last executing test programs: 2m16.971456096s ago: executing program 2 (id=406): r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setns(r2, 0x24020000) r4 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, r4) 2m16.587238594s ago: executing program 2 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m15.553442876s ago: executing program 2 (id=416): r0 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@nogrpid}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x0, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) fstat(r1, &(0x7f0000000300)) recvmmsg$unix(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m15.084693532s ago: executing program 2 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70300000004000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) fsmount(r3, 0x0, 0x82) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, 0x5394b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x24000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 2m13.965529933s ago: executing program 2 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) 2m13.046319333s ago: executing program 2 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m57.268247166s ago: executing program 32 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m9.439031095s ago: executing program 5 (id=681): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04601c0c"], 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9f}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r1, 0x7, 0x7}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "d452c6e132be0ee2", "aa4a0921f66631cd1b485cdc27c8265b", "0980e5df", "26837b2d50ba330b"}, 0x28) 1m7.595039266s ago: executing program 5 (id=690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1m6.4301365s ago: executing program 5 (id=697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) setregid(0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) 1m6.349684788s ago: executing program 5 (id=708): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000840)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {}, {@utf8no}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@utf8no}, {@shortname_mixed}, {@fat=@quiet}, {@numtail}]}, 0x0, 0x29f, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 1m6.178799705s ago: executing program 5 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 1m4.324391658s ago: executing program 5 (id=707): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 1m4.308351199s ago: executing program 33 (id=707): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 6.50049849s ago: executing program 1 (id=976): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 6.50025311s ago: executing program 0 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 6.115031638s ago: executing program 1 (id=981): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 6.09944979s ago: executing program 6 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x2, 0x2}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5.969412533s ago: executing program 0 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 4.522821735s ago: executing program 1 (id=986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.521854895s ago: executing program 6 (id=987): keyctl$setperm(0x5, 0x0, 0x80432) keyctl$read(0xb, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x10}, 0x48) 4.521269085s ago: executing program 0 (id=988): r0 = openat(0xffffffffffffffff, 0x0, 0x2c8402, 0x61) syz_genetlink_get_family_id$mptcp(0x0, r0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 4.47146039s ago: executing program 4 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@i_version}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x511, &(0x7f0000000540)="$eJzs3cFvVE8dAPDv23Zp6a/8CspBjQoiioawbRdoCBfhojGExEg8eYDaLk3TXbbpLpFWDuXonUQST/onePNgwsmDN29684IHE1SioSYe1ry327K023b9dduF7ueTvL43M8t+Z7rMzL6B3QlgYJ2PiPWIOBERDyJiopWftI641TzSx71983Ru483TuSQajXv/SLLyNC/a/kzqk9ZzjkbED78X8ZNkZ9za6trSbLlcWmmlJ+uV5cna6tqVxVwrpzgzPTN14+r1Ys/aeq7ym9ffXbzzo9/99iuv/rj+7Z+l1Rr/+amsrL0dvdRsej7G2/KGI+LOYQTrk+HW3x8+Pmlv+1xEXMj6/0QMZa8mAHCcNRoT0ZhoTwMAx116/z8eSa7QWgsYj1yuUGiu4Z2NsVy5Wqtfnqg+fjQf2RrW6cjnHi6WS1OttcLTkU/S9HR2/S5dfC/9vHQ1Is5ExPORk1l5Ya5anu/nGx8AGGCfbJv//z3SnP8BgGNutN8VAACOnPkfAAaP+R8ABs//Mf/7dCAAHBPu/wFg8Jj/AWDw7Dv/PzuaegAAR+IHd++mR2Oj+f3Xm9/UfWW+VFsqVB7PFeaqK8uFhWp1oVwqzDUa+z1fuVpdnr62laytrt2vVB8/qt9frMwulO6X8ofZGACgK2fOvfxzOumv3zyZHdG2l4O5Go63XL8rAPTNUL8rAPSNz/PA4OriHt8yABxzHbbofc+u/0Xohc1f4WN16YvW/2FQHWT939oBfNw+2/r/d3peD+DomcNhcDUaiT3/AWDAWOMHDvTv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCgxrMjyRWyvcDX05+5QiHiVEScjnzycLFcmoqITyPiTyP5kTQ93e9KAwAHlPtb0tr/69LExfHtpSeS/4xk54j46S/v/eLJbL2+Mp3m/3Mrv/4izT9ZXyme6EcDAIB2t3ZmZfN3sXVuu5F/++bp3OZxlFV8fbu5uWgad6N1NEuGYzg7j0Y+Isb+lbTSTen7laEexF9/FhFf2Gz/aDxpizCerYE0dz7dHj+Nfarn8dt//9vj595rby4rS8/57Hfx+R7UBQbNy9vNcbLV99Iu3up/uTifnTv3/9FshDq4dPxL+/XGjvEvtzX+De2In2R9/vxWeu+avL72++/vyGxMNMueRXxpuFP8ZCt+0nn8zV/sso1/+fJXL+xW1vhVxKWO7d/ckbqSDbOT9cryZG117cpiZXahtFB6VCzOTM9M3bh6vTiZrVE3f/6hU4y/37z86W7x0/aP7RJ/dO/2xze6bP+v//vgx1/bI/63vt759T+7R/x0Tvxml/Fnx27tun13Gn9+l/bv8/rH5S7jv/rr2nyXDwUAjkBtdW1ptlwurexzkb7X3O8xLrq/SO/tP4BqZBexHtGrJ8wWJSKi42PSd9QfRpMP6yL5MKrRi4t+j0zAYXvX6ftdEwAAAAAAAAAAAAAAYDe11bWlkc6f1urZRb/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1vwAAAP//tBrD+w==") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 3.412983924s ago: executing program 1 (id=990): r0 = socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) 3.412016754s ago: executing program 6 (id=991): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @empty, 0xfffffffe}, 0x1c) 3.411900374s ago: executing program 3 (id=992): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.14838587s ago: executing program 3 (id=993): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="c2416441277dff4e7798"], 0x8) connect$inet6(r0, 0x0, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x98, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e2", 0x14) 2.817866373s ago: executing program 3 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.450620809s ago: executing program 6 (id=995): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0xc050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d94a29a06a5b0348622bd47850655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5c127c7b3d25ac3b2752ea779c30f600bd516a68d881e7fd7289826d49e35134a94e27f2319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd75caabcee22347bdb78b7ab400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce66522e652939a37435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c15798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e538c0595caa056984ab8974dadad47a42af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df669abf869d13b175852b775fff70491d1e5d1311b04000000000000006576853a1b45a02154df101ddb98c5ba2b312528485ece7aff23cc6f115a9daea0fca71a59705c0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8ec00000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b5130c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9", @ANYRES8, @ANYRESOCT, @ANYRES16, @ANYRES8], 0x1, 0x1d6, &(0x7f0000000f80)="$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") lseek(0xffffffffffffffff, 0x10d, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 2.448815899s ago: executing program 4 (id=996): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4b7f, &(0x7f00000005c0)={0x0, 0x409f00, 0x800, 0x0, 0x2ff}, 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000400)={0x0, 0x2000000, 0x0, 0xffffffff, 0x39f}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.393373645s ago: executing program 1 (id=997): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.33840302s ago: executing program 4 (id=998): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r5 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) 2.33535311s ago: executing program 3 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) 2.271072807s ago: executing program 0 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0xcc, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x5}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 2.269793477s ago: executing program 4 (id=1001): socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 2.195430024s ago: executing program 4 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) 1.432550739s ago: executing program 6 (id=1003): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.410947661s ago: executing program 0 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.293499193s ago: executing program 3 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.287172594s ago: executing program 4 (id=1006): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x84) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = io_uring_setup(0x7, 0x0) io_uring_enter(r4, 0x0, 0x54aa, 0x5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2000000000000) 732.202868ms ago: executing program 1 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@i_version}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x511, &(0x7f0000000540)="$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") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 731.948508ms ago: executing program 6 (id=1008): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2b, 0x801, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 685.793573ms ago: executing program 3 (id=1009): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x141842, 0x0) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009a00)={[{@grpquota}, {@usrquota}, {@qnoenforce}]}, 0x4, 0x9860, &(0x7f0000000140)="$eJzs3Qm8rWPBuP91BhzzUKIJmdJozJCSeSjJHJkzZwwJZR7KUFFCRaFISiFURCoJmck8z/M8j//PcQ5xusj7/73vy+u6ro9z1vTste99f9f92Gs/+6y10qLLLTgYTDIY1Yun/+qMA25YffkJl9zixP2GX37I3kvdPfrqsUedTDr/6NMFRp8uOBgMhoy+nyGjrhs+3wknDh0MH4z8719NMO54QycYDMYbfXH0/QzmGnUy/pEvbvf8GPFApxn56fYa9eeFJhx5JyPPrLrms5sOBoMRL/v4keOa5d++UGkLLLj8gv+yeslt6Oibh/zrthdOh4/6M/7hg8H4hw5e/fExctuxXvax/5uN/JyTTDdY4YY34HP/n+uzCyy97Bj+I9fisNHXzTVyjY+5Bo2N+Tjfe7mN7hw9hUNetj8aOsaaedO30gKLLjl49XU8WGqR7e94/oX95vCFB4PhiwwGwxcdDIYv9kZ71H9Pb+iDr6qqqt6QFlhw9pHP/4aO8f3AiBe/r6XvC896ZtZbBoPhS436fnf4mi8+F6yqqqqqqqqqN2cLLDj7QvD8f5LXev4/zSm7Tdrz/6qqqqqqqqr/Oy2xwIKzj3yuP8bz/ylf6/n/A3cdc8So3/2ff65RH/XcG/tFVFVVVVVVVdVrtugS+Px/mtd6/n/OCdOc3/P/qqqqqqqqqv87LTv7ogsNXvY6e6OvnunF2+n5/6m3X7faGzXeqqqqqqqqqvqv99y9J5/2r9d8n2owxuu9v9DonwsMOfb0Cy98wwb65mjIv/88ZKc3ekz/r410HnH0NIPBpiu80UOpN6D/M69VX/8j5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4l7l+P9Lr/9/6vFrv/he8O+fYfYrTv7XR77w3v/Dl1ri3p3foKG/Eb1Vj/8PNhwyGIz2nWTDwWCw1ALLLj/TYDA4+YrZZ5h+8NJtc4+8bd7Jhr3wBvEv/jORRSblO95p2lGnIx8og7e/dB/HvnD/Szx/2LAhYwziZU160hFHbLDS43OMeTrjq38dQ186N+GJd734b1mGjrHRiFf54Bfv/8WvZUzn0WOfaeTYZ95qk81n3nLb7T6y4SZrrb/u+utuOs9sc846xzzzzDnnzOttuPG6s4z6+9XmbJoX/l7o9czZBGPO2b0LvHzOxvzaXm3OpnntOXvhHvc/e8SnXpyz4f/FOVvotedsmg1Hf6JJ5x9rsOYLczNkMJh04bEG24y8MOs4g8Gki4zedsqR235isqGDwb7/+kJHnhvnpcfgkJ1GbrPSosst+K+33Z/k38b2Ku9nP/bokc8/+nSB0acLjvo0kwz+9VAcPt8JJw4dORevmI4Jxh1v6ASDwXijL46+n8E8o07GO+XF7V7lfdbHGOgLL7Oy16g/LzThYDAYf+SZqdY6dfeRU/+/8D7t/7/+//9vXnMPeenxOGT0n9HbjPJaYLEl/vW5XpiGkXM3bPR1c400+W9+a/tX9G/jnWbEYJrXGO9rvC7OC9Hja+OTJ9/lv+t1cWi8U77GeF/jdXxfdbwr3nLQnaPu6r9tvGPs65Z84e/5X8++bvDa+7phdAfrnvfeMfd1n3n1Ib5id/niHI0zxkavtq+b8uCpdxp5//O/9r5uyZFjH+sV+7qhg8GkC724rxu541t0rMG+Iy/MNvLCYmMNjhp5YfYXLow7OH3khY+uvdnG64y8YvF/fxzMNOQVv6AJ62zRMdbZkJd97UPG+P3O4aNOxz/8xfdwepX95pDRX9Z/3FfQ43aS1xjva7z/FM7zyOvWOW7E5P9d7z9F4x3x2uN9tffLftXx7vPYqTf8N4/3pXU21suma/HXs86meeU6G/klDnvZyni934etA9uPOj/lS/e29Q53vfQ9xVhj3O9/+p5i8ddeZ5NsOMbH7XnoYMhrzc1ir2du3vNv+6CdXz43r/f7rZmmG3X7sNeYm3HmWX3GF+dm7P/i3Cz2X52b+QfDXjk3wweLDAaD6UfvHxZ9PXMz5WvPzet93IwH2486v+5LVy2899Fnvjg3Y87Ff5qbRf+rczPNS4+b6V+4bdqhg7HHHmyz1lZbbTHrqL9fvDjbqL9few0u/HrmcpL/nrl81/BXm8t/PVQnuOX8w//DGvy3ffqL97/wf3UuBy/N5WDDMRdLvVnr53/u8neXv7v83eXvLn93+Yt7leP/L73+/4GTzLvf6B9ujHX+1FPs8UaP9w3uLX38f7TvK47/7zHF1OcPHbx022senx21zZvy+Oxco07GP/LF7cY8PsgDffXjs4fOM9du/0vHZ/9/9eJafR0/h2v/7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3Ksf/Z3nx9wBun3WZh0YfCB3r7l1XWeaNHu8b3Fv6+P9o31cc/19mlV3vHjp46bbXPP4/ahvH8f+bnl50nzfz8f8X12rH/+s/lL879B/zNUDqLVvr313+7l7Lf9z/xXHUG1Pr313+7vJ3l7+7/N3l7y5/d/mLe5Xj//O/+HsAxxxz0HYv/j7ApZPudfIbPd43uLfq8f/e/99b+393+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uBeO/4/6N8Iv/5fCS/e4wOD4///tRv/+x2AM/2Xyxyz+y+ZPDR0MHP7L5Y9Z1v/y+WMW/xXyxyz+K+aPWfw/nz9m8V8pf8ziv3L+mMX/C/ljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi/8X88cs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/y/lj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y/nj1n8t8gfs/hvmT9m8d8qf8zi/5X8MYv/1vljFv+v5o9Z/LfJH7P4b5s/ZvHfLn/M4v+1/DGL/9fzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P4fyN/zOL/zfwxi/+e+WMW/73yxyz+e+ePWfz3yR+z+H8rf8zi/+38MYv/d/LHLP775o9Z/PfLH7P4fzd/zOL/vfwxi//++WMW/+/nj1n8D8gfs/gfmD9m8T8of8zi/4P8MYv/D/PHLP4/yh+z+B+cP2bxPyR/zOL/4/wxi/9P8scs/ofmj1n8D8sfs/gfnj9m8f9p/pjF/2f5Yxb/I/LHLP5H5o9Z/H+eP2bxPyp/zOL/i/wxi//R+WMW/1/mj1n8f5U/ZvE/Jn/M4v/r/DGL/2/yxyz+x+aPWfyPyx+z+B+fP2bx/23+mMX/hPwxi/+J+WMW/5Pyxyz+v8sfs/j/Pn/M4v+H/DGL/8n5Yxb/U/LHLP5/zB+z+J+aP2bxPy1/zOL/p/wxi//p+WMW/z/nj1n8/5I/ZvH/a/6Yxf+M/DGL/9/yxyz+Z+aPWfz/nj9m8T8rf8zif3b+mMX/nPwxi/8/8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfz/mT9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjEf8ggf8ziPyR/zOI/NH/M4j8sf8ziPzx/zOI/Vv6YxX/s/DGL/zj5Yxb/EfljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfzflj9m8X97/pjFf/L8MYv/O/LHLP5T5I9Z/KfMH7P4vzN/zOL/rvwxi/+788cs/u/JH7P4vzd/zOI/Vf6YxX/q/DGL/zT5Yxb/9+WPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL//vzxyz+M+WPWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8f9Y/pjFf878MYv/XPljFv+588cs/vPkj1n8P54/ZvGfN3/M4v+J/DGL/yfzxyz+8+WPWfw/lT9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf/T+WMW/8/kj1n8l8wfs/h/Nn/M4r9U/pjF/3P5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/5/PHLP4r5Y9Z/FfOH7P4fyF/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/Yv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v+l/DGL/0b5Yxb/jfPHLP6b6PzHfV1bWfw31fm/viz+m+WPWfw3zx+z+H85f8ziv0X+mMV/y/wxi/9W+WMW/6/kj1n8t84fs/h/NX/M4r9N/pjFf9v8MYv/dvljFv+v5Y9Z/L+eP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjF/xv5Yxb/b+aPWfz3zB+z+O+VP2bx3zt/zOK/T/6Yxf9b+WMW/2/nj1n8v5M/ZvHfN3/M4r9f/pjF/7v5Yxb/7+WPWfz3zx+z+H8/f8zif0D+mMX/wPwxi/9B+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/g/DGL/yH5Yxb/H+ePWfx/kj9m8T80f8zif1j+mMX/8Pwxi/9P88cs/j/LH7P4H5E/ZvE/Mn/M4v/zV/rf9r8+rjdpFv+jWv+Yxf8X+WMW/6Pzxyz+v8wfs/j/Kn/M4n9M/pjF/9f5Yxb/3+SPWfyPzR+z+B+XP2bxPz5/zOL/2/wxi/8J+WMW/xPzxyz+J+WPWfx/lz9m8f99/pjF/w/5Yxb/k/PHLP6n5I9Z/P+YP2bxPzV/zOJ/Wv6Yxf9P+WMW/9Pzxyz+f84fs/j/JX/M4v/X/DGL/xn5Yxb/v+WPWfzPzB+z+P89f8zif1b+mMX/7Pwxi/85+WMS/xfK/9+T+A85N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zi/8/8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86/zEaPvrU4X9N/phl/V+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjE/4Wz+f97Fv8h+WMW/6H5Yxb/YfljFv/h+WMW/7Hyxyz+Y+ePWfzHyR+z+I/IH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8zi/7b8MYv/2/PHLP6T549Z/N+RP2bxnyJ/zOI/Zf6Yxf+d+WMW/3flj1n8350/ZvF/T/6Yxf+9+WMW/6nyxyz+U+ePWfynyR+z+L8vf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfzfnz9m8Z8pf8zi/4H8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4z549Z/GfJHxtyxgFjDQaDt7z/rPljlvU/W/6YxX/2/DGL/xz5Yxb/j+WPWfznzB+z+M+VP2bxnzt/zOI/T/6Yxf/j+WMW/3nzxyz+n8gfs/h/Mn/M4j9f/pjF/1P5Yxb/+fPHLP4LDMZ9o0b0ps7iv2DrH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8P50/ZvH/TP6YxX/J/DGL/2fzxyz+S+WPWfw/lz9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+H8+f8ziv1L+mMV/5fwxi/8X8scs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/y/mj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+X8ofs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+X84fs/hvkT9m8d8yf8ziv1X+mMX/K/ljFv+t88cs/l/NH7P4b5M/ZvHfNn/M4r9d/pjF/2v5Yxb/r+ePWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvH/Rv6Yxf+b+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx/1b+mMX/2/ljFv/v5I9Z/PfNH7P475c/ZvH/bv6Yxf97+WMW//3zxyz+388fs/gfkD9m8T8wf8zif1D+mMX/B/ljFv8f5o9Z/H+UP2bxPzh/zOJ/SP6Yxf/H+WMW/5/kj1n8D80fs/gflj9m8T88f8zi/9P8MYv/z/LHLP5H5I9Z/I/MH7P4/zx/zOJ/VP6Yxf8X+WMW/6Pzxyz+v8wfs/j/Kn/M4n9M/pjF/9f5Yxb/3+SPWfyPzR+z+B+XP2bxPz5/zOL/2/wxi/8J+WMW/xPzxyz+J+WPWfx/lz9m8f99/pjF/w/5Yxb/k/PHLP6n5I9Z/P+YP2bxPzV/zOJ/Wv6Yxf9P+WMW/9Pzxyz+f84fs/j/JX/M4v/X/DGL/xn5Yxb/v+WPWfzPzB+z+P89f8zif1b+mMX/7Pwxi/85+WMW/3/kj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+P8zf8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6jGv7Kixb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88ck/sMG+WMW/yH5Yxb/ofljFv9h+WMW/+H5Yxb/sfLHLP5j549Z/MfJH7P4j8gfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOL/tvwxi//b88cs/pPnj1n835E/ZvGfIn/M4j9l/pjF/535Yxb/d+WPWfzfnT9m8X9P/pjF/735Yxb/qfLHLP5T549Z/KfJH7P4vy9/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/N+fP2bxnyl/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi//HXtt/nP/xcb1Js/jP2frHLP5z5Y9Z/OfOH7P4z5M/ZvH/eP6YxX/e/DGL/yfyxyz+n8wfs/jPlz9m8f9U/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/0/nj1n8P5M/ZvFfMn/M4v/Z/DGL/1L5Yxb/z+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP6fzx+z+K+UP2bxXzl/zOL/hfwxi/8q+WMW/1Xzxyz+q+n9+SUOLf6r6/05i/8a+WMW/zXzxyz+a+WPWfy/mD9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+H8pf8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+H85f8ziv0X+mMV/y/wxi/9W+WMW/6/kj1n8t84fs/h/NX/M4r9N/pjFf9v8MYv/dvljFv+v5Y9Z/L+eP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjF/xv5Yxb/b+aPWfz3zB+z+O+VP2bx3zt/zOK/T/6Yxf9b+WMW/2/nj1n8v5M/ZvHfN3/M4r9f/pjF/7v5Yxb/7+WPWfz3zx+z+H8/f8zif0D+mMX/wPwxi/9B+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/g/DGL/yH5Yxb/H+ePWfx/kj9m8T80f8zif1j+mMX/8Pwxi/9P88cs/j/LH7P4H5E/ZvE/Mn/M4v/z/DGL/1H5Yxb/X+SPWfyPzh+z+P8yf8zi/6v8MYv/MfljFv9f54+95f1HvHB22G/yx97y/qMadmz+mMX/uPwxi//x+WMW/9/mj1n8T8gfs/ifmD9m8T8pf8zi/7v8MYv/7/PHLP5/yB+z+J+cP2bxPyV/zOL/x/wxi/+p+WMW/9Pyxyz+f8ofs/ifnj9m8f9z/pjF/y/5Yxb/v+aPWfzPyB+z+P8tf8zif2b+mMX/7/ljFv+z8scs/mfnj1n8z8kfs/j/I3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/n/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549J/IcP8scs/kPyxyz+Q/PHLP7D8scs/sPzxyz+Y+WPWfzHzh+z+I+TP2bxH5E/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMX/bfljFv+3549Z/CfPH7P4vyN/zOI/Rf6YxX/K/DGL/zvzxyz+78ofs/i/O3/M4v+e/DGL/3vzxyz+U+WPWfynzh+z+E+TP2bxf1/+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+L8/f8ziP1P+mMX/A/ljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv+P5Y9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjF/+P5Yxb/efPHLP6fyB+z+H8yf8ziP1/+mMX/U/ljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfw/nT9m8f/Ma/ibHxcW/yXlzq+Wxf+z+WMW/6Xyxyz+n8sfs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfw/nz9m8V8pf8ziv3L+mMX/C/ljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi/8X88cs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/y/lj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y/nj1n8t8gfs/hvmT9m8d8qf8zi/5X8MYv/1vljFv+v5o9Z/LfJH7P4b5s/ZvHfLn/M4v+1/DGL/9fzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P4fyN/zOL/zfwxi/+e+WMW/73yxyz+e+ePWfz3yR+z+H8rf8zi/+38MYv/d/LHLP775o9Z/PfLH7P4fzd/zOL/vfwxi//++WMW/+/nj1n8D8gfs/gfmD9m8T8of8zi/4P8MYv/D/PHLP4/yh+z+B+cP2bxPyR/zOL/4/wxi/9P8scs/ofmj1n8D8sfs/gfnj9m8f9p/pjF/2f5Yxb/I/LHLP5H5o9Z/H+eP2bxPyp/zOL/i/wxi//R+WMW/1/mj1n8f5U/ZvE/Jn/M4v/r/DGL/2/yxyz+x+aPWfyPyx+z+B+fP2bx/23+mMX/hPwxi/+J+WMW/5Pyxyz+v8sfs/j/Pn/M4v+H/DGL/8n5Yxb/U/LHLP5/zB+z+J+aP2bxPy1/zOL/p/wxi//p+WMW/z/nj1n8/5I/ZvH/a/6Yxf+M/DGL/9/yxyz+Z+aPWfz/nj9m8T8rf8zif3b+mMX/nPwxi/8/8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0sGg8Hzzz+/4xs1rDdrFv9LW/+Yxf+f+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj0n8xxrkj1n8h+SPWfyH5o9Z/Iflj1n8h+ePWfzHyh+z+I+dP2bxHyd/zOI/In/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//b8scs/m/PH7P4T54/ZvF/R/6YxX+K/DGL/5T5Yxb/d+aPWfzflT9m8X93/pjF/z35Yxb/9+aPWfynyh+z+E+dP2bxnyZ/zOL/vvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bxf3/+mMV/pvwxi/8H8scs/h/MH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/h/LH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/x/PHLP7z5o9Z/D+RP2bx/2T+mMV/vvwxi/+n8scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H86f8zi/5n8MYv/kvljFv/P5o9Z/JfKH7P4fy5/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvH/fP6YxX+l/DGL/8r5Yxb/L+SPWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5fzB+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/L+UP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/L+cP2bx3yJ/zOK/Zf6YxX+r/DGL/1fyxyz+W+ePWfy/mj9m8d8mf8ziv23+mMV/u/wxi//X8scs/l/PH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8d8sfs/jvnj9m8d8jf8zi/438MYv/N/PHLP575o9Z/PfKH7P4750/ZvHfJ3/M4v+t/DGL/7fzxyz+38kfs/jvmz9m8d8vf8zi/938MYv/9/LHLP77549Z/L+fP2bxPyB/zOJ/YP6Yxf+g/DGL/w/yxyz+P8wfs/j/KH/M4n9w/pjF/5D8MYv/j/PHLP4/yR+z+B+aP2bxPyx/zOJ/eP6Yxf+n+WMW/5/lj1n8j8gfs/gfmT9m8f95/pjF/6j8MYv/L/LHLP5H549Z/H+ZP2bx/1X+mMX/mPwxi/+v88cs/r/JH7P4H5s/ZvE/Ln/M4n98/pjF/7f5Yxb/E/LHLP4n5o9Z/E/KH7P4/y5/zOL/+/wxi/8f8scs/ifnj1n8T8kfs/j/MX/M4n9q/pjF/7T8MYv/n/LHLP6n549Z/P+cP2bx/0v+mMX/r/ljFv8z8scs/n/LH7P4n5k/ZvH/e/6Yxf+s/DGL/9n5Yxb/c/LHLP7/yB+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/Z/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMS/7EH+WMW/yH5Yxb/ofljFv9h+WMW/+H5Yxb/sfLHLP5j549Z/MfJH7P4j8gfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOL/tvwxi//b88cs/pPnj1n835E/ZvGfIn/M4j9l/pjF/52vw3/4/+S43qRZ/N/V+scs/u/OH7P4vyd/zOL/3vwxi/9U+WMW/6nzxyz+0+SPWfzflz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+788fs/jPlD9m8f9A/pjF/4P5Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/2P5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvH/eP6YxX/e/DGL/yfyxyz+n8wfs/jPlz9m8f9U/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/0/nj1n8P5M/ZvFfMn/M4v/Z/DGL/1L5Yxb/z+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP6fzx+z+K+UP2bxXzl/zOL/hfwxi/8q+WNvUf8hY1iPvWr+2FvU/4Vevv5Xyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/xfzxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/L+WPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/L+ePWfy3yB+z+G+ZP2bx3yp/zOL/lfwxi//W+WMW/6/mj1n8t8kfs/hvmz9m8d8uf8zi/7X8MYv/1/PHLP7b549Z/HfIH7P47/gf/Hf+nx7XmzSL/06tf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+H8jf8zi/838MYv/nvljFv+98scs/nvnj1n898kfs/h/K3/M4v/t/DGL/3fyxyz+++aPWfz3yx+z+H83f8zi/738MYv//vljFv/v549Z/A/IH7P4H5g/ZvE/KH/M4v+D/DGL/w/zxyz+P8ofs/gfnD9m8T8kf8zi/+P8MYv/T/LHLP6H5o9Z/A/LH7P4H54/ZvH/af6Yxf9n+WMW/yPyxyz+R+aPWfx/nj9m8T8qf8zi/4v8MYv/0fljFv9f5o9Z/H+VP2bxPyZ/zOL/6/wxi/9v8scs/sfmj1n8j8sfs/gfnz9m8f9t/pjF/4T8MYv/ifljFv+T8scs/r/LH7P4/97nv+Pr2cji/wef/+vK4n9y/pjF/5T8MYv/H53+9/+nDSz+pzr9/2MW/9Pyxyz+f8ofs/ifnj9m8f9z/pjF/y/5Yxb/v+aPWfzPyB+z+P8tf8zif2b+mMX/7/ljFv+z8scs/mfnj1n8z8kfs/j/I3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/n/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+2Av+g8Fb3v+R/AfjwnWW9f9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofGzL2YDAQ+D+dP2ZZ/8/kj1n8n80fs/g/lz9m8X8+f0ziP84gf8ziPyR/zOI/NH/M4j8sf8ziPzx/zOI/Vv6YxX/s/DGL/zj5Yxb/EfljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzH92IV1yy+E+WP2bxf1v+mMX/7fljFv/J88cs/u/IH7P4T5E/ZvGfMn/M4v/O/DGL/7vyxyz+784fs/i/J3/M4v/e/DGL/1T5Yxb/qfPHLP7T5I9Z/N+XP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP7vzx+z+M+UP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMX/Y/ljFv8588cs/nPlj1n8584fs/jPkz9m8f94/pjFf978MYv/J/LHLP6fzB+z+M+XP2bx/1T+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/T+ePWfw/kz9m8V8yf8zi/9n8MYv/UvljFv/P5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/p/PH7P4r5Q/ZvFfOX/M4v+F/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjF/4v5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/l/LHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/l/PHLP5b5I9Z/LfMH7P4b5U/ZvH/Sv6YxX/r/DGL/1fzxyz+2+SPWfy3zR+z+G+XP2bx/1r+mMX/6/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93Rv0eExX+PtDGL/zfyxyz+38wfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+38scs/t/OH7P4fyd/zOK/r9F/nP+8icV/P6P/68ji/938MYv/9/LHLP77549Z/L+fP2bxPyB/zOJ/YP6Yxf+g/DGL/w/yxyz+P8wfs/j/KH/M4n9w/pjF/5D8MYv/j/PHLP4/yR+z+B+aP2bxPyx/zOJ/eP6Yxf+n+WMW/5/lj1n8j8gfs/gfmT9m8f95/pjF/6j8MYv/L/LHLP5H549Z/H+ZP2bx/1X+mMX/mPwxi/+v88cs/r/JH7P4H5s/ZvE/Ln/M4n98/pjF/7f5Yxb/E/LHLP4n5o9Z/E/KH7P4/y5/zOL/+/wxi/8f8scs/ifnj1n8T8kfs/j/MX/M4n9q/pjF/7T8MYv/n/LHLP6n549Z/P+cP2bx/0v+mMX/r/ljFv8z8scs/n/LH7P4n5k/ZvH/e/6Yxf+s/DGL/9n5Yxb/c/LHLP7/yB+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/Z/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMS/xGD/DGL/5D8MYv/0Pwxi/+w/DGL//D8MYv/WPljFv+x88cs/uPkj1n8R+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvF/W/6Yxf/t+WMW/8nzxyz+78gfs/hPkT9m8Z8yf8zi/878MYv/u/LHLP7vzh+z+L8nf8zi/978MYv/VPljFv+p88cs/tPkj1n835c/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/u/PH7P4z5Q/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6Yxf9j+WMW/znzxyz+c+WPWfznzh+z+M+TP2bx/3j+mMV/3vwxi/8n8scs/p/MH7P4z5c/ZvH/VP6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv9Pv5b/5M89//z/wtDejFn8P9P6xyz+S+aPWfw/mz9m8V8qf8zi/7n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz822n/YW91/hfwxy/pfMX/M4v/5/DGL/0r5Yxb/lfPHLP5fyB+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/L+YP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4fyl/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4fzl/zOK/Rf6YxX/L/DGL/1b5Yxb/r+SPWfy3zh+z+H81f8ziv03+mMV/2/wxi/92+WMW/6/lj1n8v54/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMX/G/ljFv9v5o9Z/PfMH7P475U/ZvHfO3/M4r9P/pjF/1v5Yxb/b+ePWfy/kz9m8d83f8ziv1/+mMX/u/ljFv/v5Y9Z/PfPH7P4fz9/zOJ/QP6Yxf/A/DGL/0H5Yxb/H+SPWfx/mD9m8f9R/pjF/+D8MYv/IfljFv8f549Z/H+SP2bxPzR/zOJ/WP6Yxf/w/DGL/0/zxyz+P8sfs/gfkT9m8T8yf8zi//P8MYv/UfljFv9f5I9Z/I/OH7P4/zJ/zOL/q/wxi/8x+WMW/1/nj1n8f5M/ZvE/Nn/M4n9c/pjF//j8MYv/b/PHLP4n5I9Z/E/MH7P4n5Q/ZvH/Xf6Yxf/3+WMW/z/kj1n8T84fs/ifkj9m8f9j/pjF/9T8MYv/afljFv8/5Y9Z/E/PH7P4/zl/zOL/l/wxi/9f88cs/mfkj1n8/5Y/ZvE/M3/M4v/3/DGL/1n5Yxb/s/PHLP7n5I9Z/P+RP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4v/P/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzH9UI1550eJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+T+I87yB+z+A/JH7P4D80fs/gPyx+z+A/PH7P4j5U/ZvEfO3/M4j9O/pjFf0T+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/t+WPWfzfnj9m8Z88f8zi/478MYv/FPljFv8p88cs/u/MH7P4vyt/zOL/7vwxi/978scs/u/NH7P4T5U/ZvGfOn/M4j9N/pjF/335Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v/+/DGL/0z5Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfw/mj9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzx17wn3owGLzF/efIH7Os/4/lj1n858wfs/jPlT9m8Z87f8ziP0/+mMX/4/ljFv9588cs/p/IH7P4fzJ/zOI/X/6Yxf9T+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/D+dP2bx/0z+mMV/yfwxi/9n88cs/kvlj1n8P5c/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/h/Pn/M4r9S/pjFf+X8MYv/F/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv8v5o9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/l/KH7P4b5Q/ZvHfOH/M4r9J/pjFf+z8MYv/ZvljFv/N88cs/l/OH7P4b5E/ZvHfMn/M4r9V/pjF/yv5Yxb/rfPHLP5fzR+z+G+TP2bx3zZ/zOK/Xf6Yxf9r+WMW/6/nj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx/0b+mMX/m/ljFv8988eGnHHAY6PPvqX998ofs6z/vfPHLP775I9Z/L+VP2bx/3b+mMX/O/ljFv9988cs/vvlj1n8v5s/ZvH/Xv6YxX///DGL//fzxyz+B+SPWfwPzB+z+B+UP2bx/0H+mMX/h/ljFv8f5Y9Z/A/OH7P4H5I/ZvH/cf6Yxf8n+WMW/0Pzxyz+h+WPWfwPzx+z+P80f8zi/7P8MYv/EfljFv8j88cs/j/PH7P4H5U/ZvH/Rf6Yxf/o/DGL/y/zxyz+v8ofs/gfkz9m8f91/pjF/zf5Yxb/Y/PHLP7H5Y9Z/I/PH7P4/zZ/zOJ/Qv6Yxf/E/DGL/0n5Yxb/3+WPWfx/nz9m8f9D/pjF/+T8MYv/KfljFv8/5o9Z/E/NH7P4n5Y/ZvH/U/6Yxf/0/DGL/5/zxyz+f8kfs/j/NX/M4n9G/pjF/2/5Yxb/M/PHLP5/zx+z+J+VP2bxPzt/zOJ/Tv6Yxf8f+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP7/zB+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f0ziP94gf8ziPyR/zOI/NH/M4j8sf8ziPzx/zOI/Vv6YxX/s/DGL/zj5Yxb/EfljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfzflj9m8X97/pjFf/L8MYv/O/LHLP5T5I9Z/KfMH7P4vzN/zOL/rvwxi/+788cs/u/JH7P4vzd/zOI/Vf6YxX/q/DGL/zT5Yxb/9+WPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL//vzxyz+M+WPWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8f9Y/pjFf878MYv/XPljFv+588cs/vPkj1n8P54/ZvGfN3/M4v+J/DGL/yfzxyz+8+WPWfw/lT9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf/T+WMW/8/kj1n8l8wfs/h/Nn/M4r9U/pjF/3P5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/5/PHLP4r5Y9Z/FfOH7P4fyF/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/Yv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v+l/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v/l/DGL/xb5Yxb/LfPHLP5b5Y9Z/L+SP2bx3zp/zOL/1fwxi/82+WMW/23zxyz+2+WPWfy/lj9m8f96/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8ziv1v+mMV/9/wxi/8e+WMW/2/kj1n8v5k/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9v5Y9Z/L+dP2bx/07+mMV/3/wxi/9++WMW/+/mj1n8v5c/ZvHfP3/M4v/9/DGL/wH5Yxb/A/PHLP4H5Y9Z/H+QP2bx/2H+mMX/R/ljFv+D88cs/ofkj1n8f5w/ZvH/Sf6Yxf/Q/DGL/2H5Yxb/w/PHLP4/zR+z+P8sf8zif0T+mMX/yPwxi//P88cs/kflj1n8f5E/ZvE/On/M4v/L/DGL/6/yxyz+x+SPWfzHyh+z+P8mf8zif2z+mMX/uPwxi//x+WMW/9/mj1n8T8gfs/ifmD9m8T8pf8zi/7v8MYv/7/PHLP5/yB+z+J+cP2bxPyV/zOL/x/wxi/+p+WMW/9Pyxyz+f8ofs/ifnj9m8f9z/pjF/y/5Yxb/v+aPWfzPyB+z+P8tf8zif2b+mMX/7/ljFv+z8scs/mfnj1n8z8kfs/j/I3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/n/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/AeDYf9+lcX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/LG3uv8ao86Od1/+2Fvdf3Tj3Z8/ZvF/IH/M4v9g/thb2X+cf1073kP5Y29l/5ev/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn9M4j/+IH/M4j8kf8ziPzR/zOI/LH/M4j88f8ziP1b+mMV/7Pwxi/84+WMW/xH5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835Y/ZvF/e/6YxX/y/DGL/zvyxyz+U+SPWfynzB+z+L8zf8zi/678MYv/u/PHLP7vyR+z+L83f8ziP1X+mMV/6vwxi/80+WMW//flj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//788cs/jPlj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvH/WP6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/D+eP2bxnzd/zOL/ifwxi/8n88cs/vPlj1n8P5U/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/0/ljFv/P5I9Z/JfMH7P4fzZ/zOK/VP6Yxf9z+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/+fzxyz+K+WPWfxXzh+z+H8hf8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bx/2L+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOL/pfwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/5fwxi/8W+WMW/y3zxyz+W+WPWfy/kj9m8d86f8zi/9X8MYv/NvljFv9t88feuv6XPP9y/+3yx966/q9c/1/LH7P4fz1/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4r97/pjFf4/8MYv/N/LHLP7fzB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/7fyxyz+384fs/h/J3/M4r9v/pjFf7/8MYv/d/PHLP7fyx+z+O+fP2bx/37+mMX/gPwxi/+B+WMW/4Pyxyz+P8gfs/j/MH/M4v+j/DGL/8H5Yxb/Q/LHLP4/zh+z+P8kf8zif2j+mMX/sPwxi//h+WMW/5/mj1n8f5Y/ZvE/In/M4n9k/pjF/+f5Yxb/o/LHLP6/yB+z+B+dP2bx/2X+mMX/V/ljFv9j8scs/r/OH7P4/yZ/zOJ/bP6Yxf+4/DGL//H5Yxb/3+aPWfxPyB+z+J+YP2bxPyl/zOL/u/wxi//v88cs/n/IH7P4n5w/ZvE/JX/sRf/BiMHgrez/x/wxy/o/NX/M4n9a/pjF/0/5Yxb/0/PHLP5/zh+z+P8lf8zi/9f8MYv/GfljFv+/5Y9Z/M/MH7P4/z1/zOJ/Vv6Yxf/s/DGL/zn5Yxb/f+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4//Pf/Xs4iPwvCxyz+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljo/wHg8FOb23/W/LHLOv/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyT+Ewzyxyz+Q/LHLP5D88cs/sPyxyz+w/PHLP5jvYr/5VcMW+N/a2hvxiz+Y7f+MYv/OPljFv8R+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzD/f2snkf9E+WMW/4nzxyz+k+SPWfwnzR+z+E+WP2bxf1v+mMX/7fljFv/J88cs/u/IH7P4T5E/ZvGfMn/M4v/O/DGL/7vyxyz+784fs/i/J3/M4v/e/DGL/1T5Yxb/qfPHLP7T5I9Z/N+XP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP7vzx+z+M+UP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMX/Y/ljFv8588cs/nPlj1n8584fs/jPkz9m8f94/pjFf978MYv/J/LHLP6fzB+z+M+XP/bW9B8l/XL/T+WPvTX9R/Vy//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/D+dP2bx/0z+mMV/yfwxi/9n88cs/kvlj1n8P5c/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/h/Pn/M4r9S/pjFf+X8MYv/F/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv8v5o9Z/NfOH7P4r2P0fx1fsMV/XaP/68jiv17+mMV//fwxi/8G+WMW/w3zxyz+X8ofs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+X84fs/hvkT9m8d8yf8ziv1X+mMX/K/ljFv+t88cs/l/NH7P4b5M/ZvHfNn/M4r9d/pjF/2v5Yxb/r+ePWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvH/Rv6Yxf+b+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx/1b+mMX/2/ljFv/v5I9Z/PfNH7P475c/ZvH/bv6Yxf97+WMW//3zxyz+388fs/gfkD9m8T8wf8zif1D+mMX/B/ljFv8f5o9Z/H+UP2bxPzh/zOJ/SP6Yxf/H+WMW/5/kj1n8D80fs/gflj9m8T88f8zi/9P8MYv/z/LHLP5H5I9Z/I/MH7P4/zx/zOJ/VP6Yxf8X+WMW/6Pzxyz+v8wfs/j/Kn/M4n9M/pjF/9f5Yxb/3+SPWfyPzR+z+B+XP2bxPz5/zOL/2/wxi/8J+WMW/xPzxyz+J+WPWfx/lz9m8f99/pjF/w/5Yxb/k/PHLP6n5I9Z/P+YP2bxPzV/zOJ/Wv6Yxf9P+WMW/9Pzxyz+f84fs/j/JX9sDP9x3+jx/D/3Kv5/zR+zrP8z8scs/n/LH7P4n5k/ZvH/e/6Yxf+s/DGL/9n5Yxb/c/LHLP7/yB+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/Z/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMS/wkH+WMW/yH5Yxb/ofljFv9h+WMW/+H5Yxb/sfLHLP5j549Z/MfJH7P4j8gfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOL/tvwxi//b88cs/pPnj1n835E/ZvGfIn/M4j9l/pjF/535Yxb/d+WPWfzfnT9m8X9P/pjF/735Yxb/qfLHLP5T549Z/KfJH7P4vy9/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/N+fP2bxnyl/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi//H8scs/nPmj1n858ofs/jPnT9m8Z8nf8zi//H8MYv/vPljFv9P5I9Z/D+ZP2bxny9/zOL/qfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP6fzh+z+H8mf8ziv2T+mMX/s/ljFv+l8scs/p/LH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8P58/ZvFfKX/M4r9y/pjF/wv5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/F/PHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv8v5Y9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8v549Z/LfIH7P4b5k/ZvHfKn/M4v+V/DGL/9b5Yxb/r+aPWfy3yR+z+G+bP2bx387qP+K1b7b4f83q/x+y+H89f8ziv33+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/zfyxyz+38wfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+38scs/t/OH7P4fyd/zOK/b/6YxX+//LG3qv+IMfy/mz/2VvUfjOH/vfwxi//++WMW/+/nj1n8D8gfs/gfmD9m8T8of8zi/4P8MYv/D/PHLP4/yh+z+B+cP2bxPyR/zOL/4/wxi/9P8scs/ofmj1n8D8sfs/gfnj9m8f9p/pjF/2f5Yxb/I/LHLP5H5o9Z/H+eP2bxPyp/zOL/i/wxi//R+WMW/1/mj1n8f5U/ZvE/Jn/M4v/r/DGL/2/yxyz+x+aPWfyPyx+z+B+fP2bx/23+mMX/hPwxi/+J+WMW/5Pyxyz+v8sfs/j/Pn/M4v+H/DGL/8n5Yxb/U/LHLP5/VPqP+I9bWPxPVfr/5yz+p+WPWfz/lD9m8T89f8zi/+f8MYv/X/LHLP5/zR+z+J+RP2bx/1v+mMX/zPwxi//f88cs/mflj1n8z84fs/ifkz9m8f9H/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/8/88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/i80zRiXLf53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6YxH+iQf6YxX9I/pjFf2j+mMV/WP6YxX94/pjFf6z8MYv/2PljFv9x8scs/iPyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vy1/zOL/9vwxi//k+WMW/3fkj1n8p8gfs/hPmT9m8X9n/pjF/135Yxb/d+ePWfzfkz9m8X9v/pjFf6r8MYv/1PljFv9p8scs/u/LH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv/3549Z/Gd6pf/zw/7XB/bmzOL/gdY/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvH/WP6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/D+eP2bxnzd/zOL/iRf9exC8Iov/J6PHLP7z5Y9Z/D+VP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/9P5Yxb/z+SPWfyXzB+z+H82f8ziv1T+mMX/c/ljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//n88cs/ivlj1n8V84fs/h/IX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8f9i/pjFf+38MYv/OvljFv9188cs/uvljw0544CVJx519i3tv37+mGX9b5A/ZvHfMH/M4v+l/DGL/0b5Yxb/jfPHLP6b5I9Z/DfV+++I11r8N9P7cxb/zfPHLP5fzh+z+G+RP2bx3zJ/zOK/Vf6Yxf8r+WMW/63zxyz+X80fs/hvkz9m8d82f8ziv13+mMX/a/ljFv+v549Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/jvkT9m8f9G/pjF/5v5Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvH/Vv6Yxf/b+WMW/+/kj1n8980fs/jvlz9m8f9u/pjF/3v5Yxb//fPHLP7fzx+z+B+QP2bxPzB/zOJ/UP6Yxf8H+WMW/x/mj1n8f5Q/ZvE/OH/M4n9I/pjF/8f5Yxb/n+SPWfwPzR+z+B+WP2bxPzx/zOL/0/wxi//P8scs/kfkj1n8j8wfs/j/PH/M4n9U/pjF/xf5Yxb/o/PHLP6/zB+z+P8qf8zif0z+mMX/1/ljFv/f5I9Z/I/NH7P4H5c/ZvE/Pn/M4v/b/DGL/wn5Yxb/E/PHLP4n5Y9Z/H+XP2bx/33+mMX/D/ljFv+T88cs/qfkj1n8/6j2H+dVb7H4n6r2f/Us/qflj1n8/5Q/ZvE/PX/M4v/n/DGL/1/yxyz+f80fs/ifkT9m8f9b/pjF/8z8MYv/3/PHLP5n5Y9Z/M/OH7P4n5M/ZvH/R/6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYn/kMFgp/whif9El7X+MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5YxL/iQf5Yxb/IfljFv+h+WMW/2H5Yxb/4fljFv+x8scs/mPnj1n8x8kfs/iPyB+z+I+bP2bxHy9/7P9j5/7Dta7rO47f/CaV9GOburTh0JhrMxIZjVqIiuLxxykTzfyNegQSRH5Igqm40Uodmy51s2RTS8ecrVricHP9WtGwrNkasbXKKa6FMeZgoTlj14FziHP29lydL/t+bb4fjz/g3PfxfYc8r5f3zcV1laX/nvqHsvTfS/9Qlv4j9A9l6f9K/UNZ+u+tfyhL/330D2XpX/QPZem/r/6hLP1fpX8oS/+f0T+Upf/P6h/K0n8//UNZ+u+vfyhL/wP0D2Xp/3P6h7L0f7X+oSz9D9Q/lKX/QfqHsvR/jf6hLP1/Xv9Qlv4j9Q9l6X+w/qEs/X9B/1CW/qP0D2Xpf4j+oSz9D9U/lKX/a/UPZek/Wv9Qlv6/qH8oS//D9A9l6f9L+oey9H+d/qEs/X9Z/1CW/r+ifyhL/8P1D2Xp/3r9Q1n6j9E/lKX/G/QPZel/hP6hLP3H6h/K0v9I/UNZ+o/TP5Sl/6/qH8rSf7z+oSz936h/KEv/X9M/lKX/BP1DWfq/Sf9Qlv5v1j+Upf+v6x/K0v8t+oey9J+ofyhL/6P0D2XpP0n/UJb+R+sfytL/GP1DWfofq38oS//J+oey9D9O/1CW/sfrH8rSf4r+oSz9T9A/lKV/m/6hLP1P1D+Upf9J+oey9D9Z/1CW/qfoH8rSv13/UJb+b9U/lKX/2/QPZel/qv6hLP3frn8oS//T9A9l6T9V/1CW/qfrH8rS/wz9Q1n6v0P/UJb+Z+ofytL/nfqHsvQ/S/9Qlv5n6x/K0v8c/UNZ+p+rfyhL//P0D2Xpf77+oSz9L9A/lKX/NP1DWfpfqH8oS/+L9A9l6X+x/qEs/Tv0D2Xpf4n+oSz9p+sfytJ/hv6hLP1n6h/K0v9d+oey9L9U/1CW/rP0D2XpP1v/UJb+l+kfytJ/jv6hLP0v1z+Upf9c/UNZ+s/TP5Sl/3z9Q1n6L9A/lKX/FfqHsvRfqH8oS/936x/K0v9K/UNZ+i/SP5Sl/2L9Q1n6X6V/KEv/9+gfytL/av1DWfpfo38oS/9r9Q9l6b9E/1CW/tfpH8rS/zf0D2Xp/5v6h7L0X6p/KEv/9+ofytL/t/QPZen/Pv1DWfq/X/9Qlv7X6x/K0v8G/UNZ+t+ofyhL/9/WP5Sl/zL9Q1n6/47+oSz9f1f/UJb+N+kfytL/Zv1DWfr/nv6hLP0/oH8oS/9b9A9l6X+r/qEs/W/TP5Sl/+/rH8rS/w/0D2Xpf7v+oSz9P6h/KEv/D+kfytL/Dv1DWfov1z+Upf8f6h/K0v+P9A9l6X+n/qEs/e/SP5Sl/936h7L0/7D+oSz9P6J/KEv/e3r3H9nwr+unVJb+99p/KEv/P9Y/lKX/Cv1DWfr/if6hLP3v0z+Upf+f6h/K0v9+/UNZ+n9U/1CW/n+mfyhL/4/pH8rS/+P6h7L0/4T+oSz9/1z/UJb+n9Q/lKX/A/qHsvRfqX8oS/8H9Q9l6f8X+oey9F+lfyhL/4f0D2Xp/5f6h7L0/yv9Q1n6P6x/KEv/v9Y/lKX/p/QPZen/af1DWfp/Rv9Qlv6f1T+Upf/n9A9l6f83+oey9P+8/qEs/b+gfyhL/9X6h7L0/6L+oSz9/1b/UJb+a/QPZen/iP6hLP2/pH8oS/8v6x/K0v9R/UNZ+n9F/1CW/l/VP5Sl/9/pH8rS/zH9Q1n6f03/UJb+f69/KEv/r+sfytL/H/QPZem/Vv9Qlv7f0D+Upf86/UNZ+v+j/qEs/f9J/1CW/t/UP5Sl/z/rH8rS/1v6h7L0/7b+oSz9v6N/KEv/x/UPZen/L/qHsvR/Qv9Qlv5P6h/K0n+9/qEs/Z/SP5Sl/7/qH8rS/7v6h7L0/zf9Q1n6f0//UJb+G/QPZen/tP6hLP2/r38oS/+N+oey9P93/UNZ+m/SP5Sl/3/oH8rS/xn9Q1n6/6f+oSz9N+sfytJ/i/6hLP3/S/9Qlv4/0D+Upf9W/UNZ+j+rfyhL/+f0D2Xp/0P9Q1n6P69/KEv//9Y/lKX/C/qHsvT/kf6hLP236R9K0n+flv6hLP0H6B/K0n+g/qEs/QfpH8rSf7D+oSz9h+gfytJ/qP6hLP2H6R/K0n+4/qEs/V+hfyhL/z30D2Xpv6f+oSz999I/lKX/CP1DWfq/Uv9Qlv576x962fUHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4aTN/0eJLp82a1THPF77whS92fvFS/5cJAAD4v/bjD/0v9a8EAAAAAAAAAAAAAAAAAAAA8mri/07spf53BAAAAAAAAAAAAACA/+/a2o/eOGhAj6cG7frgNY92bP953NYzZ9xzz4Ol++eub58UvOTAXR9s27Zt2/JnJk7uejis1Wp1/q/t0/V4eO/jztdfMvKOA3Y8KpM+f9vj500dcfK8lTcP/sbyG9ufHrL92SGtCy6ZOavjDQNbrXLskNaVnQ+OGNBqleOHtG7qfDC288GUIa0VnQ+O3P7gFa3PdD54/UVzZl3c+cQJlX/P4OWirX1Ja1CPxbZ6/Ndg1/0vGfnEjO6f+3jJ7lcb3Ora/6iVX9q/1/e6vcj+u1+/HN17//3+FwReVP/2/9y67p/7eMn/9f7/4TVbF0ffe/H9d79+Ocb+oT7B5/8eG+39ub/X5/+Dg5fceX/U8DW3dO6/7fT7Dup6avBP8vn/x69fju29/4E9Pv93fo6f3P35f1irVY7bzd8OSKWt/bqNfb3/973/wa/udTNg1/3f/ZX1e3Xu/97nW0u7nhrSz/1P7uv9//pev1agf9ra79rW6/2/H/tvjQ5ecuf+N6wcsf3z//r7L9pvl+/1Z//H9d7/mAWzLx8zf9Hiw2fOnja9Y3rHZRPGjj9i3IQJ48eP2f6JYMePu/mbAkns3vt/a49eNwNarY6d96vvu3Fy5/43PbT0I11PDe/n/o/v8/3/YO//EBo1sDV0aOvKaQsWzDtix4/dD8fu+HHHPxbsvx9//j/ksK5/rPvvDAe0WgfsvB993oRhnfu/am5Z1fXU0H7uf0qf+5/U8+8qgf7Zzff/i3vd9Nj/URuuWdi5/0N/sO/6rqf6++f/E/rc/53e/2F3tLW3an0T7dz/kcOuO7HadWnz939Qnyb2P3LzTVuqXZcT7R/q08T+py5784XVrstJ9g/1aWL/D84+f1m163Ky/UN9mtj/C6/acmC163KK/UN9mtj/Y9996p5q16Xd/qE+Tez/g7e3H1nturzV/qE+Tez/8CuenVjturzN/qE+Tez/kj1PW1Htupxq/1CfJvZ/4rZj9qt2Xd5u/1CfJvY/4LrvLal2XU6zf6hPE/t/ctqyOdWuy1T7h/o0sf8VI0c/V+26nG7/UJ8m9r/06TdOqXZdzrB/qE8T+//qrXc8Vu26vMP+oT5N7P8T5+x7R7Xrcqb9Q32a2P8PRz20R7Xr8k77h/o0sf+1a1c8UO26nGX/UJ8m9r98xaBR1a7L2fYP9Wli/9eeMP3RatflHPuH+jSx/3Hjv3x2tetyrv1DfZrY/wGf+9ZT1a7LefYP9Wli/6c9vHB+tetyvv1DfZrY/8IDP/6jatflAvuH+jSx/7d0HDij2nWZZv9Qnyb2X27eY22163Kh/UN9mtj/WZvumlTtulxk/1CfJva/au8vfKzadbnY/qE+Tex/89zLJlS7Lh32D/VpYv/fee+176t2XS6xf6hPE/u/5fmvl2rXZbr9Q32a2P+GsWedU+26zLB/qE8T+7/r5GceqXZdZto/1KeJ/S9b9fiCatflXfYP9Wli/6tXn/REtetyqf1DfZrY/6Gjx4zo+eyzP+F1mWX/UJ8m9j/nzKUfqnZdZts/1KeJ/R97/62vrXZdLrN/qE8T+x/+tYmfrHZd5tg/1KeJ/X964vs/Ve26XG7/UJ8m9r9l0iGHVbsuc+0f6tPE/tc9MPa2atdlnv1DfZrY/wceub3idZlv/1CfJvY/93UvbKp2XRbYP9Snif2/aeoZi6pdlyvsH+rTxP73u3PKF6tdl4X2D/VpYv/nfvv7p1a7Lu+2f6hPE/s/ZP8LD6p2Xa60f6hPE/ufMXPNDdWuyyL7h/o0sf/Jy9eNq3ZdFts/1KeJ/e/95Py7q12Xq+wf6tPE/jcO2v+UatflPfYP9Wli//de/fA3q12Xq+0f6tPE/m+4/qMd1a7LNfYP9Wli/5/dOnRztetyrf0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ww4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAoAAD//3EW6vs=") openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004"], 0x84}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) copy_file_range(r2, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x5c, 0x2080, 0xffff, 0xfff8, 0x2, 0x6, 0x0, 0x0, 0x40, 0x9}}, 0x50) 0s ago: executing program 0 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 0s ago: executing program 6 (id=1011): socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000340), 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) io_uring_setup(0x2b3, &(0x7f00000007c0)={0x0, 0x560, 0x10, 0x1, 0x59}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): mode [ 27.264111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.265667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.268774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.270357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.271862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.273344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.274646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.276751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.278209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.281682][ T4331] device veth1_vlan entered promiscuous mode [ 27.287489][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.290613][ T4323] device veth0_vlan entered promiscuous mode [ 27.294916][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.300013][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.301910][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.303614][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.305225][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.312995][ T4323] device veth1_vlan entered promiscuous mode [ 27.314903][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.320242][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.321640][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.323384][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.324967][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.327366][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.330724][ T4318] device veth0_macvtap entered promiscuous mode [ 27.335082][ T4318] device veth1_macvtap entered promiscuous mode [ 27.342267][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.343993][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.345516][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.348102][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.349779][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.351827][ T4322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.353180][ T4322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.354494][ T4322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.359353][ T4322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.367344][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.369029][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.371621][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.373194][ T4331] device veth0_macvtap entered promiscuous mode [ 27.378411][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.380010][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.381870][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.385457][ T4331] device veth1_macvtap entered promiscuous mode [ 27.395735][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.399576][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.401212][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.408031][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.409545][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.412045][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.413500][ T4323] device veth0_macvtap entered promiscuous mode [ 27.417511][ T4323] device veth1_macvtap entered promiscuous mode [ 27.420630][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.422101][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.423495][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.424953][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.427744][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.429308][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.445067][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.449478][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.451025][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.452572][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.454763][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.459852][ T4318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.461340][ T4318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.462784][ T4318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.464296][ T4318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.471405][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.473113][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.480622][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.482318][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.484015][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.488550][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.491165][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.494148][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.495535][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.497041][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.498279][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.504217][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.506089][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.507847][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.509449][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.512102][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.513591][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.528348][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.530016][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.531053][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.534260][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.536732][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.538451][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.539985][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.541499][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.543591][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.548781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.550388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.551965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.562789][ T4417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.562935][ T4324] device veth0_vlan entered promiscuous mode [ 27.564122][ T4417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.567871][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.569529][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.571066][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.572658][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.574178][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.575654][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.578832][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.584685][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.586255][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.588758][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.600357][ T4324] device veth1_vlan entered promiscuous mode [ 27.603867][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.605183][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.608650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.610449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.612405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.619406][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.620848][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.622149][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.623639][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.640100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.641705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.645122][ T4324] device veth0_macvtap entered promiscuous mode [ 27.652874][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.654197][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.655439][ T4417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.655457][ T4417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.656178][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.659878][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.662377][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.675545][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.677342][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.679196][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.683505][ T4324] device veth1_macvtap entered promiscuous mode [ 27.705208][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.710326][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.712180][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.713746][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.715215][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.717656][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.719272][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.720869][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.724783][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.727572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.729105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.730775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.734149][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.736018][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.737546][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.739132][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.740754][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.742280][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.747418][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.749164][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.751623][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.760094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.762126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.793951][ T4324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.795374][ T4324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.798450][ T4324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.799861][ T4324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.856402][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.857731][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.861428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.865152][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.867107][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.868823][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.894506][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.896006][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.898021][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.231542][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.233019][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.234824][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.286632][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 28.291375][ T4448] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'. [ 28.325377][ T4451] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6'. [ 28.670939][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 28.671006][ T4319] Bluetooth: hci3: command 0x041b tx timeout [ 28.671934][ T4326] Bluetooth: hci4: command 0x041b tx timeout [ 28.673815][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 28.675654][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 28.704930][ T27] audit: type=1326 audit(28.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815b3a8 code=0x7fc00000 [ 28.991304][ T4474] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 29.472147][ T4477] loop2: detected capacity change from 0 to 8192 [ 29.474496][ T4477] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 29.567691][ T4310] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 30.097499][ T4489] Zero length message leads to an empty skb [ 30.133259][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.726234][ T4321] Bluetooth: hci3: command 0x040f tx timeout [ 30.792513][ T4321] Bluetooth: hci1: command 0x040f tx timeout [ 30.793871][ T4319] Bluetooth: hci2: command 0x040f tx timeout [ 30.795004][ T4319] Bluetooth: hci4: command 0x040f tx timeout [ 30.796259][ T4319] Bluetooth: hci0: command 0x040f tx timeout [ 30.905252][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 30.912937][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 30.917242][ T4494] device bridge_slave_0 left promiscuous mode [ 30.918963][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.305511][ T4494] device bridge_slave_1 left promiscuous mode [ 31.306901][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.393221][ T4494] bond0: (slave bond_slave_0): Releasing backup interface [ 31.916056][ T4494] bond0: (slave bond_slave_1): Releasing backup interface [ 31.962592][ T4494] team0: Port device team_slave_0 removed [ 31.971031][ T4494] team0: Port device team_slave_1 removed [ 31.972551][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.973921][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.977917][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.979261][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.007615][ T4507] team0: Mode changed to "loadbalance" [ 32.026295][ T4534] loop3: detected capacity change from 0 to 512 [ 32.031223][ T4534] ======================================================= [ 32.031223][ T4534] WARNING: The mand mount option has been deprecated and [ 32.031223][ T4534] and is ignored by this kernel. Remove the mand [ 32.031223][ T4534] option from the mount to silence this warning. [ 32.031223][ T4534] ======================================================= [ 32.037128][ T4534] EXT4-fs: Ignoring removed orlov option [ 32.041135][ T4526] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 32.049269][ T4534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.051291][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.052719][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.061079][ T4534] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.064830][ T4534] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.31: bg 0: block 248: padding at end of block bitmap is not set [ 32.382053][ T4534] Quota error (device loop3): write_blk: dquota write failed [ 32.383605][ T4534] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 32.385472][ T4534] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.31: Failed to acquire dquot type 1 [ 32.390990][ T4534] EXT4-fs (loop3): 1 truncate cleaned up [ 32.871555][ T4319] Bluetooth: hci1: command 0x0419 tx timeout [ 32.871580][ T4321] Bluetooth: hci4: command 0x0419 tx timeout [ 32.873852][ T4326] Bluetooth: hci0: command 0x0419 tx timeout [ 32.875004][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 32.878339][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 32.989045][ T4534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 33.062338][ T27] audit: type=1326 audit(33.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.3.31" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a35b3a8 code=0x0 [ 33.162333][ T4555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 33.230819][ T4549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 33.686500][ T27] audit: type=1326 audit(33.680:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.2.39" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb455b3a8 code=0x0 [ 33.820103][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 33.876708][ T4570] loop3: detected capacity change from 0 to 128 [ 34.026468][ T4576] device bridge0 entered promiscuous mode [ 34.028951][ T4576] batman_adv: batadv0: Adding interface: macsec1 [ 34.030130][ T4576] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.034501][ T4576] batman_adv: batadv0: Interface activated: macsec1 [ 34.127946][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.130352][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.131836][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.133931][ T4581] device bridge_slave_0 left promiscuous mode [ 34.135189][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.209578][ T4581] device bridge_slave_1 left promiscuous mode [ 34.210806][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.219107][ T4590] loop2: detected capacity change from 0 to 8 [ 34.228625][ T4581] bond0: (slave bond_slave_0): Releasing backup interface [ 34.231961][ T4590] SQUASHFS error: zlib decompression failed, data probably corrupt [ 34.233386][ T4590] SQUASHFS error: Failed to read block 0x9b: -5 [ 34.235252][ T4590] SQUASHFS error: Unable to read metadata cache entry [99] [ 34.237982][ T4590] SQUASHFS error: Unable to read inode 0x127 [ 34.566937][ T4581] bond0: (slave bond_slave_1): Releasing backup interface [ 34.608870][ T4581] team0: Port device team_slave_0 removed [ 34.614935][ T4581] team0: Port device team_slave_1 removed [ 34.616322][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.617790][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.621146][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.623086][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.629845][ T4581] batman_adv: batadv0: Interface deactivated: macsec1 [ 34.630938][ T4581] batman_adv: batadv0: Removing interface: macsec1 [ 34.636616][ T4583] team0: Mode changed to "loadbalance" [ 34.643002][ T4593] tipc: Started in network mode [ 34.643858][ T4593] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 34.645019][ T4593] tipc: Enabled bearer , priority 0 [ 34.647440][ T4591] device vlan0 entered promiscuous mode [ 34.666452][ T4591] team0: Port device vlan0 added [ 36.025735][ T24] tipc: Node number set to 11578026 [ 36.097299][ T4619] loop1: detected capacity change from 0 to 131072 [ 36.700716][ T4619] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.714617][ T4619] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.807872][ T4650] loop2: detected capacity change from 0 to 8192 [ 37.226319][ T27] audit: type=1400 audit(37.130:5): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":/" pid=4651 comm="syz.0.66" [ 37.432452][ T4667] loop1: detected capacity change from 0 to 512 [ 37.442168][ T4667] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.480351][ T4667] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 37.482057][ T4667] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.69: invalid indirect mapped block 2683928664 (level 1) [ 37.506781][ T4667] EXT4-fs (loop1): Remounting filesystem read-only [ 37.508504][ T4667] EXT4-fs (loop1): 1 truncate cleaned up [ 37.509651][ T4667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.562955][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 38.407831][ T4691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.77'. [ 38.505210][ T4689] mmap: syz.3.76 (4689) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.626599][ T4372] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 39.343025][ T4710] process 'syz.3.82' launched './file0' with NULL argv: empty string added [ 39.360123][ T4372] usb 1-1: no configurations [ 39.360896][ T4372] usb 1-1: can't read configurations, error -22 [ 39.508880][ T4372] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 39.949533][ T4725] loop3: detected capacity change from 0 to 1024 [ 39.981342][ T4725] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.318275][ T4372] usb 1-1: no configurations [ 40.319154][ T4372] usb 1-1: can't read configurations, error -22 [ 40.320244][ T4372] usb usb1-port1: attempt power cycle [ 41.152470][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 41.232978][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 41.782931][ T4372] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 41.814699][ T4742] netlink: 'syz.4.91': attribute type 4 has an invalid length. [ 41.870506][ T4742] netlink: 17 bytes leftover after parsing attributes in process `syz.4.91'. [ 41.955238][ T4372] usb 1-1: device descriptor read/8, error -71 [ 42.425678][ T4764] binder: 4762:4764 unknown command 0 [ 42.429383][ T4764] binder: 4762:4764 ioctl c0306201 20000080 returned -22 [ 42.440901][ T4764] binder: 4762:4764 tried to acquire reference to desc 0, got 1 instead [ 42.443677][ T4764] binder: 4762:4764 got transaction with invalid offsets ptr [ 42.444976][ T4764] binder: 4762:4764 transaction call to 4762:0 failed 5/29201/-22, size 4200-24 line 3585 [ 42.461713][ T4364] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.826996][ T4774] Invalid option length (1032005) for dns_resolver key [ 42.991301][ T4778] loop0: detected capacity change from 0 to 32768 [ 42.995033][ T4778] XFS: ikeep mount option is deprecated. [ 43.292444][ T4778] XFS (loop0): Mounting V5 Filesystem [ 43.369188][ T4792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.376950][ T4794] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 43.398924][ T4792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.402168][ T4778] XFS (loop0): Ending clean mount [ 43.409004][ T4778] XFS (loop0): Quotacheck needed: Please wait. [ 43.431488][ T4778] XFS (loop0): Quotacheck: Done. [ 43.477497][ T4799] netlink: 'syz.4.107': attribute type 13 has an invalid length. [ 43.492175][ T4799] gretap0: refused to change device tx_queue_len [ 43.493591][ T4799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 44.026521][ T4808] loop2: detected capacity change from 0 to 4096 [ 44.039274][ T4808] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 44.063789][ T4808] ntfs3: loop2: Failed to load $Secure. [ 44.095175][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 44.221893][ T4330] Bluetooth: hci2: hardware error 0x09 [ 44.961320][ T4837] loop2: detected capacity change from 0 to 256 [ 44.962821][ T4837] exfat: Deprecated parameter 'namecase' [ 44.963838][ T4837] exfat: Deprecated parameter 'namecase' [ 45.307614][ T4837] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 45.400099][ T4318] XFS (loop0): Unmounting Filesystem [ 45.555698][ T4847] Invalid ELF header magic: != ELF [ 46.405880][ T4330] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 57.237927][ T4877] device ipip0 entered promiscuous mode [ 57.322981][ T4894] loop0: detected capacity change from 0 to 512 [ 57.690645][ T4894] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.722104][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 57.813147][ T4318] EXT4-fs (loop0): unmounting filesystem. [ 58.260525][ T4920] IPVS: lc: FWM 3 0x00000003 - no destination available [ 58.261990][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 58.401502][ T4915] loop0: detected capacity change from 0 to 32768 [ 59.101103][ T4937] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 59.107065][ T4915] XFS (loop0): Mounting V5 Filesystem [ 59.113043][ T4937] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 59.250973][ T4915] XFS (loop0): Ending clean mount [ 59.253725][ T4915] XFS (loop0): Quotacheck needed: Please wait. [ 59.272689][ T4915] XFS (loop0): Quotacheck: Done. [ 59.377642][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 59.704584][ T4318] XFS (loop0): Unmounting Filesystem [ 59.977854][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 60.088136][ T4980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.110575][ T4979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.928298][ T4992] loop1: detected capacity change from 0 to 256 [ 60.934753][ T4992] exfat: Unknown parameter 'F¥ÅámA‡eÉ?˜ÔwH~íƒk|ˆ³Õ¤ce‰:†aF]¼$cas¢%¥NÍ:…{ìý„ SÖ¯€bP‘³wÑù?¶ÀùÚñ8¼Ô0x000000000000000000000000000000000000003' [ 61.779064][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 62.132673][ T5024] netlink: 'syz.0.179': attribute type 1 has an invalid length. [ 62.153627][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 62.158513][ T5024] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 62.160587][ T5024] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 62.210324][ T5024] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 62.621708][ T5033] loop1: detected capacity change from 0 to 256 [ 64.184222][ T5024] bond1 (unregistering): Released all slaves [ 64.497603][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499145][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.644505][ T5058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 64.761473][ T5065] netlink: 36 bytes leftover after parsing attributes in process `syz.1.192'. [ 66.928223][ T5087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.946233][ T4364] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 67.218222][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 67.370754][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.372053][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.409996][ T4364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.412802][ T4364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.416522][ T4364] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 67.430723][ T4364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.434186][ T4364] usb 1-1: SerialNumber: syz [ 67.454386][ T4364] usb 1-1: 0:2 : does not exist [ 67.617883][ T5110] loop1: detected capacity change from 0 to 256 [ 68.673999][ T5110] FAT-fs (loop1): Directory bread(block 64) failed [ 68.675153][ T5110] FAT-fs (loop1): Directory bread(block 65) failed [ 68.676856][ T5110] FAT-fs (loop1): Directory bread(block 66) failed [ 68.677887][ T5110] FAT-fs (loop1): Directory bread(block 67) failed [ 68.678944][ T5110] FAT-fs (loop1): Directory bread(block 68) failed [ 68.679965][ T5110] FAT-fs (loop1): Directory bread(block 69) failed [ 68.680922][ T5110] FAT-fs (loop1): Directory bread(block 70) failed [ 68.681875][ T5110] FAT-fs (loop1): Directory bread(block 71) failed [ 68.682864][ T5110] FAT-fs (loop1): Directory bread(block 72) failed [ 68.683962][ T5110] FAT-fs (loop1): Directory bread(block 73) failed [ 68.713510][ T5109] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006c61) [ 68.882986][ T5104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.901807][ T5104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.132977][ T5104] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.134549][ T5104] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.136231][ T5104] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.137667][ T5104] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.477021][ T5087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.493856][ T5115] netlink: 64 bytes leftover after parsing attributes in process `syz.0.200'. [ 69.502089][ T7] usb 1-1: USB disconnect, device number 6 [ 69.752012][ T3775] cfg80211: failed to load regulatory.db [ 69.917012][ T5087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.922721][ T5128] device vlan2 entered promiscuous mode [ 70.007417][ T5087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.154897][ T5087] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.159883][ T5087] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.163054][ T5087] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.167754][ T5087] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.665133][ T5149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 70.721015][ T5154] device bond1 entered promiscuous mode [ 71.397624][ T5154] device macvlan2 entered promiscuous mode [ 71.409586][ T5154] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.501730][ T5168] binder: 5167:5168 tried to acquire reference to desc 0, got 1 instead [ 71.503743][ T5168] binder: 5167:5168 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 71.510898][ T5168] binder: 5168 RLIMIT_NICE not set [ 71.572188][ T5168] binder: 5168 RLIMIT_NICE not set [ 71.574770][ T7] binder: undelivered TRANSACTION_COMPLETE [ 71.579026][ T5164] netlink: 'syz.4.224': attribute type 10 has an invalid length. [ 71.589088][ T5164] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.598555][ T5164] bond0: (slave team0): Enslaving as an active interface with an up link [ 71.600235][ T5148] device bond1 left promiscuous mode [ 72.439666][ T5191] random: crng reseeded on system resumption [ 72.928065][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 72.931568][ T5194] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.933150][ T5194] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.934519][ T5194] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.935922][ T5194] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.941842][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 73.428497][ T5207] Set syz0 is full, maxelem 0 reached [ 74.037905][ T5223] binder: 5222:5223 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.040304][ T5223] binder: 5223 RLIMIT_NICE not set [ 74.096246][ T5226] binder: 5222:5226 tried to acquire reference to desc 0, got 1 instead [ 74.102516][ T5223] binder: 5223 RLIMIT_NICE not set [ 74.105900][ T5223] binder: 5223 RLIMIT_NICE not set [ 74.106880][ T5223] binder: 5222:5223 got transaction with invalid handle, 2 [ 74.108114][ T5223] binder: 5223:5222 translate handle failed [ 74.111811][ T5223] binder: 5222:5223 transaction reply to 5222:5226 failed 16/29201/-22, size 72-24 line 3402 [ 74.113559][ T5223] binder: send failed reply for transaction 15 to 5222:5226 [ 74.116202][ T4514] binder: undelivered TRANSACTION_ERROR: 29190 [ 74.123967][ T4514] binder: undelivered TRANSACTION_COMPLETE [ 74.125047][ T4514] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.138105][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 74.140530][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 74.141790][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 74.143511][ T4330] Workqueue: hci4 hci_rx_work [ 74.144360][ T4330] Call trace: [ 74.144924][ T4330] dump_backtrace+0x1c8/0x1f4 [ 74.145642][ T4330] show_stack+0x2c/0x3c [ 74.146287][ T4330] __dump_stack+0x30/0x40 [ 74.146980][ T4330] dump_stack_lvl+0xf8/0x160 [ 74.147745][ T4330] dump_stack+0x1c/0x5c [ 74.148491][ T4330] sysfs_create_dir_ns+0x22c/0x24c [ 74.149311][ T4330] kobject_add_internal+0x5a8/0xb30 [ 74.150230][ T4330] kobject_add+0x134/0x1f8 [ 74.150972][ T4330] device_add+0x3f0/0xf94 [ 74.151658][ T4330] hci_conn_add_sysfs+0xbc/0x1cc [ 74.152506][ T4330] le_conn_complete_evt+0xcb0/0x1220 [ 74.153342][ T4330] hci_le_conn_complete_evt+0x114/0x3f8 [ 74.154133][ T4330] hci_le_meta_evt+0x2c0/0x4a4 [ 74.154837][ T4330] hci_event_packet+0x6ac/0xf08 [ 74.155671][ T4330] hci_rx_work+0x324/0xaa0 [ 74.156405][ T4330] process_one_work+0x7f4/0x13a8 [ 74.157172][ T4330] worker_thread+0x8c8/0xfbc [ 74.157877][ T4330] kthread+0x250/0x2d8 [ 74.158623][ T4330] ret_from_fork+0x10/0x20 [ 74.160091][ T4330] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 74.162243][ T4330] Bluetooth: hci4: failed to register connection device [ 75.164502][ T5242] binder_alloc: 5241: binder_alloc_buf, no vma [ 75.185532][ T5242] binder: cannot allocate buffer: vma cleared, target dead or dying [ 75.185574][ T5242] binder: 5241:5242 transaction reply to 5241:5242 failed 22/29189/-3, size 0-0 line 3239 [ 75.189127][ T5242] binder: send failed reply for transaction 21 to 5241:5242 [ 76.908672][ T5282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.920917][ T5282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.928431][ T5284] loop0: detected capacity change from 0 to 128 [ 76.931726][ T5284] FAT-fs (loop0): Unrecognized mount option "Ä\pwÔìñ^ò‡!þ…þ1T"ìóÙ;‚5ò¡@¤\/h(J°<é Wi µ“}¸" or missing value [ 76.931977][ T5282] loop3: detected capacity change from 0 to 512 [ 76.940876][ T5281] netlink: 'syz.4.260': attribute type 5 has an invalid length. [ 76.955574][ T47] Bluetooth: hci4: unknown advertising packet type: 0x64 [ 76.955599][ T47] Bluetooth: hci4: Dropping invalid advertising data [ 76.957956][ T47] Bluetooth: hci4: unknown advertising packet type: 0x7c [ 76.957980][ T47] Bluetooth: hci4: unknown advertising packet type: 0x09 [ 76.959037][ T47] Bluetooth: hci4: Malformed LE Event: 0x02 [ 77.865665][ T5319] binder_user_error: 5 callbacks suppressed [ 77.865675][ T5319] binder: 5318:5319 tried to acquire reference to desc 0, got 1 instead [ 77.869549][ T5319] binder_debug: 3 callbacks suppressed [ 77.869556][ T5319] binder: release 5318:5319 transaction 27 out, still active [ 77.871862][ T5319] binder: undelivered TRANSACTION_COMPLETE [ 77.881003][ T4514] binder: send failed reply for transaction 27, target dead [ 79.488876][ T5343] team0: Port device vlan2 added [ 79.512975][ T27] audit: type=1326 audit(79.500:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.280" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815b3a8 code=0x0 [ 79.661838][ T5364] loop0: detected capacity change from 0 to 1024 [ 79.779162][ T4514] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.646708][ T5382] team0: Port device vlan2 added [ 81.667030][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 81.687077][ T5409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.689720][ T5409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.710063][ T5409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.301'. [ 81.712087][ T4514] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.974515][ T5437] binder: 5436:5437 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 82.977075][ T5437] binder: 5437 RLIMIT_NICE not set [ 83.032910][ T5440] binder: 5436:5440 tried to acquire reference to desc 0, got 1 instead [ 83.034488][ T5437] binder: 5437 RLIMIT_NICE not set [ 83.039279][ T5437] binder: 5437 RLIMIT_NICE not set [ 83.040196][ T5437] binder: 5436:5437 got transaction with invalid handle, 2 [ 83.041343][ T5437] binder: 5437:5436 translate handle failed [ 83.042348][ T5437] binder: 5436:5437 transaction reply to 5436:5440 failed 39/29201/-22, size 72-24 line 3402 [ 83.056010][ T5437] binder: send failed reply for transaction 38 to 5436:5440 [ 83.064079][ T3775] binder: undelivered TRANSACTION_ERROR: 29190 [ 83.073821][ T3775] binder: undelivered TRANSACTION_COMPLETE [ 83.074788][ T3775] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.379465][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 83.382623][ T5449] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.384048][ T5449] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.385541][ T5449] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.387055][ T5449] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.389574][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 83.925993][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.155485][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 85.369374][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.413171][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.458201][ T5476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.323'. [ 85.606174][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 85.829960][ T5491] binder: 5490:5491 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.832255][ T5491] binder: 5491 RLIMIT_NICE not set [ 85.881503][ T5495] binder: 5490:5495 tried to acquire reference to desc 0, got 1 instead [ 85.883069][ T5491] binder: 5491 RLIMIT_NICE not set [ 85.890046][ T5491] binder: 5491:5490 translate handle failed [ 85.891206][ T5491] binder: 5490:5491 transaction reply to 5490:5495 failed 45/29201/-22, size 72-24 line 3402 [ 85.892946][ T5491] binder: send failed reply for transaction 44 to 5490:5495 [ 85.894945][ T24] binder: undelivered TRANSACTION_ERROR: 29190 [ 85.976384][ T5499] binder_alloc: 5498: binder_alloc_buf, no vma [ 87.450041][ T5518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.336'. [ 87.589740][ T5506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.187127][ T5506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.577481][ T5506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.669085][ T5506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.793805][ T5506] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.798055][ T5506] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.802005][ T5506] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.805169][ T5506] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.863385][ T5543] device vlan2 entered promiscuous mode [ 93.195750][ C0] sched: RT throttling activated [ 93.358620][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.361326][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.458649][ T5591] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.460589][ T5591] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.808111][ T5591] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.809929][ T5591] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.908487][ T5591] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.910183][ T5591] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.987059][ T5591] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.988811][ T5591] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.115036][ T5591] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.116853][ T5591] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.121441][ T5591] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.122849][ T5591] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.126676][ T5591] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.128014][ T5591] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.131324][ T5591] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.132765][ T5591] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.084239][ T5626] loop0: detected capacity change from 0 to 256 [ 95.091819][ T5626] exfat: Unknown parameter 'F¥ÅámA‡eÉ?˜ÔwH~íƒk|ˆ³Õ¤ce‰:†aF]¼$cas¢%¥NÍ:…{ìý„ SÖ¯€bP‘³wÑù?¶ÀùÚñ8¼Ô0x000000000000000000000000000000000000003' [ 95.127162][ T4901] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.942750][ T5659] netlink: 'syz.0.376': attribute type 5 has an invalid length. [ 97.303152][ T5663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.319302][ T5662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.845682][ T5709] netlink: 'syz.2.392': attribute type 5 has an invalid length. [ 100.264905][ T5723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.279758][ T5722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.304682][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 101.723019][ T5741] loop2: detected capacity change from 0 to 256 [ 104.362729][ T5758] netlink: 'syz.1.407': attribute type 5 has an invalid length. [ 104.431516][ T5766] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 104.439737][ T5766] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.447859][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.451053][ T5766] bond0: (slave lo): Enslaving as an active interface with an up link [ 104.452601][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 105.397893][ T5784] loop2: detected capacity change from 0 to 512 [ 105.441436][ T5784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.473991][ T4323] EXT4-fs (loop2): unmounting filesystem. [ 105.881742][ T5793] device ipip0 entered promiscuous mode [ 105.994970][ T5800] loop3: detected capacity change from 0 to 256 [ 107.804955][ T5821] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 107.814443][ T5821] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.834418][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.838110][ T5821] bond0: (slave lo): Enslaving as an active interface with an up link [ 107.839731][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 109.487966][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.045056][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.882984][ T5859] binder: 5858:5859 unknown command 0 [ 110.883910][ T5859] binder: 5858:5859 ioctl c0306201 20000080 returned -22 [ 110.892195][ T5859] binder_user_error: 7 callbacks suppressed [ 110.892205][ T5859] binder: 5858:5859 tried to acquire reference to desc 0, got 1 instead [ 110.895278][ T5859] binder: 5858:5859 got transaction with invalid offsets ptr [ 110.896872][ T5859] binder_debug: 8 callbacks suppressed [ 110.896882][ T5859] binder: 5858:5859 transaction call to 5858:0 failed 56/29201/-22, size 4200-24 line 3585 [ 110.900448][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.410029][ T5868] loop0: detected capacity change from 0 to 256 [ 113.382147][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.384001][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.393317][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.395080][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.140522][ T5885] loop0: detected capacity change from 0 to 8192 [ 115.207609][ T5885] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 115.209091][ T5885] FAT-fs (loop0): Filesystem has been set read-only [ 115.212883][ T5885] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 122.548862][ T5837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.550531][ T5837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.555400][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 122.556840][ T5878] netlink: 5 bytes leftover after parsing attributes in process `syz.1.444'. [ 122.668418][ T5837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.670170][ T5837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.735662][ T4330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.740658][ T4330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.742359][ T4330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.746239][ T4330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.755274][ T4330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 124.758725][ T5837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.760429][ T5837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.768511][ T4330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.117872][ T5837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.119650][ T5837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.263933][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 125.499110][ T5944] netlink: 168 bytes leftover after parsing attributes in process `syz.0.468'. [ 125.937688][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.938793][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.041396][ T5837] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.042906][ T5837] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.047399][ T5837] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.048821][ T5837] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.052175][ T5837] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.053667][ T5837] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.096836][ T5837] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.098304][ T5837] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.581440][ T5958] loop0: detected capacity change from 0 to 512 [ 126.601081][ T5958] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.807122][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 126.856281][ T5958] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.877618][ T5958] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.463: corrupted in-inode xattr [ 126.887188][ T5958] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.463: couldn't read orphan inode 15 (err -117) [ 126.896474][ T5958] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.931444][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.932935][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.934633][ T5918] device bridge_slave_0 entered promiscuous mode [ 126.936883][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.938272][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.939932][ T5918] device bridge_slave_1 entered promiscuous mode [ 126.996691][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.999440][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.023200][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 127.024762][ T5958] netlink: 'syz.0.463': attribute type 30 has an invalid length. [ 127.027927][ T5958] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.029305][ T5958] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.030594][ T5958] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.031744][ T5958] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.515493][ T5918] team0: Port device team_slave_0 added [ 127.518333][ T5918] team0: Port device team_slave_1 added [ 127.584755][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 127.586268][ T5958] netlink: 'syz.0.463': attribute type 30 has an invalid length. [ 127.601656][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.603042][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.609224][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.612259][ T4318] EXT4-fs (loop0): unmounting filesystem. [ 127.615390][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.617262][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.621288][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.157210][ T5918] device hsr_slave_0 entered promiscuous mode [ 128.545624][ T5992] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.807205][ T5918] device hsr_slave_1 entered promiscuous mode [ 128.885869][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 128.906467][ T5918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.907779][ T5918] Cannot create hsr debugfs directory [ 128.908846][ T5984] tipc: Started in network mode [ 128.909756][ T5984] tipc: Node identity 4, cluster identity 4711 [ 128.910733][ T5984] tipc: Node number set to 4 [ 129.023235][ T5918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.037628][ T5918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.077020][ T5918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.117428][ T5918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.180787][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.184498][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.186238][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.189095][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.191556][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.193214][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.194745][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.195814][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.200612][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.203415][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.204848][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.206538][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.207622][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.210269][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.213015][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.216893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.218950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.220792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.223152][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.224753][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.229797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.231378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.235029][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.237343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.239240][ T5918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.293985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.295312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.300701][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.377903][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.385052][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.389589][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.390931][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.393373][ T5918] device veth0_vlan entered promiscuous mode [ 129.397459][ T5918] device veth1_vlan entered promiscuous mode [ 129.404446][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.408970][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.410687][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.413424][ T5918] device veth0_macvtap entered promiscuous mode [ 129.417507][ T5918] device veth1_macvtap entered promiscuous mode [ 129.422970][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.424738][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.426476][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.428087][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.430231][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.431491][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.433214][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.434781][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.438284][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.440005][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.441485][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.443194][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.445385][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.448520][ T5918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.450006][ T5918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.451437][ T5918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.452814][ T5918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.455012][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.457275][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.481076][ T4441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.485284][ T4441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.490110][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.491869][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.493266][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.495679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.562494][ T6020] batman_adv: batadv0: Adding interface: macsec1 [ 129.563558][ T6020] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.568624][ T6020] batman_adv: batadv0: Interface activated: macsec1 [ 129.636162][ T6015] binder: 6014:6015 unknown command 0 [ 129.637091][ T6015] binder: 6014:6015 ioctl c0306201 20000080 returned -22 [ 129.642195][ T6015] binder: 6014:6015 tried to acquire reference to desc 0, got 1 instead [ 129.644026][ T6015] binder: 6014:6015 got transaction with invalid offsets ptr [ 129.646148][ T6015] binder: 6014:6015 transaction call to 6014:0 failed 61/29201/-22, size 4200-24 line 3585 [ 129.648420][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.052931][ T6034] loop5: detected capacity change from 0 to 256 [ 130.105892][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.285993][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 130.306509][ T24] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.309634][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.311214][ T24] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 130.312799][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.341118][ T24] usb 1-1: config 0 descriptor?? [ 130.733255][ T6038] binder: 6037:6038 tried to acquire reference to desc 0, got 1 instead [ 130.748335][ T6038] binder: 6037:6038 got transaction with invalid data ptr [ 130.749497][ T6038] binder: 6037:6038 transaction call to 6037:0 failed 66/29201/-14, size 72-48 line 3342 [ 130.849402][ T4365] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.211307][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 131.231301][ T24] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 131.232801][ T24] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 131.249416][ T24] cypress 0003:04B4:0001.0001: item fetching failed at offset 2/5 [ 131.253931][ T24] cypress 0003:04B4:0001.0001: parse failed [ 131.258052][ T24] cypress: probe of 0003:04B4:0001.0001 failed with error -22 [ 131.474998][ T6023] device veth3 entered promiscuous mode [ 131.712051][ T4364] usb 1-1: USB disconnect, device number 7 [ 131.736284][ T6062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.072409][ T6062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.260739][ T6069] loop3: detected capacity change from 0 to 512 [ 132.262656][ T6069] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.264973][ T6069] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.276839][ T6069] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.491: corrupted in-inode xattr [ 132.279140][ T6069] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.491: couldn't read orphan inode 15 (err -117) [ 132.281357][ T6069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.297467][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 132.299047][ T6069] netlink: 'syz.3.491': attribute type 30 has an invalid length. [ 132.302092][ T6069] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.303410][ T6069] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.304713][ T6069] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.306124][ T6069] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.308999][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 132.310404][ T6069] netlink: 'syz.3.491': attribute type 30 has an invalid length. [ 132.697461][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 133.277127][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 133.303391][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 135.278358][ T6115] loop5: detected capacity change from 0 to 128 [ 135.288470][ T6115] ext4: Unknown parameter 'defcontext' [ 135.345347][ T6115] loop5: detected capacity change from 0 to 4096 [ 135.362343][ T6115] EXT4-fs (loop5): Test dummy encryption mode enabled [ 135.382753][ T6115] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 135.392422][ T6115] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 135.482638][ T6121] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 135.513692][ T6121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.592823][ T6125] bond1: (slave ip6gretap1): making interface the new active one [ 135.600139][ T6125] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 135.679478][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 136.073555][ T5918] EXT4-fs (loop5): unmounting filesystem. [ 136.085492][ T6136] device bridge_slave_0 left promiscuous mode [ 136.087169][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.209576][ T6136] device bridge_slave_1 left promiscuous mode [ 136.210899][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.253632][ T6136] bond0: (slave bond_slave_0): Releasing backup interface [ 136.260145][ T6150] netlink: 52 bytes leftover after parsing attributes in process `syz.0.513'. [ 136.277184][ T6136] bond0: (slave bond_slave_1): Releasing backup interface [ 136.319969][ T6136] team0: Failed to send options change via netlink (err -105) [ 136.321613][ T6136] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 136.323617][ T6136] team0: Port device team_slave_0 removed [ 136.325086][ T6136] team0: Failed to send options change via netlink (err -105) [ 136.330160][ T6136] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 136.333471][ T6136] team0: Port device team_slave_1 removed [ 136.334937][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.339716][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.344133][ T6143] team0: Failed to send options change via netlink (err -105) [ 136.345375][ T6143] team0: Mode changed to "loadbalance" [ 136.352568][ T6146] netlink: 'syz.4.511': attribute type 8 has an invalid length. [ 136.424340][ T6156] loop0: detected capacity change from 0 to 256 [ 138.556440][ T6184] netlink: 168 bytes leftover after parsing attributes in process `syz.4.519'. [ 139.148054][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.150116][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.152969][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.154973][ T6162] device bridge_slave_0 left promiscuous mode [ 139.162085][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.188298][ T6162] device bridge_slave_1 left promiscuous mode [ 139.189540][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.240052][ T6162] bond0: (slave bond_slave_0): Releasing backup interface [ 139.299779][ T6162] bond0: (slave bond_slave_1): Releasing backup interface [ 139.362098][ T6162] team0: Port device team_slave_0 removed [ 139.375902][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.395381][ T6162] team0: Port device team_slave_1 removed [ 139.399411][ T6162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.400942][ T6162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.403807][ T6162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.405087][ T6162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.409004][ T6196] netlink: 52 bytes leftover after parsing attributes in process `syz.1.524'. [ 139.423861][ T6168] team0: Mode changed to "loadbalance" [ 139.435463][ T6167] netlink: 'syz.3.528': attribute type 8 has an invalid length. [ 139.469366][ T5589] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.470934][ T5589] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.593272][ T6204] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 139.594591][ T6209] loop1: detected capacity change from 0 to 4096 [ 139.906482][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.526'. [ 139.908113][ T6209] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 139.929956][ T6209] ntfs3: loop1: Failed to load $Extend. [ 139.946924][ T6201] bond0: (slave lo): Releasing backup interface [ 140.047103][ T6201] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 140.059404][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.065101][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.070934][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.470271][ T6201] team0: Failed to send options change via netlink (err -105) [ 140.471791][ T6201] team0: Failed to send port change of device vlan0 via netlink (err -105) [ 140.481267][ T6201] team0: Port device vlan0 removed [ 140.520035][ T5589] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.521494][ T5589] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.529818][ T6213] team0: Unable to change to the same mode the team is in [ 140.531819][ T4406] tipc: Resetting bearer [ 140.875595][ T5589] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.877463][ T5589] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.915406][ T6229] loop0: detected capacity change from 0 to 512 [ 140.950473][ T5589] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.953104][ T5589] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.980597][ T6229] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 140.982555][ T6229] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.984322][ T6229] EXT4-fs warning (device loop0): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 140.989612][ T6229] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 140.991069][ T6229] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.536: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 141.870577][ T6229] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.536: couldn't read orphan inode 13 (err -117) [ 141.980079][ T6229] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.985280][ T6240] team0: Unable to change to the same mode the team is in [ 142.016474][ T6229] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 142.270524][ T6229] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 142.274349][ T6252] loop3: detected capacity change from 0 to 128 [ 142.286347][ T6252] ext4: Unknown parameter 'defcontext' [ 142.311038][ T6229] EXT4-fs warning (device loop0): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 142.407854][ T6252] loop3: detected capacity change from 0 to 4096 [ 142.410436][ T6252] EXT4-fs (loop3): Test dummy encryption mode enabled [ 142.417883][ T6254] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 142.420408][ T6254] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 142.430737][ T6254] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 142.576276][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.691806][ T6272] netlink: 168 bytes leftover after parsing attributes in process `syz.1.543'. [ 142.824418][ T6252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.824893][ T4318] EXT4-fs (loop0): unmounting filesystem. [ 142.845399][ T6252] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 142.881382][ T6276] loop5: detected capacity change from 0 to 4096 [ 142.955601][ T6276] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 142.978241][ T6276] ntfs3: loop5: Failed to load $Extend. [ 143.993950][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 144.986920][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.988749][ T6318] tipc: Resetting bearer [ 145.024369][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.025663][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.348286][ T6314] binder: BINDER_SET_CONTEXT_MGR already set [ 145.360566][ T6314] binder: 6312:6314 ioctl 4018620d 20004a80 returned -16 [ 145.362229][ T6314] binder: 6312:6314 Acquire 1 refcount change on invalid ref 0 ret -22 [ 145.375571][ T6314] binder: 6312:6314 got transaction to invalid handle, 1 [ 145.377510][ T6314] binder: 6314:6312 cannot find target node [ 145.378558][ T6314] binder: 6312:6314 transaction call to 0:0 failed 70/29201/-22, size 0-0 line 3054 [ 145.383903][ T6314] binder: 6312:6314 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 145.407473][ T6314] binder: 6314 RLIMIT_NICE not set [ 145.436099][ T6328] binder: 6312:6328 got reply transaction with no transaction stack [ 145.437473][ T6328] binder: 6312:6328 transaction reply to 0:0 failed 71/29201/-71, size 88-24 line 2955 [ 145.470747][ T6318] team0: Unable to change to the same mode the team is in [ 145.785294][ T4399] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.786621][ T4399] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.877465][ T6349] loop1: detected capacity change from 0 to 1024 [ 146.124571][ T6356] loop3: detected capacity change from 0 to 4096 [ 146.157568][ T6356] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 146.188697][ T6356] ntfs3: loop3: Failed to load $Extend. [ 147.322410][ T6383] loop5: detected capacity change from 0 to 512 [ 147.359394][ T6383] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 147.394078][ T6383] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.567: Invalid block bitmap block 196613 in block_group 0 [ 147.433973][ T5918] EXT4-fs (loop5): unmounting filesystem. [ 148.228717][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.238918][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.495886][ T4319] Bluetooth: hci3: command 0x0406 tx timeout [ 148.497095][ T4326] Bluetooth: hci1: command 0x0406 tx timeout [ 148.498119][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 148.499026][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 148.978632][ T5589] device hsr_slave_0 left promiscuous mode [ 149.006766][ T5589] device hsr_slave_1 left promiscuous mode [ 149.190877][ T5589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.204950][ T5589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.222506][ T5589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.223930][ T5589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.271972][ T5589] device bridge_slave_1 left promiscuous mode [ 149.305434][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.357054][ T5589] device bridge_slave_0 left promiscuous mode [ 149.369321][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.667609][ T5589] device veth1_macvtap left promiscuous mode [ 149.669305][ T5589] device veth0_macvtap left promiscuous mode [ 149.688910][ T5589] device veth1_vlan left promiscuous mode [ 149.691188][ T5589] device veth0_vlan left promiscuous mode [ 150.970778][ T6472] loop3: detected capacity change from 0 to 512 [ 150.977050][ T6472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 150.979322][ T6472] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.980839][ T6472] EXT4-fs warning (device loop3): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 150.983316][ T6472] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 150.984621][ T6472] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.583: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 150.992043][ T6472] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.583: couldn't read orphan inode 13 (err -117) [ 150.994200][ T6472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.025454][ T6472] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 151.027713][ T6472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 151.037698][ T6472] EXT4-fs warning (device loop3): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 151.049519][ T5589] team0 (unregistering): Port device vlan2 removed [ 151.078138][ T6472] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 151.079976][ T6472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 151.086822][ T6472] EXT4-fs warning (device loop3): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 151.136977][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 151.163383][ T6477] loop3: detected capacity change from 0 to 512 [ 151.174714][ T6477] EXT2-fs (loop3): error: revision level too high, forcing read-only mode [ 151.176477][ T6477] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 152.123403][ T6487] binder: 6486:6487 tried to acquire reference to desc 0, got 1 instead [ 152.126383][ T6487] binder: 6486:6487 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 152.129034][ T6487] binder: 6487 RLIMIT_NICE not set [ 152.129966][ T6487] binder: 6487 RLIMIT_NICE not set [ 152.132946][ T14] binder: release 6486:6487 transaction 76 out, still active [ 152.134247][ T14] binder: undelivered TRANSACTION_COMPLETE [ 152.142897][ T14] binder: release 6486:6487 transaction 76 in, still active [ 152.144063][ T14] binder: send failed reply for transaction 76, target dead [ 152.153930][ T27] audit: type=1326 audit(152.140:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.587" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a35b3a8 code=0x0 [ 153.823260][ T6505] tipc: Failed to remove unknown binding: 66,1,1/4:607454651/607454653 [ 153.826736][ T6505] tipc: Failed to remove unknown binding: 66,1,1/4:607454651/607454653 [ 153.828076][ T6505] tipc: Failed to remove unknown binding: 66,1,1/4:607454651/607454653 [ 153.854158][ T6507] loop3: detected capacity change from 0 to 128 [ 153.856597][ T6507] FAT-fs (loop3): bogus number of FAT sectors [ 153.857647][ T6507] FAT-fs (loop3): Can't find a valid FAT filesystem [ 153.887930][ T5589] team0 (unregistering): Port device team_slave_1 removed [ 154.037610][ T5589] team0 (unregistering): Port device team_slave_0 removed [ 154.206304][ T5589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.406480][ T5589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.150362][ T5589] bond0 (unregistering): Released all slaves [ 157.408075][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 157.474192][ T6455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.480480][ T6455] team0: Port device bond0 added [ 157.486146][ T6457] netlink: 'syz.4.579': attribute type 3 has an invalid length. [ 157.487985][ T6457] netlink: 'syz.4.579': attribute type 3 has an invalid length. [ 157.548328][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 157.930014][ T6511] tipc: Started in network mode [ 157.930857][ T6511] tipc: Node identity ac1414aa, cluster identity 4711 [ 157.932730][ T6511] tipc: Enabled bearer , priority 10 [ 157.938044][ T6513] tipc: Enabled bearer , priority 0 [ 157.984847][ T6535] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.044203][ T6545] loop5: detected capacity change from 0 to 164 [ 158.070156][ T6257] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.154844][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.607'. [ 158.381136][ T6574] binder: 6573:6574 tried to acquire reference to desc 0, got 1 instead [ 158.385085][ T6574] binder_alloc: 6573: pid 6573 spamming oneway? 2 buffers allocated for a total size of 5120 [ 158.387521][ T6574] binder_alloc: 6573: pid 6573 spamming oneway? 3 buffers allocated for a total size of 5128 [ 158.389718][ T6574] binder: 6573:6574 BC_FREE_BUFFER u0000000000000000 no match [ 158.391457][ T4365] binder: undelivered TRANSACTION_COMPLETE [ 158.392486][ T4365] binder: undelivered TRANSACTION_COMPLETE [ 158.393487][ T4365] binder: undelivered TRANSACTION_COMPLETE [ 158.402502][ T4365] binder: undelivered transaction 82, process died. [ 158.403530][ T4365] binder: undelivered transaction 83, process died. [ 158.404515][ T4365] binder: undelivered transaction 81, process died. [ 158.447871][ T6579] loop0: detected capacity change from 0 to 8192 [ 158.449558][ T6579] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value [ 158.471037][ T6257] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.936133][ T4504] tipc: Node number set to 2886997162 [ 159.034017][ T6599] bridge0: port 1(vxlan2) entered blocking state [ 159.042112][ T6599] bridge0: port 1(vxlan2) entered disabled state [ 159.068173][ T6599] device vxlan2 entered promiscuous mode [ 159.733169][ T6615] loop0: detected capacity change from 0 to 2048 [ 159.798256][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.619'. [ 159.821163][ T6615] loop0: p1 < > p4 [ 159.822737][ T6620] syz.4.620 uses obsolete (PF_INET,SOCK_PACKET) [ 159.823990][ T6615] loop0: p4 size 8388608 extends beyond EOD, truncated [ 159.862796][ T6624] netlink: 'syz.1.621': attribute type 4 has an invalid length. [ 159.894738][ T6624] netlink: 'syz.1.621': attribute type 4 has an invalid length. [ 159.947326][ T6630] loop1: detected capacity change from 0 to 512 [ 159.988080][ T6630] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2819: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 159.998705][ T6630] EXT4-fs (loop1): 1 truncate cleaned up [ 160.086520][ T6630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.506319][ T6048] udevd[6048]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 160.520772][ T6257] udevd[6257]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 161.438128][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 161.520633][ T6725] tmpfs: Bad value for 'mpol' [ 161.804773][ T6729] tipc: Failed to remove unknown binding: 66,1,1/0:180990250/180990252 [ 161.812183][ T6729] tipc: Failed to remove unknown binding: 66,1,1/0:180990250/180990252 [ 161.813769][ T6729] tipc: Failed to remove unknown binding: 66,1,1/0:180990250/180990252 [ 161.935347][ T6734] loop5: detected capacity change from 0 to 1024 [ 161.951207][ T6734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 161.980492][ T5918] EXT4-fs (loop5): unmounting filesystem. [ 162.298079][ T6744] netlink: 'syz.3.634': attribute type 4 has an invalid length. [ 162.316660][ T6744] netlink: 'syz.3.634': attribute type 4 has an invalid length. [ 162.407194][ T6749] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 162.415468][ T6749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.435279][ T6749] bond1: (slave erspan0): making interface the new active one [ 162.437697][ T6749] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 162.439226][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 162.739424][ T6743] loop5: detected capacity change from 0 to 32768 [ 162.797697][ T6743] ERROR: (device loop5): diNewExt: no free extents [ 162.797697][ T6743] [ 162.802865][ T6743] ERROR: (device loop5): remounting filesystem as read-only [ 162.807474][ T6743] ialloc: diAlloc returned -5! [ 164.409952][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.411444][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.930071][ T6778] loop0: detected capacity change from 0 to 164 [ 165.501106][ T6257] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.779251][ T6793] loop5: detected capacity change from 0 to 512 [ 165.789021][ T6793] EXT2-fs (loop5): error: revision level too high, forcing read-only mode [ 165.790341][ T6793] EXT2-fs (loop5): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 165.874752][ T6797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.880580][ T6802] netlink: 'syz.4.648': attribute type 4 has an invalid length. [ 165.895292][ T6799] bond2: (slave macvlan3): making interface the new active one [ 165.905235][ T6799] bond2: (slave macvlan3): Enslaving as an active interface with an up link [ 165.970712][ T6803] tmpfs: Bad value for 'mpol' [ 166.227844][ T171] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 168.195363][ T6846] loop1: detected capacity change from 0 to 164 [ 169.358723][ T6865] loop0: detected capacity change from 0 to 2364 [ 170.303727][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 171.388360][ T6930] loop5: detected capacity change from 0 to 512 [ 171.397885][ T6930] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 171.426134][ T6936] device syzkaller0 entered promiscuous mode [ 171.469875][ T6937] netlink: 'syz.3.676': attribute type 3 has an invalid length. [ 171.471376][ T6937] netlink: 'syz.3.676': attribute type 3 has an invalid length. [ 172.642857][ T6973] loop0: detected capacity change from 0 to 512 [ 172.674074][ T6973] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 172.678912][ T6973] EXT2-fs (loop0): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 172.682274][ T6975] UBIFS error (pid: 6975): cannot open "./file0", error -22 [ 172.978364][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 173.120092][ T6977] team0: Port device vlan2 removed [ 173.445557][ T7008] loop1: detected capacity change from 0 to 128 [ 174.594981][ T7037] loop5: detected capacity change from 0 to 128 [ 176.518203][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 176.554104][ T7078] device gre1 entered promiscuous mode [ 176.556494][ T7078] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 176.558701][ T7078] bond2: (slave gre1): Error -95 calling set_mac_address [ 176.610562][ T7078] device macvlan2 entered promiscuous mode [ 176.611673][ T7078] bond2: (slave macvlan2): Error -99 calling set_mac_address [ 176.712541][ T4326] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.714750][ T4326] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.360942][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.432468][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.527008][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.529270][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.129397][ T7163] netlink: 'syz.4.721': attribute type 1 has an invalid length. [ 179.342308][ T7163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.345239][ T7094] chnl_net:caif_netlink_parms(): no params data found [ 179.420078][ T7163] bond2: (slave ip6gretap2): making interface the new active one [ 179.422164][ T7163] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 179.430369][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.431665][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.433296][ T7094] device bridge_slave_0 entered promiscuous mode [ 179.435427][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.436568][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.437997][ T7094] device bridge_slave_1 entered promiscuous mode [ 179.451521][ T7094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.454901][ T7094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.470122][ T7094] team0: Port device team_slave_0 added [ 179.472271][ T7094] team0: Port device team_slave_1 added [ 179.484356][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.485716][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.491450][ T7094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.495228][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.496696][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.501064][ T7094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.559190][ T7094] device hsr_slave_0 entered promiscuous mode [ 179.596274][ T7094] device hsr_slave_1 entered promiscuous mode [ 179.606033][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 179.635935][ T7094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.638030][ T7094] Cannot create hsr debugfs directory [ 179.680858][ T7094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 179.686120][ T3775] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.707280][ T7094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.747453][ T7094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 179.787366][ T7094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.835641][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.837028][ T7094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.838223][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.839304][ T7094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.880337][ T7094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.885133][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.887671][ T109] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.890617][ T109] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.894647][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 179.907816][ T7094] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.913845][ T3775] usb 1-1: Using ep0 maxpacket: 8 [ 179.916692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.918247][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.919334][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.920585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.922052][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.923337][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.925275][ T3775] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.927102][ T3775] usb 1-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 179.928450][ T3775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.933064][ T3775] usb 1-1: config 0 descriptor?? [ 179.949507][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.951677][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.959859][ T7094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.961807][ T7094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.969672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.971288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.972919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.975118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.059330][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.060752][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.064591][ T7094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.467187][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.469175][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.500260][ T4504] usb 1-1: USB disconnect, device number 8 [ 181.320369][ T7211] sctp: [Deprecated]: syz.0.739 (pid 7211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.320369][ T7211] Use struct sctp_sack_info instead [ 181.905450][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 182.088711][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.104511][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.143756][ T7208] tipc: Started in network mode [ 182.145521][ T7208] tipc: Node identity aaaaaaaaaa0a, cluster identity 4711 [ 182.218255][ T7208] tipc: Enabled bearer , priority 0 [ 182.263739][ T7094] device veth0_vlan entered promiscuous mode [ 182.266498][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.268088][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.271415][ T7094] device veth1_vlan entered promiscuous mode [ 182.279509][ T7227] loop3: detected capacity change from 0 to 256 [ 182.282425][ T7094] device veth0_macvtap entered promiscuous mode [ 182.284865][ T7094] device veth1_macvtap entered promiscuous mode [ 182.299893][ T7227] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.321026][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.322812][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.324365][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.326212][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.341700][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.344760][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.354547][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.356019][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.357604][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.361985][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.363641][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.435220][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.498717][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.524200][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.680712][ T7094] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.682062][ T7094] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.683404][ T7094] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.685183][ T7094] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.804196][ T5034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.811435][ T5034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.813176][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.817163][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.821332][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.119613][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.347352][ T22] tipc: Node number set to 10529450 [ 183.574228][ T7259] lo speed is unknown, defaulting to 1000 [ 183.576026][ T7259] lo speed is unknown, defaulting to 1000 [ 183.582994][ T7259] lo speed is unknown, defaulting to 1000 [ 183.592537][ T7259] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.603332][ T7259] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 183.814473][ T7259] lo speed is unknown, defaulting to 1000 [ 183.816646][ T7259] lo speed is unknown, defaulting to 1000 [ 183.818448][ T7259] lo speed is unknown, defaulting to 1000 [ 183.824050][ T7259] lo speed is unknown, defaulting to 1000 [ 183.827439][ T7259] lo speed is unknown, defaulting to 1000 [ 183.828833][ T7259] lo speed is unknown, defaulting to 1000 [ 183.864891][ T7263] binder: 7262:7263 tried to acquire reference to desc 0, got 1 instead [ 183.874597][ T4364] binder: release 7262:7263 transaction 89 out, still active [ 183.876433][ T4364] binder: undelivered TRANSACTION_COMPLETE [ 183.877655][ T4364] binder: undelivered TRANSACTION_COMPLETE [ 183.882334][ T4504] binder: undelivered transaction 88, process died. [ 183.883475][ T4504] binder: send failed reply for transaction 89, target dead [ 183.912853][ T7266] 9pnet: p9_errstr2errno: server reported unknown error [ 184.189693][ T4326] Bluetooth: hci2: command 0x040f tx timeout [ 184.515224][ T7272] netlink: 'syz.3.747': attribute type 3 has an invalid length. [ 185.442897][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 185.923392][ T27] audit: type=1326 audit(185.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.6.752" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b3a8 code=0x0 [ 186.255818][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 187.023165][ T7304] device wg1 entered promiscuous mode [ 187.433621][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.438871][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.484129][ T7314] device syzkaller0 entered promiscuous mode [ 187.523105][ T7315] netlink: 'syz.4.758': attribute type 10 has an invalid length. [ 189.864136][ T7358] loop0: detected capacity change from 0 to 8 [ 189.866050][ T7358] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 189.871938][ T6257] udevd[6257]: incorrect cramfs checksum on /dev/loop0 [ 190.787321][ T7365] ÿÿÿÿÿÿ: renamed from vlan1 [ 195.040905][ T7444] lo speed is unknown, defaulting to 1000 [ 195.562279][ T7463] team0: Port device vlan2 added [ 195.579903][ T7463] netlink: 'syz.6.805': attribute type 10 has an invalid length. [ 196.182702][ T7463] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 196.416858][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.807'. [ 197.859961][ T7500] binder: 7498:7500 tried to acquire reference to desc 0, got 1 instead [ 197.864722][ T7500] binder: 7498:7500 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 197.879283][ T7500] binder: 7500 RLIMIT_NICE not set [ 197.880133][ T7500] binder: 7500 RLIMIT_NICE not set [ 197.881021][ T7500] binder: send failed reply for transaction 94 to 7498:7500 [ 197.882226][ T7500] binder: 7498:7500 ioctl c0306201 20000680 returned -14 [ 197.931501][ T5916] binder: undelivered TRANSACTION_COMPLETE [ 197.932501][ T5916] binder: undelivered TRANSACTION_COMPLETE [ 197.933551][ T5916] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.934652][ T5916] binder: undelivered transaction 95, process died. [ 200.045705][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.825'. [ 200.066441][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.825'. [ 200.593478][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.830'. [ 200.629350][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 200.630795][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 200.632919][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 200.634282][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 200.637792][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 200.640410][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 200.642923][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 200.647488][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 200.648848][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 200.652060][ T7550] netlink: 'syz.1.823': attribute type 28 has an invalid length. [ 201.771621][ T7581] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 202.383336][ T7593] loop3: detected capacity change from 0 to 40427 [ 202.774241][ T7593] F2FS-fs (loop3): invalid crc value [ 202.884967][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.918665][ T7593] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.927655][ T7593] F2FS-fs (loop3): Start checkpoint disabled! [ 202.950919][ T7593] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 203.942913][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.944467][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.947516][ T171] kworker/u4:4: attempt to access beyond end of device [ 203.947516][ T171] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 203.968633][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.970054][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.364638][ T7611] loop6: detected capacity change from 0 to 512 [ 204.385614][ T7611] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 204.397873][ T7611] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 204.453669][ T7611] EXT4-fs (loop6): 1 truncate cleaned up [ 204.456813][ T7611] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 204.498628][ T7611] EXT4-fs error (device loop6): ext4_lookup:1858: inode #16: comm syz.6.842: iget: bad i_size value: 5497558147880 [ 205.167723][ T7622] loop3: detected capacity change from 0 to 32768 [ 205.621143][ T7622] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 205.668908][ T7094] EXT4-fs (loop6): unmounting filesystem. [ 206.004734][ T7649] validate_nla: 33 callbacks suppressed [ 206.004746][ T7649] netlink: 'syz.6.849': attribute type 1 has an invalid length. [ 206.019366][ T7649] veth1_macvtap: Device is already in use. [ 206.983685][ T7664] loop6: detected capacity change from 0 to 4096 [ 206.993971][ T7664] EXT4-fs: Ignoring removed bh option [ 207.004410][ T7664] EXT4-fs (loop6): Test dummy encryption mode enabled [ 207.010609][ T7661] loop1: detected capacity change from 0 to 8192 [ 207.022022][ T7664] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 207.023342][ T7664] System zones: 0-5 [ 207.046416][ T7664] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 207.184615][ T7657] tipc: Resetting bearer [ 207.252912][ T7094] EXT4-fs (loop6): unmounting filesystem. [ 207.281382][ T6257] udevd[6257]: incorrect ext4 checksum on /dev/loop6 [ 207.306636][ T4331] ocfs2: Unmounting device (7,3) on (node local) [ 207.845865][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.558183][ T7657] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.561749][ T7657] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.570886][ T7657] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.572278][ T7657] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.017492][ T7657] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.018862][ T7657] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.020075][ T7657] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.021316][ T7657] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.064346][ T7659] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 211.069969][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.864'. [ 211.132227][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 211.135677][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 211.138133][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 211.140265][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 211.142226][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 211.518364][ T27] audit: type=1326 audit(211.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b3a8 code=0x7ffc0000 [ 211.536356][ T27] audit: type=1326 audit(211.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffac95b3a8 code=0x7ffc0000 [ 211.974884][ T27] audit: type=1326 audit(211.510:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b3a8 code=0x7ffc0000 [ 212.015116][ T27] audit: type=1326 audit(211.510:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffac959794 code=0x7ffc0000 [ 212.025947][ T27] audit: type=1326 audit(211.510:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b3a8 code=0x7ffc0000 [ 212.029117][ T27] audit: type=1326 audit(211.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffac95b3a8 code=0x7ffc0000 [ 212.032303][ T27] audit: type=1326 audit(211.510:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b3a8 code=0x7ffc0000 [ 212.039529][ T27] audit: type=1326 audit(212.000:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffac95b3a8 code=0x7ffc0000 [ 212.043924][ T27] audit: type=1326 audit(212.000:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b3a8 code=0x7ffc0000 [ 212.048105][ T27] audit: type=1326 audit(212.000:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.6.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffac985ac8 code=0x7ffc0000 [ 212.414326][ T7737] tipc: Enabled bearer , priority 10 [ 212.430837][ T7737] netlink: 104 bytes leftover after parsing attributes in process `syz.1.875'. [ 212.441892][ T7739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.443249][ T7739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.444574][ T7739] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.446288][ T7739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.449961][ T7737] tipc: Enabling of bearer rejected, failed to enable media [ 212.952478][ T7744] loop1: detected capacity change from 0 to 512 [ 213.015398][ T7744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.119615][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 213.573257][ T7756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.581889][ T7758] binder: 7757:7758 tried to acquire reference to desc 0, got 1 instead [ 213.589275][ T7758] binder: 7757:7758 got transaction to invalid handle, 2 [ 213.593595][ T7758] binder: 7758:7757 cannot find target node [ 213.594512][ T7758] binder: 7757:7758 transaction call to 0:0 failed 107/29201/-22, size 0-0 line 3054 [ 213.600492][ T7758] binder: 7757:7758 ioctl c0306201 20000700 returned -14 [ 213.607532][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.614262][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.078605][ T5916] binder: release 7757:7758 transaction 100 out, still active [ 214.080056][ T5916] binder: undelivered TRANSACTION_COMPLETE [ 214.080951][ T5916] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.537289][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.881'. [ 214.576019][ T7774] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 214.593909][ T7774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.626226][ T7774] bond3: (slave veth3): Enslaving as an active interface with a down link [ 214.651495][ T7774] device veth0_to_bond entered promiscuous mode [ 214.657516][ T7774] device veth0_to_bond left promiscuous mode [ 214.659998][ T7774] bond3: (slave vlan1): making interface the new active one [ 214.662000][ T7774] device veth0_to_bond entered promiscuous mode [ 214.663765][ T7774] device vlan1 entered promiscuous mode [ 214.665029][ T7774] bond3: (slave vlan1): Enslaving as an active interface with an up link [ 214.671835][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 214.702346][ T7780] netlink: 'syz.4.884': attribute type 4 has an invalid length. [ 214.779416][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 214.782778][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 214.785597][ T7789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.885'. [ 214.788428][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 215.274212][ T5916] binder: send failed reply for transaction 100, target dead [ 216.221792][ T7815] loop1: detected capacity change from 0 to 256 [ 216.273372][ T7816] loop6: detected capacity change from 0 to 128 [ 216.303865][ T7816] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 216.308808][ T7816] hpfs: filesystem error: improperly stopped [ 216.309670][ T7816] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 216.310926][ T7816] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 216.694619][ T6048] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.730935][ T7821] netlink: 'syz.3.892': attribute type 2 has an invalid length. [ 216.732337][ T7821] netlink: 68 bytes leftover after parsing attributes in process `syz.3.892'. [ 217.252899][ T7837] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 218.104578][ T7837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.189212][ T7845] bond2: (slave veth5): Enslaving as an active interface with a down link [ 218.195438][ T7837] bond2: (slave vlan2): Opening slave failed [ 218.200347][ T7853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.898'. [ 219.700771][ T7873] Soft offlining pfn 0x154c3d at process virtual address 0x20000000 [ 219.705727][ T7873] Soft offlining pfn 0x15546a at process virtual address 0x20001000 [ 219.707324][ T7873] Soft offlining pfn 0x145087 at process virtual address 0x20002000 [ 219.708824][ T7873] Soft offlining pfn 0x155468 at process virtual address 0x20003000 [ 219.710261][ T7873] Soft offlining pfn 0x155f0a at process virtual address 0x20004000 [ 219.711693][ T7873] Soft offlining pfn 0x1487fc at process virtual address 0x20005000 [ 219.713142][ T7873] Soft offlining pfn 0x147830 at process virtual address 0x20006000 [ 219.714747][ T7873] Soft offlining pfn 0x154dd3 at process virtual address 0x20007000 [ 219.716225][ T7873] Soft offlining pfn 0x1422e6 at process virtual address 0x20008000 [ 219.717744][ T7873] Soft offlining pfn 0x1422e7 at process virtual address 0x20009000 [ 219.719233][ T7873] Soft offlining pfn 0x142a20 at process virtual address 0x2000a000 [ 219.720785][ T7873] Soft offlining pfn 0x142a21 at process virtual address 0x2000b000 [ 219.722285][ T7873] Soft offlining pfn 0x142a22 at process virtual address 0x2000c000 [ 219.723804][ T7873] Soft offlining pfn 0x142a23 at process virtual address 0x2000d000 [ 219.725376][ T7873] Soft offlining pfn 0x142a24 at process virtual address 0x2000e000 [ 219.726858][ T7873] Soft offlining pfn 0x142a25 at process virtual address 0x2000f000 [ 219.728383][ T7873] Soft offlining pfn 0x142a27 at process virtual address 0x20010000 [ 219.729915][ T7873] Soft offlining pfn 0x1457b0 at process virtual address 0x20011000 [ 220.421387][ T7880] loop0: detected capacity change from 0 to 40427 [ 220.430451][ T7880] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 220.431627][ T7880] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 220.435640][ T7880] F2FS-fs (loop0): invalid crc value [ 220.472438][ T7880] F2FS-fs (loop0): Found nat_bits in checkpoint [ 220.483109][ T7880] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 220.484157][ T7880] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 220.691446][ T7892] syz.0.912: attempt to access beyond end of device [ 220.691446][ T7892] loop0: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 220.900173][ T7895] binder: 7893:7895 tried to acquire reference to desc 0, got 1 instead [ 220.902173][ T7895] binder: 7893:7895 got transaction to invalid handle, 2 [ 220.903315][ T7895] binder: 7895:7893 cannot find target node [ 220.904256][ T7895] binder: 7893:7895 transaction call to 0:0 failed 119/29201/-22, size 0-0 line 3054 [ 220.906209][ T7895] binder: 7893:7895 ioctl c0306201 20000700 returned -14 [ 220.979720][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.981220][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.005657][ T4529] binder: release 7893:7895 transaction 112 out, still active [ 221.007080][ T4529] binder: undelivered TRANSACTION_COMPLETE [ 221.007999][ T4529] binder: undelivered TRANSACTION_ERROR: 29201 [ 221.722385][ T4529] binder: send failed reply for transaction 112, target dead [ 221.805302][ T7909] netlink: 'syz.0.928': attribute type 4 has an invalid length. [ 221.818641][ T7911] netlink: 'syz.4.917': attribute type 4 has an invalid length. [ 222.138006][ T7919] ALSA: mixer_oss: invalid OSS volume '' [ 222.777194][ T7931] loop1: detected capacity change from 0 to 512 [ 222.778766][ T7931] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.799345][ T7931] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 222.802190][ T7931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 222.803574][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 222.803771][ T7931] EXT4-fs (loop1): orphan cleanup on readonly fs [ 222.810514][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 222.812115][ T7931] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.919: bg 0: block 361: padding at end of block bitmap is not set [ 223.413489][ T7931] EXT4-fs (loop1): Remounting filesystem read-only [ 223.414686][ T7931] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 223.419235][ T7931] EXT4-fs (loop1): Remounting filesystem read-only [ 223.420446][ T7931] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.919: attempt to clear invalid blocks 33619980 len 1 [ 223.424759][ T7931] EXT4-fs (loop1): Remounting filesystem read-only [ 223.427583][ T7931] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.919: invalid indirect mapped block 1811939328 (level 0) [ 223.430775][ T7931] EXT4-fs (loop1): Remounting filesystem read-only [ 223.431973][ T7931] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.919: invalid indirect mapped block 2185560079 (level 1) [ 223.434315][ T7931] EXT4-fs (loop1): Remounting filesystem read-only [ 223.435631][ T7931] EXT4-fs (loop1): 1 truncate cleaned up [ 223.436801][ T7931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 224.025040][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 225.643854][ T7975] loop6: detected capacity change from 0 to 512 [ 225.645302][ T7975] EXT4-fs: Ignoring removed i_version option [ 225.965347][ T7975] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 225.966774][ T7975] System zones: 0-2, 18-18, 34-35 [ 226.053490][ T7975] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 226.512640][ T7984] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 226.874675][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 226.911528][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'. [ 226.960690][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 227.032112][ T7094] EXT4-fs (loop6): unmounting filesystem. [ 227.095379][ T7988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.107184][ T7988] bond4: (slave bond5): Enslaving as an active interface with an up link [ 227.125975][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.938'. [ 227.133754][ T7991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.191148][ T8001] netlink: 'syz.0.941': attribute type 10 has an invalid length. [ 227.195322][ T8001] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 227.653455][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 227.653464][ T27] audit: type=1326 audit(227.640:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815b3a8 code=0x7ffc0000 [ 227.661737][ T27] audit: type=1326 audit(227.640:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815b3a8 code=0x7ffc0000 [ 227.667615][ T27] audit: type=1326 audit(227.650:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=230 compat=0 ip=0xffffa815b3a8 code=0x7ffc0000 [ 227.670994][ T27] audit: type=1326 audit(227.660:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815b3a8 code=0x7ffc0000 [ 227.674545][ T27] audit: type=1326 audit(227.660:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815b3a8 code=0x7ffc0000 [ 227.938686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 228.483862][ T27] audit: type=1326 audit(228.470:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815b3a8 code=0x7fc00000 [ 229.508372][ T8047] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.510161][ T8047] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.511410][ T8047] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.512706][ T8047] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.525379][ T8047] team0: Port device vxlan0 added [ 229.735073][ T8064] dns_resolver: Unsupported server list version (0) [ 230.160749][ T8067] netlink: 'syz.4.956': attribute type 1 has an invalid length. [ 230.175431][ T8067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.210286][ T8067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.211957][ T8067] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 230.378790][ T8067] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 230.729527][ T8078] loop0: detected capacity change from 0 to 128 [ 230.761168][ T8070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.770918][ T8070] device batadv_slave_1 entered promiscuous mode [ 230.799774][ T8078] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 230.801258][ T8078] FAT-fs (loop0): Filesystem has been set read-only [ 231.143491][ T8070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.607123][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'. [ 231.613394][ T8072] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.692384][ T171] device vlan1 left promiscuous mode [ 232.233839][ T8086] loop0: detected capacity change from 0 to 40427 [ 232.264307][ T8086] F2FS-fs (loop0): invalid crc value [ 232.266843][ T8102] loop6: detected capacity change from 0 to 512 [ 232.271312][ T8086] F2FS-fs (loop0): Found nat_bits in checkpoint [ 232.547389][ T8086] F2FS-fs (loop0): Start checkpoint disabled! [ 232.572901][ T8086] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 232.611724][ T8102] EXT4-fs (loop6): Unsupported blocksize for fs-verity [ 232.712860][ T4503] kworker/u4:10: attempt to access beyond end of device [ 232.712860][ T4503] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.187155][ T8121] serio: Serial port pts0 [ 233.943483][ T8136] loop0: detected capacity change from 0 to 736 [ 234.443756][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.977'. [ 234.463204][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.974'. [ 234.494143][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 234.836140][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 234.840787][ T8154] tipc: Started in network mode [ 234.841812][ T8154] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 234.843518][ T8154] tipc: Enabling of bearer rejected, failed to enable media [ 237.759951][ T8202] Bluetooth: MGMT ver 1.22 [ 237.762109][ T8202] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 238.524263][ T8211] loop6: detected capacity change from 0 to 8 [ 238.544328][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.994'. [ 238.551134][ T8209] tipc: Enabled bearer , priority 10 [ 238.741346][ T8221] lo speed is unknown, defaulting to 1000 [ 239.434315][ T8221] loop3: detected capacity change from 0 to 512 [ 239.435840][ T8221] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.436878][ T8221] EXT4-fs: Ignoring removed bh option [ 239.443847][ T8221] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 239.445479][ T8221] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 239.470518][ T8221] EXT4-fs (loop3): 1 truncate cleaned up [ 239.471549][ T8221] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.642586][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 240.030828][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1005'. [ 240.060711][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 240.371653][ T8256] loop1: detected capacity change from 0 to 512 [ 240.373117][ T8256] EXT4-fs: Ignoring removed i_version option [ 240.688962][ T8256] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 240.690515][ T8256] System zones: 0-2, 18-18, 34-35 [ 240.694720][ T8256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.272699][ T8263] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 241.274408][ T8263] Mem abort info: [ 241.274961][ T8263] ESR = 0x0000000086000006 [ 241.275660][ T8263] EC = 0x21: IABT (current EL), IL = 32 bits [ 241.276734][ T8263] SET = 0, FnV = 0 [ 241.277309][ T8263] EA = 0, S1PTW = 0 [ 241.277928][ T8263] FSC = 0x06: level 2 translation fault [ 241.278807][ T8263] user pgtable: 4k pages, 48-bit VAs, pgdp=000000014b5eb000 [ 241.279935][ T8263] [0000000000000000] pgd=0800000132d55003, p4d=0800000132d55003, pud=080000010ca42003, pmd=0000000000000000 [ 241.282058][ T8263] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 241.283014][ T8263] Modules linked in: [ 241.283521][ T8263] CPU: 0 PID: 8263 Comm: syz.6.1011 Not tainted syzkaller #0 [ 241.284568][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 241.286153][ T8263] pstate: 82400805 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 241.287399][ T8263] pc : 0x0 [ 241.287877][ T8263] lr : bond_xdp_xmit+0x27c/0x45c [ 241.288647][ T8263] sp : ffff800022827020 [ 241.289327][ T8263] x29: ffff8000228270e0 x28: 000000000000000f x27: ffff800022827048 [ 241.290741][ T8263] x26: dfff800000000000 x25: ffff800012b40798 x24: ffff0000f42fa000 [ 241.292160][ T8263] x23: fffffbffeff53160 x22: ffff0000d8a48000 x21: fffffbffeff53160 [ 241.293537][ T8263] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 [ 241.294908][ T8263] x17: 0000000000000000 x16: ffff8000082d1108 x15: 0000000000000002 [ 241.296230][ T8263] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 241.297583][ T8263] x11: 00000000000023cf x10: ffff8000296ed000 x9 : ffff800022827080 [ 241.298872][ T8263] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 241.300152][ T8263] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000000 [ 241.301507][ T8263] x2 : ffff8000228270a0 x1 : 0000000000000001 x0 : ffff0000f42fa000 [ 241.302845][ T8263] Call trace: [ 241.303396][ T8263] 0x0 [ 241.303821][ T8263] bq_xmit_all+0xab0/0xf10 [ 241.304489][ T8263] bq_enqueue+0x288/0x30c [ 241.305242][ T8263] dev_map_enqueue_multi+0xc30/0xd8c [ 241.306022][ T8263] xdp_do_redirect_frame+0x3e4/0x578 [ 241.306873][ T8263] bpf_test_run_xdp_live+0x840/0x1544 [ 241.307727][ T8263] bpf_prog_test_run_xdp+0x560/0xb88 [ 241.308610][ T8263] bpf_prog_test_run+0x2dc/0x364 [ 241.309425][ T8263] __sys_bpf+0x4ec/0x634 [ 241.310159][ T8263] __arm64_sys_bpf+0x80/0x98 [ 241.310947][ T8263] invoke_syscall+0x98/0x2bc [ 241.311754][ T8263] el0_svc_common+0x138/0x258 [ 241.312606][ T8263] do_el0_svc+0x58/0x13c [ 241.313330][ T8263] el0_svc+0x58/0x138 [ 241.314054][ T8263] el0t_64_sync_handler+0x84/0xf0 [ 241.314926][ T8263] el0t_64_sync+0x18c/0x190 [ 241.315675][ T8263] Code: bad PC value [ 241.316340][ T8263] ---[ end trace 0000000000000000 ]--- [ 241.477003][ T8254] loop3: detected capacity change from 0 to 32768 [ 241.486653][ T8254] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1009 (8254) [ 241.614712][ T8263] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 241.615839][ T8263] SMP: stopping secondary CPUs [ 241.616545][ T8263] Kernel Offset: disabled [ 241.617185][ T8263] CPU features: 0x080000,000f0097,a65bfea7 [ 241.618163][ T8263] Memory Limit: none [ 241.890221][ T8263] Rebooting in 86400 seconds..