last executing test programs: 12m40.435160303s ago: executing program 32 (id=114): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 12m36.902171975s ago: executing program 2 (id=129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000013c0)=r1, 0x4) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="13000000520013"], 0xfe33) 12m36.809379357s ago: executing program 2 (id=130): lseek(0xffffffffffffffff, 0x3, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file1\x00', 0x200800, &(0x7f0000000140)={[{@filestreams}, {@uqnoenforce}, {@noikeep}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@quota}]}, 0xc2, 0x96c1, &(0x7f0000009680)="$eJzs2gm8pnMBsP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUtGKkkJFRHv2LVtZQtlaSfYWSgiVLJEW2zD/zzFnGOOienvfv3Jd1+dzzv0893M/9/k9v++9nMNsMmmDiYPBHINpjRvM3DlXT54y5sp1bzti8/mPXubku/Z75IaLjh9ZThhZThwMBqNGXh6atm7s4JRTRw1mfXD9w80951xD8w4Gy448HdnPYMVpi3kvm77d1JmaeaBDD3/ba9rXg803/COGHxy63x6HDQaDMTO8f2gwGNr1UR9U2iYTJk962Ooht2Gr0SOPZ/yabdrXvBcOBvOePuDjY8Zth56AjzT8M3d90dmj130Cfvb/XJtMmLzWTP7D5+IsI+tWHD7HZz4Hjc18nN+y2KYrj0zhg8fbYDB8iXvEufI/0SYTJq09eOzr/OCIVc7fa+q06+bsg2k3ijkHg8FcI9fXeZ5ol/rPmjBxuQfv2dOfj7BPP5Z3pePiuLee+MDwTXowGCwwGIxdc/q9oKqqqv43mjBxudXg/j/H493/Tzpp4dO7/1dVVf3vttaEicsN3+tnuv/P83j3/x0XvmD3af/tf/yK0971wBP7IaqqqurfatJaeP8f83j3/xVXu2Tt7v9VVVX/u62/zoP3/3lmuv8v+Hj3/zeduMoiI9tN/73h/hl2OTTD/0+4b4b1s8yw/t4Z1o+eYT8zbj/bDOvvnmH97MOvwfbjBoOx0/+94JSHV48dN/zayPp7Zlg//uF/p7Po6jOsnzDD+kkzrJ84Mtbh9ZNnWD95hu3XfJyprqqq+q9p/eUmrTaY4d/Zj6xeaPrrdP8/74xrlnyixltVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX/mz1w25lnDwaDocFgMGowmDIYeTzjcjB16tSpw89POvfSS5+wgf53NHTO1ZOnjLly3duO2Hz+o5c5+a79Hp6l/9n+9z9B/ScN+89x7LjBYPuNnuih1BNQ57+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe+C2M88eOQZGDQZTBiOPd52+PGPfN755ZNOVNz75jgMffuei47cZeXTO1ZOnbPMEjP0JaGj4s465ct3bjth8/qOXOfmu/Z4EZ8///ieo/6QH/bcZGgxGzu8xw+fyuhPW33CJwWBw4B0nb7zC4KHXVhp+bZWxswxmefCtSzz4fY1Fece7rjltOX7424IP7eOkB/e/1tRDZhmaaRAz9Ipzrj/iHZvctfzMy8Uf+3OMmv7gsGtPu3Pq1KlTH7FypDke483T9z/9s8x8no+MfYnhsS+103bvXuq9u3xwyW2222zrLbfecvtllltp+RWWXWaFlV+21FbbbLvl0tO+P8acjXvw+2r/ypzNM/Oc3TZhxjmb+bM91pyNe/w5e3CPUz44tOH0OZv135yz1R5/zsZtM/KDFh0/erDpg1MzNBgsuvrowc7DT5aZfTBYdI2RbRca3nbVsaMGg30f/qDDj2Z/6Bgc2nV4m00mbTDx4ZE9+hM+6jr9iA0XHT+ynDCynDhtiOMGDx+KYwennDpqeC4eMc1zzznX0LyDwbIjT0f2M1h55NWDp283daZmHujQw9/2mvb1YPMN72T4wTuXPvOq4XNxpvf/v+j/6Pr/KK+Vhh6aqKGRr5FtpnlNmLzWwz/rwWkYnrtZRtatOGwy85z93+xR4x0362DM44x30loTlxtePdP8T38LHl+3L3b+h6YdW+NXnPauB/6PUWi88zzOeNeagOOd5/HGe+yHLz512q7+r413pmvd2g9+H/+vXOsGj3+tm4V2sOVFi8x8rXvNYw/xEefx9DmafaaNHutat/NBy+46vP/xj3+tW3t47KMfca0bNRgsutr0a93whW/S6MG+w0+WHX4yefTg6OEnyz34ZM7BucNPXvr2HbbdYnjFmtPnZOnh/Y4fO/Sg+/kr3rz41P2nTl19ZCzjxz5yrCPHx7gZ7+cTxk6bzOnvnb7f4U2n7/emp097bdLIfif8G/ud/l4a7x3zTXtt8sh+J86039GPs9/p733U+bDE0EMXrse43kya6Xoz8jfO9B/3iK/Zpn3Ne+FgMO/p5DvTtv/0mknn7xyPM94JE5dbbXh8M52/Dx2OdP5ePPnK4XvFvIPBYIHBYOya08f+bzb0WOOd9fHHOxHGO+vjjffyY7Zb5//CeAczjPcRx9km6087VtYcOc4m/xvH7/T3znwdG/3gq9Mu+2v+K9excY+6ju02y6iZJnuGHut3ti1g+2mPF3r499yrTzhq+tyPnmm//+x3thk+yxBcx8bM9Pf8qDWvGwzRnO967KqXDB3w+HM+evDIvy2mz/n09z7enE/+V+b8WY8/5//q78lLPH/a66NnGv+Mc77ePs/ce/qczzbTfv/ZnE9+/HvHo+d8/GA0zfnS906bt8e7nj7WnE9/7/Q5H/6Iq4yddbDG8D1rZM4n/StzvtD/neN8Lth+2uMtH1p11hEnv376nM88x/9szif9u3M+7qHjfNEHX3veqMFssw123mynnXZcZtr36U+Xnfadr0V3Xz1tnh/vXvpYRtPf+3jnxer/itGYf8lo6J8ZLTzrYxk9fGodvsOOT/s/vRat/u8aDUbhnF951LR5e7zfix5rzqe/l+6DC87w/pn/Dl1/nQd/755npvvg9LfgffCsM9bec/ouR952/0zDnH5fvW+G9bPMsP7eGdaPnmE/M24/2wzr755h/fBHmG2G7aezjhv+m3dk/ZSHNx87/MvTuJH198ywfvzD71109RnWT5hh/aQZ1k98+NBYdPIM6yfPsP2ag3+z6f9NepuZL/L1r9Z//3WXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvbth/6nxP9Cjqiarz313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3EP3Hbm2SPHwKjBYMpg2uOhkeVg16H1bn3V8HIwGIxe8fip6z3R432CGzrn6slTxly57m1HbD7/0cucfNd+T4Kz53//E9R/0oP+2wwNBiPn95htBoPBuhPW33CJwWCw3tTjVxw1eOi1hYZfW3XsqMFg36FH7GD2h7YZ2nV4m00mbTBxMJhjZItxj/qhjzqPHrHhouNHlhNGlhOnXZ/GDR4+XscOTjl11GDWB9c/3NxzzjU072Cw7MjTkf0MVpy2mPey6dtNnamZBzr08Le9pn092HzDP2L4wc5bT3728FzN9P7/mqZfq7cZ9U837fx3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u/v3/Dtanmwl6i5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3wG1nnj1yDIwaDKYMpj0e2nVkORg68ZQXjhwio3e54shDnujxPsENnXP15Cljrlz3tiM2n//oZU6+a78nwdnzv/8J6j/pQf9thgaDkfN7zDaDwWDdCetvuMRgMDjkyCt2GTV46LWFhl9bdeyowWDfoUfsYPaHthnadXibTSZtMHEwmGNki3GP+qGPOo8eseGi40eWE0aWE6ddn8Y9MHVag8Fg7OCUU0cNZn1w/cPNPedcQ/MOBsuOPB3Zz2DFaYt5L5u+3dSZmnmgQw9/22va14PNN/wjhh/sMc/VJw7P1Uzv/69p+rV6m1H/dNPOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3wG1nnj1yDIwaDKYMpj0eNbIc2vXGGz664fBy+Pn8a+559RM93ie4oXOunjxlzJXr3nbE5vMfvczJd+33JDh7/vc/Qf0nDfvPcey4wWD7jZ7oodQTUOe/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vgtjPPHnk46uG1o3btuMCGzrl68pQxV6572xGbz3/0Mifftd8TPaD/tMfw3y1/zOK/e/6Yxf/j+WMW/0/kj1n898gfs/h/Mn/M4r9n/pjF/1P5Yxb/T+ePWfz3yh+z+O+dP2bx3yd/zOL/mfwxi/9n88cs/p/LH7P475s/ZvHfL3/M4v/5/DGL//75Yxb/A/LHLP5fyB+z+B+YP2bxPyh/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4fyN/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfnPSSst/t/MH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv9v5Y9Z/L+dP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/7+SPWfxPzx+z+J+RP2bxPzN/zOL/3fwxi//38scs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/+/ljFv8f5I9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/M/PH7P4X5A/ZvH/af6Yxf/C/DGL/8/yxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/K/PHLP5X5Y9Z/H+dP2bx/03+mMX/6vwxi/9v88cs/tfkj1n8r80fs/hflz9m8f9d/pjF//r8MYv/DfljFv8b88cs/r/PH7P4/yF/zOL/x/wxi/9N+WMW/z/lj1n8b84fs/jfkj9m8b81f8zif1v+mMX/z/ljFv/b88cs/nfkj1n8/5I/ZvG/M3/M4v/X/DGL/9/yxyz+f88fs/j/I3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8p+SPWfzvzx+z+D+QP2bxn5o/JvGfZZA/ZvEfyh+z+I/KH7P4z5I/ZvGfNX/M4j86f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOL/lPwxi/98+WMW/zH5Yxb/+fPHLP5j88cs/gvkj1n8F8wfs/g/NX/M4v+0/DGL/9Pzxyz+C+WPWfyfkT9m8V84f8zi/8z8MYv/s/LHLP6L5I9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+fl/6hmHVka/J+fP2Y5/xfNH7P4L5Y/ZvF/Qf6YxX/x/DGL/xL5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/JfPHLP4vzR+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4vyx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/8vzxyz+q+SPWfxXzR+z+L8if8zi/8r8MYv/q/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+s8p/lX97S4r+myv9fz+K/Vv6Yxf/V+WMW/9fkj1n8184fs/ivkz9m8V83f8zi/9r8MYv/evljFv/X5Y9Z/NfPH7P4b5A/ZvHfcPizzvdEDeq/N4v/Rp3/mMX/9fljFv+N88cs/pvkj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6Yxf9t+WMW/03zxyz+m+WPWfw3zx+z+L89f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78gfs/hvkz9m8X9n/pjF/135Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/d/6Yxf89+WMW/x3zxyz+780fs/jvlD9m8X9f/pjF//35Yxb/D+SPWfx3zh+z+O+SP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMX/Y/ljFv9d88cs/rvlj1n8d88fs/h/PH/M4v+J/DGL/x75Yxb/T+aPWfz3zB+z+H8qf8zi/+n8MYv/XvljFv+988cs/vvkj1n8P5M/ZvH/bP6Yxf9z+WMW/33zxyz+++WPWfw/nz9m8d8/f8zif0D+mMX/C/ljFv8D88cs/gflj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOL/zfwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bx/1b+mMX/2/ljFv+T88cs/qfkj1n8T80fs/iflj9m8f9O/pjF//T8MYv/GfljFv8z88cs/t/NH7P4fy9/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX//Pwxi/8F+WMW/5/mj1n8L8wfs/j/LH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8b8yf8zif1X+mMX/1/ljFv/f5I9Z/K/OH7P4/zZ/zOJ/Tf6Yxf/a/DGL/3X5Yxb/3+WPWfyvzx+z+N+QP2bxvzF/zOL/+/wxi/8f8scs/n/MH7P435Q/ZvH/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/P+cP2bxvz1/zOJ/R/6Yxf8v+WMW/zvzxyz+f80fs/j/LX/M4v/3/DGL/z/yxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6YxX9K/pjF//78MYv/A/ljFv+p+WMS/1kH+WMW/6H8MYv/qPwxi/8s+WMW/1nzxyz+o/PHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/k/JH7P4z5c/ZvEfkz9m8Z8/f8ziPzZ/zOK/QP6YxX/B/DGL/1Pzxyz+T8sfs/g/PX/M4r9Q/pjF/xn5Yxb/hfPHLP7PzB+z+D8rf8ziv0j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/0Xzxyz+i+WPWfxfkD9m8V88f8ziv0T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/yfwxi/9L88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//L8scs/ivkj1n8V8wfs/ivlD9m8V85f8zi//L8MYv/KvljFv9V88cs/q/IH7P4vzJ/zOL/qvwxi//4/DGL/4T8MYv/xPwxi/9q+WMW/9Xzxyz+a+SPWfwn5Y9Z/Cfnj1n818wfs/ivlT9m8X91/pjF/zX5Yxb/tfPHLP7r5I9Z/NfNH7P4vzZ/zOK/Xv6Yxf91g0vzhyz+63f+Yxb/DfLHLP4b5o9Z/DfKH7P4vz5/zOK/cf6YxX+T/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4r9p/pjFf7P8MYv/5vljFv+3549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/x35Yxb/bfLHLP7vzB+z+L8rf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+784fs/i/J3/M4r9j/pjF/735Yxb/nfLHLP7vyx+z+L8/f8zi/4H8MYv/zvljFv9d8scs/h/MH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOK/a/6YxX+3/DGL/+75Yxb/j+ePWfw/kT9m8d8jf8zi/8n8MYv/nvljFv9P5Y9Z/D+dP2bx3yt/zOK/d/6YxX+f/DGL/2fyxyz+n80fs/h/Ln/M4r9v/pjFf7/8MYv/5/PHLP77549Z/A/IH7P4fyF/zOJ/YP6Yxf+g/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8v5k/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/t/KH7P4fzt/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP7fyR+z+J+eP2bxPyN/zOJ/Zv6Yxf+7+WMW/+/lj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n58/ZvG/IH/M4v/T/DGL/4X5Yxb/n+WPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X5o9Z/K/KH7P4/zp/zOL/m/wxi//V+WMW/9/mj1n8r8kfs/hfmz9m8b8uf8zi/7v8MYv/9fljFv8b8scs/jfmj1n8f58/ZvH/Q/6Yxf+P+WMW/5vyxyz+f8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi/+f88cs/rfnj1n878gfs/j/JX/M4n9n/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/hPyR+z+N+fP2bxfyB/zOI/NX9M4j96kD9m8R/KH7P4j8ofs/jPkj9m8Z81f8ziPzp/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v+U/DGL/3z5Yxb/MfljFv/588cs/mPzxyz+C+SPWfwXzB+z+D81f8zi/7T8MYv/0/PHLP4L5Y9Z/J+RP2bxXzh/zOL/zPwxi/+z8scs/ovkj1n8n50/ZvF/Tv6YxX9c/pjF/7n5Yxb/5+WPWfyfnz9m8V80f8ziv1j+mMX/BfljFv/F88cs/kvkj1n8X5g/ZvF/Uf6Yxf/F+WMW/5fkj1n8l8wfs/i/NH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/i/PH7P4r5I/ZvFfNX/M4v+K/DGL/yvzxyz+r8ofs/iPzx+z+E/IH7P4T8wfs/ivlj9m8V89f8ziv0b+mMV/Uv6YxX9y/pjFf838MYv/WvljFv9X549Z/F+TP2bxXzt/zOK/Tv6YxX/d/DGL/2vzxyz+6+WPWfxflz9m8V8/f8ziv0H+mMV/Q6P/rP98E4v/Rkb/fyGL/+vzxyz+G+ePWfw3yR+z+L8hf8zi/8b8MYv/m/LHLP5vzh+z+L8lf8zi/9b8MYv/2/LHLP6b5o9Z/DfLH7P4b54/ZvF/e/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+RP2bx3yZ/zOL/zvwxi/+78scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/+78MYv/e/LHLP475o9Z/N+bP2bx3yl/zOL/vvwxi//788cs/h/IH7P475w/ZvHfJX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+u+aPWfx3yx+z+O+eP2bx/3j+mMX/E/ljFv898scs/p/MH7P475k/ZvH/VP6Yxf/T+WMW/73yxyz+e+ePWfz3yR+z+H8mf8zi/9n8MYv/5/LHLP775o9Z/PfLH7P4fz5/zOK/f/6Yxf+A/DGL/xfyxyz+B+aPWfwPyh+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/5v5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+t/DGL/7fzxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOL/nfwxi//p+WMW/zPyxyz+Z+aPWfy/mz9m8f9e/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL//n5Yxb/C/LHLP4/zR+z+F+YP2bx/1n+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Zf6Yxf+q/DGL/6/zxyz+v8kfs/hfnT9m8f9t/pjF/5r8MYv/tfljFv/r8scs/r/LH7P4X58/ZvG/IX/M4n9j/pjF//f5Yxb/P+SPWfz/mD9m8b8pf8zi/6f8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/OX/M4n97/pjF/478MYv/X/LHLP535o9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv/lPwxi//9+WMW/wfyxyz+U/PHJP6zDfLHLP5D+WMW/1H5Yxb/WfLHLP6z5o9Z/Efnj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfyfkj9m8Z8vf8ziPyZ/TOA/evpL+T86gf9ws43NH7P4L5A/ZvFfMH/M4v/U/DGL/9Pyxyz+T88fs/gvlD9m8X9G/pjFf+H8MYv/M/PHLP7Pyh+z+C+SP2bxf3b+mMX/OfljFv9x+WMW/+fmj1n8n5c/ZvF/fv6YxX/R/DGL/2L5Yxb/F+SPWfwXzx+z+C+RP2bxf2H+mMX/RfljFv8X549Z/F+SP2bxXzJ/zOL/0vwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOL/svwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+L88f8ziv0r+mMV/1fwxi/8r8scs/q/MH3vy+U996OGM/q/KH3vy+fP5Pz5/zOI/IX/M4j8xf8ziv1r+mMV/9fwxi/8a+WMW/0n5Yxb/yfljFv8188cs/mvlj1n8X50/ZvF/Tf6YxX/t/DGL/zr5Yxb/dfPHLP6vzR+z+K+XP2bxf13+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfxfnz9m8d84f8ziv0n+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bx3zR/zOK/Wf6YxX/z/DGL/9vzxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOL/jvwxi/82+WMW/3fmj1n835U/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv93549Z/N+TP2bx3zF/zOL/3vwxi/9O+WMW//flj1n8358/ZvH/QP6YxX/n/DGL/y75Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8d81f8ziv1v+mMV/9/wxi//H88cs/p/IH7P475E/ZvH/ZP6YxX/P/DGL/6fyxyz+n84fs/jvlT9m8d87f8ziv0/+mMX/M/ljFv/P5o9Z/D+XP2bx3zd/zOK/X/6Yxf/z+WMW//3zxyz+B+SPWfy/kD9m8T8wf8zif1D+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/7EnrP8cj1s52VP7Yk9Z/pvP/6Pwxi/8x+WMW/2Pzxyz+38wfs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/2/lj1n8v50/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/v5I9Z/E/PH7P4n5E/ZvE/M3/M4v/d/DGL//fyxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8z88fs/hfkD9m8f9p/pjF/8L8MYv/z/LHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv8r88cs/lflj1n8f50/ZvH/Tf6Yxf/q/DGL/2/zxyz+1+SPWfyvzR+z+F+XP2bx/13+mMX/+vwxi/8N+WMW/xvzxyz+v88fs/j/IX/M4v/H/DGL/035Yxb/P+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/P+WMW/9vzxyz+d+SPWfz/kj9m8b8zf8zi/9f8MYv/3/LHLP5/zx+z+P8jf8zif1f+mMX/7vyHm2XmFRb/e/LHLP735o9Z/O/LH7P4T8kfs/jfnz9m8X8gf8ziPzV/TOI/+yB/zOI/lD9m8R+VP2bxnyV/zOI/a/6YxX90/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMX/KfljFv/58scs/mPyxyz+8+ePWfzH5o9Z/BfIH7P4L5g/ZvF/av6Yxf9p+WMW/6fnj1n8F8ofs/g/I3/M4r9w/pjF/5n5Yxb/Z+WPWfwXyR+z+D87f8zi/5z8MYv/uPwxi/9z88cs/s/LH7P4Pz9/zOK/aP6YxX+x/DGL/wvyxyz+i+ePWfyXyB+z+L8wf8zi/6L8MYv/i/PHLP4vyR+z+C+ZP2bxf2n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf1n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfnj9m8V8lf8ziv2r+mMX/FfljFv9X5o9Z/F+VP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/5Pwxi/+a+WMW/7Xyxyz+r84fs/i/Jn/M4r92/pjFf538MYv/uvljFv/X5o9Z/NfLH7P4vy5/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP6vzx+z+G+cP2bx3yR/zOL/hvwxi/8b88cs/m/KH7P4vzl/zOL/lvwxi/9b88cs/m/LH7P4b5o/ZvHfLH/M4r95/pjF/+35Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/R/6YxX+b/B/RnCNLi/8788cs/u/KH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/u/PHLP7vyR+z+O+YP2bxf2/+mMV/p/wxi//78scs/u/PH7P4fyB/zOK/c/6YxX+X/DGL/wfzxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/jvmj9m8d8tf8ziv3v+mMX/4/ljFv9P5I9Z/PfIH7P4fzJ/zOK/Z/6Yxf9T+WMW/0/nj1n898ofs/jvnT9m8d8nf8zi/5n8MYv/Z/PHLP6fyx+z+O+bP2bx3y9/zOL/+fwxi//++WMW/wPyxyz+X8gfs/gfmD9m8T8of8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/b+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/7fyxyz+384fs/ifnD9m8T8lf8zif2r+mMX/tPwxi/938scs/qfnj1n8z8gfs/ifmT9m8f9u/pjF/3v5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+ePWfwvyB+z+P80f8zif2H+mMX/Z/ljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/+V+WMW/6vyxyz+v84fs/j/Jn/M4n91/pjF/7f5Yxb/a/LHLP7X5o9Z/K/LH7P4/y5/zOJ/ff6Yxf+G/DGL/435Yxb/3+ePWfz/kD9m8f9j/pjF/6b8MYv/n/LHLP43549Z/G/JH7P435o/ZvG/LX/M4v/n/DGL/+35Yxb/O/LHLP5/yR+z+N+ZP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP5T8scs/vfnj1n8H8gfs/hPzR+T+M8xyB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9K/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+aP2bxf1r+mMX/6fljFv+F8scs/s/IH7P4L5w/ZvF/Zv6Yxf9Z+WMW/0Xyxyz+z84fs/g/J3/M4j8uf8zi/9z8MYv/8/LHLP7Pzx+z+C+aP2bxXyx/zOL/gvwxi//i+WMW/yXyxyz+L8wfs/i/KH/M4v/i/DGL/0vyxyz+S+aPWfxfmj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxflj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/5fnj1n8V8kfs/ivmj9m8X9F/pjF/5X5Yxb/V+WPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/+r88cs/q/JH7P4r50/ZvFfJ3/M4r9u/pjF/7X5Yxb/9fLHLP6vyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/+vzxyz+G+ePWfw3yR+z+L8hf8zi/8b8MYv/m/LHLP5vzh+z+L8lf8zi/9b8MYv/2/LHLP6b5o9Z/DfLH7P4b54/ZvF/e/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+RP2bx3yZ/zOL/zvwxi/+78scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/+78MYv/e/LHLP475o9Z/N+bP2bx3yl/zOL/vvwxi//788cs/h/IH7P475w/ZvHfJX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+u+aPWfx3yx+z+O+eP2bx/3j+mMX/E/ljFv898scs/p/MH7P475k/ZvH/VP6Yxf/T+WMW/73yxyz+e+ePWfz3yR+z+H8mf8zi/9n8MYv/5/LHLP775o9Z/PfLH7P4fz5/zOK/f/6Yxf+A/DGL/xfyxyz+B+aPWfwPyh+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/5v5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+t/DGL/7fzxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOL/nfwxi//p+WMW/zPyxyz+Z+aPWfy/mz9m8f9e/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL//n5Yxb/C/LHLP4/zR+z+F+YP2bx/1n+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Zf6Yxf+q/DGL/6/zxyz+v8kfs/hfnT9m8f9t/pjF/5r8MYv/tfljFv/r8scs/r/LH7P4X58/ZvG/IX/M4n9j/pjF//f5Yxb/P+SPWfz/mD9m8b8pf8zi/6f8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/OX/M4n97/pjF/478MYv/X/LHLP535o9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv/lPwxi//9+WMW/wfyxyz+U/PHJP5zDvLHLP5D+WMW/1H5Yxb/WfLHLP6z5o9Z/Efnj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfyfkj9m8Z8vf8ziPyZ/zOI/f/6YxX9s/pjFf4H8MYv/gvljFv+n5o9Z/J+WP2bxf3r+mMV/ofwxi/8z8scs/gvnj1n8n5k/ZvF/Vv6YxX+R/DGL/7Pzxyz+z8kfs/iPyx+z+D83f8zi/7z8MYv/8/PHLP6L5o9Z/BfLH7P4vyB/zOK/eP6YxX+J/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/5L5Yxb/l+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/l+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6Yxf/l+WMW/1Xyxyz+q+aPWfxfkT9m8X9l/pjF/1X5Yxb/8fljFv8J+WMW/4n5Yxb/1fLHLP6r549Z/NfIH7P4T8ofs/hPzh+z+K+ZP2bxXyt/zOL/6vwxi/9r8scs/mvnj1n818kfs/ivmz9m8X9t/pjFf738MYv/6/LHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4v/6/DGL/8b5Yxb/TfLHLP5vyB+z+L8xf8zi/6b8MYv/m/PHLP5vyR+z+L81f8zi/7b8MYv/pvljFv/N8scs/pvnj1n8354/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv935I9Z/LfJH7P4vzN/zOL/rvwxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+L87f8zi/578MYv/jvljFv/35o9Z/HfKH7P4vy9/zOL//vwxi/8H8scs/jvnj1n8d8kfs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/675Yxb/3fLHLP67549Z/D+eP2bx/0T+mMV/j/wxi/8n88cs/nvmj1n8P5U/ZvH/dP6YxX+v/DGL/975Yxb/ffLHLP6fyR+z+H82f8zi/7n8MYv/vvljFv/98scs/p/PH7P4758/ZvE/IH/M4v+F/DGL/4H5Yxb/g/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8f9m/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/h/K3/M4v/t/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4fyd/zOJ/ev6Yxf+M/DGL/5n5Yxb/7+aPWfy/lz9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9+/pjF/4L8MYv/T/PHLP4X5o9Z/H+WP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X5k/ZvG/Kn/M4v/r/DGL/2/yxyz+V+ePWfx/mz/2SP/RT/Rw/vMew/+a/DHL+X9t/pjF/7r8MYv/7/LHLP7X549Z/G/IH7P435g/ZvH/ff6Yxf8P+WMW/z/mj1n8b8ofs/j/KX/M4n9z/pjF/5b8sUf4D+36pPW/NX/Mcv7flj9m8f9z/pjF//b8MYv/HfljFv+/5I9Z/O/MH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv8p+WMW//vzxyz+D+SPWfyn5o9J/Oca5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WNPfv85Hnop/0f35Pd/sLnmyR+z+M+bP2bxf0r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n5o/ZvF/Wv6Yxf/p+WMW/4Xyxyz+z8gfs/gvnD9m8X9m/pjF/1n5Yxb/RfLHLP7Pzh+z+D8nf8ziPy5/zOL/3Pwxi//z8scs/s/PH7P4L5o/ZvFfLH/M4v+C/DGL/+L5Yxb/JfLHLP4vzB+z+L8of8zi/+L8MYv/S/LHLP5L5o9Z/F+aP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+WP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/l+ePWfxXyR+z+K+aP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/6vzxyz+r8kfs/ivnT9m8V8nf8ziv27+mMX/tfljFv/18scs/q/LH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/6/PHLP4b549Z/DfJH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvmj1n8N8sfs/hvnj9m8X97/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835E/ZvHfJn/M4v/O/DGL/7vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/7vwxi/978scs/jvmj1n835s/ZvHfKX/M4v++/DGL//vzxyz+H8gfs/jvnD9m8d8lf8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP675o9Z/HfLH7P4754/ZvH/eP6Yxf8T+WMW/z3yxyz+n8wfs/jvmT9m8f9U/pjF/9P5Yxb/vfLHLP57549Z/PfJH7P4fyZ/zOL/2fwxi//n8scs/vvmj1n898sfs/h/Pn/M4r9//pjF/4D8MYv/F/LHLP4H5o9Z/A/KH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/m/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/638MYv/t/PHLP4n549Z/E/JH7P4n5o/ZvE/7V/yn+X/3bj+S7P4f6fzH7P4n54/ZvE/I3/M4n9m/pjF/7v5Yxb/7+WPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/ifnz9m8b8gf8zi/9P8MYv/hfljFv+f5Y9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/j/PH7P4/yJ/zOL/y/wxi/+v8scs/lfmj1n8r8ofs/j/On/M4v+b/DGL/9X5Yxb/3+aPWfyvyR+z+F+bP2bxvy5/zOL/u/wxi//1+WMW/xvyxyz+N+aPWfx/nz9m8f9D/pjF/4/5Yxb/m/LHLP5/yh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/5/zxyz+t+ePWfzvyB+z+P8lf8zif2f+mMX/r/ljFv+/5Y9Z/P+eP2bx/0f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+E/JH7P4358/ZvF/IH/M4j81f0ziP/cgf8ziP5Q/ZvEflT9m8Z8lf8ziP2v+mMV/dP6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjF/yn5Yxb/+fLHLP5j8scs/vPnj1n8x+aPWfwXyB+z+C+YP2bxf2r+mMX/afljFv+n549Z/BfKH7P4PyN/zOK/cP6Yxf+Z+WMW/2flj1n8F8kfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv2j+mMV/sfwxi/8L/rn/bP9Px/VfmsV/8c5/zOK/RP6Yxf+F+WMW/xflj1n8X5w/ZvF/Sf6YxX/J/DGL/0vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/8vyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/8vwxi/8q+WMW/1Xzxyz+r8gfs/i/Mn/M4v+q/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1fPHLP5r5I9Z/Cflj1n8J+ePWfzXzB+z+K+VP2bxf3X+mMX/NfljFv+188cs/uvkj1n8180fs/i/Nn/M4r9e/pjF/3X5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/ff6YxX/j/DGL/yb5Yxb/N+SPWfzfmD9m8X9T/pjF/835Yxb/t+SPWfzfmj9m8X9b/tiT2n/8Q2vn3jR/7Ent//DauTfLH7P4b54/ZvF/e/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+RP2bx3yZ/zOL/zvwxi/+78scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/+78MYv/e/LHLP475o9Z/N+bP2bx3yl/zOL/vvwxi//788cs/h/IH7P475w/ZvHfJX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+u+aPWfx3yx+z+O+eP2bx/3j+mMX/E/ljFv898scs/p/MH7P475k/ZvH/VP6Yxf/T+WMW/73yxyz+e+ePWfz3yR+z+H8mf8zi/9n8MYv/5/LHLP775o9Z/PfLH7P4fz5/zOK/f/6Yxf+A/DGL/xfyxyz+B+aPWfwPyh+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/5v5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+t/DGL/7fzxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOL/nfwxi//p+WMW/zPyxyz+Z+aPWfy/mz9m8f9e/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL//n5Yxb/C/LHLP4/zR+z+F+YP2bx/1n+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Zf6Yxf+q/DGL/6/zxyz+v8kfs/hfnT9m8f9t/pjF/5r8MYv/tfljFv/r8scs/r/LH7P4X58/ZvG/IX/M4n9j/pjF//f5Yxb/P+SPWfz/mD9m8b8pf8zi/6f8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/OX/M4n97/pjF/478MYv/X/LHLP535o9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv/lPwxi//9+WMW/wfyxyz+U/PHJP7zDPLHLP5D+WMW/1H5Yxb/WfLHLP6z5o9Z/Efnj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfyfkj9m8Z8vf8ziPyZ/zOI/f/6YxX9s/pjFf4H8MYv/gvljFv+n5o9Z/J+WP2bxf3r+mMV/ofwxi/8z8scs/gvnj1n8n5k/ZvF/Vv6YxX+R/DGL/7Pzxyz+z8kfs/iPyx+z+D83f8zi/7z8MYv/8/PHLP6L5o9Z/BfLH7P4vyB/zOK/eP6YxX+J/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/5L5Yxb/l+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/l+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6Yxf/l+WMW/1Xyxyz+q+aPWfxfkT9m8X9l/pjF/1X5Yxb/8fljFv8J+WMW/4n5Yxb/1fLHLP6r549Z/NfIH7P4T8ofs/hPzh+z+K+ZP2bxXyt/zOL/6vwxi/9r8scs/mvnj1n818kfs/ivmz9m8X9t/pjFf738MYv/6/LHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4v/6/DGL/8b5Yxb/TfLHLP5vyB+z+L8xf8zi/6b8MYv/m/PHLP5vyR+z+L81f8zi/7b8MYv/pvljFv/N8scs/pvnj1n8354/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv935I9Z/LfJH7P4vzN/zOL/rvwxi/+2+WMW/+3yxyz+2+ePWfx3yB97yH+rE5/U/u/OH7Oc/+/JH7P475g/ZvF/b/6YxX+n/DGL//vyxyz+788fs/h/IH/M4r9z/pjFf5f8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+O+aP2bx3y1/zOK/e/6Yxf/j+WMW/0/kj1n898gfs/h/Mn/M4r9n/pjF/1P5Yxb/T+ePWfz3yh+z+O+dP2bx3yd/zOL/mfwxi/9n88cs/p/LH7P475s/ZvHfL3/M4v/5/DGL//75Yxb/A/LHLP5fyB+z+B+YP2bxPyh/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4fyN/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv9v5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/t/LHLP7fzh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/3fyxyz+p+ePWfzPyB+z+J+ZP2bx/27+mMX/e/ljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP7n549Z/C/IH7P4/zR/zOJ/Yf6Yxf9n+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/5X5Yxb/q/LHLP6/zh+z+P8mf8zif3X+mMX/t/ljFv9r8scs/tfmj1n8r8sfs/j/Ln/M4n99/pjF/4b8MYv/jfljFv/f549Z/P+QP2bx/2P+mMX/pvwxi/+f8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zi/+f8MYv/7fljFv878scs/n/JH7P435k/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/lPyxyz+9+ePWfwfyB+z+E/NH5P4zzvIH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf0r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n5o/ZvF/Wv6Yxf/p+WMW/4Xyxyz+z8gfs/gvnD9m8X9m/pjF/1n5Yxb/RfLHLP7Pzh+z+D8nf8ziPy5/zOL/3Pwxi//z8scs/s/PH7P4L5o/ZvFfLH/M4v+C/DGL/+L5Yxb/JfLHLP4vzB+z+L8of8zi/+L8MYv/S/LHLP5L5o9Z/F+aP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+WP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/l+ePWfxXyR+z+K+aP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/6vzxyz+r8kfs/ivnT9m8V8nf8ziv27+mMX/tfljFv/18scs/q/LH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/6/PHLP4b549Z/DfJH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvmj1n8N8sfs/hvnj9m8X97/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835E/ZvHfJn/M4v/O/DGL/7vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/7vwxi/978scs/jvmj1n835s/ZvHfKX/M4v++/DGL//vzxyz+H8gfs/jvnD9m8d8lf8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP675o9Z/HfLH7P4754/ZvH/eP6Yxf8T+WMW/z3yxyz+n8wfs/jvmT9m8f9U/pjF/9P5Yxb/vfLHLP57549Z/PfJH7P4fyZ/zOL/2fwxi//n8scs/vvmj1n898sfs/h/Pn/M4r9//pjF/4D8MYv/F/LHLP4H5o9Z/A/KH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/m/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/638MYv/t/PHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4v+d/DGL/+n5Yxb/M/LHLP5n5o9Z/L+bP2bx/17+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/+fljFv8L8scs/j/NH7P4X5g/ZvH/Wf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9l/pjF/6r8MYv/r/PHLP6/yR+z+F+dP2bx/23+mMX/mvwxi/+1+WMW/+vyxyz+v8sfs/hfnz9m8b8hf8zif2P+mMX/9/ljFv8/5I9Z/P+YP2bxvyl/zOL/p/wxi//N+WMW/1vyxyz+t+aPWfxvyx+z+P85f8zif3v+mMX/jvwxi/9f8scs/nfmj1n8/5o/ZvH/W/6Yxf/v+WMW/3/kj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi/+U/DGL//35Yxb/B/LHLP5T88ck/k8Z5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8lf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/NH7P4Py1/zOL/9Pwxi/9C+WMW/2fkj1n8F84fs/g/M3/M4v+s/DGL/yL5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n549Z/BfNH7P4L5Y/ZvF/Qf6YxX/x/DGL/xL5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/JfPHLP4vzR+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4vyx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/8vzxyz+q+SPWfxXzR+z+L8if8zi/8r8MYv/q/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FcX+c/xb2xr8V9D5P/vZPGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf/V+WMW/9fkj1n8184fs/ivkz9m8V83f8zi/9r8MYv/evljFv/X5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF//X5Yxb/jfPHLP6b5I9Z/N/wmP5z/v8zrv/SLP5v7PzHLP5vyh+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+G+aP2bx3yx/zOK/ef6Yxf/t+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bxf0f+mMV/m/wxi/8788cs/u/KH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/u/PHLP7vyR+z+O+YP2bxf2/+mMV/p/wxi//78scs/u/PH7P4fyB/zOK/c/6YxX+X/DGL/wfzxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/jvmj9m8d8tf8ziv3v+mMX/4/ljFv9P5I9Z/PfIH7P4fzJ/zOK/Z/6Yxf9T+WMW/0/nj1n898ofs/jvnT9m8d8nf8zi/5n8MYv/Z/PHLP6fyx+z+O+bP2bx3y9/zOL/+fwxi//++WMW/wPyxyz+X8gfs/gfmD9m8T8of8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/b+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/7fyxyz+384fs/ifnD9m8T8lf8zif2r+mMX/tPwxi/938scs/qfnj1n8z8gfs/ifmT9m8f9u/pjF/3v5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+ePWfwvyB+z+P80f8zif2H+mMX/Z/ljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/+V+WMW/6vyxyz+v84fs/j/Jn/M4n91/pjF/7f5Yxb/a/LHLP7X5o9Z/K/LH7P4/y5/zOJ/ff6Yxf+G/DGL/435Yxb/3+ePWfz/kD9m8f9j/pjF/6b8MYv/n/LHLP43549Z/G/JH7P435o/ZvG/LX/M4v/n/DGL/+35Yxb/O/LHLP5/yR+z+N+ZP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP5T8scs/vfnj1n8H8gfs/hPzR+T+M83yB+z+A/lj1n8R+WPWfxnyR+z+M+a/yOaZWRp8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Sv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfmj9m8X9a/pjF/+n5Yxb/hfLHLP7PyB+z+C+cP2bxf2b+mMX/WfljFv9F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvmj9m8V8sf8zi/4L8MYv/4vljFv8l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvmj1n8X5o/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5Y/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv+X549Z/FfJH7P4r5o/ZvF/Rf6Yxf+V+WMW/1flj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/q/PHLP6vyR+z+K+dP2bxXyd/zOK/bv6Yxf+1+WMW//Xyxyz+r8sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//r88cs/hvnj1n8N8kfs/i/IX/M4v/G/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+m+aPWfw3yx+z+G+eP2bxf3v+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzfkT9m8d8mf8zi/878MYv/u/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/u/DGL/3vyxyz+O+aPWfzfmz9m8d8pf8zi/778MYv/+/PHLP4fyB+z+O+c///HPj1zAWIoQBh9NvYZsW3btm3bWMe2bdu2bdu2nZx0KeYX7NzbTf2diVr6D9Q/auk/SP+opf9g/aOW/kP0j1r6D9U/auk/TP+opf9w/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19N9T/6il/176Ry3999Y/aum/j/5RS/999Y9a+u+nf9TSf3/9o5b+B+gftfQ/UP+opf9B+kct/Q/WP2rpf4j+UUv/Q/WPWvofpn/U0v9w/aOW/kfoH7X0P1L/qKX/UfpHLf2P1j9q6X+M/lFL/2P1j1r6H6d/1NL/eP2jlv4n6B+19D9R/6il/0n6Ry39T9Y/aul/iv5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/c/WP2rpf47+UUv/c/WPWvqfp3/U0v98/aOW/hfoH7X0v1D/qKX/RfpHLf0v1j9q6X+J/lFL/0v1j1r6X6Z/1NL/cv2jlv5X6B+19L9S/6il/1X6Ry39r9Y/aul/jf5RS/9r9Y9a+l+nf9TS/3r9o5b+N+gftfS/Uf+opf9N+kct/W/WP2rpf4v+UUv/W/WPWvrfpn/U0v92/aOW/nfoH7X0v1P/qKX/XfpHLf3v1j9q6X+P/lFL/3v1j1r636d/1NL/fv2jlv4P6B+19H9Q/6il/0P6Ry39H9Y/aun/iP5RS/9H9Y9a+j+mf9TS/3H9o5b+T+gftfR/Uv+opf9T+kct/Z/WP2rp/4z+UUv/Z/WPWvo/p3/U0v95/aOW/i/oH7X0f1H/qKX/S/pHLf1f1j9q6f+K/lFL/1f1j1r6v6Z/1NL/df2jlv5v6B+19H9T/6il/1v6Ry3939Y/aun/jv5RS/939Y9+0v/HOcL2f0//qOX/7+sftfT/QP+opf+H+kct/T/SP2rp/7H+UUv/T/SPWvp/qn/U0v8z/aOW/p/rH7X0/0L/qKX/l/pHLf2/0j9q6f+1/lFL/2/0j1r6f6t/1NL/O/2jlv7f6x+V9B/wM/2jlv4/1z9q6f8L/aOW/r/UP2rp/yv9o5b+v9Y/aun/G/2jlv6/1T9q6f87/aOW/r/XP2rp/wf9o5b+f9Q/aun/J/2jlv5/1j9q6f8X/aOW/n/VP2rpP0D/qKX/3/SPWvr/Xf+opf8/9I9a+v9T/6il/7/0j1r6/1v/qKX/f/SPWvr/V/+opf//9I9a+v9f/6il/0j6Ry39R9Y/auk/iv5RS/9R9Y9a+o+mf9TSf3T9o5b+Y+gftfQfU/+opf9Y+kct/cfWP2rpP47+UUv/cfWPWvqPp3/U0n98/aOW/hPoH7X0n1D/qKX/RPpHLf0n1j9q6T+J/lFL/0n1j1r6T6Z/1NJ/cv2jlv5T6B+19J9S/6il/1T6Ry39p9Y/auk/jf5RS/9p9Y9a+k+nf9TSf3r9o5b+M+gftfSfUf+opf9M+kct/WfWP2rpP4v+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf3n1j9q6T+P/lFL/3n1j1r6z6d/1NJ/fv2jlv4L6B+19F9Q/6il/0L6Ry39F9Y/aum/iP5RS/9F9Y9a+i+mf9TSf3H9o5b+S+gftfRfUv+opf9S+kct/ZfWP2rpv4z+UUv/ZfWPWvovp3/U0n95/aOW/ivoH7X0X1H/qKX/SvpHLf1X1j9q6b+K/lFL/1X1j1r6r6Z/1NJ/df2jlv5r6B+19F9T/6il/1r6Ry3919Y/aum/jv5RS/919Y9a+q+nf9TSf339o5b+G+gftfTfUP+opf9G+kct/TfWP2rpv4n+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv4D9Y9a+g/SP2rpP1j/qKX/EP2jlv5D9Y9a+g/TP2rpP1z/aITrDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzA3t3G1lkWfhy/u61j7M8/GXHBZWiyyYVCIsx2DxkvCJuMbXXQjecxwLGHbmys2+w67Aq4hxeTCOFBkkmWKFG2DCXMhEZiIFhBRIMuaqLBB0AUomicCEG3xMWa056W9tieeK56XYvy+bzoOffd/u5tTb677wYIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+9mprnHx1bN+TU2MEHHzzS0vs669jymw/+tvvC/tfyp5cMc8kxgw96enp6Zj03c2f58JSiKEq/2q7y8YTKcen6uxq/0NF3FOZ1v7ToxKSfNx89uPr0Rxq6jt1f33u2vrhp3YZNLR8bUxTh4vqio3TQUFcUYWF9cV/poLF0sKi+eKR0MLP34NTi26WD89ds2bS2dGJx9PcM/lc0Ne8qxg4pthjyt8Hg/nc1fuvO/tcql+y/2rii3P8Vnd9/q+Jz/Ubov//6YX5l/zX/AYER1db/C/P6X6tc8l/u/xOfWvHKcJ8buf/+64eP6x/SGeb5f0ijlc/9Fc//04a55MD+qrrOE6X+L73t2enlU+P+nef/d68fLq7sf8yQ5//Sc/yC/uf/U4oiXDLKbwe8pzQ17z5a7f5fvf9xUys2dYP7P6Nty4FS/48v+t4T5VP1Nfa/oMr9f8ziit8rUJum5i/3VNz/a+i/+Mgwlxzo/+0nfv1wqf/Hfv/AmYM+V0v/l1T2P6O9deuMbTs6z9vQump9y/qWzQ0z586a09gw54LZM3ofCfo+jvK7Au8No7v/FxMrNnVF0TKwv6br4NOl/mc/+OCs8qkJNfa/sOr9f5r7PwzrQ2OK8eOLjlXt7W0NfR/7Dxv7PvZ92TD91/Dz/1nnlL+svvxaVxRTBvZ3nXn3slL/7xx+dk/51Pga+19Utf95A78uEGGU9/+1FZsh/R86/FLv8/+Sew+dUT5V68//i6v2/6r7P4xGU3PFv/DzH1bqf3dxWWSnock//4N0cvT/2Ds3dMetwyf0D+nk6P93nzt2btw6LNE/pJOj/3EbH3g+bh0u1T+kk6P/pZPnLotbh8v0D+nk6H/Nq+f+OW4dmvUP6eTo/5wv7emIW4el+od0cvT/UNus7XHrsEz/kE6O/n962kOvxa3D5fqHdHL0f/z4PTfGrcMV+od0cvTftffsH8Stw5X6h3Ry9H/5uvkhbh2u0j+kk6P/qVP++HjcOlytf0gnR/9z/vT30+LW4Rr9Qzo5+r/j88v2x63DtfqHdHL0P/b6V16MW4fl+od0cvS/+Ozt8+PW4Tr9Qzo5+l/7k7U9ceuwQv+QTo7+Z3z9Rxvi1uF6/UM6Ofo/svTRvSN/xc4q63CD/iGdHP3vbSgmxa3DjfqHdHL0/7Xvnn44bh0+qX9IJ0f/v3nqyblx67BS/5BOjv6f+8Dt34hbh5v0D+nk6P/e1S+eFbcOq/QP6eTo/+F9z38xbh1W6x/SydH/G2+0/l/cOqzRP6STo/+JE059PW4d1uof0snR//xbv9IWtw4t+od0cvTfuqfrh3HrsE7/kE6O/j98YsqKuHVYr39IJ0f/y2fve3/cOtysf0gnR//vW3Lh7rh12KB/SCdH/xd1f/SiuHXYqH9IJ0f/7c989qtx63CL/iGdHP3vm/7awrh12KR/SCdH/y+vXPzjuHVo1T+kk6P/tx69bnPcOmzWP6STo/8nf/b28bh12KJ/SCdH//9/wYK/xq3DVv1DOjn6X7jozTVx6/Ap/UM6Ofrf2PWPl+PWoU3/kE6O/qcfuXpJ3Dps0z+kk6P/75zXcCBuHdr1D+nk6P/OK/c3xq3Ddv1DOjn6P3Dorrvj1uFW/UM6Ofp/8xfTpsatw6f1D+nk6P/+SYevjVuHDv1DOjn6/+Xm+mfi1mGH/iGdHP3/bf/kav+T3ypCp/4hnRz9P/169x/i1uE2/UM6OfpfOe5X4+PW4Xb9Qzo5+p/cufW+uHW4Q/+QTo7+596z6vy4dfiM/iGdHP1v+8sL34xbh536h3S27ei8ZdWmTS1t3njjjTcDb07230xAau9Gf7J/JwAAAAAAAAAAAAAAwEhy/OdEJ/vPCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rIHo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+AoAAP//Yjnm1A==") ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x1c3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffbffa003e458, 0x1000000000000000) 12m35.736020462s ago: executing program 2 (id=132): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r1, 0x0, 0x0) 12m32.573059247s ago: executing program 2 (id=141): lseek(0xffffffffffffffff, 0x3, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file1\x00', 0x200800, &(0x7f0000000140)={[{@filestreams}, {@uqnoenforce}, {@noikeep}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@quota}]}, 0xc2, 0x96c1, &(0x7f0000009680)="$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") ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x1c3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffbffa003e458, 0x1000000000000000) 12m31.620047509s ago: executing program 2 (id=142): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000002c0)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX], 0xfe, 0x122d, &(0x7f0000001280)="$eJzs3E9rXFUYB+C3k7Spifmj1moF6cFudHNJsnCjIEFSkA4obSO0gnBrJjrkOhNyh8CIGF25deMHcCsu3QniTjdx4Wdwl41LF+qVzKQxsaODVHtreZ7NHOY9P3gPZ7hwhjmz/+In725ulNlG3ovGqZeisRUx+WuKFI247cN47oVvv3v62o2bV1aazdWrKV1eub70fEpp7uLXb7z/xTPf9GZe/3Luq6nYW3hz/6flH/fO713Y/+36O+0ytcvU6fZSnm51u738VtFK6+1yM0vptaKVl63U7pSt7RP1jaK7tdVPeWd9dnpru1WWKe/002arn3rd1Nvup/ztvN1JWZal2engbqx9/nNVVRFVdTrORFVV1UMxHY14OGZjLuZjIR6JR+OxOBePx/l4Ip6MC4NZdfcNAAAAAAAAAAAAAAAAAAAAD5ZR9/9n7rj//2nEqPv/F2tuHgAAAAAAAAAAAAAAAAAAAB4Q127cvLLSbK5eTelsRPHxztrO2vB1WF/ZiHYU0YrFmI9fYnD7f2g4PhPN1cU0sBAfFbuH+d2dtYmT+aXB3wnckb/8SnN1aZhPJ/NTMX08vxzzcW50fvlP+UuD/Nl49tKxfBbz8cNb0Y0i1uMg+0f+g6WUXn61eZT/fm+49vUa9wUAAAD+TVk6MvL8nmV/VR/mx30/cHC+Xhx5vp+MpybrXTsRZf+9zbwoWtt1DBoRcfTO7Y6Gpd3jpf/p4GB590EbfzM4PXbOTA2NfTYTcRfxiRMfpLGpU4fT696L+20w7skx8Z89k7h3Djd9qu4+AAAAAAAAAAAA+Gfuxc8J614jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ds7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+CgAA//94WMN6") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000000)={0x58f5, 0x4ffff, 0x400, 0x101, 0xfffffffe, 0x2, 0x2401}) 12m30.014865416s ago: executing program 2 (id=147): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x188) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002440), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002480)=0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000008000000080000000000", @ANYRES32=0x0], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x4) 12m29.571691027s ago: executing program 33 (id=147): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x188) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002440), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002480)=0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000008000000080000000000", @ANYRES32=0x0], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x4) 12m1.587042581s ago: executing program 0 (id=294): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)="145d9deef427c5fc13b1a143dd66ca7a799aa19d5fb85ddb9e1157d37bc0771f19e201be85964ed07001ed2c9be8307abfd1d5d8e74727530b97ad410523ff69d22fef276e83b41ee0f9b8364efb0d36fa7ed193af665f43ca35cc"}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a", 0x19}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 12m1.322167598s ago: executing program 5 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94) 12m0.902953188s ago: executing program 0 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) 12m0.646367883s ago: executing program 0 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8c01, 0x0) close(r2) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) 12m0.257266173s ago: executing program 0 (id=303): socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') 11m59.09673569s ago: executing program 0 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x1c9082, 0x100) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002440)={0x0, @in6={{0xa, 0x4e23, 0x4, @private0, 0x9}}, 0x4, 0x2}, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) getrlimit(0xf, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 x00000000ffffff7', 0x32) 11m58.095853573s ago: executing program 5 (id=310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x200c02, &(0x7f0000000180)={[{@nogrpid}]}, 0x0, 0x9764, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQJGcc84555xzzjnn+D3L7iquB/S+331fvPec8zy7M11dVVP9/3VXzUz1dC85z2JzDgyMPjC0KQZG7JY751xo4x3nvGKfnfY8ZYoxx5982ORhC0w67OKkg4Z9HGlgYGCkYesZNm2sR088aaSBUd6d/vfGGmPMQeMMDEw37OLswz7ONPTDRI8Nn++dERpxQwf97eKg7Yf+e7fxhnyJIZ8sffOF5wwMDIz/nuWHLDLNP91QaUvOMe88f7f6m9sQq8HDPn/vv1GH/pvogYGBie4d4PvHe+cd9CHcpCFfc/wdHxx93Q/ha/+Pa8k55p1vBP8hj8WRh02bachjfMTHoLER7+c3rzLr7sOG8N3728DAkF3cPzxW/ke05BzzLDDw/vv5gYfHHPeMd97db4717MDAWM8NDIz1/MDAWC8MDIz14sDAWC992C71/6855px+ziGP9+GXh7EPvy+PT/eLfVZ/ce+BgYHRhs4z1ttDjxdjTzH8mFBVVVX/2c0x5/RzwfF/9A86/m+19Ry3dvyvqqr6n9t8c8w5/ZDj+AjH/7E/6Pj/vRtvXGPo7/5nn2noUm9/uDeiqqqq/kvNMx8e/8f/oOP/eDtcv3/H/6qqqv+5Lbrgu8f/sUc4/k/8Qcf/Nea/87Jh8w3/vuGt96zy3eePDZv+xnumj/ye6a+/Z/rg96znvfOP+p7pr75n+ugDA2M9Omz6m3+fPNazQ5b55/WM9fLfn48z6Sjvmf7Ke6aP+p7prw7bpiHTR3vP9LfeM//of58+9pD/phj2dV/7gKGuqqr6j2nR6eeZa+A9z7MfNnn4E/vxeaHHHLP1XR/W9lZVVVVVVVXVf723nzr97L//zfcnB97zt6t/+xvWYb8XGHTsudde+6Ft6H9Gg/759yFbfNjb9P+3Ic6jHz7FwMBaS3zYm1IfQv9j/la9/q+Uv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5/z/3/7+/+Be7+0w7BZZ5nszvsW+/uSkw6sNuyzW+6cc6HVPoRt/xD633r+f2C1QQMDw3zHH2K50ByLLj7VwMDAYvfdOdmMA3+7buYh18064cjv/jHnwMBU7/4/eNL3WfOwd1l4980dJv7bOo59d/3zvbPfyING2Ij3NNs59x+06pKvzDDixy+8/+342/tLLPXyflMO/1uWkUaYafT3WXj4+offlhGdh237VEO2feoN1lxn6vU33uSrq625/CorrbLSWtNNN+0M0884w3Rfn2XqlVdbY6Vphv7/PmM29K0rRv53xmzsEcfsqTneO2Yj3rYJTj4Ix+yf39XjH1bx7hrPm+3hy4eP2Sj/5pgN/3ojf/CYTbHasC806cDggeXeHZpBAwOTjjJ4YKMhF6YdbWBg0sHD5p10yLzfnHCkgYEd/35DBw17sdGh8wzaYsg8/2HvWzLLsBHZdPh8I77O+ogb+q/et+SEsXe5c4T3Lfm/1f/R8f+fvGYe9LeBGv4GCMPmGer1Ib/PxD9t7xSjvHuQe7/t/YDXxXk3un+tuepjS/x3vS4Obe/YH7C9H/A6fu+7vVNN+8weQ1f137a9I+zrFhh65b+zrxv44H3dyLT8SldNPuK+bv7338R/eBwPH6PRRpjp/fZ1O85/3uZD1j/wwfu6BVYb9uIBf9/XjTQwMOnIw/d1Q3Z8ow4e2HHIhemGXBht8MChQy5M/+6FMQbOHXLhayusvcaKg959mYFh651myHpnn3DQ0AfQTQetOtou77wzyrBteXmsf9zWYfePKd57PJ9jwmGDOWzZ4esdMuvw9b66zdDrRh223lf+C+sdvixt76RnDb1utGHrfXWE9Q7+gPUOX/afHg9TDfqHJ6rC/uZDfV8jevyO/gHb+wGvw433t3fdp1z24f+G1+Ee9H7bO8oHb+/7vW/I+27v45c/se9/1+uG0/3s3n2G3ldGH3Y/e+u/cP8dvuyI+7GhLwQydLc/+r+zH5vin/ZjW4480giD/Z7e7/vcFWH+YY+Iv61txQNfWW342A8eYb3/6vvc99yWQbAfG3+En+cGbb7vwCAa80fXeGHDt3f+4DEfPPCPP1sMH/Phy37QmI/274z5Jz54zEf8Pvn9xnyqzw69fvAI2//eMV9kt9lvGj7mo46w3n815qN98LHjn8d8YGAwjfmOkw0dtw/an77fmA9fdviYD/k6s044ysDcAwMDUw4b81H/nTGf9L/nfj4mzD/085X+NunZGRf+yvAxH3GM/9WYj/pfHPPN7v3b/XzKd6/7zEgDo446sNHyG2yw3rRD/x9+cbqh//O+6NkVh47zBx1L389o+LIf9LgY5d8xGv/fMhr0r4wmG+X9jP7+0Br5oEWf+z/dF43yXzU6l/dFp847dNw+6Pui9xvz4cvScXDi9yw/4s+hH/D6WXib3h2f+bcd/vPef8LrZw3/efd/5OtnDf+d5Goj7uTr363f/7vL313+7vJ3l7+49zn/P8Xw8//vjH3AJMN+6Bx81cy3zv5hb++H3P/q8//DfP/h/P/st8581ZAfrYZd94HnZ4fO8x95fnamoR8memz4fCOeHxxxQ//V+dl9dt3gqv9H52f/jxr+WP03fi5u/+8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9z7n/6cZ/jyAhxZf6PvDToQO3nTaozb9sLf3Q+5/9fn/Yb7/cP5/06Om3XSkgb9d94Hn/4fO4zj/f/+Cmy/zn3z+f/hjtfP/9S/K313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvc/5/9mHPw/giNnm/tzw5wPcsN1+e3zY2/sh97/1/H/v/++t/b+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3LDz/wMjvE3iwt0vMDj//z+79/FfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/j/IH7P4/zB/zOK/ZP6YxX+p/DGL/4/yxyz+P84fs/gvnT9m8V8mf8ziv2z+mMX/J/ljFv/l8scs/svnj1n8f5o/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/LH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/r/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+ePWfy3yh+z+P8mf8ziv3X+mMX/t/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9d/pjF//f5Yxb/HfLHLP5/yB+z+P8xf8ziv2P+mMV/p/wxi/+f8scs/jvnj1n8d8kfs/jvmj9m8f9z/pjF/y/5Yxb/3fLHLP5/zR+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6DBvLHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4j9J/pjF/6P5Yxb/SfPHLP4fyx+z+E+WP2bx/3j+mMX/E/ljFv/J88cs/p/MH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8P5s/ZvGfMn/M4v+5/DGL/+fzxyz+X8gfs/hPlT9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/+v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Rv6YxX/W/DGL/zfzxyz+s+WPWfy/lT9m8f92/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v5M/ZvGfO3/M4j9P/pjFf978MYv/d/PHLP7z5Y9Z/L+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+ePWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/H+SPWfx/mD9m8V8yf8ziv1T+mMX/R/ljFv8f549Z/JfOH7P4L5M/ZvFfNn/M4v+T/DGL/3L5Yxb/5fPHLP4/zR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/X+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/+v88cs/lvlj1n8f5M/ZvHfOn/M4v/b/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/y5/zOL/+/wxi/8O+WMW/z/kj1n8/5g/ZvHfMX/M4r9T/pjF/0/5Yxb/nfPHLP675I9Z/HfNH7P4/zl/zOL/l/wxi/9u+WMW/7/mj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vzf25bDP7H4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvF/99P8/zmL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4T5I/ZvH/aP6YxX/S/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+E+RP2bx/3T+mMX/M/ljFv/P5o9Z/KfMH7P4fy5/zOL/+fwxi/8X8scs/lPlj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/ev6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+RP2bxnzV/zOL/zfwxi/9s+WMW/2/lj1n8v50/ZvGfPX/M4j9H/pjFf878MYv/XPljFv/v5I9Z/OfOH7P4z5M/ZvGfN3/M4v/d/DGL/3z5Yxb/7+WPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/x/mj1n8l8wfs/gvlT9m8f9R/pjF/8f5Yxb/pfPHLP7L5I9Z/JfNH7P4/yR/zOK/XP6YxX/5/DGL/0/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/ef6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx/2X+mMX/V/ljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/+v8MYv/VvljFv/f5I9Z/LfOH7P4/zZ/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP6/yx+z+P8+f8ziv0P+mMX/D/ljFv8/5o9Z/HfMH7P475Q/ZvH/U/6YxX/n/DGL/y75Yxb/XfPHLP5/zh+z+P8lf8ziv1v+mMX/r/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/5IH8MYv/oPwxi/9I+WMW/5Hzxyz+o+SPWfwH549Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+H8kfs/hPkj9m8f9o/pjFf9L8MYv/x/LHLP6T5Y9Z/D+eP2bx/0T+mMV/8vwxi/8n88cs/p/KH7P4T5E/ZvH/dP6Yxf8z+WMW/8/mj1n8p8wfs/h/Ln/M4v/5/DGL/xfyxyz+U+WPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f96/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5E/ZvGfNX/M4v/N/DGL/2z5Yxb/b+WPWfy/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/+/kj1n8584fs/jPkz9m8Z83f8zi/938MYv/fPljFv/v5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF//v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/wf5Yxb/H+aPWfyXzB+z+C+VP2bx/1H+mMX/x/ljFv+l88cs/svkj1n8l80fs/j/JH/M4r9c/pjFf/n8MYv/T/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv+f5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8f95/pjF/xf5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvH/Zf6Yxf9X+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOL/6/wxi/9W+WMW/9/kj1n8t84fs/j/Nn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/LH7P4/z5/zOK/Q/6Yxf8P+WMW/z/mj1n8d8wfs/jvlD9m8f9T/pjFf+f8MYv/LvljFv9d88cs/n/OH7P4/yV/zOK/W/6Yxf+v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/DVf7vjPfvzmnxP0Ll/+9n8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5YxL/UQbyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyR/zOI/Sf6Yxf+j+WMW/0nzxyz+H8sfs/hPlj9m8f94/pjF/xP5Yxb/yfPHLP6fzB+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/D+bP2bxnzJ/zOL/ufwxi//n88cs/l/IH7P4T5U/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf/r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0b+mMV/1vwxi/8388cs/rPlj1n8v5U/ZvH/dv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+TP2bxnzt/zOI/T/6YxX/e/DGL/3fzxyz+8+WPWfy/lz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/nj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/kj1n8f5g/ZvFfMn/M4r9U/pjF/0f5Yxb/H+ePWfyXzh+z+C+TP2bxXzZ/zOL/k/wxi/9y+WMW/+Xzxyz+P80fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/lj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/1/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/PHLP5b5Y9Z/H+TP2bx3zp/zOL/2/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8uf8zi//v8MYv/DvljFv8/5I9Z/P+YP2bx3zF/zOK/U/6Yxf9P+WMW/53zxyz+u+SPWfx3zR+z+P85f8zi/5f8MYv/bvljFv+/5o9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vtJ/Uf7F9db/PeX+v+rLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/wQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP+pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8J8kfs/h/NH/M4j9p/pjF/2P5Yxb/yfLHLP4fzx+z+H8if8ziP3n+mMX/k/ljFv9P5Y9Z/KfIH7P4fzp/zOL/mfwxi/9n88cs/lPmj1n8P5c/ZvH/fP6Yxf8L+WMW/6nyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/PX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/IH7P4z5o/ZvH/Zv6YxX+2/DGL/7fyxyz+384fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/938scs/nPnj1n858kfs/jPmz9m8f9u/pjFf778MYv/9/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/w/zxyz+S+aPWfyXyh+z+P8of8zi/+P8MYv/0vljFv9l8scs/svmj1n8f5I/ZvFfLn/M4r98/pjF/6f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/z/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/PH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/3X+mMV/q/wxi/9v8scs/lvnj1n8f5s/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv/f5Y9Z/H+fP2bx3yF/zOL/h/wxi/8f88cs/jvmj1n8d8ofs/j/KX/M4r9z/pjFf5f8MYv/rvljFv8/549Z/P+SP2bx3y1/zOL/1/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/2kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfwnyR+z+H80f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/Mn/M4v+r/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/df6YxX+r/DGL/2/yxyz+W+ePWfx/mz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/lj1n8f58/ZvHfIX/M4v+H/DGL/x/zxyz+O+aPWfx3yh+z+P8pf8ziv3P+mMV/l/wxi/+u+WMW/z/nj1n8/5I/ZvHfLX/M4v/X/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/6QP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j+h2P+dzd//Oov/RGL/D8riP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8xkD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0nyxyz+H80fs/hPmj9m8f9Y/pjFf7L8MYv/x/PHLP6fyB+z+E+eP2bx/2T+mMX/U/ljFv8p8scs/p/OH7P4fyZ/zOL/2fwxi/+U+WMW/8/lj1n8P58/ZvH/Qv6YxX+q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X88fs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/838scs/rPmj1n8v5k/ZvGfLX/M4v+t/DGL/7fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/nfwxi//c+WMW/3nyxyz+8+aPWfy/mz9m8Z8vf8zi/738MYv//PljFv8F8scs/gvmj1n8F8ofs/h/P3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/IH/M4v/D/DGL/5L5Yxb/pfLHLP4/yh+z+P84f8ziv3T+mMV/mfwxi/+y+WMW/5/kj1n8l8sfs/gvnz9m8f9p/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/7P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/j/In/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/MH7P4/yp/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+dP2bx3yp/zOL/m/wxi//W+WMW/9/mj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/d/ljFv/f549Z/HfIH7P4/yF/zOL/x/wxi/+O+WMW/53yxyz+f8ofs/jvnD9m8d8lf8ziv2v+mMX/z/ljFv+/5I9Z/HfLH7P4/zV/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH5P4jzmQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/I5n/aP/mfBb/jWX+/24W/03yxyz+v8wfs/j/Kn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f50/ZvHfKn/M4v+b/DGL/9b5Yxb/3+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf93+WMW/9/nj1n8d8gfs/j/IX/M4v/H/DGL/475Yxb/nfLHLP5/yh+z+O+cP2bx3yV/zOK/a/6Yxf/P+WMW/7/kj1n8d8sfs/j/NX/M4r97/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPNZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I89kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0ne1//td9555//Npv0nZvH/aI9/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8p/SINGHAOL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP7jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/SP6YxX+S/DGL/0fzxyz+k+aPWfw/lj9m8Z8sf8zi//H8MYv/J/LHLP6T549Z/D+ZP2bx/1T+mMV/ivwxi/+n88cs/p/JH7P4fzZ/zOI/Zf6Yxf9z+WMW/8/nj1n8v5A/ZvGfKn/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/jfwxi/+s+WMW/2/mj1n8Z8sfs/h/K3/M4v/t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyd/zOI/d/6YxX+e/DGL/7z5Yxb/7+aPWfznyx+z+H8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/j/MH/M4r9k/pjFf6n8MYv/j/LHLP4/zh+z+C+dP2bxXyZ/zOK/bP6Yxf8n+WMW/+Xyxyz+y+ePWfx/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8sf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/zxyz+v8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v88cs/r/KH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f549Z/LfKH7P4/yZ/zOK/df6Yxf+3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/13+mMX/9/ljFv8d8scs/n/IH7P4/zF/zOK/Y/6YxX+n/DGL/5/yxyz+O+ePWfx3yR+z+O+aP2bx/3P+mMX/L/ljFv/d8scs/n/NH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938sck/uMO5I9Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9I/pjFf5L8MYv/R/PHLP6T5o9Z/D+WP2bxnyx/zOL/8fwxi/8n8scs/pPnj1n8P5k/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/h/Nn/M4j9l/pjF/3P5Yxb/z+ePWfy/kD9m8Z8qf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/1/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+N/DGL/6z5Yxb/b+aPWfxnyx+z+H8rf8zi/+38MYv/7PljFv858scs/nPmj1n858ofs/h/J3/M4j93/pjFf578MYv/vPljFv/v5o9Z/OfLH7P4fy9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fzx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+P8wf8ziv2T+mMV/qfwxi/+P8scs/j/OH7P4L50/ZvFfJn/M4r9s/pjF/yf5Yxb/5fLHLP7L549Z/H+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yx/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP6/yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/1/nj1n8t8ofs/j/Jn/M4r91/pjF/7f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Xf6Yxf/3+WMW/x3yxyz+f8gfs/j/MX/M4r9j/pjFf6f8MYv/n/LHLP47549Z/HfJH7P475o/ZvH/c/6Yxf8v+WMW/93yxyz+f80fs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+4w3kj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/0j+mMV/kvwxi/9H88cs/v8fe/SUNgoBQAHwVn/mY7Zt27Zt27Zt27Zt27Zt673vrKAzs4UZ1X/U8j+a/6jlf3T/Ucv/GP6jlv8x/Uct/2P5j1r+x/YftfyP4z9q+R/Xf9TyP57/qOV/fP9Ry/8E/qOW/wn9Ry3/E/mPWv4n9h+1/E/iP2r5n9R/1PI/mf+o5X9y/1HL/xT+o5b/Kf1HLf9T+Y9a/qf2H7X8T+M/avmf1n/U8j+d/6jlf3r/Ucv/DP6jlv8Z/Uct/zP5j1r+Z/YftfzP4j9q+Z/Vf9TyP5v/qOV/dv9Ry/8c/qOW/zn9Ry3/c/mPWv7n9h+1/M/jP2r5n9d/1PI/n/+o5X9+/1HL/wL+o5b/Bf1HLf8L+Y9a/hf2H7X8L+I/avlf1H/U8r+Y/6jlf3H/Ucv/Ev6jlv8l/Uct/0v5j1r+l/Yftfwv4z9q+V/Wf9Tyv5z/qOV/ef9Ry/8K/qOW/xX9Ry3/K/mPWv5X9h+1/K/iP2r5X9V/1PK/mv+o5X91/1HL/xr+o5b/Nf1HLf9r+Y9a/tf2H7X8r+M/avlf13/U8r+e/6jlf33/Ucv/Bv6jlv8N/Uct/xv5j1r+N/Yftfxv4j9q+d/Uf9Tyv5n/qOV/c/9Ry/8W/qOW/y39Ry3/W/mPWv639h+1/G/jP2r539Z/1PK/nf+o5X97/1HL/w7+o5b/Hf1HLf87+Y9a/nf2H7X87+I/avnf1X/U8r+b/6jlf3f/Ucv/Hv6jlv89/Uct/3v5j1r+9/Yftfzv4z9q+d/Xf9Tyv5//qOV/f/9Ry/8B/qOW/wP9Ry3/B/mPWv4P9h+1/B/iP2r5P9R/1PJ/mP+o5f9w/1HL/xH+o5b/I/1HLf9H+Y9a/o/2H7X8H+M/avk/1n/U8n+c/6jl/3j/Ucv/Cf6jlv8T/Uct/yf5j1r+T/Yftfyf4j9q+T/Vf9Tyf5r/qOX/dP9Ry/8Z/qOW/zP9Ry3/Z/mPWv7P9h+1/J/jP2r5P9d/1PJ/nv+o5f98/1HL/wX+o5b/C/1HLf8X+Y9a/i/2H7X8X+I/avm/1H/U8n+Z/6jl/3L/Ucv/Ff6jlv8r/Uct/1f5j1r+r/Yftfxf4z9q+b/Wf9Tyf53/qOX/ev9Ry/8N/qOW/xv9Ry3/N/mPWv5v9h+1/N/iP2r5v9V/1PJ/m/+o5f92/1HL/x3+o5b/O/1HLf93+Y9a/u/2H7X83+M/avm/13/U8n+f/6jl/37/Ucv/A/6jlv8H/Uct/w/5j1r+H/Yftfw/4j9q+X/Uf9Ty/5j/qOX/cf9Ry/8T/qOW/yf9Ry3/T/mPWv6f9h+1/D/jP2r5f9Z/1PL/nP+o5f95/1HL/wv+o5b/F/1HLf8v+Y9a/l/2H7X8v+I/avl/1X/U8v+a/6jl/3X/Ucv/G/6jlv83/Uct/2/5j1r+3/Yftfy/4z9q+X/Xf9Ty/57/qOX/ff9Ry/8H/qOW/w/9Ry3/H/mPWv4/9h+1/H/iP2r5/9R/1PL/mf+o5f9z/1HL/xf+/2tgUNH/l/6jlv+v/Ect/1/7j1r+v/Eftfx/6z9q+f/Of9Ty/73/qOX/B/9Ry/+P/qOW/5/8Ry3/P/uPWv5/8R+1/P/qP2r5/81/1PL/u/+o5f8P/1HL/5/+o5b/v/xHLf9/+49a/v/xH5X8jzLIf9TyP5j/qOV/cP9Ry/8Q/qOW/wH/Ucv/kP6jlv+h/Ect/0P7j1r+h/EftfwP6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzL3t3G5lUWfhw/Xds9/dm/m3N4DRkMNt3Ela1dmQw2H+pjwVQdiwETyBZWRqUw9xDcQK0GJQZjmIwEEXWbugkkxowXwwSElUQlTkXjRDTEIaiLmBomMqJxqbnb3qW91zbrVa9rL/b5vGjvc8rvdFvy3TllawYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEqbt91yw9qOjrZNXnjhhRcDL07170xAaq9Ff6p/JAAAAAAAAAAAAAAAwEhyfDvRqf45AgAAAADA6aal9V3d1VVDTlUPPpjz87be902vXnn9nucfX1l+3//hy4e55ITBBz09PT0vNXfN7D+cVBRF6bNN7z+eXDkuXb+z6/LtfUeh+O2zza3btjcf3PmVrz88d+r0ObW9Z2uLNde1d7QtmVAUobq22Fo6aKgqijCxttheOmgsHUyqLe4vHSztPZhSHCgdXHjtho51pRMnfGo47bS0fraoHlJsMeR3g8H9d3Zt2lV+P8oly1erKfr7r2v+4d6Kj5WN0H/5+qGqsv8x/wSBEY2t/9sXlt+PcskT7v+PttetGu5jI/dfvn6YoH9IZ5jn/yGN9j7v79k/Y4Tn/7nDXHJg/9O/rOwq9X/TL1+o7z9VczLP/6XP13cUqiv7nzDk+b/0HF9Tfv6fVBShdpy/HHBaaWn9XPdo9//K7of2X3NWxaZqcP9HV+2pLvV/+K4H3t9/qvak+h+4fqgZ5f5f9ZkDQ3+swNi0tO7uqbj/j6H/YsEwlxzof/7uY1eV+j9j55F9gz42lv5rK/tfvOXGTyzevO2W+vYb165vW992U2NjQ9PSZU2NFy1f3PtI0Pd2nL8qcHoY3/2/mFqxqSqKtoH9og8ve6nU/8Fz//G3/lOTx9j/xFHv/8+5/8Owzp9QTJxYbF27Zcumhr635cPGvrd9/9kw/Z/49f+I/c8r/3/A8tfdpS/IB/a/eedXP1Lq/95Jqx7oPzVxjP1PGq3/ztc+LxBhnPf/dRWbIf23v/qddaX+//TK8UP9p8b69f/kUfvf5f4P49HSWvEXfv7HSv2v/tfh4f6c4CSEKf78D9LJ0f/Wab/4Ztw6TNU/pJOj/6Wb2yL/sm34P/1DOjn6/9WOqiNx63CG/iGdHP1/rfvBjXHrME3/kE6O/vfPfuSpuHX4f/1DOjn6P75++lVx61Cnf0gnR/+XfWnv6rh1mK5/SCdH/1WvTHsibh1m6B/SydF/fdXZn4pbh9fpH9LJ0f91nQ+/GLcOM/UP6eTo//M7fx35fTrh9fqHdHL0/9Qft+6IW4dZ+od0cvT/wqz2+rh1OFP/kE6O/u+/4YlH4tbhDfqHdHL0//S3Pngsbh2C/iGdHP1/49kja+LWYbb+IZ0c/e9beOwPcetwlv4hnRz9//ujV38gbh3eqH9IJ0f/Yf/y78atw9n6h3Ry9H/Fk3c1xK3DHP1DOjn671xx251x63CO/iGdHP03NS+cHbcO5+of0snR/4w///3uuHWYq39IJ0f/H7vvvZX/7vdJCufpH9LJ0f/NG1Y/GrcO5+sf0snR/8oZPRfErcM8/UM6Ofo/fPS+H8Wtw3z9Qzo5+r/7ziVXxK3Dm/QP6eTo/we3ntcdtw5v1j+kk6P/l2vvuDVuHRboH9LJ0f+Xf1azLG4dFuof0snR/48f+v6uuHV4i/4hnRz9v/i+x86JW4cL9A/p5Oh/98Wzvhi3Dm/VP6STo/93P7Nxfdw6LNI/pJOj/8l7f380bh3q9Q/p5Oh//qqDH4pbhwv1D+nk6H/DojW/i1uHxfqHdHL0/8yBpw/FrcMS/UM6Ofrf8dinm+PWoUH/kE6O/h+/rOM/cevQqH9IJ0f//2z6ycfj1mGp/iGdHP2feejbX4hbhyb9Qzo5+r/6wckz49bhIv1DOjn633jN7O/FrcMy/UM6Ofq/ZO5Dl8atw9v0D+nk6P89f11xc9w6XKx/SCdH/3X33PNc3Dos1z+kk6P/edfefk3cOlyif0gnR//Xz6l/Mm4dLtU/pJOj/zuOtyyIW4cV+od0cvTfddvz++LWYaX+IZ0c/Xd/8uW6uHV4u/4hnRz9751y5b1x6/AO/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAD//xDC0no=") openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 11m57.514661267s ago: executing program 5 (id=313): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4844) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) 11m57.470319858s ago: executing program 0 (id=314): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 11m56.226931377s ago: executing program 5 (id=321): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 11m56.069394411s ago: executing program 5 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x1c9082, 0x100) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002440)={0x0, @in6={{0xa, 0x4e23, 0x4, @private0, 0x9}}, 0x4, 0x2}, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) getrlimit(0xf, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 x00000000ffffff7', 0x32) 11m53.366020564s ago: executing program 5 (id=328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r5 = memfd_create(0x0, 0x2) ftruncate(r5, 0xffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086203, 0x0) 11m53.176137838s ago: executing program 4 (id=330): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 11m52.945566064s ago: executing program 4 (id=332): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000000000700000000000000000000000201000000040000000000000e0200000000000000000000002e"], 0x0, 0x47, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r0, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/140, 0x8c}}, 0x10) 11m52.766809908s ago: executing program 4 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8c01, 0x0) close(r2) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) 11m52.136620532s ago: executing program 4 (id=335): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0xa5dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x4044810) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x20) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11m51.676800513s ago: executing program 4 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x1c9082, 0x100) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002440)={0x0, @in6={{0xa, 0x4e23, 0x4, @private0, 0x9}}, 0x4, 0x2}, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) getrlimit(0xf, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 x00000000ffffff7', 0x32) 11m50.353916664s ago: executing program 4 (id=338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) 11m41.218123028s ago: executing program 34 (id=314): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 11m37.30705332s ago: executing program 35 (id=328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r5 = memfd_create(0x0, 0x2) ftruncate(r5, 0xffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086203, 0x0) 11m34.927099005s ago: executing program 36 (id=338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) 8m5.422543197s ago: executing program 7 (id=1522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x10000000, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x3ff, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x85, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xffff5048, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x4, 0x7, 0x3a, 0x8, 0x9}, {0x8000, 0x57, 0x0, 0x1, 0x10008000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x106, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0x4}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0x1, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x8, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0xfffffffc, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x7, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x1, 0x800, 0x8}, {0x5, 0xb382, 0x1, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x7}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x401, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0x5bf}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0xc4756f4c1940b888}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 8m0.688923247s ago: executing program 7 (id=1536): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 7m59.570702514s ago: executing program 7 (id=1548): r0 = fsopen(&(0x7f0000000280)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) 7m59.374765278s ago: executing program 7 (id=1549): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mlockall(0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000e40)={0x0, 0x3938700}, 0x0, 0x0) 7m59.116312774s ago: executing program 7 (id=1552): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x20) 7m57.378685045s ago: executing program 7 (id=1557): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x801, 0x0, 0x7, "0062ba7d82000000ddf8ff0400"}) r2 = syz_open_pts(r1, 0x900) dup3(r2, r1, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m56.959847774s ago: executing program 37 (id=1557): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x801, 0x0, 0x7, "0062ba7d82000000ddf8ff0400"}) r2 = syz_open_pts(r1, 0x900) dup3(r2, r1, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m39.330966611s ago: executing program 8 (id=3316): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000340)={0x80, 0x101, 0x4, 0xa3, 0x4, "43fbad1d35d8b71e77b8a84c9ab4242536e50b"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) 2m39.112473406s ago: executing program 8 (id=3319): socket(0x2, 0x3, 0xff) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket(0x15, 0x5, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2m38.96519243s ago: executing program 8 (id=3320): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005e", @ANYRES32=0x0, @ANYRES8=r0], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) recvfrom(r0, 0x0, 0x0, 0x200, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000001440)=ANY=[], 0x610}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240"], 0x7c}}, 0x0) socket(0x1d, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r5, 0xf5f) accept(r5, 0x0, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 2m37.975069633s ago: executing program 8 (id=3327): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000340)={0x80, 0x101, 0x4, 0xa3, 0x4, "43fbad1d35d8b71e77b8a84c9ab4242536e50b"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x340a) 2m37.796977177s ago: executing program 8 (id=3329): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c00010100803209040000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m36.223238003s ago: executing program 8 (id=3341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000140001002bbd7000fbdbdf25000000000000000000000000000000007f00000100000000000000000000000000000080000700000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000c0008"], 0x68}}, 0x4004040) 2m21.174407881s ago: executing program 38 (id=3341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000140001002bbd7000fbdbdf25000000000000000000000000000000007f00000100000000000000000000000000000080000700000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000c0008"], 0x68}}, 0x4004040) 4.206868513s ago: executing program 3 (id=4590): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b400000000009"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 4.025187347s ago: executing program 3 (id=4592): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0x0, &(0x7f0000000080), 0x600002, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.853557082s ago: executing program 3 (id=4596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000340)="640f00577864676567460fc729675718f4f40f073e0f01c50f01c80f0133263e460f2243c4e27d0e3166ba2100ec", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.651812466s ago: executing program 1 (id=4598): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000000), 0x0, 0x2200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000080)={0x1, 0x2, 0x9, 0x679a}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x20008801) 3.544552528s ago: executing program 3 (id=4599): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x6, 0x25dfdc01, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 2.799815315s ago: executing program 6 (id=4601): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x40000802, 0x3, 0x1ff, 0x4, 0x1, 0x0, 0x13, 0x800000000000012, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff1, 0x40, 0x7, 0x6, 0xfa, 0x80006], 0xffff1000, 0x4fb20}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='100000', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.799502735s ago: executing program 1 (id=4602): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 2.695279198s ago: executing program 1 (id=4603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 2.358378526s ago: executing program 6 (id=4604): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0x0, &(0x7f0000000080), 0x600002, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.18145521s ago: executing program 6 (id=4606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_ublk_setup_io_uring(0x714c, &(0x7f0000000040)={0x0, 0x1a77, 0x1000, 0x0, 0x325}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.126045641s ago: executing program 1 (id=4607): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="7b87f20f", @ANYRESDEC], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.101165542s ago: executing program 9 (id=4608): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$nci(r0, 0x0, 0x0) 1.911003166s ago: executing program 1 (id=4609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700100dcdf250f00000008000600", @ANYRES32=0x0, @ANYBLOB="05002e000100000008002c000300000008000300", @ANYRES32=r2, @ANYBLOB="0500330001000000050030"], 0x54}, 0x1, 0x0, 0x0, 0xc005}, 0x0) 1.848102338s ago: executing program 9 (id=4610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0xa1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.74012857s ago: executing program 6 (id=4611): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[@nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x690, 0x31}}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x3}}], 0xa0}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x5, &(0x7f0000000540)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0x10004002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x8d], 0xeeee0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.622831753s ago: executing program 1 (id=4612): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0xf20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x8, 0x10}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048001}, 0x24000804) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x103, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.505059316s ago: executing program 9 (id=4613): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1.435336677s ago: executing program 6 (id=4614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100", @ANYRESHEX=r1], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 1.270327781s ago: executing program 6 (id=4615): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222300000096231b26e53f07010000002a900683749e821dab8b9236592b0004000083"], 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) 839.052761ms ago: executing program 3 (id=4616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="59cf000000000100080008"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 783.362982ms ago: executing program 3 (id=4617): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dc, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80ac1b, 0x1, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 517.513518ms ago: executing program 9 (id=4618): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x40000802, 0x3, 0x1ff, 0x4, 0x1, 0x0, 0x13, 0x800000000000012, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff1, 0x40, 0x7, 0x6, 0xfa, 0x80006], 0xffff1000, 0x4fb20}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='100000', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) 178.581906ms ago: executing program 9 (id=4619): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_ublk_setup_io_uring(0x714c, &(0x7f0000000040)={0x0, 0x1a77, 0x1000, 0x0, 0x325}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 9 (id=4620): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) kernel console output (not intermixed with test programs): ] ? capable+0x88/0xe0 [ 771.821344][T19783] __sys_bpf+0x670/0x890 [ 771.825573][T19783] ? bpf_link_show_fdinfo+0x390/0x390 [ 771.830939][T19783] ? lock_chain_count+0x20/0x20 [ 771.835777][T19783] __x64_sys_bpf+0x7c/0x90 [ 771.840174][T19783] do_syscall_64+0x55/0xb0 [ 771.844571][T19783] ? clear_bhb_loop+0x40/0x90 [ 771.849232][T19783] ? clear_bhb_loop+0x40/0x90 [ 771.853891][T19783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.859775][T19783] RIP: 0033:0x7faf9159e159 [ 771.864175][T19783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.883769][T19783] RSP: 002b:00007faf923aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 771.892170][T19783] RAX: ffffffffffffffda RBX: 00007faf91825fa0 RCX: 00007faf9159e159 [ 771.900129][T19783] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 771.908084][T19783] RBP: 00007faf9163503b R08: 0000000000000000 R09: 0000000000000000 [ 771.916043][T19783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.924013][T19783] R13: 00007faf91826038 R14: 00007faf91825fa0 R15: 00007fff48ff0b88 [ 771.931980][T19783] [ 771.935074][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.126099][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'. [ 772.162902][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 772.213502][ T8] usb 2-1: device descriptor read/8, error -71 [ 772.333217][ T8] usb usb2-port1: unable to enumerate USB device [ 772.930920][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3840'. [ 773.040434][T19815] FAULT_INJECTION: forcing a failure. [ 773.040434][T19815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.138364][T19815] CPU: 0 PID: 19815 Comm: syz.9.3841 Not tainted syzkaller #0 [ 773.145851][T19815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 773.155889][T19815] Call Trace: [ 773.159154][T19815] [ 773.162098][T19815] dump_stack_lvl+0x18c/0x250 [ 773.166769][T19815] ? show_regs_print_info+0x20/0x20 [ 773.171949][T19815] ? load_image+0x420/0x420 [ 773.176436][T19815] ? __lock_acquire+0x7d80/0x7d80 [ 773.181443][T19815] ? sort+0xaf/0xf0 [ 773.185234][T19815] ? __virt_addr_valid+0x10c/0x380 [ 773.190333][T19815] should_fail_ex+0x394/0x4c0 [ 773.195001][T19815] _copy_from_user+0x2f/0xe0 [ 773.199575][T19815] bpf_vlog_reverse_ubuf+0x122/0x3a0 [ 773.204877][T19815] bpf_vlog_finalize+0x12b/0x3e0 [ 773.209803][T19815] btf_new_fd+0x4ca/0x9e0 [ 773.214120][T19815] ? bpf_btf_show_fdinfo+0x80/0x80 [ 773.219219][T19815] ? capable+0x88/0xe0 [ 773.223275][T19815] __sys_bpf+0x670/0x890 [ 773.227502][T19815] ? bpf_link_show_fdinfo+0x390/0x390 [ 773.232867][T19815] ? lock_chain_count+0x20/0x20 [ 773.237710][T19815] __x64_sys_bpf+0x7c/0x90 [ 773.242135][T19815] do_syscall_64+0x55/0xb0 [ 773.246535][T19815] ? clear_bhb_loop+0x40/0x90 [ 773.251194][T19815] ? clear_bhb_loop+0x40/0x90 [ 773.255856][T19815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.261735][T19815] RIP: 0033:0x7fb3dc99e159 [ 773.266139][T19815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.285774][T19815] RSP: 002b:00007fb3dd7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 773.294179][T19815] RAX: ffffffffffffffda RBX: 00007fb3dcc25fa0 RCX: 00007fb3dc99e159 [ 773.302158][T19815] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 773.310134][T19815] RBP: 00007fb3dca3503b R08: 0000000000000000 R09: 0000000000000000 [ 773.318100][T19815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.326063][T19815] R13: 00007fb3dcc26038 R14: 00007fb3dcc25fa0 R15: 00007ffe3ba331a8 [ 773.334034][T19815] [ 773.337133][ C0] vkms_vblank_simulate: vblank timer overrun [ 774.114124][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 774.273028][ T8] usb 2-1: device descriptor read/64, error -71 [ 774.543328][ T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 774.703068][ T8] usb 2-1: device descriptor read/64, error -71 [ 774.835660][ T8] usb usb2-port1: attempt power cycle [ 775.263386][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 775.303549][ T8] usb 2-1: device descriptor read/8, error -71 [ 775.593140][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 775.653482][ T8] usb 2-1: device descriptor read/8, error -71 [ 775.681765][ T27] audit: type=1326 audit(1788915170.961:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.6.3868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf9159e159 code=0x0 [ 775.793262][ T8] usb usb2-port1: unable to enumerate USB device [ 775.820784][T19908] binder: BINDER_SET_CONTEXT_MGR already set [ 775.845983][T19908] binder: 19907:19908 ioctl 4018620d 200000000040 returned -16 [ 776.033775][ T2930] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 776.798873][T19942] binder: BINDER_SET_CONTEXT_MGR already set [ 776.843436][T19942] binder: 19941:19942 ioctl 4018620d 200000000040 returned -16 [ 777.084953][T19949] netlink: 'syz.6.3884': attribute type 1 has an invalid length. [ 777.130347][T19949] netlink: 'syz.6.3884': attribute type 2 has an invalid length. [ 777.323001][ T27] audit: type=1326 audit(1788915172.601:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.1.3887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb564b9e159 code=0x0 [ 777.346534][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.628726][T19973] overlayfs: failed to resolve './file1': -2 [ 777.652972][T18585] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 777.702650][T19975] binder: BINDER_SET_CONTEXT_MGR already set [ 777.713640][T19975] binder: 19974:19975 ioctl 4018620d 200000000040 returned -16 [ 777.844457][T18585] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 777.882981][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 777.896579][T18585] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 777.929501][T18585] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 777.940802][T18585] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.950349][T18585] usb 7-1: Product: syz [ 777.957096][T18585] usb 7-1: Manufacturer: syz [ 777.961741][T18585] usb 7-1: SerialNumber: syz [ 777.976452][T18585] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 777.990720][T18585] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 778.006536][T18585] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 778.063182][ T8] usb 4-1: device descriptor read/64, error -71 [ 778.185247][ T5838] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 778.362951][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 778.383017][ T5838] usb 10-1: Using ep0 maxpacket: 16 [ 778.392517][ T5838] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.413245][ T5838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.442811][ T5838] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 778.480663][ T5838] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 778.500907][ T5838] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 778.522790][ T5838] usb 10-1: Manufacturer: syz [ 778.532853][ T8] usb 4-1: device descriptor read/64, error -71 [ 778.543686][ T5838] usb 10-1: config 0 descriptor?? [ 778.653500][ T8] usb usb4-port1: attempt power cycle [ 778.969511][ T5815] usb 10-1: USB disconnect, device number 10 [ 779.072852][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 779.113431][ T8] usb 4-1: device descriptor read/8, error -71 [ 779.393044][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 779.442173][ T8] usb 4-1: device descriptor read/8, error -71 [ 779.573832][ T8] usb usb4-port1: unable to enumerate USB device [ 779.855746][ T27] audit: type=1326 audit(1788915175.141:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20006 comm="syz.1.3904" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb564b9e159 code=0x0 [ 779.879236][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.257978][ T5786] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 780.356162][T20023] FAULT_INJECTION: forcing a failure. [ 780.356162][T20023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.372461][T20023] CPU: 0 PID: 20023 Comm: syz.9.3910 Not tainted syzkaller #0 [ 780.379928][T20023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 780.389970][T20023] Call Trace: [ 780.393242][T20023] [ 780.396158][T20023] dump_stack_lvl+0x18c/0x250 [ 780.400826][T20023] ? show_regs_print_info+0x20/0x20 [ 780.406010][T20023] ? load_image+0x420/0x420 [ 780.410495][T20023] ? __might_fault+0xaa/0x120 [ 780.415158][T20023] ? __lock_acquire+0x7d80/0x7d80 [ 780.420174][T20023] should_fail_ex+0x394/0x4c0 [ 780.424860][T20023] strncpy_from_user+0x36/0x2f0 [ 780.429696][T20023] getname_flags+0xf6/0x500 [ 780.434191][T20023] do_sys_openat2+0xda/0x1d0 [ 780.438767][T20023] ? do_sys_open+0xe0/0xe0 [ 780.443168][T20023] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 780.449134][T20023] ? lock_chain_count+0x20/0x20 [ 780.453978][T20023] __x64_sys_openat+0x139/0x160 [ 780.458817][T20023] do_syscall_64+0x55/0xb0 [ 780.463243][T20023] ? clear_bhb_loop+0x40/0x90 [ 780.467904][T20023] ? clear_bhb_loop+0x40/0x90 [ 780.472568][T20023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.478447][T20023] RIP: 0033:0x7fb3dc99e159 [ 780.482847][T20023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.502434][T20023] RSP: 002b:00007fb3dd7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 780.510834][T20023] RAX: ffffffffffffffda RBX: 00007fb3dcc25fa0 RCX: 00007fb3dc99e159 [ 780.518792][T20023] RDX: 0000000000008000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 780.526747][T20023] RBP: 00007fb3dca3503b R08: 0000000000000000 R09: 0000000000000000 [ 780.534699][T20023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.542669][T20023] R13: 00007fb3dcc26038 R14: 00007fb3dcc25fa0 R15: 00007ffe3ba331a8 [ 780.550635][T20023] [ 780.553733][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.319280][T20046] FAULT_INJECTION: forcing a failure. [ 781.319280][T20046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.363126][T20046] CPU: 0 PID: 20046 Comm: syz.3.3919 Not tainted syzkaller #0 [ 781.370609][T20046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.380651][T20046] Call Trace: [ 781.383918][T20046] [ 781.386836][T20046] dump_stack_lvl+0x18c/0x250 [ 781.391513][T20046] ? show_regs_print_info+0x20/0x20 [ 781.396697][T20046] ? load_image+0x420/0x420 [ 781.401185][T20046] ? __might_fault+0xaa/0x120 [ 781.405847][T20046] ? __lock_acquire+0x7d80/0x7d80 [ 781.410861][T20046] should_fail_ex+0x394/0x4c0 [ 781.415533][T20046] strncpy_from_user+0x36/0x2f0 [ 781.420377][T20046] getname_flags+0xf6/0x500 [ 781.424882][T20046] do_sys_openat2+0xda/0x1d0 [ 781.429465][T20046] ? do_sys_open+0xe0/0xe0 [ 781.433872][T20046] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 781.439839][T20046] ? lock_chain_count+0x20/0x20 [ 781.444680][T20046] __x64_sys_openat+0x139/0x160 [ 781.449519][T20046] do_syscall_64+0x55/0xb0 [ 781.453921][T20046] ? clear_bhb_loop+0x40/0x90 [ 781.458584][T20046] ? clear_bhb_loop+0x40/0x90 [ 781.463256][T20046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.469137][T20046] RIP: 0033:0x7f2ecd19e159 [ 781.473538][T20046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.493126][T20046] RSP: 002b:00007f2ece089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 781.501522][T20046] RAX: ffffffffffffffda RBX: 00007f2ecd425fa0 RCX: 00007f2ecd19e159 [ 781.509475][T20046] RDX: 0000000000008000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 781.517447][T20046] RBP: 00007f2ecd23503b R08: 0000000000000000 R09: 0000000000000000 [ 781.525404][T20046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.533357][T20046] R13: 00007f2ecd426038 R14: 00007f2ecd425fa0 R15: 00007ffe7bde67a8 [ 781.541320][T20046] [ 781.544443][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.567174][T19963] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 781.577007][T19963] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 781.588287][T19963] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 781.620266][T19963] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 781.636059][T19963] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 781.659636][T18585] usb 7-1: USB disconnect, device number 10 [ 781.717343][T18585] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 781.813151][T18585] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 781.890995][T18585] ti_usb_3410_5052 7-1:2.0: device disconnected [ 782.203087][ T5815] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 782.363016][ T5815] usb 2-1: device descriptor read/64, error -71 [ 782.378667][T20071] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #108: comm syz.6.3928: No space for directory leaf checksum. Please run e2fsck -D. [ 782.458746][T20071] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #108: comm syz.6.3928: checksumming directory block 0 [ 782.674978][ T5815] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 782.872954][ T5815] usb 2-1: device descriptor read/64, error -71 [ 782.993039][ T5815] usb usb2-port1: attempt power cycle [ 783.395228][T15690] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 783.412011][T15690] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 783.420539][T15690] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 783.428456][T15690] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 783.435614][ T5815] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 783.443963][T15690] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 783.452346][T15690] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 783.542532][T20095] syz_tun: entered allmulticast mode [ 783.553551][ T5815] usb 2-1: device descriptor read/8, error -71 [ 783.574344][T20094] syz_tun: left allmulticast mode [ 783.801303][ T3562] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.823284][ T5815] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 783.885119][ T5815] usb 2-1: device descriptor read/8, error -71 [ 783.988997][ T3562] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.016327][ T5815] usb usb2-port1: unable to enumerate USB device [ 784.027856][T20105] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #108: comm syz.3.3940: No space for directory leaf checksum. Please run e2fsck -D. [ 784.055516][T20092] chnl_net:caif_netlink_parms(): no params data found [ 784.062520][T20105] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #108: comm syz.3.3940: checksumming directory block 0 [ 784.114559][ T3562] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.248954][ T3562] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.329733][T20092] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.338233][T20092] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.348331][T20092] bridge_slave_0: entered allmulticast mode [ 784.356469][T20092] bridge_slave_0: entered promiscuous mode [ 784.370775][T20092] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.382628][T20092] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.395349][T20092] bridge_slave_1: entered allmulticast mode [ 784.402227][T20092] bridge_slave_1: entered promiscuous mode [ 784.554334][T20092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.563601][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802593ac00: rx timeout, send abort [ 784.571994][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802593ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 784.631422][T20092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.041936][T20092] team0: Port device team_slave_0 added [ 785.272016][T20092] team0: Port device team_slave_1 added [ 785.280128][T20132] binder: BINDER_SET_CONTEXT_MGR already set [ 785.325817][T20132] binder: 20130:20132 ioctl 4018620d 200000000040 returned -16 [ 785.536139][ T5786] Bluetooth: hci3: command tx timeout [ 785.608206][T20142] overlayfs: failed to resolve './file0': -2 [ 785.634007][T20092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.640970][T20092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.840677][T20092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.018608][T20092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.038077][T20092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.081781][T20092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.121745][T20156] bridge0: port 3(macsec1) entered blocking state [ 786.128637][T20156] bridge0: port 3(macsec1) entered disabled state [ 786.140224][T20156] macsec1: entered allmulticast mode [ 786.146663][T20156] macsec1: entered promiscuous mode [ 786.162874][ T8] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 786.388046][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.408887][ T8] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 786.433557][ T3562] bond1: (slave gretap1): Releasing active interface [ 786.458292][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 786.501835][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.512573][T20092] hsr_slave_0: entered promiscuous mode [ 786.534600][T20092] hsr_slave_1: entered promiscuous mode [ 786.555561][ T8] usb 7-1: config 0 descriptor?? [ 786.576652][T20092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.631119][T20092] Cannot create hsr debugfs directory [ 786.929420][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d91fc00: rx timeout, send abort [ 786.937851][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d91fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 787.283486][T20181] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #108: comm syz.3.3958: No space for directory leaf checksum. Please run e2fsck -D. [ 787.374468][T20181] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #108: comm syz.3.3958: checksumming directory block 0 [ 787.517142][ T3562] hsr_slave_0: left promiscuous mode [ 787.548498][ T3562] hsr_slave_1: left promiscuous mode [ 787.612528][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.620789][ T5786] Bluetooth: hci3: command tx timeout [ 787.665959][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.731736][ T3562] bridge_slave_1: left allmulticast mode [ 787.766514][ T3562] bridge_slave_1: left promiscuous mode [ 787.800899][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.837484][ T3562] bridge_slave_0: left allmulticast mode [ 787.865309][ T3562] bridge_slave_0: left promiscuous mode [ 787.885781][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.946907][ T3562] veth1_macvtap: left promiscuous mode [ 787.952527][ T3562] veth0_macvtap: left promiscuous mode [ 787.961571][ T3562] veth1_vlan: left promiscuous mode [ 787.967531][ T3562] veth0_vlan: left promiscuous mode [ 788.166067][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880247a7000: rx timeout, send abort [ 788.276340][ T3562] bond1 (unregistering): Released all slaves [ 788.659720][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880247a4000: rx timeout, send abort [ 788.679983][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880247a7000: abort rx timeout. Force session deactivation [ 788.947461][ T5838] usb 7-1: USB disconnect, device number 11 [ 789.167964][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880247a4000: abort rx timeout. Force session deactivation [ 789.273759][T20208] kvm: kvm [20207]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 789.289057][ T27] audit: type=1326 audit(1788915184.571:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20206 comm="syz.6.3969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf9159e159 code=0x0 [ 789.315536][T20208] kvm: kvm [20207]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 789.348680][T20208] kvm: kvm [20207]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 789.646607][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.679496][ T3562] bond_slave_1 (unregistering): left allmulticast mode [ 789.694764][ T5786] Bluetooth: hci3: command tx timeout [ 789.820754][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.833911][ T3562] bond_slave_0 (unregistering): left allmulticast mode [ 790.046342][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fbb9400: rx timeout, send abort [ 790.524222][ T3562] bond0 (unregistering): Released all slaves [ 790.553334][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e85dc00: rx timeout, send abort [ 790.561760][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fbb9400: abort rx timeout. Force session deactivation [ 790.983284][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 791.043867][T20232] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 791.061540][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e85dc00: abort rx timeout. Force session deactivation [ 791.233604][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.300599][ T5838] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 791.381039][ T5838] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 791.449759][T20241] kvm: kvm [20240]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 791.459911][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.534376][ T5838] usb 4-1: config 0 descriptor?? [ 791.559454][T20241] kvm: kvm [20240]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 791.624890][T20241] kvm: kvm [20240]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 791.777595][ T5786] Bluetooth: hci3: command tx timeout [ 791.983687][ T27] audit: type=1326 audit(1788915187.271:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20250 comm="syz.6.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf9159e159 code=0x0 [ 792.206849][T20092] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 792.253281][T20092] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 792.296368][T20092] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 792.343760][T20092] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 792.531369][T20092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.568354][T20092] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.597140][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.604278][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.648112][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.655257][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.429193][T20092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.527944][T20295] syz_tun: entered allmulticast mode [ 793.565932][T20292] syz_tun: left allmulticast mode [ 793.785697][ T5815] usb 4-1: USB disconnect, device number 7 [ 793.961268][ T27] audit: type=1326 audit(1788915189.231:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.3991" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb564b9e159 code=0x0 [ 793.984765][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.385968][T20092] veth0_vlan: entered promiscuous mode [ 794.432229][T20092] veth1_vlan: entered promiscuous mode [ 794.536015][T20092] veth0_macvtap: entered promiscuous mode [ 794.576919][T20092] veth1_macvtap: entered promiscuous mode [ 794.660031][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.751183][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.788481][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.826885][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.852985][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.886130][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.914627][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.948730][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.982679][T20092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.064811][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.134757][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.196565][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.253203][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.314182][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.381611][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.442870][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.502850][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.546990][T20092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.714188][T20092] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.776480][T20092] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.839776][T20092] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.916339][T20092] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.242842][ T5815] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 796.278739][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.326715][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.361999][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.375710][ T27] audit: type=1326 audit(1788915191.641:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20348 comm="syz.1.4001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb564b9e159 code=0x0 [ 796.399191][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.435528][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.512925][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.564914][ T5815] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 796.625862][ T5815] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 796.667189][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.740943][ T5815] usb 4-1: config 0 descriptor?? [ 797.303550][T20376] FAULT_INJECTION: forcing a failure. [ 797.303550][T20376] name fail_futex, interval 1, probability 0, space 0, times 0 [ 797.393602][T20376] CPU: 0 PID: 20376 Comm: syz.1.4007 Not tainted syzkaller #0 [ 797.401100][T20376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.411142][T20376] Call Trace: [ 797.414412][T20376] [ 797.417329][T20376] dump_stack_lvl+0x18c/0x250 [ 797.421994][T20376] ? _local_bh_enable+0xa0/0xa0 [ 797.426830][T20376] ? show_regs_print_info+0x20/0x20 [ 797.432034][T20376] ? load_image+0x420/0x420 [ 797.436535][T20376] ? tun_get_user+0x2967/0x3d70 [ 797.441380][T20376] should_fail_ex+0x394/0x4c0 [ 797.446051][T20376] get_futex_key+0x136/0x1030 [ 797.450714][T20376] ? rcu_read_unlock+0xa0/0xa0 [ 797.455473][T20376] ? ref_tracker_free+0x686/0x830 [ 797.460480][T20376] ? futex_setup_timer+0xc0/0xc0 [ 797.465404][T20376] ? __asan_memset+0x22/0x40 [ 797.469985][T20376] futex_wake+0x127/0x4f0 [ 797.474305][T20376] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 797.480884][T20376] ? futex_wake_mark+0x150/0x150 [ 797.485810][T20376] ? file_end_write+0xdb/0x250 [ 797.490563][T20376] ? vfs_write+0x5de/0x9a0 [ 797.494968][T20376] do_futex+0x35d/0x3e0 [ 797.499124][T20376] ? file_end_write+0x250/0x250 [ 797.503962][T20376] ? __ia32_sys_get_robust_list+0x110/0x110 [ 797.509857][T20376] __se_sys_futex+0x3a9/0x440 [ 797.514523][T20376] ? __x64_sys_futex+0xf0/0xf0 [ 797.519272][T20376] ? __x64_sys_futex+0x21/0xf0 [ 797.524020][T20376] do_syscall_64+0x55/0xb0 [ 797.528420][T20376] ? clear_bhb_loop+0x40/0x90 [ 797.533083][T20376] ? clear_bhb_loop+0x40/0x90 [ 797.537744][T20376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.543623][T20376] RIP: 0033:0x7fb564b9e159 [ 797.548025][T20376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.567620][T20376] RSP: 002b:00007fb565a3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 797.576017][T20376] RAX: ffffffffffffffda RBX: 00007fb564e25fa8 RCX: 00007fb564b9e159 [ 797.583972][T20376] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb564e25fac [ 797.591926][T20376] RBP: 00007fb564e25fa0 R08: 0000000000745a32 R09: 0000000000000000 [ 797.599886][T20376] R10: 0000000000000fba R11: 0000000000000246 R12: 0000000000000000 [ 797.607842][T20376] R13: 00007fb564e26038 R14: 00007ffd8415e9c0 R15: 00007ffd8415eaa8 [ 797.615814][T20376] [ 797.618855][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.042070][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d87cc00: rx timeout, send abort [ 798.303879][T20408] netlink: 'syz.1.4014': attribute type 1 has an invalid length. [ 798.342431][T20408] netlink: 'syz.1.4014': attribute type 2 has an invalid length. [ 798.542145][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d87d000: rx timeout, send abort [ 798.550541][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d87cc00: abort rx timeout. Force session deactivation [ 798.951879][ T5838] usb 4-1: USB disconnect, device number 8 [ 799.050423][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d87d000: abort rx timeout. Force session deactivation [ 799.187066][T20434] FAULT_INJECTION: forcing a failure. [ 799.187066][T20434] name fail_futex, interval 1, probability 0, space 0, times 0 [ 799.251486][T20434] CPU: 0 PID: 20434 Comm: syz.1.4022 Not tainted syzkaller #0 [ 799.258985][T20434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 799.269028][T20434] Call Trace: [ 799.272295][T20434] [ 799.275213][T20434] dump_stack_lvl+0x18c/0x250 [ 799.279885][T20434] ? _local_bh_enable+0xa0/0xa0 [ 799.284740][T20434] ? show_regs_print_info+0x20/0x20 [ 799.289924][T20434] ? load_image+0x420/0x420 [ 799.294414][T20434] ? tun_get_user+0x2967/0x3d70 [ 799.299256][T20434] should_fail_ex+0x394/0x4c0 [ 799.303923][T20434] get_futex_key+0x136/0x1030 [ 799.308584][T20434] ? rcu_read_unlock+0xa0/0xa0 [ 799.313334][T20434] ? ref_tracker_free+0x686/0x830 [ 799.318361][T20434] ? futex_setup_timer+0xc0/0xc0 [ 799.323282][T20434] ? __asan_memset+0x22/0x40 [ 799.327882][T20434] futex_wake+0x127/0x4f0 [ 799.332210][T20434] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 799.338814][T20434] ? futex_wake_mark+0x150/0x150 [ 799.343743][T20434] ? file_end_write+0xdb/0x250 [ 799.348500][T20434] ? vfs_write+0x5de/0x9a0 [ 799.352905][T20434] do_futex+0x35d/0x3e0 [ 799.357068][T20434] ? file_end_write+0x250/0x250 [ 799.361915][T20434] ? __ia32_sys_get_robust_list+0x110/0x110 [ 799.367805][T20434] __se_sys_futex+0x3a9/0x440 [ 799.372470][T20434] ? __x64_sys_futex+0xf0/0xf0 [ 799.377222][T20434] ? __x64_sys_futex+0x21/0xf0 [ 799.381969][T20434] do_syscall_64+0x55/0xb0 [ 799.386370][T20434] ? clear_bhb_loop+0x40/0x90 [ 799.391029][T20434] ? clear_bhb_loop+0x40/0x90 [ 799.395694][T20434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.401569][T20434] RIP: 0033:0x7fb564b9e159 [ 799.405975][T20434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.425591][T20434] RSP: 002b:00007fb565a3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 799.433993][T20434] RAX: ffffffffffffffda RBX: 00007fb564e25fa8 RCX: 00007fb564b9e159 [ 799.441948][T20434] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb564e25fac [ 799.449903][T20434] RBP: 00007fb564e25fa0 R08: 0000000000745a32 R09: 0000000000000000 [ 799.457858][T20434] R10: 0000000000000fba R11: 0000000000000246 R12: 0000000000000000 [ 799.465809][T20434] R13: 00007fb564e26038 R14: 00007ffd8415e9c0 R15: 00007ffd8415eaa8 [ 799.473771][T20434] [ 799.476876][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.920163][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021227000: rx timeout, send abort [ 800.253083][ T8] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 800.420259][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021226800: rx timeout, send abort [ 800.428609][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021227000: abort rx timeout. Force session deactivation [ 800.443145][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.458224][ T8] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 800.512819][ T8] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 800.539673][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.575663][ T8] usb 10-1: config 0 descriptor?? [ 800.595282][ T8] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 800.909216][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4034'. [ 800.928509][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021226800: abort rx timeout. Force session deactivation [ 801.126062][T20400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 801.614160][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e85c400: rx timeout, send abort [ 801.709048][T20490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'. [ 802.114256][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e85e400: rx timeout, send abort [ 802.122505][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e85c400: abort rx timeout. Force session deactivation [ 802.622501][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e85e400: abort rx timeout. Force session deactivation [ 802.713922][T20518] syzkaller0: entered promiscuous mode [ 802.729624][T20518] syzkaller0: entered allmulticast mode [ 802.740675][T20520] FAULT_INJECTION: forcing a failure. [ 802.740675][T20520] name failslab, interval 1, probability 0, space 0, times 0 [ 802.753341][T20520] CPU: 0 PID: 20520 Comm: syz.6.4055 Not tainted syzkaller #0 [ 802.760785][T20520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.770831][T20520] Call Trace: [ 802.774096][T20520] [ 802.777011][T20520] dump_stack_lvl+0x18c/0x250 [ 802.781677][T20520] ? show_regs_print_info+0x20/0x20 [ 802.786861][T20520] ? load_image+0x420/0x420 [ 802.791351][T20520] should_fail_ex+0x394/0x4c0 [ 802.796015][T20520] should_failslab+0x9/0x20 [ 802.800504][T20520] slab_pre_alloc_hook+0x59/0x300 [ 802.805515][T20520] ? lockdep_init_map_type+0x9c/0x8e0 [ 802.810867][T20520] ? nf_ct_ext_add+0x1ab/0x3e0 [ 802.815618][T20520] ? nf_ct_ext_add+0x1ab/0x3e0 [ 802.820366][T20520] __kmem_cache_alloc_node+0x53/0x250 [ 802.825730][T20520] ? nf_ct_ext_add+0x1ab/0x3e0 [ 802.830477][T20520] __kmalloc_node_track_caller+0xa4/0x230 [ 802.836183][T20520] krealloc+0x86/0x120 [ 802.840241][T20520] nf_ct_ext_add+0x1ab/0x3e0 [ 802.844823][T20520] init_conntrack+0x561/0xe20 [ 802.849484][T20520] ? early_drop+0x7f0/0x7f0 [ 802.853997][T20520] ? nf_conntrack_find_get+0x670/0x670 [ 802.859445][T20520] ? __siphash_unaligned+0x25c/0x3d0 [ 802.864733][T20520] nf_conntrack_in+0xc29/0x15b0 [ 802.869602][T20520] ? nf_ct_pernet+0x270/0x270 [ 802.874266][T20520] ? ip6t_do_table+0x1cb/0x1570 [ 802.879108][T20520] ? ip6t_alloc_initial_table+0x640/0x640 [ 802.884822][T20520] ? ipv6_defrag+0x2d6/0x3a0 [ 802.889401][T20520] ? ipv4_conntrack_local+0x200/0x200 [ 802.894757][T20520] nf_hook_slow+0xbd/0x200 [ 802.899171][T20520] NF_HOOK+0x21d/0x3b0 [ 802.903229][T20520] ? sock_wfree+0x24f/0x600 [ 802.907739][T20520] ? ip6_rcv_core+0x1082/0x1700 [ 802.912575][T20520] ? net_zcopy_put_abort+0x90/0x90 [ 802.917673][T20520] ? NF_HOOK+0x9f/0x3b0 [ 802.921817][T20520] ? ip6_rcv_core+0x1700/0x1700 [ 802.926671][T20520] ? net_zcopy_put_abort+0x90/0x90 [ 802.931778][T20520] ? ip6_rcv_finish_core+0x420/0x420 [ 802.937055][T20520] __netif_receive_skb+0xcc/0x290 [ 802.942072][T20520] ? netif_receive_skb+0x106/0x720 [ 802.947188][T20520] netif_receive_skb+0x1bc/0x720 [ 802.952114][T20520] ? __bpf_trace_tasklet+0x160/0x160 [ 802.957386][T20520] ? enqueue_to_backlog+0xe90/0xe90 [ 802.962570][T20520] ? _copy_from_iter+0x242/0x1290 [ 802.967599][T20520] ? tun_rx_batched+0x186/0x790 [ 802.972436][T20520] tun_rx_batched+0x1df/0x790 [ 802.977102][T20520] ? pskb_may_pull+0xf0/0xf0 [ 802.981676][T20520] ? __local_bh_enable_ip+0x13a/0x1c0 [ 802.987033][T20520] ? lockdep_hardirqs_on+0x98/0x150 [ 802.992218][T20520] ? read_lock_is_recursive+0x20/0x20 [ 802.997573][T20520] ? __local_bh_enable_ip+0x13a/0x1c0 [ 803.002925][T20520] ? _local_bh_enable+0xa0/0xa0 [ 803.007755][T20520] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 803.013743][T20520] tun_get_user+0x2886/0x3d70 [ 803.018417][T20520] ? tun_get_user+0x24b1/0x3d70 [ 803.023253][T20520] ? aa_file_perm+0x3e3/0xee0 [ 803.027917][T20520] ? rcu_read_unlock+0xa0/0xa0 [ 803.032671][T20520] ? tun_get+0x1c/0x2e0 [ 803.036823][T20520] ? __lock_acquire+0x7d80/0x7d80 [ 803.041853][T20520] ? tun_get+0x1c/0x2e0 [ 803.045996][T20520] tun_chr_write_iter+0x119/0x200 [ 803.051007][T20520] vfs_write+0x474/0x9a0 [ 803.055257][T20520] ? file_end_write+0x250/0x250 [ 803.060098][T20520] ? __fget_files+0x3fc/0x460 [ 803.064764][T20520] ? __fdget_pos+0x1d8/0x330 [ 803.069343][T20520] ? ksys_write+0x74/0x260 [ 803.073759][T20520] ksys_write+0x151/0x260 [ 803.078095][T20520] ? __ia32_sys_read+0x90/0x90 [ 803.082847][T20520] ? lockdep_hardirqs_on+0x98/0x150 [ 803.088035][T20520] do_syscall_64+0x55/0xb0 [ 803.092435][T20520] ? clear_bhb_loop+0x40/0x90 [ 803.097097][T20520] ? clear_bhb_loop+0x40/0x90 [ 803.101783][T20520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.107661][T20520] RIP: 0033:0x7faf9155e98e [ 803.112062][T20520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 803.131651][T20520] RSP: 002b:00007faf923a9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 803.140052][T20520] RAX: ffffffffffffffda RBX: 00007faf923aa6c0 RCX: 00007faf9155e98e [ 803.148022][T20520] RDX: 0000000000000fba RSI: 0000200000002900 RDI: 00000000000000c8 [ 803.155978][T20520] RBP: 00007faf9163503b R08: 0000000000000000 R09: 0000000000000000 [ 803.163949][T20520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.171913][T20520] R13: 00007faf91826038 R14: 00007faf91825fa0 R15: 00007fff48ff0b88 [ 803.179895][T20520] [ 803.183015][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.259139][ T5838] usb 10-1: USB disconnect, device number 11 [ 803.490172][T20528] netlink: 'syz.6.4057': attribute type 1 has an invalid length. [ 803.521443][T20528] netlink: 'syz.6.4057': attribute type 2 has an invalid length. [ 804.343208][T20555] netlink: 'syz.6.4069': attribute type 1 has an invalid length. [ 804.375879][T20555] netlink: 'syz.6.4069': attribute type 2 has an invalid length. [ 804.543774][T20560] binder: BINDER_SET_CONTEXT_MGR already set [ 804.549795][T20560] binder: 20559:20560 ioctl 4018620d 200000000040 returned -16 [ 804.959607][T20574] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 804.966383][T20574] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 804.974981][T20496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.094191][T20574] vhci_hcd vhci_hcd.0: Device attached [ 805.202591][T20580] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 805.209126][T20580] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 805.324920][T20580] vhci_hcd vhci_hcd.0: Device attached [ 805.343266][ T8] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 805.387695][T20581] vhci_hcd: connection closed [ 805.395664][ T1314] vhci_hcd: stop threads [ 805.421513][T20575] vhci_hcd: connection reset by peer [ 805.461675][ T1314] vhci_hcd: release socket [ 805.511039][ T1314] vhci_hcd: disconnect device [ 805.546582][ T1314] vhci_hcd: stop threads [ 805.550869][ T1314] vhci_hcd: release socket [ 805.607051][ T1314] vhci_hcd: disconnect device [ 805.736979][T20603] syz_tun: entered allmulticast mode [ 805.806160][T20603] syz_tun: left allmulticast mode [ 806.588366][T20619] kvm_intel: kvm [20616]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xb90b [ 806.659446][T20619] kvm: kvm [20616]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x7d06 [ 806.696327][T20639] syz_tun: entered allmulticast mode [ 806.713740][T20619] kvm: kvm [20616]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x792e [ 806.744812][T20639] syz_tun: left allmulticast mode [ 807.484989][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4105'. [ 807.505326][T20669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.628751][T20669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.739288][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.052402][T20614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.531145][T20696] FAULT_INJECTION: forcing a failure. [ 809.531145][T20696] name failslab, interval 1, probability 0, space 0, times 0 [ 809.543823][T20696] CPU: 0 PID: 20696 Comm: syz.1.4112 Not tainted syzkaller #0 [ 809.551278][T20696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.561333][T20696] Call Trace: [ 809.564614][T20696] [ 809.567533][T20696] dump_stack_lvl+0x18c/0x250 [ 809.572205][T20696] ? show_regs_print_info+0x20/0x20 [ 809.577386][T20696] ? load_image+0x420/0x420 [ 809.581879][T20696] should_fail_ex+0x394/0x4c0 [ 809.586562][T20696] should_failslab+0x9/0x20 [ 809.591058][T20696] slab_pre_alloc_hook+0x59/0x300 [ 809.596078][T20696] ? lockdep_init_map_type+0x9c/0x8e0 [ 809.601434][T20696] ? nf_ct_ext_add+0x1ab/0x3e0 [ 809.606190][T20696] ? nf_ct_ext_add+0x1ab/0x3e0 [ 809.610938][T20696] __kmem_cache_alloc_node+0x53/0x250 [ 809.616301][T20696] ? nf_ct_ext_add+0x1ab/0x3e0 [ 809.621052][T20696] __kmalloc_node_track_caller+0xa4/0x230 [ 809.626766][T20696] krealloc+0x86/0x120 [ 809.630825][T20696] nf_ct_ext_add+0x1ab/0x3e0 [ 809.635413][T20696] init_conntrack+0x561/0xe20 [ 809.640081][T20696] ? early_drop+0x7f0/0x7f0 [ 809.644579][T20696] ? nf_conntrack_find_get+0x670/0x670 [ 809.650023][T20696] ? __siphash_unaligned+0x25c/0x3d0 [ 809.655323][T20696] nf_conntrack_in+0xc29/0x15b0 [ 809.660180][T20696] ? nf_ct_pernet+0x270/0x270 [ 809.664848][T20696] ? ip6t_do_table+0x1cb/0x1570 [ 809.669686][T20696] ? ip6t_alloc_initial_table+0x640/0x640 [ 809.675398][T20696] ? ipv6_defrag+0x2d6/0x3a0 [ 809.679975][T20696] ? ipv4_conntrack_local+0x200/0x200 [ 809.685332][T20696] nf_hook_slow+0xbd/0x200 [ 809.689746][T20696] NF_HOOK+0x21d/0x3b0 [ 809.693802][T20696] ? sock_wfree+0x24f/0x600 [ 809.698292][T20696] ? ip6_rcv_core+0x1082/0x1700 [ 809.703131][T20696] ? net_zcopy_put_abort+0x90/0x90 [ 809.708231][T20696] ? NF_HOOK+0x9f/0x3b0 [ 809.712373][T20696] ? ip6_rcv_core+0x1700/0x1700 [ 809.717209][T20696] ? net_zcopy_put_abort+0x90/0x90 [ 809.722331][T20696] ? ip6_rcv_finish_core+0x420/0x420 [ 809.727603][T20696] __netif_receive_skb+0xcc/0x290 [ 809.732616][T20696] ? netif_receive_skb+0x106/0x720 [ 809.737735][T20696] netif_receive_skb+0x1bc/0x720 [ 809.742748][T20696] ? __bpf_trace_tasklet+0x160/0x160 [ 809.748019][T20696] ? enqueue_to_backlog+0xe90/0xe90 [ 809.753205][T20696] ? _copy_from_iter+0x242/0x1290 [ 809.758216][T20696] ? tun_rx_batched+0x186/0x790 [ 809.763058][T20696] tun_rx_batched+0x1df/0x790 [ 809.767722][T20696] ? pskb_may_pull+0xf0/0xf0 [ 809.772296][T20696] ? __local_bh_enable_ip+0x13a/0x1c0 [ 809.777648][T20696] ? lockdep_hardirqs_on+0x98/0x150 [ 809.782833][T20696] ? read_lock_is_recursive+0x20/0x20 [ 809.788223][T20696] ? __local_bh_enable_ip+0x13a/0x1c0 [ 809.793602][T20696] ? _local_bh_enable+0xa0/0xa0 [ 809.798435][T20696] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 809.804411][T20696] tun_get_user+0x2886/0x3d70 [ 809.809101][T20696] ? tun_get_user+0x24b1/0x3d70 [ 809.813942][T20696] ? aa_file_perm+0x3e3/0xee0 [ 809.818608][T20696] ? rcu_read_unlock+0xa0/0xa0 [ 809.823364][T20696] ? tun_get+0x1c/0x2e0 [ 809.827501][T20696] ? __lock_acquire+0x7d80/0x7d80 [ 809.832510][T20696] ? tun_get+0x1c/0x2e0 [ 809.836655][T20696] tun_chr_write_iter+0x119/0x200 [ 809.841666][T20696] vfs_write+0x474/0x9a0 [ 809.845898][T20696] ? file_end_write+0x250/0x250 [ 809.850736][T20696] ? __fget_files+0x3fc/0x460 [ 809.855406][T20696] ? __fdget_pos+0x1d8/0x330 [ 809.859980][T20696] ? ksys_write+0x74/0x260 [ 809.864381][T20696] ksys_write+0x151/0x260 [ 809.868699][T20696] ? __ia32_sys_read+0x90/0x90 [ 809.873452][T20696] ? lockdep_hardirqs_on+0x98/0x150 [ 809.878655][T20696] do_syscall_64+0x55/0xb0 [ 809.883057][T20696] ? clear_bhb_loop+0x40/0x90 [ 809.887719][T20696] ? clear_bhb_loop+0x40/0x90 [ 809.892467][T20696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.898371][T20696] RIP: 0033:0x7fb564b5e98e [ 809.902772][T20696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 809.922370][T20696] RSP: 002b:00007fb565a39fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 809.930770][T20696] RAX: ffffffffffffffda RBX: 00007fb565a3a6c0 RCX: 00007fb564b5e98e [ 809.938724][T20696] RDX: 0000000000000faa RSI: 0000200000002900 RDI: 00000000000000c8 [ 809.946679][T20696] RBP: 00007fb564c3503b R08: 0000000000000000 R09: 0000000000000000 [ 809.954632][T20696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.962584][T20696] R13: 00007fb564e26038 R14: 00007fb564e25fa0 R15: 00007ffd8415eaa8 [ 809.970552][T20696] [ 809.973647][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.493288][ T8] vhci_hcd: vhci_device speed not set [ 810.625344][T20709] syz.6.4118: attempt to access beyond end of device [ 810.625344][T20709] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 810.639724][T20709] exFAT-fs (nbd6): unable to read boot sector [ 810.649294][T20709] exFAT-fs (nbd6): failed to read boot sector [ 810.657474][T20709] exFAT-fs (nbd6): failed to recognize exfat type [ 810.880549][T20722] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 810.930612][T20725] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 811.120963][T20732] FAULT_INJECTION: forcing a failure. [ 811.120963][T20732] name fail_futex, interval 1, probability 0, space 0, times 0 [ 811.144078][T20732] CPU: 0 PID: 20732 Comm: syz.6.4125 Not tainted syzkaller #0 [ 811.151550][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 811.161587][T20732] Call Trace: [ 811.164852][T20732] [ 811.167769][T20732] dump_stack_lvl+0x18c/0x250 [ 811.172436][T20732] ? _local_bh_enable+0xa0/0xa0 [ 811.177298][T20732] ? show_regs_print_info+0x20/0x20 [ 811.182480][T20732] ? load_image+0x420/0x420 [ 811.186987][T20732] ? tun_get_user+0x2967/0x3d70 [ 811.191825][T20732] should_fail_ex+0x394/0x4c0 [ 811.196492][T20732] get_futex_key+0x136/0x1030 [ 811.201153][T20732] ? rcu_read_unlock+0xa0/0xa0 [ 811.205933][T20732] ? ref_tracker_free+0x686/0x830 [ 811.210944][T20732] ? futex_setup_timer+0xc0/0xc0 [ 811.215865][T20732] ? __asan_memset+0x22/0x40 [ 811.220444][T20732] futex_wake+0x127/0x4f0 [ 811.224760][T20732] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 811.231334][T20732] ? futex_wake_mark+0x150/0x150 [ 811.236257][T20732] ? file_end_write+0xdb/0x250 [ 811.241008][T20732] ? vfs_write+0x5de/0x9a0 [ 811.245415][T20732] do_futex+0x35d/0x3e0 [ 811.249554][T20732] ? file_end_write+0x250/0x250 [ 811.254411][T20732] ? __ia32_sys_get_robust_list+0x110/0x110 [ 811.260303][T20732] __se_sys_futex+0x3a9/0x440 [ 811.264966][T20732] ? __x64_sys_futex+0xf0/0xf0 [ 811.269734][T20732] ? __x64_sys_futex+0x21/0xf0 [ 811.274500][T20732] do_syscall_64+0x55/0xb0 [ 811.278901][T20732] ? clear_bhb_loop+0x40/0x90 [ 811.283570][T20732] ? clear_bhb_loop+0x40/0x90 [ 811.288230][T20732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.294152][T20732] RIP: 0033:0x7faf9159e159 [ 811.298564][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.318184][T20732] RSP: 002b:00007faf923aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 811.326588][T20732] RAX: ffffffffffffffda RBX: 00007faf91825fa8 RCX: 00007faf9159e159 [ 811.334546][T20732] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf91825fac [ 811.342501][T20732] RBP: 00007faf91825fa0 R08: 0000000000745a32 R09: 0000000000000000 [ 811.350459][T20732] R10: 0000000000000faa R11: 0000000000000246 R12: 0000000000000000 [ 811.358415][T20732] R13: 00007faf91826038 R14: 00007fff48ff0aa0 R15: 00007fff48ff0b88 [ 811.366380][T20732] [ 811.369509][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.318516][T20710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 813.552545][T20755] FAULT_INJECTION: forcing a failure. [ 813.552545][T20755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 813.607151][T20755] CPU: 0 PID: 20755 Comm: syz.1.4134 Not tainted syzkaller #0 [ 813.614656][T20755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 813.624701][T20755] Call Trace: [ 813.627991][T20755] [ 813.630910][T20755] dump_stack_lvl+0x18c/0x250 [ 813.635579][T20755] ? _local_bh_enable+0xa0/0xa0 [ 813.640432][T20755] ? show_regs_print_info+0x20/0x20 [ 813.645620][T20755] ? load_image+0x420/0x420 [ 813.650107][T20755] ? tun_get_user+0x2967/0x3d70 [ 813.654944][T20755] should_fail_ex+0x394/0x4c0 [ 813.659609][T20755] get_futex_key+0x136/0x1030 [ 813.664268][T20755] ? rcu_read_unlock+0xa0/0xa0 [ 813.669020][T20755] ? ref_tracker_free+0x686/0x830 [ 813.674025][T20755] ? futex_setup_timer+0xc0/0xc0 [ 813.678946][T20755] ? __asan_memset+0x22/0x40 [ 813.683522][T20755] futex_wake+0x127/0x4f0 [ 813.687832][T20755] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 813.694409][T20755] ? futex_wake_mark+0x150/0x150 [ 813.699351][T20755] ? file_end_write+0xdb/0x250 [ 813.704105][T20755] ? vfs_write+0x5de/0x9a0 [ 813.708510][T20755] do_futex+0x35d/0x3e0 [ 813.712669][T20755] ? file_end_write+0x250/0x250 [ 813.717511][T20755] ? __ia32_sys_get_robust_list+0x110/0x110 [ 813.723409][T20755] __se_sys_futex+0x3a9/0x440 [ 813.728081][T20755] ? __x64_sys_futex+0xf0/0xf0 [ 813.732833][T20755] ? __x64_sys_futex+0x21/0xf0 [ 813.737581][T20755] do_syscall_64+0x55/0xb0 [ 813.741982][T20755] ? clear_bhb_loop+0x40/0x90 [ 813.746642][T20755] ? clear_bhb_loop+0x40/0x90 [ 813.751303][T20755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 813.757183][T20755] RIP: 0033:0x7fb564b9e159 [ 813.761585][T20755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.781195][T20755] RSP: 002b:00007fb565a3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 813.789609][T20755] RAX: ffffffffffffffda RBX: 00007fb564e25fa8 RCX: 00007fb564b9e159 [ 813.797581][T20755] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb564e25fac [ 813.805538][T20755] RBP: 00007fb564e25fa0 R08: 0000000000745a32 R09: 0000000000000000 [ 813.813493][T20755] R10: 0000000000000faa R11: 0000000000000246 R12: 0000000000000000 [ 813.821466][T20755] R13: 00007fb564e26038 R14: 00007ffd8415e9c0 R15: 00007ffd8415eaa8 [ 813.829432][T20755] [ 813.832543][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.103074][ T5815] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 814.294895][ T5815] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.305465][ T5815] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 814.396279][ T5815] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 814.459364][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.507776][ T5815] usb 7-1: config 0 descriptor?? [ 814.545930][ T5815] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 814.626393][T20772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4141'. [ 814.669068][T20772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.794791][T20772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.605567][T20793] syzkaller0: entered promiscuous mode [ 815.611736][T20793] syzkaller0: entered allmulticast mode [ 816.519913][ T5815] usb 7-1: USB disconnect, device number 12 [ 816.786245][T20814] syzkaller0: entered promiscuous mode [ 816.817186][T20814] syzkaller0: entered allmulticast mode [ 816.977415][T20821] overlayfs: missing 'lowerdir' [ 817.372994][ T8] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 817.569558][ T27] audit: type=1326 audit(1788915212.851:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.1.4163" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb564b9e159 code=0x0 [ 817.593009][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.604409][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.619185][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 817.639659][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 817.649014][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.661997][ T8] usb 7-1: config 0 descriptor?? [ 817.680869][ T8] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 817.968485][T20776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.709116][ T1314] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 820.159602][ T8] usb 7-1: USB disconnect, device number 13 [ 820.517397][T20919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4185'. [ 821.274031][T20929] binder: 20928:20929 ioctl 4018620d 0 returned -22 [ 821.558714][T20854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.873901][ T5814] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 821.974419][T20950] binder: 20948:20950 ioctl 4018620d 0 returned -22 [ 822.113721][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.154768][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 822.203621][ T5814] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 822.232956][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 822.266330][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.318914][ T5814] usb 2-1: config 0 descriptor?? [ 822.355052][ T5814] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 822.442886][ T8] usb 4-1: device descriptor read/64, error -71 [ 822.734792][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 822.902922][ T8] usb 4-1: device descriptor read/64, error -71 [ 823.032944][ T8] usb usb4-port1: attempt power cycle [ 823.151827][T20979] binder: 20978:20979 ioctl 4018620d 0 returned -22 [ 823.463757][T20991] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4211'. [ 823.473001][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 823.481578][T20991] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4211'. [ 823.554243][ T8] usb 4-1: device descriptor read/8, error -71 [ 823.828361][T21003] binder: 21002:21003 ioctl c0306201 0 returned -14 [ 823.842941][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 823.896716][ T8] usb 4-1: device descriptor read/8, error -71 [ 824.023136][ T8] usb usb4-port1: unable to enumerate USB device [ 824.588135][ T5838] usb 2-1: USB disconnect, device number 35 [ 825.518873][T21032] vlan2: entered allmulticast mode [ 825.555283][T21032] bond0: entered allmulticast mode [ 825.598429][T21032] bond_slave_0: entered allmulticast mode [ 825.705574][T21032] bond_slave_1: entered allmulticast mode [ 825.814230][T21056] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4228'. [ 826.016300][T21060] overlayfs: missing 'lowerdir' [ 826.233170][ T5814] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 826.303391][T21067] 9pnet_virtio: no channels available for device syz [ 826.450675][ T5814] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 826.518141][ T5814] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 826.558610][T21077] syz.1.4236: attempt to access beyond end of device [ 826.558610][T21077] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 826.580761][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.626191][ T5814] usb 7-1: config 0 descriptor?? [ 826.647062][T21077] XFS (nbd1): SB validate failed with error -5. [ 826.667953][ T5814] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 827.182863][ T5814] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 827.387667][ T5814] usb 2-1: config 0 has no interfaces? [ 827.407011][ T5814] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 827.469732][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.529632][ T5814] usb 2-1: config 0 descriptor?? [ 827.795095][ T8] usb 2-1: USB disconnect, device number 36 [ 827.862220][T21123] syz.3.4246 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 828.353283][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 828.563036][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 828.595090][ T8] usb 2-1: config 0 has no interfaces? [ 828.616354][ T8] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 828.651592][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.687157][ T8] usb 2-1: config 0 descriptor?? [ 828.968566][ T8] usb 7-1: USB disconnect, device number 14 [ 829.868931][T21173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.917702][T21173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.952223][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4265'. [ 829.985179][T21181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.142140][T21181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.517661][T21194] syz_tun: entered allmulticast mode [ 830.539525][T21193] syz_tun: left allmulticast mode [ 831.043376][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4278'. [ 831.068938][ T8] usb 2-1: USB disconnect, device number 37 [ 831.521892][T21224] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4284'. [ 831.598451][T21224] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.387716][ T27] audit: type=1800 audit(1788915227.661:164): pid=21259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4298" name="syzkaller0" dev="sda1" ino=2061 res=0 errno=0 [ 832.558347][T21265] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz.1.4298: No space for directory leaf checksum. Please run e2fsck -D. [ 832.754982][T21265] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #1262: comm syz.1.4298: checksumming directory block 0 [ 832.963991][ C0] vcan0: j1939_tp_rxtimer: 0xffff888046f83000: rx timeout, send abort [ 833.464060][ C0] vcan0: j1939_tp_rxtimer: 0xffff888046f83400: rx timeout, send abort [ 833.472378][ C0] vcan0: j1939_tp_rxtimer: 0xffff888046f83000: abort rx timeout. Force session deactivation [ 833.601138][T21296] msr: Write to unrecognized MSR 0x0 by syz.6.4312 (pid: 21296). [ 833.650785][T21296] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 833.972323][ C0] vcan0: j1939_tp_rxtimer: 0xffff888046f83400: abort rx timeout. Force session deactivation [ 834.382665][T21315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 834.546056][T21324] FAULT_INJECTION: forcing a failure. [ 834.546056][T21324] name failslab, interval 1, probability 0, space 0, times 0 [ 834.600195][T21324] CPU: 0 PID: 21324 Comm: syz.6.4324 Not tainted syzkaller #0 [ 834.607691][T21324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.617733][T21324] Call Trace: [ 834.621000][T21324] [ 834.623918][T21324] dump_stack_lvl+0x18c/0x250 [ 834.628588][T21324] ? show_regs_print_info+0x20/0x20 [ 834.633795][T21324] ? load_image+0x420/0x420 [ 834.638297][T21324] ? __might_sleep+0xe0/0xe0 [ 834.642877][T21324] ? __lock_acquire+0x7d80/0x7d80 [ 834.647905][T21324] should_fail_ex+0x394/0x4c0 [ 834.652573][T21324] should_failslab+0x9/0x20 [ 834.657064][T21324] slab_pre_alloc_hook+0x59/0x300 [ 834.662094][T21324] ? __kernfs_new_node+0xaa/0x7f0 [ 834.667105][T21324] ? rcu_is_watching+0x15/0xb0 [ 834.671875][T21324] kmem_cache_alloc+0x5a/0x2c0 [ 834.676628][T21324] ? __kernfs_new_node+0xe5/0x7f0 [ 834.681644][T21324] __kernfs_new_node+0xe5/0x7f0 [ 834.686484][T21324] ? kernfs_new_node+0x260/0x260 [ 834.691416][T21324] ? sysfs_do_create_link_sd+0x75/0x110 [ 834.696951][T21324] kernfs_new_node+0x14c/0x260 [ 834.701702][T21324] kernfs_create_link+0xa7/0x200 [ 834.706644][T21324] sysfs_do_create_link_sd+0x83/0x110 [ 834.712017][T21324] device_add_class_symlinks+0x1cf/0x240 [ 834.717644][T21324] device_add+0x4f9/0xc40 [ 834.721960][T21324] netdev_register_kobject+0x188/0x320 [ 834.727408][T21324] register_netdevice+0x12aa/0x1ba0 [ 834.732599][T21324] ? netif_stacked_transfer_operstate+0x210/0x210 [ 834.738998][T21324] ? __asan_memset+0x22/0x40 [ 834.743574][T21324] ? tun_net_initialize+0x1ac/0x480 [ 834.748756][T21324] ? tun_not_capable+0x1f0/0x1f0 [ 834.753682][T21324] ? alloc_netdev_mqs+0xc23/0x1040 [ 834.758798][T21324] tun_set_iff+0x82b/0xea0 [ 834.763206][T21324] __tun_chr_ioctl+0x7e0/0x2070 [ 834.768049][T21324] ? tun_flow_create+0x310/0x310 [ 834.772977][T21324] ? bpf_lsm_file_ioctl+0x9/0x10 [ 834.777901][T21324] ? security_file_ioctl+0x80/0xa0 [ 834.782996][T21324] ? tun_chr_poll+0x630/0x630 [ 834.787657][T21324] __se_sys_ioctl+0xfd/0x170 [ 834.792233][T21324] do_syscall_64+0x55/0xb0 [ 834.796639][T21324] ? clear_bhb_loop+0x40/0x90 [ 834.801298][T21324] ? clear_bhb_loop+0x40/0x90 [ 834.805962][T21324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.811840][T21324] RIP: 0033:0x7faf9159e159 [ 834.816248][T21324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.835841][T21324] RSP: 002b:00007faf923aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.844243][T21324] RAX: ffffffffffffffda RBX: 00007faf91825fa0 RCX: 00007faf9159e159 [ 834.852200][T21324] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 834.860170][T21324] RBP: 00007faf9163503b R08: 0000000000000000 R09: 0000000000000000 [ 834.868126][T21324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.876082][T21324] R13: 00007faf91826038 R14: 00007faf91825fa0 R15: 00007fff48ff0b88 [ 834.884049][T21324] [ 834.887164][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.895081][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030e0c400: rx timeout, send abort [ 835.123918][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030e0d400: rx timeout, send abort [ 835.147652][T15690] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 835.160054][T15690] CPU: 0 PID: 15690 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 835.167708][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 835.177752][T15690] Workqueue: hci3 hci_rx_work [ 835.182425][T15690] Call Trace: [ 835.185691][T15690] [ 835.188631][T15690] dump_stack_lvl+0x18c/0x250 [ 835.193313][T15690] ? show_regs_print_info+0x20/0x20 [ 835.198514][T15690] ? load_image+0x420/0x420 [ 835.203015][T15690] sysfs_create_dir_ns+0x26e/0x2a0 [ 835.208111][T15690] ? __lock_acquire+0x7d80/0x7d80 [ 835.213139][T15690] ? sysfs_warn_dup+0xa0/0xa0 [ 835.217803][T15690] ? do_raw_spin_unlock+0x121/0x230 [ 835.222997][T15690] kobject_add_internal+0x617/0xc90 [ 835.228188][T15690] kobject_add+0x164/0x240 [ 835.232595][T15690] ? kobject_init+0x1d0/0x1d0 [ 835.237277][T15690] ? get_device_parent+0x366/0x390 [ 835.242376][T15690] device_add+0x3fa/0xc40 [ 835.246712][T15690] hci_conn_add_sysfs+0xd5/0x1e0 [ 835.251639][T15690] le_conn_complete_evt+0xe9f/0x1480 [ 835.256934][T15690] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 835.263168][T15690] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 835.268876][T15690] ? mutex_unlock+0x10/0x10 [ 835.273365][T15690] ? skb_pull_data+0xf0/0x1f0 [ 835.278029][T15690] hci_le_conn_complete_evt+0x187/0x440 [ 835.283564][T15690] ? hci_remote_host_features_evt+0x150/0x150 [ 835.289635][T15690] hci_event_packet+0x7b4/0x1280 [ 835.294585][T15690] ? __lock_acquire+0x7d80/0x7d80 [ 835.299607][T15690] ? lock_chain_count+0x20/0x20 [ 835.304447][T15690] ? bis_list+0x290/0x290 [ 835.308765][T15690] ? kcov_remote_start+0x513/0x810 [ 835.313867][T15690] ? lockdep_hardirqs_on+0x98/0x150 [ 835.319061][T15690] ? hci_send_to_monitor+0xd7/0x4f0 [ 835.324268][T15690] hci_rx_work+0x43a/0xd60 [ 835.328685][T15690] ? process_scheduled_works+0x975/0x1600 [ 835.334397][T15690] process_scheduled_works+0xa60/0x1600 [ 835.339945][T15690] ? worker_attach_to_pool+0x370/0x370 [ 835.345394][T15690] ? assign_work+0x3cc/0x5d0 [ 835.349976][T15690] worker_thread+0xa5e/0xfe0 [ 835.354567][T15690] ? _raw_spin_unlock+0x40/0x40 [ 835.359399][T15690] ? __kthread_parkme+0x71/0x1c0 [ 835.364346][T15690] kthread+0x2fa/0x390 [ 835.368400][T15690] ? pr_cont_work+0x550/0x550 [ 835.373061][T15690] ? kthread_blkcg+0xd0/0xd0 [ 835.377632][T15690] ret_from_fork+0x48/0x80 [ 835.382032][T15690] ? kthread_blkcg+0xd0/0xd0 [ 835.386606][T15690] ret_from_fork_asm+0x11/0x20 [ 835.391392][T15690] [ 835.394435][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.403313][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030e0c400: abort rx timeout. Force session deactivation [ 835.465639][T15690] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 835.480953][T15690] Bluetooth: hci3: failed to register connection device [ 835.632169][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030e0d400: abort rx timeout. Force session deactivation [ 836.065886][T21349] XFS (nbd6): Invalid device [./loop0], error=-2 [ 836.308264][T21346] ftl_cs: FTL header not found. [ 836.405267][T21359] FAULT_INJECTION: forcing a failure. [ 836.405267][T21359] name failslab, interval 1, probability 0, space 0, times 0 [ 836.417935][T21359] CPU: 0 PID: 21359 Comm: syz.3.4338 Not tainted syzkaller #0 [ 836.425384][T21359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.435420][T21359] Call Trace: [ 836.438692][T21359] [ 836.441638][T21359] dump_stack_lvl+0x18c/0x250 [ 836.446329][T21359] ? show_regs_print_info+0x20/0x20 [ 836.451516][T21359] ? load_image+0x420/0x420 [ 836.456007][T21359] ? __rt6_find_exception_rcu+0x13c/0x4d0 [ 836.461718][T21359] should_fail_ex+0x394/0x4c0 [ 836.466394][T21359] should_failslab+0x9/0x20 [ 836.470884][T21359] slab_pre_alloc_hook+0x59/0x300 [ 836.475903][T21359] kmem_cache_alloc+0x5a/0x2c0 [ 836.480652][T21359] ? dst_alloc+0x105/0x170 [ 836.485056][T21359] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 836.490672][T21359] dst_alloc+0x105/0x170 [ 836.494923][T21359] ip6_pol_route+0x94f/0x1230 [ 836.499590][T21359] ? ip6_pol_route+0x171/0x1230 [ 836.504429][T21359] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 836.510091][T21359] ? ip6t_do_table+0x13c4/0x1570 [ 836.515021][T21359] fib6_rule_lookup+0x226/0x580 [ 836.519862][T21359] ? ip6_route_input_lookup+0xc0/0xc0 [ 836.525218][T21359] ? fib6_lookup+0x2d0/0x2d0 [ 836.529794][T21359] ? nf_conntrack_free+0x309/0x380 [ 836.534897][T21359] ? ip6t_do_table+0x1cb/0x1570 [ 836.539740][T21359] ip6_route_input+0x78a/0xab0 [ 836.544494][T21359] ? ip6_multipath_l3_keys+0x6b0/0x6b0 [ 836.549954][T21359] ? __lock_acquire+0x7d80/0x7d80 [ 836.554963][T21359] ? ip6_rcv_finish_core+0x21d/0x420 [ 836.560235][T21359] ip6_rcv_finish+0x143/0x230 [ 836.564920][T21359] NF_HOOK+0x32d/0x3b0 [ 836.568987][T21359] ? sock_wfree+0x24f/0x600 [ 836.573479][T21359] ? ip6_rcv_core+0x1082/0x1700 [ 836.578319][T21359] ? net_zcopy_put_abort+0x90/0x90 [ 836.583419][T21359] ? NF_HOOK+0x9f/0x3b0 [ 836.587564][T21359] ? ip6_rcv_core+0x1700/0x1700 [ 836.592418][T21359] ? net_zcopy_put_abort+0x90/0x90 [ 836.597525][T21359] ? ip6_rcv_finish_core+0x420/0x420 [ 836.602828][T21359] __netif_receive_skb+0xcc/0x290 [ 836.607845][T21359] ? netif_receive_skb+0x106/0x720 [ 836.612962][T21359] netif_receive_skb+0x1bc/0x720 [ 836.617891][T21359] ? __bpf_trace_tasklet+0x160/0x160 [ 836.623163][T21359] ? enqueue_to_backlog+0xe90/0xe90 [ 836.628375][T21359] ? _copy_from_iter+0x242/0x1290 [ 836.633392][T21359] ? tun_rx_batched+0x186/0x790 [ 836.638228][T21359] tun_rx_batched+0x1df/0x790 [ 836.642917][T21359] ? pskb_may_pull+0xf0/0xf0 [ 836.647491][T21359] ? __local_bh_enable_ip+0x13a/0x1c0 [ 836.652848][T21359] ? lockdep_hardirqs_on+0x98/0x150 [ 836.658037][T21359] ? read_lock_is_recursive+0x20/0x20 [ 836.663393][T21359] ? __local_bh_enable_ip+0x13a/0x1c0 [ 836.668745][T21359] ? _local_bh_enable+0xa0/0xa0 [ 836.673580][T21359] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 836.679575][T21359] tun_get_user+0x2886/0x3d70 [ 836.684266][T21359] ? tun_get_user+0x24b1/0x3d70 [ 836.689104][T21359] ? aa_file_perm+0x3e3/0xee0 [ 836.693768][T21359] ? rcu_read_unlock+0xa0/0xa0 [ 836.698525][T21359] ? tun_get+0x1c/0x2e0 [ 836.702687][T21359] ? __lock_acquire+0x7d80/0x7d80 [ 836.707710][T21359] ? tun_get+0x1c/0x2e0 [ 836.711854][T21359] tun_chr_write_iter+0x119/0x200 [ 836.716868][T21359] vfs_write+0x474/0x9a0 [ 836.721101][T21359] ? file_end_write+0x250/0x250 [ 836.725962][T21359] ? __fget_files+0x3fc/0x460 [ 836.730645][T21359] ? __fdget_pos+0x1d8/0x330 [ 836.735219][T21359] ? ksys_write+0x74/0x260 [ 836.739638][T21359] ksys_write+0x151/0x260 [ 836.743954][T21359] ? __ia32_sys_read+0x90/0x90 [ 836.748705][T21359] ? lockdep_hardirqs_on+0x98/0x150 [ 836.753893][T21359] do_syscall_64+0x55/0xb0 [ 836.758292][T21359] ? clear_bhb_loop+0x40/0x90 [ 836.762959][T21359] ? clear_bhb_loop+0x40/0x90 [ 836.767619][T21359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.773495][T21359] RIP: 0033:0x7f2ecd15e98e [ 836.777897][T21359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 836.797487][T21359] RSP: 002b:00007f2ece088fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.805887][T21359] RAX: ffffffffffffffda RBX: 00007f2ece0896c0 RCX: 00007f2ecd15e98e [ 836.813844][T21359] RDX: 0000000000000fba RSI: 0000200000002900 RDI: 00000000000000c8 [ 836.821816][T21359] RBP: 00007f2ecd23503b R08: 0000000000000000 R09: 0000000000000000 [ 836.829773][T21359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.837745][T21359] R13: 00007f2ecd426038 R14: 00007f2ecd425fa0 R15: 00007ffe7bde67a8 [ 836.845715][T21359] [ 836.848818][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.897038][T21346] block2mtd: mtd1: [./dev/loop0] erase_size = 0KiB [6] [ 837.242467][ T27] audit: type=1326 audit(1788915232.521:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.4340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb564b9e159 code=0x0 [ 837.320247][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4342'. [ 838.076911][T21403] FAULT_INJECTION: forcing a failure. [ 838.076911][T21403] name failslab, interval 1, probability 0, space 0, times 0 [ 838.089594][T21403] CPU: 0 PID: 21403 Comm: syz.9.4351 Not tainted syzkaller #0 [ 838.097074][T21403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 838.107158][T21403] Call Trace: [ 838.110435][T21403] [ 838.113360][T21403] dump_stack_lvl+0x18c/0x250 [ 838.118035][T21403] ? show_regs_print_info+0x20/0x20 [ 838.123222][T21403] ? load_image+0x420/0x420 [ 838.127719][T21403] ? __rt6_find_exception_rcu+0x13c/0x4d0 [ 838.133430][T21403] should_fail_ex+0x394/0x4c0 [ 838.138102][T21403] should_failslab+0x9/0x20 [ 838.142619][T21403] slab_pre_alloc_hook+0x59/0x300 [ 838.147636][T21403] kmem_cache_alloc+0x5a/0x2c0 [ 838.152386][T21403] ? dst_alloc+0x105/0x170 [ 838.156793][T21403] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 838.162431][T21403] dst_alloc+0x105/0x170 [ 838.166667][T21403] ip6_pol_route+0x94f/0x1230 [ 838.171339][T21403] ? ip6_pol_route+0x171/0x1230 [ 838.176178][T21403] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 838.181801][T21403] ? ip6t_do_table+0x13c4/0x1570 [ 838.186728][T21403] fib6_rule_lookup+0x226/0x580 [ 838.191585][T21403] ? ip6_route_input_lookup+0xc0/0xc0 [ 838.196965][T21403] ? fib6_lookup+0x2d0/0x2d0 [ 838.201558][T21403] ? nf_conntrack_free+0x309/0x380 [ 838.206680][T21403] ? ip6t_do_table+0x1cb/0x1570 [ 838.211541][T21403] ip6_route_input+0x78a/0xab0 [ 838.216301][T21403] ? ip6_multipath_l3_keys+0x6b0/0x6b0 [ 838.221781][T21403] ? __lock_acquire+0x7d80/0x7d80 [ 838.226801][T21403] ? ip6_rcv_finish_core+0x21d/0x420 [ 838.232101][T21403] ip6_rcv_finish+0x143/0x230 [ 838.236809][T21403] NF_HOOK+0x32d/0x3b0 [ 838.240904][T21403] ? sock_wfree+0x24f/0x600 [ 838.245404][T21403] ? ip6_rcv_core+0x1082/0x1700 [ 838.250251][T21403] ? net_zcopy_put_abort+0x90/0x90 [ 838.255358][T21403] ? NF_HOOK+0x9f/0x3b0 [ 838.259508][T21403] ? ip6_rcv_core+0x1700/0x1700 [ 838.264366][T21403] ? net_zcopy_put_abort+0x90/0x90 [ 838.269480][T21403] ? ip6_rcv_finish_core+0x420/0x420 [ 838.274752][T21403] __netif_receive_skb+0xcc/0x290 [ 838.279768][T21403] ? netif_receive_skb+0x106/0x720 [ 838.284875][T21403] netif_receive_skb+0x1bc/0x720 [ 838.289806][T21403] ? __bpf_trace_tasklet+0x160/0x160 [ 838.295106][T21403] ? enqueue_to_backlog+0xe90/0xe90 [ 838.300309][T21403] ? _copy_from_iter+0x242/0x1290 [ 838.305341][T21403] ? tun_rx_batched+0x186/0x790 [ 838.310188][T21403] tun_rx_batched+0x1df/0x790 [ 838.314865][T21403] ? pskb_may_pull+0xf0/0xf0 [ 838.319444][T21403] ? __local_bh_enable_ip+0x13a/0x1c0 [ 838.324807][T21403] ? lockdep_hardirqs_on+0x98/0x150 [ 838.329996][T21403] ? read_lock_is_recursive+0x20/0x20 [ 838.335352][T21403] ? __local_bh_enable_ip+0x13a/0x1c0 [ 838.340709][T21403] ? _local_bh_enable+0xa0/0xa0 [ 838.345541][T21403] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 838.351536][T21403] tun_get_user+0x2886/0x3d70 [ 838.356295][T21403] ? tun_get_user+0x24b1/0x3d70 [ 838.361129][T21403] ? aa_file_perm+0x3e3/0xee0 [ 838.365792][T21403] ? rcu_read_unlock+0xa0/0xa0 [ 838.370548][T21403] ? tun_get+0x1c/0x2e0 [ 838.374687][T21403] ? __lock_acquire+0x7d80/0x7d80 [ 838.379699][T21403] ? tun_get+0x1c/0x2e0 [ 838.383861][T21403] tun_chr_write_iter+0x119/0x200 [ 838.388871][T21403] vfs_write+0x474/0x9a0 [ 838.393103][T21403] ? file_end_write+0x250/0x250 [ 838.397978][T21403] ? __fget_files+0x3fc/0x460 [ 838.402642][T21403] ? __fdget_pos+0x1d8/0x330 [ 838.407220][T21403] ? ksys_write+0x74/0x260 [ 838.411621][T21403] ksys_write+0x151/0x260 [ 838.415939][T21403] ? __ia32_sys_read+0x90/0x90 [ 838.420689][T21403] ? lockdep_hardirqs_on+0x98/0x150 [ 838.425875][T21403] do_syscall_64+0x55/0xb0 [ 838.430271][T21403] ? clear_bhb_loop+0x40/0x90 [ 838.434931][T21403] ? clear_bhb_loop+0x40/0x90 [ 838.439591][T21403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.445466][T21403] RIP: 0033:0x7f0451b5e98e [ 838.449867][T21403] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 838.469455][T21403] RSP: 002b:00007f0452b40fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 838.477850][T21403] RAX: ffffffffffffffda RBX: 00007f0452b416c0 RCX: 00007f0451b5e98e [ 838.485801][T21403] RDX: 0000000000000fba RSI: 0000200000002900 RDI: 00000000000000c8 [ 838.493754][T21403] RBP: 00007f0451c3503b R08: 0000000000000000 R09: 0000000000000000 [ 838.501726][T21403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.509694][T21403] R13: 00007f0451e26038 R14: 00007f0451e25fa0 R15: 00007ffdf8edcd98 [ 838.517675][T21403] [ 839.381043][ T27] audit: type=1326 audit(1788915234.661:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.9.4358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0451b9e159 code=0x0 [ 839.698600][T21451] FAULT_INJECTION: forcing a failure. [ 839.698600][T21451] name fail_futex, interval 1, probability 0, space 0, times 0 [ 839.759801][T21451] CPU: 0 PID: 21451 Comm: syz.1.4363 Not tainted syzkaller #0 [ 839.767312][T21451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.777357][T21451] Call Trace: [ 839.780623][T21451] [ 839.783541][T21451] dump_stack_lvl+0x18c/0x250 [ 839.788207][T21451] ? _local_bh_enable+0xa0/0xa0 [ 839.793044][T21451] ? show_regs_print_info+0x20/0x20 [ 839.798230][T21451] ? load_image+0x420/0x420 [ 839.802732][T21451] ? tun_get_user+0x2967/0x3d70 [ 839.807576][T21451] should_fail_ex+0x394/0x4c0 [ 839.812245][T21451] get_futex_key+0x136/0x1030 [ 839.816907][T21451] ? rcu_read_unlock+0xa0/0xa0 [ 839.821656][T21451] ? ref_tracker_free+0x686/0x830 [ 839.826662][T21451] ? futex_setup_timer+0xc0/0xc0 [ 839.831582][T21451] ? __asan_memset+0x22/0x40 [ 839.836159][T21451] futex_wake+0x127/0x4f0 [ 839.840473][T21451] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 839.847050][T21451] ? futex_wake_mark+0x150/0x150 [ 839.851998][T21451] ? file_end_write+0xdb/0x250 [ 839.856749][T21451] ? vfs_write+0x5de/0x9a0 [ 839.861153][T21451] do_futex+0x35d/0x3e0 [ 839.865306][T21451] ? file_end_write+0x250/0x250 [ 839.870143][T21451] ? __ia32_sys_get_robust_list+0x110/0x110 [ 839.876023][T21451] __se_sys_futex+0x3a9/0x440 [ 839.880687][T21451] ? __x64_sys_futex+0xf0/0xf0 [ 839.885437][T21451] ? __x64_sys_futex+0x21/0xf0 [ 839.890185][T21451] do_syscall_64+0x55/0xb0 [ 839.894591][T21451] ? clear_bhb_loop+0x40/0x90 [ 839.899255][T21451] ? clear_bhb_loop+0x40/0x90 [ 839.903917][T21451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 839.909791][T21451] RIP: 0033:0x7fb564b9e159 [ 839.914195][T21451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.933785][T21451] RSP: 002b:00007fb565a3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 839.942188][T21451] RAX: ffffffffffffffda RBX: 00007fb564e25fa8 RCX: 00007fb564b9e159 [ 839.950143][T21451] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb564e25fac [ 839.958094][T21451] RBP: 00007fb564e25fa0 R08: 0000000000745a32 R09: 0000000000000000 [ 839.966046][T21451] R10: 0000000000000fba R11: 0000000000000246 R12: 0000000000000000 [ 839.974019][T21451] R13: 00007fb564e26038 R14: 00007ffd8415e9c0 R15: 00007ffd8415eaa8 [ 839.981995][T21451] [ 840.434454][T21468] binder: 21466:21468 ioctl 4018620d 0 returned -22 [ 840.485932][T21468] FAULT_INJECTION: forcing a failure. [ 840.485932][T21468] name failslab, interval 1, probability 0, space 0, times 0 [ 840.574645][T21468] CPU: 0 PID: 21468 Comm: syz.6.4368 Not tainted syzkaller #0 [ 840.582148][T21468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.592272][T21468] Call Trace: [ 840.595535][T21468] [ 840.598452][T21468] dump_stack_lvl+0x18c/0x250 [ 840.603122][T21468] ? show_regs_print_info+0x20/0x20 [ 840.608313][T21468] ? load_image+0x420/0x420 [ 840.612803][T21468] ? __might_sleep+0xe0/0xe0 [ 840.617380][T21468] ? __lock_acquire+0x7d80/0x7d80 [ 840.622392][T21468] ? percpu_ref_put+0x12/0x100 [ 840.627149][T21468] should_fail_ex+0x394/0x4c0 [ 840.631815][T21468] should_failslab+0x9/0x20 [ 840.636310][T21468] slab_pre_alloc_hook+0x59/0x300 [ 840.641330][T21468] kmem_cache_alloc+0x5a/0x2c0 [ 840.646083][T21468] ? vm_area_dup+0x61/0x270 [ 840.650569][T21468] vm_area_dup+0x61/0x270 [ 840.654900][T21468] __split_vma+0x1a8/0xc20 [ 840.659311][T21468] ? mmap_write_unlock+0x160/0x160 [ 840.664419][T21468] ? move_page_tables+0x1477/0x1970 [ 840.669602][T21468] do_vmi_align_munmap+0x310/0x16a0 [ 840.674812][T21468] ? move_page_tables+0x186a/0x1970 [ 840.679995][T21468] ? do_vmi_munmap+0x2d0/0x2d0 [ 840.684750][T21468] ? mtree_range_walk+0x68c/0x7b0 [ 840.689767][T21468] ? mas_find_setup+0x47f/0x590 [ 840.694602][T21468] do_vmi_munmap+0x252/0x2d0 [ 840.699181][T21468] move_vma+0xcb3/0x16a0 [ 840.703417][T21468] ? vma_expandable+0xf0/0xf0 [ 840.708075][T21468] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 840.713610][T21468] ? bpf_lsm_mmap_addr+0x9/0x10 [ 840.718444][T21468] ? security_mmap_addr+0x72/0x90 [ 840.723459][T21468] ? get_unmapped_area+0x2f9/0x360 [ 840.728560][T21468] mremap_to+0x51f/0x5d0 [ 840.732794][T21468] __se_sys_mremap+0x6a8/0x11a0 [ 840.737636][T21468] ? __x64_sys_mremap+0xc0/0xc0 [ 840.742477][T21468] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 840.748443][T21468] ? lock_chain_count+0x20/0x20 [ 840.753281][T21468] ? lockdep_hardirqs_on+0x98/0x150 [ 840.758486][T21468] ? __x64_sys_mremap+0x20/0xc0 [ 840.763339][T21468] do_syscall_64+0x55/0xb0 [ 840.767741][T21468] ? clear_bhb_loop+0x40/0x90 [ 840.772406][T21468] ? clear_bhb_loop+0x40/0x90 [ 840.777069][T21468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.782949][T21468] RIP: 0033:0x7faf9159e159 [ 840.787352][T21468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.806943][T21468] RSP: 002b:00007faf923aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 840.815344][T21468] RAX: ffffffffffffffda RBX: 00007faf91825fa0 RCX: 00007faf9159e159 [ 840.823311][T21468] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000 [ 840.831264][T21468] RBP: 00007faf9163503b R08: 0000200000ffd000 R09: 0000000000000000 [ 840.839223][T21468] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 840.847198][T21468] R13: 00007faf91826038 R14: 00007faf91825fa0 R15: 00007fff48ff0b88 [ 840.855166][T21468] [ 841.157252][T21484] FAULT_INJECTION: forcing a failure. [ 841.157252][T21484] name failslab, interval 1, probability 0, space 0, times 0 [ 841.205225][T21484] CPU: 0 PID: 21484 Comm: syz.3.4372 Not tainted syzkaller #0 [ 841.212709][T21484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 841.222749][T21484] Call Trace: [ 841.226017][T21484] [ 841.228935][T21484] dump_stack_lvl+0x18c/0x250 [ 841.233629][T21484] ? show_regs_print_info+0x20/0x20 [ 841.238819][T21484] ? load_image+0x420/0x420 [ 841.243309][T21484] ? __might_sleep+0xe0/0xe0 [ 841.247886][T21484] ? __lock_acquire+0x7d80/0x7d80 [ 841.252898][T21484] should_fail_ex+0x394/0x4c0 [ 841.257569][T21484] should_failslab+0x9/0x20 [ 841.262065][T21484] slab_pre_alloc_hook+0x59/0x300 [ 841.267081][T21484] ? snd_seq_oss_readq_new+0x51/0x250 [ 841.272443][T21484] __kmem_cache_alloc_node+0x53/0x250 [ 841.277807][T21484] ? snd_seq_oss_readq_new+0x51/0x250 [ 841.283165][T21484] kmalloc_trace+0x2a/0xe0 [ 841.287572][T21484] snd_seq_oss_readq_new+0x51/0x250 [ 841.292758][T21484] snd_seq_oss_open+0x807/0xf10 [ 841.297599][T21484] ? snd_seq_oss_delete_client+0x50/0x50 [ 841.303234][T21484] ? trace_raw_output_contention_end+0xd0/0xd0 [ 841.309410][T21484] ? soundcore_open+0x274/0x4c0 [ 841.314342][T21484] ? odev_open+0x5c/0xa0 [ 841.318591][T21484] ? __lock_acquire+0x7d80/0x7d80 [ 841.323607][T21484] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 841.329573][T21484] ? async_call_lookup_ports+0x20/0x20 [ 841.335021][T21484] ? do_raw_spin_unlock+0x121/0x230 [ 841.340212][T21484] ? soundcore_open+0x310/0x4c0 [ 841.345051][T21484] odev_open+0x67/0xa0 [ 841.349110][T21484] chrdev_open+0x58c/0x600 [ 841.353534][T21484] ? cd_forget+0x160/0x160 [ 841.357943][T21484] ? fsnotify_perm+0x3ed/0x5e0 [ 841.362699][T21484] do_dentry_open+0x880/0x14b0 [ 841.367455][T21484] ? cd_forget+0x160/0x160 [ 841.371860][T21484] path_openat+0x284f/0x3270 [ 841.376455][T21484] ? do_sys_openat2+0xda/0x1d0 [ 841.381207][T21484] ? __x64_sys_openat+0x139/0x160 [ 841.386220][T21484] ? verify_lock_unused+0x140/0x140 [ 841.391406][T21484] ? do_filp_open+0x430/0x430 [ 841.396099][T21484] do_filp_open+0x1f2/0x430 [ 841.400594][T21484] ? vfs_tmpfile+0x620/0x620 [ 841.405183][T21484] ? _raw_spin_unlock+0x28/0x40 [ 841.410032][T21484] ? alloc_fd+0x590/0x640 [ 841.414370][T21484] do_sys_openat2+0x134/0x1d0 [ 841.419033][T21484] ? do_sys_open+0xe0/0xe0 [ 841.423437][T21484] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 841.429402][T21484] ? lock_chain_count+0x20/0x20 [ 841.434240][T21484] __x64_sys_openat+0x139/0x160 [ 841.439078][T21484] do_syscall_64+0x55/0xb0 [ 841.443479][T21484] ? clear_bhb_loop+0x40/0x90 [ 841.448141][T21484] ? clear_bhb_loop+0x40/0x90 [ 841.452801][T21484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.458679][T21484] RIP: 0033:0x7f2ecd19e159 [ 841.463085][T21484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.482673][T21484] RSP: 002b:00007f2ece089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 841.491072][T21484] RAX: ffffffffffffffda RBX: 00007f2ecd425fa0 RCX: 00007f2ecd19e159 [ 841.499029][T21484] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 841.506981][T21484] RBP: 00007f2ecd23503b R08: 0000000000000000 R09: 0000000000000000 [ 841.514935][T21484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.522887][T21484] R13: 00007f2ecd426038 R14: 00007f2ecd425fa0 R15: 00007ffe7bde67a8 [ 841.530853][T21484] [ 842.047617][ T27] audit: type=1326 audit(1788915237.281:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21494 comm="syz.6.4374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf9159e159 code=0x0 [ 842.096622][T21501] FAULT_INJECTION: forcing a failure. [ 842.096622][T21501] name failslab, interval 1, probability 0, space 0, times 0 [ 842.109283][T21501] CPU: 0 PID: 21501 Comm: syz.9.4376 Not tainted syzkaller #0 [ 842.116741][T21501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.126780][T21501] Call Trace: [ 842.130048][T21501] [ 842.132966][T21501] dump_stack_lvl+0x18c/0x250 [ 842.137633][T21501] ? show_regs_print_info+0x20/0x20 [ 842.142818][T21501] ? load_image+0x420/0x420 [ 842.147310][T21501] ? __rt6_find_exception_rcu+0x13c/0x4d0 [ 842.153016][T21501] should_fail_ex+0x394/0x4c0 [ 842.157770][T21501] should_failslab+0x9/0x20 [ 842.162265][T21501] slab_pre_alloc_hook+0x59/0x300 [ 842.167282][T21501] kmem_cache_alloc+0x5a/0x2c0 [ 842.172048][T21501] ? dst_alloc+0x105/0x170 [ 842.176454][T21501] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 842.182068][T21501] dst_alloc+0x105/0x170 [ 842.186299][T21501] ip6_pol_route+0x94f/0x1230 [ 842.190964][T21501] ? ip6_pol_route+0x171/0x1230 [ 842.195803][T21501] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 842.201443][T21501] ? ip6t_do_table+0x13c4/0x1570 [ 842.206370][T21501] fib6_rule_lookup+0x226/0x580 [ 842.211206][T21501] ? ip6_route_input_lookup+0xc0/0xc0 [ 842.216564][T21501] ? fib6_lookup+0x2d0/0x2d0 [ 842.221138][T21501] ? nf_conntrack_free+0x309/0x380 [ 842.226245][T21501] ? ip6t_do_table+0x1cb/0x1570 [ 842.231086][T21501] ip6_route_input+0x78a/0xab0 [ 842.235837][T21501] ? ip6_multipath_l3_keys+0x6b0/0x6b0 [ 842.241299][T21501] ? __lock_acquire+0x7d80/0x7d80 [ 842.246311][T21501] ? ip6_rcv_finish_core+0x21d/0x420 [ 842.251584][T21501] ip6_rcv_finish+0x143/0x230 [ 842.256248][T21501] NF_HOOK+0x32d/0x3b0 [ 842.260305][T21501] ? sock_wfree+0x24f/0x600 [ 842.264792][T21501] ? ip6_rcv_core+0x1082/0x1700 [ 842.269647][T21501] ? net_zcopy_put_abort+0x90/0x90 [ 842.274768][T21501] ? NF_HOOK+0x9f/0x3b0 [ 842.278920][T21501] ? ip6_rcv_core+0x1700/0x1700 [ 842.283764][T21501] ? net_zcopy_put_abort+0x90/0x90 [ 842.288868][T21501] ? ip6_rcv_finish_core+0x420/0x420 [ 842.294143][T21501] __netif_receive_skb+0xcc/0x290 [ 842.299159][T21501] ? netif_receive_skb+0x106/0x720 [ 842.304261][T21501] netif_receive_skb+0x1bc/0x720 [ 842.309192][T21501] ? __bpf_trace_tasklet+0x160/0x160 [ 842.314463][T21501] ? enqueue_to_backlog+0xe90/0xe90 [ 842.319672][T21501] ? _copy_from_iter+0x242/0x1290 [ 842.324692][T21501] ? tun_rx_batched+0x186/0x790 [ 842.329532][T21501] tun_rx_batched+0x1df/0x790 [ 842.334205][T21501] ? pskb_may_pull+0xf0/0xf0 [ 842.338788][T21501] ? __local_bh_enable_ip+0x13a/0x1c0 [ 842.344178][T21501] ? lockdep_hardirqs_on+0x98/0x150 [ 842.349367][T21501] ? read_lock_is_recursive+0x20/0x20 [ 842.354723][T21501] ? __local_bh_enable_ip+0x13a/0x1c0 [ 842.360082][T21501] ? _local_bh_enable+0xa0/0xa0 [ 842.364914][T21501] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 842.370895][T21501] tun_get_user+0x2886/0x3d70 [ 842.375573][T21501] ? tun_get_user+0x24b1/0x3d70 [ 842.380411][T21501] ? aa_file_perm+0x3e3/0xee0 [ 842.385074][T21501] ? rcu_read_unlock+0xa0/0xa0 [ 842.389858][T21501] ? tun_get+0x1c/0x2e0 [ 842.394001][T21501] ? __lock_acquire+0x7d80/0x7d80 [ 842.399015][T21501] ? tun_get+0x1c/0x2e0 [ 842.403164][T21501] tun_chr_write_iter+0x119/0x200 [ 842.408183][T21501] vfs_write+0x474/0x9a0 [ 842.412415][T21501] ? file_end_write+0x250/0x250 [ 842.417251][T21501] ? __fget_files+0x3fc/0x460 [ 842.421924][T21501] ? __fdget_pos+0x1d8/0x330 [ 842.426498][T21501] ? ksys_write+0x74/0x260 [ 842.430904][T21501] ksys_write+0x151/0x260 [ 842.435221][T21501] ? __ia32_sys_read+0x90/0x90 [ 842.439977][T21501] ? lockdep_hardirqs_on+0x98/0x150 [ 842.445176][T21501] do_syscall_64+0x55/0xb0 [ 842.449581][T21501] ? clear_bhb_loop+0x40/0x90 [ 842.454243][T21501] ? clear_bhb_loop+0x40/0x90 [ 842.458904][T21501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.464779][T21501] RIP: 0033:0x7f0451b5e98e [ 842.469183][T21501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 842.488773][T21501] RSP: 002b:00007f0452b40fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 842.497173][T21501] RAX: ffffffffffffffda RBX: 00007f0452b416c0 RCX: 00007f0451b5e98e [ 842.505125][T21501] RDX: 0000000000000fba RSI: 0000200000002900 RDI: 00000000000000c8 [ 842.513079][T21501] RBP: 00007f0451c3503b R08: 0000000000000000 R09: 0000000000000000 [ 842.521033][T21501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.528988][T21501] R13: 00007f0451e26038 R14: 00007f0451e25fa0 R15: 00007ffdf8edcd98 [ 842.536952][T21501] [ 842.742905][ T5814] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 842.934140][ T5814] usb 2-1: not running at top speed; connect to a high speed hub [ 842.960109][ T5814] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 843.016645][ T5814] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 843.074383][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.120021][ T5814] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 843.182670][ T5814] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 843.432168][ T5814] usb 2-1: USB disconnect, device number 38 [ 843.470450][ T5814] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 843.521416][ T5814] cyberjack 2-1:1.0: device disconnected [ 843.985141][T21542] FAULT_INJECTION: forcing a failure. [ 843.985141][T21542] name failslab, interval 1, probability 0, space 0, times 0 [ 843.997888][T21542] CPU: 0 PID: 21542 Comm: syz.3.4387 Not tainted syzkaller #0 [ 844.005356][T21542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.015402][T21542] Call Trace: [ 844.018674][T21542] [ 844.021591][T21542] dump_stack_lvl+0x18c/0x250 [ 844.026280][T21542] ? show_regs_print_info+0x20/0x20 [ 844.031473][T21542] ? load_image+0x420/0x420 [ 844.035962][T21542] ? __rt6_find_exception_rcu+0x13c/0x4d0 [ 844.041674][T21542] should_fail_ex+0x394/0x4c0 [ 844.046349][T21542] should_failslab+0x9/0x20 [ 844.050870][T21542] slab_pre_alloc_hook+0x59/0x300 [ 844.055889][T21542] kmem_cache_alloc+0x5a/0x2c0 [ 844.060637][T21542] ? dst_alloc+0x105/0x170 [ 844.065043][T21542] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 844.070656][T21542] dst_alloc+0x105/0x170 [ 844.074887][T21542] ip6_pol_route+0x94f/0x1230 [ 844.079553][T21542] ? ip6_pol_route+0x171/0x1230 [ 844.084411][T21542] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 844.090037][T21542] ? ip6t_do_table+0x13c4/0x1570 [ 844.094960][T21542] fib6_rule_lookup+0x226/0x580 [ 844.099800][T21542] ? ip6_route_input_lookup+0xc0/0xc0 [ 844.105156][T21542] ? fib6_lookup+0x2d0/0x2d0 [ 844.109733][T21542] ? nf_conntrack_free+0x309/0x380 [ 844.114837][T21542] ? ip6t_do_table+0x1cb/0x1570 [ 844.119678][T21542] ip6_route_input+0x78a/0xab0 [ 844.124430][T21542] ? ip6_multipath_l3_keys+0x6b0/0x6b0 [ 844.129889][T21542] ? __lock_acquire+0x7d80/0x7d80 [ 844.134900][T21542] ? ip6_rcv_finish_core+0x21d/0x420 [ 844.140171][T21542] ip6_rcv_finish+0x143/0x230 [ 844.144842][T21542] NF_HOOK+0x32d/0x3b0 [ 844.148896][T21542] ? sock_wfree+0x24f/0x600 [ 844.153385][T21542] ? ip6_rcv_core+0x1082/0x1700 [ 844.158235][T21542] ? net_zcopy_put_abort+0x90/0x90 [ 844.163331][T21542] ? NF_HOOK+0x9f/0x3b0 [ 844.167476][T21542] ? ip6_rcv_core+0x1700/0x1700 [ 844.172313][T21542] ? net_zcopy_put_abort+0x90/0x90 [ 844.177412][T21542] ? ip6_rcv_finish_core+0x420/0x420 [ 844.182709][T21542] __netif_receive_skb+0xcc/0x290 [ 844.187730][T21542] ? netif_receive_skb+0x106/0x720 [ 844.192835][T21542] netif_receive_skb+0x1bc/0x720 [ 844.197777][T21542] ? __bpf_trace_tasklet+0x160/0x160 [ 844.203077][T21542] ? enqueue_to_backlog+0xe90/0xe90 [ 844.208264][T21542] ? _copy_from_iter+0x242/0x1290 [ 844.213296][T21542] ? tun_rx_batched+0x186/0x790 [ 844.218135][T21542] tun_rx_batched+0x1df/0x790 [ 844.222800][T21542] ? pskb_may_pull+0xf0/0xf0 [ 844.227374][T21542] ? __local_bh_enable_ip+0x13a/0x1c0 [ 844.232728][T21542] ? lockdep_hardirqs_on+0x98/0x150 [ 844.237937][T21542] ? read_lock_is_recursive+0x20/0x20 [ 844.243290][T21542] ? __local_bh_enable_ip+0x13a/0x1c0 [ 844.248641][T21542] ? _local_bh_enable+0xa0/0xa0 [ 844.253472][T21542] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 844.259471][T21542] tun_get_user+0x2886/0x3d70 [ 844.264146][T21542] ? tun_get_user+0x24b1/0x3d70 [ 844.268979][T21542] ? aa_file_perm+0x3e3/0xee0 [ 844.273646][T21542] ? rcu_read_unlock+0xa0/0xa0 [ 844.278400][T21542] ? tun_get+0x1c/0x2e0 [ 844.282542][T21542] ? __lock_acquire+0x7d80/0x7d80 [ 844.287555][T21542] ? tun_get+0x1c/0x2e0 [ 844.291697][T21542] tun_chr_write_iter+0x119/0x200 [ 844.296710][T21542] vfs_write+0x474/0x9a0 [ 844.300948][T21542] ? file_end_write+0x250/0x250 [ 844.305788][T21542] ? __fget_files+0x3fc/0x460 [ 844.310454][T21542] ? __fdget_pos+0x1d8/0x330 [ 844.315066][T21542] ? ksys_write+0x74/0x260 [ 844.319487][T21542] ksys_write+0x151/0x260 [ 844.323839][T21542] ? __ia32_sys_read+0x90/0x90 [ 844.328605][T21542] ? lockdep_hardirqs_on+0x98/0x150 [ 844.333799][T21542] do_syscall_64+0x55/0xb0 [ 844.338208][T21542] ? clear_bhb_loop+0x40/0x90 [ 844.342871][T21542] ? clear_bhb_loop+0x40/0x90 [ 844.347537][T21542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.353415][T21542] RIP: 0033:0x7f2ecd15e98e [ 844.357819][T21542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 844.377427][T21542] RSP: 002b:00007f2ece088fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 844.385837][T21542] RAX: ffffffffffffffda RBX: 00007f2ece0896c0 RCX: 00007f2ecd15e98e [ 844.393791][T21542] RDX: 0000000000000fba RSI: 0000200000002900 RDI: 00000000000000c8 [ 844.401747][T21542] RBP: 00007f2ecd23503b R08: 0000000000000000 R09: 0000000000000000 [ 844.409704][T21542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.417658][T21542] R13: 00007f2ecd426038 R14: 00007f2ecd425fa0 R15: 00007ffe7bde67a8 [ 844.425625][T21542] [ 844.472130][ T27] audit: type=1326 audit(1788915239.741:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.6.4386" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf9159e159 code=0x0 [ 844.973174][T15690] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 844.986686][T15690] CPU: 0 PID: 15690 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 844.994322][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 845.004363][T15690] Workqueue: hci2 hci_rx_work [ 845.009031][T15690] Call Trace: [ 845.012296][T15690] [ 845.015213][T15690] dump_stack_lvl+0x18c/0x250 [ 845.019883][T15690] ? show_regs_print_info+0x20/0x20 [ 845.025065][T15690] ? load_image+0x420/0x420 [ 845.029552][T15690] ? sysfs_create_dir_ns+0x22f/0x2a0 [ 845.034831][T15690] sysfs_create_dir_ns+0x26e/0x2a0 [ 845.039925][T15690] ? __lock_acquire+0x7d80/0x7d80 [ 845.044937][T15690] ? sysfs_warn_dup+0xa0/0xa0 [ 845.049602][T15690] ? do_raw_spin_unlock+0x121/0x230 [ 845.054794][T15690] kobject_add_internal+0x617/0xc90 [ 845.059982][T15690] kobject_add+0x164/0x240 [ 845.064394][T15690] ? kobject_init+0x1d0/0x1d0 [ 845.069060][T15690] ? get_device_parent+0x366/0x390 [ 845.074157][T15690] device_add+0x3fa/0xc40 [ 845.078473][T15690] hci_conn_add_sysfs+0xd5/0x1e0 [ 845.083402][T15690] le_conn_complete_evt+0xe9f/0x1480 [ 845.088679][T15690] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 845.094909][T15690] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 845.100529][T15690] ? mutex_unlock+0x10/0x10 [ 845.105020][T15690] ? skb_pull_data+0xf0/0x1f0 [ 845.109683][T15690] hci_le_conn_complete_evt+0x187/0x440 [ 845.115216][T15690] ? hci_remote_host_features_evt+0x150/0x150 [ 845.121269][T15690] hci_event_packet+0x7b4/0x1280 [ 845.126197][T15690] ? __lock_acquire+0x7d80/0x7d80 [ 845.131206][T15690] ? lock_chain_count+0x20/0x20 [ 845.136039][T15690] ? bis_list+0x290/0x290 [ 845.140353][T15690] ? kcov_remote_start+0x513/0x810 [ 845.145456][T15690] ? lockdep_hardirqs_on+0x98/0x150 [ 845.150644][T15690] ? hci_send_to_monitor+0xd7/0x4f0 [ 845.155826][T15690] hci_rx_work+0x43a/0xd60 [ 845.160228][T15690] ? process_scheduled_works+0x975/0x1600 [ 845.165935][T15690] process_scheduled_works+0xa60/0x1600 [ 845.171497][T15690] ? worker_attach_to_pool+0x370/0x370 [ 845.176944][T15690] ? assign_work+0x3cc/0x5d0 [ 845.181522][T15690] worker_thread+0xa5e/0xfe0 [ 845.186104][T15690] ? _raw_spin_unlock+0x40/0x40 [ 845.190934][T15690] ? __kthread_parkme+0x71/0x1c0 [ 845.195860][T15690] kthread+0x2fa/0x390 [ 845.199935][T15690] ? pr_cont_work+0x550/0x550 [ 845.204597][T15690] ? kthread_blkcg+0xd0/0xd0 [ 845.209175][T15690] ret_from_fork+0x48/0x80 [ 845.213577][T15690] ? kthread_blkcg+0xd0/0xd0 [ 845.218153][T15690] ret_from_fork_asm+0x11/0x20 [ 845.222909][T15690] [ 845.244167][T15690] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 845.266289][T15690] Bluetooth: hci2: failed to register connection device [ 845.360326][T21567] tmpfs: Bad value for 'mpol' [ 845.397636][T21569] netlink: 'syz.6.4398': attribute type 1 has an invalid length. [ 845.482457][T21573] tipc: Started in network mode [ 845.512066][T21573] tipc: Node identity 2000004, cluster identity 4711 [ 845.583060][T21573] tipc: Node number set to 33554436 [ 845.757355][ T27] audit: type=1326 audit(1788915241.041:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.6.4403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf9159e159 code=0x0 [ 845.993908][T15690] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 847.427126][ T27] audit: type=1326 audit(1788915242.711:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21638 comm="syz.9.4425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0451b9e159 code=0x0 [ 847.725395][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4430'. [ 848.165115][T21670] 8021q: adding VLAN 0 to HW filter on device .` [ 848.308646][T21670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 848.425371][T21051] bond2: (slave .`): link status definitely up, 20000 Mbps full duplex [ 848.494604][T21051] bond2: (slave .`): making interface the new active one [ 848.556462][T21051] bond2: active interface up! [ 848.923717][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4441'. [ 849.178377][ T27] audit: type=1326 audit(1788915244.461:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21708 comm="syz.9.4443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0451b9e159 code=0x0 [ 849.427395][ T27] audit: type=1800 audit(1788915244.711:172): pid=21717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4445" name="bmControls" dev="configfs" ino=64183 res=0 errno=0 [ 849.501544][T21723] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 849.926298][T21735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 850.053974][T21741] fuse: Unknown parameter 'group_id00000000000000000000' [ 850.153132][T21747] FAULT_INJECTION: forcing a failure. [ 850.153132][T21747] name failslab, interval 1, probability 0, space 0, times 0 [ 850.165806][T21747] CPU: 0 PID: 21747 Comm: syz.3.4454 Not tainted syzkaller #0 [ 850.173248][T21747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.183290][T21747] Call Trace: [ 850.186573][T21747] [ 850.189490][T21747] dump_stack_lvl+0x18c/0x250 [ 850.194158][T21747] ? show_regs_print_info+0x20/0x20 [ 850.199365][T21747] ? load_image+0x420/0x420 [ 850.203855][T21747] ? __rt6_find_exception_rcu+0x13c/0x4d0 [ 850.209566][T21747] should_fail_ex+0x394/0x4c0 [ 850.214232][T21747] should_failslab+0x9/0x20 [ 850.218754][T21747] slab_pre_alloc_hook+0x59/0x300 [ 850.223801][T21747] kmem_cache_alloc+0x5a/0x2c0 [ 850.228562][T21747] ? dst_alloc+0x105/0x170 [ 850.232966][T21747] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 850.238580][T21747] dst_alloc+0x105/0x170 [ 850.242810][T21747] ip6_pol_route+0x94f/0x1230 [ 850.247472][T21747] ? ip6_pol_route+0x171/0x1230 [ 850.252313][T21747] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 850.257937][T21747] ? ip6t_do_table+0x13c4/0x1570 [ 850.262869][T21747] fib6_rule_lookup+0x226/0x580 [ 850.267711][T21747] ? ip6_route_input_lookup+0xc0/0xc0 [ 850.273156][T21747] ? fib6_lookup+0x2d0/0x2d0 [ 850.277758][T21747] ? nf_conntrack_free+0x309/0x380 [ 850.282862][T21747] ? ip6t_do_table+0x1cb/0x1570 [ 850.287723][T21747] ip6_route_input+0x78a/0xab0 [ 850.292483][T21747] ? ip6_multipath_l3_keys+0x6b0/0x6b0 [ 850.297942][T21747] ? __lock_acquire+0x7d80/0x7d80 [ 850.302954][T21747] ? ip6_rcv_finish_core+0x21d/0x420 [ 850.308225][T21747] ip6_rcv_finish+0x143/0x230 [ 850.312890][T21747] NF_HOOK+0x32d/0x3b0 [ 850.316942][T21747] ? sock_wfree+0x24f/0x600 [ 850.321431][T21747] ? ip6_rcv_core+0x1082/0x1700 [ 850.326290][T21747] ? net_zcopy_put_abort+0x90/0x90 [ 850.331407][T21747] ? NF_HOOK+0x9f/0x3b0 [ 850.335561][T21747] ? ip6_rcv_core+0x1700/0x1700 [ 850.340405][T21747] ? net_zcopy_put_abort+0x90/0x90 [ 850.345515][T21747] ? ip6_rcv_finish_core+0x420/0x420 [ 850.350798][T21747] __netif_receive_skb+0xcc/0x290 [ 850.355817][T21747] ? netif_receive_skb+0x106/0x720 [ 850.360921][T21747] netif_receive_skb+0x1bc/0x720 [ 850.365849][T21747] ? __bpf_trace_tasklet+0x160/0x160 [ 850.371122][T21747] ? enqueue_to_backlog+0xe90/0xe90 [ 850.376308][T21747] ? _copy_from_iter+0x242/0x1290 [ 850.381348][T21747] ? tun_rx_batched+0x186/0x790 [ 850.386191][T21747] tun_rx_batched+0x1df/0x790 [ 850.390860][T21747] ? pskb_may_pull+0xf0/0xf0 [ 850.395452][T21747] ? __local_bh_enable_ip+0x13a/0x1c0 [ 850.400811][T21747] ? lockdep_hardirqs_on+0x98/0x150 [ 850.405995][T21747] ? read_lock_is_recursive+0x20/0x20 [ 850.411359][T21747] ? __local_bh_enable_ip+0x13a/0x1c0 [ 850.416714][T21747] ? _local_bh_enable+0xa0/0xa0 [ 850.421547][T21747] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 850.427525][T21747] tun_get_user+0x2886/0x3d70 [ 850.432199][T21747] ? tun_get_user+0x24b1/0x3d70 [ 850.437037][T21747] ? aa_file_perm+0x3e3/0xee0 [ 850.441703][T21747] ? rcu_read_unlock+0xa0/0xa0 [ 850.446456][T21747] ? tun_get+0x1c/0x2e0 [ 850.450597][T21747] ? __lock_acquire+0x7d80/0x7d80 [ 850.455610][T21747] ? tun_get+0x1c/0x2e0 [ 850.459752][T21747] tun_chr_write_iter+0x119/0x200 [ 850.464764][T21747] vfs_write+0x474/0x9a0 [ 850.468999][T21747] ? file_end_write+0x250/0x250 [ 850.473858][T21747] ? __fget_files+0x3fc/0x460 [ 850.478528][T21747] ? __fdget_pos+0x1d8/0x330 [ 850.483102][T21747] ? ksys_write+0x74/0x260 [ 850.487504][T21747] ksys_write+0x151/0x260 [ 850.491820][T21747] ? __ia32_sys_read+0x90/0x90 [ 850.496570][T21747] ? lockdep_hardirqs_on+0x98/0x150 [ 850.501757][T21747] do_syscall_64+0x55/0xb0 [ 850.506157][T21747] ? clear_bhb_loop+0x40/0x90 [ 850.510817][T21747] ? clear_bhb_loop+0x40/0x90 [ 850.515494][T21747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.521371][T21747] RIP: 0033:0x7f2ecd15e98e [ 850.525791][T21747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 850.545400][T21747] RSP: 002b:00007f2ece088fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 850.553797][T21747] RAX: ffffffffffffffda RBX: 00007f2ece0896c0 RCX: 00007f2ecd15e98e [ 850.561752][T21747] RDX: 0000000000000fba RSI: 0000200000002900 RDI: 00000000000000c8 [ 850.569704][T21747] RBP: 00007f2ecd23503b R08: 0000000000000000 R09: 0000000000000000 [ 850.577661][T21747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.585613][T21747] R13: 00007f2ecd426038 R14: 00007f2ecd425fa0 R15: 00007ffe7bde67a8 [ 850.593591][T21747] [ 851.361400][ T27] audit: type=1326 audit(1788915246.641:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.3.4461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ecd19e159 code=0x0 [ 851.640687][ T27] audit: type=1800 audit(1788915246.921:174): pid=21777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4462" name="bmControls" dev="configfs" ino=64493 res=0 errno=0 [ 852.041295][T21795] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 852.060701][T21793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 852.474390][ T5786] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 852.878919][ T27] audit: type=1326 audit(1788915248.161:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.6.4477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf9159e159 code=0x0 [ 853.625276][T15690] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 853.824851][T21858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 854.723113][ T27] audit: type=1326 audit(1788915250.001:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21889 comm="syz.9.4495" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0451b9e159 code=0x0 [ 854.816919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.978844][T15690] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 854.989822][T15690] CPU: 0 PID: 15690 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 854.997481][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.007525][T15690] Workqueue: hci4 hci_rx_work [ 855.012197][T15690] Call Trace: [ 855.015467][T15690] [ 855.018387][T15690] dump_stack_lvl+0x18c/0x250 [ 855.023057][T15690] ? show_regs_print_info+0x20/0x20 [ 855.028239][T15690] ? load_image+0x420/0x420 [ 855.032733][T15690] sysfs_create_dir_ns+0x26e/0x2a0 [ 855.037838][T15690] ? __lock_acquire+0x7d80/0x7d80 [ 855.042848][T15690] ? sysfs_warn_dup+0xa0/0xa0 [ 855.047508][T15690] ? do_raw_spin_unlock+0x121/0x230 [ 855.052700][T15690] kobject_add_internal+0x617/0xc90 [ 855.057891][T15690] kobject_add+0x164/0x240 [ 855.062302][T15690] ? kobject_init+0x1d0/0x1d0 [ 855.066968][T15690] ? get_device_parent+0x366/0x390 [ 855.072066][T15690] device_add+0x3fa/0xc40 [ 855.076381][T15690] hci_conn_add_sysfs+0xd5/0x1e0 [ 855.081312][T15690] le_conn_complete_evt+0xe9f/0x1480 [ 855.086601][T15690] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 855.092854][T15690] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 855.098475][T15690] ? mutex_unlock+0x10/0x10 [ 855.102977][T15690] ? skb_pull_data+0xf0/0x1f0 [ 855.107645][T15690] hci_le_conn_complete_evt+0x187/0x440 [ 855.113180][T15690] ? hci_remote_host_features_evt+0x150/0x150 [ 855.119232][T15690] hci_event_packet+0x7b4/0x1280 [ 855.124162][T15690] ? __lock_acquire+0x7d80/0x7d80 [ 855.129174][T15690] ? lock_chain_count+0x20/0x20 [ 855.134029][T15690] ? bis_list+0x290/0x290 [ 855.138347][T15690] ? kcov_remote_start+0x513/0x810 [ 855.143446][T15690] ? lockdep_hardirqs_on+0x98/0x150 [ 855.148633][T15690] ? hci_send_to_monitor+0xd7/0x4f0 [ 855.153816][T15690] hci_rx_work+0x43a/0xd60 [ 855.158223][T15690] ? process_scheduled_works+0x975/0x1600 [ 855.163926][T15690] process_scheduled_works+0xa60/0x1600 [ 855.169471][T15690] ? worker_attach_to_pool+0x370/0x370 [ 855.174918][T15690] ? assign_work+0x3cc/0x5d0 [ 855.179494][T15690] worker_thread+0xa5e/0xfe0 [ 855.184077][T15690] ? _raw_spin_unlock+0x40/0x40 [ 855.188910][T15690] ? __kthread_parkme+0x71/0x1c0 [ 855.193836][T15690] kthread+0x2fa/0x390 [ 855.197891][T15690] ? pr_cont_work+0x550/0x550 [ 855.202559][T15690] ? kthread_blkcg+0xd0/0xd0 [ 855.207146][T15690] ret_from_fork+0x48/0x80 [ 855.211548][T15690] ? kthread_blkcg+0xd0/0xd0 [ 855.216128][T15690] ret_from_fork_asm+0x11/0x20 [ 855.220887][T15690] [ 855.232818][T15690] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 855.247573][T15690] Bluetooth: hci4: failed to register connection device [ 855.404792][T21905] jffs2: notice: (21905) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 855.496076][T21905] team_slave_1: entered promiscuous mode [ 855.543228][T21904] team_slave_1: left promiscuous mode [ 855.700161][T21914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 856.028668][T21928] dlm: non-version read from control device 0 [ 856.049520][T21898] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 856.671879][T21952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 856.900800][T21898] Bluetooth: hci2: command 0x0406 tx timeout [ 857.536132][ T5786] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 858.581020][T22013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4536'. [ 858.650956][T22015] FAULT_INJECTION: forcing a failure. [ 858.650956][T22015] name failslab, interval 1, probability 0, space 0, times 0 [ 858.717227][T22015] CPU: 0 PID: 22015 Comm: syz.1.4537 Not tainted syzkaller #0 [ 858.724710][T22015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 858.734752][T22015] Call Trace: [ 858.738018][T22015] [ 858.740936][T22015] dump_stack_lvl+0x18c/0x250 [ 858.745609][T22015] ? show_regs_print_info+0x20/0x20 [ 858.750790][T22015] ? load_image+0x420/0x420 [ 858.755274][T22015] ? ip_route_newports+0xb3/0x1a0 [ 858.760294][T22015] should_fail_ex+0x394/0x4c0 [ 858.764963][T22015] should_failslab+0x9/0x20 [ 858.769454][T22015] slab_pre_alloc_hook+0x59/0x300 [ 858.774471][T22015] kmem_cache_alloc+0x5a/0x2c0 [ 858.779223][T22015] ? dst_alloc+0x105/0x170 [ 858.783628][T22015] dst_alloc+0x105/0x170 [ 858.787859][T22015] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 858.793920][T22015] ? ip_route_output_key_hash+0x13d/0x330 [ 858.799624][T22015] ip_route_output_key_hash+0x1f3/0x330 [ 858.805173][T22015] ? ip_route_input_rcu+0x3120/0x3120 [ 858.810546][T22015] ? dst_release+0x121/0x1a0 [ 858.815126][T22015] ip_route_output_flow+0x2a/0x150 [ 858.820228][T22015] tcp_v4_connect+0xd03/0x18a0 [ 858.825009][T22015] ? tcp_twsk_unique+0x970/0x970 [ 858.829938][T22015] ? mark_lock+0x94/0x320 [ 858.834255][T22015] __inet_stream_connect+0x254/0xdf0 [ 858.839552][T22015] ? lock_chain_count+0x20/0x20 [ 858.844409][T22015] ? __local_bh_enable_ip+0x13a/0x1c0 [ 858.849803][T22015] ? inet_dgram_connect+0x340/0x340 [ 858.854998][T22015] ? __local_bh_enable_ip+0x13a/0x1c0 [ 858.860365][T22015] ? _local_bh_enable+0xa0/0xa0 [ 858.865214][T22015] inet_stream_connect+0x66/0xa0 [ 858.870161][T22015] __sys_connect+0x3da/0x470 [ 858.874739][T22015] ? __sys_connect_file+0x170/0x170 [ 858.879952][T22015] __x64_sys_connect+0x7a/0x90 [ 858.884704][T22015] do_syscall_64+0x55/0xb0 [ 858.889124][T22015] ? clear_bhb_loop+0x40/0x90 [ 858.893805][T22015] ? clear_bhb_loop+0x40/0x90 [ 858.898471][T22015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.904363][T22015] RIP: 0033:0x7fb564b9e159 [ 858.908763][T22015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.928370][T22015] RSP: 002b:00007fb565a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 858.936772][T22015] RAX: ffffffffffffffda RBX: 00007fb564e25fa0 RCX: 00007fb564b9e159 [ 858.944745][T22015] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 858.952728][T22015] RBP: 00007fb564c3503b R08: 0000000000000000 R09: 0000000000000000 [ 858.960710][T22015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.968678][T22015] R13: 00007fb564e26038 R14: 00007fb564e25fa0 R15: 00007ffd8415eaa8 [ 858.976649][T22015] [ 860.322302][T22074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.111460][T22125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 863.235638][T22136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4570'. [ 863.286646][T22138] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4570'. [ 865.208650][T22164] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4580'. [ 865.229554][T22164] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4580'. [ 866.598256][T22216] (null): rxe_set_mtu: Set mtu to 1024 [ 866.660238][T22218] FAULT_INJECTION: forcing a failure. [ 866.660238][T22218] name failslab, interval 1, probability 0, space 0, times 0 [ 866.672936][T22218] CPU: 0 PID: 22218 Comm: syz.9.4600 Not tainted syzkaller #0 [ 866.680382][T22218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.690454][T22218] Call Trace: [ 866.693725][T22218] [ 866.696643][T22218] dump_stack_lvl+0x18c/0x250 [ 866.701313][T22218] ? show_regs_print_info+0x20/0x20 [ 866.706500][T22218] ? load_image+0x420/0x420 [ 866.711021][T22218] should_fail_ex+0x394/0x4c0 [ 866.715691][T22218] should_failslab+0x9/0x20 [ 866.720184][T22218] slab_pre_alloc_hook+0x59/0x300 [ 866.725222][T22218] ? lockdep_init_map_type+0x9c/0x8e0 [ 866.730579][T22218] ? nf_ct_ext_add+0x1ab/0x3e0 [ 866.735332][T22218] ? nf_ct_ext_add+0x1ab/0x3e0 [ 866.740087][T22218] __kmem_cache_alloc_node+0x53/0x250 [ 866.745450][T22218] ? nf_ct_ext_add+0x1ab/0x3e0 [ 866.750204][T22218] __kmalloc_node_track_caller+0xa4/0x230 [ 866.755940][T22218] krealloc+0x86/0x120 [ 866.760006][T22218] nf_ct_ext_add+0x1ab/0x3e0 [ 866.764613][T22218] init_conntrack+0x561/0xe20 [ 866.769286][T22218] ? early_drop+0x7f0/0x7f0 [ 866.773781][T22218] ? nf_conntrack_find_get+0x670/0x670 [ 866.779227][T22218] ? __siphash_unaligned+0x25c/0x3d0 [ 866.784507][T22218] nf_conntrack_in+0xc29/0x15b0 [ 866.789358][T22218] ? nf_ct_pernet+0x270/0x270 [ 866.794025][T22218] ? ip6t_do_table+0x1cb/0x1570 [ 866.798952][T22218] ? ip6t_alloc_initial_table+0x640/0x640 [ 866.804664][T22218] ? ipv6_defrag+0x2d6/0x3a0 [ 866.809254][T22218] ? ipv4_conntrack_local+0x200/0x200 [ 866.814613][T22218] nf_hook_slow+0xbd/0x200 [ 866.819020][T22218] NF_HOOK+0x21d/0x3b0 [ 866.823077][T22218] ? sock_wfree+0x24f/0x600 [ 866.827569][T22218] ? ip6_rcv_core+0x1082/0x1700 [ 866.832407][T22218] ? net_zcopy_put_abort+0x90/0x90 [ 866.837508][T22218] ? NF_HOOK+0x9f/0x3b0 [ 866.841649][T22218] ? ip6_rcv_core+0x1700/0x1700 [ 866.846488][T22218] ? net_zcopy_put_abort+0x90/0x90 [ 866.851595][T22218] ? ip6_rcv_finish_core+0x420/0x420 [ 866.856867][T22218] __netif_receive_skb+0xcc/0x290 [ 866.861883][T22218] ? netif_receive_skb+0x106/0x720 [ 866.867015][T22218] netif_receive_skb+0x1bc/0x720 [ 866.871941][T22218] ? __bpf_trace_tasklet+0x160/0x160 [ 866.877209][T22218] ? enqueue_to_backlog+0xe90/0xe90 [ 866.882395][T22218] ? _copy_from_iter+0x242/0x1290 [ 866.887408][T22218] ? tun_rx_batched+0x186/0x790 [ 866.892248][T22218] tun_rx_batched+0x1df/0x790 [ 866.896916][T22218] ? pskb_may_pull+0xf0/0xf0 [ 866.901489][T22218] ? __local_bh_enable_ip+0x13a/0x1c0 [ 866.906846][T22218] ? lockdep_hardirqs_on+0x98/0x150 [ 866.912032][T22218] ? read_lock_is_recursive+0x20/0x20 [ 866.917391][T22218] ? __local_bh_enable_ip+0x13a/0x1c0 [ 866.922748][T22218] ? _local_bh_enable+0xa0/0xa0 [ 866.927583][T22218] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 866.933560][T22218] tun_get_user+0x2886/0x3d70 [ 866.938232][T22218] ? tun_get_user+0x24b1/0x3d70 [ 866.943069][T22218] ? aa_file_perm+0x3e3/0xee0 [ 866.947732][T22218] ? rcu_read_unlock+0xa0/0xa0 [ 866.952485][T22218] ? tun_get+0x1c/0x2e0 [ 866.956625][T22218] ? __lock_acquire+0x7d80/0x7d80 [ 866.961645][T22218] ? tun_get+0x1c/0x2e0 [ 866.965789][T22218] tun_chr_write_iter+0x119/0x200 [ 866.970800][T22218] vfs_write+0x474/0x9a0 [ 866.975035][T22218] ? file_end_write+0x250/0x250 [ 866.979876][T22218] ? __fget_files+0x3fc/0x460 [ 866.984547][T22218] ? __fdget_pos+0x1d8/0x330 [ 866.989121][T22218] ? ksys_write+0x74/0x260 [ 866.993522][T22218] ksys_write+0x151/0x260 [ 866.997838][T22218] ? __ia32_sys_read+0x90/0x90 [ 867.002591][T22218] ? lockdep_hardirqs_on+0x98/0x150 [ 867.007782][T22218] do_syscall_64+0x55/0xb0 [ 867.012182][T22218] ? clear_bhb_loop+0x40/0x90 [ 867.016868][T22218] ? clear_bhb_loop+0x40/0x90 [ 867.021531][T22218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.027430][T22218] RIP: 0033:0x7f0451b5e98e [ 867.031830][T22218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 867.051439][T22218] RSP: 002b:00007f0452b40fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 867.059860][T22218] RAX: ffffffffffffffda RBX: 00007f0452b416c0 RCX: 00007f0451b5e98e [ 867.067823][T22218] RDX: 0000000000000fba RSI: 0000200000002900 RDI: 00000000000000c8 [ 867.075778][T22218] RBP: 00007f0451c3503b R08: 0000000000000000 R09: 0000000000000000 [ 867.083814][T22218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.091793][T22218] R13: 00007f0451e26038 R14: 00007f0451e25fa0 R15: 00007ffdf8edcd98 [ 867.099771][T22218] [ 867.102824][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.215077][T22216] infiniband syz1: set active [ 867.220409][T22216] infiniband syz1: added veth1 [ 867.363926][T22216] RDS/IB: syz1: added [ 867.368859][T22216] smc: adding ib device syz1 with port count 1 [ 867.385519][T22216] smc: ib device syz1 port 1 has pnetid [ 867.705331][T22228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 868.201208][T22246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4609'. [ 868.366782][T22249] binder: 22247:22249 ioctl 4018620d 0 returned -22 [ 868.497748][T22254] xt_hashlimit: size too large, truncated to 1048576 [ 869.133103][T18692] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 869.332940][T18692] usb 7-1: Using ep0 maxpacket: 16 [ 869.351860][T18692] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.388540][T18692] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.426954][T18692] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 869.491756][T18692] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 869.554805][T18692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.599143][T18692] usb 7-1: config 0 descriptor?? [ 870.071306][T18692] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0019/input/input5 [ 870.183461][T17105] unregister_netdevice: waiting for syz_tun to become free. Usage count = 2 [ 870.203567][T17105] ref_tracker: syz_tun@ffff8880745085b8 has 1/1 users at [ 870.203567][T17105] netdev_get_by_index+0x79/0xa0 [ 870.203567][T17105] fib6_nh_init+0x1ff/0x1fe0 [ 870.203567][T17105] ip6_route_info_create+0x96c/0x1260 [ 870.203567][T17105] ip6_route_add+0x28/0x160 [ 870.203567][T17105] addrconf_permanent_addr+0x6da/0xa50 [ 870.203567][T17105] addrconf_notify+0x996/0x1010 [ 870.203567][T17105] notifier_call_chain+0x18f/0x380 [ 870.203567][T17105] __dev_notify_flags+0x1ab/0x310 [ 870.203567][T17105] dev_change_flags+0xde/0x1a0 [ 870.203567][T17105] do_setlink+0xb69/0x3f40 [ 870.203567][T17105] rtnl_newlink+0x1848/0x2170 [ 870.203567][T17105] rtnetlink_rcv_msg+0x843/0xf90 [ 870.203567][T17105] netlink_rcv_skb+0x235/0x4c0 [ 870.203567][T17105] netlink_unicast+0x7b1/0x930 [ 870.203567][T17105] netlink_sendmsg+0x8d0/0xbf0 [ 870.203567][T17105] __sys_sendto+0x4a9/0x6b0 [ 870.203567][T17105] [ 870.293916][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.302064][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.475256][T18692] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 870.559317][T18692] usb 7-1: USB disconnect, device number 15 [ 870.699601][T22279] fido_id[22279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory