740848][T12360] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 522.742110][T15520] loop1: detected capacity change from 0 to 64 [ 522.909008][T15475] BTRFS info (device loop0): enabling ssd optimizations [ 523.204840][T11188] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 523.643810][ T53] net_ratelimit: 5 callbacks suppressed [ 523.643830][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 523.707757][T15536] loop5: detected capacity change from 0 to 2048 [ 523.806436][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 523.944064][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 524.065557][T14484] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 524.090329][T15545] loop0: detected capacity change from 0 to 128 [ 524.197656][T15545] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 524.274435][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 526.179051][T15545] ================================================================== [ 526.187176][T15545] BUG: KASAN: use-after-free in sysv_new_inode+0x107e/0x1210 [ 526.194596][T15545] Read of size 2 at addr ffff8880444791ce by task syz.0.4008/15545 [ 526.202521][T15545] [ 526.204882][T15545] CPU: 0 PID: 15545 Comm: syz.0.4008 Not tainted 6.1.127-syzkaller #0 [ 526.213067][T15545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 526.223248][T15545] Call Trace: [ 526.226560][T15545] [ 526.229516][T15545] dump_stack_lvl+0x1e3/0x2cb [ 526.234225][T15545] ? nf_tcp_handle_invalid+0x642/0x642 [ 526.239709][T15545] ? panic+0x764/0x764 [ 526.243792][T15545] ? _printk+0xd1/0x111 [ 526.247980][T15545] ? __virt_addr_valid+0x17f/0x530 [ 526.253121][T15545] ? __virt_addr_valid+0x17f/0x530 [ 526.258260][T15545] print_report+0x15f/0x4f0 [ 526.262784][T15545] ? __virt_addr_valid+0x17f/0x530 [ 526.267910][T15545] ? __virt_addr_valid+0x17f/0x530 [ 526.273040][T15545] ? __virt_addr_valid+0x45b/0x530 [ 526.278210][T15545] ? __phys_addr+0xb6/0x170 [ 526.282731][T15545] ? sysv_new_inode+0x107e/0x1210 [ 526.287777][T15545] kasan_report+0x136/0x160 [ 526.292293][T15545] ? sysv_new_inode+0x107e/0x1210 [ 526.297331][T15545] sysv_new_inode+0x107e/0x1210 [ 526.302200][T15545] ? sysv_free_inode+0x840/0x840 [ 526.307674][T15545] ? __d_add+0x503/0x800 [ 526.311931][T15545] ? generic_permission+0x27c/0x4f0 [ 526.317151][T15545] sysv_mknod+0x4a/0xe0 [ 526.321412][T15545] ? sysv_lookup+0xe0/0xe0 [ 526.325845][T15545] path_openat+0x12f1/0x2e60 [ 526.330456][T15545] ? do_filp_open+0x480/0x480 [ 526.335153][T15545] do_filp_open+0x230/0x480 [ 526.339673][T15545] ? vfs_tmpfile+0x4a0/0x4a0 [ 526.344285][T15545] ? _raw_spin_unlock+0x24/0x40 [ 526.349152][T15545] ? alloc_fd+0x5a0/0x640 [ 526.353494][T15545] do_sys_openat2+0x13b/0x4f0 [ 526.358199][T15545] ? do_sys_open+0x220/0x220 [ 526.362805][T15545] ? blkcg_maybe_throttle_current+0x1ac/0xa30 [ 526.368888][T15545] __x64_sys_openat+0x243/0x290 [ 526.373799][T15545] ? __ia32_sys_open+0x270/0x270 [ 526.378757][T15545] ? syscall_enter_from_user_mode+0x2e/0x230 [ 526.384761][T15545] ? lockdep_hardirqs_on+0x94/0x130 [ 526.389970][T15545] ? syscall_enter_from_user_mode+0x2e/0x230 [ 526.396047][T15545] do_syscall_64+0x3b/0xb0 [ 526.400467][T15545] ? clear_bhb_loop+0x45/0xa0 [ 526.405152][T15545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.411066][T15545] RIP: 0033:0x7fed33d8cd29 [ 526.415498][T15545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.435639][T15545] RSP: 002b:00007fed34c71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 526.444090][T15545] RAX: ffffffffffffffda RBX: 00007fed33fa5fa0 RCX: 00007fed33d8cd29 [ 526.452066][T15545] RDX: 000000000000275a RSI: 0000000020000080 RDI: ffffffffffffff9c [ 526.460044][T15545] RBP: 00007fed33e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 526.468109][T15545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.476085][T15545] R13: 0000000000000000 R14: 00007fed33fa5fa0 R15: 00007ffe60cef938 [ 526.484076][T15545] [ 526.487132][T15545] [ 526.489541][T15545] The buggy address belongs to the physical page: [ 526.495967][T15545] page:ffffea0001111e40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x44479 [ 526.506147][T15545] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 526.513296][T15545] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 526.521979][T15545] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 526.530567][T15545] page dumped because: kasan: bad access detected [ 526.536989][T15545] page_owner tracks the page as freed [ 526.542372][T15545] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 15254, tgid 15254 (syz.1.3917), ts 503286244529, free_ts 509800319321 [ 526.560647][T15545] post_alloc_hook+0x18d/0x1b0 [ 526.565425][T15545] get_page_from_freelist+0x3731/0x38d0 [ 526.570982][T15545] __alloc_pages+0x28d/0x770 [ 526.575583][T15545] __folio_alloc+0xf/0x30 [ 526.579916][T15545] vma_alloc_folio+0x486/0x990 [ 526.584682][T15545] shmem_alloc_and_acct_folio+0x5a8/0xd50 [ 526.590416][T15545] shmem_get_folio_gfp+0x13f0/0x3470 [ 526.595714][T15545] shmem_write_begin+0x16e/0x4e0 [ 526.600679][T15545] generic_perform_write+0x2fc/0x5e0 [ 526.605972][T15545] __generic_file_write_iter+0x176/0x400 [ 526.611611][T15545] generic_file_write_iter+0xab/0x310 [ 526.616990][T15545] __kernel_write_iter+0x2ff/0x710 [ 526.622220][T15545] dump_user_range+0x43d/0x8e0 [ 526.627052][T15545] elf_core_dump+0x3d2b/0x4590 [ 526.631839][T15545] do_coredump+0x18b7/0x2700 [ 526.636437][T15545] get_signal+0x1454/0x17d0 [ 526.640977][T15545] page last free stack trace: [ 526.645668][T15545] free_unref_page_prepare+0x12a6/0x15b0 [ 526.651317][T15545] free_unref_page_list+0x663/0x900 [ 526.656524][T15545] release_pages+0x24c4/0x27a0 [ 526.661294][T15545] __pagevec_release+0x80/0xf0 [ 526.666061][T15545] shmem_undo_range+0x865/0x2390 [ 526.671016][T15545] shmem_evict_inode+0x265/0xa60 [ 526.675961][T15545] evict+0x529/0x930 [ 526.679962][T15545] __dentry_kill+0x436/0x650 [ 526.684562][T15545] dentry_kill+0xbb/0x290 [ 526.688896][T15545] dput+0xfb/0x1d0 [ 526.692797][T15545] __fput+0x62e/0x8d0 [ 526.696784][T15545] task_work_run+0x246/0x300 [ 526.701385][T15545] do_exit+0xa6e/0x26a0 [ 526.705553][T15545] do_group_exit+0x202/0x2b0 [ 526.710165][T15545] get_signal+0x16f7/0x17d0 [ 526.714687][T15545] arch_do_signal_or_restart+0xb0/0x1a10 [ 526.720330][T15545] [ 526.722653][T15545] Memory state around the buggy address: [ 526.728282][T15545] ffff888044479080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 526.736349][T15545] ffff888044479100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 526.744415][T15545] >ffff888044479180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 526.752476][T15545] ^ [ 526.759004][T15545] ffff888044479200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 526.767069][T15545] ffff888044479280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 526.775129][T15545] ================================================================== [ 526.788673][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 526.913629][T15434] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 527.024485][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.033775][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 527.042617][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.052024][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.062574][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.070426][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 527.078603][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.243921][T14016] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 527.306476][T15545] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 527.313816][T15545] CPU: 1 PID: 15545 Comm: syz.0.4008 Not tainted 6.1.127-syzkaller #0 [ 527.321991][T15545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 527.332077][T15545] Call Trace: [ 527.335382][T15545] [ 527.338329][T15545] dump_stack_lvl+0x1e3/0x2cb [ 527.343059][T15545] ? nf_tcp_handle_invalid+0x642/0x642 [ 527.348571][T15545] ? panic+0x764/0x764 [ 527.352670][T15545] ? preempt_schedule_common+0xa6/0xd0 [ 527.358169][T15545] ? vscnprintf+0x59/0x80 [ 527.362550][T15545] panic+0x318/0x764 [ 527.366494][T15545] ? check_panic_on_warn+0x1d/0xa0 [ 527.371645][T15545] ? memcpy_page_flushcache+0xfc/0xfc [ 527.377053][T15545] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 527.383078][T15545] ? _raw_spin_unlock+0x40/0x40 [ 527.387982][T15545] ? print_report+0x4a3/0x4f0 [ 527.392709][T15545] check_panic_on_warn+0x7e/0xa0 [ 527.397690][T15545] ? sysv_new_inode+0x107e/0x1210 [ 527.402763][T15545] end_report+0x66/0x110 [ 527.407055][T15545] kasan_report+0x143/0x160 [ 527.411604][T15545] ? sysv_new_inode+0x107e/0x1210 [ 527.416674][T15545] sysv_new_inode+0x107e/0x1210 [ 527.421575][T15545] ? sysv_free_inode+0x840/0x840 [ 527.426557][T15545] ? __d_add+0x503/0x800 [ 527.430835][T15545] ? generic_permission+0x27c/0x4f0 [ 527.436085][T15545] sysv_mknod+0x4a/0xe0 [ 527.440286][T15545] ? sysv_lookup+0xe0/0xe0 [ 527.444741][T15545] path_openat+0x12f1/0x2e60 [ 527.449389][T15545] ? do_filp_open+0x480/0x480 [ 527.454121][T15545] do_filp_open+0x230/0x480 [ 527.458688][T15545] ? vfs_tmpfile+0x4a0/0x4a0 [ 527.463349][T15545] ? _raw_spin_unlock+0x24/0x40 [ 527.468286][T15545] ? alloc_fd+0x5a0/0x640 [ 527.472654][T15545] do_sys_openat2+0x13b/0x4f0 [ 527.477378][T15545] ? do_sys_open+0x220/0x220 [ 527.482010][T15545] ? blkcg_maybe_throttle_current+0x1ac/0xa30 [ 527.488126][T15545] __x64_sys_openat+0x243/0x290 [ 527.493023][T15545] ? __ia32_sys_open+0x270/0x270 [ 527.498016][T15545] ? syscall_enter_from_user_mode+0x2e/0x230 [ 527.504038][T15545] ? lockdep_hardirqs_on+0x94/0x130 [ 527.509280][T15545] ? syscall_enter_from_user_mode+0x2e/0x230 [ 527.515310][T15545] do_syscall_64+0x3b/0xb0 [ 527.519932][T15545] ? clear_bhb_loop+0x45/0xa0 [ 527.524648][T15545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.530591][T15545] RIP: 0033:0x7fed33d8cd29 [ 527.535054][T15545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.536564][T15554] chnl_net:caif_netlink_parms(): no params data found [ 527.561821][T15545] RSP: 002b:00007fed34c71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 527.570271][T15545] RAX: ffffffffffffffda RBX: 00007fed33fa5fa0 RCX: 00007fed33d8cd29 [ 527.578265][T15545] RDX: 000000000000275a RSI: 0000000020000080 RDI: ffffffffffffff9c [ 527.586248][T15545] RBP: 00007fed33e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 527.594235][T15545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.602393][T15545] R13: 0000000000000000 R14: 00007fed33fa5fa0 R15: 00007ffe60cef938 [ 527.610565][T15545] [ 527.613931][T15545] Kernel Offset: disabled [ 527.618354][T15545] Rebooting in 86400 seconds..