last executing test programs: 20.701686475s ago: executing program 3 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001240)={0x38, r4, 0x1, 0x71bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xf}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x4050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xfffff) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20009095) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000004c0)={{0x0, 0x5, 0x7ffe, 0xf, 0x2, 0x835, 0x7fff, 0x9, 0x9, 0xe, 0x7, 0x8, 0x1, 0x10001, 0x80000001}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002500)={r7, r8, "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", "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"}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 19.577449862s ago: executing program 3 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) sendmmsg$inet(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000100)={0x77359400}, 0x10) accept4(r4, 0x0, 0x0, 0x80800) 18.208187666s ago: executing program 3 (id=444): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQJGcc84555xzzjnn+D3L7iquB/S+331fvPec8zy7M11dVVP9/3VXzUz1dC85z2JzDgyMPjC0KQZG7JY751xo4x3nvGKfnfY8ZYoxx5982ORhC0w67OKkg4Z9HGlgYGCkYesZNm2sR088aaSBUd6d/vfGGmPMQeMMDEw37OLswz7ONPTDRI8Nn++dERpxQwf97eKg7Yf+e7fxhnyJIZ8sffOF5wwMDIz/nuWHLDLNP91QaUvOMe88f7f6m9sQq8HDPn/vv1GH/pvogYGBie4d4PvHe+cd9CHcpCFfc/wdHxx93Q/ha/+Pa8k55p1vBP8hj8WRh02bachjfMTHoLER7+c3rzLr7sOG8N3728DAkF3cPzxW/ke05BzzLDDw/vv5gYfHHPeMd97db4717MDAWM8NDIz1/MDAWC8MDIz14sDAWC992C71/6855px+ziGP9+GXh7EPvy+PT/eLfVZ/ce+BgYHRhs4z1ttDjxdjTzH8mFBVVVX/2c0x5/RzwfF/9A86/m+19Ry3dvyvqqr6n9t8c8w5/ZDj+AjH/7E/6Pj/vRtvXGPo7/5nn2noUm9/uDeiqqqq/kvNMx8e/8f/oOP/eDtcv3/H/6qqqv+5Lbrgu8f/sUc4/k/8Qcf/Nea/87Jh8w3/vuGt96zy3eePDZv+xnumj/ye6a+/Z/rg96znvfOP+p7pr75n+ugDA2M9Omz6m3+fPNazQ5b55/WM9fLfn48z6Sjvmf7Ke6aP+p7prw7bpiHTR3vP9LfeM//of58+9pD/phj2dV/7gKGuqqr6j2nR6eeZa+A9z7MfNnn4E/vxeaHHHLP1XR/W9lZVVVVVVVXVf723nzr97L//zfcnB97zt6t/+xvWYb8XGHTsudde+6Ft6H9Gg/759yFbfNjb9P+3Ic6jHz7FwMBaS3zYm1IfQv9j/la9/q+Uv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5/z/3/7+/+Be7+0w7BZZ5nszvsW+/uSkw6sNuyzW+6cc6HVPoRt/xD633r+f2C1QQMDw3zHH2K50ByLLj7VwMDAYvfdOdmMA3+7buYh18064cjv/jHnwMBU7/4/eNL3WfOwd1l4980dJv7bOo59d/3zvbPfyING2Ij3NNs59x+06pKvzDDixy+8/+342/tLLPXyflMO/1uWkUaYafT3WXj4+offlhGdh237VEO2feoN1lxn6vU33uSrq625/CorrbLSWtNNN+0M0884w3Rfn2XqlVdbY6Vphv7/PmM29K0rRv53xmzsEcfsqTneO2Yj3rYJTj4Ix+yf39XjH1bx7hrPm+3hy4eP2Sj/5pgN/3ojf/CYTbHasC806cDggeXeHZpBAwOTjjJ4YKMhF6YdbWBg0sHD5p10yLzfnHCkgYEd/35DBw17sdGh8wzaYsg8/2HvWzLLsBHZdPh8I77O+ogb+q/et+SEsXe5c4T3Lfm/1f/R8f+fvGYe9LeBGv4GCMPmGer1Ib/PxD9t7xSjvHuQe7/t/YDXxXk3un+tuepjS/x3vS4Obe/YH7C9H/A6fu+7vVNN+8weQ1f137a9I+zrFhh65b+zrxv44H3dyLT8SldNPuK+bv7338R/eBwPH6PRRpjp/fZ1O85/3uZD1j/wwfu6BVYb9uIBf9/XjTQwMOnIw/d1Q3Z8ow4e2HHIhemGXBht8MChQy5M/+6FMQbOHXLhayusvcaKg959mYFh651myHpnn3DQ0AfQTQetOtou77wzyrBteXmsf9zWYfePKd57PJ9jwmGDOWzZ4esdMuvw9b66zdDrRh223lf+C+sdvixt76RnDb1utGHrfXWE9Q7+gPUOX/afHg9TDfqHJ6rC/uZDfV8jevyO/gHb+wGvw433t3fdp1z24f+G1+Ee9H7bO8oHb+/7vW/I+27v45c/se9/1+uG0/3s3n2G3ldGH3Y/e+u/cP8dvuyI+7GhLwQydLc/+r+zH5vin/ZjW4480giD/Z7e7/vcFWH+YY+Iv61txQNfWW342A8eYb3/6vvc99yWQbAfG3+En+cGbb7vwCAa80fXeGHDt3f+4DEfPPCPP1sMH/Phy37QmI/274z5Jz54zEf8Pvn9xnyqzw69fvAI2//eMV9kt9lvGj7mo46w3n815qN98LHjn8d8YGAwjfmOkw0dtw/an77fmA9fdviYD/k6s044ysDcAwMDUw4b81H/nTGf9L/nfj4mzD/085X+NunZGRf+yvAxH3GM/9WYj/pfHPPN7v3b/XzKd6/7zEgDo446sNHyG2yw3rRD/x9+cbqh//O+6NkVh47zBx1L389o+LIf9LgY5d8xGv/fMhr0r4wmG+X9jP7+0Br5oEWf+z/dF43yXzU6l/dFp847dNw+6Pui9xvz4cvScXDi9yw/4s+hH/D6WXib3h2f+bcd/vPef8LrZw3/efd/5OtnDf+d5Goj7uTr363f/7vL313+7vJ3l7+49zn/P8Xw8//vjH3AJMN+6Bx81cy3zv5hb++H3P/q8//DfP/h/P/st8581ZAfrYZd94HnZ4fO8x95fnamoR8memz4fCOeHxxxQ//V+dl9dt3gqv9H52f/jxr+WP03fi5u/+8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9z7n/6cZ/jyAhxZf6PvDToQO3nTaozb9sLf3Q+5/9fn/Yb7/cP5/06Om3XSkgb9d94Hn/4fO4zj/f/+Cmy/zn3z+f/hjtfP/9S/K313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvc/5/9mHPw/giNnm/tzw5wPcsN1+e3zY2/sh97/1/H/v/++t/b+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3LDz/wMjvE3iwt0vMDj//z+79/FfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/j/IH7P4/zB/zOK/ZP6YxX+p/DGL/4/yxyz+P84fs/gvnT9m8V8mf8ziv2z+mMX/J/ljFv/l8scs/svnj1n8f5o/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/LH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/r/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+ePWfy3yh+z+P8mf8ziv3X+mMX/t/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9d/pjF//f5Yxb/HfLHLP5/yB+z+P8xf8ziv2P+mMV/p/wxi/+f8scs/jvnj1n8d8kfs/jvmj9m8f9z/pjF/y/5Yxb/3fLHLP5/zR+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6DBvLHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4j9J/pjF/6P5Yxb/SfPHLP4fyx+z+E+WP2bx/3j+mMX/E/ljFv/J88cs/p/MH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8P5s/ZvGfMn/M4v+5/DGL/+fzxyz+X8gfs/hPlT9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/+v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Rv6YxX/W/DGL/zfzxyz+s+WPWfy/lT9m8f92/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v5M/ZvGfO3/M4j9P/pjFf978MYv/d/PHLP7z5Y9Z/L+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+ePWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/H+SPWfx/mD9m8V8yf8ziv1T+mMX/R/ljFv8f549Z/JfOH7P4L5M/ZvFfNn/M4v+T/DGL/3L5Yxb/5fPHLP4/zR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/X+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/+v88cs/lvlj1n8f5M/ZvHfOn/M4v/b/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/y5/zOL/+/wxi/8O+WMW/z/kj1n8/5g/ZvHfMX/M4r9T/pjF/0/5Yxb/nfPHLP675I9Z/HfNH7P4/zl/zOL/l/wxi/9u+WMW/7/mj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vzf25bDP7H4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvF/99P8/zmL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4T5I/ZvH/aP6YxX/S/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+E+RP2bx/3T+mMX/M/ljFv/P5o9Z/KfMH7P4fy5/zOL/+fwxi/8X8scs/lPlj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/ev6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+RP2bxnzV/zOL/zfwxi/9s+WMW/2/lj1n8v50/ZvGfPX/M4j9H/pjFf878MYv/XPljFv/v5I9Z/OfOH7P4z5M/ZvGfN3/M4v/d/DGL/3z5Yxb/7+WPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/x/mj1n8l8wfs/gvlT9m8f9R/pjF/8f5Yxb/pfPHLP7L5I9Z/JfNH7P4/yR/zOK/XP6YxX/5/DGL/0/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/ef6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx/2X+mMX/V/ljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/+v8MYv/VvljFv/f5I9Z/LfOH7P4/zZ/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP6/yx+z+P8+f8ziv0P+mMX/D/ljFv8/5o9Z/HfMH7P475Q/ZvH/U/6YxX/n/DGL/y75Yxb/XfPHLP5/zh+z+P8lf8ziv1v+mMX/r/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/5IH8MYv/oPwxi/9I+WMW/5Hzxyz+o+SPWfwH549Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+H8kfs/hPkj9m8f9o/pjFf9L8MYv/x/LHLP6T5Y9Z/D+eP2bx/0T+mMV/8vwxi/8n88cs/p/KH7P4T5E/ZvH/dP6Yxf8z+WMW/8/mj1n8p8wfs/h/Ln/M4v/5/DGL/xfyxyz+U+WPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f96/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5E/ZvGfNX/M4v/N/DGL/2z5Yxb/b+WPWfy/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/+/kj1n8584fs/jPkz9m8Z83f8zi/938MYv/fPljFv/v5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF//v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/wf5Yxb/H+aPWfyXzB+z+C+VP2bx/1H+mMX/x/ljFv+l88cs/svkj1n8l80fs/j/JH/M4r9c/pjFf/n8MYv/T/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv+f5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8f95/pjF/xf5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvH/Zf6Yxf9X+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOL/6/wxi/9W+WMW/9/kj1n8t84fs/j/Nn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/LH7P4/z5/zOK/Q/6Yxf8P+WMW/z/mj1n8d8wfs/jvlD9m8f9T/pjFf+f8MYv/LvljFv9d88cs/n/OH7P4/yV/zOK/W/6Yxf+v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/DVf7vjPfvzmnxP0Ll/+9n8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5YxL/UQbyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyR/zOI/Sf6Yxf+j+WMW/0nzxyz+H8sfs/hPlj9m8f94/pjF/xP5Yxb/yfPHLP6fzB+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/D+bP2bxnzJ/zOL/ufwxi//n88cs/l/IH7P4T5U/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf/r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0b+mMV/1vwxi/8388cs/rPlj1n8v5U/ZvH/dv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+TP2bxnzt/zOI/T/6YxX/e/DGL/3fzxyz+8+WPWfy/lz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/nj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/kj1n8f5g/ZvFfMn/M4r9U/pjF/0f5Yxb/H+ePWfyXzh+z+C+TP2bxXzZ/zOL/k/wxi/9y+WMW/+Xzxyz+P80fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/lj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/1/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/PHLP5b5Y9Z/H+TP2bx3zp/zOL/2/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8uf8zi//v8MYv/DvljFv8/5I9Z/P+YP2bx3zF/zOK/U/6Yxf9P+WMW/53zxyz+u+SPWfx3zR+z+P85f8zi/5f8MYv/bvljFv+/5o9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vtJ/Uf7F9db/PeX+v+rLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/wQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP+pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8J8kfs/h/NH/M4j9p/pjF/2P5Yxb/yfLHLP4fzx+z+H8if8ziP3n+mMX/k/ljFv9P5Y9Z/KfIH7P4fzp/zOL/mfwxi/9n88cs/lPmj1n8P5c/ZvH/fP6Yxf8L+WMW/6nyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/PX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/IH7P4z5o/ZvH/Zv6YxX+2/DGL/7fyxyz+384fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/938scs/nPnj1n858kfs/jPmz9m8f9u/pjFf778MYv/9/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/w/zxyz+S+aPWfyXyh+z+P8of8zi/+P8MYv/0vljFv9l8scs/svmj1n8f5I/ZvFfLn/M4r98/pjF/6f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/z/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/PH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/3X+mMV/q/wxi/9v8scs/lvnj1n8f5s/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv/f5Y9Z/H+fP2bx3yF/zOL/h/wxi/8f88cs/jvmj1n8d8ofs/j/KX/M4r9z/pjFf5f8MYv/rvljFv8/549Z/P+SP2bx3y1/zOL/1/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/2kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfwnyR+z+H80f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/Mn/M4v+r/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/df6YxX+r/DGL/2/yxyz+W+ePWfx/mz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/lj1n8f58/ZvHfIX/M4v+H/DGL/x/zxyz+O+aPWfx3yh+z+P8pf8ziv3P+mMV/l/wxi/+u+WMW/z/nj1n8/5I/ZvHfLX/M4v/X/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/6QP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j+h2P+dzd//Oov/RGL/D8riP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8xkD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0nyxyz+H80fs/hPmj9m8f9Y/pjFf7L8MYv/x/PHLP6fyB+z+E+eP2bx/2T+mMX/U/ljFv8p8scs/p/OH7P4fyZ/zOL/2fwxi/+U+WMW/8/lj1n8P58/ZvH/Qv6YxX+q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X88fs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/838scs/rPmj1n8v5k/ZvGfLX/M4v+t/DGL/7fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/nfwxi//c+WMW/3nyxyz+8+aPWfy/mz9m8Z8vf8zi/738MYv//PljFv8F8scs/gvmj1n8F8ofs/h/P3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/IH/M4v/D/DGL/5L5Yxb/pfLHLP4/yh+z+P84f8ziv3T+mMV/mfwxi/+y+WMW/5/kj1n8l8sfs/gvnz9m8f9p/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/7P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/j/In/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/MH7P4/yp/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+dP2bx3yp/zOL/m/wxi//W+WMW/9/mj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/d/ljFv/f549Z/HfIH7P4/yF/zOL/x/wxi/+O+WMW/53yxyz+f8ofs/jvnD9m8d8lf8ziv2v+mMX/z/ljFv+/5I9Z/HfLH7P4/zV/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH5P4jzmQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/I5n/aP/mfBb/jWX+/24W/03yxyz+v8wfs/j/Kn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f50/ZvHfKn/M4v+b/DGL/9b5Yxb/3+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf93+WMW/9/nj1n8d8gfs/j/IX/M4v/H/DGL/475Yxb/nfLHLP5/yh+z+O+cP2bx3yV/zOK/a/6Yxf/P+WMW/7/kj1n8d8sfs/j/NX/M4r97/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPNZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I89kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0ne1//td9555//Npv0nZvH/aI9/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8p/SINGHAOL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP7jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/SP6YxX+S/DGL/0fzxyz+k+aPWfw/lj9m8Z8sf8zi//H8MYv/J/LHLP6T549Z/D+ZP2bx/1T+mMV/ivwxi/+n88cs/p/JH7P4fzZ/zOI/Zf6Yxf9z+WMW/8/nj1n8v5A/ZvGfKn/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/jfwxi/+s+WMW/2/mj1n8Z8sfs/h/K3/M4v/t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyd/zOI/d/6YxX+e/DGL/7z5Yxb/7+aPWfznyx+z+H8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/j/MH/M4r9k/pjFf6n8MYv/j/LHLP4/zh+z+C+dP2bxXyZ/zOK/bP6Yxf8n+WMW/+Xyxyz+y+ePWfx/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8sf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/zxyz+v8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v88cs/r/KH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f549Z/LfKH7P4/yZ/zOK/df6Yxf+3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/13+mMX/9/ljFv8d8scs/n/IH7P4/zF/zOK/Y/6YxX+n/DGL/5/yxyz+O+ePWfx3yR+z+O+aP2bx/3P+mMX/L/ljFv/d8scs/n/NH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938sck/uMO5I9Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9I/pjFf5L8MYv/R/PHLP6T5o9Z/D+WP2bxnyx/zOL/8fwxi/8n8scs/pPnj1n8P5k/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/h/Nn/M4j9l/pjF/3P5Yxb/z+ePWfy/kD9m8Z8qf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/1/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+N/DGL/6z5Yxb/b+aPWfxnyx+z+H8rf8zi/+38MYv/7PljFv858scs/nPmj1n858ofs/h/J3/M4j93/pjFf578MYv/vPljFv/v5o9Z/OfLH7P4fy9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fzx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+P8wf8ziv2T+mMV/qfwxi/+P8scs/j/OH7P4L50/ZvFfJn/M4r9s/pjF/yf5Yxb/5fLHLP7L549Z/H+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yx/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP6/yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/1/nj1n8t8ofs/j/Jn/M4r91/pjF/7f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Xf6Yxf/3+WMW/x3yxyz+f8gfs/j/MX/M4r9j/pjFf6f8MYv/n/LHLP47549Z/HfJH7P475o/ZvH/c/6Yxf8v+WMW/93yxyz+f80fs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+4w3kj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/0j+mMV/kvwxi/9H88cs/v8fe/SUNgoBQAHwVn/mY7Zt27Zt27Zt27Zt27Zt673vrKAzs4UZ1X/U8j+a/6jlf3T/Ucv/GP6jlv8x/Uct/2P5j1r+x/YftfyP4z9q+R/Xf9TyP57/qOV/fP9Ry/8E/qOW/wn9Ry3/E/mPWv4n9h+1/E/iP2r5n9R/1PI/mf+o5X9y/1HL/xT+o5b/Kf1HLf9T+Y9a/qf2H7X8T+M/avmf1n/U8j+d/6jlf3r/Ucv/DP6jlv8Z/Uct/zP5j1r+Z/YftfzP4j9q+Z/Vf9TyP5v/qOV/dv9Ry/8c/qOW/zn9Ry3/c/mPWv7n9h+1/M/jP2r5n9d/1PI/n/+o5X9+/1HL/wL+o5b/Bf1HLf8L+Y9a/hf2H7X8L+I/avlf1H/U8r+Y/6jlf3H/Ucv/Ev6jlv8l/Uct/0v5j1r+l/Yftfwv4z9q+V/Wf9Tyv5z/qOV/ef9Ry/8K/qOW/xX9Ry3/K/mPWv5X9h+1/K/iP2r5X9V/1PK/mv+o5X91/1HL/xr+o5b/Nf1HLf9r+Y9a/tf2H7X8r+M/avlf13/U8r+e/6jlf33/Ucv/Bv6jlv8N/Uct/xv5j1r+N/Yftfxv4j9q+d/Uf9Tyv5n/qOV/c/9Ry/8W/qOW/y39Ry3/W/mPWv639h+1/G/jP2r539Z/1PK/nf+o5X97/1HL/w7+o5b/Hf1HLf87+Y9a/nf2H7X87+I/avnf1X/U8r+b/6jlf3f/Ucv/Hv6jlv89/Uct/3v5j1r+9/Yftfzv4z9q+d/Xf9Tyv5//qOV/f/9Ry/8B/qOW/wP9Ry3/B/mPWv4P9h+1/B/iP2r5P9R/1PJ/mP+o5f9w/1HL/xH+o5b/I/1HLf9H+Y9a/o/2H7X8H+M/avk/1n/U8n+c/6jl/3j/Ucv/Cf6jlv8T/Uct/yf5j1r+T/Yftfyf4j9q+T/Vf9Tyf5r/qOX/dP9Ry/8Z/qOW/zP9Ry3/Z/mPWv7P9h+1/J/jP2r5P9d/1PJ/nv+o5f98/1HL/wX+o5b/C/1HLf8X+Y9a/i/2H7X8X+I/avm/1H/U8n+Z/6jl/3L/Ucv/Ff6jlv8r/Uct/1f5j1r+r/Yftfxf4z9q+b/Wf9Tyf53/qOX/ev9Ry/8N/qOW/xv9Ry3/N/mPWv5v9h+1/N/iP2r5v9V/1PJ/m/+o5f92/1HL/x3+o5b/O/1HLf93+Y9a/u/2H7X83+M/avm/13/U8n+f/6jl/37/Ucv/A/6jlv8H/Uct/w/5j1r+H/Yftfw/4j9q+X/Uf9Ty/5j/qOX/cf9Ry/8T/qOW/yf9Ry3/T/mPWv6f9h+1/D/jP2r5f9Z/1PL/nP+o5f95/1HL/wv+o5b/F/1HLf8v+Y9a/l/2H7X8v+I/avl/1X/U8v+a/6jl/3X/Ucv/G/6jlv83/Uct/2/5j1r+3/Yftfy/4z9q+X/Xf9Ty/57/qOX/ff9Ry/8H/qOW/w/9Ry3/H/mPWv4/9h+1/H/iP2r5/9R/1PL/mf+o5f9z/1HL/xf+/2tgUNH/l/6jlv+v/Ect/1/7j1r+v/Eftfx/6z9q+f/Of9Ty/73/qOX/B/9Ry/+P/qOW/5/8Ry3/P/uPWv5/8R+1/P/qP2r5/81/1PL/u/+o5f8P/1HL/5/+o5b/v/xHLf9/+49a/v/xH5X8jzLIf9TyP5j/qOV/cP9Ry/8Q/qOW/wH/Ucv/kP6jlv+h/Ect/0P7j1r+h/EftfwP6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzL3t3G5lUWfhw/Xds9/dm/m3N4DRkMNt3Ela1dmQw2H+pjwVQdiwETyBZWRqUw9xDcQK0GJQZjmIwEEXWbugkkxowXwwSElUQlTkXjRDTEIaiLmBomMqJxqbnb3qW91zbrVa9rL/b5vGjvc8rvdFvy3TllawYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEqbt91yw9qOjrZNXnjhhRcDL07170xAaq9Ff6p/JAAAAAAAAAAAAAAAwEhyfDvRqf45AgAAAADA6aal9V3d1VVDTlUPPpjz87be902vXnn9nucfX1l+3//hy4e55ITBBz09PT0vNXfN7D+cVBRF6bNN7z+eXDkuXb+z6/LtfUeh+O2zza3btjcf3PmVrz88d+r0ObW9Z2uLNde1d7QtmVAUobq22Fo6aKgqijCxttheOmgsHUyqLe4vHSztPZhSHCgdXHjtho51pRMnfGo47bS0fraoHlJsMeR3g8H9d3Zt2lV+P8oly1erKfr7r2v+4d6Kj5WN0H/5+qGqsv8x/wSBEY2t/9sXlt+PcskT7v+PttetGu5jI/dfvn6YoH9IZ5jn/yGN9j7v79k/Y4Tn/7nDXHJg/9O/rOwq9X/TL1+o7z9VczLP/6XP13cUqiv7nzDk+b/0HF9Tfv6fVBShdpy/HHBaaWn9XPdo9//K7of2X3NWxaZqcP9HV+2pLvV/+K4H3t9/qvak+h+4fqgZ5f5f9ZkDQ3+swNi0tO7uqbj/j6H/YsEwlxzof/7uY1eV+j9j55F9gz42lv5rK/tfvOXGTyzevO2W+vYb165vW992U2NjQ9PSZU2NFy1f3PtI0Pd2nL8qcHoY3/2/mFqxqSqKtoH9og8ve6nU/8Fz//G3/lOTx9j/xFHv/8+5/8Owzp9QTJxYbF27Zcumhr635cPGvrd9/9kw/Z/49f+I/c8r/3/A8tfdpS/IB/a/eedXP1Lq/95Jqx7oPzVxjP1PGq3/ztc+LxBhnPf/dRWbIf23v/qddaX+//TK8UP9p8b69f/kUfvf5f4P49HSWvEXfv7HSv2v/tfh4f6c4CSEKf78D9LJ0f/Wab/4Ztw6TNU/pJOj/6Wb2yL/sm34P/1DOjn6/9WOqiNx63CG/iGdHP1/rfvBjXHrME3/kE6O/vfPfuSpuHX4f/1DOjn6P75++lVx61Cnf0gnR/+XfWnv6rh1mK5/SCdH/1WvTHsibh1m6B/SydF/fdXZn4pbh9fpH9LJ0f91nQ+/GLcOM/UP6eTo//M7fx35fTrh9fqHdHL0/9Qft+6IW4dZ+od0cvT/wqz2+rh1OFP/kE6O/u+/4YlH4tbhDfqHdHL0//S3Pngsbh2C/iGdHP1/49kja+LWYbb+IZ0c/e9beOwPcetwlv4hnRz9//ujV38gbh3eqH9IJ0f/Yf/y78atw9n6h3Ry9H/Fk3c1xK3DHP1DOjn671xx251x63CO/iGdHP03NS+cHbcO5+of0snR/4w///3uuHWYq39IJ0f/H7vvvZX/7vdJCufpH9LJ0f/NG1Y/GrcO5+sf0snR/8oZPRfErcM8/UM6Ofo/fPS+H8Wtw3z9Qzo5+r/7ziVXxK3Dm/QP6eTo/we3ntcdtw5v1j+kk6P/l2vvuDVuHRboH9LJ0f+Xf1azLG4dFuof0snR/48f+v6uuHV4i/4hnRz9v/i+x86JW4cL9A/p5Oh/98Wzvhi3Dm/VP6STo/93P7Nxfdw6LNI/pJOj/8l7f380bh3q9Q/p5Oh//qqDH4pbhwv1D+nk6H/DojW/i1uHxfqHdHL0/8yBpw/FrcMS/UM6Ofrf8dinm+PWoUH/kE6O/h+/rOM/cevQqH9IJ0f//2z6ycfj1mGp/iGdHP2feejbX4hbhyb9Qzo5+r/6wckz49bhIv1DOjn633jN7O/FrcMy/UM6Ofq/ZO5Dl8atw9v0D+nk6P89f11xc9w6XKx/SCdH/3X33PNc3Dos1z+kk6P/edfefk3cOlyif0gnR//Xz6l/Mm4dLtU/pJOj/zuOtyyIW4cV+od0cvTfddvz++LWYaX+IZ0c/Xd/8uW6uHV4u/4hnRz9751y5b1x6/AO/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAD//xDC0no=") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) socket$inet(0x2, 0x802, 0x5) connect$can_bcm(r1, &(0x7f0000000200), 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000002b80)=""/4065, 0xfe1}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) utimensat(r3, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) 15.053778997s ago: executing program 0 (id=455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x511, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13.287840174s ago: executing program 2 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (fail_nth: 1) 13.08435632s ago: executing program 2 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 12.097052262s ago: executing program 2 (id=461): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e6405"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) timer_gettime(0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) writev(r0, &(0x7f0000000580)=[{}], 0x1) 12.016035665s ago: executing program 1 (id=462): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 11.924182647s ago: executing program 0 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) sendmmsg$inet(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000100)={0x77359400}, 0x10) 9.466758206s ago: executing program 0 (id=464): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x1000003, 0x109000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) fsopen(&(0x7f0000000340)='hugetlbfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.880000905s ago: executing program 2 (id=465): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents64(r5, 0xffffffffffffffff, 0x43) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000001000)=""/91) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x34}}, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 8.10620997s ago: executing program 1 (id=466): socket$packet(0x11, 0x3, 0x300) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000484, &(0x7f0000000140)={[{@noquota}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x623d, &(0x7f0000006580)="$eJzs3cuOHFcZB/Cv+jaXENvKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/xyNej4iPj0Xcf3Bnvbr5/AH78f0//+MPP3nmR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYR8UzbnQDmWtF2BzgS9x/cWS9SvkX99WBtpz2fC7In/81i9/qOSdNpmueYzOrxtRX9eG5Cf1Zm1Id5kvPvNfO/stM+Sssddf6zMin/0c6lT52T8+838294evLvjc2/q3L+g0Pl35c/AAAAAADMsfz3/xMtH/9devxNOZD9jv+uzagPAAAAAAAAAPCkHXb8v0Fj/L9dxv8DAACAuVV9Vq/87tjD2yZ9F1t1++Ui4tnG8kDHpItlVtvuBwAAAAAAAAAAAAB0yWDnHN7LRcQwIp5dXS3Lsvqpa9aH9bjrL7qubz90WdtP8gAAsOPjY41r+YuI5Yi4nL7rb7i6ulqWyyur5Wq5spTfz46WlsuV2ufaPK1uWxod4A3xYFRWv2y5tl7dtM/L09qbv6+6r1HZP0DHZqPFwAEgInZeje5PekX6n9erxVSWx6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtnnHdn7P+qJ/Kuq4c7269iIjN+jrVewbD8QPAgtmMT9ruAi2Sf6cNIuKFtjsBzLWi7Q5wJO4/uLNepHyL+utBGt89nwuyJ//NYnu9vP646TTNc0xm9fjain48N6E/z8+oD/Mk599r5n9lp32Ulnv8/Ms9fyZs6xyjSflX23mihf60Leffb+bfcNT7/6xsRW9s/l2V8x8cKv++/AEAAAAAYI7lv/+fmKvjv6NH3Zyp9jv+uzZ2jaPrCwAAAAAAAAA8Kfcf3FnP173m4/9fGLOc6z+fTjn/Qv6dlPPvNfL/amO5fm3+3tsP8//3gzvrf7z1r8/n6UHzX8ozRXpkFekRUaR7KgZp+jhb91lbw/6ouqdh0etX97BWHo8YvhvX4npsxNk9y/bS/0e5235uT3vV0+F2e9nfaT+/p32w257Xv7CnfZjOLipXcvvpWI+fx/V4Z7u9aluasv3LU9rLKe05/779v5Ny/oPaT5X/amovGtPKvY96n9nv69Nx9/PWtS/+5uzRb85UW9Hf3ba6avteaqE/2/8nz4zilzc3bpy+ffXWrRvnIk323Ho+0uQJy/kP08/u8//LO+35eb++v977aHTo/OfFVgwm5v9ybb7a3ldm3Lc25PxH6Sfn/05qH7//L3L+k/f/V1voDwAAAAAAAAAAAAAAAOynLMvtS0TfioiL6fqftq7NBABmK7/+l0m+fVZ1f8b3p1YveF3MWX9mWn9azld/1OpFrOvK8d6sFxHxt/o61XuGX4/7ZQDAPPs0Iv7Zdidojfw7LH/fXzU91XZngJm6+cGHP716/frGjZtt9wQAAAAAAAAAeFR5/M+12vjPp8qyvNtYbs/4r2/H2uOO/znIM7sDjE4YqLp/+G3az1Zv1O/Vhht/Merjc9dHKB7uzu03/vdgyv0Np7SPprQvTWlfntI+9kKPmpz/i7Xxzk9FxMnG8OtdGP+1OeZ9F+T8X6o9nqv8v9JYrp5/+ftFzr+3J/8zt97/xZmbH3z42rX3r7638d7Gzy6cO3f2wsWLly5dOvPutesbZ3f+bbHHRyvnn8e+dh5ot+T8c+by75ac/5dSLf9uyfl/OdXy75acf36/J/9uyfnnzz7y75ac/yupln+35Py/lmr5d0vO/9VUy79bcv5fT7X8uyXn/1qq5d8tOf/TqZZ/t+T8z6T6gPmvHHW/mI2cfz7CZf/vlpx/PrNB/t2S8z+favl3S87/Qqrl3y05/9dTLf9uyfl/I9Xy75ac/8VUy79bcv7fTLX8uyXnfynV8u+WnP+3Ui3/bsn5fzvV8u+WnP8bqZZ/t+T8v5Nq+XdLzv+7qZZ/t+T8v5dq+XdLzv/NVMu/Wx5+/78ZM2bM5Jm2n5kAAAAAAAAAAAAAgKZZnE7c9jYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8nx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/uYuQ66/uBn9k3rx1IDIT8nfwNbBwTQrLJru3EL7QpJrw2vJVAKPQF2/WuzYLf8Nol0Eg2DZSoGBVVtA0XbQGhNjcVuUAqrQDlArVCqgTtBb1BVKhcRFVAAakSrYCt5pzneXZmdnZm1x6vz5zz+UjJLztzZs6ZM2fO7nc33xkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBWt752/pONLMua/+T/2pplz2v+9+aprfllr7rWWwgAAABcqV/k/37uhnTBwTXcqGWZf37pt7+ytLS0lL1n9M/GP7u0lK6YyrLxTVmWXxc99YP3NlqXCR7LJhsjLV+P9Fn9aJ/rx/pcP97n+ok+12/qc/1kn+tX7IAVNhe/j8nvbGf+n1uLXZrdmI3n1+3scqvHGptGRuLvcnKN/DZL48eyhexENp/Nti1fLNvIl//arc11vSmL6xppWdf25hHyk0ePxm1ohH28s21dy/cZ/eg12dRPf/Lo0b859+zN3Wbf3dB2f8V23rGjuZ0fD5cU29rINqV9ErdzpGU7t3d5TkbbtrOR3675353b+dwat3N0eTM3VOdzPpmN5P/9nXw/jbX+Wi/tp+3hsp/dlmXZxeXN7lxmxbqykWxL2yUjy8/PZHFENu+jeSi9MBtb13F66xqO0+ac29l+nHa+JuLzf2u43dgq29D6NP3oYxMtz/vPly7nOI2aj3q110rnMTjo10pZjsF4XHwnf9CPdz0Gd4bH/+jtqx+DXY+dLsdgetwtx+COfsfgyMRovs3pSWjkt1k+Bne1LT+ar6mRz2du730Mzpw7eWZm8SMfvXvh5JHj88fnT+3ZtWt2z969+/fvnzm2cGJ+tvj3Ze7t8tuSjaTXwI6w7+Jr4BUdy7YeqktfmFhx/r3c1+Fkj9fh1o5lB/06HOt8cI2NeUGuPKaL18a7mjt98tJItsprLH9+7rzy12F63C2vw7GW12HX7yldXodja3gdNpc5c+fafmYZa/mn2zas/r3gyo7BrS3HYOfPI53H4KB/HinLMTgZjovv3bn694LtYXsfn17vzyOjK47B9HDDuad5Sfp5f3J/Prodl7c0r7huIju/OH/2nkeOnDt3dlcWxoZ4Ucux0nm8bml5TNmK43Vk3cfrwYWXPn5Ll8u3hn01eXfzX5OrPlfNZe69p/dzlX93674/2y7dnYUxYBu9P7t9N2/uz4ks+9w3P/bQ1x/93GtX3Z/NvPnxmSv/WTzl0pbz7/gq59+Y+39ZrC/d1WOj42PF63c07Z3xtvNx+1M1lp+7Gvm6n5tZ2/l4PPyz0efjG3ucj7d1LDvo8/F454OL5+NGv992XJnO53MyHCcnZnufj5vLbNu93mNyrOf5+LYwG2H/vzIkhZSLWo6d1Y7btK6xsfHwuMbiGtqP0z1ty4+HbNZc15O7ww+FaSvXdpzecVux/GjL7aKNOk6nOpYd9HGafve12nHa6Pfbt8vz2IW4muL5nAzHxY17eh+nzWWevvfKz52b43+2nDsn+h2D46MTzb0yng7C/HyfLW2Ox+A92dHsdHYim8uvnciPp0a+run71naunAj/bPS5cluPY/COjmUHfQym72OrHXuNsZUPfgA6n8/JcFw8cV/vY7C5zOv2DfZn1zvCJWmZlp9dO3+/ttrvvG7p2E1X61gZC9v5zX29fzfbXObE/vXmzN776a5wyXVd9lPn63e119RctjH7aVvYzmf3r76fmtvTXOazB9Z4PB3MsuzChx7If98b/r5y4fx3v9L2d5duf9O58KEHfvz8Y/+0nu0HYPj9shhbiu91LX+ZWsvf/wEAAIChEHP/SJiJ/A8AAACVEXN//L/CE/kfAAAAKiPm/rEwkyrk/z/sv8i21z278Mu8c1w085eCeH3aDQ8Wy8WO62z4emppWfPyB740/9//eGFtmzeSZdnPH/yDrstvezBuV2EqbOdTr2+/fIWv3L2mdR9++EJab2t//fPh/uPjWeth0K2CO5tl2ddu+HS+nqn3Xsrn0w8ezudDFx9/rLnMcweKr+Ptn3lRsfxfhvLvwWNH2m7/TNgPPwxz9s3d90e83ZcvvXL7vncvry/errHj+vxhP/G+4n7j++R85rFi+bifV9v+r3/qyS83l3/k5d23/8JI9+1/Mtzvl8L8n5cUy7c+B82v4+0+EbY/ri/e7p4vfqPr9j/1yWL5M28oljscZlz/HeHrnW94dqF1fz3SONL2uLI3FsvF9c9+90/y6+P9xfvv3P7JQ5fa9kfn8fH0vxX3M9OxfLw8rif6h471N++n9fiM63/yjw637ed+63/qoWde0rzfzvXf1bHcmQ/dma9/+f7a37Hprz7x6a7ri9tz8O/OtD2eg+8Ir+Ow/ifeF47HcP3/PlXcX+e7Kxx+R/v5Jy7/+a0X2h5P9KafFut/6tXH87lpcvOW6573/Osvvqy577LsO5uK++u3/uN/fbpt+79wU7E/4vWxo9+5/tXE9Z/98PSp04vnF+bSXn30hvy9c95SbE/c3hvCubXz60Onz71//uzU7NRslk1V9y30LtsXw/xxMS72XnppxRn0zofD83nLX3xty+3/+ql4+b+/q7j80puL71uvCMt9Jly+NTx/61v/Sk/celP++m48HbZwaeX7BV+J7Tv/a/+aFgyPv/Pngni8n3nx+/P90Lwu/74RX9dXuP3fnyvu56thvy6Fd2becdPy+lqXj++NcOmdxev9ivdfOM3F5/Vvw/P91h8W9x+3Kz7e74efY76xrf18F4+Pr14Y6bz//F08LobzSXaxuD4uFff3pedu6rp58X1Isos351//abqfm9f1MFez+JHFmRMLp84/MnNufvHczOJHPnro5Onzp84dyt/L89AH+t1++fy0JT8/zc3vvTfLz1ani3GVXevtP/Pw0bl9s7fPzR87cv7YuYfPzJ89fnRx8ej83OLtR44dm/9wv9svzN2/a/eBPft2Tx9fmLt//4EDew5ML5w63dyMYqP62Dv7welTZw/lN1m8/94Du+67797Z6ZOn5+bv3zc7O32+3+3z703TzVv//vTZ+RNHzi2cnJ9eXPjo/P27Duzdu7vvuwGePHNscWrm7PlTM+cX58/OFI9l6lx+cfN7X7/bU02L/1H8PNupUbwRX/b2u/am92dt+tLHVr2rYpGONxB9NrwXzbdecGb/Wr6OuX88zKQK+R8AAADIxdw/EWYi/wMAAEBlxNy/KcxE/gcAAIDKiLl/Msz0vwTUJP9Xrv+/7cKa1q//r//fur/0/2vW/39n2fr/xflC/38wrrR/r/8f6P/r/+v/6//r/zMAZev/x9y/Ocv8/R8AAAAqKub+LWEm8j8AAABURsz914WZyP8AAABQGTH3Py/MpCb5X/9f/1//X/9f/7/7+vX/h5P+f2/6/33o/89k9er/X+yz/X+/KT9Fl7b/v7n1C/1/yqhs/f+Y+58fZlKT/A8AAAB1EHP/9WEm8j8AAABURsz9N4SZyP8AAABQGTH3bw0zqUn+1/+/ov5/6lzp/7dvv/5/uxr1//NThP5/d/r/G0P/vzf9/z70/33+v8//1/9noMrW/4+5/wVhJjXJ/wAAAFAHMfe/MMxE/gcAAIDyGbu8m8Xc/6IwkxX5/zJXAAAAAFxzMfffmHUUwWvy93/9f5//r/+v/+/z/7uvf+39/9FM/7889P970//vQ/9f/1//X/+fgSpb/z/P/dlk9uIwk5rkfwAAAKiDmPtvCjOR/wEAAKAyYu7/f2Em8j8AAABURsz928JMapL/9f8r0///WetTp/+v/99r/fr/Pv+/yvT/e9P/70P/X/9f/1//n4EqW/8/5v6bw0xqkv8BAACgDmLuvyXMRP4HAACAyoi5//+Hmcj/AAAAUBkx928PM6lJ/tf/L3n/PzZHff6//r/+fyn7/5P6/6Wj/9+b/n8f+v/6//r/+v8MVNn6/zH3vyTMpCb5HwAAAOog5v6XhpnI/wAAAFAZMfe/LMxE/gcAAIDKiLl/KsykJvl/Pf3/xkX9/9Vc5c//n1jD5/+30f/X/++1/o3o//9xy/MZVbH/n+n/l47+f2/6/33o/+v/6//r/zNQZev/x9x/a5hJTfI/AAAA1EHM/TvCTOR/AAAAqIyY+28LM5H/AQAAoDJi7t8ZZlKT/O/z/4ei/5/p/+v/D1v/vy6f/5/p/5eO/n9v+v996P/r/+v/6/8zUGXr/8fc//Iwk5rkfwAAAKiDmPtvDzOR/wEAAKAyYu5/RZiJ/A8AAACVEXP/HWEmNcn/+v/6//r/+v/6/93Xr/8/nPT/e9P/70P/X/9f/1//n4EqW/8/5v5XhpnUJP8DAABAHcTcf2eYifwPAAAAlRFz/11hJvI/AAAAVEbM/dNhJjXJ//r/+v/6//r/+v/d16//P5z0/3vT/+9D/1//X/9f/5+BKlv/P+b+u8NMapL/AQAAoA5i7r8nzET+BwAAgMqIuX8mzET+BwAAgMqIuX82zKQm+V//X/9f/1//f139/5ct36/+f0H/v1z0/3vT/+9D/1///5r3/8f1/6mUsvX/Y+7fFWZSk/wPAAAAdRBz/+4wE/kfAAAAKiPm/j1hJvI/AAAAVEbM/feGmdQk/+v/6//r/+v/+/z/7uvX/x9O+v+9Db7/Hx+i/r/+v/6/z//X/2elsvX/Y+6/L8ykJvkfAAAA6iDm/r1hJvI/AAAAVEbM/fvCTOR/AAAAqIyY+/eHmdQk/+v/6//r/+v/6/93X7/+/3DS/+/N5//3of+v/z/E/f/msaX/T9mUrf8fc/+BMJOa5H8AAACog5j7XxVmIv8DAABAZcTc/ythJvI/AAAAVEbM/b8aZlKT/K//r/+v/6//X/b+/4T+v/7/Ouj/96b/34f+v/7/EPf/ff4/ZVS2/n/M/feHmdQk/wMAAEAdxNz/a2Em8j8AAABURsz9rw4zkf8BAACgMmLuPxhmUpP8r/+/Qf3/eKH+v/6//r/P/9f/v6r0/3vT/+9D/1//X/9f/5+BKlv/P+b+14SZ1CT/AwAAQB3E3P9AmIn8DwAAAJURc/9rw0zkfwAAAKiMmPtfF2ZSk/yv/+/z/699/3+8bdv1/5dvp/9f0P/X/18P/f/e9P/70P/X/9f/1/9noMrW/4+5//VhJjXJ/wAAAFAHMfe/IcxE/gcAAIDKiLn/jWEm8j8AAABURsz9bwozqUn+1//X/7/2/X+f/6//X9D/1/8fBP3/3vT/+9D/1//X/9f/Z6DK1v+Puf/Xw0xqkv8BAACgDmLufzDMRP4HAACAyoi5/81hJvI/AAAAVEbM/W8JM6lJ/tf/1//X/9f/1//vvn79/+Gk/9/bkPX/f3F9uFz/v6D/X+7tX2//f6zj66vS///Bav3/pU2dt9f/52ooW/8/5v63hpnUJP8DAABAHcTc/7YwE/kfAAAAKiPm/reHmcj/AAAAUBkx9/9GmElN8r/+f3M7ltvL+v/6//kF+v/6//r/Q0v/v7ch6//7/P8O+v/l3n6f/6//z0pl6//H3P+OMJOa5H8AAACog5j7Hwozkf8BAACgMmLuf2eYifwPAAAAlRFz/7vCTGqS//X/ff6//r/+v/5/9/Xr/w8n/f/e9P/70P/X/y9b//8/9f8ZbmXr/8fc/3CYSU3yPwAAANRBzP3vDjOR/wEAAKAyYu7/zTAT+R8AAAAqI+b+94SZ1CT/6/8PS/9/Sv9/nf3/iXCZ/r/+v/5/vej/96b/34f+v/5/2fr/Pv+fIVe2/n/M/e8NM1l7/p9c85IAAADANRFz/2+FmdTk7/8AAABQBzH3/3aYifwPAAAAlRFz/++EmdQk/+v/D0v/3+f/Zz7/X/+/4/Ho/+v/d7Om/n1j9Vr+2vv/8cyj/6//r/8f6f/r/+v/06ls/f+Y+383zKQm+R8AAADqIOb+94WZyP8AAAAwFLr9P9mdYu4/FGYi/wMAAEBlxNx/OMykJvlf/1//X/+/pP3/P9/xL9/79tsO79L/1//X/1+XDf38/+aL3+f/6//r/yf6//r/+v90Klv/P+b+I2Emy8HvLT7gHwAAAIZbzP2/F2ZSk7//AwAAQB3E3H80zET+BwAAgMqIuX8uzKQm+V//X/9f/7+k/f8h/vz/uD+Gqf8/vWmI+v/xpKv/39WG9v/fvdwT1/9fb/9/ouulnf3/hv5/G/3/dW//t7Is0//X/+caKlv/P+b++TCTmuR/AAAAqIOQ+0eOFXP5CvkfAAAAKiPm/uNhJvI/AAAAVEbM/e8PM6lJ/tf/1//X/9f/9/n/3ddf2v6/z//vSf+/t/L0/7vz+f/6/8O8/fr/+v+sVLb+f8z9C2EmNcn/AAAAUAcx938gzET+BwAAgMqIuf+DYSbyPwAAAFRGzP0nwkxqkv/1//X/9f/1//X/u69f/3846f/3pv/fh/6//r/+v/4/A1W2/n/M/SfD/D/27qPLsrrc4/ipvkXTvZjc2R3cwb1zXwIDGesLcMDEga7lcgAq5kRjjphzwCwGDKCICRUzmFDMomLOATPqahf08zxdYdc+VV3n1Nnn//98Bj50QXtOuwrw19Xf3qWT/Q8AAAA9yN1/Sdxi/wMAAEAzcvdfGrfY/wAAANCM3P0PiVs62f/6f/1/s/3/vfX/e72+/l//3zL9/zj9/xz6f/2//l//z0JNrf/P3f/QuKWT/Q8AAAA9yN3/sLjF/gcAAIBm5O6/LG6x/wEAAKAZufsfHrd0sv939P8bsz77/8x49f8t9f+e/7/n6+v/9f8tO9r+/4q7/8mn/9f/6/+D/l//r/9np6n1/7n7HxG3dLL/AQAAoAe5+x8Zt9j/AAAA0Izc/Y+KW+x/AAAAaEbu/kfHLZ3sf8//9/x//b/+X/8//Pr6//Xk+f/jeur/L7vtgkvuvP5/bzjI6+v/9f/6f/0/izW1/j93/2Pilk72PwAAAPQgd/9j4xb7HwAAAJqRu/9xcYv9DwAAAGvo5OBHc/c/Pm7pZP/r//X/+v/o/0/o//X/+v8W6P/H9dT/n8vr6//1//p//T+LNbX+P3f/E+KWTvY/AAAA9CB3/xPjFvsfAAAApmvoF2KPyN1/edxi/wMAAEAzcvefils62f/6/+X3///W/69H/+/5//p//X8T9P/j9P9z6P/1//p//T8LNbX+P3f/FXFLJ/sfAAAAepC7/0lxi/0PAAAAzcjd/+S4xf4HAACAZuTuf0rc0sn+1/97/r/+X/+v/x9+ff3/etL/j9P/z6H/P2w/f57+X/+v/2erA/b/d438Y3sh/X/u/qfGLZ3sfwAAAOhB7v6nxS32PwAAADQjd//T4xb7HwAAAJqRu/8ZcUsn+1//r//X/+v/z7n/3/2pd48j7f+P6//ZTv8/bjL9/8bm4If1/2vf/3v+v/5f/882U3v+f+7+Z8Ytnex/AAAA6EHu/mfFLSP7/8A/mQ8AAACsVO7+Z8ctvv4PAAAAay+rs9z9z4lbOtn/+n/9v/5f/+/5/8OvP9b/37Dl/en/p0X/P24y/f8e9P/6/3V+//p//T+7Ta3/z93/3Lilk/0PAAAAPcjdf2XcYv8DAABAM3L3Py9usf8BAACgGbn7nx+3dLL/h/v/s39e/78/+v/t71//P/z5saj+P/8b9f+j/f9Fy+v/z3zGef7/NOn/x+n/59D/6//1/3v1/yfnfX/9P0Om1v/n7n9B3NLJ/gcAAIAe5O5/Ydxi/wMAAEAzcve/KG6x/wEAAKAZuftfHLd0sv89/1//r/9fv/7f8//PWOXz/2dH3v9v6v/3Sf8/Tv8/h/5f/6//H3/+/8jvAqD/Z8jU+v/c/S+JWzrZ/wAAANCD3P0vjVvsfwAAAFgPW3/twM5fUBpy978sbrH/AQAAoBm5+18et7Sz/0ef1an/1//r//X/+v/h159W/+/5//ul/x+n/59D/7+Mfn6zsf7/qr2+/xT6/8uX3f+P0P8zZFv/f+PZj6+q/8/d/4q4pZ39DwAAAN3L3f/KuMX+BwAAgGbk7n9V3GL/AwAAQDNy9786bulk/y+9/x/53Qf0//p//b/+X/+v/180/f84/f8cnfT/x/f4+Kqfn39Yq37/U+j/l/78/xH6f4Zs6/+3WFX/n7v/NXFLJ/sfAAAA1tJNB/vLc/e/Nm6x/wEAAKAZufuvilvsfwAAAGhG7v7XxS2d7H/P/9f/6//1//r/4dfX/6+nQ/X3x/T/Rf/fdP+/l1X38+v+/vX/+n92m1r/n7v/9XFLJ/sfAAAAepC7/w1xi/0PAAAAzcjd/8a4xf4HAACAZuTuf1Pc0sn+1/8vt//Pj+v/9f+zI+r/jw18Pur/9f896fb5/xtD/ybabY/+/5YHnbrv9o/o//X/+n/9v/6fffrvkT83if7/9Nn/d5m7/81xSyf7HwAAAHqQu/8tcYv9DwAAAM3I3f/WuMX+BwAAgGbk7r86bjng/h9rHqZM/+/5//r/tvp/z//X//eu2/5/nzz/fw79v/5f/6//Z6Em0f9v+Xbu/rfFLb7+DwAAAM3I3f/2uMX+BwAAgGbk7n9H3GL/AwAAQDNy978zbulk/+v/9f/6f/2//n/49fX/60n/P07/P8c69f9XH6L/3xz+8Kr7+cNa9fvX/+v/2W1q/X/u/mvilk72PwAAAPQgd/+74hb7HwAAAJqRu//dcYv9DwAAAM3I3f+euKWT/a//1//r//X/+v/h19f/ryf9/zj9/2w2u3bkDQz1/6fPn2b/7/n/k3v/+n/9P7tNrf/P3f/euKWT/Q8AAAA9yN1/bdxi/wMAAEAzcvdfF7fY/wAAANCM3P3vi1s62f/6f/2//l//r/8ffn39/3rS/4/T/8+xTs//1/9P7v3r//X/7Da1/j93//vjlk72PwAAAPQgd//1cYv9DwAAAM3I3f+BuMX+BwAAgGbk7r8hbulk/+v/9f+L6P+P73j/+v/hzw/9v/5f/798y+v/Z/p//b/+fw79v/5f/89OU+v/c/d/MG7pZP8DAABAD3L3fyhusf8BAACgGbn7Pxy32P8AAADQjNz9H4lbOtn/+n/9v+f/6//1/8Ovr/9fT57/P07/P4f+X/+v/9f/s1DD/f/lK+v/c/d/NG7pZP8DAABAD3L33xi32P8AAADQjNz9H4tb7H8AAABoRu7+j8ctnex//b/+f3v/P5vp//X/+v8zjqD/PzHT/y+c/n+c/n8O/X+b/f+xWUP9/8k9v/+y+v+7/y7S/3Oupvb8/9z9n4hbOtn/AAAA0IPc/TfFLfY/AAAANCN3/yfjFvsfAAAAmpG7/1NxSyf7X/+v//f8f/2//n/49T3/fz3p/8fp/+fQ/7fZ/y/p/W/u+Lbn/+v/2W1q/X/u/k/HLZ3sfwAAAOhB7v7PxC32PwAAADQjd/9n4xb7HwAAANbY8W3fyt3/ubilk/2v/9f/6//1//r/4dfX/68n/f84/f8c+n/9/+Sf/783/T9TNLX+P3f/5+OWTvY/AAAA9CB3/81xi/0PAAAAzcjdf0vcYv8DAABAM3L3fyFu6WT/6//1//r/9ez/T+j/9f/6/0FT6f8vvPA+t+r/9f/6f/2//l//37up9f+5+78Yt3Sy/wEAAKAHufu/FLfY/wAAANCM3P1fjlvsfwAAAGhG7v6vxC2d7P/d/f95szOF6hlD/X80avr/LfT/29+//n/488Pz//X/+v/lm0r/7/n/5/b+9f/6/3V+/wfq//9/9/fX/9OiqfX/uftvjVs62f8AAADQg9z9X41b7H8AAABoRu7+r8Ut9j8AAAA0I3f/bXFLJ/vf8//1//p//b/+f/j19f/rSf8/Tv8/h/5f/+/5/5c+4L/0/yzO1Pr/3P1fj1s62f8AAADQg9z934hb7H8AAABoRu7+b8Yt9j8AAAA0I3f/t+KWTva//l//r//X/+v/h19f/7+e9P/j9P9l5w/tjH76/xNDH1x1P39Yq37/zfT/nv/PAk2t/8/d/+24pZP9DwAAAD3I3f+duMX+BwAAgGbk7v9u3GL/AwAAQDNy938vbulk/+v/9f/t9//31//veH39v/6/Zfr//Df6MP3/HP30/4NW3c+v+/vX/+v/2W1q/X/u/tvjlk72PwAAAPQgd//34xb7HwAAAJqRu/8HcYv9DwAAAM3I3f/DuKWT/a//76v/35j12P97/r/+X//fE/3/OP3/HPp//b/+X//PQk2t/8/df8fGZpf7HwAAANbV/e714Nv3+9fecc9/npj9KG65aHZ6n1/GBgAAACbu7t2/sTmb/fieb/n6PwAAALQod/9P4pZO9r/+v6/+v8/n/+v/9f/6/57o/8fp/+fQ/+v/9f/6fxZqav1/7v6fxi1bht/mgX+UAAAAwJTk7v9Z3NLJ1/8BAACgB7n7fx637Nr/fjtAAAAAWFe5+38Rt3Ty9X/9/8T7/9mS+v/46/T/Z+j/p9H/H9P/6/8XQP8/7pD9/+kN/b/+f4T+X/+v/2enqfX/uft/Gbd0sv8BAACgUdt+RiF3/6/iFvsfAAAAmpG7/9dxi/0PAAAAzcjd/5u4pZP9r/8/8v4/U/UlPv//ZP2R5/933v9feWLw9afa/3v+v/5/EfT/4861/4+/T055/r/+f8yE+v/z9f/6f6Zhav1/7v7fxi2d7H8AAADoQe7+38Ut9j8AAAA0I3f/7+MW+x8AAACakbv/D3FLJ/tf/z/x5/+fU/+/j+f/6//76P/3eP12+v//ueDUzRc/8Lpr9P+cdZT9f34u9ND/54f1//r/MRPq/z3/X//PRCy+/9/c9sGD9v+5+/8Yt3Sy/wEAAKAHufvvjFvsfwAAAGhG7v4/xS32PwAAADQjd/+f45ZO9r/+X/8/lf4//7deQf9/6pz7/5Oz2Wwl/X82xb33/57/r//fzfP/x+n/59D/6//1//p/Fmrx/f/2Dx60/8/d/5e4pZP9DwAAAD3I3f/XuCX3/8aBf+oeAAAAmJjc/X+LW3z9HwAAAJqRu//vcUsn+1//r/+fSv+fPP//7Pdr6/n/F1ec2mf//3/1R/r/5dL/jzui/r9+3GvR/5+35Y/1//p//b/+n4WaWv+fu/8fcUsn+x8AAAB6kLv/rrjF/gcAAIBm5O7/Z9xi/wMAAEAzcvf/K27pZP/r/1vt/7OI1//r/6fS/3v+v+f/Hw39/zjP/59D/6//1//r/1moqfX/ufv/EwAA///dW3JR") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x8) 5.727506946s ago: executing program 2 (id=467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") symlink(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f00000001c0)='./file0\x00', 0x87) unlink(&(0x7f0000000040)='./file0\x00') r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={[0x4]}, 0x0, 0x8) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/234, 0xea}], 0x1, 0xfffffff6, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r6 = socket(0x1f, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8}, {}, {0xfff3, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.536168073s ago: executing program 1 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x1080) 5.084008797s ago: executing program 0 (id=469): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = syz_open_dev$usbmon(&(0x7f00000016c0), 0x8, 0x3) poll(&(0x7f00000024c0)=[{r0, 0x10}], 0x1, 0x7f) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) 4.928720182s ago: executing program 1 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 4.038513711s ago: executing program 1 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 3.408087881s ago: executing program 3 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) sendmmsg$inet(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000100)={0x77359400}, 0x10) 2.765957171s ago: executing program 2 (id=473): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e6405"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) timer_gettime(0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="2182", 0x2}], 0x1) 1.528169241s ago: executing program 3 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000040)) (fail_nth: 1) fsopen(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, 0x0, 0x0) timerfd_create(0x9, 0x80000) ioctl(0xffffffffffffffff, 0x7, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c, 0x0}}], 0x1, 0x20004800) 1.308031558s ago: executing program 0 (id=475): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x5, 0x0, 0x6d0ae7ab99e58733, 0x2], 0x3, 0x2}}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@broadcast, @local, 0xffffffff, 0x0, 'team0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x33, 0x0, 0x61}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x5, 0x6}, {0x2, 0x2, 0x4}, {0x0, 0x2, 0x6}, 0x2, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xa) 1.141455514s ago: executing program 0 (id=476): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/121, 0x79}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/105, 0x69}], 0x3}, 0x3000001}, {{0x0, 0x0, 0x0}, 0x7c64}], 0x2, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400800, 0x180, 0x20}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000280)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ab7c2ab5700003dcdf251200000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000006920e4d66ba638e"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="4017790000005fd6aad003bb"], 0x0, 0x0}) 665.989689ms ago: executing program 1 (id=477): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 0s ago: executing program 3 (id=478): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x1000003, 0x109000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) fsopen(&(0x7f0000000340)='hugetlbfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xd0}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 2415fa0 R15: 00007fff25046ee8 [ 192.705648][ T6558] [ 192.992186][ T6565] loop1: detected capacity change from 0 to 512 [ 194.379849][ T6569] loop2: detected capacity change from 0 to 512 [ 194.623863][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.632502][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.679909][ T6598] fuse: Bad value for 'group_id' [ 195.787221][ T6599] loop1: detected capacity change from 0 to 4096 [ 195.806723][ T6599] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 196.228572][ T6615] FAULT_INJECTION: forcing a failure. [ 196.228572][ T6615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.241778][ T6615] CPU: 1 PID: 6615 Comm: syz.1.205 Not tainted syzkaller #0 [ 196.249097][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.259245][ T6615] Call Trace: [ 196.262524][ T6615] [ 196.265454][ T6615] dump_stack_lvl+0x18c/0x250 [ 196.270174][ T6615] ? show_regs_print_info+0x20/0x20 [ 196.275380][ T6615] ? load_image+0x420/0x420 [ 196.279888][ T6615] ? __might_fault+0xaa/0x120 [ 196.284570][ T6615] ? __lock_acquire+0x7d40/0x7d40 [ 196.289601][ T6615] should_fail_ex+0x39d/0x4d0 [ 196.294295][ T6615] _copy_from_user+0x2f/0xe0 [ 196.298898][ T6615] ___sys_sendmsg+0x1c7/0x360 [ 196.303589][ T6615] ? __sys_sendmsg+0x2a0/0x2a0 [ 196.308408][ T6615] __sys_sendmmsg+0x2ca/0x510 [ 196.313093][ T6615] ? __ia32_sys_sendmsg+0x90/0x90 [ 196.318124][ T6615] ? mutex_unlock+0x10/0x10 [ 196.322631][ T6615] ? __fget_files+0x43d/0x4b0 [ 196.327321][ T6615] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 196.333330][ T6615] ? lock_chain_count+0x20/0x20 [ 196.338187][ T6615] __x64_sys_sendmmsg+0xa0/0xb0 [ 196.343051][ T6615] do_syscall_64+0x55/0xb0 [ 196.347499][ T6615] ? clear_bhb_loop+0x40/0x90 [ 196.352176][ T6615] ? clear_bhb_loop+0x40/0x90 [ 196.356866][ T6615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.362766][ T6615] RIP: 0033:0x7f390099ce59 [ 196.367182][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.386791][ T6615] RSP: 002b:00007f39018a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 196.395205][ T6615] RAX: ffffffffffffffda RBX: 00007f3900c16090 RCX: 00007f390099ce59 [ 196.403181][ T6615] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000005 [ 196.411148][ T6615] RBP: 00007f39018a4090 R08: 0000000000000000 R09: 0000000000000000 [ 196.419115][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.427090][ T6615] R13: 00007f3900c16128 R14: 00007f3900c16090 R15: 00007fff0eaafc38 [ 196.435076][ T6615] [ 196.438179][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.878143][ T6624] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 197.912932][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 198.190469][ T6631] loop1: detected capacity change from 0 to 1024 [ 198.503580][ T6631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.170873][ T6639] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 199.399213][ T6647] FAULT_INJECTION: forcing a failure. [ 199.399213][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 199.435616][ T6647] CPU: 1 PID: 6647 Comm: syz.3.215 Not tainted syzkaller #0 [ 199.442969][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.453048][ T6647] Call Trace: [ 199.456344][ T6647] [ 199.459291][ T6647] dump_stack_lvl+0x18c/0x250 [ 199.463997][ T6647] ? show_regs_print_info+0x20/0x20 [ 199.469208][ T6647] ? load_image+0x420/0x420 [ 199.473703][ T6647] ? __might_sleep+0xe0/0xe0 [ 199.478284][ T6647] ? __lock_acquire+0x7d40/0x7d40 [ 199.483319][ T6647] should_fail_ex+0x39d/0x4d0 [ 199.488032][ T6647] should_failslab+0x9/0x20 [ 199.492569][ T6647] slab_pre_alloc_hook+0x59/0x310 [ 199.497598][ T6647] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 199.503328][ T6647] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 199.509039][ T6647] __kmem_cache_alloc_node+0x53/0x250 [ 199.514415][ T6647] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 199.520123][ T6647] __kmalloc+0xa4/0x230 [ 199.524272][ T6647] tomoyo_realpath_from_path+0xe3/0x5d0 [ 199.529811][ T6647] tomoyo_path_number_perm+0x248/0x620 [ 199.535267][ T6647] ? tomoyo_path_number_perm+0x217/0x620 [ 199.540919][ T6647] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 199.546398][ T6647] ? ksys_write+0x1c4/0x260 [ 199.550926][ T6647] ? __fget_files+0x28/0x4b0 [ 199.555520][ T6647] ? __fget_files+0x28/0x4b0 [ 199.560124][ T6647] security_file_ioctl+0x70/0xa0 [ 199.565099][ T6647] __se_sys_ioctl+0x48/0x170 [ 199.569692][ T6647] do_syscall_64+0x55/0xb0 [ 199.574119][ T6647] ? clear_bhb_loop+0x40/0x90 [ 199.578809][ T6647] ? clear_bhb_loop+0x40/0x90 [ 199.583480][ T6647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.589377][ T6647] RIP: 0033:0x7fe28af9ce59 [ 199.593784][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.613391][ T6647] RSP: 002b:00007fe28bee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.621897][ T6647] RAX: ffffffffffffffda RBX: 00007fe28b215fa0 RCX: 00007fe28af9ce59 [ 199.629866][ T6647] RDX: 0000200000000340 RSI: 0000000040505412 RDI: 0000000000000004 [ 199.637852][ T6647] RBP: 00007fe28bee5090 R08: 0000000000000000 R09: 0000000000000000 [ 199.645839][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.653810][ T6647] R13: 00007fe28b216038 R14: 00007fe28b215fa0 R15: 00007ffc23327b78 [ 199.661793][ T6647] [ 199.678411][ T6647] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.975363][ T6656] loop3: detected capacity change from 0 to 1024 [ 199.982786][ T6656] EXT4-fs: Ignoring removed orlov option [ 199.989807][ T6656] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.003776][ T6656] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 200.021596][ T6656] JBD2: no valid journal superblock found [ 200.043403][ T6656] EXT4-fs (loop3): Could not load journal inode [ 200.378391][ T6670] PKCS7: Unknown OID: [4] 0.0 [ 200.383468][ T6670] PKCS7: Only support pkcs7_signedData type [ 200.536816][ T6680] FAULT_INJECTION: forcing a failure. [ 200.536816][ T6680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.579905][ T6680] CPU: 0 PID: 6680 Comm: syz.0.224 Not tainted syzkaller #0 [ 200.587248][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.597320][ T6680] Call Trace: [ 200.600614][ T6680] [ 200.603559][ T6680] dump_stack_lvl+0x18c/0x250 [ 200.608266][ T6680] ? show_regs_print_info+0x20/0x20 [ 200.613489][ T6680] ? load_image+0x420/0x420 [ 200.618016][ T6680] ? __lock_acquire+0x7d40/0x7d40 [ 200.623064][ T6680] ? snprintf+0xe9/0x140 [ 200.627331][ T6680] should_fail_ex+0x39d/0x4d0 [ 200.632041][ T6680] _copy_to_user+0x2f/0xa0 [ 200.636484][ T6680] simple_read_from_buffer+0xe7/0x150 [ 200.641896][ T6680] proc_fail_nth_read+0x1e8/0x260 [ 200.646957][ T6680] ? proc_fault_inject_write+0x360/0x360 [ 200.652719][ T6680] ? fsnotify_perm+0x271/0x5e0 [ 200.657512][ T6680] ? proc_fault_inject_write+0x360/0x360 [ 200.663170][ T6680] vfs_read+0x28b/0x970 [ 200.667354][ T6680] ? kernel_read+0x1e0/0x1e0 [ 200.671970][ T6680] ? __fget_files+0x28/0x4b0 [ 200.676586][ T6680] ? __fget_files+0x28/0x4b0 [ 200.681196][ T6680] ? __fget_files+0x43d/0x4b0 [ 200.685903][ T6680] ? __fdget_pos+0x2a3/0x330 [ 200.690513][ T6680] ? ksys_read+0x75/0x260 [ 200.694865][ T6680] ksys_read+0x150/0x260 [ 200.699128][ T6680] ? vfs_write+0x990/0x990 [ 200.703578][ T6680] ? lockdep_hardirqs_on+0x98/0x150 [ 200.708813][ T6680] do_syscall_64+0x55/0xb0 [ 200.713246][ T6680] ? clear_bhb_loop+0x40/0x90 [ 200.717946][ T6680] ? clear_bhb_loop+0x40/0x90 [ 200.722648][ T6680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.728564][ T6680] RIP: 0033:0x7fe1e215d68e [ 200.733008][ T6680] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.752642][ T6680] RSP: 002b:00007fe1e2f79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.761080][ T6680] RAX: ffffffffffffffda RBX: 00007fe1e2f7a6c0 RCX: 00007fe1e215d68e [ 200.769072][ T6680] RDX: 000000000000000f RSI: 00007fe1e2f7a0a0 RDI: 0000000000000005 [ 200.777066][ T6680] RBP: 00007fe1e2f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 200.785143][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.793132][ T6680] R13: 00007fe1e2416128 R14: 00007fe1e2416090 R15: 00007fff25046ee8 [ 200.801141][ T6680] [ 201.128089][ T6682] bridge0: entered allmulticast mode [ 201.161345][ T6682] pim6reg: entered allmulticast mode [ 201.236544][ T6682] pim6reg: left allmulticast mode [ 201.268858][ T6682] bridge0: left allmulticast mode [ 201.342804][ T6690] input: syz0 as /devices/virtual/input/input7 [ 201.444197][ T6692] input: syz0 as /devices/virtual/input/input8 [ 201.819182][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 202.458058][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 202.464128][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 202.470916][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 202.523541][ T6702] netlink: 'syz.2.231': attribute type 3 has an invalid length. [ 202.595739][ T6702] input: syz0 as /devices/virtual/input/input9 [ 202.750881][ T6685] loop0: detected capacity change from 0 to 40427 [ 202.757669][ T5764] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 202.779062][ T6685] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 202.788611][ T6685] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 202.798733][ T6685] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 202.808309][ T6685] F2FS-fs (loop0): invalid crc value [ 202.840793][ T6708] FAULT_INJECTION: forcing a failure. [ 202.840793][ T6708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.854086][ T6685] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.905027][ T6708] CPU: 0 PID: 6708 Comm: syz.2.233 Not tainted syzkaller #0 [ 202.912367][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.922445][ T6708] Call Trace: [ 202.925759][ T6708] [ 202.928710][ T6708] dump_stack_lvl+0x18c/0x250 [ 202.933423][ T6708] ? show_regs_print_info+0x20/0x20 [ 202.938654][ T6708] ? load_image+0x420/0x420 [ 202.943189][ T6708] ? __might_fault+0xaa/0x120 [ 202.947888][ T6708] ? __lock_acquire+0x7d40/0x7d40 [ 202.952928][ T6708] should_fail_ex+0x39d/0x4d0 [ 202.957655][ T6708] _copy_from_user+0x2f/0xe0 [ 202.962264][ T6708] ___sys_recvmsg+0x176/0x590 [ 202.966959][ T6708] ? __sys_recvmsg+0x2a0/0x2a0 [ 202.971732][ T6708] ? ksys_write+0x1c4/0x260 [ 202.976248][ T6708] ? __fget_files+0x43d/0x4b0 [ 202.980959][ T6708] __x64_sys_recvmsg+0x20c/0x2e0 [ 202.985904][ T6708] ? ___sys_recvmsg+0x590/0x590 [ 202.990772][ T6708] ? lockdep_hardirqs_on+0x98/0x150 [ 202.995982][ T6708] do_syscall_64+0x55/0xb0 [ 203.000403][ T6708] ? clear_bhb_loop+0x40/0x90 [ 203.005079][ T6708] ? clear_bhb_loop+0x40/0x90 [ 203.009753][ T6708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.015655][ T6708] RIP: 0033:0x7f0ff739ce59 [ 203.020075][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.039693][ T6708] RSP: 002b:00007f0ff82bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 203.048114][ T6708] RAX: ffffffffffffffda RBX: 00007f0ff7615fa0 RCX: 00007f0ff739ce59 [ 203.056094][ T6708] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 203.064075][ T6708] RBP: 00007f0ff82bf090 R08: 0000000000000000 R09: 0000000000000000 [ 203.072141][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.080120][ T6708] R13: 00007f0ff7616038 R14: 00007f0ff7615fa0 R15: 00007fffa9c79448 [ 203.088106][ T6708] [ 203.104027][ T5764] usb 4-1: device descriptor read/64, error -71 [ 203.160144][ T6685] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 203.169853][ T6685] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 203.227749][ T5774] syz-executor: attempt to access beyond end of device [ 203.227749][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.245682][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 203.394491][ T5764] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 203.499080][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 203.553362][ T6713] loop1: detected capacity change from 0 to 32768 [ 203.565140][ T5764] usb 4-1: device descriptor read/64, error -71 [ 203.610882][ T6713] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.695177][ T5764] usb usb4-port1: attempt power cycle [ 203.702024][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 203.726244][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.732546][ T6713] XFS (loop1): Ending clean mount [ 203.751902][ T27] usb 3-1: config 6 has an invalid interface number: 10 but max is 0 [ 203.764579][ T27] usb 3-1: config 6 has no interface number 0 [ 203.770834][ T27] usb 3-1: config 6 interface 10 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 203.796562][ T27] usb 3-1: config 6 interface 10 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 203.828222][ T27] usb 3-1: config 6 interface 10 has no altsetting 0 [ 203.848874][ T27] usb 3-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice=78.3e [ 203.864843][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.883445][ T27] usb 3-1: Product: syz [ 203.893322][ T27] usb 3-1: Manufacturer: syz [ 203.907222][ T27] usb 3-1: SerialNumber: syz [ 203.907583][ T5780] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.110091][ T5764] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 204.154526][ T5764] usb 4-1: device descriptor read/8, error -71 [ 204.221707][ T27] usb 3-1: USB disconnect, device number 3 [ 204.434528][ T5764] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 204.485446][ T5764] usb 4-1: device descriptor read/8, error -71 [ 204.670205][ T5764] usb usb4-port1: unable to enumerate USB device [ 204.850648][ T6735] loop1: detected capacity change from 0 to 512 [ 204.904552][ T6735] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 205.567065][ T6746] loop0: detected capacity change from 0 to 128 [ 205.655782][ T6746] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 205.720040][ T6746] netlink: 52 bytes leftover after parsing attributes in process `syz.0.244'. [ 206.098040][ T6764] FAULT_INJECTION: forcing a failure. [ 206.098040][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 206.122835][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.169009][ T6764] CPU: 1 PID: 6764 Comm: syz.1.245 Not tainted syzkaller #0 [ 206.176409][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.186493][ T6764] Call Trace: [ 206.189803][ T6764] [ 206.192759][ T6764] dump_stack_lvl+0x18c/0x250 [ 206.197477][ T6764] ? show_regs_print_info+0x20/0x20 [ 206.202706][ T6764] ? load_image+0x420/0x420 [ 206.207239][ T6764] ? __might_sleep+0xe0/0xe0 [ 206.211861][ T6764] ? __lock_acquire+0x7d40/0x7d40 [ 206.216915][ T6764] should_fail_ex+0x39d/0x4d0 [ 206.221627][ T6764] should_failslab+0x9/0x20 [ 206.226158][ T6764] slab_pre_alloc_hook+0x59/0x310 [ 206.231220][ T6764] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 206.236978][ T6764] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 206.242726][ T6764] __kmem_cache_alloc_node+0x53/0x250 [ 206.248141][ T6764] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 206.253890][ T6764] __kmalloc+0xa4/0x230 [ 206.258080][ T6764] tomoyo_realpath_from_path+0xe3/0x5d0 [ 206.263666][ T6764] tomoyo_path_number_perm+0x248/0x620 [ 206.269167][ T6764] ? tomoyo_path_number_perm+0x217/0x620 [ 206.274814][ T6764] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 206.280772][ T6764] ? ksys_write+0x1c4/0x260 [ 206.285332][ T6764] ? __fget_files+0x28/0x4b0 [ 206.289954][ T6764] ? __fget_files+0x28/0x4b0 [ 206.294559][ T6764] security_file_ioctl+0x70/0xa0 [ 206.299522][ T6764] __se_sys_ioctl+0x48/0x170 [ 206.304120][ T6764] do_syscall_64+0x55/0xb0 [ 206.308598][ T6764] ? clear_bhb_loop+0x40/0x90 [ 206.313448][ T6764] ? clear_bhb_loop+0x40/0x90 [ 206.318126][ T6764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.324025][ T6764] RIP: 0033:0x7f390099ce59 [ 206.328445][ T6764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.348059][ T6764] RSP: 002b:00007f39018a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.356477][ T6764] RAX: ffffffffffffffda RBX: 00007f3900c16090 RCX: 00007f390099ce59 [ 206.364457][ T6764] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000f [ 206.372439][ T6764] RBP: 00007f39018a4090 R08: 0000000000000000 R09: 0000000000000000 [ 206.380443][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.388412][ T6764] R13: 00007f3900c16128 R14: 00007f3900c16090 R15: 00007fff0eaafc38 [ 206.396397][ T6764] [ 206.424659][ T6764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.028346][ T6778] FAULT_INJECTION: forcing a failure. [ 208.028346][ T6778] name failslab, interval 1, probability 0, space 0, times 0 [ 208.085029][ T6778] CPU: 0 PID: 6778 Comm: syz.2.248 Not tainted syzkaller #0 [ 208.092380][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.102502][ T6778] Call Trace: [ 208.105812][ T6778] [ 208.108757][ T6778] dump_stack_lvl+0x18c/0x250 [ 208.113473][ T6778] ? show_regs_print_info+0x20/0x20 [ 208.118699][ T6778] ? load_image+0x420/0x420 [ 208.123223][ T6778] ? __might_sleep+0xe0/0xe0 [ 208.127838][ T6778] ? __lock_acquire+0x7d40/0x7d40 [ 208.132891][ T6778] should_fail_ex+0x39d/0x4d0 [ 208.137610][ T6778] should_failslab+0x9/0x20 [ 208.142145][ T6778] slab_pre_alloc_hook+0x59/0x310 [ 208.147203][ T6778] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 208.153231][ T6778] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 208.158991][ T6778] __kmem_cache_alloc_node+0x53/0x250 [ 208.164406][ T6778] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 208.170514][ T6778] __kmalloc+0xa4/0x230 [ 208.174713][ T6778] tomoyo_realpath_from_path+0xe3/0x5d0 [ 208.180482][ T6778] tomoyo_path_number_perm+0x248/0x620 [ 208.185986][ T6778] ? tomoyo_path_number_perm+0x217/0x620 [ 208.191649][ T6778] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 208.197140][ T6778] ? ksys_write+0x1c4/0x260 [ 208.201726][ T6778] ? __fget_files+0x28/0x4b0 [ 208.206403][ T6778] ? __fget_files+0x28/0x4b0 [ 208.211045][ T6778] security_file_ioctl+0x70/0xa0 [ 208.216013][ T6778] __se_sys_ioctl+0x48/0x170 [ 208.220640][ T6778] do_syscall_64+0x55/0xb0 [ 208.225087][ T6778] ? clear_bhb_loop+0x40/0x90 [ 208.229793][ T6778] ? clear_bhb_loop+0x40/0x90 [ 208.234544][ T6778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.240477][ T6778] RIP: 0033:0x7f0ff739ce59 [ 208.244915][ T6778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.264586][ T6778] RSP: 002b:00007f0ff82bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.273032][ T6778] RAX: ffffffffffffffda RBX: 00007f0ff7615fa0 RCX: 00007f0ff739ce59 [ 208.281033][ T6778] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 208.289029][ T6778] RBP: 00007f0ff82bf090 R08: 0000000000000000 R09: 0000000000000000 [ 208.297029][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.305041][ T6778] R13: 00007f0ff7616038 R14: 00007f0ff7615fa0 R15: 00007fffa9c79448 [ 208.313056][ T6778] [ 208.316129][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.337244][ T6778] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.825170][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.842534][ T6792] loop1: detected capacity change from 0 to 1024 [ 208.865942][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.922791][ T6792] hfsplus: unable to parse mount options [ 208.968966][ T6798] FAULT_INJECTION: forcing a failure. [ 208.968966][ T6798] name failslab, interval 1, probability 0, space 0, times 0 [ 208.984328][ T6798] CPU: 0 PID: 6798 Comm: syz.3.254 Not tainted syzkaller #0 [ 208.991678][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.001851][ T6798] Call Trace: [ 209.005153][ T6798] [ 209.008108][ T6798] dump_stack_lvl+0x18c/0x250 [ 209.012808][ T6798] ? show_regs_print_info+0x20/0x20 [ 209.018020][ T6798] ? load_image+0x420/0x420 [ 209.022542][ T6798] should_fail_ex+0x39d/0x4d0 [ 209.027238][ T6798] should_failslab+0x9/0x20 [ 209.031744][ T6798] slab_pre_alloc_hook+0x59/0x310 [ 209.036779][ T6798] ? __io_queue_proc+0x239/0x4f0 [ 209.041718][ T6798] __kmem_cache_alloc_node+0x53/0x250 [ 209.047098][ T6798] ? __io_queue_proc+0x239/0x4f0 [ 209.052055][ T6798] kmalloc_trace+0x2a/0xe0 [ 209.056505][ T6798] __io_queue_proc+0x239/0x4f0 [ 209.061288][ T6798] ? io_arm_poll_handler+0xc00/0xc00 [ 209.066584][ T6798] n_hdlc_tty_poll+0x10c/0x210 [ 209.071359][ T6798] ? n_hdlc_tty_ioctl+0x650/0x650 [ 209.076389][ T6798] tty_poll+0xbb/0x160 [ 209.080459][ T6798] ? tty_read+0x690/0x690 [ 209.084818][ T6798] __io_arm_poll_handler+0x3ac/0xaf0 [ 209.090118][ T6798] io_arm_poll_handler+0x78e/0xc00 [ 209.095242][ T6798] ? io_poll_remove_entries+0x620/0x620 [ 209.100790][ T6798] ? io_arm_poll_handler+0xc00/0xc00 [ 209.106132][ T6798] ? io_issue_sqe+0x3de/0xc90 [ 209.110811][ T6798] io_queue_async+0x73/0x5b0 [ 209.115401][ T6798] ? io_req_task_submit+0x187/0x220 [ 209.120602][ T6798] io_poll_task_func+0xe10/0x14b0 [ 209.125645][ T6798] ? io_ringfd_unregister+0x300/0x300 [ 209.131023][ T6798] ? percpu_ref_get_many+0x21/0x1e0 [ 209.136312][ T6798] ? percpu_ref_get_many+0x182/0x1e0 [ 209.141650][ T6798] tctx_task_work+0x311/0x800 [ 209.146335][ T6798] ? percpu_ref_get_many+0x1e0/0x1e0 [ 209.151627][ T6798] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.156839][ T6798] ? lockdep_hardirqs_on+0x98/0x150 [ 209.162043][ T6798] task_work_run+0x1d4/0x260 [ 209.166641][ T6798] ? task_work_cancel+0x220/0x220 [ 209.171680][ T6798] ? ldsem_up_read+0xcd/0x130 [ 209.176374][ T6798] get_signal+0x1235/0x13f0 [ 209.180916][ T6798] ? file_end_write+0xdb/0x250 [ 209.185700][ T6798] ? vfs_write+0x7dd/0x990 [ 209.190138][ T6798] arch_do_signal_or_restart+0xc2/0x800 [ 209.195703][ T6798] ? get_sigframe_size+0x20/0x20 [ 209.200663][ T6798] ? ksys_write+0x1fb/0x260 [ 209.205178][ T6798] ? exit_to_user_mode_loop+0x3b/0x110 [ 209.210652][ T6798] exit_to_user_mode_loop+0x70/0x110 [ 209.215946][ T6798] exit_to_user_mode_prepare+0xee/0x180 [ 209.221705][ T6798] syscall_exit_to_user_mode+0x1a/0x50 [ 209.227184][ T6798] do_syscall_64+0x61/0xb0 [ 209.231610][ T6798] ? clear_bhb_loop+0x40/0x90 [ 209.236290][ T6798] ? clear_bhb_loop+0x40/0x90 [ 209.240969][ T6798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.246870][ T6798] RIP: 0033:0x7fe28af9ce59 [ 209.251293][ T6798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.270907][ T6798] RSP: 002b:00007fe28bee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.279331][ T6798] RAX: 0000000000000000 RBX: 00007fe28b215fa0 RCX: 00007fe28af9ce59 [ 209.287305][ T6798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 209.295285][ T6798] RBP: 00007fe28bee5090 R08: 0000000000000000 R09: 0000000000000000 [ 209.303259][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.311248][ T6798] R13: 00007fe28b216038 R14: 00007fe28b215fa0 R15: 00007ffc23327b78 [ 209.319253][ T6798] [ 209.322381][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.618197][ T6807] FAULT_INJECTION: forcing a failure. [ 209.618197][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.650267][ T6807] CPU: 0 PID: 6807 Comm: syz.1.258 Not tainted syzkaller #0 [ 209.657612][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.667692][ T6807] Call Trace: [ 209.670986][ T6807] [ 209.673929][ T6807] dump_stack_lvl+0x18c/0x250 [ 209.678636][ T6807] ? show_regs_print_info+0x20/0x20 [ 209.683865][ T6807] ? load_image+0x420/0x420 [ 209.688406][ T6807] ? __might_fault+0xaa/0x120 [ 209.693115][ T6807] ? __lock_acquire+0x7d40/0x7d40 [ 209.698178][ T6807] should_fail_ex+0x39d/0x4d0 [ 209.702893][ T6807] _copy_from_user+0x2f/0xe0 [ 209.707520][ T6807] ___sys_sendmsg+0x1c7/0x360 [ 209.712228][ T6807] ? get_pid_task+0x20/0x1e0 [ 209.716853][ T6807] ? __sys_sendmsg+0x2a0/0x2a0 [ 209.721654][ T6807] ? __lock_acquire+0x7d40/0x7d40 [ 209.726726][ T6807] __se_sys_sendmsg+0x1c2/0x2b0 [ 209.731608][ T6807] ? __x64_sys_sendmsg+0x80/0x80 [ 209.736584][ T6807] ? lockdep_hardirqs_on+0x98/0x150 [ 209.741815][ T6807] do_syscall_64+0x55/0xb0 [ 209.746258][ T6807] ? clear_bhb_loop+0x40/0x90 [ 209.750956][ T6807] ? clear_bhb_loop+0x40/0x90 [ 209.755667][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.761588][ T6807] RIP: 0033:0x7f390099ce59 [ 209.766020][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.785654][ T6807] RSP: 002b:00007f39018c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.794094][ T6807] RAX: ffffffffffffffda RBX: 00007f3900c15fa0 RCX: 00007f390099ce59 [ 209.802101][ T6807] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 209.810326][ T6807] RBP: 00007f39018c5090 R08: 0000000000000000 R09: 0000000000000000 [ 209.818331][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.826419][ T6807] R13: 00007f3900c16038 R14: 00007f3900c15fa0 R15: 00007fff0eaafc38 [ 209.834428][ T6807] [ 209.837566][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.380751][ T6814] netlink: 'syz.1.261': attribute type 2 has an invalid length. [ 211.680753][ T6801] loop3: detected capacity change from 0 to 32768 [ 211.769498][ T6801] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 211.769498][ T6801] [ 213.113900][ T6823] FAULT_INJECTION: forcing a failure. [ 213.113900][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 213.133164][ T6823] CPU: 0 PID: 6823 Comm: syz.2.264 Not tainted syzkaller #0 [ 213.140503][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.150675][ T6823] Call Trace: [ 213.153980][ T6823] [ 213.156937][ T6823] dump_stack_lvl+0x18c/0x250 [ 213.161646][ T6823] ? show_regs_print_info+0x20/0x20 [ 213.166888][ T6823] ? load_image+0x420/0x420 [ 213.171432][ T6823] ? __might_sleep+0xe0/0xe0 [ 213.176066][ T6823] ? __lock_acquire+0x7d40/0x7d40 [ 213.181127][ T6823] should_fail_ex+0x39d/0x4d0 [ 213.185854][ T6823] should_failslab+0x9/0x20 [ 213.190397][ T6823] slab_pre_alloc_hook+0x59/0x310 [ 213.195470][ T6823] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.201227][ T6823] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.206993][ T6823] __kmem_cache_alloc_node+0x53/0x250 [ 213.212405][ T6823] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.218161][ T6823] __kmalloc+0xa4/0x230 [ 213.222364][ T6823] tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.228015][ T6823] tomoyo_path_number_perm+0x248/0x620 [ 213.233518][ T6823] ? tomoyo_path_number_perm+0x217/0x620 [ 213.239196][ T6823] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 213.244696][ T6823] ? ksys_write+0x1c4/0x260 [ 213.249268][ T6823] ? __fget_files+0x28/0x4b0 [ 213.253864][ T6823] ? __fget_files+0x28/0x4b0 [ 213.258487][ T6823] security_file_ioctl+0x70/0xa0 [ 213.263556][ T6823] __se_sys_ioctl+0x48/0x170 [ 213.268181][ T6823] do_syscall_64+0x55/0xb0 [ 213.272616][ T6823] ? clear_bhb_loop+0x40/0x90 [ 213.277309][ T6823] ? clear_bhb_loop+0x40/0x90 [ 213.282021][ T6823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.287956][ T6823] RIP: 0033:0x7f0ff739ce59 [ 213.292395][ T6823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.312029][ T6823] RSP: 002b:00007f0ff82bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.320473][ T6823] RAX: ffffffffffffffda RBX: 00007f0ff7615fa0 RCX: 00007f0ff739ce59 [ 213.328482][ T6823] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 213.336484][ T6823] RBP: 00007f0ff82bf090 R08: 0000000000000000 R09: 0000000000000000 [ 213.344484][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.352480][ T6823] R13: 00007f0ff7616038 R14: 00007f0ff7615fa0 R15: 00007fffa9c79448 [ 213.360493][ T6823] [ 213.373182][ T6823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.504907][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 213.624813][ T968] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 213.694661][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 213.716354][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.748607][ T27] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 213.767532][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.783390][ T27] usb 1-1: Product: syz [ 213.794565][ T968] usb 2-1: device descriptor read/64, error -71 [ 213.803560][ T27] usb 1-1: Manufacturer: syz [ 213.828807][ T27] usb 1-1: SerialNumber: syz [ 213.861949][ T27] usb 1-1: config 0 descriptor?? [ 213.885780][ T27] cdc_phonet 1-1:0.0: invalid descriptor buffer length [ 213.892713][ T27] cdc_phonet: probe of 1-1:0.0 failed with error -22 [ 215.382282][ T968] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 215.564479][ T968] usb 2-1: device descriptor read/64, error -71 [ 215.632377][ T6835] loop3: detected capacity change from 0 to 32768 [ 215.676310][ T6835] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 215.676310][ T6835] [ 215.685930][ T968] usb usb2-port1: attempt power cycle [ 216.115098][ T968] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 216.704762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 217.154481][ T968] usb 2-1: device descriptor read/8, error -71 [ 218.393374][ T6846] loop1: detected capacity change from 0 to 131072 [ 219.264747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 219.674380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 219.710826][ T6846] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 219.720582][ T6846] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 219.744632][ T6846] F2FS-fs (loop1): invalid crc value [ 219.782730][ T6846] F2FS-fs (loop1): Found nat_bits in checkpoint [ 219.819204][ T5811] usb 1-1: USB disconnect, device number 6 [ 219.905517][ T6846] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 219.912610][ T6846] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 219.954027][ T6846] F2FS-fs (loop1): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 219.967024][ T6846] F2FS-fs (loop1): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 220.342227][ T6850] loop3: detected capacity change from 0 to 32768 [ 220.387659][ T6850] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 220.387659][ T6850] [ 221.578821][ T6880] loop1: detected capacity change from 0 to 40427 [ 221.597359][ T6880] F2FS-fs (loop1): build fault injection attr: rate: 25, type: 0x7ffff [ 221.607278][ T6880] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe [ 221.616247][ T6880] F2FS-fs (loop1): invalid crc value [ 221.624019][ T6880] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x30ee/0x4730 [ 221.634898][ T6880] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12) [ 223.811722][ T5815] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 223.984899][ T6888] loop2: detected capacity change from 0 to 32768 [ 224.009790][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.039024][ T5815] usb 4-1: not running at top speed; connect to a high speed hub [ 224.081986][ T5815] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.100493][ T6888] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 224.100493][ T6888] [ 224.142713][ T5815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.192138][ T5815] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 224.233996][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.276368][ T5815] usb 4-1: Product: syz [ 224.280587][ T5815] usb 4-1: Manufacturer: syz [ 224.324560][ T5815] usb 4-1: SerialNumber: syz [ 224.596410][ T6892] binder: 6891:6892 ioctl 4068aea3 200000000340 returned -22 [ 224.705625][ T5815] usb 4-1: 0:1 : does not exist [ 224.710894][ T5815] usb 4-1: 0:2 : does not exist [ 224.742605][ T5815] usb 4-1: 6:0: failed to get current value for ch 1 (-22) [ 224.786846][ T5815] usb 4-1: 6:0: failed to get current value for ch 0 (-22) [ 224.824598][ T5815] usb 4-1: 6:0: failed to get current value for ch 1 (-22) [ 224.904778][ T6906] FAULT_INJECTION: forcing a failure. [ 224.904778][ T6906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.926378][ T6906] CPU: 0 PID: 6906 Comm: syz.1.286 Not tainted syzkaller #0 [ 224.933720][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.943795][ T6906] Call Trace: [ 224.947100][ T6906] [ 224.950057][ T6906] dump_stack_lvl+0x18c/0x250 [ 224.950843][ T5815] usb 4-1: USB disconnect, device number 6 [ 224.954745][ T6906] ? show_regs_print_info+0x20/0x20 [ 224.954772][ T6906] ? load_image+0x420/0x420 [ 224.954789][ T6906] ? __might_fault+0xaa/0x120 [ 224.954805][ T6906] ? __lock_acquire+0x7d40/0x7d40 [ 224.954826][ T6906] should_fail_ex+0x39d/0x4d0 [ 224.984775][ T6906] _copy_from_user+0x2f/0xe0 [ 224.989401][ T6906] ___sys_recvmsg+0x176/0x590 [ 224.994115][ T6906] ? __sys_recvmsg+0x2a0/0x2a0 [ 224.998935][ T6906] ? __fget_files+0x43d/0x4b0 [ 225.003655][ T6906] ? __fdget+0x180/0x210 [ 225.007933][ T6906] ? do_recvmmsg+0x1ae/0x870 [ 225.012560][ T6906] do_recvmmsg+0x39a/0x870 [ 225.017025][ T6906] ? __sys_recvmmsg+0x290/0x290 [ 225.021911][ T6906] ? vfs_write+0x7dd/0x990 [ 225.026376][ T6906] ? mutex_unlock+0x10/0x10 [ 225.030925][ T6906] ? __fget_files+0x43d/0x4b0 [ 225.035645][ T6906] __x64_sys_recvmmsg+0x199/0x250 [ 225.040700][ T6906] ? do_recvmmsg+0x870/0x870 [ 225.045413][ T6906] ? lockdep_hardirqs_on+0x98/0x150 [ 225.050659][ T6906] do_syscall_64+0x55/0xb0 [ 225.055113][ T6906] ? clear_bhb_loop+0x40/0x90 [ 225.059816][ T6906] ? clear_bhb_loop+0x40/0x90 [ 225.064524][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.070453][ T6906] RIP: 0033:0x7f390099ce59 [ 225.074894][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.094531][ T6906] RSP: 002b:00007f39018c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 225.102981][ T6906] RAX: ffffffffffffffda RBX: 00007f3900c15fa0 RCX: 00007f390099ce59 [ 225.110988][ T6906] RDX: 0000000000000001 RSI: 0000200000002780 RDI: 0000000000000004 [ 225.118990][ T6906] RBP: 00007f39018c5090 R08: 0000000000000000 R09: 0000000000000000 [ 225.127005][ T6906] R10: 0000000000002003 R11: 0000000000000246 R12: 0000000000000001 [ 225.135008][ T6906] R13: 00007f3900c16038 R14: 00007f3900c15fa0 R15: 00007fff0eaafc38 [ 225.143022][ T6906] [ 225.187374][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.462107][ T28] audit: type=1800 audit(225.426:7): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.281" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 225.664492][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 225.764579][ T5815] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 225.857523][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.871958][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.883319][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 225.897265][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.916378][ T9] usb 2-1: config 0 descriptor?? [ 225.924721][ T5815] usb 4-1: device descriptor read/64, error -71 [ 225.939545][ T6920] loop2: detected capacity change from 0 to 32768 [ 225.962030][ T6920] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 225.962030][ T6920] [ 226.204578][ T5815] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 226.343965][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 226.355438][ T5815] usb 4-1: device descriptor read/64, error -71 [ 226.413655][ T9] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 226.466555][ T6923] loop0: detected capacity change from 0 to 256 [ 226.470688][ T28] audit: type=1800 audit(226.436:8): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.291" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 226.501177][ T6920] diRead: diIAGRead returned -5 [ 226.510337][ T6920] jfs_lookup: iget failed on inum 1048352 [ 226.525736][ T6923] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 226.534924][ T5815] usb usb4-port1: attempt power cycle [ 226.548848][ T9] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 226.617374][ T28] audit: type=1804 audit(226.586:9): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.292" name="/newroot/74/file0/bus" dev="loop0" ino=1048611 res=1 errno=0 [ 226.954464][ T6925] FAULT_INJECTION: forcing a failure. [ 226.954464][ T6925] name failslab, interval 1, probability 0, space 0, times 0 [ 226.967261][ T6925] CPU: 1 PID: 6925 Comm: syz.0.292 Not tainted syzkaller #0 [ 226.974576][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.984648][ T6925] Call Trace: [ 226.987951][ T6925] [ 226.990894][ T6925] dump_stack_lvl+0x18c/0x250 [ 226.995598][ T6925] ? show_regs_print_info+0x20/0x20 [ 227.000818][ T6925] ? load_image+0x420/0x420 [ 227.005335][ T6925] ? __might_sleep+0xe0/0xe0 [ 227.009944][ T6925] ? __lock_acquire+0x7d40/0x7d40 [ 227.014986][ T6925] should_fail_ex+0x39d/0x4d0 [ 227.019699][ T6925] should_failslab+0x9/0x20 [ 227.024218][ T6925] slab_pre_alloc_hook+0x59/0x310 [ 227.029273][ T6925] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.035011][ T6925] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.040746][ T6925] __kmem_cache_alloc_node+0x53/0x250 [ 227.046144][ T6925] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.051888][ T6925] __kmalloc+0xa4/0x230 [ 227.056071][ T6925] tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.061661][ T6925] tomoyo_path_number_perm+0x248/0x620 [ 227.067145][ T6925] ? tomoyo_path_number_perm+0x217/0x620 [ 227.072788][ T6925] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 227.078259][ T6925] ? task_mm_cid_work+0x31d/0x770 [ 227.083307][ T6925] ? __lock_acquire+0x7d40/0x7d40 [ 227.088437][ T6925] ? __fget_files+0x28/0x4b0 [ 227.093043][ T6925] ? __fget_files+0x28/0x4b0 [ 227.097660][ T6925] security_file_ioctl+0x70/0xa0 [ 227.102627][ T6925] __se_sys_ioctl+0x48/0x170 [ 227.107240][ T6925] do_syscall_64+0x55/0xb0 [ 227.111679][ T6925] ? clear_bhb_loop+0x40/0x90 [ 227.116362][ T6925] ? clear_bhb_loop+0x40/0x90 [ 227.121091][ T6925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.127009][ T6925] RIP: 0033:0x7fe1e219ce59 [ 227.131436][ T6925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.151067][ T6925] RSP: 002b:00007fe1e03f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.159521][ T6925] RAX: ffffffffffffffda RBX: 00007fe1e2416180 RCX: 00007fe1e219ce59 [ 227.167514][ T6925] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 000000000000000a [ 227.175514][ T6925] RBP: 00007fe1e03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.183500][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.191509][ T6925] R13: 00007fe1e2416218 R14: 00007fe1e2416180 R15: 00007fff25046ee8 [ 227.199518][ T6925] [ 227.202669][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.209513][ T6925] ERROR: Out of memory at tomoyo_realpath_from_path. [ 227.307840][ T5815] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.377594][ T5815] usb 4-1: device descriptor read/8, error -71 [ 227.533365][ T6930] loop2: detected capacity change from 0 to 128 [ 227.614774][ T6930] vxfs: unable to set final block size [ 227.654847][ T5815] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 227.709917][ T5815] usb 4-1: device descriptor read/8, error -71 [ 227.922563][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 229.195109][ T9] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 229.217261][ T5815] usb usb4-port1: unable to enumerate USB device [ 229.659674][ T6941] FAULT_INJECTION: forcing a failure. [ 229.659674][ T6941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.673096][ T6941] CPU: 1 PID: 6941 Comm: syz.0.296 Not tainted syzkaller #0 [ 229.680396][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.690469][ T6941] Call Trace: [ 229.693757][ T6941] [ 229.696701][ T6941] dump_stack_lvl+0x18c/0x250 [ 229.701401][ T6941] ? show_regs_print_info+0x20/0x20 [ 229.706615][ T6941] ? load_image+0x420/0x420 [ 229.711134][ T6941] ? __might_fault+0xaa/0x120 [ 229.715829][ T6941] ? __lock_acquire+0x7d40/0x7d40 [ 229.720894][ T6941] should_fail_ex+0x39d/0x4d0 [ 229.725618][ T6941] _copy_from_user+0x2f/0xe0 [ 229.730234][ T6941] ___sys_sendmsg+0x1c7/0x360 [ 229.734924][ T6941] ? get_pid_task+0x20/0x1e0 [ 229.739535][ T6941] ? __sys_sendmsg+0x2a0/0x2a0 [ 229.744329][ T6941] ? __lock_acquire+0x7d40/0x7d40 [ 229.749502][ T6941] __se_sys_sendmsg+0x1c2/0x2b0 [ 229.754382][ T6941] ? __x64_sys_sendmsg+0x80/0x80 [ 229.759347][ T6941] ? lockdep_hardirqs_on+0x98/0x150 [ 229.764575][ T6941] do_syscall_64+0x55/0xb0 [ 229.769008][ T6941] ? clear_bhb_loop+0x40/0x90 [ 229.773693][ T6941] ? clear_bhb_loop+0x40/0x90 [ 229.778392][ T6941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.784317][ T6941] RIP: 0033:0x7fe1e219ce59 [ 229.788762][ T6941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.808393][ T6941] RSP: 002b:00007fe1e03f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.816839][ T6941] RAX: ffffffffffffffda RBX: 00007fe1e2416180 RCX: 00007fe1e219ce59 [ 229.824836][ T6941] RDX: 0000000020008000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 229.832821][ T6941] RBP: 00007fe1e03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 229.840807][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.848884][ T6941] R13: 00007fe1e2416218 R14: 00007fe1e2416180 R15: 00007fff25046ee8 [ 229.856889][ T6941] [ 230.529348][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 231.111727][ T6948] loop1: detected capacity change from 0 to 4096 [ 231.121219][ T6948] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 231.217548][ T6948] ntfs: volume version 3.1. [ 231.269057][ T6948] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii. You might want to try to use the mount option nls=utf8. [ 231.287414][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.350399][ T6948] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 231.655973][ T5837] usb 2-1: USB disconnect, device number 8 [ 232.447406][ T6968] loop2: detected capacity change from 0 to 131072 [ 232.483651][ T6956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.502920][ T6968] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 232.512143][ T6968] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 232.526607][ T6968] F2FS-fs (loop2): invalid crc value [ 232.566702][ T6968] F2FS-fs (loop2): Found nat_bits in checkpoint [ 232.601966][ T6968] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 232.609139][ T6968] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 232.652414][ T6974] FAULT_INJECTION: forcing a failure. [ 232.652414][ T6974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.666960][ T6974] CPU: 1 PID: 6974 Comm: syz.3.306 Not tainted syzkaller #0 [ 232.674293][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.684373][ T6974] Call Trace: [ 232.687687][ T6974] [ 232.690646][ T6974] dump_stack_lvl+0x18c/0x250 [ 232.695410][ T6974] ? show_regs_print_info+0x20/0x20 [ 232.700673][ T6974] ? load_image+0x420/0x420 [ 232.705194][ T6974] ? __lock_acquire+0x7d40/0x7d40 [ 232.710251][ T6974] ? snprintf+0xe9/0x140 [ 232.714520][ T6974] should_fail_ex+0x39d/0x4d0 [ 232.719231][ T6974] _copy_to_user+0x2f/0xa0 [ 232.723665][ T6974] simple_read_from_buffer+0xe7/0x150 [ 232.729058][ T6974] proc_fail_nth_read+0x1e8/0x260 [ 232.734101][ T6974] ? proc_fault_inject_write+0x360/0x360 [ 232.740201][ T6974] ? fsnotify_perm+0x271/0x5e0 [ 232.745003][ T6974] ? proc_fault_inject_write+0x360/0x360 [ 232.751105][ T6974] vfs_read+0x28b/0x970 [ 232.755298][ T6974] ? kernel_read+0x1e0/0x1e0 [ 232.759948][ T6974] ? __fget_files+0x28/0x4b0 [ 232.764574][ T6974] ? __fget_files+0x28/0x4b0 [ 232.769190][ T6974] ? __fget_files+0x43d/0x4b0 [ 232.773885][ T6974] ? __fdget_pos+0x2a3/0x330 [ 232.778479][ T6974] ? ksys_read+0x75/0x260 [ 232.782818][ T6974] ksys_read+0x150/0x260 [ 232.787071][ T6974] ? vfs_write+0x990/0x990 [ 232.791512][ T6974] ? lockdep_hardirqs_on+0x98/0x150 [ 232.796775][ T6974] do_syscall_64+0x55/0xb0 [ 232.801210][ T6974] ? clear_bhb_loop+0x40/0x90 [ 232.805886][ T6974] ? clear_bhb_loop+0x40/0x90 [ 232.810736][ T6974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.816635][ T6974] RIP: 0033:0x7fe28af5d68e [ 232.821059][ T6974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.840759][ T6974] RSP: 002b:00007fe28bee4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.849264][ T6974] RAX: ffffffffffffffda RBX: 00007fe28bee56c0 RCX: 00007fe28af5d68e [ 232.857342][ T6974] RDX: 000000000000000f RSI: 00007fe28bee50a0 RDI: 0000000000000004 [ 232.865328][ T6974] RBP: 00007fe28bee5090 R08: 0000000000000000 R09: 0000000000000000 [ 232.873305][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.881279][ T6974] R13: 00007fe28b216038 R14: 00007fe28b215fa0 R15: 00007ffc23327b78 [ 232.889280][ T6974] [ 233.199828][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 235.031683][ T6995] loop0: detected capacity change from 0 to 4096 [ 235.103316][ T6997] FAULT_INJECTION: forcing a failure. [ 235.103316][ T6997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.116922][ T6998] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.152945][ T6997] CPU: 1 PID: 6997 Comm: syz.1.316 Not tainted syzkaller #0 [ 235.160385][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.170457][ T6997] Call Trace: [ 235.173758][ T6997] [ 235.176713][ T6997] dump_stack_lvl+0x18c/0x250 [ 235.181427][ T6997] ? show_regs_print_info+0x20/0x20 [ 235.186652][ T6997] ? load_image+0x420/0x420 [ 235.191175][ T6997] ? __might_fault+0xaa/0x120 [ 235.195877][ T6997] ? __lock_acquire+0x7d40/0x7d40 [ 235.200933][ T6997] should_fail_ex+0x39d/0x4d0 [ 235.205721][ T6997] _copy_from_user+0x2f/0xe0 [ 235.210332][ T6997] ___sys_sendmsg+0x1c7/0x360 [ 235.215033][ T6997] ? get_pid_task+0x20/0x1e0 [ 235.219652][ T6997] ? __sys_sendmsg+0x2a0/0x2a0 [ 235.224460][ T6997] ? __lock_acquire+0x7d40/0x7d40 [ 235.229532][ T6997] __se_sys_sendmsg+0x1c2/0x2b0 [ 235.234410][ T6997] ? __x64_sys_sendmsg+0x80/0x80 [ 235.239386][ T6997] ? lockdep_hardirqs_on+0x98/0x150 [ 235.244616][ T6997] do_syscall_64+0x55/0xb0 [ 235.249055][ T6997] ? clear_bhb_loop+0x40/0x90 [ 235.253744][ T6997] ? clear_bhb_loop+0x40/0x90 [ 235.258438][ T6997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.264358][ T6997] RIP: 0033:0x7f390099ce59 [ 235.268773][ T6997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.288372][ T6997] RSP: 002b:00007f39018c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.296785][ T6997] RAX: ffffffffffffffda RBX: 00007f3900c15fa0 RCX: 00007f390099ce59 [ 235.304759][ T6997] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 235.312725][ T6997] RBP: 00007f39018c5090 R08: 0000000000000000 R09: 0000000000000000 [ 235.320686][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.328653][ T6997] R13: 00007f3900c16038 R14: 00007f3900c15fa0 R15: 00007fff0eaafc38 [ 235.336630][ T6997] [ 235.354603][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 235.568393][ T7001] netlink: 140 bytes leftover after parsing attributes in process `syz.1.317'. [ 236.387960][ T6995] netlink: 76 bytes leftover after parsing attributes in process `syz.0.314'. [ 236.466070][ T5837] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 236.658344][ T5837] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 236.671295][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.687477][ T5837] usb 3-1: config 0 descriptor?? [ 236.690471][ T7012] loop0: detected capacity change from 0 to 32768 [ 236.708889][ T5837] cp210x 3-1:0.0: cp210x converter detected [ 236.749368][ T5769] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.351258][ T7005] IPv6: addrconf: prefix option has invalid lifetime [ 237.373106][ T5837] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 237.394607][ T5837] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 237.439887][ T5837] usb 3-1: cp210x converter now attached to ttyUSB0 [ 237.458261][ T5837] usb 3-1: USB disconnect, device number 4 [ 237.468509][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 237.483104][ T5837] cp210x 3-1:0.0: device disconnected [ 238.557838][ T7035] FAULT_INJECTION: forcing a failure. [ 238.557838][ T7035] name failslab, interval 1, probability 0, space 0, times 0 [ 238.582722][ T7035] CPU: 0 PID: 7035 Comm: syz.0.324 Not tainted syzkaller #0 [ 238.590073][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.600158][ T7035] Call Trace: [ 238.603463][ T7035] [ 238.606499][ T7035] dump_stack_lvl+0x18c/0x250 [ 238.611213][ T7035] ? show_regs_print_info+0x20/0x20 [ 238.616534][ T7035] ? load_image+0x420/0x420 [ 238.621067][ T7035] ? __might_sleep+0xe0/0xe0 [ 238.625686][ T7035] ? __lock_acquire+0x7d40/0x7d40 [ 238.630741][ T7035] should_fail_ex+0x39d/0x4d0 [ 238.635459][ T7035] should_failslab+0x9/0x20 [ 238.640029][ T7035] slab_pre_alloc_hook+0x59/0x310 [ 238.645080][ T7035] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 238.650814][ T7035] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 238.656545][ T7035] __kmem_cache_alloc_node+0x53/0x250 [ 238.661922][ T7035] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 238.667648][ T7035] __kmalloc+0xa4/0x230 [ 238.671809][ T7035] tomoyo_realpath_from_path+0xe3/0x5d0 [ 238.677368][ T7035] tomoyo_path_number_perm+0x248/0x620 [ 238.682822][ T7035] ? tomoyo_path_number_perm+0x217/0x620 [ 238.688450][ T7035] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 238.693910][ T7035] ? ksys_write+0x1c4/0x260 [ 238.698468][ T7035] ? __fget_files+0x28/0x4b0 [ 238.703064][ T7035] ? __fget_files+0x28/0x4b0 [ 238.707664][ T7035] security_file_ioctl+0x70/0xa0 [ 238.712645][ T7035] __se_sys_ioctl+0x48/0x170 [ 238.717237][ T7035] do_syscall_64+0x55/0xb0 [ 238.721656][ T7035] ? clear_bhb_loop+0x40/0x90 [ 238.726333][ T7035] ? clear_bhb_loop+0x40/0x90 [ 238.731007][ T7035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.736902][ T7035] RIP: 0033:0x7fe1e219ce59 [ 238.741313][ T7035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.760915][ T7035] RSP: 002b:00007fe1e2f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.769336][ T7035] RAX: ffffffffffffffda RBX: 00007fe1e2416090 RCX: 00007fe1e219ce59 [ 238.777390][ T7035] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 238.785354][ T7035] RBP: 00007fe1e2f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 238.793317][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.801279][ T7035] R13: 00007fe1e2416128 R14: 00007fe1e2416090 R15: 00007fff25046ee8 [ 238.809263][ T7035] [ 238.844702][ T7035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 238.979371][ T7039] FAULT_INJECTION: forcing a failure. [ 238.979371][ T7039] name failslab, interval 1, probability 0, space 0, times 0 [ 239.023218][ T7039] CPU: 1 PID: 7039 Comm: syz.2.328 Not tainted syzkaller #0 [ 239.030560][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.040636][ T7039] Call Trace: [ 239.043929][ T7039] [ 239.046881][ T7039] dump_stack_lvl+0x18c/0x250 [ 239.051586][ T7039] ? show_regs_print_info+0x20/0x20 [ 239.056809][ T7039] ? load_image+0x420/0x420 [ 239.061416][ T7039] ? __might_sleep+0xe0/0xe0 [ 239.066039][ T7039] ? __lock_acquire+0x7d40/0x7d40 [ 239.071182][ T7039] should_fail_ex+0x39d/0x4d0 [ 239.075889][ T7039] should_failslab+0x9/0x20 [ 239.080416][ T7039] slab_pre_alloc_hook+0x59/0x310 [ 239.085533][ T7039] ? kernfs_fop_write_iter+0x159/0x520 [ 239.091020][ T7039] ? kernfs_fop_write_iter+0x159/0x520 [ 239.096506][ T7039] __kmem_cache_alloc_node+0x53/0x250 [ 239.101934][ T7039] ? kernfs_fop_write_iter+0x159/0x520 [ 239.107430][ T7039] __kmalloc+0xa4/0x230 [ 239.111626][ T7039] kernfs_fop_write_iter+0x159/0x520 [ 239.116947][ T7039] vfs_write+0x46c/0x990 [ 239.121237][ T7039] ? file_end_write+0x250/0x250 [ 239.126128][ T7039] ? __fget_files+0x43d/0x4b0 [ 239.130826][ T7039] ? __fdget_pos+0x2a3/0x330 [ 239.135430][ T7039] ? ksys_write+0x75/0x260 [ 239.139964][ T7039] ksys_write+0x150/0x260 [ 239.144435][ T7039] ? __ia32_sys_read+0x90/0x90 [ 239.149219][ T7039] ? lockdep_hardirqs_on+0x98/0x150 [ 239.154446][ T7039] do_syscall_64+0x55/0xb0 [ 239.158893][ T7039] ? clear_bhb_loop+0x40/0x90 [ 239.163572][ T7039] ? clear_bhb_loop+0x40/0x90 [ 239.168246][ T7039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.174142][ T7039] RIP: 0033:0x7f0ff739ce59 [ 239.178564][ T7039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.198265][ T7039] RSP: 002b:00007f0ff82bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.206680][ T7039] RAX: ffffffffffffffda RBX: 00007f0ff7615fa0 RCX: 00007f0ff739ce59 [ 239.214650][ T7039] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 239.222622][ T7039] RBP: 00007f0ff82bf090 R08: 0000000000000000 R09: 0000000000000000 [ 239.230597][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.238574][ T7039] R13: 00007f0ff7616038 R14: 00007f0ff7615fa0 R15: 00007fffa9c79448 [ 239.246590][ T7039] [ 239.249753][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.429210][ T7043] loop2: detected capacity change from 0 to 2048 [ 239.515134][ T7043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.026584][ T7067] netlink: 35 bytes leftover after parsing attributes in process `syz.1.336'. [ 242.236449][ T7070] FAULT_INJECTION: forcing a failure. [ 242.236449][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 242.259584][ T7070] CPU: 1 PID: 7070 Comm: syz.1.339 Not tainted syzkaller #0 [ 242.266923][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.277005][ T7070] Call Trace: [ 242.280304][ T7070] [ 242.283250][ T7070] dump_stack_lvl+0x18c/0x250 [ 242.287954][ T7070] ? show_regs_print_info+0x20/0x20 [ 242.293178][ T7070] ? load_image+0x420/0x420 [ 242.297713][ T7070] ? __might_sleep+0xe0/0xe0 [ 242.302324][ T7070] ? __lock_acquire+0x7d40/0x7d40 [ 242.307377][ T7070] should_fail_ex+0x39d/0x4d0 [ 242.312084][ T7070] should_failslab+0x9/0x20 [ 242.316611][ T7070] slab_pre_alloc_hook+0x59/0x310 [ 242.321660][ T7070] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.327399][ T7070] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.333137][ T7070] __kmem_cache_alloc_node+0x53/0x250 [ 242.338544][ T7070] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.344285][ T7070] __kmalloc+0xa4/0x230 [ 242.348471][ T7070] tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.354051][ T7070] tomoyo_path_number_perm+0x248/0x620 [ 242.359527][ T7070] ? tomoyo_path_number_perm+0x217/0x620 [ 242.365182][ T7070] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 242.370660][ T7070] ? proc_fail_nth_write+0x1c5/0x250 [ 242.375956][ T7070] ? proc_fail_nth_read+0x260/0x260 [ 242.381187][ T7070] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 242.387197][ T7070] security_file_ioctl+0x70/0xa0 [ 242.392143][ T7070] __se_sys_ioctl+0x48/0x170 [ 242.396745][ T7070] do_syscall_64+0x55/0xb0 [ 242.401160][ T7070] ? clear_bhb_loop+0x40/0x90 [ 242.405830][ T7070] ? clear_bhb_loop+0x40/0x90 [ 242.410508][ T7070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.416415][ T7070] RIP: 0033:0x7f390099ce59 [ 242.420834][ T7070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.440530][ T7070] RSP: 002b:00007f39018c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.448964][ T7070] RAX: ffffffffffffffda RBX: 00007f3900c15fa0 RCX: 00007f390099ce59 [ 242.456944][ T7070] RDX: 0000000000000000 RSI: 00000000800454e0 RDI: 0000000000000003 [ 242.464913][ T7070] RBP: 00007f39018c5090 R08: 0000000000000000 R09: 0000000000000000 [ 242.472879][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.480859][ T7070] R13: 00007f3900c16038 R14: 00007f3900c15fa0 R15: 00007fff0eaafc38 [ 242.488856][ T7070] [ 242.491981][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.570941][ T7070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.117893][ T7080] ubi31: attaching mtd0 [ 243.150967][ T7080] ubi31: scanning is finished [ 243.167366][ T7080] ubi31: empty MTD device detected [ 243.242517][ T7082] loop2: detected capacity change from 0 to 4096 [ 243.280868][ T7087] loop1: detected capacity change from 0 to 2048 [ 243.324661][ T5767] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.416126][ T7080] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 243.445991][ T7087] loop1: p1 < > p4 [ 243.450771][ T7080] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 243.477329][ T7087] loop1: p4 size 722688 extends beyond EOD, truncated [ 243.522963][ T7080] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 243.589680][ T7080] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 244.864740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 245.035195][ T7080] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 245.080256][ T7080] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 245.104995][ T7080] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 381783992 [ 245.130862][ T7080] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 245.149978][ T7096] ubi31: background thread "ubi_bgt31d" started, PID 7096 [ 245.644200][ T7102] loop0: detected capacity change from 0 to 32768 [ 245.733140][ T7102] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 245.733140][ T7102] [ 246.806037][ T7121] FAULT_INJECTION: forcing a failure. [ 246.806037][ T7121] name failslab, interval 1, probability 0, space 0, times 0 [ 246.830501][ T7121] CPU: 0 PID: 7121 Comm: syz.3.353 Not tainted syzkaller #0 [ 246.837846][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.847923][ T7121] Call Trace: [ 246.851211][ T7121] [ 246.854154][ T7121] dump_stack_lvl+0x18c/0x250 [ 246.858870][ T7121] ? show_regs_print_info+0x20/0x20 [ 246.864094][ T7121] ? load_image+0x420/0x420 [ 246.868677][ T7121] ? __might_sleep+0xe0/0xe0 [ 246.873318][ T7121] ? __lock_acquire+0x7d40/0x7d40 [ 246.878379][ T7121] should_fail_ex+0x39d/0x4d0 [ 246.883083][ T7121] should_failslab+0x9/0x20 [ 246.887616][ T7121] slab_pre_alloc_hook+0x59/0x310 [ 246.892665][ T7121] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 246.898417][ T7121] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 246.904169][ T7121] __kmem_cache_alloc_node+0x53/0x250 [ 246.909595][ T7121] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 246.915358][ T7121] __kmalloc+0xa4/0x230 [ 246.919547][ T7121] tomoyo_realpath_from_path+0xe3/0x5d0 [ 246.925222][ T7121] tomoyo_path_number_perm+0x248/0x620 [ 246.930710][ T7121] ? tomoyo_path_number_perm+0x217/0x620 [ 246.936489][ T7121] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 246.941979][ T7121] ? ksys_write+0x1c4/0x260 [ 246.946540][ T7121] ? __fget_files+0x28/0x4b0 [ 246.951149][ T7121] ? __fget_files+0x28/0x4b0 [ 246.955778][ T7121] security_file_ioctl+0x70/0xa0 [ 246.960735][ T7121] __se_sys_ioctl+0x48/0x170 [ 246.965355][ T7121] do_syscall_64+0x55/0xb0 [ 246.969788][ T7121] ? clear_bhb_loop+0x40/0x90 [ 246.974472][ T7121] ? clear_bhb_loop+0x40/0x90 [ 246.979173][ T7121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.985087][ T7121] RIP: 0033:0x7fe28af9ce59 [ 246.989517][ T7121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.009157][ T7121] RSP: 002b:00007fe28bec4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.017603][ T7121] RAX: ffffffffffffffda RBX: 00007fe28b216090 RCX: 00007fe28af9ce59 [ 247.025607][ T7121] RDX: 0000200000000240 RSI: 0000000000005412 RDI: 0000000000000004 [ 247.033602][ T7121] RBP: 00007fe28bec4090 R08: 0000000000000000 R09: 0000000000000000 [ 247.041600][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.049592][ T7121] R13: 00007fe28b216128 R14: 00007fe28b216090 R15: 00007ffc23327b78 [ 247.057602][ T7121] [ 247.074951][ T7121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.098123][ T7164] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.363'. [ 253.122082][ T7163] loop2: detected capacity change from 0 to 128 [ 253.212975][ T7163] syz.2.363: attempt to access beyond end of device [ 253.212975][ T7163] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 253.342374][ T7157] loop1: detected capacity change from 0 to 32768 [ 253.383677][ T7157] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 253.383677][ T7157] [ 253.750100][ T7170] FAULT_INJECTION: forcing a failure. [ 253.750100][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.794859][ T7170] CPU: 0 PID: 7170 Comm: syz.2.367 Not tainted syzkaller #0 [ 253.802209][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.812289][ T7170] Call Trace: [ 253.815622][ T7170] [ 253.818567][ T7170] dump_stack_lvl+0x18c/0x250 [ 253.823355][ T7170] ? show_regs_print_info+0x20/0x20 [ 253.828580][ T7170] ? load_image+0x420/0x420 [ 253.833110][ T7170] ? __might_fault+0xaa/0x120 [ 253.837809][ T7170] ? __lock_acquire+0x7d40/0x7d40 [ 253.842850][ T7170] should_fail_ex+0x39d/0x4d0 [ 253.847535][ T7170] _copy_from_user+0x2f/0xe0 [ 253.852157][ T7170] ___sys_sendmsg+0x1c7/0x360 [ 253.856838][ T7170] ? get_pid_task+0x20/0x1e0 [ 253.861519][ T7170] ? __sys_sendmsg+0x2a0/0x2a0 [ 253.866291][ T7170] ? __lock_acquire+0x7d40/0x7d40 [ 253.871318][ T7170] __se_sys_sendmsg+0x1c2/0x2b0 [ 253.876164][ T7170] ? __x64_sys_sendmsg+0x80/0x80 [ 253.881124][ T7170] ? lockdep_hardirqs_on+0x98/0x150 [ 253.886323][ T7170] do_syscall_64+0x55/0xb0 [ 253.890731][ T7170] ? clear_bhb_loop+0x40/0x90 [ 253.895397][ T7170] ? clear_bhb_loop+0x40/0x90 [ 253.900092][ T7170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.905988][ T7170] RIP: 0033:0x7f0ff739ce59 [ 253.910434][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.930049][ T7170] RSP: 002b:00007f0ff82bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.938460][ T7170] RAX: ffffffffffffffda RBX: 00007f0ff7615fa0 RCX: 00007f0ff739ce59 [ 253.946429][ T7170] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 253.954408][ T7170] RBP: 00007f0ff82bf090 R08: 0000000000000000 R09: 0000000000000000 [ 253.962385][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.970348][ T7170] R13: 00007f0ff7616038 R14: 00007f0ff7615fa0 R15: 00007fffa9c79448 [ 253.978394][ T7170] [ 254.078186][ T7173] FAULT_INJECTION: forcing a failure. [ 254.078186][ T7173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.092512][ T7173] CPU: 0 PID: 7173 Comm: syz.0.359 Not tainted syzkaller #0 [ 254.099831][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.109903][ T7173] Call Trace: [ 254.113196][ T7173] [ 254.116134][ T7173] dump_stack_lvl+0x18c/0x250 [ 254.120845][ T7173] ? show_regs_print_info+0x20/0x20 [ 254.126059][ T7173] ? load_image+0x420/0x420 [ 254.130584][ T7173] ? __might_fault+0xaa/0x120 [ 254.135280][ T7173] ? __lock_acquire+0x7d40/0x7d40 [ 254.140327][ T7173] should_fail_ex+0x39d/0x4d0 [ 254.145033][ T7173] _copy_from_user+0x2f/0xe0 [ 254.149642][ T7173] core_sys_select+0x561/0xaa0 [ 254.154439][ T7173] ? poll_select_set_timeout+0x160/0x160 [ 254.160110][ T7173] ? sigprocmask+0x190/0x190 [ 254.164717][ T7173] ? __fget_files+0x43d/0x4b0 [ 254.169418][ T7173] __se_sys_pselect6+0x272/0x340 [ 254.174378][ T7173] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 254.180378][ T7173] ? __x64_sys_pselect6+0xf0/0xf0 [ 254.185425][ T7173] ? __x64_sys_pselect6+0x21/0xf0 [ 254.190470][ T7173] do_syscall_64+0x55/0xb0 [ 254.194899][ T7173] ? clear_bhb_loop+0x40/0x90 [ 254.199588][ T7173] ? clear_bhb_loop+0x40/0x90 [ 254.204273][ T7173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.210279][ T7173] RIP: 0033:0x7fe1e219ce59 [ 254.214707][ T7173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.234328][ T7173] RSP: 002b:00007fe1e2f7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 254.242761][ T7173] RAX: ffffffffffffffda RBX: 00007fe1e2416090 RCX: 00007fe1e219ce59 [ 254.250745][ T7173] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 254.258729][ T7173] RBP: 00007fe1e2f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 254.266713][ T7173] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 254.274699][ T7173] R13: 00007fe1e2416128 R14: 00007fe1e2416090 R15: 00007fff25046ee8 [ 254.282696][ T7173] [ 256.135771][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.146592][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.642480][ T7185] loop0: detected capacity change from 0 to 1024 [ 257.060864][ T7193] tipc: Enabled bearer , priority 0 [ 257.069706][ T7193] syzkaller0: entered promiscuous mode [ 257.075291][ T7193] syzkaller0: entered allmulticast mode [ 257.088028][ T7193] tipc: Resetting bearer [ 257.095452][ T28] audit: type=1804 audit(257.056:10): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.373" name="/newroot/93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=2 res=1 errno=0 [ 257.145612][ T7185] hfsplus: xattr searching failed [ 257.413693][ T7196] hfsplus: xattr searching failed [ 257.428353][ T7196] hfsplus: xattr searching failed [ 257.442788][ T7201] FAULT_INJECTION: forcing a failure. [ 257.442788][ T7201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.456022][ T7201] CPU: 0 PID: 7201 Comm: syz.3.375 Not tainted syzkaller #0 [ 257.463358][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.473451][ T7201] Call Trace: [ 257.476751][ T7201] [ 257.479702][ T7201] dump_stack_lvl+0x18c/0x250 [ 257.484416][ T7201] ? show_regs_print_info+0x20/0x20 [ 257.489733][ T7201] ? load_image+0x420/0x420 [ 257.494296][ T7201] ? __lock_acquire+0x7d40/0x7d40 [ 257.499352][ T7201] ? snprintf+0xe9/0x140 [ 257.503628][ T7201] should_fail_ex+0x39d/0x4d0 [ 257.508342][ T7201] _copy_to_user+0x2f/0xa0 [ 257.512786][ T7201] simple_read_from_buffer+0xe7/0x150 [ 257.518205][ T7201] proc_fail_nth_read+0x1e8/0x260 [ 257.523266][ T7201] ? proc_fault_inject_write+0x360/0x360 [ 257.528943][ T7201] ? fsnotify_perm+0x271/0x5e0 [ 257.533738][ T7201] ? proc_fault_inject_write+0x360/0x360 [ 257.539408][ T7201] vfs_read+0x28b/0x970 [ 257.543617][ T7201] ? kernel_read+0x1e0/0x1e0 [ 257.548242][ T7201] ? __fget_files+0x28/0x4b0 [ 257.552864][ T7201] ? __fget_files+0x28/0x4b0 [ 257.557462][ T7201] ? __fget_files+0x43d/0x4b0 [ 257.562147][ T7201] ? __fdget_pos+0x2a3/0x330 [ 257.566750][ T7201] ? ksys_read+0x75/0x260 [ 257.571113][ T7201] ksys_read+0x150/0x260 [ 257.575394][ T7201] ? vfs_write+0x990/0x990 [ 257.579850][ T7201] ? lockdep_hardirqs_on+0x98/0x150 [ 257.585091][ T7201] do_syscall_64+0x55/0xb0 [ 257.589544][ T7201] ? clear_bhb_loop+0x40/0x90 [ 257.594255][ T7201] ? clear_bhb_loop+0x40/0x90 [ 257.598967][ T7201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.604905][ T7201] RIP: 0033:0x7fe28af5d68e [ 257.609350][ T7201] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 257.628985][ T7201] RSP: 002b:00007fe28bec3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.637448][ T7201] RAX: ffffffffffffffda RBX: 00007fe28bec46c0 RCX: 00007fe28af5d68e [ 257.645441][ T7201] RDX: 000000000000000f RSI: 00007fe28bec40a0 RDI: 0000000000000006 [ 257.653433][ T7201] RBP: 00007fe28bec4090 R08: 0000000000000000 R09: 0000000000000000 [ 257.661416][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.669390][ T7201] R13: 00007fe28b216128 R14: 00007fe28b216090 R15: 00007ffc23327b78 [ 257.677387][ T7201] [ 257.681791][ T7192] tipc: Resetting bearer [ 257.764061][ T7192] tipc: Disabling bearer [ 257.983138][ T27] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 259.397038][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 259.416339][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.437058][ T27] usb 1-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 259.454465][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.474539][ T27] usb 1-1: Product: syz [ 259.484702][ T27] usb 1-1: Manufacturer: syz [ 259.489420][ T27] usb 1-1: SerialNumber: syz [ 259.684082][ T27] usb 1-1: bad CDC descriptors [ 259.733138][ T27] usb 1-1: USB disconnect, device number 7 [ 260.260829][ T7212] loop2: detected capacity change from 0 to 32768 [ 260.283673][ T7223] FAULT_INJECTION: forcing a failure. [ 260.283673][ T7223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.302981][ T7223] CPU: 1 PID: 7223 Comm: syz.1.381 Not tainted syzkaller #0 [ 260.310320][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.320398][ T7223] Call Trace: [ 260.323676][ T7223] [ 260.326616][ T7223] dump_stack_lvl+0x18c/0x250 [ 260.331312][ T7223] ? show_regs_print_info+0x20/0x20 [ 260.336514][ T7223] ? load_image+0x420/0x420 [ 260.341015][ T7223] ? __might_fault+0xaa/0x120 [ 260.345693][ T7223] ? __lock_acquire+0x7d40/0x7d40 [ 260.350717][ T7223] should_fail_ex+0x39d/0x4d0 [ 260.355404][ T7223] _copy_from_user+0x2f/0xe0 [ 260.359992][ T7223] __sys_bind+0x1f5/0x3f0 [ 260.364323][ T7223] ? __ia32_sys_socketpair+0xb0/0xb0 [ 260.369620][ T7223] __x64_sys_bind+0x7a/0x90 [ 260.374149][ T7223] do_syscall_64+0x55/0xb0 [ 260.378586][ T7223] ? clear_bhb_loop+0x40/0x90 [ 260.383436][ T7223] ? clear_bhb_loop+0x40/0x90 [ 260.388116][ T7223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.394030][ T7223] RIP: 0033:0x7f390099ce59 [ 260.398460][ T7223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.418175][ T7223] RSP: 002b:00007f39018c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 260.426591][ T7223] RAX: ffffffffffffffda RBX: 00007f3900c15fa0 RCX: 00007f390099ce59 [ 260.434569][ T7223] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000003 [ 260.442552][ T7223] RBP: 00007f39018c5090 R08: 0000000000000000 R09: 0000000000000000 [ 260.450521][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.458489][ T7223] R13: 00007f3900c16038 R14: 00007f3900c15fa0 R15: 00007fff0eaafc38 [ 260.466476][ T7223] [ 260.527531][ T7212] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 260.527531][ T7212] [ 260.703690][ T7225] FAULT_INJECTION: forcing a failure. [ 260.703690][ T7225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.762992][ T7225] CPU: 0 PID: 7225 Comm: syz.3.384 Not tainted syzkaller #0 [ 260.770341][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.780425][ T7225] Call Trace: [ 260.783725][ T7225] [ 260.786674][ T7225] dump_stack_lvl+0x18c/0x250 [ 260.791376][ T7225] ? show_regs_print_info+0x20/0x20 [ 260.796601][ T7225] ? load_image+0x420/0x420 [ 260.801140][ T7225] ? __lock_acquire+0x7d40/0x7d40 [ 260.806205][ T7225] ? snprintf+0xe9/0x140 [ 260.810496][ T7225] should_fail_ex+0x39d/0x4d0 [ 260.815210][ T7225] _copy_to_user+0x2f/0xa0 [ 260.819657][ T7225] simple_read_from_buffer+0xe7/0x150 [ 260.825063][ T7225] proc_fail_nth_read+0x1e8/0x260 [ 260.830119][ T7225] ? proc_fault_inject_write+0x360/0x360 [ 260.835790][ T7225] ? fsnotify_perm+0x271/0x5e0 [ 260.840582][ T7225] ? proc_fault_inject_write+0x360/0x360 [ 260.846254][ T7225] vfs_read+0x28b/0x970 [ 260.850452][ T7225] ? kernel_read+0x1e0/0x1e0 [ 260.855082][ T7225] ? __fget_files+0x28/0x4b0 [ 260.859699][ T7225] ? __fget_files+0x28/0x4b0 [ 260.864323][ T7225] ? __fget_files+0x43d/0x4b0 [ 260.869043][ T7225] ? __fdget_pos+0x2a3/0x330 [ 260.873661][ T7225] ? ksys_read+0x75/0x260 [ 260.878018][ T7225] ksys_read+0x150/0x260 [ 260.882295][ T7225] ? vfs_write+0x990/0x990 [ 260.886999][ T7225] ? lockdep_hardirqs_on+0x98/0x150 [ 260.892241][ T7225] do_syscall_64+0x55/0xb0 [ 260.896689][ T7225] ? clear_bhb_loop+0x40/0x90 [ 260.901399][ T7225] ? clear_bhb_loop+0x40/0x90 [ 260.906106][ T7225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.912034][ T7225] RIP: 0033:0x7fe28af5d68e [ 260.916478][ T7225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.936112][ T7225] RSP: 002b:00007fe28bee4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.944556][ T7225] RAX: ffffffffffffffda RBX: 00007fe28bee56c0 RCX: 00007fe28af5d68e [ 260.952561][ T7225] RDX: 000000000000000f RSI: 00007fe28bee50a0 RDI: 0000000000000004 [ 260.960560][ T7225] RBP: 00007fe28bee5090 R08: 0000000000000000 R09: 0000000000000000 [ 260.968560][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.976560][ T7225] R13: 00007fe28b216038 R14: 00007fe28b215fa0 R15: 00007ffc23327b78 [ 260.984577][ T7225] [ 261.199744][ T7239] loop0: detected capacity change from 0 to 4096 [ 261.212679][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbdac00: rx timeout, send abort [ 261.287967][ T7239] ntfs: volume version 3.1. [ 261.712773][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbd4000: rx timeout, send abort [ 261.722733][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbdac00: abort rx timeout. Force session deactivation [ 262.221100][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbd4000: abort rx timeout. Force session deactivation [ 262.241274][ T7237] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 262.284236][ T7237] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 262.336940][ T7237] ntfs: (device loop0): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 262.368065][ T7237] ntfs: (device loop0): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 262.387100][ T7237] ntfs: (device loop0): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 262.514665][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 262.656234][ T5809] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 262.705685][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 262.712862][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.734240][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.755036][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.774548][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.804644][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.813738][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.878452][ T5809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.889167][ T5809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.939123][ T7254] FAULT_INJECTION: forcing a failure. [ 262.939123][ T7254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.960393][ T7254] CPU: 1 PID: 7254 Comm: syz.2.394 Not tainted syzkaller #0 [ 262.967736][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.977814][ T7254] Call Trace: [ 262.981111][ T7254] [ 262.984044][ T7254] dump_stack_lvl+0x18c/0x250 [ 262.988734][ T7254] ? show_regs_print_info+0x20/0x20 [ 262.993936][ T7254] ? load_image+0x420/0x420 [ 262.998448][ T7254] ? __might_fault+0xaa/0x120 [ 263.003127][ T7254] ? __lock_acquire+0x7d40/0x7d40 [ 263.008189][ T7254] should_fail_ex+0x39d/0x4d0 [ 263.012873][ T7254] _copy_from_user+0x2f/0xe0 [ 263.017464][ T7254] __sys_bpf+0x23e/0x890 [ 263.021705][ T7254] ? bpf_link_show_fdinfo+0x390/0x390 [ 263.027100][ T7254] ? lock_chain_count+0x20/0x20 [ 263.031954][ T7254] __x64_sys_bpf+0x7c/0x90 [ 263.036369][ T7254] do_syscall_64+0x55/0xb0 [ 263.040780][ T7254] ? clear_bhb_loop+0x40/0x90 [ 263.045447][ T7254] ? clear_bhb_loop+0x40/0x90 [ 263.050115][ T7254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.056008][ T7254] RIP: 0033:0x7f0ff739ce59 [ 263.060422][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.080027][ T7254] RSP: 002b:00007f0ff82bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.088444][ T7254] RAX: ffffffffffffffda RBX: 00007f0ff7615fa0 RCX: 00007f0ff739ce59 [ 263.096415][ T7254] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000004 [ 263.104473][ T7254] RBP: 00007f0ff82bf090 R08: 0000000000000000 R09: 0000000000000000 [ 263.112459][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.120428][ T7254] R13: 00007f0ff7616038 R14: 00007f0ff7615fa0 R15: 00007fffa9c79448 [ 263.128406][ T7254] [ 263.146269][ T5809] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.156061][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.164227][ T5809] usb 1-1: SerialNumber: syz [ 263.169095][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 263.175881][ T27] usbtmc 4-1:16.0: can't read capabilities [ 263.292822][ T7259] loop2: detected capacity change from 0 to 512 [ 263.309905][ T7259] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 263.329664][ T7259] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 263.374797][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.390254][ T7237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.388'. [ 263.402523][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.411842][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.425627][ T5809] usb 1-1: 0:2 : does not exist [ 263.427667][ T7259] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.396: bg 0: block 104: invalid block bitmap [ 263.434315][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.452811][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.457525][ T7259] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 263.461926][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.480058][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.492338][ T7259] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.396: invalid indirect mapped block 1 (level 1) [ 263.504176][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.514574][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.531833][ T5809] usb 1-1: USB disconnect, device number 8 [ 263.531903][ T7259] EXT4-fs (loop2): 1 truncate cleaned up [ 263.540671][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.552954][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.558101][ T7259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.562054][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.583517][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.595394][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.604530][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.613669][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.641189][ T9] usb 4-1: USB disconnect, device number 11 [ 263.738030][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.788491][ T7266] macsec0: entered promiscuous mode [ 263.867100][ T7258] macsec0: left promiscuous mode [ 263.942922][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.989681][ T5774] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 264.055350][ T786] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 264.112157][ T7270] FAULT_INJECTION: forcing a failure. [ 264.112157][ T7270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.127821][ T7270] CPU: 0 PID: 7270 Comm: syz.0.399 Not tainted syzkaller #0 [ 264.135156][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.145261][ T7270] Call Trace: [ 264.148563][ T7270] [ 264.151519][ T7270] dump_stack_lvl+0x18c/0x250 [ 264.156221][ T7270] ? show_regs_print_info+0x20/0x20 [ 264.161432][ T7270] ? load_image+0x420/0x420 [ 264.165956][ T7270] ? __lock_acquire+0x7d40/0x7d40 [ 264.171007][ T7270] should_fail_ex+0x39d/0x4d0 [ 264.175716][ T7270] strncpy_from_user+0x36/0x2d0 [ 264.180602][ T7270] path_setxattr+0x146/0x5d0 [ 264.185223][ T7270] ? simple_xattrs_free+0x150/0x150 [ 264.190468][ T7270] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 264.196477][ T7270] ? lock_chain_count+0x20/0x20 [ 264.201352][ T7270] __x64_sys_setxattr+0xbb/0xd0 [ 264.206237][ T7270] do_syscall_64+0x55/0xb0 [ 264.210684][ T7270] ? clear_bhb_loop+0x40/0x90 [ 264.215377][ T7270] ? clear_bhb_loop+0x40/0x90 [ 264.220073][ T7270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.225991][ T7270] RIP: 0033:0x7fe1e219ce59 [ 264.230425][ T7270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.250048][ T7270] RSP: 002b:00007fe1e2f9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 264.258458][ T7270] RAX: ffffffffffffffda RBX: 00007fe1e2415fa0 RCX: 00007fe1e219ce59 [ 264.266423][ T7270] RDX: 0000000000000000 RSI: 0000200000002b80 RDI: 0000200000000140 [ 264.274400][ T7270] RBP: 00007fe1e2f9b090 R08: 0000000000000003 R09: 0000000000000000 [ 264.282367][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.290329][ T7270] R13: 00007fe1e2416038 R14: 00007fe1e2415fa0 R15: 00007fff25046ee8 [ 264.298313][ T7270] [ 264.385206][ T786] usb 2-1: device descriptor read/64, error -71 [ 264.654448][ T786] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 264.866419][ T7272] loop3: detected capacity change from 0 to 32768 [ 264.877048][ T786] usb 2-1: device descriptor read/64, error -71 [ 264.910989][ T7272] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 264.910989][ T7272] [ 264.965447][ T7272] diRead: diIAGRead returned -5 [ 264.973672][ T7276] loop0: detected capacity change from 0 to 32768 [ 264.981435][ T7272] jfs_lookup: iget failed on inum 1048352 [ 264.994871][ T786] usb usb2-port1: attempt power cycle [ 265.042609][ T7276] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 265.042609][ T7276] [ 265.446092][ T786] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 265.495255][ T786] usb 2-1: device descriptor read/8, error -71 [ 265.784501][ T786] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 265.848928][ T786] usb 2-1: device descriptor read/8, error -71 [ 265.998447][ T786] usb usb2-port1: unable to enumerate USB device [ 266.575855][ T28] audit: type=1800 audit(266.536:11): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.402" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 266.992492][ T7293] loop3: detected capacity change from 0 to 32768 [ 266.997322][ T7301] loop0: detected capacity change from 0 to 2048 [ 267.011015][ T7293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.407 (7293) [ 267.084530][ T7303] FAULT_INJECTION: forcing a failure. [ 267.084530][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 267.098370][ T7303] CPU: 0 PID: 7303 Comm: syz.2.409 Not tainted syzkaller #0 [ 267.105677][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.115739][ T7303] Call Trace: [ 267.119028][ T7303] [ 267.121975][ T7303] dump_stack_lvl+0x18c/0x250 [ 267.126688][ T7303] ? show_regs_print_info+0x20/0x20 [ 267.131902][ T7303] ? load_image+0x420/0x420 [ 267.136417][ T7303] ? __lock_acquire+0x7d40/0x7d40 [ 267.141455][ T7303] should_fail_ex+0x39d/0x4d0 [ 267.146156][ T7303] should_failslab+0x9/0x20 [ 267.150676][ T7303] slab_pre_alloc_hook+0x59/0x310 [ 267.155720][ T7303] ? alloc_pipe_info+0xe8/0x4c0 [ 267.160583][ T7303] __kmem_cache_alloc_node+0x53/0x250 [ 267.165968][ T7303] ? alloc_pipe_info+0xe8/0x4c0 [ 267.170829][ T7303] kmalloc_trace+0x2a/0xe0 [ 267.175269][ T7303] alloc_pipe_info+0xe8/0x4c0 [ 267.179961][ T7303] splice_direct_to_actor+0x711/0x8c0 [ 267.185346][ T7303] ? aa_path_link+0xf70/0xf70 [ 267.190040][ T7303] ? aa_file_perm+0x11b/0xee0 [ 267.194733][ T7303] ? aa_file_perm+0x3e3/0xee0 [ 267.199420][ T7303] ? direct_file_splice_eof+0xb0/0xb0 [ 267.204819][ T7303] ? end_current_label_crit_section+0x149/0x170 [ 267.211078][ T7303] ? warn_unsupported+0xc0/0xc0 [ 267.215946][ T7303] ? common_file_perm+0x198/0x1f0 [ 267.220986][ T7303] ? fsnotify_perm+0x5d/0x5e0 [ 267.225671][ T7303] ? security_file_permission+0x79/0xa0 [ 267.231227][ T7303] do_splice_direct+0x1d5/0x2f0 [ 267.236112][ T7303] ? splice_direct_to_actor+0x8c0/0x8c0 [ 267.241686][ T7303] ? do_splice_direct+0x2f0/0x2f0 [ 267.246728][ T7303] ? common_file_perm+0x198/0x1f0 [ 267.251765][ T7303] ? fsnotify_perm+0x5d/0x5e0 [ 267.256447][ T7303] ? security_file_permission+0x79/0xa0 [ 267.262005][ T7303] do_sendfile+0x5f2/0xef0 [ 267.266449][ T7303] ? do_pwritev+0x3a0/0x3a0 [ 267.270980][ T7303] __se_sys_sendfile64+0x145/0x1a0 [ 267.276110][ T7303] ? lock_chain_count+0x20/0x20 [ 267.281002][ T7303] ? __x64_sys_sendfile64+0xb0/0xb0 [ 267.286228][ T7303] ? lockdep_hardirqs_on+0x98/0x150 [ 267.291452][ T7303] do_syscall_64+0x55/0xb0 [ 267.295882][ T7303] ? clear_bhb_loop+0x40/0x90 [ 267.300561][ T7303] ? clear_bhb_loop+0x40/0x90 [ 267.305257][ T7303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.311171][ T7303] RIP: 0033:0x7f0ff739ce59 [ 267.315601][ T7303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.335221][ T7303] RSP: 002b:00007f0ff827d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 267.343655][ T7303] RAX: ffffffffffffffda RBX: 00007f0ff7616180 RCX: 00007f0ff739ce59 [ 267.351641][ T7303] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000007 [ 267.359643][ T7303] RBP: 00007f0ff827d090 R08: 0000000000000000 R09: 0000000000000000 [ 267.367639][ T7303] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000001 [ 267.375659][ T7303] R13: 00007f0ff7616218 R14: 00007f0ff7616180 R15: 00007fffa9c79448 [ 267.383633][ T7303] [ 267.402125][ T7304] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.414744][ T7293] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.429900][ T7293] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 267.456087][ T7293] BTRFS info (device loop3): using free space tree [ 268.112003][ T7293] BTRFS info (device loop3): enabling ssd optimizations [ 268.149742][ T7293] BTRFS info (device loop3): auto enabling async discard [ 268.201186][ T7315] loop1: detected capacity change from 0 to 8192 [ 268.333047][ T7315] loop1: AHDI p2 p3 [ 268.364077][ T7304] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 268.425464][ T7304] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 268.465530][ T7329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.412'. [ 268.504632][ T7304] Remounting filesystem read-only [ 268.529270][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 268.544674][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.553591][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.575351][ T5774] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 268.611394][ T5774] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 268.656341][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 268.663086][ T5774] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 268.694320][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.703533][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.753985][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.781414][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 268.800391][ T7333] FAULT_INJECTION: forcing a failure. [ 268.800391][ T7333] name failslab, interval 1, probability 0, space 0, times 0 [ 268.824476][ T5774] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 268.832991][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.843355][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.864919][ T7333] CPU: 1 PID: 7333 Comm: syz.1.415 Not tainted syzkaller #0 [ 268.872274][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.882363][ T7333] Call Trace: [ 268.885667][ T7333] [ 268.888616][ T7333] dump_stack_lvl+0x18c/0x250 [ 268.893328][ T7333] ? show_regs_print_info+0x20/0x20 [ 268.898646][ T7333] ? load_image+0x420/0x420 [ 268.903178][ T7333] ? __might_sleep+0xe0/0xe0 [ 268.907796][ T7333] ? __lock_acquire+0x7d40/0x7d40 [ 268.912845][ T7333] should_fail_ex+0x39d/0x4d0 [ 268.917551][ T7333] should_failslab+0x9/0x20 [ 268.922111][ T7333] slab_pre_alloc_hook+0x59/0x310 [ 268.927164][ T7333] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.929664][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.932892][ T7333] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.947466][ T7333] __kmem_cache_alloc_node+0x53/0x250 [ 268.952868][ T7333] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.958625][ T7333] __kmalloc+0xa4/0x230 [ 268.962813][ T7333] tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.968400][ T7333] tomoyo_path_number_perm+0x248/0x620 [ 268.973881][ T7333] ? tomoyo_path_number_perm+0x217/0x620 [ 268.979541][ T7333] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 268.985025][ T7333] ? ksys_write+0x1c4/0x260 [ 268.986752][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 268.989555][ T7333] ? __fget_files+0x28/0x4b0 [ 269.000903][ T7333] ? __fget_files+0x28/0x4b0 [ 269.005531][ T7333] security_file_ioctl+0x70/0xa0 [ 269.010497][ T7333] __se_sys_ioctl+0x48/0x170 [ 269.015121][ T7333] do_syscall_64+0x55/0xb0 [ 269.019561][ T7333] ? clear_bhb_loop+0x40/0x90 [ 269.024265][ T7333] ? clear_bhb_loop+0x40/0x90 [ 269.028959][ T7333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.034891][ T7333] RIP: 0033:0x7f390099ce59 [ 269.039331][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.046952][ T5774] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 269.058938][ T7333] RSP: 002b:00007f39018c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.058962][ T7333] RAX: ffffffffffffffda RBX: 00007f3900c15fa0 RCX: 00007f390099ce59 [ 269.058973][ T7333] RDX: 0000000000000000 RSI: 00000000c0303e03 RDI: 0000000000000004 [ 269.058982][ T7333] RBP: 00007f39018c5090 R08: 0000000000000000 R09: 0000000000000000 [ 269.058992][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.059002][ T7333] R13: 00007f3900c16038 R14: 00007f3900c15fa0 R15: 00007fff0eaafc38 [ 269.059028][ T7333] [ 269.119495][ T5774] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 269.123843][ T7325] loop2: detected capacity change from 0 to 32768 [ 269.129218][ T5774] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 269.143104][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 269.189384][ T7325] diRead: diIAGRead returned -5 [ 269.205827][ T7333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.207524][ T7325] jfs_lookup: iget failed on inum 1048352 [ 269.773284][ T5783] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.155941][ T7358] loop3: detected capacity change from 0 to 1024 [ 271.232378][ T7358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.546483][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.642411][ T7345] loop1: detected capacity change from 0 to 32768 [ 271.756422][ T7345] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 271.756422][ T7345] [ 271.813412][ T7366] FAULT_INJECTION: forcing a failure. [ 271.813412][ T7366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.864816][ T7366] CPU: 1 PID: 7366 Comm: syz.3.426 Not tainted syzkaller #0 [ 271.872157][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.882235][ T7366] Call Trace: [ 271.885535][ T7366] [ 271.888479][ T7366] dump_stack_lvl+0x18c/0x250 [ 271.893224][ T7366] ? show_regs_print_info+0x20/0x20 [ 271.898561][ T7366] ? load_image+0x420/0x420 [ 271.903099][ T7366] ? __lock_acquire+0x7d40/0x7d40 [ 271.908157][ T7366] ? snprintf+0xe9/0x140 [ 271.912432][ T7366] should_fail_ex+0x39d/0x4d0 [ 271.917148][ T7366] _copy_to_user+0x2f/0xa0 [ 271.921586][ T7366] simple_read_from_buffer+0xe7/0x150 [ 271.926991][ T7366] proc_fail_nth_read+0x1e8/0x260 [ 271.932043][ T7366] ? proc_fault_inject_write+0x360/0x360 [ 271.937705][ T7366] ? fsnotify_perm+0x271/0x5e0 [ 271.942490][ T7366] ? proc_fault_inject_write+0x360/0x360 [ 271.948147][ T7366] vfs_read+0x28b/0x970 [ 271.952313][ T7366] ? kernel_read+0x1e0/0x1e0 [ 271.956992][ T7366] ? __fget_files+0x28/0x4b0 [ 271.961583][ T7366] ? __fget_files+0x28/0x4b0 [ 271.966173][ T7366] ? __fget_files+0x43d/0x4b0 [ 271.970853][ T7366] ? __fdget_pos+0x2a3/0x330 [ 271.975442][ T7366] ? ksys_read+0x75/0x260 [ 271.980206][ T7366] ksys_read+0x150/0x260 [ 271.984449][ T7366] ? vfs_write+0x990/0x990 [ 271.988863][ T7366] ? lockdep_hardirqs_on+0x98/0x150 [ 271.994063][ T7366] do_syscall_64+0x55/0xb0 [ 271.998473][ T7366] ? clear_bhb_loop+0x40/0x90 [ 272.003142][ T7366] ? clear_bhb_loop+0x40/0x90 [ 272.007820][ T7366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.013720][ T7366] RIP: 0033:0x7fe28af5d68e [ 272.018134][ T7366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.037777][ T7366] RSP: 002b:00007fe28bee4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.046199][ T7366] RAX: ffffffffffffffda RBX: 00007fe28bee56c0 RCX: 00007fe28af5d68e [ 272.054175][ T7366] RDX: 000000000000000f RSI: 00007fe28bee50a0 RDI: 0000000000000003 [ 272.062151][ T7366] RBP: 00007fe28bee5090 R08: 0000000000000000 R09: 0000000000000000 [ 272.070119][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.078093][ T7366] R13: 00007fe28b216038 R14: 00007fe28b215fa0 R15: 00007ffc23327b78 [ 272.086074][ T7366] [ 272.713267][ T7364] loop2: detected capacity change from 0 to 32768 [ 272.814857][ T7364] diRead: diIAGRead returned -5 [ 272.820023][ T7364] jfs_lookup: iget failed on inum 1048352 [ 272.888515][ T7377] netlink: 'syz.0.428': attribute type 2 has an invalid length. [ 273.174823][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 273.374744][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 273.409812][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.441233][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 273.454468][ T27] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 273.473830][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.510985][ T27] usb 1-1: config 0 descriptor?? [ 275.575289][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.594958][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.616316][ T7377] netlink: 'syz.0.428': attribute type 12 has an invalid length. [ 275.701176][ T7391] FAULT_INJECTION: forcing a failure. [ 275.701176][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 275.740726][ T7391] CPU: 0 PID: 7391 Comm: syz.3.435 Not tainted syzkaller #0 [ 275.748075][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.758149][ T7391] Call Trace: [ 275.761440][ T7391] [ 275.764377][ T7391] dump_stack_lvl+0x18c/0x250 [ 275.769079][ T7391] ? show_regs_print_info+0x20/0x20 [ 275.774294][ T7391] ? load_image+0x420/0x420 [ 275.778812][ T7391] ? __might_sleep+0xe0/0xe0 [ 275.783434][ T7391] ? __lock_acquire+0x7d40/0x7d40 [ 275.788496][ T7391] should_fail_ex+0x39d/0x4d0 [ 275.793218][ T7391] should_failslab+0x9/0x20 [ 275.797759][ T7391] slab_pre_alloc_hook+0x59/0x310 [ 275.802817][ T7391] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 275.808573][ T7391] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 275.814322][ T7391] __kmem_cache_alloc_node+0x53/0x250 [ 275.819728][ T7391] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 275.825471][ T7391] __kmalloc+0xa4/0x230 [ 275.829657][ T7391] tomoyo_realpath_from_path+0xe3/0x5d0 [ 275.835228][ T7391] tomoyo_path_number_perm+0x248/0x620 [ 275.840713][ T7391] ? tomoyo_path_number_perm+0x217/0x620 [ 275.846346][ T7391] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 275.851805][ T7391] ? ksys_write+0x1c4/0x260 [ 275.856366][ T7391] ? __fget_files+0x28/0x4b0 [ 275.860960][ T7391] ? __fget_files+0x28/0x4b0 [ 275.865557][ T7391] security_file_ioctl+0x70/0xa0 [ 275.870523][ T7391] __se_sys_ioctl+0x48/0x170 [ 275.875127][ T7391] do_syscall_64+0x55/0xb0 [ 275.879547][ T7391] ? clear_bhb_loop+0x40/0x90 [ 275.884217][ T7391] ? clear_bhb_loop+0x40/0x90 [ 275.888889][ T7391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.894793][ T7391] RIP: 0033:0x7fe28af9ce59 [ 275.899211][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.918871][ T7391] RSP: 002b:00007fe28bee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.927893][ T7391] RAX: ffffffffffffffda RBX: 00007fe28b215fa0 RCX: 00007fe28af9ce59 [ 275.936038][ T7391] RDX: 0000000000000000 RSI: 000000004020aea5 RDI: 0000000000000004 [ 275.944021][ T7391] RBP: 00007fe28bee5090 R08: 0000000000000000 R09: 0000000000000000 [ 275.952078][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.960045][ T7391] R13: 00007fe28b216038 R14: 00007fe28b215fa0 R15: 00007ffc23327b78 [ 275.968033][ T7391] [ 275.983198][ T7391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.031339][ T27] usb 1-1: USB disconnect, device number 9 [ 276.403718][ T7400] FAULT_INJECTION: forcing a failure. [ 276.403718][ T7400] name failslab, interval 1, probability 0, space 0, times 0 [ 276.552291][ T7403] loop3: detected capacity change from 0 to 2048 [ 276.605919][ T7403] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.780328][ T7400] CPU: 0 PID: 7400 Comm: syz.1.433 Not tainted syzkaller #0 [ 276.787666][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.797735][ T7400] Call Trace: [ 276.801028][ T7400] [ 276.803968][ T7400] dump_stack_lvl+0x18c/0x250 [ 276.808668][ T7400] ? show_regs_print_info+0x20/0x20 [ 276.813885][ T7400] ? load_image+0x420/0x420 [ 276.818403][ T7400] ? __might_sleep+0xe0/0xe0 [ 276.823009][ T7400] ? __lock_acquire+0x7d40/0x7d40 [ 276.828061][ T7400] should_fail_ex+0x39d/0x4d0 [ 276.832763][ T7400] should_failslab+0x9/0x20 [ 276.837282][ T7400] slab_pre_alloc_hook+0x59/0x310 [ 276.842320][ T7400] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 276.848049][ T7400] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 276.853783][ T7400] __kmem_cache_alloc_node+0x53/0x250 [ 276.859178][ T7400] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 276.864905][ T7400] __kmalloc+0xa4/0x230 [ 276.869075][ T7400] tomoyo_realpath_from_path+0xe3/0x5d0 [ 276.874648][ T7400] tomoyo_path_number_perm+0x248/0x620 [ 276.880126][ T7400] ? tomoyo_path_number_perm+0x217/0x620 [ 276.885786][ T7400] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 276.891267][ T7400] ? ksys_write+0x1c4/0x260 [ 276.895829][ T7400] ? __fget_files+0x28/0x4b0 [ 276.900444][ T7400] ? __fget_files+0x28/0x4b0 [ 276.905070][ T7400] security_file_ioctl+0x70/0xa0 [ 276.910033][ T7400] __se_sys_ioctl+0x48/0x170 [ 276.914678][ T7400] do_syscall_64+0x55/0xb0 [ 276.919116][ T7400] ? clear_bhb_loop+0x40/0x90 [ 276.923812][ T7400] ? clear_bhb_loop+0x40/0x90 [ 276.928513][ T7400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.934435][ T7400] RIP: 0033:0x7f390099ce59 [ 276.938869][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.958501][ T7400] RSP: 002b:00007f39018c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.966943][ T7400] RAX: ffffffffffffffda RBX: 00007f3900c15fa0 RCX: 00007f390099ce59 [ 276.974940][ T7400] RDX: 0000200000000000 RSI: 0000000040086602 RDI: 0000000000000004 [ 276.982940][ T7400] RBP: 00007f39018c5090 R08: 0000000000000000 R09: 0000000000000000 [ 276.990926][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.998895][ T7400] R13: 00007f3900c16038 R14: 00007f3900c15fa0 R15: 00007fff0eaafc38 [ 277.006874][ T7400] [ 277.042500][ T7400] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.741960][ T7421] loop1: detected capacity change from 0 to 1024 [ 278.832772][ T7424] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 278.880198][ T7424] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 279.279313][ T7433] FAULT_INJECTION: forcing a failure. [ 279.279313][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 279.297632][ T7430] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 279.308784][ T7433] CPU: 1 PID: 7433 Comm: syz.0.448 Not tainted syzkaller #0 [ 279.316096][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.326254][ T7433] Call Trace: [ 279.329549][ T7433] [ 279.332493][ T7433] dump_stack_lvl+0x18c/0x250 [ 279.334722][ T7430] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 279.337178][ T7433] ? show_regs_print_info+0x20/0x20 [ 279.337209][ T7433] ? load_image+0x420/0x420 [ 279.360942][ T7433] ? __might_sleep+0xe0/0xe0 [ 279.365550][ T7433] ? __lock_acquire+0x7d40/0x7d40 [ 279.370591][ T7433] should_fail_ex+0x39d/0x4d0 [ 279.375294][ T7433] should_failslab+0x9/0x20 [ 279.379816][ T7433] slab_pre_alloc_hook+0x59/0x310 [ 279.384858][ T7433] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 279.390592][ T7433] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 279.396327][ T7433] __kmem_cache_alloc_node+0x53/0x250 [ 279.401720][ T7433] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 279.407457][ T7433] __kmalloc+0xa4/0x230 [ 279.411635][ T7433] tomoyo_realpath_from_path+0xe3/0x5d0 [ 279.417213][ T7433] tomoyo_path_number_perm+0x248/0x620 [ 279.422686][ T7433] ? tomoyo_path_number_perm+0x217/0x620 [ 279.428336][ T7433] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 279.433819][ T7433] ? ksys_write+0x1c4/0x260 [ 279.438371][ T7433] ? __fget_files+0x28/0x4b0 [ 279.442978][ T7433] ? __fget_files+0x28/0x4b0 [ 279.447600][ T7433] security_file_ioctl+0x70/0xa0 [ 279.452558][ T7433] __se_sys_ioctl+0x48/0x170 [ 279.457172][ T7433] do_syscall_64+0x55/0xb0 [ 279.461617][ T7433] ? clear_bhb_loop+0x40/0x90 [ 279.466306][ T7433] ? clear_bhb_loop+0x40/0x90 [ 279.470997][ T7433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.476910][ T7433] RIP: 0033:0x7fe1e219ce59 [ 279.481341][ T7433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.500966][ T7433] RSP: 002b:00007fe1e2f9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.509409][ T7433] RAX: ffffffffffffffda RBX: 00007fe1e2415fa0 RCX: 00007fe1e219ce59 [ 279.517404][ T7433] RDX: 0000000000000000 RSI: 00000000000007ac RDI: 0000000000000003 [ 279.525385][ T7433] RBP: 00007fe1e2f9b090 R08: 0000000000000000 R09: 0000000000000000 [ 279.533373][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.541367][ T7433] R13: 00007fe1e2416038 R14: 00007fe1e2415fa0 R15: 00007fff25046ee8 [ 279.549375][ T7433] [ 279.553984][ T7434] FAULT_INJECTION: forcing a failure. [ 279.553984][ T7434] name failslab, interval 1, probability 0, space 0, times 0 [ 279.566715][ T7434] CPU: 1 PID: 7434 Comm: syz.2.446 Not tainted syzkaller #0 [ 279.574018][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.576651][ T7436] Bluetooth: MGMT ver 1.22 [ 279.584071][ T7434] Call Trace: [ 279.584083][ T7434] [ 279.584090][ T7434] dump_stack_lvl+0x18c/0x250 [ 279.584116][ T7434] ? show_regs_print_info+0x20/0x20 [ 279.584133][ T7434] ? load_image+0x420/0x420 [ 279.584151][ T7434] ? __might_sleep+0xe0/0xe0 [ 279.584177][ T7434] ? __lock_acquire+0x7d40/0x7d40 [ 279.584194][ T7434] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 279.584216][ T7434] should_fail_ex+0x39d/0x4d0 [ 279.584244][ T7434] should_failslab+0x9/0x20 [ 279.584265][ T7434] slab_pre_alloc_hook+0x59/0x310 [ 279.584290][ T7434] kmem_cache_alloc+0x5a/0x2d0 [ 279.584310][ T7434] ? getname_flags+0xbb/0x500 [ 279.584336][ T7434] getname_flags+0xbb/0x500 [ 279.584360][ T7434] __x64_sys_unlinkat+0xae/0xe0 [ 279.584378][ T7434] do_syscall_64+0x55/0xb0 [ 279.584395][ T7434] ? clear_bhb_loop+0x40/0x90 [ 279.584409][ T7434] ? clear_bhb_loop+0x40/0x90 [ 279.584426][ T7434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.584448][ T7434] RIP: 0033:0x7f0ff739ce59 [ 279.584465][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.584480][ T7434] RSP: 002b:00007f0ff829e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 279.584499][ T7434] RAX: ffffffffffffffda RBX: 00007f0ff7616090 RCX: 00007f0ff739ce59 [ 279.584512][ T7434] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 279.584524][ T7434] RBP: 00007f0ff829e090 R08: 0000000000000000 R09: 0000000000000000 [ 279.584535][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.584546][ T7434] R13: 00007f0ff7616128 R14: 00007f0ff7616090 R15: 00007fffa9c79448 [ 279.584573][ T7434] [ 279.629346][ T7433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.033406][ T7438] syz.1.449: attempt to access beyond end of device [ 280.033406][ T7438] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 280.046838][ T7438] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 280.289736][ T7444] netlink: 40 bytes leftover after parsing attributes in process `syz.2.450'. [ 282.128931][ T7456] netlink: 'syz.1.452': attribute type 4 has an invalid length. [ 282.873850][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.452'. [ 283.080401][ T7462] FAULT_INJECTION: forcing a failure. [ 283.080401][ T7462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.133502][ T7462] CPU: 0 PID: 7462 Comm: syz.2.456 Not tainted syzkaller #0 [ 283.140843][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.150964][ T7462] Call Trace: [ 283.154260][ T7462] [ 283.157204][ T7462] dump_stack_lvl+0x18c/0x250 [ 283.161902][ T7462] ? show_regs_print_info+0x20/0x20 [ 283.167127][ T7462] ? load_image+0x420/0x420 [ 283.171653][ T7462] ? __might_fault+0xaa/0x120 [ 283.176349][ T7462] ? __lock_acquire+0x7d40/0x7d40 [ 283.181393][ T7462] should_fail_ex+0x39d/0x4d0 [ 283.186096][ T7462] _copy_from_user+0x2f/0xe0 [ 283.190781][ T7462] ___sys_sendmsg+0x1c7/0x360 [ 283.195458][ T7462] ? get_pid_task+0x20/0x1e0 [ 283.200055][ T7462] ? __sys_sendmsg+0x2a0/0x2a0 [ 283.204830][ T7462] ? __lock_acquire+0x7d40/0x7d40 [ 283.209865][ T7462] __se_sys_sendmsg+0x1c2/0x2b0 [ 283.214715][ T7462] ? __x64_sys_sendmsg+0x80/0x80 [ 283.219659][ T7462] ? lockdep_hardirqs_on+0x98/0x150 [ 283.224857][ T7462] do_syscall_64+0x55/0xb0 [ 283.229266][ T7462] ? clear_bhb_loop+0x40/0x90 [ 283.233937][ T7462] ? clear_bhb_loop+0x40/0x90 [ 283.238630][ T7462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.244537][ T7462] RIP: 0033:0x7f0ff739ce59 [ 283.248974][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.268615][ T7462] RSP: 002b:00007f0ff82bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.277037][ T7462] RAX: ffffffffffffffda RBX: 00007f0ff7615fa0 RCX: 00007f0ff739ce59 [ 283.285008][ T7462] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000004 [ 283.292985][ T7462] RBP: 00007f0ff82bf090 R08: 0000000000000000 R09: 0000000000000000 [ 283.300965][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.308942][ T7462] R13: 00007f0ff7616038 R14: 00007f0ff7615fa0 R15: 00007fffa9c79448 [ 283.316925][ T7462] [ 283.528195][ T7464] loop1: detected capacity change from 0 to 4096 [ 283.779585][ T7464] ntfs3: loop1: ino=5, "/" attr_set_size [ 283.814539][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 283.833153][ T7464] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 285.109963][ T7478] syzkaller0: entered promiscuous mode [ 285.115890][ T7478] syzkaller0: entered allmulticast mode [ 285.232793][ T7478] tipc: Enabled bearer , priority 0 [ 288.027639][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 288.070184][ T7479] tipc: Resetting bearer [ 288.101416][ T7487] loop5: detected capacity change from 0 to 7 [ 288.119904][ T7487] Dev loop5: unable to read RDB block 7 [ 288.125831][ T7487] loop5: unable to read partition table [ 288.132290][ T7487] loop5: partition table beyond EOD, truncated [ 288.138551][ T7487] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.153743][ T7486] binder: 7484:7486 ioctl c0285840 0 returned -22 [ 288.600060][ T7479] tipc: Disabling bearer [ 288.804841][ T5811] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 289.054652][ T5811] usb 3-1: device descriptor read/64, error -71 [ 289.417097][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 289.695215][ T5811] usb 3-1: device descriptor read/64, error -71 [ 289.907588][ T5811] usb usb3-port1: attempt power cycle [ 290.484696][ T5811] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 290.607138][ T5811] usb 3-1: device descriptor read/8, error -71 [ 291.085371][ T5811] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 291.139462][ T7489] loop1: detected capacity change from 0 to 32768 [ 291.194307][ T7489] diRead: diIAGRead returned -5 [ 291.208540][ T7489] jfs_lookup: iget failed on inum 1048352 [ 291.364535][ T5811] usb 3-1: device not accepting address 8, error -71 [ 291.377132][ T5811] usb usb3-port1: unable to enumerate USB device [ 292.862205][ T7491] loop2: detected capacity change from 0 to 32768 [ 292.940888][ T7491] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 292.964726][ T968] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 293.329370][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 293.348203][ T968] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 293.364422][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.372468][ T968] usb 1-1: Product: syz [ 293.416095][ T968] usb 1-1: Manufacturer: syz [ 293.420885][ T968] usb 1-1: SerialNumber: syz [ 293.494168][ T968] usb 1-1: config 0 descriptor?? [ 293.537149][ T968] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 293.906304][ T968] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 293.914902][ T968] visor: probe of 1-1:0.0 failed with error -71 [ 294.005564][ T968] usb 1-1: USB disconnect, device number 10 [ 294.039393][ T5777] VFS: Lookup of '' in ocfs2 loop2 would have caused loop [ 295.336171][ T5777] VFS: Lookup of '' in ocfs2 loop2 would have caused loop [ 295.596115][ T7519] x_tables: duplicate underflow at hook 3 [ 296.055301][ T968] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 296.244525][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 296.336114][ T968] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 296.355889][ T968] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 296.423191][ T7530] FAULT_INJECTION: forcing a failure. [ 296.423191][ T7530] name failslab, interval 1, probability 0, space 0, times 0 [ 296.436189][ T7530] CPU: 1 PID: 7530 Comm: syz.3.474 Not tainted syzkaller #0 [ 296.443489][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.453556][ T7530] Call Trace: [ 296.456844][ T7530] [ 296.459781][ T7530] dump_stack_lvl+0x18c/0x250 [ 296.464476][ T7530] ? show_regs_print_info+0x20/0x20 [ 296.469686][ T7530] ? load_image+0x420/0x420 [ 296.474211][ T7530] ? __might_sleep+0xe0/0xe0 [ 296.478816][ T7530] ? __lock_acquire+0x7d40/0x7d40 [ 296.483855][ T7530] should_fail_ex+0x39d/0x4d0 [ 296.488575][ T7530] should_failslab+0x9/0x20 [ 296.493724][ T7530] slab_pre_alloc_hook+0x59/0x310 [ 296.498776][ T7530] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 296.504806][ T7530] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.510577][ T7530] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.516335][ T7530] __kmem_cache_alloc_node+0x53/0x250 [ 296.521741][ T7530] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.527483][ T7530] __kmalloc+0xa4/0x230 [ 296.531669][ T7530] tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.537245][ T7530] tomoyo_path_number_perm+0x248/0x620 [ 296.542717][ T7530] ? tomoyo_path_number_perm+0x217/0x620 [ 296.548366][ T7530] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 296.553870][ T7530] ? __fget_files+0x28/0x4b0 [ 296.558472][ T7530] ? __fget_files+0x28/0x4b0 [ 296.563089][ T7530] security_file_ioctl+0x70/0xa0 [ 296.568038][ T7530] __se_sys_ioctl+0x48/0x170 [ 296.572647][ T7530] do_syscall_64+0x55/0xb0 [ 296.577077][ T7530] ? clear_bhb_loop+0x40/0x90 [ 296.581761][ T7530] ? clear_bhb_loop+0x40/0x90 [ 296.586446][ T7530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.592366][ T7530] RIP: 0033:0x7fe28af9ce59 [ 296.596788][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.616406][ T7530] RSP: 002b:00007fe28bea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.624829][ T7530] RAX: ffffffffffffffda RBX: 00007fe28b216180 RCX: 00007fe28af9ce59 [ 296.632801][ T7530] RDX: 0000200000000040 RSI: 0000000080047c05 RDI: 0000000000000005 [ 296.640789][ T7530] RBP: 00007fe28bea3090 R08: 0000000000000000 R09: 0000000000000000 [ 296.648771][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.656750][ T7530] R13: 00007fe28b216218 R14: 00007fe28b216180 R15: 00007ffc23327b78 [ 296.664750][ T7530] [ 296.671036][ T7530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.686797][ T968] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 296.730293][ T968] usb 1-1: Product: syz [ 296.750287][ T968] usb 1-1: Manufacturer: syz [ 296.794454][ T968] usb 1-1: SerialNumber: syz [ 296.895302][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.905767][ T7528] FAULT_INJECTION: forcing a failure. [ 296.905767][ T7528] name failslab, interval 1, probability 0, space 0, times 0 [ 296.975053][ T7528] CPU: 0 PID: 7528 Comm: syz.1.477 Not tainted syzkaller #0 [ 296.982489][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.992569][ T7528] Call Trace: [ 296.995882][ T7528] [ 296.998813][ T7528] dump_stack_lvl+0x18c/0x250 [ 297.003508][ T7528] ? show_regs_print_info+0x20/0x20 [ 297.008727][ T7528] ? load_image+0x420/0x420 [ 297.013240][ T7528] ? __might_sleep+0xe0/0xe0 [ 297.017844][ T7528] ? __lock_acquire+0x7d40/0x7d40 [ 297.022883][ T7528] ? trace_contention_end+0x39/0xe0 [ 297.028096][ T7528] should_fail_ex+0x39d/0x4d0 [ 297.032794][ T7528] should_failslab+0x9/0x20 [ 297.037314][ T7528] slab_pre_alloc_hook+0x59/0x310 [ 297.042358][ T7528] ? mutex_unlock+0x10/0x10 [ 297.046870][ T7528] ? kvm_uevent_notify_change+0xc6/0x3a0 [ 297.052525][ T7528] __kmem_cache_alloc_node+0x53/0x250 [ 297.057925][ T7528] ? kvm_uevent_notify_change+0xc6/0x3a0 [ 297.063569][ T7528] kmalloc_trace+0x2a/0xe0 [ 297.067997][ T7528] kvm_uevent_notify_change+0xc6/0x3a0 [ 297.073459][ T7528] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 297.078748][ T7528] kvm_put_kvm+0xa3/0x1670 [ 297.083182][ T7528] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 297.088466][ T7528] kvm_vm_release+0x46/0x50 [ 297.092979][ T7528] __fput+0x234/0x970 [ 297.096989][ T7528] task_work_run+0x1d4/0x260 [ 297.101578][ T7528] ? task_work_cancel+0x220/0x220 [ 297.106611][ T7528] ? exit_to_user_mode_loop+0x3b/0x110 [ 297.112080][ T7528] exit_to_user_mode_loop+0xe6/0x110 [ 297.117370][ T7528] exit_to_user_mode_prepare+0xee/0x180 [ 297.123005][ T7528] syscall_exit_to_user_mode+0x1a/0x50 [ 297.128465][ T7528] do_syscall_64+0x61/0xb0 [ 297.132883][ T7528] ? clear_bhb_loop+0x40/0x90 [ 297.137557][ T7528] ? clear_bhb_loop+0x40/0x90 [ 297.142236][ T7528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.148135][ T7528] RIP: 0033:0x7f390099ce59 [ 297.152545][ T7528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.172144][ T7528] RSP: 002b:00007f39018c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 297.180564][ T7528] RAX: 0000000000000000 RBX: 00007f3900c15fa0 RCX: 00007f390099ce59 [ 297.188525][ T7528] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 297.196496][ T7528] RBP: 00007f39018c5090 R08: 0000000000000000 R09: 0000000000000000 [ 297.204466][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.212446][ T7528] R13: 00007f3900c16038 R14: 00007f3900c15fa0 R15: 00007fff0eaafc38 [ 297.220444][ T7528] [ 297.233584][ T968] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 297.304592][ T968] visor: probe of 1-1:1.0 failed with error -110 [ 297.308228][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 297.343298][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.379901][ T7508] ocfs2: Unmounting device (7,2) on (node local) [ 297.407061][ T7508] VFS: Busy inodes after unmount of loop2 (ocfs2) [ 297.407178][ T7508] ------------[ cut here ]------------ [ 297.419500][ T7508] kernel BUG at fs/super.c:697! [ 297.429683][ T7508] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 297.435781][ T7508] CPU: 0 PID: 7508 Comm: syz.2.467 Not tainted syzkaller #0 [ 297.443077][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.453145][ T7508] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 297.459322][ T7508] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4c 59 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 e0 b1 d7 8a 48 89 de e8 23 ba 8d 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 297.479034][ T7508] RSP: 0018:ffffc9000fa9f940 EFLAGS: 00010246 [ 297.485122][ T7508] RAX: 000000000000002f RBX: ffff88807819e660 RCX: 7d82ff299ffa9b00 [ 297.493097][ T7508] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 297.501060][ T7508] RBP: 1ffff1100f033cf2 R08: ffffc9000fa9f647 R09: 1ffff92001f53ec8 [ 297.509050][ T7508] R10: dffffc0000000000 R11: fffff52001f53ec9 R12: 0000000000000000 [ 297.517012][ T7508] R13: dffffc0000000000 R14: ffffffff8d6363c0 R15: ffff88807819e790 [ 297.524977][ T7508] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 297.533908][ T7508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.540512][ T7508] CR2: 0000001b2dd20ff8 CR3: 000000002138d000 CR4: 00000000003526f0 [ 297.548478][ T7508] Call Trace: [ 297.551745][ T7508] [ 297.554663][ T7508] kill_block_super+0x44/0x90 [ 297.559328][ T7508] deactivate_locked_super+0x97/0x100 [ 297.564695][ T7508] cleanup_mnt+0x43b/0x4d0 [ 297.569127][ T7508] task_work_run+0x1d4/0x260 [ 297.573719][ T7508] ? task_work_cancel+0x220/0x220 [ 297.578761][ T7508] ? do_exit+0x955/0x2460 [ 297.583168][ T7508] ? kmem_cache_free+0xf8/0x270 [ 297.588015][ T7508] do_exit+0x95a/0x2460 [ 297.592198][ T7508] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 297.597315][ T7508] ? put_task_struct+0xc0/0xc0 [ 297.602076][ T7508] ? asm_sysvec_call_function_single+0x1a/0x20 [ 297.608226][ T7508] do_group_exit+0x21b/0x2d0 [ 297.612815][ T7508] get_signal+0x12fc/0x13f0 [ 297.617310][ T7508] arch_do_signal_or_restart+0xc2/0x800 [ 297.622847][ T7508] ? get_sigframe_size+0x20/0x20 [ 297.627779][ T7508] ? asm_sysvec_call_function_single+0x1a/0x20 [ 297.633927][ T7508] ? lockdep_hardirqs_on+0x98/0x150 [ 297.639122][ T7508] exit_to_user_mode_loop+0x70/0x110 [ 297.644404][ T7508] exit_to_user_mode_prepare+0xee/0x180 [ 297.649961][ T7508] irqentry_exit_to_user_mode+0x9/0x30 [ 297.655453][ T7508] exc_page_fault+0x8c/0x100 [ 297.660037][ T7508] asm_exc_page_fault+0x26/0x30 [ 297.664888][ T7508] RIP: 0033:0x7f0ff739ce61 [ 297.669321][ T7508] Code: Unable to access opcode bytes at 0x7f0ff739ce37. [ 297.676324][ T7508] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 297.682376][ T7508] RAX: 0000000000000000 RBX: 00007f0ff7616090 RCX: 00007f0ff739ce59 [ 297.690338][ T7508] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 297.698303][ T7508] RBP: 00007f0ff7432d6f R08: 0000000000000000 R09: 0000000000000000 [ 297.706271][ T7508] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.714255][ T7508] R13: 00007f0ff7616128 R14: 00007f0ff7616090 R15: 00007fffa9c79448 [ 297.722226][ T7508] [ 297.725241][ T7508] Modules linked in: [ 297.739249][ T7508] ---[ end trace 0000000000000000 ]--- [ 297.745042][ T7508] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 297.751287][ T7508] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4c 59 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 e0 b1 d7 8a 48 89 de e8 23 ba 8d 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 297.773946][ T7508] RSP: 0018:ffffc9000fa9f940 EFLAGS: 00010246 [ 297.780078][ T7508] RAX: 000000000000002f RBX: ffff88807819e660 RCX: 7d82ff299ffa9b00 [ 297.781462][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.788254][ T7508] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 297.813517][ T7508] RBP: 1ffff1100f033cf2 R08: ffffc9000fa9f647 R09: 1ffff92001f53ec8 [ 297.824403][ T7508] R10: dffffc0000000000 R11: fffff52001f53ec9 R12: 0000000000000000 [ 297.832501][ T7508] R13: dffffc0000000000 R14: ffffffff8d6363c0 R15: ffff88807819e790 [ 297.846768][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.857267][ T7508] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 297.866751][ T7508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.873474][ T7508] CR2: 00007fe28b1ea9b8 CR3: 000000002baac000 CR4: 00000000003506f0 [ 297.881954][ T7508] Kernel panic - not syncing: Fatal exception [ 297.888294][ T7508] Kernel Offset: disabled [ 297.892614][ T7508] Rebooting in 86400 seconds..