last executing test programs: 3m24.577209202s ago: executing program 3 (id=230): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) (fail_nth: 1) 3m24.021728874s ago: executing program 3 (id=232): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$alg(0x26, 0x5, 0x0) shmdt(0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8086) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3m23.051275505s ago: executing program 3 (id=235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 3m22.000525506s ago: executing program 3 (id=237): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x83}}, {@init_itable}, {@mblk_io_submit}]}, 0x3, 0x476, &(0x7f0000000d40)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xe0880, 0x4b) getdents(r5, 0x0, 0x0) 3m21.293919791s ago: executing program 3 (id=238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x12d}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}]}, 0x3}, 0x1) 3m20.707766424s ago: executing program 3 (id=240): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1002, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x20, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x7f}, 0x8) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 3m20.292166172s ago: executing program 32 (id=240): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1002, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x20, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x7f}, 0x8) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2m48.119109294s ago: executing program 1 (id=318): memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statfs(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)=""/215) 2m48.119012564s ago: executing program 2 (id=319): syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz71Rw0AQBeCnQ0gioAY6IKEDKiAmoxEUQiV0Qi/UwNizHsl/HdgOvi+4uXfzbnY2XFfLfy1+K9UlGZZjbnnOlDykraXXfsqS+9SYSubT9xq3h873/eeQ9pdxTe8v3abqPOYxudvffvrj29PXx9ul1gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAW7YLAAD//1JjFgM=") r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000080)={0xc, r1}) 2m47.084066706s ago: executing program 1 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="63726561746f723ddd02ad162c636f6465706167653d6d61637475726b6973682c747970653d3ae6f83f2c00de45edc4e099dde37cd6e690ebcae3c0d875eea9ea552baba4d839c079b783bb2b377a6c99bd4127a9d87f6f35824f5202de2bfcdc28646552"], 0x1, 0x2e5, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x80100, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000003000/0x400000)=nil) (async) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x1fff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x1, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x11}}, 0x98}}, 0x0) 2m46.834450091s ago: executing program 2 (id=321): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x48a00, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004004}, 0x80) mmap$dsp(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x4, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xa4, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x5}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0xe, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xc9b9, 0xb}}, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x4}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf5c}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x20, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x17, 0x2, "9e5ad9738d4f0772a1fff33003923fcaef532d"}]}]]}, 0xa4}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000006}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="61cadb4d", @ANYRES16=r4, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x4008400}, 0x2000) 2m46.277865563s ago: executing program 2 (id=322): memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200400, &(0x7f0000002fc0)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x1, 0x14f, &(0x7f0000000280)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=") statfs(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)=""/215) 2m46.276941303s ago: executing program 1 (id=330): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e88a8", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 2m45.775604004s ago: executing program 1 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r1) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffe9, 0xb, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x400c044) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24000095}, 0x1) 2m45.165547766s ago: executing program 2 (id=325): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000000c0)="55efaca02314a1e2668e993bde215c13e0778ff34324e66c615818a994be61b7fcb5bdaced39f84d85d0323d848513fd60592079e77ef80168fc7455f5b8", 0x3e}, {&(0x7f0000000280)="c9ee4311236f9f69a6c0037ba6cfe611321ff62594ea3030455dd5f9ec2f367a7798975e23f550ec404961b5e1bc85e614621d7df6faa75cfae6f83a41684fd1ba1319", 0x43}, {&(0x7f0000000300)="3ed21f7d5f173f5974fce1acc8b50a3348134360a3c9788ecec0919698aaf6cf115e5ba4622ca2a10669d0d0a81d4af327bc38dd78b3b96abd66094d18ef298609e9b2f717118d92f296b91af85514cabd34b120a0ab330ab5c40c5d775a8723c2c333fda6cbd4dbe774f4d935977deb5aa3d2b53432ad07a05d5ace9be32556a834ac3a088e0576f6ec295cac9dd63fd055f8a19b1cb4050003a478a4170a4370478d", 0xa3}, {&(0x7f0000000580)="644481ef9b6c5a8bddbd3531d2bac36098b0d3cea73118182853ee95628bda2ce1d96bee3b111c4a9a82fad64a00e41266144dad34dfcc02cf38abf8433c78fd5f015e50e20bb3637980cbf55c7e886e0771c914f21ea503cbe42ea2b4dac6e9c4db34c718a3b930a5f512acf28ec831c5ce1712667dce228d1b14b82161ceac0f52327ae1dd47f48a49efe88806d3c3fe52ea82a69f2c048d78c3660a715b7fc66c33490ef2f774f16eb37a516a5af2ff3ff48865589ee2b8b3e5f62fd4e442bde8bcd52907d889d5dd120788931f89b67bbbcc0e915468e7a1d994e0ff7ef644754380", 0xe4}, {&(0x7f00000003c0)="bff47d76376928b042c8a00ee5506580df32568b6374de6a0905f6721f37f8076c5fc1cf8114fe52e72fb455c04d3e3abb79b0c7d26a371e4761af4ae472fac7eb0dbe173ba34c2192ca1f2e5a9bdb3530", 0x51}, {&(0x7f0000000680)="897086df066f79f5c53d2822f0e83c990311edd1375f16fd130d8ef8ec5bc7059c289a020d8104d222346c0623fccc4c2a160ad07ee2411efdb65bb4dca0455fb86df5096f01abdf4a325ca3620dbe4b5a16f65bbbdc45ccaa13783b6be9da352f32eabbb57f8438fee4c41d22ff34d4bd4d03ab9ce7153dee5d2843b6173041d2f8b181994c733bd5352e0ea91501c72957d39d5dd08ba94e6bc2b1ce59e63b6eabeabfc22abce58c9db7af9f5c0f5e117159b2386002dc4ccd68c87b46fe67292f81393ed4ba36c7ff48ba94a9f08a3c83148a9d14bbbb7f7daf538f902285027fbaca27c31629", 0xe8}, {&(0x7f0000000480)="d5b8a6d35399889f69cc4f020da5b30ddeed41b5f2c476abdb2608c00c58b647790b6fbdd2e12b0ca2930b707d9a3de13f2c345983278990d1357be1069980681ad5aa90f9d857ecfb9bbe54d379544d842e76ea62aeb6f136b1574d2f5a0ed2a64f5e9a1caab9520870834e591429fe5f739ab8b78f968ef3bbbc3a96afb5c6dcb5", 0x82}], 0x7}}, {{&(0x7f0000000800)={0xa, 0x4e24, 0x1, @mcast2, 0x8}, 0x1c, &(0x7f0000000840)}}], 0x2, 0x81) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x82, &(0x7f0000000200)={0x0, 0x5, 0x8000, 0x86, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) chdir(&(0x7f0000000540)='./cgroup\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x80800, 0x108) getdents64(r1, &(0x7f00000001c0)=""/26, 0x1a) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000a99000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x84400, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x13) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') 2m44.98183898s ago: executing program 1 (id=326): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) (fail_nth: 1) 2m44.710029396s ago: executing program 2 (id=327): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r2, &(0x7f0000002180)=""/4101, 0x1005, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x4a, 0x0, 0x6}, 0x28) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) 2m44.640953837s ago: executing program 1 (id=328): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000380)=""/195, &(0x7f00000000c0)=0xc3) r4 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x2, 0x10a5, 0x3, 0x0, 0x0) 2m43.933165162s ago: executing program 2 (id=329): memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statfs(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)=""/215) 2m29.522322813s ago: executing program 33 (id=328): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000380)=""/195, &(0x7f00000000c0)=0xc3) r4 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x2, 0x10a5, 0x3, 0x0, 0x0) 2m28.323323008s ago: executing program 34 (id=329): memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statfs(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)=""/215) 2m27.26643094s ago: executing program 4 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) (fail_nth: 1) 2m25.248565363s ago: executing program 4 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x15, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x0, 0xffffffff, 0x3}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) 2m22.787855944s ago: executing program 4 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) 2m20.436692103s ago: executing program 4 (id=383): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) timerfd_create(0x0, 0x80000) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xdc, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf1cf}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x810}, 0x20002000) capset(&(0x7f00000004c0)={0x19980330}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff, 0xd}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000080)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@acl}]}, 0x1, 0x504, &(0x7f0000001000)="$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") bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") r6 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$sysv(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="7aaa2f79daa13de962ce4817e62c44da0a4ca7c604bdd0946e9e5cfb210701685b512d325f6bd363d27e992a1cffab2cd3c2ea0c207f39bf11fb281ece371e8bf1f410f70d47192ab75a17e4aad6ddf76850849387cdc1543a4728c83cee1c824e1aa7c3329bc9c1429afb82efeedc0a9f603e1a9ccf0924fc80f2821ae5807ca005c120d0e8b382e1fa8da8f7611ce9bd0b554b7cd4574b72364dd1bd5a1c4451abebc6c3ff61daf0cf12eeae", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="9034375ed936627d8768b7feb4245fd7ed2478ac991ece1a6c99e55975e45272b0d024caebed490ed4c66131305bf1275f7fbe5d607d791edbba5d107a3c29ca1772332502788748ee9500177c806ea0d06d4b26602f4e3345d7cc7248d425ea88941f9db0f47381aab7578708aecdad82a1eb5a8443a6aebabe4fdd46082bc890b7cd8114ca3568475a5274724dcc", @ANYRES16, @ANYRES64], 0x21, 0x9e89, &(0x7f0000014040)="$eJw8mlP0Zcf2cH+djm3bTmZs27Ztewad5GwbsW3btm3bNvob/b/3fmuch/OwR1XtueaqUVW7bhngrQO8bYC3D/COAd45wLsGePcA7xngvQO8b4D3D/CBAT44wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLkSf45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuDfA/xngP8OcOQAhwIcFuBoAY4McPQAxwhwzADHCnDsAMcJcNwAxwtw/AAnCHDCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAJGLZIgIsGuFiAiwe4RIBLBrhUgEsHuEyAywa4XIDLB7hCgCsGuFKAKwe4SoCrnjA0NIrH6gGuEeCaAa4V4NoBrhPgugGuF+D6AW4Q4IYBbhTgxgFuEuCmAW4W4OYBbhHglgFuFeDWAW4T4LYBbhfg9gHuEOCOAe4U4M4B7hLgrgHuFuDuAe4R4J4B7hXg3gHuE+C+Ae4X4P4BHhDggQEeFODBAR4S4KEBHhbg4QEeEeCRAR4V4NEBHhOgAR4b4HEBHh/gCQGOCPDEAE8K8ORRLoxCEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYPdff04J8NQATwvw9ADPCPDMAM8K8OwAzwnw3ADPC/D8AC8I8MIALwrw4gAvCfDSAC8L8PIArwjwygCvCvDqAK8J8NoArwvw+gBvCPDGAG8K8OYAbwnw1gBvC/D2AO8I8M4A7wrw7gDvCfDeAO8L8P4AHwjwwQAfCvDhAB8J8NEAHwvw8QCfCPDJAJ8K8OkAnwnw2QCfC/D5AF8I8MUAXwrw5QBfCfDVAF8L8PUA3wjwzQDfCvDtAN8J8N0A3wvw/QA/CPDDAD8K8OMAPwnw0wA/C/DzAL8I8MsAvwrw6wC/CfDbAL8L8PsAfwjwxwB/CvDnAH8J8NcAfwvw9wD/CPDPAP8K8O8A/wnw3//W+1CIw8IRjhbi8BBHD3GMEMcMcawQxw5xnBDHDXG8EMcPcYIQJwxxohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOkRAXCXHREBcLcfEQlwhxyRCXCnHpEJcJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwsZ2jzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I0xGNDPC7E40M8IcQRIZ4Y4kkhnjxqDC8MDQUhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhnhLiqSGeFuLpIZ4R4pkhnhXi2SGeE+K5IZ4X4vkhXhDihSFeFOLFIV4S4qUhXhbi5SFeEeKVIV4V4tUhXhPitSFeF+L1Id4Q4o2jcrf5fEOjDQ0N3RLirSHeFuLtId4R4p0h3hXi3SHeE+K9Id4X4v0hPhDigyE+FOLIsYaGhlb6v9//xeMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb40+pAvh/hKyFivhvhaiK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4561xCHIhwW4WjRGENDQzh6hGNEOGaEY0U4doTjRDhuhONFOH6EE0Q4YYQTRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEOGOEM0U4c4SzRDhrhLNFOHuEc0Q4Z4RzRTh3hPNEOG+E80U4f4QLRLhghAtFuHCERLhIhItGuFiEi0e4RIRLRrhUhEtHuEyEy0a4XITLR7hChCtGuFKEK0e4SoSrRrhahKtHuEaEa0a4VoRrR7hOhOtGuF6E60e4QYQbRrjR0NDQiAg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nQCI+N8LgIj4/whAhHjf3ECE+K8OQIBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuRGeF+H5EV4Q4YURXhThxRFeEuGlEV4W4eURXhHhlRFeFeHVEV4T4bURXhfh9RHeEOGNEd4U4c0R3hLhrREOH8LbI7wjwjsjvCvCuyO8J8J7I4bdF+H9ET4Q4YMRPhSNN/RwhI9E+GiEj0X4eIRPRPhkhE9F+HSEz0T4bITPRfh8hC9E+GKEL0X4coSvRPhqhK9F+HqEb0T4ZoRvRfh2hO9E+G6E70X4foQfRPhhhB9F+HGEn0T4aYSfRfh5hF9E+GWEX0X4dTTO0DcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/hnhXxH+HeE/Ef4b4ciROBTjsBhHi3F4jKPHOEaMY8Y4VoxjxzhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8dIjIvEuGiMi8W4eIxLxLhkjEvFuHSMy8S4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEaIzHxnhcjMfHeEKMI2I8McaTYjw5xkGMQYxhjFGMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2MfYynxHhqjKfFeHqMZ8R4ZoxnxXh2jOfEeG6M58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8V4dYzXxHhtjNfFeH2MN8R4Y4w3xXhzjLfEeGuMt8V4e4x3xHhnjHfFeHeM98R4b4z3xXh/jA/E+GCMD8X4cIyPxPhojI/F+HiMT8T4ZIxPxfh0jM/E+GyMz8X4fIwvxPhijC/F+HKMr8T4aoyvxfh6jG/E+GaMb8X4dozvxPhujO/F+H6MH8TD/7vawI9j/CTGT2P8LMbPY/wixi9j/CrGr2P8ZlTuRj1+4tDQ9zH+EOOPMf4U488x/hLjrzH+FuPvMf4R458x/hXj3zH+E+O/MY6McSjBYQmOluDwBEdPcIwEx0xwrATHTnCcBMdNcLwEx09wggQnTHCiBCdOcJKHcdIEJ0tw8gSnSHDKBKdKcOoEp0lw2gSnS3D6BGdIcMYEZ0pw5gRnSXDWBGdLcPYE50hwzgTnSnDuBOdJcN4E50tw/gQXSHDBBBdKOOG/4FwkwUUTXCzBxRNcIsElE1wqwaUTXCbBZRNcLsHlE1whwRUTXCnBlRNcJcFVE1wtwdUTXCNhnP+1vXaC6yS4boLrJbh+ghskuGGCGyW4cYKbJLhpgpsluHmCWyS4ZYJbJbh1gtskuG2C2yW4fYI7JLhjgjsluHOCuyS4a4K7Jbh7gnskuGcyhnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckaILHJnhcgscneEKCIxI8McGTEjw5wUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYKnJHhqgqcleHqCZyR4ZoJnJXh2guckeG6C5yV4foIXJHhhghcleHGClyR4aYKXJXh5glckeGWCVyV4dYLXJHhtgtcleH2CNyR4Y4I3JXhzgrckeGuCQ8Px9gTvSPDOBO9K8O4E70nw3gTvS/D+BB9I8MEEH0rw4QQfSfDRBB9L8PEEnxj2XxMSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N9lx3FHzzVCKw1IcLcXhKY6e4hgpjpniWCmOneI4KY6b4ngpjp/iBClOmOJEKU6c4iQpTpriZClOnuIUKU6Z4lQpTp3iNClOm+J0KU6f4gwpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpwiKS6S4qIpLpbi4ikukeKSKS6V4tIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pZDQ26V4tYpbpPitilul+L2Ke6Q4o4p7pTizinukuKuKe6W4u4p7pHininuleLeKe6T4r4p7pfi/ikekOKBKR6U4sEpHpLioSkeluLhKR6R4pEpHpXi0Skek6IpHpvicSken+IJKY5I8cQUT0rx5BQHKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYpnpLiqSmeluLpKZ6R4pkpnpXi2Smek+K5KZ6X4vkpXpDihSlelOLFKV6S4qUpXpbi5SlekeKVKV6V4tUpXpPitSlel+L1Yw8NjXL4xhRvSvHmFG9J8dYUb0vx9hTvSPHOFO9K8e4U70nx3hTvS/H+FB9I8cEUH0rx4RQfSfHRFB9L8fEUn0jxyRSfSvHpFJ9J8dkUn0vx+RRfSPHFFF9K8eUUX0nx1RRfS/H1FN9I8c0U30rx7RTfSfHdFN9L8f0UP0jxwxQ/SvHjFD9J8dMUP0vx8xS/SPHLFL9K8esUv0nx2xS/S/H7FH9I8ccUf0rx5xR/SfHXFH9L8fcU/0jxzxT/SvHvFP9J8d8UR6Y4lOGwDEfLcHiGo2c4RoZjZjhWhmNnOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4w8hhQ6P6nSnDmTOcJcNZM5wtw9kznCPDOTOcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzJMNFMlw0w8UyXDzDJTJcMsOlMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDn7z7n3qhmuluHqGa6R4ZoZrpXh2hmuk+G6Ga6X4foZbpDhhhlulOHGGW6S4aYZbpbh5hlukeGWGW6V4dYZbpPhthlul+H2Ge6Q4Y4Z7pThzhnukuGuGe6W4e4Z7pHhnhnuleHeGe6T4b4Z7pfh/hkekOGBGR6U4cEZHpLhoRkeluHhGR6R4ZEZHpXh0Rkek6EZHpvhcRken+EJGY7I8MQMT8rw5AwHGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl22cf/fx17aoanZXh6hmdkeGaGZ2V4dobnZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2R4Z4Z3ZXh3hvdkeG+G92V4f4YPZPhghg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr838XxwZvpnhWxm+neE7Gb6b4XsZvp/hBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp2N9f8Zf5fh9xn+kOGPGf6U4c8Z/pLhrxn+luHvGf6R4Z8Z/pXh3xn+k+G/GY7McCjHYTmOluPwHEfPcYwcx8xxrBzHznGcHMfNcbwcx89xghwnzHGiHCfOcZIcJ81xshwnz3GKHKfMcaocp85xmhynzXG6HKfPcYYcZ8xxphxnznGWHGfNcbYcZ89xjhznzHGuHOfOcZ4c581xvpzR589xgRwXzHGhHBfOkRwXyXHRHBfLcfEcl8hxyRyXynHpHJfJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3+i+/TXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXLcMcedctw5x11y3DXH3XLcPcc9ctwzx71y3DvHfXLcN8f9ctw/xwNyPDDHg3I8OMdDcjw0x8NyPDzHI3I8Msejcjw6x2NyNMdjczwux+NzPCHHETmemONJOZ6c4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsdTcjw1x9NyPD3HM3I8M8ezcjw7x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x+tyvD7HG3K8Mcebcrw5x1tyvDXH23K8Pcc7crwzx7tyvDvHe3K8N/+/vaP35/hAjg/m+FCOD+f4SI6P5vhYjo/n+ESOT+b4VI5P5/hMjs/m+FyOz+f4Qo4v5vhSji/n+EqOr+b4Wo6v5/hGjm/m+FaOb+f4To7v5vheju/n+EGOH+b4UY4f5/hJjp/m+FmOn+f4RY5f5vhVjl/n+E2O3+b4XY7f5/hDjj/m+FOOP+f4S46/5vhbjr/n+EeOf+bDhv7K8e8c/8nx3xxH5jhU4LACRytweIGjFzhGgWMWOFaBYxc4ToHjFjhegeMXOEGBExY4UcGoychJCpy0wMkKnLzAKQqcssCpCpy6wGkKnLbA6QqcvsAZCpyxwJkKnLnAWQqctcDZCpy9wDkKnLPAuQqcu8B5Cpy3wPkKnL/ABQpcsMCFCly4QApcpMBFC1yswMULXKLAJQtcqsClC1ymwGULXK7A5QtcocAVC1ypwJULXKXAVQtcrcDVC1yjwDULXKvAtQtcp8B1C1yvwPUL3KDADQvcqMCNC9ykwE2HD7lZgZsXuEWBWxa4VYFbF7hNgdsWuF2B2xe4Q4E7FrhTgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBFnhsgccVeHyBJxQ4osATCzypwJMLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF3hKgacWeFqBpxd4RoFnFnhWgWcXeE6B5xZ4XoHnF3hBgRcWeFGBFxd4SYGXFnhZgZcXeEWBVxZ4VYFXF3hNgdcWeF2B1xd4Q4E3FnhTgTcXeEuBtxZ4W4G3F3hHgXcWeFeBdxd4T4H3FnhfgfcPDfOBAh8s8KECHy7wkQIfLfCxAh8v8IkCnyzwqQKfLvCZAp8t8LkCny/whQJfLPClAl8u8JUCXy3wtQJfL/CNAt8s8K0C3y7wnQLfLfC9At8v8IMCPyzwowI/LvCTAj8t8LMCPy/wiwK/LPCrAr8u8JsCvy3wuwK/L/CHAn8s8KcCfy7wlwJ/LfC3An8v8I8C/yzwrwL/LvCfAv8tcGSBQyUOK3G0EoeXOHqJY5Q4ZoljlTh2ieOUOG6J45U4fokTlDhhiROVOHGJk5Q4aYmTlTh5iVOUOGWJU5U4dYnTlDhtidOVOH2JM5Q4Y4kzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nzlTj//85iSlyoxIVLpMRFSly0xMVKXLzEJUpcssSlSly6xGVKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0o8usRjSrTEY0s8rsTjSzyhxBElnljiSSWeXOKgxKDEsMSoxLjEpMS0xKzEvGSoKLEssSqxLrEpsS2xK7Ev8ZQSTy3xtBJPL/GMEs8s8awSzy7xnBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4S7yzxrhLvLvGeEu8t8b4S7y/xgRIfLPGhEh8u8ZFRdTCEj5X4eIlPlPhkiU+V+HSJz5T4bInPlfh8iS+U+GKJL5X4comvlPhqia+V+HqJb5T4Zolvlfh2ie+U+O7IYf/f4w9K/LDEj0r8uMRPSvy0xM9K/LzEL34b+Z8o8esSvynx2xK/K/H7En8o8ccSfyrx5xJ/KfHXEn8r8fcS/yjxzxL/KvHvEv8p8d8SR7U3VOGwCkercHiFo1c4RoVjVjhWhWNXOE6F41Y4XoXjVzhBhRNWOFGFE1c4SYWTVjhZhZNXOEWFU1Y4VYVTVzhNhdNWOF2F01c4Q4UzDh8aGtX3zBXOUuGsFc5W4ewVzlHhnBXOVeHcFc5T4bwVzlfh/BUuUOGCFS5U4cIVUuEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVLlvhchUuX+EKFa5Y4UoVrlzhKhWuWuFqFa5e4RoVrlnhWhWuXeE6Fa5b4XoVrl/hBhVuWOFGFW5c4SYVblrhZhVuXuEWFW5Z4VYVbl3hNhVuW+F2FW5f4Q4V7ljhThXuXOEuFe5a4W4V7l7hHhXuWeFeFe5d4T4V7lvhfhXuX+EBFR5Y4UEVHlzhIRUeWuFhFR5e4REVHlnhURUeXeExFVrhsRUeV+HxFZ5Q4YgKT6zwpApPrnBQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV/hKRWeWuFpFZ5e4RkVnlnhWRWeXeE5I/DcCs+r8PwKL6jwwgovqvDiCi+p8NIKL6vw8gqvqPDKCq+q8OoKr6nw2gqvGzn8/xy6ocIbK7ypwpsrvKXCWyu8rcLbK7yjwjsrvKvCuyu8p8J7K7yvwvsrfKDCByt8qMKHK3ykwkcrfKzCxyt8osInK3yqwqcrfKbCZyt8rsLnK3yhwhcrfKnClyt8pcJXK3ytwtcrfKPCNyt8q8K3K3ynwncrfK/C9yv8oMIPK/yowo8r/KTCTyv8rMLPK/yiwi8r/KrCryv8psJvK/yuwu8r/KHCHyv8qcKfK/ylwl8r/K3C3yv8o8I/K/yrwr8r/KfCfyscWeFQjcNqHK3G4TWOXuMYNY5Z41g1jl3jOPWwoXFrHK/G8WucoMYJa5yoxolrnKTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWukxkVqXLTGxWpcvMYlalyyxqVqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqtMZjazyuxuNrPKHGETWeWONJozwYGjlyUGNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2Nf4yk1nlrjaTWeXuMZNZ5Z41k1nl3jOTWeW+N5NZ5f4wU1XljjRTVeXOMlNV5a42U1Xl7jFTVeWeNVNV5d4zU1XlvjdTVeX+MNNd5Y40013lzjLTXeWuNto3weGhq6o8Y7a7yrxrtrvKfGe2u8r8b7a3ygxgdrfKjGh2t8pMZHa3ysxsdrfKLGJ2t8qsana3ymxmdrfK7G52t8ocYXa3ypxpdrfKXGV2t8rcbXa3yjxjdrfKvGt2t8p8Z3a3yvxvdr/KDGD2v8qMaPa/ykxk9r/KzGz2v8osYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGP2v8q8a/a/ynxn9rHFnjUIPDGhytweENjt7gGA2O2eDYQzh2g+M0OG6D4zU4foMTNDhhgxM1OHGDkzQ4aYOTNTh5g1M0OGWDUzU4dYPTNDhtg9M1OH2DMzQ4Y4MzNThzg7M0OGuDszU4e4NzNDhng3M1OHeD8zQ4b4PzNTh/gws0uGCDCzW4cIM0uEiDiza4WIOLN7hEg0s2uFSDSze4TIPLNrhcg8s3uEKDKza4UoMrN7hKg6s2uFqDqze4RoNrNrhWg2s3uE6D6za4XoPrN7hBgxs2uFGDGze4SYObNrhZg5s3uEWDWza4VYNbN7hNg9s2uF2D2ze4Q4M7Nv/hu3ODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkw9bjDw15dIPHNGiDxzZ4XIPHN3hCgyMaRoxy4KQGT25w0GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4CkNntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DZ7f4AXNf+p0VFzc4CUNXtrgZQ1e3uAVDV7Z4FUNXt3gNQ1e2+B1DV7f4A0N3tjgTQ3e3OAto+OtDd7W4O0N3tHgnQ3e1eDdDd7T4L0N3tfg/Q0+0OCDDT7U4MMNPtLgow0+1uDjDT7R4JMNPtXg0w0+0+CzDT7X4PMNvtDgiw2+1ODLDb7S4KsNvtbg6w2+0eCbDb7V4NsNvtPguw2+1+D7DX7Q4IcNftTgxw1+0uCnDX7W4OcNftHglw1+1eDXDX7T4LcNftfg9w3+0OCPDf7U4M8N/tLgrw3+1uDvDf7R4J8N/tXg3w3+0+C/DY5scKjFYS2O1uLwFkdvcYz//h+rxbFbHKfFcVscr8XxW5ygxQlbnKjFiVucpMVJW5ysxclbnKLFKVucqsWpW5ymxWlbnK7F6VucocUZW5ypxZlbnKXFWVucrcXZW5yjxTlbnKvFuVucp8V5W5yvxflbXKDFBVtcqMWFW6TFRVpctMXFWly8xSVaXLLFpVpcehgu0+KyLS7X4vLtMFdoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqGXPvFvdpcd8W92tx/xYPaPHAFg9q8eAWD2nx0BYPa/HwUTkd+s/+8qgWj27xmBZt8dgWj2vx+JYNTmhxRIsntnhS+x8XBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVbt0LC6xabFtsWuxb7FU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtaHLPFm1q8ucVbWry1xdtavL3FO1q8s8W7Wry7xXtavLfF+1q8v8UHWnywxYdafLjFR1p8tMXHWny8xSdafLLFp1p8usVnWny2xedafL7FF1p8scWXWny5xVdafLXF11p8vcU3WnyzxbdafLvFd1p8t8X3Wny/xQ9a/LDFj1r8uMVPWvy0ZWi0oaEVP2/xixa/bPGrFr9u8ZsWv23xuxa/b/GHFn9s8acWf27xlxZ/bfG3Fn9v8Y8W/2zxrxb/bvGfFv9tceSonHc4rMPROhze4egdjtHhmB2O1eHYHY7T4bgdjtfh+B1O0OGEHU7U4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDhjB3O1OHMHc7S4awdztbh7B3O0eGcHc7V4dwdztPhvB3O1+H8HS7Q4YIdLtThwh3S4SIdLtrhYh0u3uESHS7Z4VIdLt3hMh0u2+FyHS7f4QodrtjhSh2u3OEqHa7a4Wodrt6N4xodrtnhWh2u3eE6Ha7b8b+Pr27Q4YYdbtThxh1u0uGmHW7W4eYdbtHhlh1u1eHWHW7T4bYdbtfh9h3u0OGOHe7U4c4d7tLhrh3u1uHuHe7R4Z4d7tXh3h3u0+G+He7X4f4dHtDhgR0e1OHBHR7S4aEdHtbh4R0e0eGRHR7V4dEdHtOhHR7b4XEdHt/hCR2OOAFP7PCkDk/ucNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+EpHZ7a4Wkdnt7hGR2e2eFZHZ7d4TkdntvheR2e3+EFHV7Y4UUdXtzhJR1e2uFlHV7e4RUdXtnhVR1e3eE1HV7b4XUdXt/hDR3e2OFNHd7c4S0d3trhbR3e3uEd3X88v6vDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzscOYpLj8N6HK3H4T2O3uMYPY7Z41g9jt3jOD2O2+N4PY7f4wQ9TtjjRD1O3OMkPU7a42Q9Tt7jFD1O2eNUPU7d4zQ9TtvjdD1O3+MMPc7Y40w9ztz/5y7zrD3O1uPsPc7R45w9ztXj3D3O0+O8Pc7X4/w9LtDjgj0u1OPCPdLjIj0u2uNiPS7e4xI9LtnjUj0u3eMyPS7b43I9Lt/jCj2u2ONKPa7c4yo9rtrjav+7it3jmj2u1ePaPa7T47o9rtfj+j1u0OOGPW7U48Y9btLjpj1u1uPmPW7R45Y9btXj1j1u0+O2PW7X4/Y97tDjjj3u1OPOPe7S46497tbj7j3u0eOePe7V49497tPjvj3u1+P+PR7Q44E9HtTjwT0e0uOhPR7W4+E9HtHjkT0e1ePRPR4z1pD2eGyPx/V4/CjuPY7o8cQeT+rx5B4HPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY9ntLjqT2e1uPpPZ7R45k9ntXj2T2e0+O5PZ7X4/k9XtDjhT1e1OPFPV7S46U9Xtbj5T1e0eOVPV7V49U9XtPjtT1e1+P1Pd7Q44093tTjzT3e0uOtPd7W4+093tHjnT3e1ePdPd7T47093tfj/T0+0OODPT7U48M9PtLjoz0+1uPjPT7R45M9PtXj0z0+0+OzPT7X4/M9vtDjiz2+1OPLPb7S46s9vtbj6z2+0eObPb7V49s9vtPjuz2+1+P7PX7Q44c9ftTjxz1+0uOnPX7W4+c9ftHjlz1+1ePXPX7T4/8j4p2DBj+CRutnk012w42dbGyd2NnYtm0bJ9jY3p+NJ7Zt27Zta7/Ke9/v3n+namp6ek53dff0zLdj8Lsx+P0Y/GEM/jgGfxqDP4/BX8bgr2PwtzH4+xj8Ywz+OQb/GoN/j8F/xuC/Y3DsGBwIcEiA4wQ4boBDAxwvwPEDHBbg8AAnCHDCACcKcOIAJwlw0gBHBDhZgJMHOEWAUwY4VYBTBzhNgNMGOF2A0wc4Q4AzBjhTgDMHOEuAIwOcNcDZApw9wDkCnDPAuYKB0XMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBsheAwP/7WPxAJcIcMkAlwpw6QCXCXDZAJcLcPkAVwhwxQBXCnDlAEcFuEqAqwa4WoCrB7hGgGsGuFaAaw8dcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IAADwzwoAAPDvCQAA8N8LAADw/wiACPDPCoAI8O8JgAjw3QAI8L8PgATwjwxABHB3hSgCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgGMCBv5jKQwwCjAOMAkwDTALMA+wCLAMsAqwDrAJsA2wC7APcDDASwO8LMDLA7wiwCsDvCrAqwO8JsBrA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8A7A7wrwLsDvCfAewO8L8D7A3wgwAcDfCjAhwN8JMBHA3wswMcDfCLAJwN8KsCnA3wmwGcDfC7A5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CD4P/18HwX4cYCfBPhpgJ8F+HmAXwT4ZYBfBfh1gN8E+G2A3wX4fYA/BPhjgD8F+HOAvwT4a4C/Bfh7gH8E+GeAfwX4d4D/BDh2BI4NcCDEISGOE+K4IQ4NcbwQxw9xWIjDQ5wgxAlDnCjEiUOcJMRJQxwR4mQhTh7iFCFOGeJUIU4d4jQhThvidCFOH+IMIc4Y4kwhzhziLCGODHHWEGcLcfYQ5whxzhDnCnHuEOcJcd4Q5wtx/hAXCHHBEBcKceEQFwlx0RAJcbEQFw9xiRCXDHGpEJcOcZkQlw1xuRCXD3GFEFcMcaUQVw5xVIirhLhqiKuFuHqIa4S4Zohrhbh2iOuEuG6I64W4fogbhLhhiBuFuHGIm4S4aYibhbh5iFuEuGWIW4W4dYjbhLhtiNuFuH2IO4S4Y4g7hbhziLuEuGuIu4W4e4h7hLhniHuFuHeI+4S4b4j7hbh/iAeEeGCIB4V4cIiHhHhoyMD/n5scEeKRIR4V4tEhHhPisSEa4nEhHh/iCSGeGOLoEE8K8eQQTwnx1BBPC/H0EM8I8cwQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8JcUyIQYhhiFGIcYhJiGmIWYj5f7yN/j/X2VWIdYhNiG2IXYh9iIMhXhriZf/L5hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iEyE+GeJTIT4d4jMhPhvicyE+H+ILIb4Y4kshvhziKyG+GuJrIb4e4hshvhniWyG+HeI7Ib4b4nshvh/iByF+GOJHIX4c4ichfhriZyF+HuIXIX4Z4lchfh3iNyF+G+J3IX4f4g8h/hjiTyH+HOIvIf4a4m8h/h7iHyH+GeJfIf4d4j8h/hvi2BAHIhwS4TgRjhvh0AjHi3D8CIdFODzCCSKcMMKJIpw4wkkinDTCERFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4cgIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNkAgXi3DxCJeIcMkIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCEdFuEqEq0a4WoSrR7hGhGtGuFaEa0e4ToTrRrhehOtHuEGEG0a4UYQbR7hJhJtGuFmEm0e4RYRbRrhVhFtHuE2E20a4XYTbR7hDhDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0d4TITHRmiEx0V4fIQnRHhihKMjPCnCkyM8JcJTIzwtwtMjPCPCMyM8K8KzIzwnwnMjPC/C8yO8IMILI7wowosjvCTCMREGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EQ5GeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0T4ZYRfRfh1hN9E+G2E30X4fYQ/RPhjhD9F+HOEv0T4a4S/Rfh7hH9E+GeEf0X4d4T/RPhvhGMjHIhxSIzjxDhujENjHC/G8WMcFuPwGCeIccIYJ4px4hgniRkyaYwjYpwsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcYZY5wpxpljnCXGkTHOGuNsMc4e4xwxzhnjXDHOHeM8Mc4b43wxzh/jAjEuGONCMS4c4yIxLhojMS4W4+IxLhHjkjEuFePSMS4T47IxLhfj8jGuEOOKMa4U48oxjopxlRhXjXG1GFePcY0Y14xxrRjXjnGdGNeNcb0Y149xgxg3jHGjGDeOcZMYN41xsxg3j3GLGLeMcasYt45xmxi3jXG7GLePcYcYd4xxpxh3jnGXGHeNcbcYd49xjxj3jHGvGPeOcZ8Y941xvxj3j/GAGA+M8aAYD47xkBgPjfGwGA+P8YgYj4zxqBiPjvGYGI+N0RiPi/H4GE+I8cQYR8d4Uownx3hKjKfGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYxjYgxiDGOMYoxjTGJMY8xizGMsYixjrGKsY2xibGPsYuxjHIzx0hgvi/HyGK+I8coYr4rx6hivifHaGK+L8fr/ZNgVb4zxphhvjvGWGG+N8bYYb4/xjhjvjPGuGO+O8Z4Y743xvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+NcWyMAwkOSXCcBMdNcGiC4yU4foLDEhye4AQJTpjgRAlOnOAkCU6a4IgEJ0tw8gSnSHDKBKdKcOoEp0lw2gSnS3D6BGdIcMYEZ0pw5gRnSXBkgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJkiCiyW4eIJLJLhkgksluHSCyyS4bILLJTgwdMj/fTu1UoIrJzhq1ICrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJQzZPMEtEtwywa0S3DrBbRLcNsHtEtw+wR0S3DHBnRLcOcFdkuH/V67dE9wjwT0T3CvBvRPcJ8F9E9wvwf0TPCAZnPDABA9K8OAED0nw0AQPS/DwBI9I8MgEj0rw6ASPSfDYBE3wuASPT/CEBE9McHSCJyV4coKnJHhqgqcleHqCZyR4ZoJnJXh2guckeG6C5yV4foIXJHhhghcleHGClyQ4JsEgwTDBKME4wSTBNMEswTzBIsEywSrBOsEmwTbBLsE+wcEEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkEn0zwqQSfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9NcOx/NpHikBSHpzhuikNTHC/F8VMc9r/jE6Q4YYoTpThxipOkOGmKI1KcLMXJU5wixSlTnCrFqVOcJsVpU5wuxelTnCHFGVOcKcWZU5wlxZEpzpribCnOnuIcKc6Z4lwpzp3iPCnOm+J8Kc6f4gIpLpjiQikunOIiKS6aIikuluLiKS6R4pIpLpXi0ikuk+KyKS6X4vIprpDiiimulOLKKY5KcZUUV01xtRRXT3GNFNdMca0U105xnRTXTXG9FNdPcYMUN0xxoxQ3TnGTFDdNcbMUN09xixS3THGrFLdOcZsUt01xuxS3T3GHFHdMcacUd05xlxR3TXG3FHdPcY8U90xxrxT3TnGfFPdNcb8U90/xgBQPTPGgFA9O8ZAUD03xsBQPT/GIFI9M8agUj07xmBSPTdEUj0vx+BRPSPHEFEeneFKKJ6d4SoqnpnhaiqeneEaKZ6Z4Vopnp3hOiuemeF6K56d4QYoXpnhRiheneEmKY1IMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsUxxM8dIUL0vx8hSvSPHKFK9K8eoUr0nx2hSvS/H6FG9I8cYUb0rx5hRvSfHWFG9L8fYU70jxzhTvSvHuFO9J8d4U70vx/hQfSPHBFB9K8eEUH0nx0RQfS/HxFJ9I8ckUn0rx6RSfSfHZFJ9L8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfFMemOJDhkAzHyXDcDIdmOF6G42c4LMPhGU6Q4YQZTpThxBlOkuGkGY7IcLIMJ89wigynzHCqDKfOcM5HBwamzXC6DKfPcIYMZ8xwpgxnznCWDEdmOGuGs2U4e4Zz/Dcvw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJcOMNFMlw0QzJcLMPFM1wiwyUzXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVMxyV4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+Ge6b4X4Z7p/hARkemOFBGR6c4SEZHprhYRkenuERGR6Z4VEZHp3hMRkem6EZHpfh8RmekOGJGY7O8KQMT87wlAxPzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIMx2QYZBhmGGUYZ5hkmGaYZZhnWGRYZlhlWGfYZNhm2P3H3sDAwGCGl2Z4WYaXZ3hFhldmeFWGV2d4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9m+FCGD2f4SIaPZvhYho9n+ESGT2b4VIZPZ/hMhs9m+FyGz2f4QoYvZvhShi9n+EqGr2b4WoavZ/hGhm9m+FaGb2f4TobvZvhehu9n+EGGH2b4UYYfZ/hJhp9m+FmGn2f4RYZfZvhVhl9n+E2G32b4XYbfZ/hDhj9m+FOGP2f4S4a/Zvhbhr9n+EeGf2b4V4Z/Z/hPhv9mODbDgRyH5DhOjuPmODTH8XIcP8dhOQ7PcYIcJ8xxohwnznGSHCfNcUSOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5Dgyx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFcyTHxXJcPMclclwyx6VyXDrHZXJcNsflclw+xxVyXDHHlXJcOcdROa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bjHmf8P5HLfOcZsct81xuxy3z3GHHHfMcaccd85xlxx3zXG3HHfPcY8c98xxrxz3znGfHPfNcb8c98/xgBwPzPGgHA/O8ZAcD83xsBwPz/GIHI/M8agcj87xmByPzdEcj8vx+BxPyPHEHEfneFKOJ+d4So6n5nhajqfneEaOZ+Z4Vo5n53hOjufmeF6O5+d4QY4X5nhRjhfneEmOY3IMcgxzjHKMc0xyTHPMcsxzLHIsc6xyrHNscmxz7HLscxzM8dIcL8vx8hyvyPHKHK/K8eocr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzvyvHuHO/J8d4c78vx/hwfyPHBHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8pnWuTvHP/J8d8cx+Y4UOCQAscpcNwChxY4XoHjFziswOEFTlDghAVOVODEBU5S4KQFjihwsgInL3CKAqcscKoCpy5wmgKnLXC6AqcvcIYCZyxwpgJnLnCWAkcWOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogRS4WIGLF7hEgUsWuFSBSxe4TIHLFrhcgcsXuEKBKxa4UoErFziqwFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tkALPK7A4ws8ocATCxxd4EkFnlzgKQWeWuBpBZ5e4BkFnlngWQWeXeA5BZ5b4HkFnl/gBQVeWOBFBV5c4CUFjikwKDAsMCowLjApMC0wKzAvsCiwLLAqsC6wKbAtsCuwL3CwwEsLvKzAywu8osArC7yqwKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcL/LjARwt8rMDHC3yiwCcLfKrApwt8psBnC3yuwOcLfKHAFwt8qcCXC3ylwFcLfK3A1wt8o8A3C3yrwLeHDgz8Z3PvFvhege8X+EGBHxb40f+u/UmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4R4F/FvhXgX8X+E+B/xY4tsCBEoeUOE6J45Y4tMTxShy/xGElDi9HOkGJE5Y4UYkTlzhJiZOWOKLEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+HPY/ta0ZS5ypxJlLnKXEkSXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLloiJS5W4uIlLlHikiUuVeLSJS5T4rIlLlfi8iWuUOKKJa5U4soljipxlRJXLXG1ElcvcY0S1yxxrRLXLnGdEtctcb0S1y9xgxI3LHGjEjcucZMSNy1xsxI3L3GLErcscasSty5xmxK3LXG7ErcvcYcSdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfl37NixHl7iESUeWeJRJR5d4jElHluiJR5X4vElnlDiiSWOLvGkEk8u8ZQSTy3xtBJPL/GMEs8s8awSzy7xnBLPLfG8Es8v8YISLyzxohIvLvGSEseUGJQYlhiVGJeYlJiWmJWYl1iUWJZYlViX2JTYltiV2Jc4WOKlJV5W4uUlXlHilf8lBiVeXeI1JV5b4nUlXl/iDSXeWOJNJd5c4i0l3lribSXeXuIdJd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiQyU+XOIjJT5a4mMlPl7iEyU+WeJTJT5d4jMlPlvicyU+X+ILJb5Y4kslvlziKyW+WuJrJb5e4hslvlniWyW+XeI7Jb5b4nslvl/iByV+WOJHJX5c4iclflriZyV+XuIXJX5Z4lclfl3iNyV+W+J3JX5f4g8l/ljiTyX+XOIvJf5a4m8l/l7iHyX+WeJfJf5d4j8l/lvi2BIHKhxS4TgVjlvh0ArHq3D8CodVOLzCCSqcsMKJKpy4wkkqnLTCERVOVuHkFU5R4ZQVTlXh1BVOU+G0FU5X4cDAwOj/wuEZK5ypwpkrnKXCkRXOWuFsFc5e4RwVzlnhXBXOXeE8Fc5b4XwVzl/9v9r9QhUuXOEiFS5aIRUuVuHiFS5R4ZIVLlXh0hUuU+GyFS5X4fIVrlDhihWuVOHKFY6qcJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowo3rnCTCjetcLMKN69wiwq3rHCrCreucJsKt61wuwq3r3CHCnescKcKd65wlwp3rXC3CnevcI8K96xwrwr3rnCfCvetcL8K96/wgAoPrPCgCg+u8JAKD63wsAoPr/CICo+s8KgKj67wmAqPrdAKj6vw+ApPqPDECkdXeFKFJ1d4SvX//qE+vcIzKjyzwrMqPLvCcyo8t8LzKjy/wgsqvLDCiyq8uMJLKhxTYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV/hYIWXVnhZhZdXeEWFV1Z4VYVXV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFj1f4RIVPVvhUhU9X+EyFz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1Y49j/brHFIjePUOG6NQ2scr8bxaxxW4/AaJ6hxwhonqnHiGiepcdIaR9Q4WY2T1zhFjVPWOFWNU9c4TY3T1jhdjdPXOEONM9Y4U40z1zhLjSNrnLXG2WqcvcY5apyzxrlqnLvGeWqct8b5apy/xgVqXLDGhWpcuMZFaly0RmpcrMbFa1yixiVrXKrGpWtcpsZla1yuxuVrXKHGFWtcqcaVaxxV4yo1rlrjajWuXuMaNa5Z41o1rl3jOjWuW+N6Na5f4wY1bljjRjVuXOMmNW5a42Y1bl7jFjVuWeNWNW5d4zY1blvjdjVuX+MONe5Y40417lzjLjXuWuNuNe5e4x417lnjXjXuXeM+Ne5b43417l/jATUeWONBNR5c4yE1HlrjYTUeXuMRNR5Z41E1Hl3jMTUeW6M1Hlfj8TWeUOOJNY6u8aQaT67xlBpPrfG0Gk+v8Ywaz6zxrBrPrvGcGs+t8bwaz6/xghovrPGiGi+u8ZIax9QY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY1zhY46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q4431/4kxb67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGp+s8ama1///Hstna3yuxudrfKHGF2t8qcaXa3ylxldrfK3G12t8o8Y3a3yrxrdrfKfGd2t8r8b3a/ygxg9r/KjGj2v8pMZPa/ysxs9r/KLGL2v8qsava/ymxm9r/K7G72v8ocYfa/ypxp9r/KXGX2v8rcbfa/yjxj9r/KvGv2v8p8Z/axxb40CDQxocp8FxGxza4HgNjt/gsAaHNzhBgxM2OFGDEzc4SYOTNjiiwckanLzBKRqcssGpGpy6wWkanLbB6RqcvsEZGpyxwZkanLnBWRoc2eCsDc7W4OwNztHgnA3O1eDcDc7T4LwNztfg/A0u0OCCDS7U4MINLtLgog3S4GINLt7gEg0u2eBSDS7d4DINLtvgcg0u3+AKDa7Y4EoNrtzgqAZXaXDVBldrcPUG12hwzQbXanDtBtdpcN0G12tw/QY3aHDDBjdqcOMGN2lw0wY3axj+HxtbNLhlg1s1uHWD2zS4bYPbNbh9gzs0uGODOzW4c4O7NLhrg7s1uHuDezS4Z4N7Nbh3g/s0uG+D+zW4f4MHNHhggwc1eHCDhzR4aIOHNXh4g0c0eGSDRzV4dIPHNHhsgzZ4XIPHN3hCgyc2OLrBkxo8ucFTGjy1wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxoc02DQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4GCDlzZ4WYOXN3hFg1c2eFWDVzd4TYPXNnhdg9c3eEODNzZ4U4M3N3hLg7c2eFuDtzd4R4N3NnhXg3c3eE+D9zZ4X4P3N/hAgw82+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882/7mBIf/jc15o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGP2nw0wY/a/DzBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wbHNjjQ4pAWx2lx3BaHtjhei+O3OKzF4S1O0OKELU7U4sQtTtLipC2OaHGyFidvcYoWp2xxqhanbvGaSXHaFqdrcfoWZ2hxxhZnanHmFmdpcWSLs7Y4W4uztzhHi3O2OFeLc7c4T4vztjhfi/O3uECLC7a4UIsLt7hIi4u2SIuLtbh4i0u0uGSLS7W4dIvLtLhsi8u1uHyLK7S4Yosrtbhyi6NaXKXFVVtcrcXVW1yjxTVbXKvFtVuGrdPiui2u1+L6LW7Q4oYtbtTixi1u0uKmLW7W4uYtbtHili1u1eLWLW7T4rYtbjcwasf/dL1Dizu2uFOLO7e4S4u7trhbi7u3uEeLe7a4V4t7t7hPi/u2uF970v/wdkCLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Zoi8e1eHyLJ7R4YoujWzypxZNbPKXFU1s8rcXTWzyjxTNbPKvFs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxTEtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i0OtiO9tMXLWry8xStavLLFq1q8+j+2Wry2xetavL7FG1q8scWbWry5xVtavLXF21q8vcU7WryzxbtavLvFe1q8t8X7Wry/xQdafLDFh1p8uMVHWny0xcdafLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZfa8f/nfF5p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8W/2rx7xb/afHfFse2ONDhkA7H6XDcDod2OF6H43c4rMPhHU7Q4YQdTtThxB1O0uGkHY7ocLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5Hdjhrh7N1OHuHc3Q4Z4dzdTh3h/N0OG+H83U4f4cLdLhghwt1uHCHi3S4aId0uFiHi3e4RIdLdrhUh0t3uEyHy3a4XIfLd7hChyt2uFKHK3c4qsNVOly1w9U6XL3DNTpcs8O1Oly7w3U6XLfD9Tpcv8MNOtyww4063LjDTTrctMPNOty8wy063LLDrTrcusNtOty2w+063L7DHTrcscOdOty5w1063LXD3TrcvcM9Otyzw7063LvDfTrct8P9Oty/wwM6PLDDgzo8uMNDOjy0w8M6PLzDIzo8ssOjOjy6w2M6PLZDOzyuw+M7PKHDEzsc3eFJHZ7c4SkdntrhaR2e3uEZHZ7Z4Vkdnt3hOR2e2+F5HZ7f4QUdXtjhRR1e3OElHY7pMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO9wsMNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzsc2+FAj0N6HKfHcXsc2uN4PY7f47Aeh/c4QY8T9jhRjxP3OEmPk/Y4osfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6HNnjrD3O1uPsPc7R45w9ztXj3D3O0+O8Pc7X4/w9LtDjgj0u1OPCPS7S46I90uNiPS7e4xI9LtnjUj0u3eMyPS7b43I9Lt/jCj2u2ONKPa7c46geV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf3RAwP/6WzDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dge7fG4Ho/v8YQeT+xxdI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj2f1eHaP5/R4bo/n9Xh+jxf0eGGPF/V4cY+X9Dimx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77HwR4v7fGyHi/v8Yoer+zxqh6v7vGaHq/t8boer+/xhh5v7PGmHm/u8ZYeb+3xth5v7/GOHu/s8a4e7+7xnh7v7fG+Hu/v8YEeHxwyMPCfLh7u8ZEeH+3xsR4f7/GJHp/s8aken+7xmR6f7fG5Hp/v8YUeX+zxpR5f7vGVHl/t8bUeX+/xjR7f7PGtHt/u8Z0e3+3xvR7f7/GDHj/s8aMeP+7xkx4/7fGzHj/v8Ysev+zxqx6/7vGbHr/t8bsev+/xhx5/7PGnHn/u8Zcef+3xtx5/7/GPHv/s8a8e/+7xnx7/7XFsjwODOGQQxxnEcQdx6CCON4jjD+KwQRw+iBMM4oSDONEgTjyIkwzipIM4YhAnG8TJB3GKQZxyEKca/P+IOucgzo5mDW82to3d2HhiZ2Pbtm08sW1bx8Yvtm3btr239n757v3r1FFV19v99vT0zHTjlAFOFeDUAU4T4LQBThfg9AHOEOCMAc4U4LAAhwc4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG/A7/9WQnaBABcMcKEACXDhABcJcNEAFwtw8QCXCHDJAJcKcOkAlwlw2QCXC3D5AFcIcESAKwa4UoArB7hKgKsGuFqAqwe4RoBrBrhWgGsHuE6A6wa4XoDrB7hBgBsGuFGAGwe4SYCbBrhZgJsHuEWAWwa4VYBbB7hNgNsGuF2A2we4Q4A7BrhTgDsHuEuAuwa4W4C7B7hHgHsGuFeAewe4T4D7BrhfgPsHeECABwZ4UIAHB3hIgIcGeFiAhwd4RIBHBnhUgAZ4dIDHBHhsgMcFeHyAJwR4YoAnBXhygKcEeGqApwV4eoBnBHhmgGcFeHaA5wR4boDnBXh+gBcEeGGAFwV4cYCXBHhpgJcFeHmAVwR4ZYBXBXh1gNcEeG2A1wV4fYA3BHhjgDcFeHOAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2AfYCDAG8J8NYAbwvw9gDvCPDOAO8K8O4A7wnw3gDvC/D+AB8I8MEAHwrw4QAfCfDRAB8L8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CPDLAL/6l4/fBPhtgN8F+H2APwT4Y4A/BfhzgL8E+GuAvwX4e4B/BPhngH8F+HeA/wQ4MsAhIY4W4tAQRw9xjBDHDHGsEMcOcZwQxw1xvBDHD3GCECcMcaIQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhBnDHGmEIeFODzEmUOcJcRZQ5wtxNlDnCPEOUOcK8S5Q5wnxHlDnC/E+UNcIMQFQ1woREJcOMRFQlw0xMVCXDzEJUJcMsSlQlw6xGVCXDbE5UJcPsQVQhwR4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFaIhHh3iMSEeG+JxIR4f4gkhnhjiSSGeHOIpIZ4a4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4cYhBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh/iIMRbQrw1xNtCvD3EO0K8M8S7Qrw7xHtCvDfE+0K8P8QHQnwwxIdCfDjER0J8NMTHQnw8xCdCfDLEp0J8OsRnQnw2xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/QhwZ4pAIR4twaISjRzhGhGNGOFaEY0c4ToTjRjhehONHOEGEE0Y4UYQTRzhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEwyIcHuHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhQhES4c4SIRLhrhYhEuHuESES4Z4VIRLh3hMhEuG+FyES4f4QoRjohwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K0AiPjvCYCI+N8LgIj4/whAhPjPCkCE+O8JQIT43wtAhPj/CMCM+M8KwIz47wnAjPjfC8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCK+O8JoIr43wugivj/CGCG+M8KYIb44wiDCMMIowjjCJMI0wizCPsIiwjLCKsI6wibCNsIuwj3AQ4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjhQxE+HOEjET4a4WMRPh7hExE+GeFTET4d4TMRPhvhcxE+H+ELEb4Y4UsRvhzhKxG+GuFrEb4e4RsRvhnhWxG+HeE7Eb4b4XsRvh/hB9HQ//T/jvDjCD+J8NMIP4vw8wi/iPDLCL+K8OsIv4nw2wi/i/D7CH+I8McIf4rw5wh/ifDXCH+L8PcI/4jwzwj/ivDvCP+JcGSEQ2IcLcahMY4e4xgxjhnjWDGOHeM4MY4b43gxjh/jBDFOGONEMU4c4yQxThrjZDFOHuMUMU4Z41QxTh3jNDFOG+N0MU4f4wwxzhjjTDEOi3F4jDPHOEuMs8Y4W4yzxzhHjHPGOFeMc8c4T4zzxjhfjCP/7fq9YIwLxUiMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMvGuFyMy8e4QowjYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYhzyby3erWPcJsZtY9wuxu1j3CHGHWPcKcadY9wlxl1j3C3G3WPcI+b4PWPcK8a9Y9wnxn1j3C/G/WM8IMYDYzwoxoNjPCTGQ2M8LMbDYzwixiNjPCpGYzw6xmNiPDbG42I8PsYTYjwxxpNiPDnGU2I8NcbTYjw9xjNiPDPGs2I8O8ZzYjw3xvNiPD/GC2K8MMaLYrw4xktivDTGy2K8PMYrYrwyxqtivDrGa2K8NsbrYrw+xhtivDHGm2K8OcYgxjDGKMY4xiTGNMYsxnwUTWIsY6xirGNsYsYe9ayLsY9xEOMtMd4a420x3h7jHTHeGeNdMd4d4z0x3hvjfTHeH+MDMT4Y40MxPhzjIzE+GuNjMT4e4xMxPhnjUzE+HeMzMT4b43MxPh/jCzG+GONLMb4c4ysxvhrjazG+HuMbMb4Z41sxvh3jOzG+G+N7Mb4f4wcxfhjjRzF+HOMnMX4a42cxfh7jFzF+GeNXMX4d4zcxfhvjdzF+H+MPMf4Y408x/hzjLzH+GuNvMf4e4x8x/hnjXzH+HeM/o3g0yjYTHC3BoQmOnuAYCY6Z4FgJjp3gOAmOm+B4CY6f4AQJTpjgRAlOnOAkCU6a4GQJTp7gFKP+/XeTxNQJTpPgtAlOl+D0Cc6Q4IwJzpTgsASHJzhzgrMkOGuCsyU4e4JzJDhngnMlOHeC8yQ4b4LzJTh/ggskuGCCCyVIggsnuEiCiya4WIKLJ7hEgksmuFSCSye4TILLJrhcgssnuEKCIxJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPuG/B//dKcGdE9wlwV0T3C3B3RPcI8E9E9wrwb0T3CfBfRPcL8H9EzwgwQMTPCjBgxM8JMFDEzwswcMTPCLBIxM8KkETPDrBY/7F9LgEj0/whARPTPCkBE9O8JQET03wtARPT/CMBM9M8KwEz07wnATPTfC8BM9P8IIEL0zwogQvTvCSBC9N8LIEL0/wigSvTPCqBK9O8JoEr03wugSvT/CGBG9M8KYEb04wSDBMMEowTjBJME0wSzBPsEiwTLBKsE6wSbBNsEuwT3CQ4C0J3prgbQnenuAdCd6Z4F0J3p3gPQnem+B9Cd6f4AMJPpjgQ8l/elo+kuCjCT6W4OMJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4MgEh6Q4WopDUxw9xTFSHDPFsVIcO8VxUhw3xfFSHD/FCVKcMMWJUpw4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVIcluLwFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRRJceEUF0lx0RQXS3HxFJdIcckUl0px6RSXSXHZFJdLcfkUV0hxRIorprhSiiunuEqKq6a4Woqrp7hGimumuFbKOGunuE6K66a4Xorrp7hBihumuFGKG6e4SYqbpgwZhevmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkelaIpHp3iMSkem+JxKR6f4gkpnpjiSSmenOIpKZ6a4mkpo1y5Z6R4ZopnpXh2iuekeG6K56V4fooXpHhhiheleHGKl6R4aYqXpXh5ilekeGWKV6V4dYrXpHhtiteleH2KN6R4Y4o3pXhzikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2KgxRvSfHWFG9L8fYU70jxzhTvSvHuFO9J8d4U70vx/hQfSPHBFB9K8eEUH0nx0RQfS/HxFJ9Ifx35ZIpPpfh0is+k+GyKz6X4fIovpPhiii+l+HKKr6T4aoqvpfh6im+k+GaKb6X4dorvpPhuiu+l+H6KH6T4Ycq4/x0PPknx0xQ/S/HzFL9I8csUv0rx6xS/SfHbFL9L8fsUf0jxxxR/SvHnFH9J8dcUf0vx9xT/SPHPFP9K8e8U/0lxZIpDMhwtw6EZjp7hGBmOmeFYGY6d4TgZjpvheBmOn+EEGU6Y4UQZTpzhJBlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGQ7LcHiGM2c4S4azZjhbhrNnOEeGc2Y4V4ZzZzhPhvNmOF+G82e4wH+PA2RIhgtnuMjQ/9wvluHiGS6R4ZIZLpXh0hkuk+GyGS6X4fIZrpDhiAxXzHClDFfOcJUMV81wtQxXz3CNDNfMcK0M185wnQzXzXC9DNfPcIMMN8xwoww3znCTDDfNcLMMN89wiwy3zHCrDLfOcJsMt81wuwy3z3CHDHfMcKcMd85wlwx3zXC3DHfPcI8M98xwrwz3znCfDPfNcL8M98/wgAwPzPCgDA/O8JAMD83wsAwPz/CIDI/M8KgMzfDoDI/J8NgMj8vw+AxPyPDEDE/K8OQMT8nw1AxPy/D0DM/I8MwMz8rw7AzPyfDcDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/K8OoMr8nw2gyvy/D6DG/I8MYMb8pwyL8RUZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4SDDWzK8NcPbMrw9wzsyvDPDuzK8O8N7Mrw3w/syvD/DBzJ8MMOHMnw4w0cyfDTDxzJ8PMMnMnwyw6cyfDrDZzJ8NsPnRsn8Hr6Q4YsZvpThyxm+kuGrGb6W4esZvpHhmxm+leHbGb6T4bsZvpfh+xl+MAQ/zPCjDD/O8JMMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDP/O8J8MR46SPcfRchya4+g5jpHjmDmOlePYOY6T47g5jpfj+DlOkOOEOU6U48Q5TpLjpDlOluPkOU6R45Q5TpXj1DlOk+O0OU6X4/Q5zpDjjDnOlOOwHIfnOHOOs+Q4a46z5Th7jnPkOGeOc+U4d47z5P8/j54/xwVyXDDHhXIkx4VzXCTHRXNcLMfFc1wixyVzXCrHpXNcJsdlc1wux+VzXCHHETmumONKOa6c4yo5rprjajmunuMaOa6Z41o5rp3jOjmum+N6Oa6f4wY5bpjjRjlunOMmOW6a42Y5bp4z+ihfvmWOW+W4dY7b5LhtjtvluH2OO+S4Y4475bjzv3jvmuNuOe6e4x7Dh7hnjnvluHeO++S4b4775bh/jgfkeGCOB+V4cI6H5HhojofleHiOR+R4ZI5H5WiOR+d4TI7H5nhcjsfneEKOJ+Z4Uo4n53hKjqfmeFqOp+d4Ro5n5nhWjmfneE6O5+Z4Xo7n53hBjhfmeFGOF+d4SY6X5nhZjpfneEWOV+Z4VY5X53hNjtfmeF2O1+d4Q4435nhTjjfnGOQY5hjlGOeY5JjmmOWY51jkWOZY5WMNqXNscmxz7HLscxzkeEuOt+Z42xh4e4535HhnjnfleHeO9+R4b4735Xh/jg/k+GCOD+X4cI6P5Phojo/l+HiOT+T4ZI5P5fh0js/k+GyOz+X4fI4v5Phiji/l+HKOr+T4ao6v5fh6jm/k+GaOb+X4do7v5Phuju/l+H6OH+T4YY4f5fhxjp/k+GmOn+X4eY5f5Phljl/l+HWO34zS3RD8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx5GjOFXgaAUOLXD0AscocMwCxypw7ALHKXDcAscrcPwCJyhwwgInKnDiAv8pcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypwWIHDC5y5wFkKnLXA2QqcvcA5CpyzwLkKnLvAeQqct8D5Cpy/wAUKXLDAhQqkwIULXKTARQtcrMDFC1yiwCULXKrApQtcpsBlC1yuwOULXKHAEQWuWOBKBa5c4CoFrlrgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFWuDRBR5T4LEFHlfg8QWeUOCJBZ5U4MkFnlLgqQWeVuDpBZ5R4JkFnlXg2QWeU+C5BZ5X4PkFXlDghQVeVODFBV5S4KUFXlbg5QVeUeCVBV5V4NUFXlPgtQVeV+D1Bd5Q4I0F3lTgzQUGBYYFRgXGBSYFpsX/xsbmBRYFlgVWBdYFNsVE/5s77wrsCxwUeEuBtxZ4W4G3F3hHgXcWeFeBdxd4T4H3FnhfgfcX+ECBDxb4UIEPF/hIgY8W+FiBjxf4RIFPFvhUgU8X+EyBzxb4XIHPj8JyCL5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuAXBX5Z4FcFfl3gNwV+W+B3BX5f4A8F/ljgTwX+XOAvBf5a4G8F/l7gHwX+WeBfBf79L29HFjikxNFKHFri6CWOUeKYJY5V4tgljlPiuCWOV+L4JU5Q4oQlTlTixCVOUuKkJU5W4uQlTlHilCVOVeLUJU5T4rQlTlfi9CXOUOKMJc5U4rASh5c4c4mzlDhribOVOHuJc5Q4Z4lzlTh3ifOUOG+J85U4f4kLlLhgiQuVSIkLl7hIiYuWuFiJi5e4RIlLlrhUiUuXuEyJy5a4XInLl7hCiSNKXLHElUpcucRVSly1xNVKXL3ENUpcs8S1Sly7xHVKXLfE9Upcv8QNStywxI1K3LjETUrctMTNSty8xC1K3LLErUrcusRtSty2xO1K3L7EHUrcscSdSty5xF1K3LXE3UrcvcQ9StyzxL1K3LvEfUrct8T9Sty/xANKPLDEg0o8uMRDSjy0xMNKPLzEI0o8ssSjSrTEo0s8psRjSzyuxONLPKHEE0s8qcSTSzylxFNLPK3E00s8o8QzSzyrxLNLPKfEc0s8r8TzS7ygxAtLvKjEi0u8pMRLS7ysxMtLvKLEK0u8qsSrS7ymxGtLvK7E60u8ocQbS7ypxJtLDEoMS4xKjEtMSkxLzErMSyxKLEusSqxLbEpsS+xKfHl+HJR4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b40igZSnylxFdLfK3E10t8o8Q3S3yrxLdLfKfEd0t8r8T3S/ygxA9L/KjEj0v8pMRPS/ysxM9L/KLEL0v8qsSvS/ymxG9L/K7E70v8ocQfS/ypxJ9L/KXEX0v8rcTfS/yjxD9L/KvEv0v8p8SRJQ6pcLSRYw8ZdR29wjEqHLPCsSocu8JxKhy3wvEqHL/CCSqcsMKJKpy4wkkqnLTCySqcvMIpKpyywqkqnLrCaSqctsLpKpy+whkqnLHCmSocVuHwCmeucJYKZ61wtgpnr3COCuescK4K565wngrnrXC+CuevcIEKF6xwoQqpcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqXDZCpercPkKV6hwRIUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrjVKJz/TVlsW+F2FW5f4Q4V7ljhThXuXOEuFe5a4W4V7l7hHhXuWeFeFe5d4T4V7lvhfhXuX+EBFR5Y4UEVHlzhIRUeWuFhFR5e4REVHlnhURVa4dEVHlPhsRUeV+HxFZ5Q4YkVnlThyRWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVDiq8pcJbK7ytwtsrvKPCOyu8q8K7K7ynwnsrvK/C+yt8oMIHK3yowocrfKTCRyt8rMLHK3yiwicrfKrCpyt8psJnK3yuwucrfKHCFyt8qcKXK3ylwlcrfK3C1yt8o8I3K3yrwrcrfKfCdyt8r8L3q7H+r+7CRxV+XOEnFX5a4WcjR/7nVYVfVvhVhV9X+E2F31b4XYXfV/hDhT9W+FOFP1f4S4W/Vvhbhb9X+EeFf1b4V4V/V/hPhSMrHFLjaDUOrXH0Gseoccwax6px7BrHqXHcGsercfwaJ6hxwhonqnHimiGT1DhpjZPVOHmNU9Q4ZY1T1Th1jdPUOG2N09U4fY0z1DhjjTPVOKzG4TXOXOMsNc5a42w1zl7jHDXOWeNcNc5d4zw1zlvjfDXOX+MCNS5Y40I1UuPCNS5S46I1Llbj4jUuUeOSNS5V49I1LlPjsjUuV+PyNa5Q44gaV6xxpRpXrnGVGletcbUaV69xjRrXrHGtGteucZ0a161xvRrXr3GDGjescaMaN65xkxo3rXGzGjevcYsat6xxqxq3rnGbGretcbsat69xhxp3rHGnGneucZcad61xtxp3r3GPGvesca8a965xnxr3rXG/Gvev8YAaD6zxoBoPrvGQGg+t8bAaD6/xiBqPrPGoGq3x6BqPqfHY+j8x6yjdn1DjifX/r9ueUuOpNZ5W4+k1nlHjmTWeVePZNZ5TM2yU3ZxX4/k1XlDjhTVeVOPFNV5S46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NQ5qvKXGW2u8rcbba7yjxjtrvKvGu2u8p8Z7a7yvxvtrfKDGB2t8qMaHa3ykxkdrfKzGx2t8osYna3yqxqdrfKbGZ2t8rsbna3yhxhdrfKnGl2t8pcZXa3ytxtdrfKPGN2t8q8a3a3ynxndrfK/G92v8oMYPa/yoxo9r/KTGT2v8rMbPa/yixi9r/KrGr2v8psZva/yuxu9r/KHGH2v8qcafa/ylxl9r/K3G34f+q9ga/6rx7xr/qXFkjUMaHK3BoQ2O3uAYDY7Z4FgNjt3gOA2O2+B4DY7f4AQNTtjgRA1O3OAkDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNDmtweIMzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDNLhwg4s0uGiDizW4eINLNLhkg0s1uHSDyzS4bIPLNbh8gys0OKLBFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwX9Gjhy5XYPbN7hDgzs2uFODOze4S4O7Nrhbg7s3uEeDeza4V4N7N7hPg/s2uF+D+zd4QIMHNnhQgwc3eEiDhzZ4WIOHN3hEg0c2eFSDjrKDMYd4TIPHNnhcg8c3eEKDJzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3Y/zf2HZVg1c3eE2D1zZ4XYPXN3hDgzc2eNN/P23+kzeNGowbTBpMG8wazBssGiwbrBqsG2wabBvsGuwbHDR4S4O3Nnhbg7c3eEeDdzb8lwne0+C9Dd7X4P0NPtDggw0+1ODDDT7S4KMNPtbg4w0+0eCTDT7V4NMNPtPgsw0+1+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHzZgTj8Lp4wY/afDTBj9r8PMGv2jwywa/avDrBr9p8NsGv2vw+wZ/aPDHBn9q8OcGf2nw1wZ/a/D3Bv9o8M8G/2rw71E22ODIBoe0OFqLQ1scvcUxWhyzxbFaHLvFcVoct8XxWhy/xQlanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlaHNbi8BZnbnGWFmdtcbYWZ29xjhbnbHGuFuducZ4W521xvhbnb3GBFhdscaEWaXHhFhdpcdEWF2tx8RaXaHHJFpdqcekWl2lx2RaXa3H5FldocUSLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xvu/dc2GbNDihi1u1OLGLW7S4qYtbtbi5i1u0eKWLW7V4tYtbtPiti1u1+L2Le7Q4o4t7tTizi3u0uKuLe7W4u4t7tHini3u1eLeLe7T4r4t7tfi/i0e0OKBLR7U4sEtHtLioS0e1uLhLR7R4pEtHtWiLR7d4jEtHtvicS0e3+IJLZ7Y4kktntziKS2e2uJpLZ7e4hktntniWS2e3eI5LZ7b4nktnt/iBS1e2OJFLV7c4iUtXtriZS1e3uIVLV7Z4lUtXt3iNS1e2+J1LV7f4g0t3tjiTS3e3GLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12Lf4qDFW1q8tcXbWry9xTtavLPFu1q8u8V7Wry3xftavL/FB1p8sMWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+xRdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9a/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/Wvyzxb9a/LvFf1ocOcqGOxytw6Edjt7hGB2O2eFYHY49ygt3OG6H43U4focTdDhhhxN1OHGHk3Q4aYeTdTh5h1N0OGWHU3U4dYfTdDhth9N1OH2HM3Q4Y4czdTisw+EdztzhLB3O2uFsHc7e4RwdztnhXB3O3eE8Hc7b4Xwdzt/hAh0u2OFCHdLhwh0u0uGiHS7W4eIdLtHhkh0u1eHSHS7T4bIdLtfh8h2u0OGIDlfscKUOV+5wlQ5X7XC1DlfvcI0O1+xwrQ7X7nCdDtftcL0O1+9wgw437HCjDjfucJMON+1wsw4373CLDrfscKsOt+5wmw637XC7DrfvcIcOd+xwpw537nCXDnftcLcOd+9wjw737HCvDvfucJ8O9+1wvw737/CADg/s8KAOD+7wkA4P7fCwDg/v8IgOj+zwqA7t8OgOj+nw2A6P6/D4Dk/o8MQOT+rw5A5P6fDUDk/r8PQOz+jwzA7P6vDsDs/p8NwOz+vw/A4v6PDCDi/q8OIOL+nw0g4v6/DyDq/o8MoOr+rw6g6v6fDaDq/r8PoOb+jwxg5v6vDmDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsOBx3e0uGtHd7W4e0d3tHhnR3e1eHdHd7T4b0d3tfh/R0+0OGDHT7U4cMdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvHf7R4Z8d/tXh3x3+0+HIDof0OFqPQ3scvccxehyzx7F6HLvHcXoct8fxehy/xwl6nLDHiXqcuMdJepy0x8l6nLzHKXqcssepepy6x2l6nLbH6XqcvscZepyxx5l6HNbj8B5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEe6XHhHhfpcdEeF+tx8R6X6HHJHpfqcekel+lx2R6X63H5HlfocUSPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/acMArnrXvcpsdte9yux+173KHHHXvcqcede9ylx1173K3H3Xvco8c9R+BePe7d4z497tvjfj3u3+MBPR7Y40E9HtzjIT0e2uNhPR7e4xE9HtnjUT3a49E9HtPjsT0e1+PxPZ7Q44k9ntTjyT2e0uOpPZ7W4+k9ntHjmT2e1ePZPZ7T47k9ntfj+T1e0OOFPV7U48U9XtLjpT1e1uPlPV7R45U9XtXj1T1e0+O1PV7X4/U93tDjjT3e1OPNPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY9Dnq8pcdbe7ytx9t7vKPHO3u8q8e7exZkyBDv7fG+Hu/v8YEeH+zxoR4f7vGRHh/t8bEeH+/xiR6f/G951B6f6fHZHp/r8fl+6P/NcV7q8eUeX+nx1f6P9LUeX+/xjR7f7PGtHt/u8Z0e3+3xvR7f7/GDHj/s8aMeP+7xkx4/7fGzHj/v8Ysev+zxqx6/7vGbHr/t8bsev+/xhx5/7PGnHn/u8Zcef+3xtx5/7/GPHv/s8a8e/+7xnx5H9jhkgKMNcOgARx/gGAMcc4BjDXDsAY4zwHEHON4Axx/gBAOccIATDXDiAU4ywEkHONkAJx/gFAOccoBTDXDqAU4zwGkHON0Apx/gDAOccYAzDXDYAIcPcOYBzjLAWQc42wBnH+AcA5xzgHMNcO4BzjPAeQf/vz9sgQEuOMCFBsgAFx7gIgNcdICLDXDxAS4xwCUHuNQAlx7gMgNcdoDLDXD5Aa4wwBEDXHGAKw1w5QGuMsBVB7jaAFcf4BoDXHOAaw1w7QGuM8B1B7jeANcf4AYD3HCAGw1w4wFuMsBNB7jZADcf4BYD/oeod/AD43q+v5M0aWrbtt61bdu2mfJdpLZS23abtVHbbWrbSJk8r/4+7fP9A3b3zpk5e+/OnJl1uwC3D3CHAHcMcKcAdw5wlwB3DXC3AHcPcI8A9wxwrwD3DnCfAPcNcL8A9w/wgAAPDPCgAA8O8JAADw3wsAAPD/CIAIcFeGSARwV4dIDHBHhsgMcFaIDHB3hCgCcGeFKAwwM8OcBTAjw1wNMCPD3AMwI8M8CzAjw7wHMCPDfA8wI8P8ALArwwwIsCvDjAEQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrQHeFuDtAd4R4J0B3hXg3QHeE+C9Ad4X4P0BPhDggwE+FODDAT4S4MgAgwDDAKMA4wCTANMAswDzAIsAywCrAOsAmwDbALsA+wAfDfCxAB8P8IkAnwzwqQCfDvCZAJ8N8LkAnw/whQBfDPClAF8O8JUAXw3wtQBfD/CNAN8McFSAbwX4doDvBPhugO8F+H6AHwT4YYAfBfhxgJ8E+GmAnwX4eYBfBPhlgF8F+HWA3wT4bYDfBfh9gD8E+GOAPwX4c4C/BPhrgKMD/C3A3wP8I8A/A/wrwL8DHBPg2H/4FOLAEAeFOE6Ig0McEuK4IQ4NcbwQxw9xghAnDHGiECcOcZIQJw1xshAnD3GKEKcMcaoQpw5xmhCnDXG6EKcPcYYQZwxxphBnDnGWEGcNcbYQZw9xjhDnDHGuEOcOcZ4Q5w1xvhDnD3GBEBcMcaEQFw5xkRAXDXGxEAlx8RCXCHHJEJca+K9QMMRlQ1wuxOVDXCHEFUNcKcSVQ1wlxFVDXC3E1UNcI8Q1Q1wrxLVDXCfEdUNcL8T1Q9wgxA1D3CjEjUPcJMRNQ9wsxM1D3CLELUPcKsStQ9wmxG1D3C7E7UPcIcQdQ9wpxJ1D3CXEXUPcLcTdQ9wjxD1D3CvEvUPcJ8R9Q9wvxP1DPCDEA0M8KMSDQzxkxNDZh/1r5+EhHhHisBCPDPGoEI8O8ZgQjw3xuBAN8fgQTwjxxBBPCnF4iCeHeEqIp4Z4Woinh3hGiGeGeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXhzgixEtCvDTEy8b+b01XhHhliFeFeHWI14R4bYjXhXh9iDeEeGOIN4V4c4i3hHhriLeFeHuId4R4Z4h3hXh3iPeEeG+I94V4f4gPhPhgiA+F+HCIj4Q4MsQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xEdDfCzEx0N8IsQnQ3wqxKdDfCbEZ0N8LsTnQ3whxBdDfCnEl0N8JcRXQ3wtxNdDfCPEN0McFeJbIb4d4jshvhvieyG+H+IH/3LsoxA/DvGTED8N8bMQPw/xixC/DPGrEL8O8ZsQvw3xuxC/D/GHEH8M8acQfw7xlxB/DXF0iL+F+HuIf4T4Z4h/hfh3iGNCHBvigAgHRjgownEiHBzhkAjHjXBohONFOH6EE0Q4YYQTRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEOGOEM0U4c4SzRDhrhLNFOHuEc0Q4Z4RzRTh3hPNEOG+E80U4f4QLRLhghAtFuHCEi0S4aISLRUiEi0e4RIRLRrhUhEtHuEyEy0a4XITLR7hChCtGuFKEK0e4SoSrRrhahKtHuEaEa0a4VoRrR7hOhOtGuF6E60e4QYQbRrhRhBtHuEmEm0a42YDx3DzCLf47H0a4dYTbRLhthNtFuH2EO0S4Y4Q7RbhzhLtEuGuEu0W4e4R7RLhnhHtFuHeE+0S4b4T7Rbh/hAdEeGCEB0V4cISHRHhohIdFeHiER0Q4LMIjIzwqwqMjPCbCYyM8LkIjPD7CEyI88R/8B+DwCE+O8JQIT43wtAhPj/CMCM+M8KwIz47wnAjPjfC8CM+P8IIIL4zwoggvjnBEhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0Q4MsIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wkcjfCzCxyN8IsInI3wqwqcjfCbCZyN8LsLnI3whwhcjfCnClyN8JcJXI3wtwtcjfCPCNyMcFeFbEb4d4TsRvhvhexG+H+EHEX4Y4UcRfhzhJxF+GuFnEX4e4RcRfhnhVxF+Hf1fj9B3EX4f4Q8R/hjhTxH+HOEvEf4a4egIf4vw9wj/iPDPCP+K8O8Ix0Q4NsIBMQ6McVCM48Q4OMYhMY4b49AY/2tQnSDGCWOcKMaJY5wkxkljnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLEZiXDzGJWJcMsalYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw35j/ZjhvEuGGMG8W4cYybxLhpjJvFuHmMW8S4ZYxb/YPdvxdtG+N2MW4f4w4x7hjjTjHuHOMuMe4a424x7h7jHjHuGeNeMe4d4z4x7hvjfjHuH+MBMR4Y40ExHhzjITEeGuNhMR4e4xExDovxyBiPivHoGI+J8dgYj4vRGI+P8YQYT4zxpBiHx3hyjKfEeGqMp8V4eoxnxHhmjGfFeHaM58R4boznxXh+jBfEeGGMF8V4cYwjYrwkxktjvCzGy2O8IsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8a7Y7wnxntjvC/G+2N8IMYHY3woxodjfCTGkTEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MT4a42MxA/8tR/pkjE/F+HSMz8T47H/v+RhfiPHFGF+K8eUYX4nx1Rhfi/H1GN+I8c0YR8X4Voxvx/hOjO/G+F485P/PG3wY40cxfhzjJzF+GuNnMX4e4xcxfhnjVzF+HeM3MX4b43cxfh/jDzH+GONPMf4c4y8x/hrj6Bh/i/H3GP+I8c8Y/4rx7xjHxDg2xgEJDkxwUILjJDg4wSEJjpvg0ATHS3D8BCdIcMIEJ0pw4gQnSXDSBCdLcPIEp0hwygSnSnDqBKdJcNoEp0tw+gRnSHDGBGdKcOYEZ0lw1gRnS3D2BOdIcM4E50pw7gTnSXDeBOdLcP4EF0hwwQQXSnDhBBdJcNEEF0uQBBdPcIkEl0xwqQSXTnCZBJdNcLkEl09whQRXTHClBFdOcJUEV01wtQRXT3CNBNdMcK0E105wnQTXTXC9BNdPcIMEN0xwowQ3TnCTBDdNcLMEN09wiwS3THCrBLdOcJsEt01wuwS3T3CHBHdMcKdknP/n810S3DXB3RLcPfnfLPk9E9wrwb0T3CfBfRPcL8H9EzwgwQMTPCjBgxM8JMFDEzwswcMTPCLBYQkemeBRCR6d4DEJHpvgcQma4PEJnpDgiQmelODwBE9O8JQET03wtARPT/CMBM9M8KwEz07wnATPTfC8BM9P8IIEL0zwogQvTnBEgpckeGmClyV4eYJXJHhlglcleHWC1yR4bYLXJXh9gjckeGOCNyV4838bTYK3JXh7gnckeGeCdyV4d4L3JHhvgvcleH+CDyT4YIIPJfhwgo8kODLBIMEwwSjBOMEkwTTBLME8wSLBMsEqwTrBJsE2wS7BPsFHE3wswccTfCLBJxN8KsGnE3wmwWcTfC7B5xN8IcEXE3wpwZcTfCXBVxN8LcHXE3wjwTcTHJXgWwm+neA7Cb6b4HsJvp/gBwl+mOBHCX6c4CcJfprgZwl+nuAXCX6Z4FcJfp3gNwl+m+B3CX6f4A8J/pjgTwn+nOAvCf6a4OgEf0vw9wT/SPDPBP9K8O8ExyQ4NsEBKQ5McVCK46Q4OMUhKY6b4tAUx0tx/BQnSHHCFCdKceIUJ0lx0hQnS3HyFKdIccoUp0px6hSnSXHaFKdLcfoUZ0hxxhRnSnHmFGdJGfLPs2dLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS5EUF09xiRSXTHGpFJdOcZkUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPx560Q4o7prhTijunuEuKu6a4W4q7p7hHinumuFeKe6e4T4r7prhfivuneECKB6Z4UIoHp3hIioemeFiKh6d4RIrDUjwyxaNSPDrFY1I8NsXjUjTF41M8IcUTUzwpxeEpnpziKSmemuJpKZ6e4hkpnpniWSmeneI5KZ6b4nkpnp/iBSlemOJFKV6c4ogUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFK9L8foUb0jxxhRvSvHmFG9J8dYUb0vx9hTvSPHOFO9K8e4U70nx3hTvS/H+FB9I8cEUH0rx4RQfSXFkikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kj6b4WIqPp/hEik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpjgqxbdSfDvFd1J8N8X3Unw/xQ9S/DDFj1L8OMVPUvw0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXRKf6W4u8p/pHinyn+leLfKY5JcWyKAzIcmOGgDMfJcHCGQzIcN8OhGY6X4fgZTpDhhBlOlOHEGU6S4aQZTpbh5BlOkeGUGU6V4dQZTpPhtBlOl+H0Gc6Q4YwZzpThzBnOkuGsGc6W4ewZzpHhnBnOleHcGQP+O3PPl+H8GS6Q4YIZLpThwhkukuGiGS6WIYNw8QyXyHDJDJfKcOkMl8lw2QyXy3D5DFfIcMUMV8pw5QxXyXDVDFfLcPUM18hwzQzXynDtDNfJcN0M18tw/Qw3yHDDDDfKcOMMN8lw0ww3y3DzDLfIcMsMt8pw6wy3yXDbDLfLcPsMd8hwxwx3ynDnDHfJcNcMd8tw9wz3yHDPDPfKcO8M98lw3wz3y3D/DA/I8MAMD8rw4AwPyfDQDA/L8PAMj8hwWIZHZnhUhkdneEyGx2Z4XIZmeHyGJ2R4YoYnZTg8w5MzPCXDUzM8LcPTMzwjwzMzPCvDszM8J8NzMzwvw/MzvCDDCzO8KMOLMxyR4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxmOzDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8NEMH8vw8QyfyPDJDJ/K8OkMn8nw2Qyfy/D5DF/I8MUMX8rw5QxfyfDVDF/L8PUM38jwzQxHZfhWhm9n+E6G72b4XobvZ/hBhh9m+FGGH2f4SYafZvhZhp9n+EWGX2b4VYZfZ/hNht9m+F2G32f4Q4Y/ZvhThj9n+EuGv2Y4OsPfMvw9wz8y/DPDvzL8O8MxGY7NcECOA3MclOM4OQ7OcUiO4+Y4NMfxchw/xwlynDDHiXKcOMdJcpw0x8lynDzHKXKcMsepcpw6x2lynDbH6XKcPscZcpwx/99spZlznCXHWXOcLcfZc5wjxzlznCvHuXOcJ8d5c5wvx/lzXCDHBXNcKMeFc1wkx0VzXCxHclw8xyVyXDLHpXJcOsdlclw2x+VyXD7HFXJcMceVclw5x1VyXDXH1XJcPcc1clwzx7VyXDvHdXJcN8f1clw/xw1y3DDHjXLcOMdNctw0x81y3DzHLXLcMsetctw6x21y3DbH7XLcPscdctwxx51y3DnHXXLcNcfdctw9xz1y3DPHvXLcO8d9ctw3x/1y3D/HA3I8MB804KAcD87xkBwPzfGwHA/P8Ygch+V4ZI5H5Xh0jsfkeOyAwQP+8bM5Hp/jCTmemONJOQ7P8eQcT8nx1BxPy/H0HM/I8cwcz8rx7BzPyfHcHM/L8fwcL8jxwhwvyvHiHEfkeEmOl+Z4WY6X53hFjlfmeFWOV+d4TY7X5nhdjtfneEOON+Z4U44353hLjrfmeFuOt+d4R4535nhXjnfneE+O9+Z4X4735/hAjg/m+FCOD+f4SI4jcwxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuxzfDTHx3J8PMcncnwyx6dyfDrHZ3J8Nsfncnw+xxdyfDHHl3J8OcdXcnw1x9dyfD3HN3J8M8dROb6V49s5vpPjuzm+l+P7OX6Q44c5fpTjxzl+kuOnOX6W4+c5fpHjlzl+lePXOX6T47c5fpfj9zn+kOOPOf6U4885/pLjrzmOzvG3HH/P8Y8c/8zxrxz/znFMjmNzHFDgwAIHFThOgYMLHFLguAUOLXC8AscvcIICJyxwogInLnCSAictcLICJy9wigKnLHCqAqcucJoCpy1wugKnL3CGAmcscKYCZy5wlgJnLXC2AmcvcI4C5yxwrgLnLnCeAuctcL4C5y9wgQIXLHChAhcucJECFy1wsQIpcPEClyhwyQKXKnDpApcpcNkClytw+QJXKHDFAlcqcOUCVylw1QJXK3D14v906msVuHaB6xS4boHrFbh+gRsUuGGBGxW4cYGbFLhpgZsVuHmBWxS4ZYFbFbh1gdsUuG2B2xW4fYE7FLhjgTsVuHOBuxS4a4G7Fbh7gXsUuGeBexW4d4H7FLhvgfsVjB47dqwHFHhggQcVeHCBhxR4aIGHFXh4gUcUOKzAIws8qsCjCzymwGMLPK5ACzy+wBMKPLHAkwocXuDJBZ5S4KkFnlbg6QWeUeCZBZ5V4NkFnlPguQWeV+D5BV5Q4IUFXlTgxQWOKPCSAi8t8LICLy/wigKvLPCqAq8u8JoCry3wugKvL/CGAm8s8KYCby7wlgJvLfC2Am8v8I4C7yzwrgLvLvCeAu8t8L4C7y/wgQIfLPChAh8u8JECRxYYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hogY8V+HiBTxT4ZIFPFfh0gc8U+GyBzxX4fIEvFPhigS8V+HKBrxT4aoGvFfh6gW8U+GaBowp8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8LHF3gbwX+XuAfBf5Z4F8F/l3gmALHFjigxIElDipxnBIHlzikxHFLHFrieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlUuLiJS5R4pIlLlXi0iUuU+KyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKwEo8s8agSjy7xmBKPLfG4Ei3x+BJPKPHEEk8qcXiJJ5d4SomnlnhaiaeXeEaJZ5Z4Volnl3hOieeWeF6J55d4QYkXlnhRiReXOKLES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHShxZYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/ioyU+VuLjJT5R4pMlPlUOGPzf/vBsic+V+HyJL5T4Yokvlfhyia+U+GqJr5X4eolvlPhmiaNKfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfSxxd4m8l/l7iHyX+WeJfJf5d4pgSx5Y4oMKBFQ6qcJwKB1c4pMJxKxxa4XgVjl/hBBVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFVLh4hUuUeGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhsAqPrPCoCo+u8JgKj63wuAqt8PgKT6jwxApPqnB4hSdXeEqFp1Z4WoWnV3hGhWdWeFaFZ1d4ToXnVnhehedXeEGFF1Z4UYUXVziiwksqvLTCyyq8vMIrKryywqsqvLrCayr+K4t6fYU3VHhjhTdVeHOFt1R4a4W3VXh7hXdUeGeFd1V4d4X3VHhvhfdVeH+FD1T4YIUPVfhwhY9UOLLCoMKwwqjCuMKkwrTCrMK8wqLCssKqwrrCpsK2wq7CvsJHK3yswscrfKLCJyt8qsKnK3ymwmcrfK7C5yt8ocIXK3ypwpcrfKXCVyt8rcLXK3yjwjcrHFXhWxW+/Q/fhg8Y8G6F71X4foUfVPhhhR9V+HGFn1T4aYWfVfh5hV9U+GWFX1X4dYXfVPhthd9V+H2FP1T4Y4U/Vfhzhb9U+GuFoyv8rcLfK/yjwj8r/KvCvyscU+HYCgfUOLDGQTWOU+PgGofUOG6NQ2scr8bxa5ygxglrnKjGiWucpMZJa5ysxslrnKLGKWucqsapa5ymxmlrnK7G6WucocYZa5ypxplrnKXGWWucrcbZa5yjxjlrnKvGuWucp8Z5a5yvxvlrXKDGBWtcqMaFa1ykxkVrXKxGaly8xiVqXLLGpWpcusZlaly2xuVqXL7GFWpcscaValy5xlVqXLXG1WpcvcY1alyzxrVqXLvGdWpct8b1aly/xg1q3PAfPAbgxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVA8dcHCNh9R4aI2H1Xh4jUfUOKzGI2s8qsajazymxmNrPK5Gazy+xhNqPLHGk2ocXuPJNZ5S46k1nlbj6TWeUeOZNZ5V49k1nlPjuTWeV+P5NV5Q44U1XlTjxTWOqPGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaR9YY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY1/hojY/V+HiNT9T4ZI1P1fh0jc/U+GyNz9X4fI0v1PhijS/V+HKNr9T4ao2v1fh6jW/U+GaNo2p8q8a3a3ynxndrfK/G92v8oMYPa/yoxo9r/KTGT2v8rMbPa/yixi9r/KrGr2v8psZva/yuxu9r/KHGH2v8qcafa/ylxl9rHF3jbzX+XuMfNf5Z4181/l3jmBrH1jigwYENDmpwnAYHNzikwXEbHNrgeA2O3+AEDU7Y4EQNTtzgJA1O2uBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg0u3OAiDS7a4GIN0uDiDS7R4JINLtXg0g0u0+CyDS7X4PINrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCwBo9s8KgGj27wmAaPbfC4Bv3X3hMaPLHBkxoc3uDJDZ7S4KkNntbg6Q2e0eCZDZ7V4NkNntPguQ2e1+D5DV7Q4IUNXtTgxQ2OaPCSBi9t8LIGL2/wigavbPCqBq9u8JoGr23wugavb/CGBm9s8KYGb27wlgZvbfC2Bm9v8I4G72zwrgbvbvCeBu9t8L4G72/wgQYfbPChBh9u8JEGRzYYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN/hog481+HiDTzT4ZINPNfh0g880+GyDzzX4fIMvNPhigy81+HKDrzT4aoOvNfh6g280+GaDoxp8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPm1F+0eCXDX7V4NcNftPgtw1+1+D3Df7Q4I8N/tTgzw3+0uCvDY5u8LcGf2/wjwb/bPCvBv9ucEyDYxsc0OLAFge1OE6Lg1sc0uK4LQ5tcbwWx29xghYnbHGiFiducZIWJ21xshYnb8f7f99FU7Y4VYtTtzhNi9O2OF2L07c4Q4sztjhTizO3OEuLs7Y4W4uztzhHi3O2OFeLc7c4T4vztjhfi/O3uECLC7a4UIsLt7hIi4u2uFiLtLh4i0u0uGSLS7W4dIvLtLhsi8u1uHyLK7S4Yosrtbhyi6u0uGqLq7W4eotrtLhmi2u1uHaL67S4bovrtbh+ixu0uGGLG7W4cYubtLhpi5u1uHmLW7S4ZYtbtbh1i9u0uG2L27W4fYs7tLhjizu1uHOLu7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtDisxSNbPKrFo1s8psVjWzyuRVs8vsUTWjyxxZNaHN7iyS2e0uKpLZ7W4uktntHimS2e1eLZLZ7T4rktntfi+S1e0OKFLXOmLV7c4ogWL2nx0hYva/HyFq9o8coWr2rx6havafHaFq9r8foWb2jxxhZvavHmFm9p8dYWb2vx9hbvaPHOFu9q8e4W72nx3hbva/H+Fh9o8cEWH2rx4RYfaXFki0GL4bgYtRi3mLT4zzqzFvMWixbLFqsW6xabFtsWuxb7Fh9t8bEWH2/xiRafbPGpFp9u8ZkWn23xuRafb/GFFl9s8aUWX27xlRZfbfG1Fl9v8Y0W32xxVItvtfh2i++0+G6L77X4fosftPhhix+1+HGLn7T4aYuftfh5i1+0+GWLX7X4dYvftPhti9+1+H2LP7T4Y4s/tfhzi7/8E18DBgwY3eJvLf7e4h8t/tniXy3+3eKYFse2OKDDgR0O6nCcDgd3OKTDcTsc2uF4Y8f+73dbHU7Y4UQdTtzhJB1O2uFkHU7e4RQdTtnhVB1O3eE0HU7b4XQdTt/hDB3O2OFMHc7c4SwdztrhbB3O3uEcHc7Z4Vwdzt3hPB3O2+F8Hc7f4QIdLtjhQh0u3OEiHS7a4WId0uHiHS7R4ZIdLtXh0h0u0+GyHS7X4fIdrtDhih2u1OHKHa7S4aodrtbh6h2u0eGaHa7V4dodrtPhuh2u1+H6HW7Q4YYdbtThxh1u0uGmHW7W4eYdbtHhlh1u1eHWHW7T4bYdbtfh9h3u0DFmxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+r+T5d9aIeHdXh4h0d0OKzDIzs8qsOjOzymw2M7PK5DOzy+wxM6PLHDkzoc3uHJHZ7S4akdntbh6R2e0eGZHZ7V4dkdntPhuR2e1+H5HV7Q4YUdXtThxR2O6PCSjln/iZPLOry8wys6vLLDqzq8usNrOry2w+s6vL7DGzq8scObOrz533i7tcPbOry9wzs6vLPDuzq8u8N7Ory3w/s6vL/DBzp8sMOHOny4w0c6HNlh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+GjHT7W4eMdPtHhkx0+1eHT//DkX9yf6/D5Dl/o8MUOX+rw5Q5f6fDVDl/r8PUO3+jwzQ5HdfhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYefdvhZh593+EWHX3b4VYdfd/hNh992+F2H33f4Q4c/dvhThz93+EuHv3Y4usPfOvy9wz86/LPDvzr8u8MxHY7tcECPA3sc1OM4PQ7ucUiP4/Y4tMfxehy/xwl6nLDHiXqcuMdJepy0x8l6nLzHKXqcssepepy6/1+edNoep+tx+h5n6HHGHmfqceYeZ+lx1h5n63H2Hufocc4e5+px7h7n6XHeHufrcf4eF+hxwR4X6nHhHhfpcdEeF+uRHhfvcYkel+xxqR6X7nGZHpftcbkel+9xhX9s+9d/K/e4So+r9rhaj6v3uEaPa/a4Vo9r97hOj+v2uF6P6/e4QY8b9vx3CzfpcdMeN+tx8x636HHLHrfqceset+lx2x6363H7Hnfoccced+px5x536XHXHnfrcfce9+hxzx736nHvHvfpcd8e9+tx/x4P6PHAHg/q8eAeD+nx0B4P6/HwHo/ocViPR/Z4VI9H93hMj8f2eFyP9nh8jyf0eGKPJ/U4vMeTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3sc0eMlPV7a42U9Xt7jFT1e2eNVPV7d4zU9XtvjdT1e3+MNPd7Y40093tzjLT3e2uNtPd7e4x093tnjXT3e3eM9Pd7b43093t/jAz0+2ONDPT7c4yM9juzx/wsAAP//9CeoTA==") mount$pvfs2(0x0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x1000000, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r9 = socket(0x23, 0x5, 0x2) write(r9, 0x0, 0x0) connect$l2tp(r9, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) syz_clone(0x1104000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 2m18.875232486s ago: executing program 4 (id=384): socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000020"], 0x48) 2m16.425519927s ago: executing program 4 (id=388): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$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") connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x84406d, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES64], 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x55e1, &(0x7f0000007480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000200)={0x10000, 0x1008b}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="e0010000000000000000a4500dc821fe9fb1cddc25b91cc54bda1f707dd31b2f377250079f73485faf077768f147886eb9ebf4027a61b460bd3f521e9a35ecd1aba56410417a5ad6237ea54f549f9f0a54bf7b068d421fc2d5e5f76a91674d0a3fffe70b6a89bf27dbb9676e5e1f1eb43f0d8a056304b0790d76cbd9d7e6d94a32bfbb33dc1a33794c7774a8e010060c509d4dd76368e4621e46b29d3014fb6b5dc6da627b830dfd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = getpid() syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c5f4d736bb767b568fc581ff8e99c27d82508d89e9ae2f3cfade00568ea9dc4554dfcba7939192db87f04e87274894451d39177e8f5f802da73188537ecb3fa8562c91db4555823cd9400b329888f25675b5d0456289c4abacc0064180e88dd59b7cf11156ef401d4e93e9bd3ed64cceacca7306494e8540453c8526c364bac4eae8c1f4742eba009e756f10178a7a375ac6688a5e68bd75e66bac279dd8b99aa27ed4faeb98440ee5ba749c6ba78992c5d277481c5450f8b79f237365c3b530d547e07f1e8b12c9e07478ff45f0b4fba5769a21678282764df0d930379693effbdded7970e353cfd51d8e2efb7bca9f3a45d40774918e36197090e9d9f0196e245bf21505c539f6d875e2dc684a5f6b854ee4b4f71a842b85fd41d73fa5f2ade88d99fb08c1614b4d9d41a149a6c2751879feef6a4ccc75bdba9be2acdcd600d1f6a65a15ca28f74d7f8d", @ANYRESDEC, @ANYRES16=r5, @ANYRESOCT=0x0, @ANYRES8=r0, @ANYRES16=r4], 0x1, 0x1a2, &(0x7f0000000900)="$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") sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 2m15.151865544s ago: executing program 35 (id=388): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$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") connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x84406d, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES64], 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x55e1, &(0x7f0000007480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000200)={0x10000, 0x1008b}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="e0010000000000000000a4500dc821fe9fb1cddc25b91cc54bda1f707dd31b2f377250079f73485faf077768f147886eb9ebf4027a61b460bd3f521e9a35ecd1aba56410417a5ad6237ea54f549f9f0a54bf7b068d421fc2d5e5f76a91674d0a3fffe70b6a89bf27dbb9676e5e1f1eb43f0d8a056304b0790d76cbd9d7e6d94a32bfbb33dc1a33794c7774a8e010060c509d4dd76368e4621e46b29d3014fb6b5dc6da627b830dfd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = getpid() syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c5f4d736bb767b568fc581ff8e99c27d82508d89e9ae2f3cfade00568ea9dc4554dfcba7939192db87f04e87274894451d39177e8f5f802da73188537ecb3fa8562c91db4555823cd9400b329888f25675b5d0456289c4abacc0064180e88dd59b7cf11156ef401d4e93e9bd3ed64cceacca7306494e8540453c8526c364bac4eae8c1f4742eba009e756f10178a7a375ac6688a5e68bd75e66bac279dd8b99aa27ed4faeb98440ee5ba749c6ba78992c5d277481c5450f8b79f237365c3b530d547e07f1e8b12c9e07478ff45f0b4fba5769a21678282764df0d930379693effbdded7970e353cfd51d8e2efb7bca9f3a45d40774918e36197090e9d9f0196e245bf21505c539f6d875e2dc684a5f6b854ee4b4f71a842b85fd41d73fa5f2ade88d99fb08c1614b4d9d41a149a6c2751879feef6a4ccc75bdba9be2acdcd600d1f6a65a15ca28f74d7f8d", @ANYRESDEC, @ANYRES16=r5, @ANYRESOCT=0x0, @ANYRES8=r0, @ANYRES16=r4], 0x1, 0x1a2, &(0x7f0000000900)="$eJzs0c9qE1EUx/Hvuffmn9DKqLiIYAMWx5Rq/lRdCEJw1UIG3AoGHdLYFBM1jgtbVLqRgrT2GVzVpbpwJaIvUFwILjQidCfNorgQFxKZO4Mv0fthZg6/w8ycw0w3GkQ54O/+ozYNLM0knxAMMCVJT6mkvk3zT1uzbCWRK2k/bw94meZitLJ6O+z1OvdLl0p4T7aTtm0Av0p4P/h/T/Sa44qR0EC+7Ot2KDcDxg36ajHAazKziW4xKD+naCY4dgPN2N9gQTEQvwmHKw/69yrRyurZ5X641Fnq3KnX5y5Wz1erF+qVW8u9TtUDnoky6dq5gEL5MZkWT3fMIWYFKXfVUMvMiGyLrR195tTsCFXeY4zwwR+R+2a6JQWnyV/Hg3mOCi/QAdNNCgqDHTSPXFVvpGY+m98ZRX5N63Ptu73F9WtK/8luN2QvL7VdMn6NcGHz8pwHRY7wkfUh00O73NDsfmdK3sVTNtLvadbi66s0neBk/BMehnGYBMQPqMenBxP2dcru5cH79BlbCvA1zY7jOI7jOI7jOM5B8C8AAP//66pdEw==") sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 7.350137146s ago: executing program 7 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 6.854922746s ago: executing program 7 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.904510706s ago: executing program 0 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (fail_nth: 1) 5.849910227s ago: executing program 6 (id=716): mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x20031, 0xffffffffffffffff, 0xb9dde000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 5.616376802s ago: executing program 7 (id=718): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001a40)={0x26c, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x23c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}]}, {0x194, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8ef4dafcecc006fe90a196bb0a6638b74d4c10b52852d89317407416228a529b"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xcbf}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0bf7dc61ac1bf167018e62ce8c11520009b914d7c0548edeb6849626f1b58faa"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4b500000, @mcast2, 0x2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000100)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f8b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r4, 0x0, 0x0) unshare(0x22020600) r6 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0xb, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2a) pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0x5) r9 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) rt_sigqueueinfo(r9, 0x21, &(0x7f00000003c0)={0x20, 0x0, 0x80}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x100}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000880)="1d6249c0ca304985abf3f3cd207817ebbd2b69976b56a568c59fa147bd8d01de0e8cd9b84f0cc3d2b837059b6ae254c798a30a1577364404b7fa50e092cf3e9e55f994f6da932c67c0d01faa45cec7129eb31c3998e2ad93d2013aefc3f18e7bc63407e39d68abab93febd99c807445e9e11bee167b0536bcf52cda720788d7d12348b90b5dea4259d09a12a553f82f0c845f6b6191abedb4a0e48ca6fb2fdf136d32858d3042a54cb2979f323664d648eb0e3dab0a159b8e9d8f7770cc2a6224db9086203214b39e6246f8a2a248d76bc90fe063f7265e3b1e6bca4a67760daf3c30036c19f8defc3192b513e9f8df55a5df141168357a946974aa1efa0aa24b9a0359b90cd28e36cc6bec7fbd1ab7bc2d7785f9372e9761d33fe2e9eddf4bd0f0a90869aa88b359cc1c118cdf682867beec35b78a579d3fabd2564a3f4a11f3063e19131eb2d78c4bdb595a9a25f2c772bc0d9d49e46e374ec89cd20d9bb2027fa04711880d2f904b6972899b07f5f621439d81a8406efc93331494b034f1cf022f35186e9bf5752607a6a188dfa5546804b5dafc17aa21eaffd87ea880194938ada18d5ea2213f2a8b39cac5c8456fc2db08904eff69156598b488035b84d6d47c5bb9b0430376e6e6e1d68c15151009a184c8ad1b9bd0771feb035797a838c49a2920b41ed3d11e423d12abbff978713dc927f8173b170935c0ac8d7146657ce34ae2f25adb47498a82fdb038ace88caf8b6ab563de3ce71d547a8aa6361046ef638ec13b768a65cc75a582102c154b2dea81ddde96468a7329ca6a4fc401fa0e21ff0b4523c8fcdb8f2688a079612071133bb01d03436a114d90284547c8ec1ec8b0a1d23f1d667baa94637c4794b90926fc8bde89798a6fd54b59b8e8eec3bcd88e4de56be26cfce9b2ba0cbe8c0fa386b88cbed7651a2410c3a562b4f4fdb7726f0dc293a733d594356b29ba047b0c473fa837df4142c97768d3ad84a8b04104ef2af9b899013f2544fc593575f2c282c6cee70ff8a3c158e96f63f64858c2bce2a2ff757c7a99c54f0b86943c98200bbadc91c374c5aae928328ad356baf6baf97aad53edaea878071153ba2163ba9e55088dd978c6b0fb4f18226d787902dfbd8f68f23083efbff6c362020f1027436aa51f6684e63016ed2b9fbf58454e9a047abcdac7e94f8703b3499579d11e1f9a3475d99d4d96fa89313afc03647a2a101e4e43dfbf56810abad001754072180fef3944125d59558863af4d384dc162c1753f2845959becb4b37220a7daf96462e5eb2517c4b33718fccbffb4ba18b6956b544b2330738eaaf9983a37b10b44cc537bf9d27fc0b791c11d2c29b4b21ddf3cd7c82aaac5431270d9a3a5fc4dd2bd2f89f64bcc15c3e589fe1847a537eaf162b45c26004a72d1b914c86e5d1e9da8fa4d21506c53086ddf24cfdcea39bd6a5cfdc0fe0fff65aef077ea9621b39709f8d3c2c97663208b52a62a9eadcf744e980c04c05fb89787643d32672a0ddb7cd92b4979407ef3179e6baad6a93957f78978f084c71342c2ad150830961e76821ba5c3d40da9fc0484f9af125d2c0101f50fbd2327c094aac1de1378b2ffe4ef83ec8b3aed13c11ba0f0e04854b3f0d93b55c3a9eec2fee7a88fc49866284340a00b85b2c8bf6656f487741aa60cf87fb819b411e343d9bfc9763d2035dd5476b27ea7b5347e13b6e04161165679bbe6ae8289604e1a552b1e08b1d532dbbea9adc641528a8010accb59c87762d4dc20929b7c5348b5c88de2387a17eb2be067b03a19765a111e18447e09b625df8dab6b8df455260088738789394ae9217955923c4f13b78758395c75209ae73692b203a16cc408abb82cd4981c2d613096333597f4b881a891f6fb5a859b29d6e07e7c4ea7b40305bdfe9e32a83306b4f424995cfdb62fb04b754d707bb3275117e13f7f93728c85a10d683f2b12dcfb71099fde8883e4231fbcdd2f569c8b82bd7448761d0f1aad1a948da2f0006f981e95f891eaa9ea05b02a7767e819e6f03cbdfd7ad36f025fc3199099f15538c5972ce581a6f1b8ddcd0afab589a1aa5ffd62c5065e570bc578ce96f1b6b1986e799b2fe2a4d6b9a3a2c8da6b40ffa6a59d33d8d61be6fe7734c41efc019360c737b20bc7b331167fcec559e1fd3430a1c14bcc0b6d49e9e8cc17b07eb5cac16a9bd11765606415eda24980a3b2ee0d06f0a62d6a56f9e90aa9c913002b1ce8c9e3c24bf9fd38d9cc81322afcdfb1554c31f8e791ce0502f48a5b0bb3c8e2b9c78feacb9d9f14071b739d236e1f827cb41f41226a4b0da5956f3bfd38169d66ce5b00b4f23919e5bd10f3a392ddd8d2413a0915a49ed83c7bba73ea1f96709a570f869f91ff6d7e0dc4a9002889a949c79fa81ee926b1cd2cc85d3f7fa88e285d824863c15ed108fe6448134fbc4e7139d79c3ca2b4dec24d888ee90e3e3ca18f3f714f40314b7adce129bf873a0b658937b4f0e39c83a9b88b5b589ef3a727f9e64d3f5e98d49654ce394b9316a7906936efcbbfd99684e03f984b87122301852873ca73b091c7fd9fbc5921950c447d514a6390c5ae8e7b08b0524288f5b9bba0ae7c7ebcd179f9a77522db778de1b4ea866dc85d35eea25a737a9514caed35b3e232f1081816111ccec91569eeb23762eb78cfe2c5149f8f0b265cb8f8a3e609b17d717df2850ddecbb11dd30dd409806ea221c641b59dd9f59bcfb03f0968846fa11a5d2080de62a5de7faac0578ad57bc54745f2733c0c62eba86b805e3dfc38f50caf567218a215ddab22cfdf304eb1c80733db66b9fbcc773e528949f233676ab53698f1e20a65be3faab9bf5f0387e75c5f5be885616edcbf87a9a3841f3046eb9d768969d2f2c340b8eaa754a7e3b812bd9b24596e6ed33ce84f7d37862c7172a1827451fb2a4dc538bc82fef7ed8a18dabc6740cc36ae1fe32d6ace18812d08777f523143e31b93323f9b56ef79848855ab48becdc661246ee8552976e64e110963a5bd77a46577d9556cbe718fed904af1f0d238dd4d7ee02b595e187a40d93408a2b6d91fbed94ab5ffa49c371bd46b570d2ed6e1dbdc3abbc7c7dbcc589f5aa01e46d004e26b71057b3b516bf16f1f50250b397e59a7526487d765a119545b5d0de6c93fd0fb2ad8347d8f2e93300a54ebe1449f4de448999e2a3103b40111198877adaf5f450734ca740b591bf99d7304ac65f47544b04510ced59319d6c9cd69bd2e61975658d171432c3e197d9d6a9351b702726bced14839ad1ba506e3b69988a181ae8f8b697944c3c2df364173d00ce0d4387bf1da4bc270373dcb544599586a8bbdd82b48a692731974b99c2127ed8c9c821f4a5a2971942ec81d6cfc0016f8095977dc0f418c19329627b78e53e545b33b77aaeaea95323bf39e3212ef908e820ed28b24a8ba987c1b1687b273bb773b5237cef471a04318b5c8a5d550a493f9bd535a1c70a25e4994b5c5495268ba5a9a07266e3b3f1d846d0987357141d9f293b386049beac2de610c197fec8cf1ef9c89e3dece4e2f0c9001329f52baad05bd20f22ca31e88e3257a42d6a7626d496f0f84109d4ee3ac63692a1e4177423464200507cfe63a9aea6fd93d0966101a19f2d6b71f6d7c214ac8c41f73456794bd952b9e1186eb6512e8e24a70955528c00108c56bbcbc2e8805cf4355da629f13d335b1394f5a57938d174ccb0ab7373b4581ceccc5c2c9f50230158afae04fdd3b09f1aed1655c3185b891557e75cb4641b74936d7b89ab547ba3bd04f1f837874342de9d272bc44ce5a9963bbc73ca1e1ffe5e2c13bc5849285d9f3c7ae92de84776a5b6119d7911b73fe941e6b051e2c3baf45e798ac5a9e197af6ca1d2fc2735c931cbcbf0b24a7fb7807aa2f177173eedf62a46513a79504cc36c5aca0c8d73fe3736a854ad0fb683fce299c78d1e7ecb9e47eeae172801a511d87674fb4e014ff4bfebae51b72c95f297af59bdbb6849cef358753ff35ccd713d2a5e10534db0b349e8c0f51451daff0c7d4b589062ec9c8529aaf6633f26ac22e34a47dd735d3496705c8281578d3efbbcee7d3c41846700ee2643e5d5a70f9f97c5e9d9416f311f8f3ec37926cc367420d52abac1c422b5bed1a53254c5229f6f0245ad1bb309e0aaa87c0f6bb8a38c123480f7a5e7ff05a19a077a903f3e1ce377514cd3aa68865daa07f10b3bdb7805420a228ee90dbff8fe1f50e0784059c27c47cfa2b8d3b6f2a3ec4121c6d603c8d48976d5e37384ef8a2a956caeb18963c2df9fc98879a0b20802a3f578887ae00fee897dba183c6733b1386d0b8e4622359cc3c045d6c32c87fa737c96cb9c7d20156db4e503e698317fe92a83a90f37d895f61cb2087a213e85008b5b96415b2327af903a959639b2c1093e4706a9dcd91d67b22d1d85135b019a90aa9dd2f67a3b3f1e7d3223d1379314233ca5b31f03307e8cbe82cbaa9ccd4178a53e71a038651645b26608e1a3eb4fba1d018ded6cae7d73a2dd916b10ff3357fbce77f1fb02563a716ed5a29229d903a1164ab50372b352b87cf4ab1ad3d9ee5cf0ea90562ca969c077c5b2fdfb2af364eb897c0315bbc1a9d62414bc167bd9f5cf28b676e0634336264f3f9df867e4dfcbc7fbff5ccdb9b3809ab0b4d7103f02e96efc2de1ff9e28b58c5c0b512b0094b402640df835ff22702ad9e1446877574d74f67317607db4a34f4df230db0b2b036c6f79474a37e6b0ced74b7cfea1abfe4b01aff0d3e413dd4ecb5cb8d64d4ec8f00b68b09aadc8703deae7c2788c3a2aa07169f79b3351740b342a840340a1831347f1c83c8f123c1ed222eebfa915d4540dddbf99c75ab1db40e9902a0eeae268d0b08cb2c7f8fc4fc9d7b83c2ab9297ed845fc116a0f27063b62733f5a031db1c239d875b36f07df3124148166429cd338333fb338bab86a1bef00a881fdfc87b079306d199adf0603757621f72ad80c5fa7bed680e45e95f5baef6a40fb953e2afb24fb164d16d0f8bbac6320886cddfc7cf701b4b8b92135b72e67507e1fcce54d7ab4a906af123763fc5d67dc0cba446f2f861e0de26928f93125e0b8b00ff03d42ba19516b96f33a3352a2e12fcb41f8f01d2eaa6ba05901e0e8ac5235610ee14fb95c5db38f56ceffae4ed5c9a8fff9f12d55c604d8719b1f2f841b804cd50e2cb7e10914a0932e9e009a0b3e00345c5f7d2292f9d54f510b194253250c2da2d3dc4bcfd5d319c5ea1b85a52b3e8bf75f1ced5c8e35018ae0f78430630557f6adaf3e87943b623cfc04eaf7d6132cfe78f6f3e692d816c43937be0bf5bbd668b2cc72ba856206e830794dbf6f9cc01590752080a2c1aaefc5313ff8b7c5780d2531795d75c9a5f5ee47660e73873a2d515e6c8522b8622195b00537d221e16e3049b930ac643c08911cc44068af2311f7e37420cb6110328ef0c1526689be5a2af12ff431f7263f740b1ab0e06685d1a186f03fa0aa33eba118326ea82acb9dc5a9d1ae451b5430121fea96c0328fefe0ede212ea0f9ba7f9004303d82db6f82ef150c6f1deb9b5049687d18f77c0ed6faa6c84596292c309aa2c9d78ad7a7ba79763d260d020cc4facc5409e27bc1d76b8ef281ea12fd29b376a4d9537a63c910de55d9a781dc3036d32aed0d46f4f92e000b393c866e7403da56d0b1d04f43b07092f0464fa0584e34c9260039895017a272395c54c97123f6430283f4d4cc8576e1ccf6c98632cefea69778f0b751f8f41a164b02b1935494b83c035c012a205cd74", 0x1000}, {&(0x7f0000000300)="76a2fbf2a10a0a5521226804729bc8533db0121ac1c71929547f117e5427cfd78654861a995fc5317c30aad58d8927b216aab406b0ef0b61aacdb7d3060f9866e04fc2a09e4ca5a7c29e7a628ad07bd38398629d0962a68009a389f492252273980560dd50bd1c9ce57e4dfe322f1ad7ebdae54e37e080b403a788fbd71a4c9cc616ac8b5b68baa66a99d541ce72bad201b4fcfefaa2ac080cd7d315a3b8746f2e80ea0d33f695309869e7d4e9360b143cf38788b3fba6e39c0773ea145426f704e7da48e46d3f7a64715d99020554b6061ec637719f8da56c724d49fd", 0xdd}, {&(0x7f0000000480)="36b298e4906eb436ad69b5b4fc52d0f7795ab01f4e6fcf86b9245e17d6dcc7ed281d1f412197ec33380996ec604c7b1817ad6107e85ce17307ed942289d5a2b083b7fed1895d872eb9c99f912015d2be9cb7947ed15fd7d357aeaa084a572f1ca15d10c37a372938b308393df5bf72bafb9054f972bf2d13d70c58ab0fee0d84649f5da206b986b877ed18", 0x8b}, {&(0x7f0000001880)="35550288c6b344d97c77c7d7ad42302956594bf6f5952f9d6652558997c79c824e373ede481a348634586c146a8487e9c7ebe4209f92bf2c319ce8fabae600b2531c692fc3ede661ac8d5f89b9adc5c8efc018d37a58182abb93524674f74376e7ea00af1477c191e7bb21fbd52ffad2262105b2e307d6995bab1c246175689e2681276e1ce67ac715f0c8bb4e134e756f94fae68d5ff022de1e18992411aa9f42ae2d65c38c4c3e9ce16e4013c6f0c547809dfbfaf467ebf577758115b8b84f2139c3c31b2efac8aad4f71138bb608dae36ea8ba2fdf6616b4cf3e6ef4b6cfb834951eaa89484b0f73cdbb8d6aea2499de95c", 0xf3}], 0x4, &(0x7f0000001980)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2faa}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfe2}}, @hoplimit={{0x14}}], 0x48}, 0x40000) connect$packet(r7, &(0x7f0000001a00)={0x11, 0x10, r1, 0x1, 0x7, 0x6, @random="bd4a8347bea9"}, 0x14) 5.604468652s ago: executing program 6 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 5.22180036s ago: executing program 0 (id=720): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x869, 0xee2c, {}, {0xee00}, 0xfffffffffffffffe, 0x7}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000580)={[{@errors_remount}, {@block_validity}, {@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x7ab4}}, {@jqfmt_vfsv0}], [{@fowner_gt={'fowner>', r0}}, {@obj_role={'obj_role', 0x3d, ':'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, '\x00\x00\x00\x00\x00\xc0\xa2\x13\xf1\x17\xb9z\x93\xa6\xe9n\xd1\n`y\xae\x9a\xf5xM\x8e\xde\xc6\xb3[\xa9L.J\x01b`\xdb\xca\xc6\xee\x9b\x05\x14,\xb2\x86\x99\xd1\xa9\xa6;V\x1d_\xeb\xe5\\;P!\xe6$:\x02\xce\xfa<\x96\xcb\x97\xe2\xe3oY\x8c\xe7\xfej\xa0\x18K\vW\xa9\xd3\xd2\x1f\xd8\xf0\xc1\x96\xd26#\xf4f\xce\x96A8>I\xdcI\x17:\xc2\x7f+;\x1f\xff\x7fc\xf7\x9dT\xaa\x1e\x92\x85\fce\x0f5\xd2\x92\xb3n&\xa8l\x04\vG\xafO]=\xab\xd7m1\x8c\xc7\x9e\xb8\x16\xe5@\xa7B$j\x01cd\xf2Q\v\xf1\x93\xe0\xac\xdb\xc1\xf8\x03$\xb9\x12\xb4\xb0\xcc\x01u\'\xcf\xd4\x02\':SL2\xff\xd0\'\x9681\x18`\x90\xe7-\x9c\xf0\xa8\xeb\x9aq\x1a\xbd\x85\xbd\xf2\x03\x00\x00\x00\x00\x00\x00\x00\xd0\xf2L\xd7\x86\xbb\xcdHs\x02PdE\xba\x88\xda\xa5\xfb,G\x89M\xacT\xdd\x93v.\xa8\xdc\x80{/\np\x8f\x82\x9c\x0f\x12\x95s\xf0\x8c\xd5\xb3n\xd04?\x80\xedrW\xa1\xfb\x9e\xeb\xe2m\xd4\xf9\x8f\xc2d<\xd2;\xfb\xa8\x940MZ\x10\x15\xbcHkG\x93`2<\xc7\x13\xe0\x16\xbdt\x83\x80-\xda\xe0\xa0\x8cBd\x88\xffl=X\x81\x92\xd1\xe14GKMZ\xb1[\x9b\x1e\x1f'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'errors=remount-ro'}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x94\x87\x1d\xe8_itable'}}, {@obj_role={'obj_role', 0x3d, 'Zs`u\x81\x15m\xe7\x9e\x18\xe4jQV\xdd\xec\x1b\xe7\xa1\xd3\xc0N\x85z\xc2Q\xe9\"\xf4~\xf0\xd6\x0e\xb2\xc8\x83\x04\x1c\x01#!\\H\x7f\xbe%\x98\x9d#\xbdJK{\x1f\xe2\xea\xbd\x89^7\xec\xad\x16\xdbO\x83Z\xcc\xdb*y}\x7f:\x93\xe7\xc41\x8e`\xdf\xe4\xf8\x85/F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\xf4\xcfK^9!;\x97\x87c4b\xcb\"\xf8\xb1\xbfQ\xae\x1a\xc1N\"\x18\x9b\xb5\xf3+h\xd2\x9dOJ*:N\xd8`/UU\x9f\xb9\xe6\xd0\xffj\x00\xa2\xeb\x94\xc1\xf9\xe7P\xaa\xa8)\xfc\xe6mne\xcd\xc4\xb6\x04\xe04\xf9\xeb\xfcI(1\xefk\xb1B\x1f\x00\x89s\x04i[\x93B1\"\xad\x9f\xe0\xfc\xaa\xae\xa0\x05\xf8\xb4\xa7\x98\xa5\xbao\xd1\x8d\x13i%\"\xa1<\vw'}}]}, 0x1, 0x63c, &(0x7f0000001bc0)="$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") 4.732216451s ago: executing program 0 (id=722): mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000001, 0x20031, 0xffffffffffffffff, 0xaf8e000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 4.307943609s ago: executing program 6 (id=723): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000005c0)=0x16, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0x40, 0x23, 0x1b, {0x1b, 0x22, "8fabc572673f8d6438e74066e9941da4a2bdd0fc6e132435bc"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000280)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x7, "3aaa6b5f"}, @main=@item_4={0x3, 0x0, 0x0, "c9a86d2f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0xf18}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0x2, "f404"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000440)={0x20, 0x1, 0xd5, "3436bb6f7e9a151e458d861fc1588b8c03644955393f2c2f323bfafef12f329b266bce762c933adeea31512a92c75f860072bb55de61423ca4fadbc08a48737172b6d76dfb170aff04a68ba29d9662b1e092d061c811b06565ba3e166320f53789bf20ff2c9d11eb016fb69cccec72d0511f5617057572e806b7c4c4b98065c47673221616707670cd92172a47247ddf580ab57fc289c8c9389edaa39972b59cacdfdadfb1b0c8c0a4571be35b6eb393d3e0b04887b26136b01b2c420b48eb053b9137c2ee360d4eb1271e3187b67e16264694fc0c"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x7}}) 4.217860051s ago: executing program 0 (id=724): socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000020"], 0x48) 3.765963331s ago: executing program 7 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004340)=@newchain={0x24, 0x64, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffe0}, {0xf}, {0x1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x2400c800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) getgroups(0x4, &(0x7f00000000c0)=[0x0, 0xee01, 0xee00, 0xee01]) fchown(r2, r3, r4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.238981731s ago: executing program 6 (id=729): socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) listen(r2, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 3.122706854s ago: executing program 5 (id=730): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0x3a, 0x4, 0x310, 0xffffffff, 0x110, 0x0, 0x0, 0x110, 0xffffffff, 0x278, 0x278, 0x278, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x10, [0x3, 0x0, 0xa, 0x4], 0x0, 0xb}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x4]}, {0x20}}}}, {{@ip={@private=0xa010102, @broadcast, 0xff000000, 0xff, 'bond_slave_1\x00', '\x00', {0xff}, {}, 0x5e, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4], 0x0, 0x3}, {0x2, [0x0, 0x0, 0x0, 0x4], 0x0, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 2.85773794s ago: executing program 5 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 2.543467356s ago: executing program 0 (id=732): syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b00010001000b0904c8020103010203090504"], 0x0) 2.169456044s ago: executing program 6 (id=733): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0x3a, 0x4, 0x310, 0xffffffff, 0x110, 0x0, 0x0, 0x110, 0xffffffff, 0x278, 0x278, 0x278, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x10, [0x3, 0x0, 0xa, 0x4], 0x0, 0xb}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x4]}, {0x20}}}}, {{@ip={@private=0xa010102, @broadcast, 0xff000000, 0xff, 'bond_slave_1\x00', '\x00', {0xff}, {}, 0x5e, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4], 0x0, 0x3}, {0x2, [0x0, 0x0, 0x0, 0x4], 0x0, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) (fail_nth: 1) 1.738793883s ago: executing program 6 (id=734): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) preadv(r0, &(0x7f0000003300)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, 0x0, 0x7fff) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffa) sendfile(r1, r1, 0x0, 0x800000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r4, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000201005) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500200000040"], 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x700000000000000) creat(&(0x7f0000000080)='./file1\x00', 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000009c0)='./file1\x00', 0x10400, &(0x7f0000000000)=ANY=[@ANYBLOB="623c03cfbb7efa064f37d2523affff12423db41a2f32eda6d15a10b0d7ad683c64a1f25db67ba1393a77cd4c1d39e3e22f8b00a9033d1d971df9d5de2f5c3440e5b0a05b715d38120c568cab71563a30e296501a55ac428ddd7e9a2b80f890a1d8c7814602d68efe350dbe457f55b2dea74a89371edeedcbdb431f544d823d1fd034f7f4746a09"], 0x1, 0x6ed, &(0x7f0000001980)="$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") setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0x3a, 0x4, 0x3a0, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0x110, 0xffffffff, 0x308, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x10, [0x3, 0x7, 0xa, 0x4], 0x0, 0xb}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x0, 0x0, 0x4], 0x0, 0x3}, {0x20}}}}, {{@ip={@private=0xa010102, @broadcast, 0xff000000, 0xff, 'bond_slave_1\x00', '\x00', {0xff}, {}, 0x5e, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}, {{@ip={@empty, @private, 0x0, 0xffffff00, 'geneve1\x00', 'vlan0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x2, 0x1, 0x0, 0x3, 0x1], 0x2, 0x4}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x3, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4], 0x0, 0x3}, {0x2, [0x0, 0x0, 0x0, 0x4, 0x4], 0x0, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000) write$sndseq(r6, &(0x7f0000000140)=[{0x10, 0x7, 0x7, 0x2, @tick=0x5, {0x7f, 0x4}, {0x6a, 0x9}, @raw8={"fdff8ef5857f1d018b1d406f"}}, {0xa0, 0xa0, 0x7, 0x0, @time={0x9, 0xffffffff}, {0x5, 0xff}, {}, @note={0x81, 0x6, 0xf, 0x3, 0x6}}], 0x38) 1.738157303s ago: executing program 5 (id=735): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$eJzs3EtvG1UUAOA7TpPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKKhJ48R9fJ80PjPX12fusUaRzkzkADy15tPff03CxXAmhDATQjifhHw/KbbcSgwvhBAuhRBK/9iSYvzvgbkQwtkQwsVR8pgzKd768srw8vIvb/323Q+nT5376tsfp1c1MG0vhhC6m3F/pxtj1orxTjFeG7bz2L0+LGJ8o3u3OM5i3Gmu5xl2auN5tTxea8X52eZ2fxQ3OrX6KLbaG/n4Zi+esD9sjfPkH7hT28qPG831PLb7WR5be3Fdu3vxb9tefxDzNIp8H+fpw2AwjnG8uduM9WzezWO9NyjGY96s0dwdxWERi9OFetZp5OtYP8o3/Wh7u93b3k2Hza1+O+uly5XqS5XqjXJ1K2s0B83r5Vq3ceN6utDqjKaVB81ad6WVZa1Os1LPuovpQqteL1er6cLN5nq71kur1cq1ytXy8mKxdyV9/fb7aaeRLoziq+3e9ly70083sq00fmIxXapce3kxvVxN311dS9feuXVrde29D29+cPuV1TdfKybdt6x0Yenq0lK5erW8VF18cI1zx13/6AQHrH9wlPo/KxZ9iPqTQ10NcEguMIBDu6//D/p/4OFdPOC8x73/D5Ps/0ctlf7/wf1v6ej9/5H634fs/ydW/wTufzxq9cOR6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5aP81+/Ua+Mx+PzxXjF4qh54rjJIRQCiH8+R9mwty+nDNFntn/mT/7rzV8n4Q8w+gcp4vtbAhhpdj+ePa4vwUAAAB4cn3zyaUvYrceX+anvSBOUrxpUzr/0YTyJSGE2fmfJ5StNHp5fkLJ8uv7VNidULb8BtYzE0oWb7mdmlS2A5kZh08v3BvMC0piKJ3ocgAAgBMxsy+cbBcCAADASfp82gtgOpIwfpQ5fhac/+f9vUebZ/a9BwAAADyGkmkvAAAAADh2ef/v9/8AAADgyRZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLnbvJWRqI4wD8b/uWDz8iMe69ijs4hkdw6VI4gJfgCHgFL8AZcOcRDDW0E5IqJMZObSTPk3TKtOQ3M9DNTJMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMX2rD5svn95+HppzbobJMxoAAADgllN92LQfVl39ebr+Ml16nepFRJQR8fvMfRlVzHqZVcqpb36/aepf+vA1ok24tDFPx7OIeJeO6tXYvwIAAAA8ruNuv+5m612xmrpD/Evdok354n2mvCIi6tX3TGnlpXiTKax9vp/iY6a0dgFrkSmsW3J7un1vlquRvqp3SiNZbNs/sa2V47QLAABMqT8TuDMLAQAA4AF8mLoDTKO4Ftf3jPPulF4ILns1AAAA4D9UTN0BAAAAYHTt/H/4/n9NM/b+fz/s/wcAAAB/rdv/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDGd6sPmuNuv793f/mHOuRkm34gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Mn+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xtFFQcA/Ls7O0tBibWaHqoGEw96kXZBkKMeNI0H/wSTpmyxuogCByGNphc9mZ5J1OjRGBNNvfE/cKYJF7xx6KEmnjXzqww/lA2pM0v7+SRv3nd2J+993+yG8O2bFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKttvx4vdMk6yw3QRV6/d3Flbzvqt+/rM9Y1bc1nL4s6jJvr6rb1PfrK9VD85Nls7+bL5ZAAAADgYkqq+j4jb6eZi1nen8/o/ra7Jav4fjhZxVc/fX/dv7axNlW/NVfX/77/deX53oulinmzQldXRcOHBVHr/0xIn3jOPvKKX3/n8Zy9J/oF031t/bjvN72fnmxs33unn4aEmsgUAHsfxqi+D6v9DWT9oMzEADoxerfCu6v9kut2cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqwvR5PVXEnIuZ6d+PM1s7a8sP66xu35qp2+tq1jfqY2RBpRKysjoZpg2uZdJeuXP14aTQaXmw+OBYR7c1eBh+McU3Ef19Tfj2jvVX8e9CZjDRaDbrl5zMp+exlUH339n7klv5BAgBgH0qORlmPp2VdfzvdXMxe68xE/P3jvfX/q7U4xqz/73x4+mZ9xnr9P2hqmRPv2+8izn86f+nK1ddXzy+dG54bfvLGicGbg5NnTp06M5/dq4X5legOF9pOFAAAgCdYv2z1+r878+D+/5FaHGPW/599P/iiPlei/n+ou5t+bWcCAABwEPV3o2df/uvPTv2tqaLr9Pvx+dLlyxcHxXH3/ERxbDzlx3CobPX6P5lpOysAAACgCdvrnXv2/8/W4hhz///pn174pT5mEhGHIy5ExPD48oXR2eaWM9Ga+EXlfKJ+2ysFAACgLYfLVuz/9/L9/zR//r+7+8hDNyJee6WIq791NU79n7z71c/1uerP/59sbokTqTtb3I+8n43ozbadEQAAAPvZVNmyYv+PdHPxo1+PvN/3/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA0/4JAAD//880Myg=") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") (async) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c141400fe000001000000000800010000000100"], 0x24}}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x4, 0x0, @void}, 0x10) (async) r7 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x592cb213a2b498d5) (async) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x5000) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil) (async) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000028e000/0x4000)=nil) shmctl$IPC_INFO(r8, 0x3, 0x0) (async) read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000080)={0x60, r9}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020660b, &(0x7f0000000000)={0x402a, 0x10100002000001, 0x0, 0x80000000}) 1.633582475s ago: executing program 7 (id=736): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001a40)={0x26c, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x23c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}]}, {0x194, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8ef4dafcecc006fe90a196bb0a6638b74d4c10b52852d89317407416228a529b"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xcbf}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0bf7dc61ac1bf167018e62ce8c11520009b914d7c0548edeb6849626f1b58faa"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4b500000, @mcast2, 0x2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000100)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$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") socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f8b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r4, 0x0, 0x0) unshare(0x22020600) r6 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0xb, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2a) pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0x5) r9 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) rt_sigqueueinfo(r9, 0x21, &(0x7f00000003c0)={0x20, 0x0, 0x80}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x100}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000300)="76a2fbf2a10a0a5521226804729bc8533db0121ac1c71929547f117e5427cfd78654861a995fc5317c30aad58d8927b216aab406b0ef0b61aacdb7d3060f9866e04fc2a09e4ca5a7c29e7a628ad07bd38398629d0962a68009a389f492252273980560dd50bd1c9ce57e4dfe322f1ad7ebdae54e37e080b403a788fbd71a4c9cc616ac8b5b68baa66a99d541ce72bad201b4fcfefaa2ac080cd7d315a3b8746f2e80ea0d33f695309869e7d4e9360b143cf38788b3fba6e39c0773ea145426f704e7da48e46d3f7a64715d99020554b6061ec637719f8da56c724d49fd", 0xdd}, {&(0x7f0000000480)="36b298e4906eb436ad69b5b4fc52d0f7795ab01f4e6fcf86b9245e17d6dcc7ed281d1f412197ec33380996ec604c7b1817ad6107e85ce17307ed942289d5a2b083b7fed1895d872eb9c99f912015d2be9cb7947ed15fd7d357aeaa084a572f1ca15d10c37a372938b308393df5bf72bafb9054f972bf2d13d70c58ab0fee0d84649f5da206b986b877ed18", 0x8b}, {&(0x7f0000001880)="35550288c6b344d97c77c7d7ad42302956594bf6f5952f9d6652558997c79c824e373ede481a348634586c146a8487e9c7ebe4209f92bf2c319ce8fabae600b2531c692fc3ede661ac8d5f89b9adc5c8efc018d37a58182abb93524674f74376e7ea00af1477c191e7bb21fbd52ffad2262105b2e307d6995bab1c246175689e2681276e1ce67ac715f0c8bb4e134e756f94fae68d5ff022de1e18992411aa9f42ae2d65c38c4c3e9ce16e4013c6f0c547809dfbfaf467ebf577758115b8b84f2139c3c31b2efac8aad4f71138bb608dae36ea8ba2fdf6616b4cf3e6ef4b6cfb834951eaa89484b0f73cdbb8d6aea2499de95c", 0xf3}], 0x4, &(0x7f0000001980)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2faa}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfe2}}, @hoplimit={{0x14}}], 0x48}, 0x40000) connect$packet(r7, &(0x7f0000001a00)={0x11, 0x10, r1, 0x1, 0x7, 0x6, @random="bd4a8347bea9"}, 0x14) 1.613005696s ago: executing program 5 (id=737): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000012c0)={0x1, 0x3d, 0x8, 0x7, 0x4}) ioctl$VT_RELDISP(r0, 0x5605) (fail_nth: 1) 885.629551ms ago: executing program 5 (id=738): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000012c0)={0x1, 0x3d, 0x8, 0x7, 0x4}) ioctl$VT_RELDISP(r0, 0x5605) 744.420424ms ago: executing program 5 (id=739): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5a3f02000000000028001280090001007665746800000000180002801400010038253b89", @ANYRES32=0x0, @ANYBLOB="0101000001200000"], 0x48}}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0xd, 0x4000ffc, 0x4a}, 0x2c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f2501402900000001090212000100000000090100000000000000"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000300)={0x40, 0x12, 0x2, "b950"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x0, 0x1, &(0x7f0000000040)={0x8, "c6c1f7b51030c4b7c54bf28fb94bce47509de1000000000000000000113000"}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$vcsa(&(0x7f00000001c0), 0x2, 0x41001) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mmap(&(0x7f0000efc000/0x4000)=nil, 0x4000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) 621.812006ms ago: executing program 0 (id=740): socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000020"], 0x48) 0s ago: executing program 7 (id=741): socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): rrno=0 [ 260.733880][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.487358][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 262.744619][ T27] audit: type=1326 audit(1758181845.312:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.6.558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d5e38eba9 code=0x0 [ 262.766219][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.831447][ T8749] FAULT_INJECTION: forcing a failure. [ 262.831447][ T8749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.880585][ T8749] CPU: 0 PID: 8749 Comm: syz.6.558 Not tainted syzkaller #0 [ 262.887927][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.898000][ T8749] Call Trace: [ 262.901292][ T8749] [ 262.904221][ T8749] dump_stack_lvl+0x16c/0x230 [ 262.908922][ T8749] ? show_regs_print_info+0x20/0x20 [ 262.914135][ T8749] ? load_image+0x3b0/0x3b0 [ 262.918643][ T8749] ? __lock_acquire+0x7c80/0x7c80 [ 262.923674][ T8749] should_fail_ex+0x39d/0x4d0 [ 262.928359][ T8749] prepare_alloc_pages+0x1e2/0x5f0 [ 262.933473][ T8749] __alloc_pages+0x127/0x460 [ 262.938066][ T8749] ? zone_statistics+0x170/0x170 [ 262.943005][ T8749] ? handle_mm_fault+0xd1/0x4920 [ 262.947940][ T8749] __folio_alloc+0x10/0x20 [ 262.952352][ T8749] vma_alloc_folio+0x47a/0x8f0 [ 262.957137][ T8749] handle_mm_fault+0x1a38/0x4920 [ 262.962098][ T8749] ? handle_mm_fault+0xd1/0x4920 [ 262.967063][ T8749] ? lock_vma_under_rcu+0x526/0x650 [ 262.972275][ T8749] ? numa_migrate_prep+0x350/0x350 [ 262.977406][ T8749] ? do_user_addr_fault+0x1c3/0x12e0 [ 262.982693][ T8749] do_user_addr_fault+0xad0/0x12e0 [ 262.987806][ T8749] ? rcu_is_watching+0x15/0xb0 [ 262.992568][ T8749] exc_page_fault+0x67/0x110 [ 262.997153][ T8749] ? clear_bhb_loop+0x40/0x90 [ 263.001822][ T8749] asm_exc_page_fault+0x26/0x30 [ 263.006663][ T8749] RIP: 0033:0x7f1d5e33c1db [ 263.011065][ T8749] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 263.030665][ T8749] RSP: 002b:00007f1d5f1ace10 EFLAGS: 00010246 [ 263.036730][ T8749] RAX: 00007f1d5f1aef30 RBX: 00007f1d5e5a7640 RCX: 0000000000000000 [ 263.044692][ T8749] RDX: 00007f1d5f1aef78 RSI: 00007f1d5e3eeca8 RDI: 00007f1d5f1ace30 [ 263.052652][ T8749] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 263.060614][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.068578][ T8749] R13: 00007f1d5e5d6128 R14: 00007f1d5e5d6090 R15: 00007ffe6fccbb88 [ 263.076551][ T8749] [ 263.157132][ T9] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 263.174580][ T8749] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 263.197959][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.304778][ T9] usb 8-1: Product: syz [ 263.309600][ T9] usb 8-1: Manufacturer: syz [ 263.314220][ T9] usb 8-1: SerialNumber: syz [ 263.331520][ T9] usb 8-1: config 0 descriptor?? [ 263.355378][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 263.435183][ T8779] FAULT_INJECTION: forcing a failure. [ 263.435183][ T8779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.481056][ T8779] CPU: 0 PID: 8779 Comm: syz.5.564 Not tainted syzkaller #0 [ 263.488397][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.498469][ T8779] Call Trace: [ 263.501753][ T8779] [ 263.504689][ T8779] dump_stack_lvl+0x16c/0x230 [ 263.509380][ T8779] ? show_regs_print_info+0x20/0x20 [ 263.514590][ T8779] ? load_image+0x3b0/0x3b0 [ 263.519105][ T8779] ? __might_fault+0xaa/0x120 [ 263.523794][ T8779] ? __lock_acquire+0x7c80/0x7c80 [ 263.528833][ T8779] should_fail_ex+0x39d/0x4d0 [ 263.533528][ T8779] _copy_from_user+0x2f/0xe0 [ 263.538131][ T8779] ___sys_recvmsg+0x12f/0x510 [ 263.542825][ T8779] ? __sys_recvmsg+0x270/0x270 [ 263.547702][ T8779] ? ksys_write+0x1c1/0x250 [ 263.552240][ T8779] ? __fget_files+0x44a/0x4d0 [ 263.556949][ T8779] __x64_sys_recvmsg+0x1f2/0x2c0 [ 263.561909][ T8779] ? ___sys_recvmsg+0x510/0x510 [ 263.566796][ T8779] ? lockdep_hardirqs_on+0x98/0x150 [ 263.572025][ T8779] do_syscall_64+0x55/0xb0 [ 263.576461][ T8779] ? clear_bhb_loop+0x40/0x90 [ 263.581155][ T8779] ? clear_bhb_loop+0x40/0x90 [ 263.585847][ T8779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.591758][ T8779] RIP: 0033:0x7f654038eba9 [ 263.596182][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.615811][ T8779] RSP: 002b:00007f6541138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 263.624268][ T8779] RAX: ffffffffffffffda RBX: 00007f65405d5fa0 RCX: 00007f654038eba9 [ 263.632260][ T8779] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 263.640251][ T8779] RBP: 00007f6541138090 R08: 0000000000000000 R09: 0000000000000000 [ 263.648250][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.656245][ T8779] R13: 00007f65405d6038 R14: 00007f65405d5fa0 R15: 00007fff39eecca8 [ 263.664342][ T8779] [ 263.934725][ T23] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 264.058248][ T8792] FAULT_INJECTION: forcing a failure. [ 264.058248][ T8792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.086552][ T8792] CPU: 1 PID: 8792 Comm: syz.5.567 Not tainted syzkaller #0 [ 264.093987][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.104056][ T8792] Call Trace: [ 264.107347][ T8792] [ 264.110285][ T8792] dump_stack_lvl+0x16c/0x230 [ 264.114981][ T8792] ? show_regs_print_info+0x20/0x20 [ 264.120187][ T8792] ? load_image+0x3b0/0x3b0 [ 264.124700][ T8792] ? __might_fault+0xaa/0x120 [ 264.129392][ T8792] ? __lock_acquire+0x7c80/0x7c80 [ 264.134436][ T8792] should_fail_ex+0x39d/0x4d0 [ 264.139146][ T8792] _copy_from_iter+0x1d3/0x1290 [ 264.144027][ T8792] ? packet_cached_dev_get+0x1c/0x2b0 [ 264.149429][ T8792] ? __lock_acquire+0x7c80/0x7c80 [ 264.154481][ T8792] ? copyout_mc+0x70/0x70 [ 264.158836][ T8792] ? packet_cached_dev_get+0x1c/0x2b0 [ 264.164231][ T8792] ? packet_cached_dev_get+0x1c/0x2b0 [ 264.169621][ T8792] packet_sendmsg+0x2df4/0x4d30 [ 264.174500][ T8792] ? aa_sk_perm+0x930/0x930 [ 264.179059][ T8792] ? __might_sleep+0xe0/0xe0 [ 264.183683][ T8792] ? __fget_files+0x28/0x4d0 [ 264.188296][ T8792] ? __lock_acquire+0x7c80/0x7c80 [ 264.193355][ T8792] ? aa_sk_perm+0x7fc/0x930 [ 264.197980][ T8792] ? packet_getsockopt+0xa20/0xa20 [ 264.203102][ T8792] ? aa_sock_msg_perm+0x94/0x150 [ 264.208048][ T8792] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 264.213419][ T8792] ? security_socket_sendmsg+0x80/0xa0 [ 264.218882][ T8792] __sys_sendto+0x46a/0x620 [ 264.223394][ T8792] ? file_end_write+0x159/0x250 [ 264.228239][ T8792] ? __ia32_sys_getpeername+0x90/0x90 [ 264.233616][ T8792] ? __fget_files+0x44a/0x4d0 [ 264.238299][ T8792] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 264.244278][ T8792] ? lock_chain_count+0x20/0x20 [ 264.249125][ T8792] __x64_sys_sendto+0xde/0xf0 [ 264.253810][ T8792] do_syscall_64+0x55/0xb0 [ 264.258220][ T8792] ? clear_bhb_loop+0x40/0x90 [ 264.262917][ T8792] ? clear_bhb_loop+0x40/0x90 [ 264.267594][ T8792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.273488][ T8792] RIP: 0033:0x7f654038eba9 [ 264.277896][ T8792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.297506][ T8792] RSP: 002b:00007f6541138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 264.305920][ T8792] RAX: ffffffffffffffda RBX: 00007f65405d5fa0 RCX: 00007f654038eba9 [ 264.313884][ T8792] RDX: 000000000000000a RSI: 0000200000000100 RDI: 0000000000000003 [ 264.321849][ T8792] RBP: 00007f6541138090 R08: 0000000000000000 R09: 0000000000000000 [ 264.329813][ T8792] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 264.337794][ T8792] R13: 00007f65405d6038 R14: 00007f65405d5fa0 R15: 00007fff39eecca8 [ 264.345779][ T8792] [ 264.404459][ T23] usb 7-1: Invalid ep0 maxpacket: 32 [ 264.554411][ T23] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 264.578426][ T8756] netlink: 'syz.7.560': attribute type 29 has an invalid length. [ 264.723984][ T2264] usb 8-1: USB disconnect, device number 5 [ 264.737451][ T23] usb 7-1: Invalid ep0 maxpacket: 32 [ 264.791478][ T23] usb usb7-port1: attempt power cycle [ 264.890440][ T8802] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 265.224609][ T23] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 265.328227][ T23] usb 7-1: Invalid ep0 maxpacket: 32 [ 265.584568][ T23] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 265.724861][ T23] usb 7-1: Invalid ep0 maxpacket: 32 [ 265.733518][ T23] usb usb7-port1: unable to enumerate USB device [ 266.077752][ T8810] loop0: detected capacity change from 0 to 2048 [ 266.103937][ T8810] EXT4-fs: Ignoring removed nobh option [ 266.316447][ T8810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.499847][ T8810] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.752905][ T27] audit: type=1804 audit(1758181849.322:32): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.571" name="/newroot/154/file0/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 266.899111][ T27] audit: type=1804 audit(1758181849.382:33): pid=8810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.571" name="/newroot/154/file0/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 267.065569][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.158223][ T8830] FAULT_INJECTION: forcing a failure. [ 267.158223][ T8830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.245168][ T8830] CPU: 1 PID: 8830 Comm: syz.5.573 Not tainted syzkaller #0 [ 267.252533][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.262604][ T8830] Call Trace: [ 267.265892][ T8830] [ 267.268836][ T8830] dump_stack_lvl+0x16c/0x230 [ 267.273537][ T8830] ? show_regs_print_info+0x20/0x20 [ 267.278745][ T8830] ? load_image+0x3b0/0x3b0 [ 267.283259][ T8830] ? __lock_acquire+0x7c80/0x7c80 [ 267.288291][ T8830] ? snprintf+0xdb/0x120 [ 267.292541][ T8830] should_fail_ex+0x39d/0x4d0 [ 267.297233][ T8830] _copy_to_user+0x2f/0xa0 [ 267.301660][ T8830] simple_read_from_buffer+0xe7/0x150 [ 267.307055][ T8830] proc_fail_nth_read+0x1e3/0x250 [ 267.312096][ T8830] ? proc_fault_inject_write+0x340/0x340 [ 267.317741][ T8830] ? fsnotify_perm+0x271/0x5e0 [ 267.322606][ T8830] ? proc_fault_inject_write+0x340/0x340 [ 267.328246][ T8830] vfs_read+0x27e/0x920 [ 267.332416][ T8830] ? kernel_read+0x1e0/0x1e0 [ 267.337028][ T8830] ? __fget_files+0x28/0x4d0 [ 267.341629][ T8830] ? __fget_files+0x44a/0x4d0 [ 267.346327][ T8830] ? __fdget_pos+0x2a3/0x330 [ 267.350923][ T8830] ? ksys_read+0x75/0x250 [ 267.355266][ T8830] ksys_read+0x147/0x250 [ 267.359517][ T8830] ? vfs_write+0x940/0x940 [ 267.363961][ T8830] ? lockdep_hardirqs_on+0x98/0x150 [ 267.369198][ T8830] do_syscall_64+0x55/0xb0 [ 267.373619][ T8830] ? clear_bhb_loop+0x40/0x90 [ 267.378297][ T8830] ? clear_bhb_loop+0x40/0x90 [ 267.382983][ T8830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.388916][ T8830] RIP: 0033:0x7f654038d5bc [ 267.393339][ T8830] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 267.412972][ T8830] RSP: 002b:00007f653e5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.421411][ T8830] RAX: ffffffffffffffda RBX: 00007f65405d6090 RCX: 00007f654038d5bc [ 267.429398][ T8830] RDX: 000000000000000f RSI: 00007f653e5f60a0 RDI: 0000000000000005 [ 267.437364][ T8830] RBP: 00007f653e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.445326][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.453282][ T8830] R13: 00007f65405d6128 R14: 00007f65405d6090 R15: 00007fff39eecca8 [ 267.461251][ T8830] [ 268.100441][ T786] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 268.199036][ T8837] loop5: detected capacity change from 0 to 32768 [ 268.289755][ T8837] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 268.305161][ T786] usb 7-1: Using ep0 maxpacket: 8 [ 268.331307][ T786] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 268.380326][ T786] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.438790][ T786] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.446145][ T8839] loop0: detected capacity change from 0 to 32768 [ 268.457987][ T8839] (syz.0.575,8839,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 268.483112][ T786] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.495192][ T8839] (syz.0.575,8839,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 268.530316][ T8839] (syz.0.575,8839,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 268.555276][ T786] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.570609][ T8837] XFS (loop5): Ending clean mount [ 268.582327][ T786] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.602722][ T786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.619472][ T8839] JBD2: Ignoring recovery information on journal [ 268.626309][ T8837] XFS (loop5): Quotacheck needed: Please wait. [ 268.698506][ T8837] XFS (loop5): Quotacheck: Done. [ 268.827086][ T8839] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 268.842358][ T7563] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 268.885310][ T786] usb 7-1: GET_CAPABILITIES returned 0 [ 268.890865][ T786] usbtmc 7-1:16.0: can't read capabilities [ 268.900421][ T8844] loop7: detected capacity change from 0 to 32768 [ 268.923183][ T8844] [ 268.923183][ T8844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.923183][ T8844] [ 269.254272][ T8870] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 269.267019][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 269.617339][ T966] usb 7-1: USB disconnect, device number 8 [ 271.199886][ T8879] loop0: detected capacity change from 0 to 32768 [ 271.312622][ T78] read_mapping_page failed! [ 271.337823][ T78] ERROR: (device loop7): txCommit: [ 271.337823][ T78] [ 271.400223][ T78] jfs_write_inode: jfs_commit_inode failed! [ 271.435363][ T7679] [ 271.435363][ T7679] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.435363][ T7679] [ 271.485857][ T7679] [ 271.485857][ T7679] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.485857][ T7679] [ 271.523096][ T8879] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.565593][ T8879] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 271.598176][ T8879] BTRFS info (device loop0): turning on sync discard [ 271.642957][ T8879] BTRFS info (device loop0): enabling disk space caching [ 271.677417][ T8898] loop6: detected capacity change from 0 to 2048 [ 271.694548][ T8879] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 271.715053][ T8879] BTRFS info (device loop0): trying to use backup root at mount time [ 271.723185][ T8879] BTRFS info (device loop0): force clearing of disk cache [ 271.749755][ T8898] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 271.804832][ T8879] BTRFS info (device loop0): disk space caching is enabled [ 271.817235][ T8898] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 271.849137][ T8898] UDF-fs: Scanning with blocksize 512 failed [ 271.994106][ T8913] loop7: detected capacity change from 0 to 2048 [ 272.037031][ T8898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.067375][ T8879] BTRFS info (device loop0): rebuilding free space tree [ 272.126215][ T8898] FAULT_INJECTION: forcing a failure. [ 272.126215][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 272.156299][ T8913] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 272.202071][ T8879] BTRFS info (device loop0): disabling free space tree [ 272.210357][ T8913] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 272.218885][ T8898] CPU: 0 PID: 8898 Comm: syz.6.583 Not tainted syzkaller #0 [ 272.222520][ T8879] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 272.226176][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.226189][ T8898] Call Trace: [ 272.226197][ T8898] [ 272.226204][ T8898] dump_stack_lvl+0x16c/0x230 [ 272.226231][ T8898] ? show_regs_print_info+0x20/0x20 [ 272.226248][ T8898] ? load_image+0x3b0/0x3b0 [ 272.226267][ T8898] ? __might_sleep+0xe0/0xe0 [ 272.226285][ T8898] ? __lock_acquire+0x7c80/0x7c80 [ 272.226300][ T8898] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 272.226322][ T8898] should_fail_ex+0x39d/0x4d0 [ 272.226347][ T8898] should_failslab+0x9/0x20 [ 272.261006][ T8879] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 272.262474][ T8898] slab_pre_alloc_hook+0x59/0x310 [ 272.262507][ T8898] kmem_cache_alloc+0x5a/0x2e0 [ 272.311419][ T8898] ? getname_flags+0xbb/0x500 [ 272.316144][ T8898] getname_flags+0xbb/0x500 [ 272.320751][ T8898] __x64_sys_symlink+0x5f/0x90 [ 272.325543][ T8898] do_syscall_64+0x55/0xb0 [ 272.329978][ T8898] ? clear_bhb_loop+0x40/0x90 [ 272.334674][ T8898] ? clear_bhb_loop+0x40/0x90 [ 272.339372][ T8898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.345310][ T8898] RIP: 0033:0x7f1d5e38eba9 [ 272.349736][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.357670][ T8913] UDF-fs: Scanning with blocksize 512 failed [ 272.369338][ T8898] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 272.369364][ T8898] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 272.369376][ T8898] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000280 [ 272.369387][ T8898] RBP: 00007f1d5f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 272.369397][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.369405][ T8898] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 272.369429][ T8898] [ 272.581210][ T8913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.784065][ T5790] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.002575][ T8927] loop5: detected capacity change from 0 to 40427 [ 275.037930][ T8927] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 275.055077][ T8927] F2FS-fs (loop5): Image doesn't support compression [ 275.061974][ T8927] F2FS-fs (loop5): Image doesn't support compression [ 275.084196][ T8952] loop0: detected capacity change from 0 to 128 [ 275.092649][ T8927] F2FS-fs (loop5): invalid crc value [ 275.124627][ T8927] F2FS-fs (loop5): Found nat_bits in checkpoint [ 275.194106][ T8952] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 275.245137][ T8952] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.286047][ T8927] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 275.292341][ T8939] loop6: detected capacity change from 0 to 32768 [ 275.324530][ T5785] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 275.361104][ T8939] (syz.6.587,8939,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 275.400923][ T8939] (syz.6.587,8939,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 275.429493][ T27] audit: type=1800 audit(1758181858.022:34): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.592" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 275.466688][ T8927] syz.5.592: attempt to access beyond end of device [ 275.466688][ T8927] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 275.504267][ T8939] JBD2: Ignoring recovery information on journal [ 275.524637][ T5785] usb 8-1: Using ep0 maxpacket: 32 [ 275.534161][ T5785] usb 8-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 275.544013][ T8927] syz.5.592: attempt to access beyond end of device [ 275.544013][ T8927] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 275.544039][ T5785] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.567440][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.592'. [ 275.579664][ T8968] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d7/0x910 [ 275.593708][ T5785] usb 8-1: config 0 descriptor?? [ 275.597099][ T8939] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 275.604014][ T5785] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 275.637405][ T5785] input: xirlink-cit as /devices/platform/dummy_hcd.7/usb8/8-1/input/input10 [ 275.833877][ T7563] syz-executor: attempt to access beyond end of device [ 275.833877][ T7563] loop5: rw=2049, sector=45112, nr_sectors = 16 limit=40427 [ 275.873308][ T8939] FAULT_INJECTION: forcing a failure. [ 275.873308][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 275.903225][ T7563] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 275.913306][ T7563] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 275.922539][ T8939] CPU: 1 PID: 8939 Comm: syz.6.587 Not tainted syzkaller #0 [ 275.929874][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.939945][ T8939] Call Trace: [ 275.943239][ T8939] [ 275.946188][ T8939] dump_stack_lvl+0x16c/0x230 [ 275.950896][ T8939] ? show_regs_print_info+0x20/0x20 [ 275.956122][ T8939] ? load_image+0x3b0/0x3b0 [ 275.960652][ T8939] ? __might_sleep+0xe0/0xe0 [ 275.965266][ T8939] ? __lock_acquire+0x7c80/0x7c80 [ 275.970307][ T8939] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 275.975950][ T8939] should_fail_ex+0x39d/0x4d0 [ 275.980628][ T8939] should_failslab+0x9/0x20 [ 275.985124][ T8939] slab_pre_alloc_hook+0x59/0x310 [ 275.990147][ T8939] kmem_cache_alloc+0x5a/0x2e0 [ 275.994988][ T8939] ? getname_flags+0xbb/0x500 [ 275.999661][ T8939] getname_flags+0xbb/0x500 [ 276.004156][ T8939] __x64_sys_mkdirat+0x7c/0xa0 [ 276.008915][ T8939] do_syscall_64+0x55/0xb0 [ 276.013320][ T8939] ? clear_bhb_loop+0x40/0x90 [ 276.017988][ T8939] ? clear_bhb_loop+0x40/0x90 [ 276.022657][ T8939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.028543][ T8939] RIP: 0033:0x7f1d5e38eba9 [ 276.032951][ T8939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.052636][ T8939] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 276.061045][ T8939] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 276.069008][ T8939] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 276.076969][ T8939] RBP: 00007f1d5f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 276.084927][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.092885][ T8939] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 276.100856][ T8939] [ 276.358004][ T7581] ocfs2: Unmounting device (7,6) on (node local) [ 277.667918][ T5790] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.041165][ T786] usb 8-1: USB disconnect, device number 6 [ 278.190390][ T9006] loop5: detected capacity change from 0 to 16 [ 278.226178][ T9009] loop7: detected capacity change from 0 to 16 [ 278.330021][ T9013] loop6: detected capacity change from 0 to 512 [ 278.369403][ T9013] ext4: Unknown parameter '' [ 278.369893][ T9006] FAULT_INJECTION: forcing a failure. [ 278.369893][ T9006] name failslab, interval 1, probability 0, space 0, times 0 [ 278.429719][ T9009] loop7: detected capacity change from 0 to 256 [ 278.451539][ T9009] exfat: Deprecated parameter 'utf8' [ 278.459400][ T9006] CPU: 0 PID: 9006 Comm: syz.5.595 Not tainted syzkaller #0 [ 278.466729][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.476804][ T9006] Call Trace: [ 278.480100][ T9006] [ 278.483049][ T9006] dump_stack_lvl+0x16c/0x230 [ 278.487754][ T9006] ? show_regs_print_info+0x20/0x20 [ 278.492979][ T9006] ? load_image+0x3b0/0x3b0 [ 278.497505][ T9006] ? __might_sleep+0xe0/0xe0 [ 278.502118][ T9006] ? __lock_acquire+0x7c80/0x7c80 [ 278.507179][ T9006] should_fail_ex+0x39d/0x4d0 [ 278.511888][ T9006] should_failslab+0x9/0x20 [ 278.516416][ T9006] slab_pre_alloc_hook+0x59/0x310 [ 278.521467][ T9006] ? ovl_iterate+0xced/0x1f50 [ 278.526168][ T9006] __kmem_cache_alloc_node+0x53/0x260 [ 278.531570][ T9006] ? ovl_iterate+0xced/0x1f50 [ 278.536267][ T9006] kmalloc_trace+0x2a/0xe0 [ 278.540706][ T9006] ovl_iterate+0xced/0x1f50 [ 278.545248][ T9006] ? ovl_cache_put+0x190/0x190 [ 278.550049][ T9006] ? __might_sleep+0xe0/0xe0 [ 278.554655][ T9006] ? read_lock_is_recursive+0x20/0x20 [ 278.560053][ T9006] ? __up_read+0x280/0x670 [ 278.564492][ T9006] ? down_write+0x162/0x1f0 [ 278.569015][ T9006] ? down_read_killable+0x340/0x340 [ 278.574235][ T9006] ? end_current_label_crit_section+0x149/0x170 [ 278.580500][ T9006] ? ovl_cache_put+0x190/0x190 [ 278.584447][ T7893] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 278.585269][ T9006] wrap_directory_iterator+0x92/0xd0 [ 278.585299][ T9006] iterate_dir+0x1c2/0x580 [ 278.602458][ T9006] __se_sys_getdents+0xe9/0x260 [ 278.607331][ T9006] ? __x64_sys_getdents+0x80/0x80 [ 278.612376][ T9006] ? fillonedir+0x430/0x430 [ 278.616902][ T9006] ? lockdep_hardirqs_on+0x98/0x150 [ 278.622130][ T9006] do_syscall_64+0x55/0xb0 [ 278.626580][ T9006] ? clear_bhb_loop+0x40/0x90 [ 278.631396][ T9006] ? clear_bhb_loop+0x40/0x90 [ 278.636097][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.642030][ T9006] RIP: 0033:0x7f654038eba9 [ 278.646469][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.666104][ T9006] RSP: 002b:00007f6541138038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 278.674548][ T9006] RAX: ffffffffffffffda RBX: 00007f65405d5fa0 RCX: 00007f654038eba9 [ 278.682538][ T9006] RDX: 0000000000001000 RSI: 0000200000001080 RDI: 0000000000000004 [ 278.690538][ T9006] RBP: 00007f6541138090 R08: 0000000000000000 R09: 0000000000000000 [ 278.698533][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.706526][ T9006] R13: 00007f65405d6038 R14: 00007f65405d5fa0 R15: 00007fff39eecca8 [ 278.714545][ T9006] [ 278.797474][ T7893] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.806696][ T9009] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 278.814609][ T7893] usb 7-1: config 0 interface 0 has no altsetting 0 [ 278.876610][ T7893] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 278.900705][ T9009] fuse: Bad value for 'rootmode' [ 278.914478][ T7893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.935366][ T7893] usb 7-1: config 0 descriptor?? [ 279.386370][ T7893] usbhid 7-1:0.0: can't add hid device: -71 [ 279.411583][ T7893] usbhid: probe of 7-1:0.0 failed with error -71 [ 279.470236][ T7893] usb 7-1: USB disconnect, device number 9 [ 279.531847][ T9038] loop6: detected capacity change from 0 to 16 [ 279.618113][ T5794] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.775554][ T9038] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 279.790187][ T9038] overlayfs: failed to look up (file1) for ino (-5) [ 279.806191][ T9042] loop7: detected capacity change from 0 to 16 [ 279.895278][ T9042] FAULT_INJECTION: forcing a failure. [ 279.895278][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 279.939074][ T9042] CPU: 1 PID: 9042 Comm: syz.7.601 Not tainted syzkaller #0 [ 279.946421][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.956493][ T9042] Call Trace: [ 279.959778][ T9042] [ 279.962711][ T9042] dump_stack_lvl+0x16c/0x230 [ 279.967407][ T9042] ? show_regs_print_info+0x20/0x20 [ 279.972617][ T9042] ? load_image+0x3b0/0x3b0 [ 279.977143][ T9042] ? __might_sleep+0xe0/0xe0 [ 279.981753][ T9042] ? __lock_acquire+0x7c80/0x7c80 [ 279.986800][ T9042] should_fail_ex+0x39d/0x4d0 [ 279.991497][ T9042] should_failslab+0x9/0x20 [ 279.996016][ T9042] slab_pre_alloc_hook+0x59/0x310 [ 280.001067][ T9042] ? ovl_iterate+0xced/0x1f50 [ 280.005762][ T9042] __kmem_cache_alloc_node+0x53/0x260 [ 280.011152][ T9042] ? ovl_iterate+0xced/0x1f50 [ 280.015849][ T9042] kmalloc_trace+0x2a/0xe0 [ 280.020289][ T9042] ovl_iterate+0xced/0x1f50 [ 280.024835][ T9042] ? aa_file_perm+0x120/0xec0 [ 280.029525][ T9042] ? ovl_cache_put+0x190/0x190 [ 280.034328][ T9042] ? __might_sleep+0xe0/0xe0 [ 280.038930][ T9042] ? read_lock_is_recursive+0x20/0x20 [ 280.044332][ T9042] ? __up_read+0x280/0x670 [ 280.048766][ T9042] ? down_write+0x162/0x1f0 [ 280.053284][ T9042] ? down_read_killable+0x340/0x340 [ 280.058505][ T9042] ? end_current_label_crit_section+0x149/0x170 [ 280.064760][ T9042] ? ovl_cache_put+0x190/0x190 [ 280.069550][ T9042] wrap_directory_iterator+0x92/0xd0 [ 280.074868][ T9042] iterate_dir+0x1c2/0x580 [ 280.079305][ T9042] __se_sys_getdents+0xe9/0x260 [ 280.084182][ T9042] ? __x64_sys_getdents+0x80/0x80 [ 280.089229][ T9042] ? fillonedir+0x430/0x430 [ 280.093767][ T9042] ? lockdep_hardirqs_on+0x98/0x150 [ 280.098989][ T9042] do_syscall_64+0x55/0xb0 [ 280.103428][ T9042] ? clear_bhb_loop+0x40/0x90 [ 280.108118][ T9042] ? clear_bhb_loop+0x40/0x90 [ 280.112804][ T9042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.118713][ T9042] RIP: 0033:0x7f503798eba9 [ 280.123135][ T9042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.142758][ T9042] RSP: 002b:00007f50388e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 280.151195][ T9042] RAX: ffffffffffffffda RBX: 00007f5037bd5fa0 RCX: 00007f503798eba9 [ 280.159186][ T9042] RDX: 0000000000001000 RSI: 0000200000001080 RDI: 0000000000000004 [ 280.167178][ T9042] RBP: 00007f50388e1090 R08: 0000000000000000 R09: 0000000000000000 [ 280.175162][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.183147][ T9042] R13: 00007f5037bd6038 R14: 00007f5037bd5fa0 R15: 00007ffd42461488 [ 280.191153][ T9042] [ 280.416835][ T9052] loop6: detected capacity change from 0 to 16 [ 280.614544][ T5789] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.481961][ T9036] loop5: detected capacity change from 0 to 40427 [ 281.534107][ T9036] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 281.590317][ T9036] F2FS-fs (loop5): Image doesn't support compression [ 281.644488][ T9036] F2FS-fs (loop5): Image doesn't support compression [ 281.652207][ T9052] loop6: detected capacity change from 0 to 1024 [ 281.703551][ T9036] F2FS-fs (loop5): invalid crc value [ 281.791817][ T9036] F2FS-fs (loop5): Found nat_bits in checkpoint [ 281.895653][ T9036] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 282.007417][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 282.043817][ T27] audit: type=1800 audit(1758181864.632:35): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.599" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 282.106845][ T9036] syz.5.599: attempt to access beyond end of device [ 282.106845][ T9036] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 282.264898][ T9036] syz.5.599: attempt to access beyond end of device [ 282.264898][ T9036] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 282.290491][ T7581] hfsplus: node 4:3 still has 2 user(s)! [ 282.315000][ T9075] netlink: 20 bytes leftover after parsing attributes in process `syz.5.599'. [ 282.398027][ T9079] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 282.411878][ T9] usb 1-1: device descriptor read/64, error -71 [ 282.473177][ T9081] FAULT_INJECTION: forcing a failure. [ 282.473177][ T9081] name failslab, interval 1, probability 0, space 0, times 0 [ 282.487472][ T9081] CPU: 1 PID: 9081 Comm: syz.6.608 Not tainted syzkaller #0 [ 282.491691][ T7563] syz-executor: attempt to access beyond end of device [ 282.491691][ T7563] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 282.494768][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.494780][ T9081] Call Trace: [ 282.494787][ T9081] [ 282.494795][ T9081] dump_stack_lvl+0x16c/0x230 [ 282.494822][ T9081] ? show_regs_print_info+0x20/0x20 [ 282.494841][ T9081] ? load_image+0x3b0/0x3b0 [ 282.494858][ T9081] ? __might_sleep+0xe0/0xe0 [ 282.494878][ T9081] ? __lock_acquire+0x7c80/0x7c80 [ 282.494900][ T9081] should_fail_ex+0x39d/0x4d0 [ 282.494925][ T9081] should_failslab+0x9/0x20 [ 282.494946][ T9081] slab_pre_alloc_hook+0x59/0x310 [ 282.494969][ T9081] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 282.494993][ T9081] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 282.495014][ T9081] __kmem_cache_alloc_node+0x53/0x260 [ 282.495037][ T9081] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 282.495058][ T9081] __kmalloc+0xa4/0x240 [ 282.495082][ T9081] tomoyo_realpath_from_path+0xe3/0x5d0 [ 282.495117][ T9081] tomoyo_path_number_perm+0x1ea/0x590 [ 282.495137][ T9081] ? tomoyo_path_number_perm+0x1ba/0x590 [ 282.495165][ T9081] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 282.495188][ T9081] ? ksys_write+0x1c1/0x250 [ 282.495242][ T9081] ? __fget_files+0x28/0x4d0 [ 282.495274][ T9081] security_file_ioctl+0x70/0xa0 [ 282.495297][ T9081] __se_sys_ioctl+0x48/0x170 [ 282.515890][ T7563] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 282.519209][ T9081] do_syscall_64+0x55/0xb0 [ 282.641839][ T9081] ? clear_bhb_loop+0x40/0x90 [ 282.646514][ T9081] ? clear_bhb_loop+0x40/0x90 [ 282.651188][ T9081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.657076][ T9081] RIP: 0033:0x7f1d5e38eba9 [ 282.661479][ T9081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.681077][ T9081] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.689496][ T9081] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 282.697513][ T9081] RDX: 00002000000000c0 RSI: 000000004008af30 RDI: 0000000000000005 [ 282.705482][ T9081] RBP: 00007f1d5f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 282.713443][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.721405][ T9081] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 282.729384][ T9081] [ 282.805933][ T9081] ERROR: Out of memory at tomoyo_realpath_from_path. [ 282.834484][ T5785] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 282.842126][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 283.014823][ T9] usb 1-1: device descriptor read/64, error -71 [ 283.044562][ T5785] usb 8-1: Using ep0 maxpacket: 32 [ 283.051722][ T5785] usb 8-1: config 0 has an invalid interface number: 222 but max is 0 [ 283.075461][ T5785] usb 8-1: config 0 has no interface number 0 [ 283.090514][ T5785] usb 8-1: New USB device found, idVendor=0ab4, idProduct=0010, bcdDevice=61.2f [ 283.110006][ T5785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.133522][ T5785] usb 8-1: Product: syz [ 283.138496][ T9] usb usb1-port1: attempt power cycle [ 283.151202][ T5785] usb 8-1: Manufacturer: syz [ 283.169971][ T5785] usb 8-1: SerialNumber: syz [ 283.199083][ T5785] usb 8-1: config 0 descriptor?? [ 283.227731][ T5785] esd_usb 8-1:0.222: sending version message failed [ 283.245712][ T5785] esd_usb: probe of 8-1:0.222 failed with error -22 [ 283.348645][ T9101] loop5: detected capacity change from 0 to 512 [ 283.384996][ T9101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.424650][ T9101] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.460800][ T9078] loop7: detected capacity change from 0 to 256 [ 283.498159][ T9078] FAT-fs (loop7): Unrecognized mount option "iochbrset=macgreek" or missing value [ 283.545825][ T9090] loop6: detected capacity change from 0 to 32768 [ 283.559656][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 283.572187][ T9090] (syz.6.611,9090,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 283.592810][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.7.609'. [ 283.610698][ T9090] (syz.6.611,9090,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 283.611059][ T9] usb 1-1: device descriptor read/8, error -71 [ 283.682762][ T9090] JBD2: Ignoring recovery information on journal [ 283.698616][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.742723][ T9090] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 283.764932][ T966] usb 8-1: USB disconnect, device number 7 [ 283.871008][ T7581] ocfs2: Unmounting device (7,6) on (node local) [ 283.914621][ T9110] FAULT_INJECTION: forcing a failure. [ 283.914621][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 283.942308][ T9110] CPU: 0 PID: 9110 Comm: syz.5.612 Not tainted syzkaller #0 [ 283.949734][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.959790][ T9110] Call Trace: [ 283.963083][ T9110] [ 283.966016][ T9110] dump_stack_lvl+0x16c/0x230 [ 283.970709][ T9110] ? show_regs_print_info+0x20/0x20 [ 283.975948][ T9110] ? load_image+0x3b0/0x3b0 [ 283.980447][ T9110] ? __might_sleep+0xe0/0xe0 [ 283.985030][ T9110] ? __lock_acquire+0x7c80/0x7c80 [ 283.990044][ T9110] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 283.995677][ T9110] should_fail_ex+0x39d/0x4d0 [ 284.000353][ T9110] should_failslab+0x9/0x20 [ 284.004854][ T9110] slab_pre_alloc_hook+0x59/0x310 [ 284.009909][ T9110] ? __se_sys_memfd_create+0x25a/0x660 [ 284.015361][ T9110] ? __se_sys_memfd_create+0x25a/0x660 [ 284.020811][ T9110] __kmem_cache_alloc_node+0x53/0x260 [ 284.026181][ T9110] ? __se_sys_memfd_create+0x25a/0x660 [ 284.031633][ T9110] __kmalloc+0xa4/0x240 [ 284.035781][ T9110] __se_sys_memfd_create+0x25a/0x660 [ 284.041060][ T9110] do_syscall_64+0x55/0xb0 [ 284.045467][ T9110] ? clear_bhb_loop+0x40/0x90 [ 284.050131][ T9110] ? clear_bhb_loop+0x40/0x90 [ 284.054800][ T9110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.060689][ T9110] RIP: 0033:0x7f654038eba9 [ 284.065094][ T9110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.084693][ T9110] RSP: 002b:00007f6541137e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 284.093100][ T9110] RAX: ffffffffffffffda RBX: 0000000000004703 RCX: 00007f654038eba9 [ 284.101068][ T9110] RDX: 00007f6541137ef0 RSI: 0000000000000000 RDI: 00007f65404127e8 [ 284.109043][ T9110] RBP: 0000200000004800 R08: 00007f6541137bb7 R09: 00007f6541137e40 [ 284.117034][ T9110] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000004780 [ 284.124997][ T9110] R13: 00007f6541137ef0 R14: 00007f6541137eb0 R15: 0000200000000180 [ 284.132977][ T9110] [ 284.236474][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 284.285094][ T9] usb 1-1: device descriptor read/8, error -71 [ 284.404686][ T9] usb usb1-port1: unable to enumerate USB device [ 285.514227][ T9120] loop5: detected capacity change from 0 to 32768 [ 285.772212][ T9136] tipc: Enabled bearer , priority 0 [ 285.804948][ T9136] syzkaller0: entered promiscuous mode [ 285.814464][ T9136] syzkaller0: entered allmulticast mode [ 285.901483][ T9136] tipc: Resetting bearer [ 285.954751][ T9135] tipc: Resetting bearer [ 286.045218][ T9135] tipc: Disabling bearer [ 286.174254][ T9138] tipc: Enabled bearer , priority 0 [ 286.201980][ T9138] syzkaller0: entered promiscuous mode [ 286.211483][ T9138] syzkaller0: entered allmulticast mode [ 286.320773][ T9130] loop7: detected capacity change from 0 to 40427 [ 286.345255][ T9130] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 286.352228][ T9140] tipc: Enabled bearer , priority 0 [ 286.373733][ T9130] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 286.383107][ T9140] syzkaller0: entered promiscuous mode [ 286.394795][ T9140] syzkaller0: entered allmulticast mode [ 286.400474][ T9130] F2FS-fs (loop7): invalid crc value [ 286.448551][ T9140] FAULT_INJECTION: forcing a failure. [ 286.448551][ T9140] name failslab, interval 1, probability 0, space 0, times 0 [ 286.472857][ T9130] F2FS-fs (loop7): Found nat_bits in checkpoint [ 286.482013][ T9138] tipc: Resetting bearer [ 286.507644][ T9140] CPU: 1 PID: 9140 Comm: syz.6.624 Not tainted syzkaller #0 [ 286.514985][ T9140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.525065][ T9140] Call Trace: [ 286.528365][ T9140] [ 286.531318][ T9140] dump_stack_lvl+0x16c/0x230 [ 286.536027][ T9140] ? show_regs_print_info+0x20/0x20 [ 286.541260][ T9140] ? load_image+0x3b0/0x3b0 [ 286.545803][ T9140] ? __might_sleep+0xe0/0xe0 [ 286.550428][ T9140] ? __lock_acquire+0x7c80/0x7c80 [ 286.555484][ T9140] should_fail_ex+0x39d/0x4d0 [ 286.560212][ T9140] should_failslab+0x9/0x20 [ 286.564746][ T9140] slab_pre_alloc_hook+0x59/0x310 [ 286.569804][ T9140] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 286.575560][ T9140] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 286.578447][ T9134] loop5: detected capacity change from 0 to 40427 [ 286.581303][ T9140] __kmem_cache_alloc_node+0x53/0x260 [ 286.581336][ T9140] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 286.581359][ T9140] __kmalloc+0xa4/0x240 [ 286.581383][ T9140] tomoyo_realpath_from_path+0xe3/0x5d0 [ 286.608213][ T9134] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 286.608661][ T9140] tomoyo_path_number_perm+0x1ea/0x590 [ 286.621788][ T9140] ? tomoyo_path_number_perm+0x1ba/0x590 [ 286.627459][ T9140] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 286.632952][ T9140] ? ksys_write+0x1c1/0x250 [ 286.635663][ T9134] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 286.637491][ T9140] ? __fget_files+0x28/0x4d0 [ 286.649118][ T9134] F2FS-fs (loop5): invalid crc value [ 286.650231][ T9140] security_file_ioctl+0x70/0xa0 [ 286.660490][ T9140] __se_sys_ioctl+0x48/0x170 [ 286.665117][ T9140] do_syscall_64+0x55/0xb0 [ 286.669554][ T9140] ? clear_bhb_loop+0x40/0x90 [ 286.674260][ T9140] ? clear_bhb_loop+0x40/0x90 [ 286.678970][ T9140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.684899][ T9140] RIP: 0033:0x7f1d5e38eba9 [ 286.689338][ T9140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.708978][ T9140] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.717425][ T9140] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 286.725435][ T9140] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 286.733435][ T9140] RBP: 00007f1d5f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 286.741422][ T9140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.749416][ T9140] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 286.757427][ T9140] [ 286.763928][ T9137] tipc: Resetting bearer [ 286.778887][ T9140] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.789383][ T9134] F2FS-fs (loop5): Found nat_bits in checkpoint [ 286.801134][ T9130] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 286.848920][ T9130] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 286.889763][ T9137] tipc: Disabling bearer [ 286.919538][ T9130] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 286.921239][ T9140] tipc: Resetting bearer [ 286.949718][ T9130] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 286.963143][ T9139] tipc: Resetting bearer [ 286.973999][ T9134] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 286.988705][ T9134] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 287.024004][ T9134] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 287.081026][ T9134] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 287.095886][ T9139] tipc: Disabling bearer [ 287.306720][ T9134] F2FS-fs (loop5): f2fs_new_node_page: inconsistent nat entry, ino:5, nid:5, blkaddr:4608, ver:0, flag:0 [ 287.318135][ T9130] F2FS-fs (loop7): f2fs_new_node_page: inconsistent nat entry, ino:5, nid:5, blkaddr:4608, ver:0, flag:0 [ 287.352239][ T9154] loop6: detected capacity change from 0 to 16 [ 287.482814][ T5789] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.722784][ T9155] F2FS-fs (loop7): f2fs_new_node_page: inconsistent nat entry, ino:7, nid:7, blkaddr:4610, ver:0, flag:0 [ 287.897772][ T9155] F2FS-fs (loop7): f2fs_new_node_page: inconsistent nat entry, ino:9, nid:9, blkaddr:4612, ver:0, flag:0 [ 287.946898][ T9155] F2FS-fs (loop7): access invalid blkaddr:83902648 [ 287.972901][ T9155] CPU: 1 PID: 9155 Comm: syz.7.619 Not tainted syzkaller #0 [ 287.980278][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.990369][ T9155] Call Trace: [ 287.993673][ T9155] [ 287.996645][ T9155] dump_stack_lvl+0x16c/0x230 [ 288.001384][ T9155] ? show_regs_print_info+0x20/0x20 [ 288.006635][ T9155] ? filemap_dirty_folio+0xab/0x340 [ 288.011883][ T9155] ? f2fs_dirty_node_folio+0x46e/0x9c0 [ 288.017383][ T9155] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 288.022799][ T9155] f2fs_truncate_data_blocks_range+0x5a6/0xd00 [ 288.025673][ T9152] loop0: detected capacity change from 0 to 40427 [ 288.028991][ T9155] f2fs_remove_inode_page+0x26b/0x530 [ 288.040810][ T9155] ? truncate_node+0x660/0x660 [ 288.045598][ T9155] ? rcu_read_lock_any_held+0xb4/0x120 [ 288.051094][ T9155] ? radix_tree_lookup+0x267/0x280 [ 288.056212][ T9155] ? down_read+0x1ac/0x2e0 [ 288.060632][ T9155] f2fs_evict_inode+0x8c3/0x1800 [ 288.065582][ T9155] ? f2fs_write_inode+0x4b0/0x4b0 [ 288.070602][ T9155] evict+0x486/0x870 [ 288.074499][ T9155] ? __lock_acquire+0x7c80/0x7c80 [ 288.079534][ T9155] ? proc_nr_inodes+0x230/0x230 [ 288.084381][ T9155] ? do_raw_spin_unlock+0x121/0x230 [ 288.089584][ T9155] ? _raw_spin_unlock+0x28/0x40 [ 288.094439][ T9155] ? iput+0x70a/0x920 [ 288.098433][ T9155] f2fs_handle_failed_inode+0x248/0x290 [ 288.103980][ T9155] ? sb_end_intwrite+0x1c0/0x1c0 [ 288.108916][ T9155] ? from_kgid+0x15d/0x680 [ 288.113334][ T9155] ? down_read+0x1ac/0x2e0 [ 288.117761][ T9155] f2fs_mkdir+0x36d/0x570 [ 288.122093][ T9155] ? security_inode_mkdir+0xb7/0x100 [ 288.127384][ T9155] vfs_mkdir+0x296/0x440 [ 288.131636][ T9155] do_mkdirat+0x1d4/0x440 [ 288.135968][ T9155] ? vfs_mkdir+0x440/0x440 [ 288.140392][ T9155] __x64_sys_mkdirat+0x89/0xa0 [ 288.145159][ T9155] do_syscall_64+0x55/0xb0 [ 288.149574][ T9155] ? clear_bhb_loop+0x40/0x90 [ 288.154246][ T9155] ? clear_bhb_loop+0x40/0x90 [ 288.158928][ T9155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.164821][ T9155] RIP: 0033:0x7f503798eba9 [ 288.169230][ T9155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.188835][ T9155] RSP: 002b:00007f503889f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 288.197298][ T9155] RAX: ffffffffffffffda RBX: 00007f5037bd6180 RCX: 00007f503798eba9 [ 288.205370][ T9155] RDX: 00000000000000b8 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 288.213337][ T9155] RBP: 00007f5037a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 288.221304][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.229270][ T9155] R13: 00007f5037bd6218 R14: 00007f5037bd6180 R15: 00007ffd42461488 [ 288.237251][ T9155] [ 288.290893][ T9150] F2FS-fs (loop5): f2fs_new_node_page: inconsistent nat entry, ino:7, nid:7, blkaddr:4610, ver:0, flag:0 [ 288.313447][ T9150] F2FS-fs (loop5): f2fs_new_node_page: inconsistent nat entry, ino:9, nid:9, blkaddr:4612, ver:0, flag:0 [ 288.331249][ T9150] F2FS-fs (loop5): access invalid blkaddr:83902648 [ 288.338590][ T9150] CPU: 0 PID: 9150 Comm: syz.5.621 Not tainted syzkaller #0 [ 288.345997][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.356077][ T9150] Call Trace: [ 288.359383][ T9150] [ 288.362327][ T9150] dump_stack_lvl+0x16c/0x230 [ 288.367035][ T9150] ? show_regs_print_info+0x20/0x20 [ 288.372280][ T9150] ? filemap_dirty_folio+0xab/0x340 [ 288.377513][ T9150] ? f2fs_dirty_node_folio+0x46e/0x9c0 [ 288.383092][ T9150] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 288.388494][ T9150] f2fs_truncate_data_blocks_range+0x5a6/0xd00 [ 288.394688][ T9150] f2fs_remove_inode_page+0x26b/0x530 [ 288.400091][ T9150] ? truncate_node+0x660/0x660 [ 288.404877][ T9150] ? rcu_read_lock_any_held+0xb4/0x120 [ 288.410357][ T9150] ? radix_tree_lookup+0x267/0x280 [ 288.415499][ T9150] ? down_read+0x1ac/0x2e0 [ 288.419942][ T9150] f2fs_evict_inode+0x8c3/0x1800 [ 288.424916][ T9150] ? f2fs_write_inode+0x4b0/0x4b0 [ 288.429957][ T9150] evict+0x486/0x870 [ 288.433864][ T9150] ? __lock_acquire+0x7c80/0x7c80 [ 288.438913][ T9150] ? proc_nr_inodes+0x230/0x230 [ 288.443781][ T9150] ? do_raw_spin_unlock+0x121/0x230 [ 288.449003][ T9150] ? _raw_spin_unlock+0x28/0x40 [ 288.453870][ T9150] ? iput+0x70a/0x920 [ 288.457880][ T9150] f2fs_handle_failed_inode+0x248/0x290 [ 288.463459][ T9150] ? sb_end_intwrite+0x1c0/0x1c0 [ 288.468412][ T9150] ? from_kgid+0x15d/0x680 [ 288.472863][ T9150] ? down_read+0x1ac/0x2e0 [ 288.477309][ T9150] f2fs_mkdir+0x36d/0x570 [ 288.481663][ T9150] ? security_inode_mkdir+0xb7/0x100 [ 288.486973][ T9150] vfs_mkdir+0x296/0x440 [ 288.491250][ T9150] do_mkdirat+0x1d4/0x440 [ 288.495610][ T9150] ? vfs_mkdir+0x440/0x440 [ 288.500062][ T9150] __x64_sys_mkdirat+0x89/0xa0 [ 288.504857][ T9150] do_syscall_64+0x55/0xb0 [ 288.509295][ T9150] ? clear_bhb_loop+0x40/0x90 [ 288.513987][ T9150] ? clear_bhb_loop+0x40/0x90 [ 288.518682][ T9150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.524621][ T9150] RIP: 0033:0x7f654038eba9 [ 288.529047][ T9150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.548681][ T9150] RSP: 002b:00007f653e5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 288.557128][ T9150] RAX: ffffffffffffffda RBX: 00007f65405d6090 RCX: 00007f654038eba9 [ 288.563648][ T9157] loop6: detected capacity change from 0 to 40427 [ 288.565109][ T9150] RDX: 00000000000000b8 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 288.565125][ T9150] RBP: 00007f6540411e19 R08: 0000000000000000 R09: 0000000000000000 [ 288.565137][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.565148][ T9150] R13: 00007f65405d6128 R14: 00007f65405d6090 R15: 00007fff39eecca8 [ 288.565178][ T9150] [ 288.613362][ T9152] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 288.623580][ T9152] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 288.661092][ T9157] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 288.664468][ T9152] F2FS-fs (loop0): invalid crc value [ 288.712786][ T9152] F2FS-fs (loop0): Found nat_bits in checkpoint [ 288.716836][ T9157] F2FS-fs (loop6): Image doesn't support compression [ 288.744756][ T9157] F2FS-fs (loop6): Image doesn't support compression [ 288.753599][ T9157] F2FS-fs (loop6): invalid crc value [ 288.785579][ T9157] F2FS-fs (loop6): Found nat_bits in checkpoint [ 288.882131][ T9152] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 288.934715][ T9152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 288.944597][ T9152] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 288.966448][ T9157] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 288.976516][ T9152] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 289.051159][ T27] audit: type=1800 audit(1758181871.642:36): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.627" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 289.076826][ T9157] syz.6.627: attempt to access beyond end of device [ 289.076826][ T9157] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 289.113603][ T9157] syz.6.627: attempt to access beyond end of device [ 289.113603][ T9157] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 289.186533][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.6.627'. [ 289.192820][ T9152] F2FS-fs (loop0): f2fs_new_node_page: inconsistent nat entry, ino:5, nid:5, blkaddr:4608, ver:0, flag:0 [ 289.203548][ T9157] F2FS-fs (loop6): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 289.357063][ T7581] syz-executor: attempt to access beyond end of device [ 289.357063][ T7581] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 289.404451][ T7581] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 289.762155][ T9169] F2FS-fs (loop0): f2fs_new_node_page: inconsistent nat entry, ino:7, nid:7, blkaddr:4610, ver:0, flag:0 [ 289.827964][ T9169] FAULT_INJECTION: forcing a failure. [ 289.827964][ T9169] name failslab, interval 1, probability 0, space 0, times 0 [ 289.884558][ T9169] CPU: 0 PID: 9169 Comm: syz.0.625 Not tainted syzkaller #0 [ 289.891910][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.901990][ T9169] Call Trace: [ 289.905300][ T9169] [ 289.908244][ T9169] dump_stack_lvl+0x16c/0x230 [ 289.912946][ T9169] ? show_regs_print_info+0x20/0x20 [ 289.918170][ T9169] ? load_image+0x3b0/0x3b0 [ 289.922707][ T9169] ? __might_sleep+0xe0/0xe0 [ 289.927320][ T9169] ? __lock_acquire+0x7c80/0x7c80 [ 289.932348][ T9169] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 289.938137][ T9169] should_fail_ex+0x39d/0x4d0 [ 289.942828][ T9169] should_failslab+0x9/0x20 [ 289.947343][ T9169] slab_pre_alloc_hook+0x59/0x310 [ 289.952379][ T9169] kmem_cache_alloc+0x5a/0x2e0 [ 289.957169][ T9169] ? getname_flags+0xbb/0x500 [ 289.961862][ T9169] getname_flags+0xbb/0x500 [ 289.966367][ T9169] __x64_sys_mkdirat+0x7c/0xa0 [ 289.971147][ T9169] do_syscall_64+0x55/0xb0 [ 289.975576][ T9169] ? clear_bhb_loop+0x40/0x90 [ 289.980253][ T9169] ? clear_bhb_loop+0x40/0x90 [ 289.984943][ T9169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.991060][ T9169] RIP: 0033:0x7f775618eba9 [ 289.995477][ T9169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.015120][ T9169] RSP: 002b:00007f7756f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 290.023533][ T9169] RAX: ffffffffffffffda RBX: 00007f77563d6180 RCX: 00007f775618eba9 [ 290.031502][ T9169] RDX: 00000000000000b8 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 290.039475][ T9169] RBP: 00007f7756f89090 R08: 0000000000000000 R09: 0000000000000000 [ 290.047441][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.055403][ T9169] R13: 00007f77563d6218 R14: 00007f77563d6180 R15: 00007ffc09640848 [ 290.063382][ T9169] [ 291.780518][ T9185] FAULT_INJECTION: forcing a failure. [ 291.780518][ T9185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.800138][ T9185] CPU: 0 PID: 9185 Comm: syz.6.632 Not tainted syzkaller #0 [ 291.807476][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.817552][ T9185] Call Trace: [ 291.820848][ T9185] [ 291.823790][ T9185] dump_stack_lvl+0x16c/0x230 [ 291.828498][ T9185] ? show_regs_print_info+0x20/0x20 [ 291.833722][ T9185] ? load_image+0x3b0/0x3b0 [ 291.838248][ T9185] ? __might_fault+0xaa/0x120 [ 291.842949][ T9185] ? __lock_acquire+0x7c80/0x7c80 [ 291.847989][ T9185] should_fail_ex+0x39d/0x4d0 [ 291.852666][ T9185] _copy_from_user+0x2f/0xe0 [ 291.857251][ T9185] __sys_bpf+0x1e9/0x800 [ 291.861521][ T9185] ? bpf_link_show_fdinfo+0x350/0x350 [ 291.866892][ T9185] ? lock_chain_count+0x20/0x20 [ 291.871738][ T9185] __x64_sys_bpf+0x7c/0x90 [ 291.876141][ T9185] do_syscall_64+0x55/0xb0 [ 291.880552][ T9185] ? clear_bhb_loop+0x40/0x90 [ 291.885224][ T9185] ? clear_bhb_loop+0x40/0x90 [ 291.889891][ T9185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.895777][ T9185] RIP: 0033:0x7f1d5e38eba9 [ 291.900182][ T9185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.919793][ T9185] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.928209][ T9185] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 291.936176][ T9185] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 0000000000000000 [ 291.944161][ T9185] RBP: 00007f1d5f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 291.952135][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.960105][ T9185] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 291.968083][ T9185] [ 292.322208][ T9191] FAULT_INJECTION: forcing a failure. [ 292.322208][ T9191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.340292][ T9191] CPU: 0 PID: 9191 Comm: syz.6.636 Not tainted syzkaller #0 [ 292.347617][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 292.357692][ T9191] Call Trace: [ 292.360987][ T9191] [ 292.363943][ T9191] dump_stack_lvl+0x16c/0x230 [ 292.368645][ T9191] ? show_regs_print_info+0x20/0x20 [ 292.373864][ T9191] ? load_image+0x3b0/0x3b0 [ 292.378410][ T9191] ? __might_fault+0xaa/0x120 [ 292.383103][ T9191] ? __lock_acquire+0x7c80/0x7c80 [ 292.388141][ T9191] should_fail_ex+0x39d/0x4d0 [ 292.392844][ T9191] _copy_from_user+0x2f/0xe0 [ 292.397474][ T9191] ___sys_sendmsg+0x159/0x290 [ 292.402170][ T9191] ? __sys_sendmsg+0x270/0x270 [ 292.406970][ T9191] ? __lock_acquire+0x7c80/0x7c80 [ 292.412029][ T9191] __se_sys_sendmsg+0x1a5/0x270 [ 292.416902][ T9191] ? __x64_sys_sendmsg+0x80/0x80 [ 292.421870][ T9191] ? lockdep_hardirqs_on+0x98/0x150 [ 292.427093][ T9191] do_syscall_64+0x55/0xb0 [ 292.431525][ T9191] ? clear_bhb_loop+0x40/0x90 [ 292.436213][ T9191] ? clear_bhb_loop+0x40/0x90 [ 292.440910][ T9191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.446824][ T9191] RIP: 0033:0x7f1d5e38eba9 [ 292.451249][ T9191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.470875][ T9191] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.479313][ T9191] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 292.487313][ T9191] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 292.495311][ T9191] RBP: 00007f1d5f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 292.503294][ T9191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.511277][ T9191] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 292.519284][ T9191] [ 293.098599][ T9194] loop5: detected capacity change from 0 to 40427 [ 293.150522][ T9194] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 293.172837][ T9194] F2FS-fs (loop5): Image doesn't support compression [ 293.212175][ T9194] F2FS-fs (loop5): Image doesn't support compression [ 293.248134][ T9194] F2FS-fs (loop5): invalid crc value [ 293.268384][ T9194] F2FS-fs (loop5): Found nat_bits in checkpoint [ 293.337401][ T9194] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 293.458016][ T27] audit: type=1800 audit(1758181876.052:37): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.638" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 293.494013][ T9194] syz.5.638: attempt to access beyond end of device [ 293.494013][ T9194] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 293.560544][ T9194] syz.5.638: attempt to access beyond end of device [ 293.560544][ T9194] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 293.581150][ T9203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.638'. [ 293.600681][ T9195] loop7: detected capacity change from 0 to 131072 [ 293.618955][ T9195] F2FS-fs (loop7): invalid crc value [ 293.631227][ T9194] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 293.663575][ T9195] F2FS-fs (loop7): Found nat_bits in checkpoint [ 293.744214][ T9195] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 293.770781][ T7563] syz-executor: attempt to access beyond end of device [ 293.770781][ T7563] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 293.785654][ T7563] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.796539][ T9195] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 294.656641][ T9219] loop5: detected capacity change from 0 to 512 [ 294.691087][ T9219] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.916943][ T9219] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #17: comm syz.5.641: iget: bad i_size value: -6917529027641081756 [ 294.933369][ T9219] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.641: couldn't read orphan inode 17 (err -117) [ 294.948686][ T9219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.130062][ T9219] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.641: bg 0: block 65: padding at end of block bitmap is not set [ 295.249732][ T9219] Quota error (device loop5): write_blk: dquota write failed [ 295.325493][ T9219] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 295.363836][ T9219] EXT4-fs error (device loop5): ext4_acquire_dquot:6940: comm syz.5.641: Failed to acquire dquot type 0 [ 295.611672][ T9231] Quota error (device loop5): do_check_range: Getting block 144 out of range 0-5 [ 295.955883][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.135377][ T9233] loop5: detected capacity change from 0 to 512 [ 296.143179][ T9233] ext4: Unknown parameter 'seclabel' [ 296.210249][ T5789] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.218129][ T9235] loop6: detected capacity change from 0 to 512 [ 296.230137][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.644'. [ 296.259278][ T9235] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 296.384100][ T9235] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #17: comm syz.6.645: iget: bad i_size value: -6917529027641081756 [ 296.465288][ T9235] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.645: couldn't read orphan inode 17 (err -117) [ 296.549417][ T9235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.619410][ T9235] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.645: bg 0: block 65: padding at end of block bitmap is not set [ 296.695310][ T9235] Quota error (device loop6): write_blk: dquota write failed [ 296.713695][ T9241] FAULT_INJECTION: forcing a failure. [ 296.713695][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 296.746549][ T9235] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 296.774447][ T9235] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.645: Failed to acquire dquot type 0 [ 296.824384][ T9241] CPU: 1 PID: 9241 Comm: syz.6.645 Not tainted syzkaller #0 [ 296.831725][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 296.841843][ T9241] Call Trace: [ 296.845141][ T9241] [ 296.848115][ T9241] dump_stack_lvl+0x16c/0x230 [ 296.852914][ T9241] ? show_regs_print_info+0x20/0x20 [ 296.858139][ T9241] ? load_image+0x3b0/0x3b0 [ 296.862670][ T9241] ? __might_sleep+0xe0/0xe0 [ 296.867283][ T9241] ? __lock_acquire+0x7c80/0x7c80 [ 296.872331][ T9241] should_fail_ex+0x39d/0x4d0 [ 296.877035][ T9241] should_failslab+0x9/0x20 [ 296.881564][ T9241] slab_pre_alloc_hook+0x59/0x310 [ 296.886628][ T9241] kmem_cache_alloc+0x5a/0x2e0 [ 296.891500][ T9241] ? getname_flags+0xbb/0x500 [ 296.896214][ T9241] getname_flags+0xbb/0x500 [ 296.900761][ T9241] __se_sys_quotactl+0x1d8/0x950 [ 296.905738][ T9241] ? __x64_sys_quotactl+0xb0/0xb0 [ 296.910799][ T9241] ? lockdep_hardirqs_on+0x98/0x150 [ 296.916030][ T9241] do_syscall_64+0x55/0xb0 [ 296.921438][ T9241] ? clear_bhb_loop+0x40/0x90 [ 296.926133][ T9241] ? clear_bhb_loop+0x40/0x90 [ 296.930840][ T9241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.936747][ T9241] RIP: 0033:0x7f1d5e38eba9 [ 296.941166][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.960770][ T9241] RSP: 002b:00007f1d5f1af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 296.969184][ T9241] RAX: ffffffffffffffda RBX: 00007f1d5e5d6090 RCX: 00007f1d5e38eba9 [ 296.977148][ T9241] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffff80000901 [ 296.985111][ T9241] RBP: 00007f1d5f1af090 R08: 0000000000000000 R09: 0000000000000000 [ 296.993126][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.001095][ T9241] R13: 00007f1d5e5d6128 R14: 00007f1d5e5d6090 R15: 00007ffe6fccbb88 [ 297.009072][ T9241] [ 297.064532][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.644'. [ 297.082877][ T9243] loop0: detected capacity change from 0 to 512 [ 297.103744][ T9243] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.187356][ T9243] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #17: comm syz.0.646: iget: bad i_size value: -6917529027641081756 [ 297.205776][ T7581] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.256993][ T9243] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.646: couldn't read orphan inode 17 (err -117) [ 297.281201][ T9243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.367061][ T9243] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.646: bg 0: block 65: padding at end of block bitmap is not set [ 297.427103][ T9243] Quota error (device loop0): write_blk: dquota write failed [ 297.444020][ T9248] loop6: detected capacity change from 0 to 512 [ 297.452982][ T9243] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 297.493496][ T9248] EXT4-fs (loop6): orphan cleanup on readonly fs [ 297.501980][ T9247] Quota error (device loop0): do_check_range: Getting block 144 out of range 0-5 [ 297.513469][ T9248] EXT4-fs warning (device loop6): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 297.529928][ T9248] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 297.537563][ T9243] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.646: Failed to acquire dquot type 0 [ 297.538145][ T9248] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.647: bad orphan inode 768 [ 297.560960][ T9248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.616630][ T7581] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.617779][ T9252] loop5: detected capacity change from 0 to 16 [ 297.647074][ T9252] erofs: (device loop5): mounted with root inode @ nid 36. [ 297.742687][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.824295][ T9254] loop6: detected capacity change from 0 to 16 [ 297.874460][ T9254] erofs: (device loop6): mounted with root inode @ nid 36. [ 297.883238][ T9254] FAULT_INJECTION: forcing a failure. [ 297.883238][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 297.943578][ T9254] CPU: 0 PID: 9254 Comm: syz.6.649 Not tainted syzkaller #0 [ 297.950922][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.961000][ T9254] Call Trace: [ 297.964296][ T9254] [ 297.967243][ T9254] dump_stack_lvl+0x16c/0x230 [ 297.971945][ T9254] ? show_regs_print_info+0x20/0x20 [ 297.977166][ T9254] ? load_image+0x3b0/0x3b0 [ 297.981712][ T9254] ? __lock_acquire+0x7c80/0x7c80 [ 297.986780][ T9254] should_fail_ex+0x39d/0x4d0 [ 297.991478][ T9254] should_failslab+0x9/0x20 [ 297.995996][ T9254] slab_pre_alloc_hook+0x59/0x310 [ 298.001040][ T9254] kmem_cache_alloc+0x5a/0x2e0 [ 298.005813][ T9254] ? create_new_namespaces+0x34/0x6f0 [ 298.011199][ T9254] create_new_namespaces+0x34/0x6f0 [ 298.016415][ T9254] ? do_sys_openat2+0x168/0x1c0 [ 298.021285][ T9254] __se_sys_setns+0x2d0/0x1700 [ 298.026067][ T9254] ? __x64_sys_setns+0x60/0x60 [ 298.030851][ T9254] ? lockdep_hardirqs_on+0x98/0x150 [ 298.036057][ T9254] do_syscall_64+0x55/0xb0 [ 298.040485][ T9254] ? clear_bhb_loop+0x40/0x90 [ 298.045162][ T9254] ? clear_bhb_loop+0x40/0x90 [ 298.049834][ T9254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.055731][ T9254] RIP: 0033:0x7f1d5e38eba9 [ 298.060138][ T9254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.079746][ T9254] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 298.088153][ T9254] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 298.096204][ T9254] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000003 [ 298.104166][ T9254] RBP: 00007f1d5f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 298.112127][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.120088][ T9254] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 298.128065][ T9254] [ 299.199747][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 299.244519][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 299.470474][ T9256] loop0: detected capacity change from 0 to 40427 [ 299.488593][ T9256] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 299.544618][ T9256] F2FS-fs (loop0): Image doesn't support compression [ 299.552539][ T9256] F2FS-fs (loop0): Image doesn't support compression [ 299.575797][ T9270] loop7: detected capacity change from 0 to 16 [ 299.601879][ T9256] F2FS-fs (loop0): invalid crc value [ 299.619266][ T9270] erofs: (device loop7): mounted with root inode @ nid 36. [ 299.652870][ T9256] F2FS-fs (loop0): Found nat_bits in checkpoint [ 299.720187][ T9275] loop5: detected capacity change from 0 to 16 [ 299.764060][ T9275] erofs: (device loop5): mounted with root inode @ nid 36. [ 299.806951][ T9270] syz.7.654: attempt to access beyond end of device [ 299.806951][ T9270] loop7: rw=0, sector=48, nr_sectors = 16 limit=16 [ 299.817802][ T9256] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 299.910065][ T27] audit: type=1800 audit(1758181882.492:38): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.650" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 299.945894][ T9256] syz.0.650: attempt to access beyond end of device [ 299.945894][ T9256] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 299.960548][ T9256] syz.0.650: attempt to access beyond end of device [ 299.960548][ T9256] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 299.992809][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 300.015616][ T9263] loop6: detected capacity change from 0 to 32768 [ 300.046135][ T9263] (syz.6.652,9263,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 300.076270][ T9256] F2FS-fs (loop0): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 300.101097][ T9263] (syz.6.652,9263,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 300.151843][ T5790] syz-executor: attempt to access beyond end of device [ 300.151843][ T5790] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 300.158900][ T9281] loop7: detected capacity change from 0 to 16 [ 300.182853][ T9281] erofs: (device loop7): mounted with root inode @ nid 36. [ 300.203547][ T9281] FAULT_INJECTION: forcing a failure. [ 300.203547][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 300.224597][ T5790] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 300.244430][ T9281] CPU: 0 PID: 9281 Comm: syz.7.657 Not tainted syzkaller #0 [ 300.251777][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.262047][ T9281] Call Trace: [ 300.265343][ T9281] [ 300.268280][ T9281] dump_stack_lvl+0x16c/0x230 [ 300.272955][ T9281] ? show_regs_print_info+0x20/0x20 [ 300.278174][ T9281] ? load_image+0x3b0/0x3b0 [ 300.282681][ T9281] ? __lock_acquire+0x7c80/0x7c80 [ 300.287699][ T9281] should_fail_ex+0x39d/0x4d0 [ 300.292372][ T9281] should_failslab+0x9/0x20 [ 300.296956][ T9281] slab_pre_alloc_hook+0x59/0x310 [ 300.301983][ T9281] kmem_cache_alloc+0x5a/0x2e0 [ 300.306745][ T9281] ? create_new_namespaces+0x34/0x6f0 [ 300.312113][ T9281] create_new_namespaces+0x34/0x6f0 [ 300.317303][ T9281] ? do_sys_openat2+0x168/0x1c0 [ 300.322162][ T9281] __se_sys_setns+0x2d0/0x1700 [ 300.326922][ T9281] ? __x64_sys_setns+0x60/0x60 [ 300.331680][ T9281] ? lockdep_hardirqs_on+0x98/0x150 [ 300.336875][ T9281] do_syscall_64+0x55/0xb0 [ 300.341281][ T9281] ? clear_bhb_loop+0x40/0x90 [ 300.345949][ T9281] ? clear_bhb_loop+0x40/0x90 [ 300.350617][ T9281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.356507][ T9281] RIP: 0033:0x7f503798eba9 [ 300.360917][ T9281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.380530][ T9281] RSP: 002b:00007f50388e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 300.388941][ T9281] RAX: ffffffffffffffda RBX: 00007f5037bd5fa0 RCX: 00007f503798eba9 [ 300.396907][ T9281] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000003 [ 300.404871][ T9281] RBP: 00007f50388e1090 R08: 0000000000000000 R09: 0000000000000000 [ 300.412831][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.420792][ T9281] R13: 00007f5037bd6038 R14: 00007f5037bd5fa0 R15: 00007ffd42461488 [ 300.428764][ T9281] [ 300.438886][ T7893] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 300.676921][ T7893] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 300.687503][ T7893] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 300.696630][ T7893] usb 6-1: can't read configurations, error -22 [ 300.868555][ T7893] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 301.047369][ T9287] loop0: detected capacity change from 0 to 16 [ 301.065367][ T7893] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 301.069067][ T9287] erofs: (device loop0): mounted with root inode @ nid 36. [ 301.092127][ T7893] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 301.124242][ T7893] usb 6-1: can't read configurations, error -22 [ 301.129535][ T9287] syz.0.658: attempt to access beyond end of device [ 301.129535][ T9287] loop0: rw=0, sector=48, nr_sectors = 16 limit=16 [ 301.151768][ T7893] usb usb6-port1: attempt power cycle [ 301.154764][ T9287] syz.0.658: attempt to access beyond end of device [ 301.154764][ T9287] loop0: rw=0, sector=48, nr_sectors = 16 limit=16 [ 301.166903][ T9283] loop6: detected capacity change from 0 to 32768 [ 301.181481][ T9287] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 301.210475][ T9283] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.659 (9283) [ 301.240967][ T9287] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 301.306250][ T9283] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 301.344862][ T9283] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 301.363768][ T9283] BTRFS info (device loop6): enabling disk space caching [ 301.414434][ T9283] BTRFS info (device loop6): enabling auto defrag [ 301.420930][ T9283] BTRFS info (device loop6): doing ref verification [ 301.450919][ T9283] BTRFS info (device loop6): use no compression [ 301.471443][ T9283] BTRFS info (device loop6): force clearing of disk cache [ 301.491767][ T9283] BTRFS info (device loop6): disabling disk space caching [ 301.581224][ T9285] loop7: detected capacity change from 0 to 40427 [ 301.588821][ T7893] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 301.634656][ T9285] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 301.648891][ T9285] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 301.657536][ T7893] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 301.695982][ T7893] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 301.742536][ T7893] usb 6-1: can't read configurations, error -22 [ 301.761615][ T9285] F2FS-fs (loop7): invalid crc value [ 301.782492][ T9285] F2FS-fs (loop7): Found nat_bits in checkpoint [ 301.786766][ T9283] BTRFS info (device loop6): enabling ssd optimizations [ 301.816321][ T9283] BTRFS info (device loop6): auto enabling async discard [ 301.853637][ T9283] BTRFS info (device loop6): rebuilding free space tree [ 301.922457][ T9283] BTRFS info (device loop6): disabling free space tree [ 301.938554][ T9285] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 301.944560][ T7893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 301.947564][ T9285] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 301.970697][ T9283] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 302.002833][ T9283] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 302.021092][ T7893] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 302.046531][ T7893] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 302.060531][ T27] audit: type=1804 audit(1758181884.652:39): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.660" name="/newroot/66/file0/bus" dev="loop7" ino=10 res=1 errno=0 [ 302.074598][ T7893] usb 6-1: can't read configurations, error -22 [ 302.124970][ T7893] usb usb6-port1: unable to enumerate USB device [ 302.199171][ T7581] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 304.623426][ T9336] ubi0: attaching mtd0 [ 304.634419][ T9336] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 305.144134][ T9330] loop0: detected capacity change from 0 to 40427 [ 305.182921][ T9330] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 305.222568][ T9330] F2FS-fs (loop0): Image doesn't support compression [ 305.236551][ T9330] F2FS-fs (loop0): Image doesn't support compression [ 305.268112][ T9328] loop5: detected capacity change from 0 to 40427 [ 305.275618][ T9330] F2FS-fs (loop0): invalid crc value [ 305.298105][ T9330] F2FS-fs (loop0): Found nat_bits in checkpoint [ 305.338762][ T9328] F2FS-fs (loop5): invalid crc value [ 305.346226][ T9344] FAULT_INJECTION: forcing a failure. [ 305.346226][ T9344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.364175][ T9344] CPU: 1 PID: 9344 Comm: syz.7.667 Not tainted syzkaller #0 [ 305.371548][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.381623][ T9344] Call Trace: [ 305.384921][ T9344] [ 305.387867][ T9344] dump_stack_lvl+0x16c/0x230 [ 305.392571][ T9344] ? show_regs_print_info+0x20/0x20 [ 305.397794][ T9344] ? load_image+0x3b0/0x3b0 [ 305.402320][ T9344] ? __might_fault+0xaa/0x120 [ 305.407013][ T9344] ? __lock_acquire+0x7c80/0x7c80 [ 305.412059][ T9344] should_fail_ex+0x39d/0x4d0 [ 305.416853][ T9344] _copy_from_iter+0x1d3/0x1290 [ 305.421728][ T9344] ? find_vmap_area+0xfc/0x110 [ 305.426510][ T9344] ? __lock_acquire+0x7c80/0x7c80 [ 305.431560][ T9344] ? copyout_mc+0x70/0x70 [ 305.435903][ T9344] ? do_raw_spin_unlock+0x121/0x230 [ 305.441117][ T9344] ? _raw_spin_unlock+0x28/0x40 [ 305.446005][ T9344] ? find_vmap_area+0xfc/0x110 [ 305.450784][ T9344] ? __phys_addr_symbol+0x2f/0x70 [ 305.455828][ T9344] ? __check_object_size+0x506/0xa30 [ 305.461165][ T9344] default_write_copy+0xf3/0x150 [ 305.466132][ T9344] interleaved_copy+0x212/0x2b0 [ 305.470995][ T9344] ? fill_silence+0x240/0x240 [ 305.475687][ T9344] ? __snd_pcm_lib_xfer+0x1c40/0x1c40 [ 305.481074][ T9344] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 305.487097][ T9344] ? lock_chain_count+0x20/0x20 [ 305.491959][ T9344] ? _raw_spin_lock_irq+0xaf/0xe0 [ 305.496999][ T9344] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 305.502388][ T9344] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.507604][ T9344] __snd_pcm_lib_xfer+0x129c/0x1c40 [ 305.512831][ T9344] ? __snd_pcm_lib_xfer+0x1c40/0x1c40 [ 305.518221][ T9344] ? fill_silence+0x240/0x240 [ 305.522915][ T9344] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 305.528567][ T9344] ? pcm_lib_apply_appl_ptr+0x510/0x510 [ 305.534125][ T9344] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 305.539777][ T9344] ? mutex_lock_nested+0x20/0x20 [ 305.544735][ T9344] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.546638][ T9330] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 305.549930][ T9344] snd_pcm_oss_write3+0x1bc/0x320 [ 305.562415][ T9344] snd_pcm_oss_write+0xa9c/0x1120 [ 305.567475][ T9344] ? snd_pcm_oss_read+0x8c0/0x8c0 [ 305.572518][ T9344] ? common_file_perm+0x198/0x1f0 [ 305.577559][ T9344] ? fsnotify_perm+0x5d/0x5e0 [ 305.582252][ T9344] ? security_file_permission+0x79/0xa0 [ 305.587859][ T9344] ? snd_pcm_oss_read+0x8c0/0x8c0 [ 305.592896][ T9344] vfs_write+0x288/0x940 [ 305.597160][ T9344] ? file_end_write+0x250/0x250 [ 305.602037][ T9344] ? __fget_files+0x28/0x4d0 [ 305.606644][ T9344] ? __fget_files+0x44a/0x4d0 [ 305.611348][ T9344] ? __fdget_pos+0x1d8/0x330 [ 305.614815][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 305.615979][ T9344] ? ksys_write+0x75/0x250 [ 305.627952][ T9344] ksys_write+0x147/0x250 [ 305.632304][ T9344] ? __ia32_sys_read+0x90/0x90 [ 305.637091][ T9344] ? lockdep_hardirqs_on+0x98/0x150 [ 305.642314][ T9344] do_syscall_64+0x55/0xb0 [ 305.646746][ T9344] ? clear_bhb_loop+0x40/0x90 [ 305.651440][ T9344] ? clear_bhb_loop+0x40/0x90 [ 305.656129][ T9344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.662137][ T9344] RIP: 0033:0x7f503798eba9 [ 305.666574][ T9344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.683499][ T9330] syz.0.666: attempt to access beyond end of device [ 305.683499][ T9330] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 305.686179][ T9344] RSP: 002b:00007f50388e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.686202][ T9344] RAX: ffffffffffffffda RBX: 00007f5037bd5fa0 RCX: 00007f503798eba9 [ 305.686214][ T9344] RDX: 00000000000004cd RSI: 0000000000000000 RDI: 0000000000000003 [ 305.686223][ T9344] RBP: 00007f50388e1090 R08: 0000000000000000 R09: 0000000000000000 [ 305.686233][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.686243][ T9344] R13: 00007f5037bd6038 R14: 00007f5037bd5fa0 R15: 00007ffd42461488 [ 305.686267][ T9344] [ 305.724077][ T9330] syz.0.666: attempt to access beyond end of device [ 305.724077][ T9330] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 305.733929][ T27] audit: type=1800 audit(1758181888.262:40): pid=9330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.666" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 305.766376][ T9328] F2FS-fs (loop5): Found nat_bits in checkpoint [ 305.796065][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 305.806487][ T9330] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 305.852898][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 305.860004][ T5790] syz-executor: attempt to access beyond end of device [ 305.860004][ T5790] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 305.899971][ T5790] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 305.904505][ T8] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.921119][ T8] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 305.938547][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 305.962601][ T8] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 305.977064][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.990896][ T9350] FAULT_INJECTION: forcing a failure. [ 305.990896][ T9350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.993100][ T8] usb 7-1: config 0 descriptor?? [ 306.009384][ T9328] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 306.059508][ T9350] CPU: 0 PID: 9350 Comm: syz.7.671 Not tainted syzkaller #0 [ 306.066850][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.076925][ T9350] Call Trace: [ 306.080222][ T9350] [ 306.083173][ T9350] dump_stack_lvl+0x16c/0x230 [ 306.087870][ T9350] ? show_regs_print_info+0x20/0x20 [ 306.093084][ T9350] ? load_image+0x3b0/0x3b0 [ 306.097607][ T9350] ? __might_fault+0xaa/0x120 [ 306.102303][ T9350] ? __lock_acquire+0x7c80/0x7c80 [ 306.107355][ T9350] should_fail_ex+0x39d/0x4d0 [ 306.112070][ T9350] _copy_from_user+0x2f/0xe0 [ 306.116690][ T9350] __sys_bpf+0x1e9/0x800 [ 306.120954][ T9350] ? bpf_link_show_fdinfo+0x350/0x350 [ 306.126448][ T9350] ? lock_chain_count+0x20/0x20 [ 306.131330][ T9350] __x64_sys_bpf+0x7c/0x90 [ 306.135787][ T9350] do_syscall_64+0x55/0xb0 [ 306.140222][ T9350] ? clear_bhb_loop+0x40/0x90 [ 306.144918][ T9350] ? clear_bhb_loop+0x40/0x90 [ 306.149616][ T9350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.155530][ T9350] RIP: 0033:0x7f503798eba9 [ 306.159955][ T9350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.179577][ T9350] RSP: 002b:00007f50388e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.187988][ T9350] RAX: ffffffffffffffda RBX: 00007f5037bd5fa0 RCX: 00007f503798eba9 [ 306.195960][ T9350] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 306.203920][ T9350] RBP: 00007f50388e1090 R08: 0000000000000000 R09: 0000000000000000 [ 306.211889][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.219853][ T9350] R13: 00007f5037bd6038 R14: 00007f5037bd5fa0 R15: 00007ffd42461488 [ 306.227826][ T9350] [ 306.256052][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.265725][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.290871][ T7563] syz-executor: attempt to access beyond end of device [ 306.290871][ T7563] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.299869][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.334906][ T7563] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 306.365247][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.735838][ T8] betop 0003:20BC:5500.0005: unbalanced collection at end of report description [ 306.745799][ T8] betop 0003:20BC:5500.0005: parse failed [ 306.751591][ T8] betop: probe of 0003:20BC:5500.0005 failed with error -22 [ 307.130726][ T9362] Device name cannot be null; rc = [-22] [ 307.145712][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.154524][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.536816][ T9370] FAULT_INJECTION: forcing a failure. [ 307.536816][ T9370] name failslab, interval 1, probability 0, space 0, times 0 [ 307.550284][ T9370] CPU: 0 PID: 9370 Comm: syz.0.676 Not tainted syzkaller #0 [ 307.557606][ T9370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.567676][ T9370] Call Trace: [ 307.570967][ T9370] [ 307.573909][ T9370] dump_stack_lvl+0x16c/0x230 [ 307.578607][ T9370] ? show_regs_print_info+0x20/0x20 [ 307.583993][ T9370] ? load_image+0x3b0/0x3b0 [ 307.588521][ T9370] ? __might_sleep+0xe0/0xe0 [ 307.593122][ T9370] ? __lock_acquire+0x7c80/0x7c80 [ 307.598162][ T9370] should_fail_ex+0x39d/0x4d0 [ 307.602863][ T9370] should_failslab+0x9/0x20 [ 307.607382][ T9370] slab_pre_alloc_hook+0x59/0x310 [ 307.612429][ T9370] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 307.618177][ T9370] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 307.623924][ T9370] __kmem_cache_alloc_node+0x53/0x260 [ 307.629328][ T9370] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 307.635072][ T9370] __kmalloc+0xa4/0x240 [ 307.639248][ T9370] tomoyo_realpath_from_path+0xe3/0x5d0 [ 307.644830][ T9370] tomoyo_path_number_perm+0x1ea/0x590 [ 307.650311][ T9370] ? tomoyo_path_number_perm+0x1ba/0x590 [ 307.655965][ T9370] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 307.661473][ T9370] ? ksys_write+0x1c1/0x250 [ 307.666032][ T9370] ? __fget_files+0x28/0x4d0 [ 307.670653][ T9370] security_file_ioctl+0x70/0xa0 [ 307.675609][ T9370] __se_sys_ioctl+0x48/0x170 [ 307.680216][ T9370] do_syscall_64+0x55/0xb0 [ 307.684657][ T9370] ? clear_bhb_loop+0x40/0x90 [ 307.689356][ T9370] ? clear_bhb_loop+0x40/0x90 [ 307.694086][ T9370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.700015][ T9370] RIP: 0033:0x7f775618eba9 [ 307.704443][ T9370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.724071][ T9370] RSP: 002b:00007f7756fcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.732512][ T9370] RAX: ffffffffffffffda RBX: 00007f77563d5fa0 RCX: 00007f775618eba9 [ 307.740505][ T9370] RDX: 0000200000000140 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 307.748496][ T9370] RBP: 00007f7756fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 307.756486][ T9370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.764477][ T9370] R13: 00007f77563d6038 R14: 00007f77563d5fa0 R15: 00007ffc09640848 [ 307.772482][ T9370] [ 307.784783][ T9370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.129564][ T9375] loop7: detected capacity change from 0 to 128 [ 308.143251][ T9375] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 308.946366][ T9375] FAT-fs (loop7): FAT read failed (blocknr 128) [ 309.024623][ T5871] usb 7-1: USB disconnect, device number 10 [ 309.214483][ T5106] Bluetooth: hci2: command 0x0406 tx timeout [ 309.395119][ T9393] FAULT_INJECTION: forcing a failure. [ 309.395119][ T9393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.456326][ T9389] loop7: detected capacity change from 0 to 4096 [ 309.459406][ T9393] CPU: 1 PID: 9393 Comm: syz.6.684 Not tainted syzkaller #0 [ 309.470075][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.480155][ T9393] Call Trace: [ 309.483449][ T9393] [ 309.486392][ T9393] dump_stack_lvl+0x16c/0x230 [ 309.491092][ T9393] ? show_regs_print_info+0x20/0x20 [ 309.496318][ T9393] ? load_image+0x3b0/0x3b0 [ 309.500862][ T9393] ? __might_fault+0xaa/0x120 [ 309.505556][ T9393] ? __lock_acquire+0x7c80/0x7c80 [ 309.510587][ T9393] ? vfs_write+0x586/0x940 [ 309.515021][ T9393] should_fail_ex+0x39d/0x4d0 [ 309.519718][ T9393] _copy_from_user+0x2f/0xe0 [ 309.524356][ T9393] get_timespec64+0x8f/0x1a0 [ 309.528949][ T9393] ? timespec64_add_safe+0x1e0/0x1e0 [ 309.534248][ T9393] __se_sys_clock_nanosleep+0x1af/0x370 [ 309.539790][ T9393] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 309.545417][ T9393] ? lockdep_hardirqs_on+0x98/0x150 [ 309.550612][ T9393] do_syscall_64+0x55/0xb0 [ 309.555024][ T9393] ? clear_bhb_loop+0x40/0x90 [ 309.559690][ T9393] ? clear_bhb_loop+0x40/0x90 [ 309.564360][ T9393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.570256][ T9393] RIP: 0033:0x7f1d5e38eba9 [ 309.574662][ T9393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.594283][ T9393] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 309.602692][ T9393] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 309.610660][ T9393] RDX: 0000200000000100 RSI: 00000000fffffdfc RDI: ffffffffffffffff [ 309.618621][ T9393] RBP: 00007f1d5f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 309.626581][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.634542][ T9393] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 309.642513][ T9393] [ 309.645663][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.742967][ T9389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.862771][ T9381] loop5: detected capacity change from 0 to 40427 [ 309.908413][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.686'. [ 309.977911][ T9381] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 310.020110][ T9381] F2FS-fs (loop5): Image doesn't support compression [ 310.034062][ T7679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.048689][ T9381] F2FS-fs (loop5): Image doesn't support compression [ 310.076117][ T9381] F2FS-fs (loop5): invalid crc value [ 310.174032][ T9381] F2FS-fs (loop5): Found nat_bits in checkpoint [ 310.374671][ T9381] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 310.438572][ T27] audit: type=1800 audit(1758181893.032:41): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.679" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 310.458834][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.578974][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'. [ 310.608228][ T9381] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 310.801754][ T7563] syz-executor: attempt to access beyond end of device [ 310.801754][ T7563] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.833456][ T7563] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 311.553738][ T9434] FAULT_INJECTION: forcing a failure. [ 311.553738][ T9434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.619961][ T9434] CPU: 0 PID: 9434 Comm: syz.0.696 Not tainted syzkaller #0 [ 311.627290][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.637338][ T9434] Call Trace: [ 311.640608][ T9434] [ 311.643532][ T9434] dump_stack_lvl+0x16c/0x230 [ 311.648208][ T9434] ? show_regs_print_info+0x20/0x20 [ 311.653395][ T9434] ? load_image+0x3b0/0x3b0 [ 311.657904][ T9434] ? __might_fault+0xaa/0x120 [ 311.662570][ T9434] ? __lock_acquire+0x7c80/0x7c80 [ 311.667585][ T9434] should_fail_ex+0x39d/0x4d0 [ 311.672257][ T9434] _copy_from_user+0x2f/0xe0 [ 311.676838][ T9434] __sys_bpf+0x1e9/0x800 [ 311.681073][ T9434] ? bpf_link_show_fdinfo+0x350/0x350 [ 311.686441][ T9434] ? lock_chain_count+0x20/0x20 [ 311.691283][ T9434] __x64_sys_bpf+0x7c/0x90 [ 311.695711][ T9434] do_syscall_64+0x55/0xb0 [ 311.700123][ T9434] ? clear_bhb_loop+0x40/0x90 [ 311.704785][ T9434] ? clear_bhb_loop+0x40/0x90 [ 311.709711][ T9434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.715598][ T9434] RIP: 0033:0x7f775618eba9 [ 311.720003][ T9434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.739599][ T9434] RSP: 002b:00007f7756fcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.748027][ T9434] RAX: ffffffffffffffda RBX: 00007f77563d5fa0 RCX: 00007f775618eba9 [ 311.756001][ T9434] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 311.763965][ T9434] RBP: 00007f7756fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 311.771933][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.779894][ T9434] R13: 00007f77563d6038 R14: 00007f77563d5fa0 R15: 00007ffc09640848 [ 311.787868][ T9434] [ 312.160729][ T9442] FAULT_INJECTION: forcing a failure. [ 312.160729][ T9442] name failslab, interval 1, probability 0, space 0, times 0 [ 312.185970][ T9442] CPU: 1 PID: 9442 Comm: syz.5.692 Not tainted syzkaller #0 [ 312.193318][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.203396][ T9442] Call Trace: [ 312.206693][ T9442] [ 312.209642][ T9442] dump_stack_lvl+0x16c/0x230 [ 312.214352][ T9442] ? show_regs_print_info+0x20/0x20 [ 312.219571][ T9442] ? load_image+0x3b0/0x3b0 [ 312.224096][ T9442] ? __might_sleep+0xe0/0xe0 [ 312.228711][ T9442] ? __lock_acquire+0x7c80/0x7c80 [ 312.233761][ T9442] should_fail_ex+0x39d/0x4d0 [ 312.238466][ T9442] should_failslab+0x9/0x20 [ 312.242995][ T9442] slab_pre_alloc_hook+0x59/0x310 [ 312.248047][ T9442] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.253797][ T9442] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.259542][ T9442] __kmem_cache_alloc_node+0x53/0x260 [ 312.264947][ T9442] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.270704][ T9442] __kmalloc+0xa4/0x240 [ 312.274885][ T9442] tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.280466][ T9442] tomoyo_path_number_perm+0x1ea/0x590 [ 312.285946][ T9442] ? tomoyo_path_number_perm+0x1ba/0x590 [ 312.291618][ T9442] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 312.297196][ T9442] ? ksys_write+0x1c1/0x250 [ 312.301753][ T9442] ? __fget_files+0x28/0x4d0 [ 312.306376][ T9442] security_file_ioctl+0x70/0xa0 [ 312.311336][ T9442] __se_sys_ioctl+0x48/0x170 [ 312.315953][ T9442] do_syscall_64+0x55/0xb0 [ 312.320385][ T9442] ? clear_bhb_loop+0x40/0x90 [ 312.325063][ T9442] ? clear_bhb_loop+0x40/0x90 [ 312.329743][ T9442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.335642][ T9442] RIP: 0033:0x7f654038eba9 [ 312.340050][ T9442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.359652][ T9442] RSP: 002b:00007f6541138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.368058][ T9442] RAX: ffffffffffffffda RBX: 00007f65405d5fa0 RCX: 00007f654038eba9 [ 312.376017][ T9442] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 312.383992][ T9442] RBP: 00007f6541138090 R08: 0000000000000000 R09: 0000000000000000 [ 312.391951][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.399913][ T9442] R13: 00007f65405d6038 R14: 00007f65405d5fa0 R15: 00007fff39eecca8 [ 312.407885][ T9442] [ 312.418378][ T9445] FAULT_INJECTION: forcing a failure. [ 312.418378][ T9445] name failslab, interval 1, probability 0, space 0, times 0 [ 312.420849][ T9442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.458139][ T9446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.478684][ T9445] CPU: 1 PID: 9445 Comm: syz.6.700 Not tainted syzkaller #0 [ 312.478709][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.478718][ T9445] Call Trace: [ 312.478725][ T9445] [ 312.478733][ T9445] dump_stack_lvl+0x16c/0x230 [ 312.478760][ T9445] ? show_regs_print_info+0x20/0x20 [ 312.478780][ T9445] ? load_image+0x3b0/0x3b0 [ 312.478799][ T9445] ? __might_sleep+0xe0/0xe0 [ 312.478818][ T9445] ? __lock_acquire+0x7c80/0x7c80 [ 312.478840][ T9445] should_fail_ex+0x39d/0x4d0 [ 312.478865][ T9445] should_failslab+0x9/0x20 [ 312.478886][ T9445] slab_pre_alloc_hook+0x59/0x310 [ 312.478908][ T9445] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.478931][ T9445] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.478951][ T9445] __kmem_cache_alloc_node+0x53/0x260 [ 312.478985][ T9445] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.479006][ T9445] __kmalloc+0xa4/0x240 [ 312.479028][ T9445] tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.479063][ T9445] tomoyo_path_number_perm+0x1ea/0x590 [ 312.479083][ T9445] ? tomoyo_path_number_perm+0x1ba/0x590 [ 312.479104][ T9445] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 312.479126][ T9445] ? ksys_write+0x1c1/0x250 [ 312.479177][ T9445] ? __fget_files+0x28/0x4d0 [ 312.479208][ T9445] security_file_ioctl+0x70/0xa0 [ 312.479232][ T9445] __se_sys_ioctl+0x48/0x170 [ 312.479253][ T9445] do_syscall_64+0x55/0xb0 [ 312.479270][ T9445] ? clear_bhb_loop+0x40/0x90 [ 312.479285][ T9445] ? clear_bhb_loop+0x40/0x90 [ 312.479303][ T9445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.479325][ T9445] RIP: 0033:0x7f1d5e38eba9 [ 312.479341][ T9445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.479355][ T9445] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.479374][ T9445] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 312.479386][ T9445] RDX: 0000200000000100 RSI: 0000000040383d0c RDI: 0000000000000004 [ 312.479397][ T9445] RBP: 00007f1d5f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 312.479408][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.479418][ T9445] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 312.479444][ T9445] [ 312.479452][ T9445] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.814734][ T9453] loop6: detected capacity change from 0 to 4096 [ 313.021937][ T9453] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 313.156991][ T9453] ntfs3: loop6: Failed to load $UpCase (-2). [ 313.250043][ T9453] macvlan2: entered promiscuous mode [ 313.295450][ T9453] macvlan2: entered allmulticast mode [ 313.440327][ T9450] loop0: detected capacity change from 0 to 40427 [ 313.459148][ T9450] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 313.489629][ T9450] F2FS-fs (loop0): Image doesn't support compression [ 313.630397][ T9450] F2FS-fs (loop0): Image doesn't support compression [ 313.642213][ T9450] F2FS-fs (loop0): invalid crc value [ 313.660934][ T9450] F2FS-fs (loop0): Found nat_bits in checkpoint [ 313.725134][ T9450] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 313.780985][ T27] audit: type=1800 audit(1758181896.372:42): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.701" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 313.810877][ T9450] syz.0.701: attempt to access beyond end of device [ 313.810877][ T9450] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 313.844145][ T9450] syz.0.701: attempt to access beyond end of device [ 313.844145][ T9450] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 313.884726][ T9472] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d7/0x910 [ 314.099020][ T5790] syz-executor: attempt to access beyond end of device [ 314.099020][ T5790] loop0: rw=2049, sector=45112, nr_sectors = 16 limit=40427 [ 314.185351][ T5790] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 314.246125][ T5790] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 315.129348][ T9497] FAULT_INJECTION: forcing a failure. [ 315.129348][ T9497] name failslab, interval 1, probability 0, space 0, times 0 [ 315.158164][ T9497] CPU: 0 PID: 9497 Comm: syz.0.710 Not tainted syzkaller #0 [ 315.165513][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.175590][ T9497] Call Trace: [ 315.178879][ T9497] [ 315.181816][ T9497] dump_stack_lvl+0x16c/0x230 [ 315.186515][ T9497] ? show_regs_print_info+0x20/0x20 [ 315.191724][ T9497] ? load_image+0x3b0/0x3b0 [ 315.196224][ T9497] ? __lock_acquire+0x7c80/0x7c80 [ 315.201249][ T9497] should_fail_ex+0x39d/0x4d0 [ 315.205921][ T9497] should_failslab+0x9/0x20 [ 315.210418][ T9497] slab_pre_alloc_hook+0x59/0x310 [ 315.215454][ T9497] kmem_cache_alloc+0x5a/0x2e0 [ 315.220299][ T9497] ? getname_flags+0xbb/0x500 [ 315.224979][ T9497] getname_flags+0xbb/0x500 [ 315.229488][ T9497] vfs_fstatat+0x111/0x1b0 [ 315.233899][ T9497] __x64_sys_newfstatat+0x117/0x190 [ 315.239092][ T9497] ? __fget_files+0x44a/0x4d0 [ 315.243765][ T9497] ? __ia32_sys_newlstat+0x180/0x180 [ 315.249069][ T9497] ? lockdep_hardirqs_on+0x98/0x150 [ 315.254285][ T9497] do_syscall_64+0x55/0xb0 [ 315.258712][ T9497] ? clear_bhb_loop+0x40/0x90 [ 315.263392][ T9497] ? clear_bhb_loop+0x40/0x90 [ 315.268063][ T9497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.273994][ T9497] RIP: 0033:0x7f775618eba9 [ 315.278403][ T9497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.298017][ T9497] RSP: 002b:00007f7756fcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 315.306448][ T9497] RAX: ffffffffffffffda RBX: 00007f77563d5fa0 RCX: 00007f775618eba9 [ 315.314418][ T9497] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 315.322386][ T9497] RBP: 00007f7756fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 315.330366][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.338343][ T9497] R13: 00007f77563d6038 R14: 00007f77563d5fa0 R15: 00007ffc09640848 [ 315.346344][ T9497] [ 315.857370][ T9509] FAULT_INJECTION: forcing a failure. [ 315.857370][ T9509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.870724][ T9509] CPU: 0 PID: 9509 Comm: syz.0.715 Not tainted syzkaller #0 [ 315.878040][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.888112][ T9509] Call Trace: [ 315.891840][ T9509] [ 315.894783][ T9509] dump_stack_lvl+0x16c/0x230 [ 315.899496][ T9509] ? show_regs_print_info+0x20/0x20 [ 315.904725][ T9509] ? load_image+0x3b0/0x3b0 [ 315.909250][ T9509] ? __might_fault+0xaa/0x120 [ 315.913942][ T9509] ? __lock_acquire+0x7c80/0x7c80 [ 315.918992][ T9509] should_fail_ex+0x39d/0x4d0 [ 315.923691][ T9509] _copy_from_user+0x2f/0xe0 [ 315.928306][ T9509] __sys_bpf+0x1e9/0x800 [ 315.932571][ T9509] ? bpf_link_show_fdinfo+0x350/0x350 [ 315.937976][ T9509] ? lock_chain_count+0x20/0x20 [ 315.942858][ T9509] __x64_sys_bpf+0x7c/0x90 [ 315.947301][ T9509] do_syscall_64+0x55/0xb0 [ 315.951735][ T9509] ? clear_bhb_loop+0x40/0x90 [ 315.956422][ T9509] ? clear_bhb_loop+0x40/0x90 [ 315.961113][ T9509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.967021][ T9509] RIP: 0033:0x7f775618eba9 [ 315.971447][ T9509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.991077][ T9509] RSP: 002b:00007f7756fcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.999515][ T9509] RAX: ffffffffffffffda RBX: 00007f77563d5fa0 RCX: 00007f775618eba9 [ 316.007503][ T9509] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 316.015492][ T9509] RBP: 00007f7756fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 316.023480][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.031459][ T9509] R13: 00007f77563d6038 R14: 00007f77563d5fa0 R15: 00007ffc09640848 [ 316.039445][ T9509] [ 316.205506][ T9514] loop0: detected capacity change from 0 to 1024 [ 316.231382][ T9514] ext4: Unknown parameter 'fowner>00000000000000000000' [ 316.514467][ T5789] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.637689][ T9506] loop7: detected capacity change from 0 to 40427 [ 316.675160][ T9516] FAULT_INJECTION: forcing a failure. [ 316.675160][ T9516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.704440][ T9516] CPU: 0 PID: 9516 Comm: syz.5.721 Not tainted syzkaller #0 [ 316.711782][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 316.721949][ T9516] Call Trace: [ 316.725245][ T9516] [ 316.728194][ T9516] dump_stack_lvl+0x16c/0x230 [ 316.732898][ T9516] ? show_regs_print_info+0x20/0x20 [ 316.738126][ T9516] ? load_image+0x3b0/0x3b0 [ 316.742650][ T9516] ? __lock_acquire+0x7c80/0x7c80 [ 316.747702][ T9516] should_fail_ex+0x39d/0x4d0 [ 316.752405][ T9516] prepare_alloc_pages+0x1e2/0x5f0 [ 316.757544][ T9516] __alloc_pages+0x127/0x460 [ 316.762158][ T9516] ? zone_statistics+0x170/0x170 [ 316.767118][ T9516] ? mark_lock+0x94/0x320 [ 316.771480][ T9516] pte_alloc_one+0x89/0x540 [ 316.776003][ T9516] ? pfn_modify_allowed+0x560/0x560 [ 316.781227][ T9516] ? hugepage_vma_check+0x488/0x5a0 [ 316.786447][ T9516] handle_mm_fault+0x2e8e/0x4920 [ 316.791391][ T9516] ? handle_mm_fault+0xd1/0x4920 [ 316.796339][ T9516] ? numa_migrate_prep+0x350/0x350 [ 316.801505][ T9516] ? check_vma_flags+0x50f/0x5b0 [ 316.806463][ T9516] __get_user_pages+0x5ea/0x1470 [ 316.811429][ T9516] ? mtree_destroy+0x30/0x30 [ 316.816020][ T9516] ? populate_vma_page_range+0x370/0x370 [ 316.821691][ T9516] populate_vma_page_range+0x2b6/0x370 [ 316.827145][ T9516] ? fixup_user_fault+0x710/0x710 [ 316.832170][ T9516] ? down_read+0x1ac/0x2e0 [ 316.836595][ T9516] __mm_populate+0x24c/0x380 [ 316.841180][ T9516] ? faultin_page_range+0x8f0/0x8f0 [ 316.846462][ T9516] ? up_write+0x1c3/0x410 [ 316.850782][ T9516] do_mlock+0x58d/0x6f0 [ 316.854938][ T9516] ? lru_gen_add_folio+0xda0/0xda0 [ 316.860039][ T9516] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 316.866033][ T9516] ? lock_chain_count+0x20/0x20 [ 316.871002][ T9516] __x64_sys_mlock2+0xac/0xd0 [ 316.875690][ T9516] do_syscall_64+0x55/0xb0 [ 316.880122][ T9516] ? clear_bhb_loop+0x40/0x90 [ 316.884809][ T9516] ? clear_bhb_loop+0x40/0x90 [ 316.889492][ T9516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.895386][ T9516] RIP: 0033:0x7f654038eba9 [ 316.899792][ T9516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.919396][ T9516] RSP: 002b:00007f6541138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 316.927819][ T9516] RAX: ffffffffffffffda RBX: 00007f65405d5fa0 RCX: 00007f654038eba9 [ 316.935797][ T9516] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ff8000 [ 316.943767][ T9516] RBP: 00007f6541138090 R08: 0000000000000000 R09: 0000000000000000 [ 316.951729][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.959690][ T9516] R13: 00007f65405d6038 R14: 00007f65405d5fa0 R15: 00007fff39eecca8 [ 316.967672][ T9516] [ 317.001953][ T9506] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 317.010822][ T9506] F2FS-fs (loop7): Image doesn't support compression [ 317.017700][ T9506] F2FS-fs (loop7): Image doesn't support compression [ 317.074284][ T9521] netlink: 'syz.6.723': attribute type 1 has an invalid length. [ 317.118215][ T9506] F2FS-fs (loop7): invalid crc value [ 317.285253][ T9506] F2FS-fs (loop7): Found nat_bits in checkpoint [ 317.353948][ T9526] bond1: (slave bridge1): making interface the new active one [ 317.389269][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.399803][ T9526] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 317.405595][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.439093][ T9506] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 317.472089][ T27] audit: type=1800 audit(1758181900.062:43): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.718" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 317.495777][ T9506] syz.7.718: attempt to access beyond end of device [ 317.495777][ T9506] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 317.510208][ T9506] syz.7.718: attempt to access beyond end of device [ 317.510208][ T9506] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 317.526245][ T9506] F2FS-fs (loop7): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 317.586012][ T7679] syz-executor: attempt to access beyond end of device [ 317.586012][ T7679] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 317.606102][ T7679] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 317.656372][ T9536] FAULT_INJECTION: forcing a failure. [ 317.656372][ T9536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.669645][ T9536] CPU: 0 PID: 9536 Comm: syz.5.726 Not tainted syzkaller #0 [ 317.676950][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.687014][ T9536] Call Trace: [ 317.690289][ T9536] [ 317.693214][ T9536] dump_stack_lvl+0x16c/0x230 [ 317.697916][ T9536] ? show_regs_print_info+0x20/0x20 [ 317.703123][ T9536] ? load_image+0x3b0/0x3b0 [ 317.707624][ T9536] ? __might_fault+0xaa/0x120 [ 317.712352][ T9536] ? __lock_acquire+0x7c80/0x7c80 [ 317.717392][ T9536] should_fail_ex+0x39d/0x4d0 [ 317.722073][ T9536] _copy_from_user+0x2f/0xe0 [ 317.726690][ T9536] __sys_bpf+0x1e9/0x800 [ 317.730925][ T9536] ? bpf_link_show_fdinfo+0x350/0x350 [ 317.736300][ T9536] ? lock_chain_count+0x20/0x20 [ 317.741155][ T9536] __x64_sys_bpf+0x7c/0x90 [ 317.745562][ T9536] do_syscall_64+0x55/0xb0 [ 317.749968][ T9536] ? clear_bhb_loop+0x40/0x90 [ 317.754630][ T9536] ? clear_bhb_loop+0x40/0x90 [ 317.759304][ T9536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.765192][ T9536] RIP: 0033:0x7f654038eba9 [ 317.769597][ T9536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.789201][ T9536] RSP: 002b:00007f6541138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 317.797621][ T9536] RAX: ffffffffffffffda RBX: 00007f65405d5fa0 RCX: 00007f654038eba9 [ 317.805587][ T9536] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 317.813547][ T9536] RBP: 00007f6541138090 R08: 0000000000000000 R09: 0000000000000000 [ 317.821506][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.829465][ T9536] R13: 00007f65405d6038 R14: 00007f65405d5fa0 R15: 00007fff39eecca8 [ 317.837445][ T9536] [ 319.262626][ T9556] FAULT_INJECTION: forcing a failure. [ 319.262626][ T9556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.282814][ T9556] CPU: 1 PID: 9556 Comm: syz.6.733 Not tainted syzkaller #0 [ 319.290163][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.300249][ T9556] Call Trace: [ 319.303553][ T9556] [ 319.306506][ T9556] dump_stack_lvl+0x16c/0x230 [ 319.311218][ T9556] ? show_regs_print_info+0x20/0x20 [ 319.316455][ T9556] ? load_image+0x3b0/0x3b0 [ 319.320987][ T9556] ? __might_fault+0xaa/0x120 [ 319.325690][ T9556] ? __lock_acquire+0x7c80/0x7c80 [ 319.330751][ T9556] should_fail_ex+0x39d/0x4d0 [ 319.335465][ T9556] _copy_from_user+0x2f/0xe0 [ 319.340091][ T9556] do_ipt_set_ctl+0x68f/0xcc0 [ 319.344850][ T9556] ? ipt_unregister_table_exit+0x230/0x230 [ 319.350686][ T9556] ? __lock_acquire+0x7c80/0x7c80 [ 319.355737][ T9556] ? rcu_is_watching+0x15/0xb0 [ 319.360534][ T9556] ? trace_contention_end+0x39/0xe0 [ 319.365776][ T9556] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 319.371436][ T9556] ? mutex_unlock+0x10/0x10 [ 319.375965][ T9556] ? aa_sk_perm+0x7fc/0x930 [ 319.380510][ T9556] ? aa_af_perm+0x2b0/0x2b0 [ 319.385152][ T9556] nf_setsockopt+0x263/0x280 [ 319.389779][ T9556] ? sock_common_recvmsg+0x1b0/0x1b0 [ 319.395103][ T9556] do_sock_setsockopt+0x175/0x1a0 [ 319.400170][ T9556] ? __fdget+0x180/0x210 [ 319.404498][ T9556] __x64_sys_setsockopt+0x184/0x200 [ 319.409730][ T9556] do_syscall_64+0x55/0xb0 [ 319.414174][ T9556] ? clear_bhb_loop+0x40/0x90 [ 319.418877][ T9556] ? clear_bhb_loop+0x40/0x90 [ 319.423573][ T9556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.427596][ T5785] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 319.429476][ T9556] RIP: 0033:0x7f1d5e38eba9 [ 319.429497][ T9556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.429511][ T9556] RSP: 002b:00007f1d5f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.469662][ T9556] RAX: ffffffffffffffda RBX: 00007f1d5e5d5fa0 RCX: 00007f1d5e38eba9 [ 319.477634][ T9556] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 319.485617][ T9556] RBP: 00007f1d5f1d0090 R08: 0000000000000370 R09: 0000000000000000 [ 319.493601][ T9556] R10: 0000200000000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 319.501575][ T9556] R13: 00007f1d5e5d6038 R14: 00007f1d5e5d5fa0 R15: 00007ffe6fccbb88 [ 319.509554][ T9556] [ 319.700193][ T5785] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 319.715678][ T5785] usb 1-1: config 0 has no interface number 0 [ 319.742455][ T5785] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 319.768935][ T5785] usb 1-1: config 0 interface 200 has no altsetting 0 [ 319.793944][ T5785] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 319.813690][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.838773][ T5785] usb 1-1: Product: syz [ 319.838792][ T5785] usb 1-1: Manufacturer: syz [ 319.838806][ T5785] usb 1-1: SerialNumber: syz [ 319.845184][ T5785] usb 1-1: config 0 descriptor?? [ 319.866487][ T9568] FAULT_INJECTION: forcing a failure. [ 319.866487][ T9568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.866515][ T9568] CPU: 1 PID: 9568 Comm: syz.5.737 Not tainted syzkaller #0 [ 319.866533][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.866543][ T9568] Call Trace: [ 319.866551][ T9568] [ 319.866559][ T9568] dump_stack_lvl+0x16c/0x230 [ 319.866588][ T9568] ? show_regs_print_info+0x20/0x20 [ 319.866609][ T9568] ? load_image+0x3b0/0x3b0 [ 319.866628][ T9568] ? __lock_acquire+0x7c80/0x7c80 [ 319.866652][ T9568] ? snprintf+0xdb/0x120 [ 319.866672][ T9568] should_fail_ex+0x39d/0x4d0 [ 319.866698][ T9568] _copy_to_user+0x2f/0xa0 [ 319.866719][ T9568] simple_read_from_buffer+0xe7/0x150 [ 319.866746][ T9568] proc_fail_nth_read+0x1e3/0x250 [ 319.866770][ T9568] ? proc_fault_inject_write+0x340/0x340 [ 319.866795][ T9568] ? fsnotify_perm+0x271/0x5e0 [ 319.866818][ T9568] ? proc_fault_inject_write+0x340/0x340 [ 319.866836][ T9568] vfs_read+0x27e/0x920 [ 319.866862][ T9568] ? kernel_read+0x1e0/0x1e0 [ 319.866883][ T9568] ? __fget_files+0x28/0x4d0 [ 319.866904][ T9568] ? __fget_files+0x44a/0x4d0 [ 319.866931][ T9568] ? __fdget_pos+0x2a3/0x330 [ 319.866949][ T9568] ? ksys_read+0x75/0x250 [ 319.866970][ T9568] ksys_read+0x147/0x250 [ 319.866992][ T9568] ? vfs_write+0x940/0x940 [ 319.867014][ T9568] ? lockdep_hardirqs_on+0x98/0x150 [ 319.867040][ T9568] do_syscall_64+0x55/0xb0 [ 319.867057][ T9568] ? clear_bhb_loop+0x40/0x90 [ 319.867074][ T9568] ? clear_bhb_loop+0x40/0x90 [ 319.867091][ T9568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.867114][ T9568] RIP: 0033:0x7f654038d5bc [ 319.867129][ T9568] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.867145][ T9568] RSP: 002b:00007f653e5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.867163][ T9568] RAX: ffffffffffffffda RBX: 00007f65405d6090 RCX: 00007f654038d5bc [ 319.867176][ T9568] RDX: 000000000000000f RSI: 00007f653e5f60a0 RDI: 0000000000000004 [ 319.867187][ T9568] RBP: 00007f653e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.867197][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.867206][ T9568] R13: 00007f65405d6128 R14: 00007f65405d6090 R15: 00007fff39eecca8 [ 319.867234][ T9568] [ 320.071781][ T5785] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input12 [ 320.088439][ T5785] usb 1-1: USB disconnect, device number 20 [ 320.323786][ T9559] loop6: detected capacity change from 0 to 32768 [ 320.382154][ T9567] tty tty30: ldisc open failed (-12), clearing slot 29 [ 320.391151][ T9559] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 320.464647][ T27] audit: type=1800 audit(1758181903.052:44): pid=9559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.734" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 320.485458][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.567106][ T9565] loop7: detected capacity change from 0 to 40427 [ 320.615428][ T9565] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 320.623868][ T9565] F2FS-fs (loop7): Image doesn't support compression [ 320.666462][ T9565] F2FS-fs (loop7): Image doesn't support compression [ 320.717085][ T9565] F2FS-fs (loop7): invalid crc value [ 320.745306][ T7893] IPVS: starting estimator thread 0... [ 320.768244][ T9565] F2FS-fs (loop7): Found nat_bits in checkpoint [ 320.927943][ T9578] IPVS: using max 21 ests per chain, 50400 per kthread [ 320.972543][ T9565] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 320.998381][ T27] audit: type=1800 audit(1758181903.592:45): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.736" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 321.022875][ T9565] syz.7.736: attempt to access beyond end of device [ 321.022875][ T9565] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 321.024871][ T966] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 321.042898][ T9565] syz.7.736: attempt to access beyond end of device [ 321.042898][ T9565] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 321.096809][ T9565] F2FS-fs (loop7): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 321.109086][ T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 321.304448][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 321.313049][ T23] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 321.323954][ T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.346427][ T23] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0125, bcdDevice=29.40 [ 321.362207][ T7679] syz-executor: attempt to access beyond end of device [ 321.362207][ T7679] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 321.368061][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.400407][ T23] usb 6-1: config 0 descriptor?? [ 321.440338][ T7679] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 321.511786][ T9587] [ 321.514162][ T9587] ====================================================== [ 321.521183][ T9587] WARNING: possible circular locking dependency detected [ 321.528214][ T9587] syzkaller #0 Not tainted [ 321.532630][ T9587] ------------------------------------------------------ [ 321.539651][ T9587] syz.6.734/9587 is trying to acquire lock: [ 321.545550][ T9587] ffff88805257cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 321.557233][ T9587] [ 321.557233][ T9587] but task is already holding lock: [ 321.564607][ T9587] ffff88805257ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 321.575236][ T9587] [ 321.575236][ T9587] which lock already depends on the new lock. [ 321.575236][ T9587] [ 321.585644][ T9587] [ 321.585644][ T9587] the existing dependency chain (in reverse order) is: [ 321.594643][ T9587] [ 321.594643][ T9587] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 321.602454][ T9587] down_read+0x46/0x2e0 [ 321.607123][ T9587] ocfs2_init_acl+0x2fa/0x720 [ 321.612318][ T9587] ocfs2_mknod+0x12e5/0x20f0 [ 321.617426][ T9587] ocfs2_mkdir+0x196/0x410 [ 321.622357][ T9587] vfs_mkdir+0x296/0x440 [ 321.627117][ T9587] do_mkdirat+0x1d4/0x440 [ 321.631965][ T9587] __x64_sys_mkdirat+0x89/0xa0 [ 321.637255][ T9587] do_syscall_64+0x55/0xb0 [ 321.642189][ T9587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.648625][ T9587] [ 321.648625][ T9587] -> #3 (jbd2_handle){++++}-{0:0}: [ 321.655922][ T9587] start_this_handle+0x1e9d/0x20c0 [ 321.661548][ T9587] jbd2__journal_start+0x2bb/0x5b0 [ 321.667209][ T9587] jbd2_journal_start+0x2a/0x40 [ 321.672591][ T9587] ocfs2_start_trans+0x376/0x6c0 [ 321.678056][ T9587] ocfs2_mknod+0xe47/0x20f0 [ 321.683087][ T9587] ocfs2_create+0x196/0x410 [ 321.688104][ T9587] path_openat+0x1277/0x3190 [ 321.693228][ T9587] do_filp_open+0x1c5/0x3d0 [ 321.698269][ T9587] do_sys_openat2+0x12c/0x1c0 [ 321.703458][ T9587] __x64_sys_openat+0x139/0x160 [ 321.708820][ T9587] do_syscall_64+0x55/0xb0 [ 321.713749][ T9587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.720233][ T9587] [ 321.720233][ T9587] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 321.728756][ T9587] down_read+0x46/0x2e0 [ 321.733435][ T9587] ocfs2_start_trans+0x36a/0x6c0 [ 321.738892][ T9587] ocfs2_mknod+0xe47/0x20f0 [ 321.743904][ T9587] ocfs2_create+0x196/0x410 [ 321.748917][ T9587] path_openat+0x1277/0x3190 [ 321.754022][ T9587] do_filp_open+0x1c5/0x3d0 [ 321.759035][ T9587] do_sys_openat2+0x12c/0x1c0 [ 321.764224][ T9587] __x64_sys_openat+0x139/0x160 [ 321.769581][ T9587] do_syscall_64+0x55/0xb0 [ 321.774524][ T9587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.780946][ T9587] [ 321.780946][ T9587] -> #1 (sb_internal#6){.+.+}-{0:0}: [ 321.788421][ T9587] ocfs2_start_trans+0x26b/0x6c0 [ 321.793884][ T9587] ocfs2_acquire_dquot+0x67b/0xaf0 [ 321.799513][ T9587] dqget+0x77c/0xeb0 [ 321.803922][ T9587] __dquot_initialize+0x3ba/0xcb0 [ 321.809475][ T9587] ocfs2_get_init_inode+0x13c/0x1b0 [ 321.815185][ T9587] ocfs2_mknod+0x867/0x20f0 [ 321.820219][ T9587] ocfs2_mkdir+0x196/0x410 [ 321.825143][ T9587] vfs_mkdir+0x296/0x440 [ 321.829906][ T9587] do_mkdirat+0x1d4/0x440 [ 321.834751][ T9587] __x64_sys_mkdirat+0x89/0xa0 [ 321.840034][ T9587] do_syscall_64+0x55/0xb0 [ 321.845048][ T9587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.851457][ T9587] [ 321.851457][ T9587] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 321.860309][ T9587] __lock_acquire+0x2ddb/0x7c80 [ 321.865669][ T9587] lock_acquire+0x197/0x410 [ 321.870680][ T9587] down_write+0x97/0x1f0 [ 321.875437][ T9587] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 321.881927][ T9587] ocfs2_truncate_file+0xd84/0x13a0 [ 321.887640][ T9587] ocfs2_setattr+0x150d/0x1b20 [ 321.892912][ T9587] notify_change+0xb0d/0xe10 [ 321.898095][ T9587] do_truncate+0x19b/0x220 [ 321.903023][ T9587] path_openat+0x298c/0x3190 [ 321.908154][ T9587] do_filp_open+0x1c5/0x3d0 [ 321.913175][ T9587] do_sys_openat2+0x12c/0x1c0 [ 321.918363][ T9587] __x64_sys_creat+0x90/0xb0 [ 321.923477][ T9587] do_syscall_64+0x55/0xb0 [ 321.928412][ T9587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.934831][ T9587] [ 321.934831][ T9587] other info that might help us debug this: [ 321.934831][ T9587] [ 321.945048][ T9587] Chain exists of: [ 321.945048][ T9587] &ocfs2_quota_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 321.945048][ T9587] [ 321.959113][ T9587] Possible unsafe locking scenario: [ 321.959113][ T9587] [ 321.966548][ T9587] CPU0 CPU1 [ 321.971898][ T9587] ---- ---- [ 321.977248][ T9587] lock(&oi->ip_xattr_sem); [ 321.981918][ T9587] lock(jbd2_handle); [ 321.988522][ T9587] lock(&oi->ip_xattr_sem); [ 321.995633][ T9587] lock(&ocfs2_quota_ip_alloc_sem_key); [ 322.001255][ T9587] [ 322.001255][ T9587] *** DEADLOCK *** [ 322.001255][ T9587] [ 322.009385][ T9587] 3 locks held by syz.6.734/9587: [ 322.014400][ T9587] #0: ffff88804e19c418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 322.023640][ T9587] #1: ffff88805257d118 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: do_truncate+0x187/0x220 [ 322.033984][ T9587] #2: ffff88805257ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 322.045034][ T9587] [ 322.045034][ T9587] stack backtrace: [ 322.050908][ T9587] CPU: 1 PID: 9587 Comm: syz.6.734 Not tainted syzkaller #0 [ 322.058177][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.068216][ T9587] Call Trace: [ 322.071483][ T9587] [ 322.074401][ T9587] dump_stack_lvl+0x16c/0x230 [ 322.079069][ T9587] ? load_image+0x3b0/0x3b0 [ 322.083560][ T9587] ? show_regs_print_info+0x20/0x20 [ 322.088747][ T9587] ? print_circular_bug+0x12b/0x1a0 [ 322.093939][ T9587] check_noncircular+0x2bd/0x3c0 [ 322.098868][ T9587] ? print_deadlock_bug+0x5d0/0x5d0 [ 322.104067][ T9587] ? lockdep_lock+0xe0/0x220 [ 322.108646][ T9587] ? lockdep_unlock+0x137/0x2d0 [ 322.113485][ T9587] ? _find_first_zero_bit+0xd3/0x100 [ 322.118761][ T9587] __lock_acquire+0x2ddb/0x7c80 [ 322.123607][ T9587] ? verify_lock_unused+0x140/0x140 [ 322.128805][ T9587] lock_acquire+0x197/0x410 [ 322.133300][ T9587] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 322.139444][ T9587] ? __might_sleep+0xe0/0xe0 [ 322.144024][ T9587] ? read_lock_is_recursive+0x20/0x20 [ 322.149388][ T9587] down_write+0x97/0x1f0 [ 322.153623][ T9587] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 322.159771][ T9587] ? down_read_killable+0x340/0x340 [ 322.164964][ T9587] ? ocfs2_truncate_file+0xcaa/0x13a0 [ 322.170332][ T9587] ? __lock_acquire+0x7c80/0x7c80 [ 322.175347][ T9587] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 322.181316][ T9587] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 322.187211][ T9587] ? up_write+0x1c3/0x410 [ 322.191525][ T9587] ocfs2_truncate_file+0xd84/0x13a0 [ 322.196717][ T9587] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 322.202601][ T9587] ? ocfs2_simple_size_update+0x470/0x470 [ 322.208313][ T9587] ? do_raw_spin_unlock+0x121/0x230 [ 322.213499][ T9587] ? _raw_spin_unlock+0x28/0x40 [ 322.218333][ T9587] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 322.224040][ T9587] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 322.229571][ T9587] ? ocfs2_rw_lock+0x138/0x240 [ 322.234336][ T9587] ? dquot_initialize+0x20/0x20 [ 322.239177][ T9587] ? ocfs2_create_new_inode_locks+0x640/0x640 [ 322.245272][ T9587] ? setattr_prepare+0x1e6/0xac0 [ 322.250198][ T9587] ? inode_newsize_ok+0x116/0x1b0 [ 322.255209][ T9587] ocfs2_setattr+0x150d/0x1b20 [ 322.259985][ T9587] ? ocfs2_extend_allocation+0x1760/0x1760 [ 322.265798][ T9587] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 322.271617][ T9587] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 322.277848][ T9587] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 322.284077][ T9587] ? current_time+0x18e/0x270 [ 322.288742][ T9587] ? inode_set_ctime_current+0x2d0/0x2d0 [ 322.294367][ T9587] ? evm_inode_setattr+0x94/0x6a0 [ 322.299394][ T9587] ? bpf_lsm_inode_setattr+0x9/0x10 [ 322.304581][ T9587] ? try_break_deleg+0x79/0x120 [ 322.309424][ T9587] ? ocfs2_extend_allocation+0x1760/0x1760 [ 322.315227][ T9587] notify_change+0xb0d/0xe10 [ 322.319829][ T9587] do_truncate+0x19b/0x220 [ 322.324260][ T9587] ? put_page_bootmem+0x2c0/0x2c0 [ 322.329283][ T9587] ? apparmor_file_truncate+0x23f/0x2d0 [ 322.334826][ T9587] ? ima_bprm_check+0x1f0/0x1f0 [ 322.339672][ T9587] path_openat+0x298c/0x3190 [ 322.344266][ T9587] ? do_filp_open+0x3d0/0x3d0 [ 322.348999][ T9587] do_filp_open+0x1c5/0x3d0 [ 322.353499][ T9587] ? vfs_tmpfile+0x490/0x490 [ 322.358092][ T9587] ? _raw_spin_unlock+0x28/0x40 [ 322.362951][ T9587] ? alloc_fd+0x58f/0x630 [ 322.367285][ T9587] do_sys_openat2+0x12c/0x1c0 [ 322.371963][ T9587] ? do_sys_open+0xe0/0xe0 [ 322.376373][ T9587] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 322.382355][ T9587] ? lock_chain_count+0x20/0x20 [ 322.387197][ T9587] ? lock_chain_count+0x20/0x20 [ 322.392040][ T9587] __x64_sys_creat+0x90/0xb0 [ 322.396623][ T9587] do_syscall_64+0x55/0xb0 [ 322.401030][ T9587] ? clear_bhb_loop+0x40/0x90 [ 322.405697][ T9587] ? clear_bhb_loop+0x40/0x90 [ 322.410359][ T9587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.416249][ T9587] RIP: 0033:0x7f1d5e38eba9 [ 322.420656][ T9587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.440252][ T9587] RSP: 002b:00007f1d5f18e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 322.448742][ T9587] RAX: ffffffffffffffda RBX: 00007f1d5e5d6180 RCX: 00007f1d5e38eba9 [ 322.456731][ T9587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 322.464690][ T9587] RBP: 00007f1d5e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 322.472651][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.480609][ T9587] R13: 00007f1d5e5d6218 R14: 00007f1d5e5d6180 R15: 00007ffe6fccbb88 [ 322.488576][ T9587] [ 322.517812][ T5785] usb 6-1: USB disconnect, device number 9 [ 323.492242][ T966] usb 7-1: unable to get BOS descriptor or descriptor too short [ 323.502867][ T966] usb 7-1: no configurations [ 323.508725][ T966] usb 7-1: can't read configurations, error -22 [ 324.196713][ T7581] ocfs2: Unmounting device (7,6) on (node local)