program:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b)
syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@errors_continue}], [{@audit}, {@obj_user={'obj_user', 0x3d, 'smac\x01\x00\x00\x00M\x02'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '|.'}}, {@euid_gt}]}, 0x3, 0x58ad, &(0x7f000000b240)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJIgEFCCCy4UYKGlpagf0EJq0WhRBatESuRlE1ZRitWltpBa3UU/+BTykBLIQ1k+5qmZvqfTc6fv3J7unpDA71fJ3D6nb//PueeevtP/Mz3TAQAAgNeE3ddv2XvOUR/41RdHX7rmwz/bcG3oL4/XV+MOA+n2ileqhxxIvZVF49vsvHjTVT/489DF7/vl3X3ff3nXmmPX/v79h118/2fO3Hnbtx96ce69/3ymKG6cTyfuLyfPJSFUf77n61/a9diRY3VJCKGcDGwPYUGy8KEFSSbEe/8eQlhT7+fEO+956ZS1Y9trb+qdUD8/E8R8f22rpvNs297LTwp/eO+q636z+Mc/6tnx7Pb9uyTVhvkUwrwLGx/fE0KYnf4fE2fbovjgdLsyhNDX8LgzCvp1XIv9X5ZTPjrdzkq3/QVx4v1LMuVSZr9sOerJbPsK2utUXj/a3a/InEw5ezHqVF4/Y/2CdPvTdHviNOOX4/8klJJQqXd/fbJ/joSG85aEZPxcVuvlUv3chvT4M+UkUy5lyuWezHGNt5tOtHKSTKyP+2Xq4+W4ktYf23itbuLcnPrXp9tq+kR9OZZD9kZN/6Qb9eMaF/u1Z4q+HAilhmtQs/r6iU9PRn9a158snPSYfU3E+3atunlpefXDuwdy+pHcnaTxk7bib/v1gjmf+uGNly3Ki39hKY1faiv+H896/Pnzb/zet3Lj3xrjl9uKf/IDfc+d9cj1S3LHZ08cn0pb8UeeefSWxYdftCO3/7fH+NW24q/Y+Xjv3L0PPJjb/+E4PrPbiv/0Oz/4p7uevO/Z3Pghxu9rK/7qnZu+3Du494Tc+A/G8elvb/68sOP0pwYH/zKUF/+JGH9uW/Hv3H7bO+6Yf9OZued3ZRyfgbbin338/dfN2XvfMXnXzuT2bn3nBHhtOix9jXVDWm43z+xUQ77wzaFK7TXfnPT/3G42lDHWzrwZjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAa9MRJ/3PD/3/jw88V0nLvemNp0u1bayfFUIyO4SwZevI5q3rNl4y9JlLL9u8cWT90MjWodGNWzdfOXTqW4Y2j25aP3Ll2L3Dbz2l9riFIaltk2Mmtb1v3759pYGJdbG9/3T8jj8sPeNf/hrC8BG/G6zk9n/ZbRvuOLzJ14xkxb73bLjsnN+d9t30uAbSfg3k9Cvk9Otfz/vHHV/d8+cTQhh+3VT9evTpd/9iQofGK/bHSZV6Q61DvUlf037Ue532J45XZe269aPDxeNbzjmO/3zVs39fe8VX/lEb32rucbQ4vrNX7Ftf+saqs//9G1fXKg7W81403vEoYv/i+FXT8Z6XHte8nOOq5BzX9b958MmfH3Xji9vDcOWFxZPbLjqunnQC9CSvb6nd2EJfsmBCfTXdP57x+LhlWzdsWrblym1vXbdh5JLRS0Y3vn35qctPHz7t9NOWjR/5si4ff2z/jS0e/4GZT/M/t/2n8Wtr86moX0XjMdav4vFo7FHe86/v3C997e23PXJOraJonse969eTdNs3dp6Xh4b5Nnmsmh1X0TiEEIaajcPzL54Zjvw/664rug41npnGrxnJin2PLfnbd8/4zqJ31SoOyHW+sUNtXufrvd7fn/Hxqqbn42Ad395QTo+rv2m/lj/2SM/Nu//6+Xr/Zs0KV4xs3bp5ee3rnLSnc5Kjm/YrWxuPa/H413JIhyXUp2mT+TqmJ9T6l71+xt2zo9qf3tefLGx6XFnxvl2rbl5aXv3w7ryRTu6utTg7zK1tkzfk7Lk+88ByvcPN2j9U58fgh75z78fv/cmpk+bHybWvRceV5BzXj5+882vf/8p//Un3jutD73584G//99NLaxWHynWl3uu0P0njdeXkEIqef4tD8+PIff6Vmh9P0fMv287+/ZvHG8qU+0O5refryQ/0PXfWI9cvyX2+7mn1+Xr1hFK54Pl6sMyfV+75NWGiJCv2/fKGw7Y/dM3Ko2oVRfO6vnezeX1KC/lHznH94vynBi8d+i//u3vXjR+85Z4Lfj+y4gu1ioPlvFfT8a3mjG+91zHvbBzft1186fo1tfqD9/Vvui3If+KlZMuV2z47sn796OYtrR1Xq99PYzvZUW73+2m8ui0sOK7SpOOauRutjFerz7fY/zVtj9fE51t/SNr6vrDt1wvmfOqHN142MOlRaUMXltL4pbbi//Gsx58//8bvfSs3/q0xfqWt+CPPPHrL4sMv2pEb//YkjV9tK/6KnY/3zt37wIO58Ydj/2e3Ff/pd37wT3c9ed+zufFDjN/f3vi/sOP0pwYH/5Ib/4kkbWfsNVII97x0ytpaOQk96fMt9qNnQr9CtpxkyqVMudxYLtXWWusNlJNkYn3cL60/tqEvzXwipz6+Cqsuqm1fjuWQvTF1/cGm1HDtb1Zf9DoVAODVLv78P74GjT//H01fKOWvNMB+neZhi3Lixjxs/3rOrAn3L0rjx8fHdcDBt4Xhse21Q7UX+tNd54zPh+w6Z2znhOMmxmh3nbNo/X1Jphz7VVsvrzTkoanJeU0ltLD+PrmdqdffM4dfvD4+dMOkbg01rFtlz19PumLW7P0Omf5WxiLkzY/sulh8P8fgvLByvL0W50f2fTTxPGTfRxPbOSpz4Wz3fTSdzo/Y7Snmx3iXi3++Mfn8hSnGd//5ax4te/6mcb6rY/vP9M9nD/11w5n9eZh1yZz46RPsYF83jPXxOCotrid+PKe+W+uJ8XIR+7Vnir4cCNYTgVermP/H7xFj+f/YC/B/y+xX9Do0+6oxxst9n1C5eX+K8o7J79Pra+v7+Oqdm77cO7j3hNzXOQ+2+r6fTRNKfQXv+ykax6WZcuE45izQFOV72XaKxj37voz+MLetcb9z+23vuGP+TWfmjvvK2jfS4nH/2oTS3IJxly/kxJcvHBT5wkyvn71i+Uj6xqeZykc+llM/3Xykb9KN+nGNO+TykZ4D2y8A4NAR8//6z8/S/P//ZfYryltPzJRjvNy8Nef1SV7e+pF0e0Vm//70Nyqm+7r57OPvv27O3vuOyc1bbm81D/1vE0oDhXloZ3lzbh6xsjvvF8/NI+p5Vmd5Ym7/63liZ3l6bvx6nt5ZHp07PvU8urN1gNz49XWAQz3Pndn1uldtHp3++uxM5dHn5tRPN4/un3Sjflzj5NEAAK+smP/Hl3Ex/38ks1+nr9tz84IuvW7P/j2QevwnDlReOdN530znrTOd18/0usShnhfP9LrQzK6TyYvTcsjeqJEXAwBwMIj5/+y0nJ//d5af5OZv9fxEft40vvz8IMnPD/X1L/m//L+Y/B8A4NUt5v/x1x7j3//7H2k5+3fr5ek58eXp8vSp5k/LefpMr7NZB7AOUMw6AADAq0vPeKY0+ffsP5lus79nn/d7+efn7N+qyvjv2Idw0dbNo6MXXLZpzcjW0Qs2XrpmdMsFl29et3Xr6Mbafp3mjbl5S5o39oRKOh7N98vmbfPTv4cwP+fvIWT3j2GPHr8x+e8hZJudXfB3BPafv9b6m3f+SlPs32x+5J3vvPifyNk/qp//iz998gVrt1ywbuO6retG1q/bNjpxv7GstW8an5sZh2Van5uZ+TJJafqf39mdfpQm9aMnHY+8z2dPMv1YkPZkQd7nH+T0+1f/66ufO37fP+4KYfiI8hs6Gr9kxb7/ft7oR7bu/t2msf6Xpux/fc+0X0WfV5rdPx5PZf2lW7aetPbSyzZmP1GyPXE9o1Qvz9B6Rvr0L7e4PrE6p3666xPlSTcOTi2vTwAAMEH8+X98PRt/fviV9AVUrG89T+/s58e5efpwa3l69nPJivL07P7xeFvN06sd5unZ9ovy9Gb7N8vT8/LuvPgfy9l/ulqfJ529zyN3nlzY2jzJfp5B0TzJ7j/deZJ0OE+y7RfNk2b7N5sneec9L/5Hc/bP0/p86Ox9Obnz4dbW5sObM+Wi+ZDdf7rzodThfMi2XzQfmu3fbD7knd+8+Ofk7N+qifNjbGKMz4vRCy6/dPNnG/ab6c+/6Lx/M/v5H+1qvf8z+76vme//zL6vbOb739n7ynL7/0RnK2Gt939mP9+lXQdsvTZ9s1nR+8+K1nFX5dRPdx131qQbByfruPDKifl//HFPzP9vSrfd/jHQof85aT7HrGn8Ln2OWdHrGN/Pp2jsIOD7OQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBreiuLxre7r9+y95yjPvCrL46+dM2Hf7bh2jdd9YM/D138vl/e3ff9l3etOXbt799/2MX3f+bMnbd9+6EX5977z2cKAw/UNiemxWoIyXNJCNWf7/n6l3Y9duRYXRJCKCcD20NYkCx8aEGSiTD89xDCmno/J955z0unrB3bXntT74T6+Zkg2eMK/eXYnwn9DFcUHhGHoGo6z7btvfyk8If3rrruN4t//KOeHc9u379LUm2YTyHMu7Dx8T0hhNnp/zFxti2KD063K0MIfQ2PO6OgX8e12P9lOeWj0+2sdNtfECfevyRTLmX2y5ajnsy2r6C9TuX1o939iszJlLMXo07l9TPWL0i3P023J04zfjn+T0IpCZV699cn++dIaDhvSUjGz2W1Xi7Vz21Ijz9TTjLlUqZc7skc13i76UQrJ8nE+rhfpj5ejitp/bGN1+omzs2pf326raZP1JdjOWRv1PRPulE/rnGxX3um6MuBUGq4BjWrr5/49GT0p3X9ycJJj9nXRLxv16qbl5ZXP7x7IKcfyd1JGj9pK/62Xy+Y86kf3njZorz4F5bS+KW24v/xrMefP//G730rN/6tMX65rfgnP9D33FmPXL8kd3z2xPGptBV/5JlHb1l8+EU7cvt/e4xfbSv+ip2P987d+8CDuf0fjuMzu634T7/zg3+668n7ns2NH2L8vrbir9656cu9g3tPyI3/YByf/vbmzws7Tn9qcPAvQ3nxn4jx57YV/87tt73jjvk3nZl7flfG8RloK/7Zx99/3Zy99x2Td+1Mbu/Wd06A16bD0tdYN6TldvPMTjXkC98cqtRe881J/8/tZkMZY+3Mm8H4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8Ov326lM/ed57PrqqkoSQ5Oyzr4l4X3nWihVDbbQ78syjtyw+/KIdjXWL2ogDAAAAFIt5eKleUw2LwuXJ7HB00/3jGsHRsZRMrM+uIczev2dX4pS6FKfcpTiVLsXp6VKcWV2K09ulONWCONXQWpzZU8Yptdyfvi7F6e9SnDldijO3S3HmdSnO/C7FGZgyTuvzcEGX4izsUpzDuhTn8C7FOaJLcV7XpThHdilOdk15uvNwbrrnUXlxxm+UC+NUknL9jmbr6bGdYzpsp7/FdrJr9tNtZ3aL7RyXeVxpmu1UW2znjR22k7TYzps7bKdU0E6ct1dk+xfbiaUW5/+VXYqzrUtxrupSnKu7FOfzXYrzhS7FuabDOACtivn//nxvIPRW3hX60itOdhUg5ruLx79O/n6Xd0GK8d6QqZ9VFC+bqGfiLZ5u/7ILCJl4SzL1PRPiVer5yBTxqo3xlmbuLDze7IJCpn8nZup7i+JlFxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAb99upTP3neez66KiRh7F9T+5qI95VnrVgx1Ea7u1bdvLS8+uHdjXW9lTYCAQAAAIViHt5Tr6mG3sry0JvMmrBfNV0HqKbl8kBtOzgvrBzbJkOl8XJfsmDKx1XSxy3bumHTsi1Xbnvrug0jl4xeMrrx7ctPXX768Gmnn7Zs7br1o8O1ryH0FsQLIYwvP2y5cttnR9avH928pVaZ7f+i9HGL0nKSPm7wbWF4bHtt2v+FBe2VJrU3czeKzx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH+zaX6ibZx0H8OdNcpLsbLWR/cvKehr6Z1Qd2tZMOh3LC4KDrS09DCSZHkdxLQ5P17K1o864FdxmiyJsFEqlN5U63Bze7I8b4v5QqMxqwVOLbEN3oRfKppNu9EI6Ij0nb06SJs1pHOvWfT4X75s8z+95fnlyceD7ngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6ypenmiWhmvjUYhRH1qGj0kc+lsHJeG6Pv157f+ODd2cnn7WC4zxEYAAADAQEkOH2mN5EMukw7pcNX0u8WhbSLM5n4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjZ6penqhWxmsXRyFEfWoaPSRz6Wwcl4bo+8Y7T37h1bGxf7SPFYfYBwAAABgsyeGp1kg+FMOSMBJd1VGXPBtY0LW+uy7ZZ+Ec67qfHfSrWzLHumvmWPepAXXrmvcdAQAAAD76kvyfaY0UQi4zr2/+H5Trk7pFXXXp5n2Y3woAAAAA/58k/+daI8WQyxRbeX2ueX9xV12yftD/7ZP1y/qsH/T//LXNu//TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBHx1S9PFGtjNfSUQhRn5pGD8lcOhvHpSH6rnph9F+3HHpocftYLjPERgAAAMBASQ6fjd75kMuMhpFw8XTuH7tp/9NfffrZcghhJuZns2HHhm3b7l41c03qVh45NPKjw29974y6lTPX83ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgfTNVL09UK+O1i6IQoj41jR6SuXQ2jktD9H39S1/52+PHn3uzfaw4xD4AAADAYEkOn83++VAM2ZANV0y/a8/6p6W61vd7ZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcOO75zn3f3jA5ufFuL7zwwovWi/P9lwkAAHi/LQpRaJyjK9ef708NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8GEzVyxPVyngtH4UQ9alp9JDMpbNxXBqib/z80dy8ky+81D5WHGIfAAAAYLAkh89m/3wohpEwEi6fftfrmcB0/i98gB8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+FCZqpcnqpXx2rwohKhPTaOHZC6djePSEH0f27nviwfn//Dm9rFcZoiNAAAAgIGSHJ5tjeRDLvPpkAtXN99Pdi6I0s177+cCs+u2diwbnfO6ese69JzX7eo6WaZ5mpl1+WS/wsy9ta505rpS27piaLUvdawLezpWzRvwOQMAAACcR0n+z7VGCiGXybXl3J931BfkXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj6l6eaJaGa9FUQhRn5pGD8lcOhvHpSH63vf7T17yjV/s3t4+VhxiHwAAAGCwJIfPZv98KIaF4RNh4XTuD4XO+qTu39VTBx/9z9+Xh7DiimNjmb77//b1G1/svoSQ6ixKhTC/2S/q0+93f3z03qWNU4+HsOLy9NXn2q9zy7jxTHXj2m2Hj209yxcDAAAAF5Ak/4+0Rgohl7mrb/5Pkvc55f/59+781WXNazORd61IFZr9Un36fXnpk39dtvqfb53O/2fr97l9mw9e1tFwZqRLFDcqm7evO3bdgVRy6pn+6a7+yffyte+++d9NOx45NdM/H/LN8QWZXv3PvHa5KG5MpvbW1ry3t97ZP9Pn/A/94aXjv1mw+93T/d9ZNNrqf81Zzn/2/qO3Przn+n2H1nX2DyGUevV/+92bw5V/vvPB7vOPdm3c/s23X7tEcePI4hMHVu8v3tDZP+rqn3z/vzz+2J6fPfKDZ5P+yW9Fli+Za/9UV/9Xdl268+UH1i/o7J/qc/4Xb3t1bEvp+3/qPv8dQ5//iWufuv21DfH93VMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXlql6eaJaGa+lohCiPjWNHpK5dDaOS0P0feOWo2/ftvunP2kfKw6xDwAAADBYksNns38+FEM2ZMPodO5/prpx7bbDx7aGwsxs1LxnJrfcs+0zm7Zsv+uO8/TJAQAAgLlK8n+mNVIIuczSMNLM/5XN29cdu+5AKsn/qST/b7pzcuOK0Kp7ZdelO19+YP2C1nOCEKZ/FpA/Xff52bqbbjxaOPGXby3rWbdqtu7I4hMHVu8v3pDUhfa6laH1fOKJa5+6/bUN8f2tz9de99lvbplsPp5I9h299eE91+87tK51juZ9tLlvUjeZ2ltb897eelKXbt7zzXMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGeaqpcnqpXxWkiHEPWpafSQzKWzcVwaou+apb9+8JKTzy1sH8tlhtgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYX9ugmto+rjAHzOvcmb29ykTdoXjIppWhWlLiwKIrpRUZFWpOCqUqTa2oUoCCJKXZhKK5aquBGsboqooEYpKNhYLK2Sil/FjQsVFKoLoRQD2lBcqCQ55/ZmmvHqpArq88Bw7jkz85v/zDmZ3AsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCP0tM1NNMe3nH/1C3n3PDRo3edeOSmd+7ddtHDr343sum6D/f2vnRyYvOKLV9ev2zT/rvXjO9+/tBP/W/9crRj8EOzzarUbYQQj8cQGu9OPvPYxMdnTY/FEEI9DoyGMBiXHhqMhYTVP4cQNrfqnLvzzROXb5lut+3qmTO+pBBSvK/QrOd6Zg3MrZd/l0ZaZ1unHrwkfH3t+u2fLn/j9e6xY6OnDomNtvUUwuKN7ed3hxAWpW1aXm1D+eTUrgsh9Ladd2WHus7/g/VfWtI/N7X/S22zQ07ev7LQrxWOK/az7kLb2+F6C1VWR9XjOukr9Isvo4UqqzOPD6b27dSu+pP59bzFUIuhq1X+PfHUGglt8xZDnJnLRqtfa81tSPdf6MdCv1bo17sL9zVz3bTQ6jHOHc/HFcbz67grja9of1fP49aS8bNT20h/qCdzPxQ/zGqe9qF1XzNyXZO/U8vfodb2DppvvDXxaTKaaawZl552zq/zyPsm1j9xYX3De4cHSuqIe2PKj5Xyt34y2Hf7azsfGCrL31hL+bVK+d+sPfLDbTtfeK40/+mcX6+Uf9mB3uNr39+xsvT5TObn01Up/46jHzy5/P93jpXWvyfnNyrlXzN+pKd/6sDB0vpX5+ezqFL+V1ff+O0rn+87Vpofcn5vpfwN4/c91TM8dXFp/sH8fJrV1s+PY1d8MTz8/UhZ/mc5v79S/suju696ccmuNaXzuy4/n4FK+TdfsH9739S+88renXHPmfrPCfDftCx9x3o89av+zlyott8Lz450zX7n60tb/5m8UMH0dRb/hfkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MYOHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FQAA//8XlzU/")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) (fail_nth: 1)
[ 71.808838][ T48] Bluetooth: hci0: command tx timeout
[ 72.932965][ T5107] loop0: detected capacity change from 0 to 32768
[ 73.568472][ T5107] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid device 255,noshard_inode_numbers,noinodes_use_key_cache,journal_flush_delay=1001,nojournal_transaction_names
[ 73.611882][ T5107] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 73.615560][ T5107] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix
[ 73.615560][ T5107] running recovery passes: check_allocations
[ 73.816571][ T5107] bcachefs (loop0): accounting_read... done
[ 73.818924][ T5107] bcachefs (loop0): alloc_read... done
[ 73.830838][ T5107] bcachefs (loop0): stripes_read... done
[ 73.833578][ T5107] bcachefs (loop0): snapshots_read... done
[ 73.845935][ T5107] bcachefs (loop0): check_allocations...
[ 73.867922][ T5107] btree ptr not marked in member info btree allocated bitmap
[ 73.867949][ T5107] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[ 73.872210][ T48] Bluetooth: hci0: command tx timeout
[ 73.938582][ T5107] btree ptr not marked in member info btree allocated bitmap
[ 73.938599][ T5107] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[ 73.969400][ T5107] btree ptr not marked in member info btree allocated bitmap
[ 73.969415][ T5107] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 74.010914][ T5107] btree ptr not marked in member info btree allocated bitmap
[ 74.010929][ T5107] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 74.031332][ T5107] btree ptr not marked in member info btree allocated bitmap
[ 74.031348][ T5107] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[ 74.063674][ T5107] btree ptr not marked in member info btree allocated bitmap
[ 74.063689][ T5107] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 74.113396][ T5107] done
[ 74.117552][ T5107] bcachefs (loop0): going read-write
[ 74.141815][ T5107] bcachefs (loop0): journal_replay... done
[ 74.209404][ T5107] bcachefs (loop0): resume_logged_ops... done
[ 74.216102][ T5107] bcachefs (loop0): delete_dead_inodes... done
[ 74.232965][ T5107] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[ 74.238328][ T5107] bcachefs (loop0): resume_logged_ops... done
[ 74.244566][ T5107] bcachefs (loop0): delete_dead_inodes... done
[ 74.259037][ T5107] bcachefs (loop0): done starting filesystem
[ 74.302948][ T24] audit: type=1800 audit(1727570812.814:2): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=536870912 res=0 errno=0
[ 74.367106][ T5107] ==================================================================
[ 74.370379][ T5107] BUG: KASAN: slab-use-after-free in bch2_direct_write+0x2a60/0x3140
[ 74.373373][ T5107] Read of size 8 at addr ffff88804b4f50a0 by task syz.0.0/5107
[ 74.376159][ T5107]
[ 74.377014][ T5107] CPU: 0 UID: 0 PID: 5107 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[ 74.380673][ T5107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.384753][ T5107] Call Trace:
[ 74.386090][ T5107]
[ 74.387226][ T5107] dump_stack_lvl+0x241/0x360
[ 74.389067][ T5107] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.390853][ T5107] ? __pfx__printk+0x10/0x10
[ 74.392469][ T5107] ? _printk+0xd5/0x120
[ 74.393813][ T5107] ? __virt_addr_valid+0x183/0x530
[ 74.395466][ T5107] ? __virt_addr_valid+0x183/0x530
[ 74.397278][ T5107] print_report+0x169/0x550
[ 74.398948][ T5107] ? __virt_addr_valid+0x183/0x530
[ 74.400869][ T5107] ? __virt_addr_valid+0x183/0x530
[ 74.402915][ T5107] ? __virt_addr_valid+0x45f/0x530
[ 74.404962][ T5107] ? __phys_addr+0xba/0x170
[ 74.406744][ T5107] ? bch2_direct_write+0x2a60/0x3140
[ 74.408646][ T5107] kasan_report+0x143/0x180
[ 74.410040][ T5107] ? bch2_direct_write+0x2a60/0x3140
[ 74.411758][ T5107] bch2_direct_write+0x2a60/0x3140
[ 74.413770][ T5107] ? __pfx_bch2_direct_write+0x10/0x10
[ 74.415654][ T5107] bch2_write_iter+0x18e/0x23f0
[ 74.417426][ T5107] ? __pfx_lock_acquire+0x10/0x10
[ 74.419305][ T5107] ? __lock_acquire+0x1384/0x2050
[ 74.421136][ T5107] ? __pfx_bch2_write_iter+0x10/0x10
[ 74.423323][ T5107] do_iter_readv_writev+0x600/0x880
[ 74.425529][ T5107] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 74.427663][ T5107] ? rcu_read_lock_any_held+0xb7/0x160
[ 74.429602][ T5107] vfs_writev+0x376/0xba0
[ 74.431258][ T5107] ? __pfx___mutex_trylock_common+0x10/0x10
[ 74.433337][ T5107] ? rcu_is_watching+0x15/0xb0
[ 74.434904][ T5107] ? __pfx_vfs_writev+0x10/0x10
[ 74.436712][ T5107] ? fdget_pos+0x24e/0x320
[ 74.438389][ T5107] do_writev+0x1b1/0x350
[ 74.440069][ T5107] ? __pfx_do_writev+0x10/0x10
[ 74.441827][ T5107] ? do_syscall_64+0x100/0x230
[ 74.443644][ T5107] ? do_syscall_64+0xb6/0x230
[ 74.445402][ T5107] do_syscall_64+0xf3/0x230
[ 74.447102][ T5107] ? clear_bhb_loop+0x35/0x90
[ 74.448888][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.451125][ T5107] RIP: 0033:0x7f793b97dff9
[ 74.452871][ T5107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.460222][ T5107] RSP: 002b:00007f793c830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 74.463380][ T5107] RAX: ffffffffffffffda RBX: 00007f793bb36058 RCX: 00007f793b97dff9
[ 74.466324][ T5107] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000007
[ 74.469373][ T5107] RBP: 00007f793c830090 R08: 0000000000000000 R09: 0000000000000000
[ 74.472501][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 74.475390][ T5107] R13: 0000000000000000 R14: 00007f793bb36058 R15: 00007ffed45c7258
[ 74.478315][ T5107]
[ 74.479418][ T5107]
[ 74.480283][ T5107] Allocated by task 5107:
[ 74.481883][ T5107] kasan_save_track+0x3f/0x80
[ 74.483592][ T5107] __kasan_mempool_unpoison_object+0x9e/0x160
[ 74.485927][ T5107] remove_element+0x129/0x1a0
[ 74.487757][ T5107] mempool_alloc_noprof+0x54e/0x5a0
[ 74.489942][ T5107] bio_alloc_bioset+0x26f/0x1130
[ 74.491909][ T5107] bch2_direct_write+0x5a0/0x3140
[ 74.493864][ T5107] bch2_write_iter+0x18e/0x23f0
[ 74.495639][ T5107] do_iter_readv_writev+0x600/0x880
[ 74.497499][ T5107] vfs_writev+0x376/0xba0
[ 74.499029][ T5107] do_writev+0x1b1/0x350
[ 74.500508][ T5107] do_syscall_64+0xf3/0x230
[ 74.502240][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.504468][ T5107]
[ 74.505462][ T5107] Freed by task 5107:
[ 74.506924][ T5107] kasan_save_track+0x3f/0x80
[ 74.508651][ T5107] kasan_save_free_info+0x40/0x50
[ 74.510556][ T5107] __kasan_mempool_poison_object+0xaa/0x120
[ 74.512872][ T5107] mempool_free+0x1c8/0x390
[ 74.514464][ T5107] bch2_direct_write+0x2a49/0x3140
[ 74.516386][ T5107] bch2_write_iter+0x18e/0x23f0
[ 74.518243][ T5107] do_iter_readv_writev+0x600/0x880
[ 74.520215][ T5107] vfs_writev+0x376/0xba0
[ 74.521844][ T5107] do_writev+0x1b1/0x350
[ 74.523410][ T5107] do_syscall_64+0xf3/0x230
[ 74.525156][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.527321][ T5107]
[ 74.528206][ T5107] The buggy address belongs to the object at ffff88804b4f4fc0
[ 74.528206][ T5107] which belongs to the cache bio-119 of size 1192
[ 74.533172][ T5107] The buggy address is located 224 bytes inside of
[ 74.533172][ T5107] freed 1192-byte region [ffff88804b4f4fc0, ffff88804b4f5468)
[ 74.538248][ T5107]
[ 74.539176][ T5107] The buggy address belongs to the physical page:
[ 74.541531][ T5107] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b4f4
[ 74.544819][ T5107] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 74.547926][ T5107] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 74.550692][ T5107] page_type: f5(slab)
[ 74.552161][ T5107] raw: 04fff00000000040 ffff88803d149b40 dead000000000122 0000000000000000
[ 74.555455][ T5107] raw: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000
[ 74.558739][ T5107] head: 04fff00000000040 ffff88803d149b40 dead000000000122 0000000000000000
[ 74.561864][ T5107] head: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000
[ 74.564985][ T5107] head: 04fff00000000002 ffffea00012d3d01 ffffffffffffffff 0000000000000000
[ 74.568081][ T5107] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 74.571204][ T5107] page dumped because: kasan: bad access detected
[ 74.573473][ T5107] page_owner tracks the page as allocated
[ 74.575487][ T5107] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5107, tgid 5105 (syz.0.0), ts 73517597937, free_ts 73100747880
[ 74.582956][ T5107] post_alloc_hook+0x1f3/0x230
[ 74.584577][ T5107] get_page_from_freelist+0x3045/0x3190
[ 74.586628][ T5107] __alloc_pages_noprof+0x256/0x6c0
[ 74.588584][ T5107] alloc_pages_mpol_noprof+0x3e8/0x680
[ 74.590712][ T5107] alloc_slab_page+0x6a/0x120
[ 74.592532][ T5107] allocate_slab+0x5a/0x2f0
[ 74.594197][ T5107] ___slab_alloc+0xcd1/0x14b0
[ 74.595983][ T5107] __slab_alloc+0x58/0xa0
[ 74.597581][ T5107] kmem_cache_alloc_noprof+0x1c1/0x2a0
[ 74.599608][ T5107] mempool_init_node+0x1ee/0x4e0
[ 74.601581][ T5107] mempool_init_noprof+0x3a/0x50
[ 74.603440][ T5107] bioset_init+0x2e8/0x820
[ 74.605127][ T5107] bch2_fs_fs_io_direct_init+0x67/0x90
[ 74.607200][ T5107] bch2_fs_open+0x2d77/0x2f80
[ 74.608967][ T5107] bch2_fs_get_tree+0x738/0x1710
[ 74.610833][ T5107] vfs_get_tree+0x90/0x2b0
[ 74.612507][ T5107] page last free pid 8 tgid 8 stack trace:
[ 74.614630][ T5107] free_unref_page+0xcfb/0xf20
[ 74.616310][ T5107] __put_partials+0xeb/0x130
[ 74.617982][ T5107] put_cpu_partial+0x17c/0x250
[ 74.619759][ T5107] __slab_free+0x2ea/0x3d0
[ 74.621389][ T5107] qlist_free_all+0x9a/0x140
[ 74.623182][ T5107] kasan_quarantine_reduce+0x14f/0x170
[ 74.625122][ T5107] __kasan_slab_alloc+0x23/0x80
[ 74.626921][ T5107] __kmalloc_cache_noprof+0x132/0x2c0
[ 74.628832][ T5107] nsim_fib_event_work+0xe1a/0x4130
[ 74.630807][ T5107] process_scheduled_works+0xa63/0x1850
[ 74.632918][ T5107] worker_thread+0x870/0xd30
[ 74.634693][ T5107] kthread+0x2f0/0x390
[ 74.636248][ T5107] ret_from_fork+0x4b/0x80
[ 74.637931][ T5107] ret_from_fork_asm+0x1a/0x30
[ 74.639723][ T5107]
[ 74.640654][ T5107] Memory state around the buggy address:
[ 74.642729][ T5107] ffff88804b4f4f80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 74.645619][ T5107] ffff88804b4f5000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 74.648330][ T5107] >ffff88804b4f5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 74.651129][ T5107] ^
[ 74.652756][ T5107] ffff88804b4f5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 74.655746][ T5107] ffff88804b4f5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 74.658721][ T5107] ==================================================================
[ 75.010845][ T5107] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 75.013491][ T5107] CPU: 0 UID: 0 PID: 5107 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[ 75.017172][ T5107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.020574][ T5107] Call Trace:
[ 75.021767][ T5107]
[ 75.022865][ T5107] dump_stack_lvl+0x241/0x360
[ 75.024688][ T5107] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.026757][ T5107] ? __pfx__printk+0x10/0x10
[ 75.028653][ T5107] ? preempt_schedule+0xe1/0xf0
[ 75.030579][ T5107] ? vscnprintf+0x5d/0x90
[ 75.032184][ T5107] panic+0x349/0x880
[ 75.033686][ T5107] ? check_panic_on_warn+0x21/0xb0
[ 75.035671][ T5107] ? __pfx_panic+0x10/0x10
[ 75.037355][ T5107] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 75.039632][ T5107] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 75.042031][ T5107] ? print_report+0x502/0x550
[ 75.043846][ T5107] check_panic_on_warn+0x86/0xb0
[ 75.045870][ T5107] ? bch2_direct_write+0x2a60/0x3140
[ 75.047932][ T5107] end_report+0x77/0x160
[ 75.049731][ T5107] kasan_report+0x154/0x180
[ 75.051455][ T5107] ? bch2_direct_write+0x2a60/0x3140
[ 75.053447][ T5107] bch2_direct_write+0x2a60/0x3140
[ 75.055222][ T5107] ? __pfx_bch2_direct_write+0x10/0x10
[ 75.057020][ T5107] bch2_write_iter+0x18e/0x23f0
[ 75.058828][ T5107] ? __pfx_lock_acquire+0x10/0x10
[ 75.060578][ T5107] ? __lock_acquire+0x1384/0x2050
[ 75.062562][ T5107] ? __pfx_bch2_write_iter+0x10/0x10
[ 75.064453][ T5107] do_iter_readv_writev+0x600/0x880
[ 75.066431][ T5107] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 75.068581][ T5107] ? rcu_read_lock_any_held+0xb7/0x160
[ 75.070387][ T5107] vfs_writev+0x376/0xba0
[ 75.072034][ T5107] ? __pfx___mutex_trylock_common+0x10/0x10
[ 75.074171][ T5107] ? rcu_is_watching+0x15/0xb0
[ 75.075871][ T5107] ? __pfx_vfs_writev+0x10/0x10
[ 75.077587][ T5107] ? fdget_pos+0x24e/0x320
[ 75.079238][ T5107] do_writev+0x1b1/0x350
[ 75.080772][ T5107] ? __pfx_do_writev+0x10/0x10
[ 75.082527][ T5107] ? do_syscall_64+0x100/0x230
[ 75.084284][ T5107] ? do_syscall_64+0xb6/0x230
[ 75.086066][ T5107] do_syscall_64+0xf3/0x230
[ 75.087730][ T5107] ? clear_bhb_loop+0x35/0x90
[ 75.089440][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.091550][ T5107] RIP: 0033:0x7f793b97dff9
[ 75.093205][ T5107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.100355][ T5107] RSP: 002b:00007f793c830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 75.103218][ T5107] RAX: ffffffffffffffda RBX: 00007f793bb36058 RCX: 00007f793b97dff9
[ 75.105872][ T5107] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000007
[ 75.108780][ T5107] RBP: 00007f793c830090 R08: 0000000000000000 R09: 0000000000000000
[ 75.111740][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 75.114665][ T5107] R13: 0000000000000000 R14: 00007f793bb36058 R15: 00007ffed45c7258
[ 75.117574][ T5107]
[ 75.118997][ T5107] Kernel Offset: disabled
[ 75.120618][ T5107] Rebooting in 86400 seconds..