last executing test programs: 6.598594178s ago: executing program 3 (id=413): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) unshare(0x40600) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0xf7a3a501da2a069f, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000020000000000000102000000100000010800000001000084090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) syz_mount_image$xfs(&(0x7f0000000080), &(0x7f0000000440)='./bus\x00', 0x200800, &(0x7f0000000140), 0x4, 0x964d, &(0x7f0000009640)="$eJzs+gm8pnPh+P/fZxi7jKGSUlMRLbJmiWpmMEMhWaIdWSJLSYU2LVKoiGjPvmUrSyhbK8neQgmhkiXSYhvm/zgzZxjjxae+ff4/n3q9Xo/HOfd9X/d1Xed9v5/Xcg6z2aSNJg4Gcw2mN24wa+ddO3nKmKvXv+OoLRc8drlT7zng0SsuPn7kccLI48TBYDBq5O2h6cvGDk47fdRg9mnLH2neuecZmn8wWH7k5ch+BitPf5j/ihnrTZ2lWQc69Mi3faZ/TWuB4R8x/OTwA/Y6YjAYjJlp+6HBYGjPx3xQaZtNmDzpEauH3YatRo88n/lrjulf8188GMx/5oCPj5nXHXoSPtLwz9zzReeOXv9J+Nn/cW02YfI6s/gPn4uzjSxbefgcn/UcNDbrcX7bEpuvOjKF0463wWD4Eveoc+U/os0mTFp38PjX+cFRq124z9Tp1805B9NvFHMPBoN5Rq6v8z3ZLvXvNWHiCtPu2TNej7DPOJb3pOPihLee/NDwTXowGCw0GIxde8a9oKqqqv4zmjBxhTXg/j/XE93/Tzll0TO7/1dVVf3nts6EiSsM3+tnuf/P90T3/10Wvehj0//b//iVp2/10JP7IaqqqupfatI6eP8f80T3/5XXuGzd7v9VVVX/uW243rT7/3yz3P8XfqL7/5tOXm2xkfVm/N7w4Ey7HJrp/yc8MNPy2WZafv9My0fPtJ+Z159jpuX3zrR8zuH3YP1xg8HYGf9ecMoji8eOG35vZPl9My0f/8i/01l8zZmWT5hp+aSZlk8cGevw8skzLZ880/prP8FUV1VV/Z9pwxUmrTGY6d/ZjyxeZMb7dP+/4Kzrln6yxltVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX/mT10x9nnDgaDocFgMGowmDIYeT7z42Dq1KlTh1+fcv7llz9pA/2/0dB5106eMubq9e84assFj13u1HsOeGSW/mP7z/8E9e807D/X8eMGg502ebKHUk9Cnf/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7qE7zj535BgYNRhMGYw833PG41n7v/HNI6uuuumpdx38yJaLj99u5Nl5106est2TMPYnoaHhzzrm6vXvOGrLBY9d7tR7DvgvOHv+8z9B/TtN899uaDAYOb/HDJ/L60/YcOOlBoPBwXeduulKg4ffW2X4vdXGzjaYbdqmS037vtbivOM9157+OH7428IP7+OUaftfZ+phsw3NMoiZesV5Nx71js3uWXHWxyUf/3OMmvHkiOvPuHvq1KlTH7VwpLkeZ+MZ+5/xWWY9z0fGvtTw2JfZdcd3LfOe3fdYersdt9h262233mm5FVZZcaXll1tp1Zcts812O2y97PTvjzNn46Z9X+OfmbP5Zp2zOybMPGezfrbHm7NxTzxn0/Y4ZY+hjWfM2ez/4pyt8cRzNm67kR+0+PjRg82nTc3QYLD4mqMHuw2/WG7OwWDxtUbWXWR43dXHjhoM9n/kgw4/m/PhY3Boz+F1Npu00cRHRvbYT/iY6/SjVlx8/MjjhJHHidOHOG7wyKE4dnDa6aOG5+JR0zzv3PMMzT8YLD/ycmQ/g1VH3j10xnpTZ2nWgQ498m2f6V/TWmB4J8NPtl/27GuGz8VZtv//R/9P1//HeK0y9PBEDY18jawz3WvC5HUe+VnTpmF47mYbWbbysMmsc/a/2WPGO272wZgnGO+kdSauMLx4lvmfsQkeX3cuceEHph9b41eevtVD/88oNN75nmC860zA8c73ROM9/oOXnj59V/9r453lWrfutO/j/5lr3eCJr3Wz0Q62vmSxWa91r3n8IT7qPJ4xR3POstLjXet2O2T5PYf3P/6Jr3XrDo999KOudaMGg8XXmHGtG77wTRo92H/4xfLDLyaPHhw7/GKFaS/mHpw//OKlb995h62GF6w9Y06WHd7v+LFD09wvXPnWJaceOHXqmiNjGT/20WMdOT7GzXw/nzB2+mTO2HbGfodXnbHfW54+/b1JI/ud8C/sd8a2NN67Fpj+3uSR/U6cZb+jn2C/M7Z9zPmw1NDDF67Hud5MmuV6M/I3zowf96ivOaZ/zX/xYDD/meQ7y7r/4zWTzt+5nmC8EyausMbw+GY5fx8+HOn8vXTy1cP3ivkHg8FCg8HYtWeM/V9s6PHGO/sTj3cijHf2JxrvlcftuN7/wngHM433UcfZZhtOP1bWHjnOJv8Lx++MbWe9jo2e9u70y/7a/8x1bNxjrmMfnW3ULJM9U4/3O9tWsP7054s88nvutScdM2PuR8+y3//pd7aZPssQXMfGzPL3/Ki1bxgM0Zzvefzqlw0d9MRzPnrw6L8tZsz5jG2faM4n/zNz/qwnnvN/9vfkpZ4//f3Rs4x/5jnfYL9n7jtjzueYZb//05xPfuJ7x2PnfPxgNM35svdPn7cnup4+3pzP2HbGnA9/xNXGzj5Ya/ieNTLnk/6ZOV/kf+c4nwfWn/5864cXnXPUqa+fMeezzvH/NOeT/tU5H/fwcb74tPeeN2owxxyD3bbYddddlpv+fcbL5ad/52vRvddOn+cnupc+ntGMbZ/ovFjznzEa808ZDf1PRovO/nhGj5xaR+68y9P+X69Fa/6rRgO+Fl19zPR5e6Lfix5vzmdsS/fBhWfafta/Qzdcb9rv3fPNch+csQneB885a929Z+xyZLMHZxnmjPvqAzMtn22m5ffPtHz0TPuZef05Zlp+70zLhz/CHDOtP4N13PDfvCPLpzyy+tjhX57GjSy/b6bl4x/ZdvE1Z1o+Yablk2ZaPvGRQ2PxyTMtnzzT+msP/sVm/Dfp7Wa9yNc/W//9113+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ39xj/uZ+ccdSTU+e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX99AdZ587cgyMGgymDKY/Hxp5HOw5tMHtrxp+HAwGo1c+ceoGT/Z4n+SGzrt28pQxV69/x1FbLnjscqfec8B/wdnzn/8J6t9pmv92Q4PByPk9ZrvBYLD+hA03XmowGGww9cSVRw0efm+R4fdWHztqMNh/6FE7mPPhdYb2HF5ns0kbTRwM5hpZY9xjfuhjzqNHrbj4+JHHCSOPE6dfn8YNHjlexw5OO33UYPZpyx9p3rnnGZp/MFh+5OXIfgYrT3+Y/4oZ602dpVkHOvTIt32mf01rgeEfMfxkt20nP3t4rmbZ/v9MM67V2436H1ft/HeXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7+9f8O1r+20rUXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+6hO84+d+QYGDUYTBlMfz6058jjYOjk0144coiM3v2qow97ssf7JDd03rWTp4y5ev07jtpywWOXO/WeA/4Lzp7//E9Q/07T/LcbGgxGzu8x2w0Gg/UnbLjxUoPB4LCjr9p91ODh9xYZfm/1saMGg/2HHrWDOR9eZ2jP4XU2m7TRxMFgrpE1xj3mhz7mPHrUiouPH3mcMPI4cfr1adzgkeN17OC000cNZp+2/JHmnXueofkHg+VHXo7sZ7Dy9If5r5ix3tRZmnWgQ49822f617QWGP4Rw0/2mu/ak4fnapbt/88041q93aj/cdXOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf30B1nnztyDIwaDKYMpj8fNfI4tOfNN3144+HH4dcLrr33tU/2eJ/khs67dvKUMVevf8dRWy547HKn3nPAf8HZ85//Cerfadh/ruPHDQY7bfJkD6WehDr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xDd5x97sjTUY8sHbVnxwU2dN61k6eMuXr9O47acsFjlzv1ngOe7AH9uz2O/0fzxyz+H8sfs/h/PH/M4v+J/DGL/175Yxb/T+aPWfz3zh+z+H8qf8zi/+n8MYv/PvljFv9988cs/vvlj1n8P5M/ZvH/bP6Yxf9z+WMW//3zxyz+B+SPWfw/nz9m8T8wf8zif1D+mMX/C/ljFv+D88cs/ofkj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/zfwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/1b+mMX/2/ljFv9T88cs/qflj1n8T88fs/ifkT9m8f9O/pjF/8z8MYv/WfljFv+z88cs/t/NH7P4fy9/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/wvwxi/9F+WMW/5/mj1n8L84fs/j/LH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8b86f8zif03+mMX/1/ljFv/f5I9Z/K/NH7P4/zZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/3+WPWfxvzB+z+N+UP2bxvzl/zOL/+/wxi/8f8scs/n/MH7P435I/ZvH/U/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/P+cP2bxvzN/zOJ/V/6Yxf8v+WMW/7vzxyz+f80fs/j/LX/M4v/3/DGL/z/yxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6YxX9K/pjF/8H8MYv/Q0/WeP6PZ/Gf2vmPSfxnG+SPWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/g/JX/M4r9A/pjFf0z+mMV/wfwxi//Y/DGL/0L5Yxb/hfPHLP5PzR+z+D8tf8zi//T8MYv/IvljFv9n5I9Z/BfNH7P4PzN/zOL/rPwxi/9i+WMW/2fnj1n8n/N4/kN7/n80sP+bWfzHdf5jFv/n5o9Z/J+X/2OafeTR4P/8/DHL+b94/pjFf4n8MYv/C/LHLP5L5o9Z/JfKH7P4vzB/zOL/ovwxi/+L88cs/i/JH7P4L50/ZvF/af6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvF/Wf6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/F+eP2bxXy1/zOK/ev6Yxf8V+WMW/1fmj1n8X5U/ZvEfnz9m8Z+QP2bxn5g/ZvFfI3/M4r9m/pjFf638MYv/pPwxi/9klf9s//SaFv+1Vf7/fBb/dfLHLP6vzh+z+L8mf8ziv27+mMV/vfwxi//6+WMW/9fmj1n8N8gfs/i/Ln/M4r9h/pjFf6P8MYv/xvljFv9N8scs/q/PH7P4b5o/ZvHfLH/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+b8sfs/hvnj9m8d8if8ziv2X+mMX/7fljFv+t8scs/lvnj1n8t8kfs/hvmz9m8X9H/pjFf7v8MYv/9vljFv935o9Z/HfIH7P475g/ZvHfKX/M4r9z/pjF/135Yxb/d+ePWfx3yR+z+L8nf8ziv2v+mMX/vfljFv/35Y9Z/N+fP2bx3y1/zOK/e/6YxX+P/DGL/wfyxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+e+aPWfw/mj9m8f9Y/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPPsgfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvF/Sv6YxX+B/DGL/5j8MYv/gvljFv+x+WMW/4Xyxyz+C+ePWfyfmj9m8X9a/pjF/+n5Yxb/RfLHLP7PyB+z+C+aP2bxf2b+mMX/WfljFv/F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvnj9m8V8if8zi/4L8MYv/kvljFv+l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvnj1n8X5o/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5Y/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X549Z/FfLH7P4r54/ZvF/Rf6Yxf+V+WMW/1flj1n8x+ePWfwn5I9Z/Cfmj1n818gfs/ivmT9m8V8rf8ziPyl/zOI/OX/M4r92/pjFf538MYv/q/PHLP6vyR+z+K+bP2bxXy9/zOK/fv6Yxf+1+WMW/w3yxyz+rxtcnj9k8d+w8x+z+G+UP/bf5/+I8sz+G+eP/ff58/m/Sf6Yxf/1+WMW/03zxyz+m+WPWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/zfPHLP5b5I9Z/LfMH7P4vz1/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7vyB+z+G+XP2bx3z5/zOL/zvwxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+L8rf8zi/+78MYv/LvljFv/35I9Z/HfNH7P4vzd/zOL/vvwxi//788cs/rvlj1n8d88fs/jvkT9m8f9A/pjF/4P5Yxb/D+WPWfw/nD9m8f9I/pjFf8/8MYv/R/PHLP4fyx+z+H88f8zi/4n8MYv/XvljFv9P5o9Z/PfOH7P4fyp/zOL/6fwxi/8++WMW/33zxyz+++WPWfw/kz9m8f9s/pjF/3P5Yxb//fPHLP4H5I9Z/D+fP2bxPzB/zOJ/UP6Yxf8L+WMW/4Pzxyz+h+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4v/N/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/Vv6Yxf/b+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bx/07+mMX/zPwxi/9Z+WMW/7Pzxyz+380fs/h/L3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf/C/DGL/0X5Yxb/n+aPWfwvzh+z+P8sf8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bxvzp/zOJ/Tf6Yxf/X+WMW/9/kj1n8r80fs/j/Nn/M4n9d/pjF//r8MYv/DfljFv/f5Y9Z/G/MH7P435Q/ZvG/OX/M4v/7/DGL/x/yxyz+f8wfs/jfkj9m8f9T/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8/5w/ZvG/M3/M4n9X/pjF/y/5Yxb/u/PHLP5/zR+z+P8tf8zi//f8MYv/P/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjFf0r+mMX/wfwxi/9D+WMW/6n5YxL/0YP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/ef6YxX+1/DGL/+r5Yxb/V+SPWfxfmT9m8X9V/pjFf3z+mMV/Qv6YxX9i/pjFf438MYv/mvljFv+18scs/pPyxyz+k/PHLP5r549Z/NfJH7P4vzp/zOL/mvwxi/+6+WMW//Xyxyz+6+ePWfxfmz9m8d8gf8zi/7r8MYv/hvljFv+N8scs/hvnj1n8N8kfs/i/Pn/M4r9p/pjFf7P8MYv/G/LHLP5vzB+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8ziv3n+mMV/i/wxi/+W+WMW/7fnj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/HfljFv/t8scs/tvnj1n835k/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv935Y9Z/N+dP2bx3yV/zOL/nvwxi/+u+WMW//fmj1n835c/ZvF/f/6YxX+3/DGL/+75Yxb/PfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+O+ZP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx3yt/zOL/yfwxi//e+WMW/0/lj1n8P50/ZvHfJ39smv/owWDwX+6/b/6Y5fzfL3/M4v+Z/DGL/2fzxyz+n9P4z/4vrW3x31/j/69l8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPMcgfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvF/Sv6YxX+B/DGL/5j8MYv/gvljFv+x+WMW/4Xyxyz+C+ePWfyfmj9m8X9a/pjF/+n5Yxb/RfLHLP7PyB+z+C+aP2bxf2b+mMX/WfljFv/F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvnj9m8V8if8zi/4L8MYv/kvljFv+l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvnj1n8X5o/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5Y/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X549Z/FfLH7P4r54/ZvF/Rf6Yxf+V+WMW/1flj1n8x+ePWfwn5I9Z/Cfmj1n818gfs/ivmT9m8V8rf8ziPyl/zOI/OX/M4r92/pjFf538MYv/q/PHLP6vyR+z+K+bP2bxXy9/zOK/fv6Yxf+1+WMW/w3Af9T/l+P6P5rF/3Wd/5jFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/478MYv/dvljFv/t88cs/u/MH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/u/LHLP7vzh+z+O+SP2bxf0/+mMV/1/wxi/9788cs/u/LH7P4vz9/zOK/W/6YxX/3/DGL/x75Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfz3zB+z+H80f8zi/7H8MYv/x/PHLP6fyB+z+O+VP2bx/2T+mMV/7/wxi/+n8scs/p/OH7P475M/ZvHfN3/M4r9f/pjF/zP5Yxb/z+aPWfw/lz9m8d8/f8zif0D+mMX/8/ljFv8D88cs/gflj1n8v5A/ZvE/OH/M4n9I/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+38wfs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/2/lj1n8v50/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv/v5I9Z/M/MH7P4n5U/ZvE/O3/M4v/d/DGL//fyxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8L8wfs/hflD9m8f9p/pjF/+L8MYv/z/LHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv+r88cs/tfkj1n8f50/ZvH/Tf6Yxf/a/DGL/2/zxyz+1+WPWfyvzx+z+N+QP2bx/13+mMX/xvwxi/9N+WMW/5vzxyz+v88fs/j/IX/M4v/H/DGL/y35Yxb/P+WPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/P+WMW/zvzxyz+d+WPWfz/kj9m8b87f8zi/9f8MYv/3/LHLP5/zx+z+P8jf8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfyn5I9Z/B/MH7P4P5Q/ZvGfmj8m8Z9zkD9m8R/KH7P4j8ofs/jPlj9m8Z89f8ziPzp/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4v+U/DGL/wL5Yxb/MfljFv8F88cs/mPzxyz+C+WPWfwXzh+z+D81f8zi/7T8MYv/0/PHLP6L5I9Z/J+RP2bxXzR/zOL/zPwxi/+z8scs/ovlj1n8n50/ZvF/Tv6YxX9c/pjF/7n5Yxb/5+WPWfyfnz9m8V88f8ziv0T+mMX/BfljFv8l88cs/kvlj1n8X5g/ZvF/Uf6Yxf/F+WMW/5fkj1n8l84fs/i/NH/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/i/LH/M4r9S/pjFf+X8MYv/KvljFv9V88cs/i/PH7P4r5Y/ZvFfPX/M4v+K/DGL/yvzxyz+r8ofs/iPzx+z+E/IH7P4T8wfs/ivkT9m8V8zf8ziv1b+mMV/Uv6YxX9y/pjFf+38MYv/OvljFv9X549Z/F+TP2bxXzd/zOK/Xv6YxX/9/DGL/2vzxyz+G+SPWfxflz9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/9fnj1n8N80fs/hvlj9m8X9D/pjF/435Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfw3zx+z+G+RP2bx3zJ/zOL/9vwxi/9W+WMW/63zxyz+2+SPWfy3zR+z+L8jf8ziv13+mMV/+/wxi/8788cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/678MYv/u/PHLP675I9Z/N+TP2bx3zV/zOL/3vwxi//78scs/u/PH7P475Y/ZvHfPX/M4r9H/pjF/wP5Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/PfPHLP4fzR+z+H8sf8zi//H8MYv/J/LHLP575Y9Z/D+ZP2bx3zt/zOL/qfwxi/+n88cs/vvkj1n8980fs/jvlz9m8f9M/pjF/7P5Yxb/z+WPWfz3zx+z+B+QP2bx/3z+mMX/wPwxi/9B+WMW/y/kj1n8D84fs/gfkj9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/zfzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf9b+WMW/2/nj1n8T80fs/iflj9m8T89f8zif0b+mMX/O/ljFv8z88cs/mflj1n8z84fs/h/N3/M4v+9/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/wvzxyz+F+WPWfx/mj9m8b84f8zi/7P8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/6vwxi/81+WMW/1/nj1n8f5M/ZvG/Nn/M4v/b/DGL/3X5Yxb/6/PHLP435I9Z/H+XP2bxvzF/zOJ/U/6Yxf/m/DGL/+/zxyz+f8gfs/j/MX/M4n9L/pjF/0/5Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvH/c/6Yxf/O/DGL/135Yxb/v+SPWfzvzh+z+P81f8zi/7f8MYv/3/PHLP7/yB+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/KfljFv8H88cs/g/lj1n8p+aPSfznGuSPWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/g/JX/M4r9A/pjFf0z+mMV/wfwxi//Y/DGL/0L5Yxb/hfPHLP5PzR+z+D8tf8zi//T8MYv/IvljFv9n5I9Z/BfNH7P4PzN/zOL/rPwxi/9i+WMW/2fnj1n8n5M/ZvEflz9m8X9u/pjF/3n5Yxb/5+ePWfwXzx+z+C+RP2bxf0H+mMV/yfwxi/9S+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/6Xzxyz+L80fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+L8sfs/ivlD9m8V85f8ziv0r+mMV/1fwxi//L88cs/qvlj1n8V88fs/i/In/M4v/K/DGL/6vyxyz+4/PHLP4T8scs/hPzxyz+a+SPWfzXzB+z+K+VP2bxn5Q/ZvGfnD9m8V87f8ziv07+mMX/1fljFv/X5I9Z/NfNH7P4r5c/ZvFfP3/M4v/a/DGL/wb5Yxb/1+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf/1+WMW/03zxyz+m+WPWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/zfPHLP5b5I9Z/LfMH7P4vz1/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7vyB+z+G+XP2bx3z5/zOL/zvwxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+L8rf8zi/+78MYv/LvljFv/35I9Z/HfNH7P4vzd/zOL/vvwxi//788cs/rvlj1n8d88fs/jvkT9m8f9A/pjF/4P5Yxb/D+WPWfw/nD9m8f9I/pjFf8/8MYv/R/PHLP4fyx+z+H88f8zi/4n8MYv/XvljFv9P5o9Z/PfOH7P4fyp/zOL/6fwxi/8++WMW/33zxyz+++WPWfw/kz9m8f9s/pjF/3P5Yxb//fPHLP4H5I9Z/D+fP2bxPzB/zOJ/UP6Yxf8L+WMW/4Pzxyz+h+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4v/N/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/Vv6Yxf/b+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bx/07+mMX/zPwxi/9Z+WMW/7Pzxyz+380fs/h/L3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf/C/DGL/0X5Yxb/n+aPWfwvzh+z+P8sf8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bxvzp/zOJ/Tf6Yxf/X+WMW/9/kj1n8r80fs/j/Nn/M4n9d/pjF//r8MYv/DfljFv/f5Y9Z/G/MH7P435Q/ZvG/OX/M4v/7/DGL/x/yxyz+f8wfs/jfkj9m8f9T/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8/5w/ZvG/M3/M4n9X/pjF/y/5Yxb/u/PHLP5/zR+z+P8tf8zi//f8MYv/P/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjFf0r+mMX/wfwxi/9D+WMW/6n5YxL/uQf5Yxb/ofwxi/+o/DGL/2z5Yxb/2fPHLP6j88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+T8kfs/gvkD9m8R+TP2bxXzB/zOI/Nn/M4r9Q/pjFf+H8MYv/U/PHLP5Pyx+z+D89f8ziv0j+mMX/GfljFv9F88cs/s/MH7P4Pyt/zOK/WP6Yxf/Z+WMW/+fkj1n8x+WPWfyfmz9m8X9e/pjF//n5Yxb/xfPHLP5L5I9Z/F+QP2bxXzJ/zOK/VP6Yxf+F+WMW/xflj1n8X5w/ZvF/Sf6YxX/p/DGL/0vzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/8vyxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOL/8vwxi/9q+WMW/9Xzxyz+r8gfs/i/Mn/M4v+q/DGL//j8MYv/hPwxi//E/DGL/xr5Yxb/NfPHLP5r5Y9Z/Cflj1n8J+ePWfzXzh+z+K+TP2bxf3X+mMX/NfljFv9188cs/uvlj1n8188fs/i/Nn/M4r9B/pjF/3X5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvF/ff6YxX/T/DGL/2b5Yxb/N+SPWfzfmD9m8X9T/pjF/835Yxb/t+SPWfzfmj9m8X9b/pjFf/P8MYv/FvljFv8t88cs/m/PH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/O/LHLP7b5Y9Z/LfPH7P4vzN/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP7vyh+z+L87f8ziv0v+mMX/PfljFv9d88cs/u/NH7P4vy9/zOL//vwxi/9u+WMW/93zxyz+e+SPWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8d8zf8zi/9H8MYv/x/LHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fe7T/6Cd7OP9+j+N/Xf6Y5fy/Pn/M4n9D/pjF/3f5Yxb/G/PHLP435Y9Z/G/OH7P4/z5/zOL/h/wxi/8f88cs/rfkj1n8/5Q/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8/549Z/O/MH7P435U/ZvH/S/6Yxf/u/DGL/1/zxyz+f8sfs/j/PX/M4v+P/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvGfkj9m8X8wf8zi/1D+mMV/av6YxH+eQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz/23+8/18Nv5f/Y/vv9pzXPfPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+Q8Ggx22n3WJxX/x/DGL/xL5Yxb/F+SPWfyXzB+z+C+VP2bxf2H+mMX/RfljFv8X549Z/F+SP2bxXzp/zOL/0vwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOL/svwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+L88f8ziv1r+mMV/9fwxi/8r8scs/q/MH7P4vyp/zOI/Pn/M4j8hf8ziPzF/zOK/Rv6YxX/N/DGL/1r5Yxb/SfljFv/J+WMW/7Xzxyz+6+SPWfxfnT9m8X9N/pjFf938MYv/evljFv/188cs/q/NH7P4b5A/ZvF/Xf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/F+fP2bx3zR/zOK/Wf6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvHfPH/M4r9F/pjFf8v8MYv/2/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v+O/DGL/3b5Yxb/7fPHLP7vzB+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/7vyxyz+784fs/jvkj9m8X9P/pjFf9f8MYv/e/PHLP7vyx+z+L8/f8ziv1v+mMV/9/wxi/8e+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n898wfs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/jvlT9m8f9k/pjFf+/8MYv/p/LHLP6fzh+z+O+TP2bx3zd/zOK/X/6Yxf8z+WMW/8/mj1n8P5c/ZvHfP3/M4n9A/pjF//P5Yxb/A/PHLP4H5Y9Z/L+QP2bxPzh/zOJ/SP6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvH/Rv6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/t/MH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9v5Y9Z/L+dP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+SPWfzPzB+z+J+VP2bxPzt/zOL/3fwxi//38scs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/+/ljFv8f5I9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/C/MH7P4X5Q/ZvH/af6Yxf/i/DGL/8/yxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/q/PHLP7X5I9Z/H+dP2bx/03+mMX/2vwxi/9v88cs/tflj1n8r88fs/jfkD9m8f9d/pjF/8b8MYv/TfljFv+b88cs/r/PH7P4/yF/zOL/x/wxi/8t+WMW/z/lj1n8b80fs/jflj9m8b89f8zif0f+mMX/z/ljFv8788cs/nflj1n8/5I/ZvG/O3/M4v/X/DGL/9/yxyz+f88fs/j/I3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8p+SPWfwfzB+z+D+UP2bxn5o/JvGfd5A/ZvEfyh+z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/q/KH7P4j88fs/hPyB+z+E/MH7P4r5E/ZvFfM3/M4r9W/pjFf1L+mMV/cv6YxX/t/DGL/zr5Yxb/V+ePWfxfkz9m8V83f8ziv17+mMV//fwxi/9r88cs/hvkj1n8X5c/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv/X549Z/DfNH7P4b5Y/ZvF/Q/6Yxf+N+WMW/zflj1n835w/ZvF/S/6Yxf+t+WMW/7flj1n8N88fs/hvkT9m8d8yf8zi//b8MYv/VvljFv+t88cs/tvkj1n8t80fs/i/I3/M4r9d/pjFf/v8MYv/O/PHLP475I9Z/HfMH7P475Q/ZvHfOX/M4v+u/DGL/7vzxyz+u+SPWfzfkz9m8d81f8zi/978MYv/+/LHLP7vzx+z+O+WP2bx3z1/zOK/R/6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/z3zxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+e+WPWfw/mT9m8d87f8zi/6n8MYv/p/PHLP775I9Z/PfNH7P475c/ZvH/TP6Yxf+z+WMW/8/lj1n8988fs/gfkD9m8f98/pjF/8D8MYv/QfljFv8v5I9Z/A/OH7P4H5I/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8v5E/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8388cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/W/ljFv9v549Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/zv5Yxb/M/PHLP5n5Y9Z/M/OH7P4fzd/zOL/vfwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv8L88cs/hflj1n8f5o/ZvG/OH/M4v+z/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+f5Yxb/X+SPWfx/mT9m8f9V/pjF/+r8MYv/NfljFv9f549Z/H+TP2bxvzZ/zOL/2/wxi/91+WMW/+vzxyz+N+SPWfx/lz9m8b8xf8zif1P+mMX/5vwxi//v88cs/n/IH7P4/zF/zOJ/S/6Yxf9P+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bx/3P+mMX/zvwxi/9d+WMW/7/kj1n8784fs/j/NX/M4v+3/DGL/9/zxyz+/8gfs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/yn5Yxb/B/PHLP4P5Y9Z/Kfmj0n85xvkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+WMW/+fnj1n8F88fs/gvkT9m8X9B/pjFf8n8MYv/UvljFv8X5o9Z/F+UP2bxf3H+mMX/JfljFv+l88cs/i/NH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/i/LH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/y/PHLP6r5Y9Z/FfPH7P4vyJ/zOL/yvwxi/+r8scs/uPzxyz+E/LHLP4T88cs/mvkj1n818wfs/ivlT9m8Z+UP2bxn5w/ZvFfO3/M4r9O/pjF/9X5Yxb/1+SPWfzXzR+z+K+XP2bxXz9/zOL/2vwxi/8G+WMW/9flj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/9fljFv9N88cs/pvlj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6Yxf9t+WMW/83zxyz+W+SPWfy3zB+z+L89f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+78gfs/hvlz9m8d8+f8zi/878MYv/DvljFv8d88cs/jvlj1n8d84fe9h/m5P/q/3flT9mOf/fnT9m8d8lf8zi/578MYv/rvljFv/35o9Z/N+XP2bxf3/+mMV/t/wxi//u+WMW/z3yxyz+H8gfs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/jvmT9m8f9o/pjF/2P5Yxb/j+ePWfw/kT9m8d8rf8zi/8n8MYv/3vljFv9P5Y9Z/D+dP2bx3yd/zOK/b/6YxX+//DGL/2fyxyz+n80fs/h/Ln/M4r9//pjF/4D8MYv/5/PHLP4H5o9Z/A/KH7P4fyF/zOJ/cP6Yxf+Q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8v5k/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/t/KH7P4fzt/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP7fyR+z+J+ZP2bxPyt/zOJ/dv6Yxf+7+WMW/+/lj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4X5g/ZvG/KH/M4v/T/DGL/8X5Yxb/n+WPWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X549Z/K/JH7P4/zp/zOL/m/wxi/+1+WMW/9/mj1n8r8sfs/hfnz9m8b8hf8zi/7v8MYv/jfljFv+b8scs/jfnj1n8f58/ZvH/Q/6Yxf+P+WMW/1vyxyz+f8ofs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+f88cs/nfmj1n878ofs/j/JX/M4n93/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/hPyR+z+D+YP2bxfyh/zOI/NX9M4j//IH/M4j+UP2bxH5U/ZvGfLX/M4j97/pjFf3T+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6Yxf8p+WMW/wXyxyz+Y/LHLP4L5o9Z/Mfmj1n8F8ofs/gvnD9m8X9q/pjF/2n5Yxb/p+ePWfwXyR+z+D8jf8ziv2j+mMX/mfljFv9n5Y9Z/BfLH7P4Pzt/zOL/nPwxi/+4/DGL/3Pzxyz+z8sfs/g/P3/M4r94/pjFf4n8MYv/C/LHLP5L5o9Z/JfKH7P4vzB/zOL/ovwxi/+L88cs/i/JH7P4L50/ZvF/af6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvF/Wf6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/F+eP2bxXy1/zOK/ev6Yxf8V+WMW/1fmj1n8X5U/ZvEfnz9m8Z+QP2bxn5g/ZvFfI3/M4r9m/pjFf638MYv/pPwxi//k/DGL/9r5Yxb/dfLHLP6vzh+z+L8mf8ziv27+mMV/vfwxi//6+WMW/9fmj1n8N8gfs/i/Ln/M4r9h/pjFf6P8MYv/xvljFv9N8scs/q/PH7P4b5o/ZvHfLH/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+b8sfs/hvnj9m8d8if8ziv2X+mMX/7fljFv+t8scs/lvnj1n8t8kfs/hvmz9m8X9H/pjFf7v8MYv/9vljFv935o9Z/HfIH7P475g/ZvHfKX/M4r9z/pjF/135Yxb/d+ePWfx3yR+z+L8nf8ziv2v+mMX/vfljFv/35Y9Z/N+fP2bx3y1/zOK/e/6YxX+P/DGL/wfyxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+e+aPWfw/mj9m8f9Y/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPyxmfzHDwaD/1r/4/PHLOf/N/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/1v5Yxb/b+ePWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf87+WMW/zPzxyz+Z+WPWfzPzh+z+H83f8zi/738MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/C/PHLP4X5Y9Z/H+aP2bxvzh/zOL/s/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/q/DGL/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/J8yyB+z+A/lj1n8R+WPWfxnyx+z+M+eP2bxH50/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8X9K/pjFf4H8MYv/mPwxi/+C+WMW/7H5Yxb/hfLHLP4L549Z/J+aP2bxf1r+mMX/6fljFv9F8scs/s/IH7P4L5o/ZvF/Zv6Yxf9Z+WMW/8Xyxyz+z84fs/g/J3/M4j8uf8zi/9z8MYv/8/LHLP7Pzx+z+C+eP2bxXyJ/zOL/gvwxi/+S+WMW/6Xyxyz+L8wfs/i/KH/M4v/i/DGL/0vyxyz+S+ePWfxfmj9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfxflj9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/5fnj1n8V8sfs/ivnj9m8X9F/pjF/5X5Yxb/V+WPWfzH549Z/Cfkj1n8J+aPWfzXyB+z+K8p8p/rX1jX4r+WyP9fyeI/KX/M4j85f8ziv3b+mMV/nfwxi/+r88cs/q/JH7P4r5s/ZvFfL3/M4r9+/pjF/7X5Yxb/DfLHLP6vyx+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/+vzxyz+m+aPWfw3yx+z+L8hf8zi/8b8MYv/m/LHLP5vzh+z+L8lf8zi/9b8MYv/2/LHLP6b549Z/LfIH7P4b5k/ZvF/e/6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/N+RP2bx3y5/zOK/ff6Yxf+d+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bxf1f+mMX/3fljFv9d8scs/u/JH7P475o/ZvF/b/6Yxf99+WMW//fnj1n8d8sfs/jvnj9m8d8jf8zi/4H8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/nvljFv+P5o9Z/D+WP2bx/3j+mMX/E/ljFv+98scs/p/MH7P4750/ZvH/VP6Yxf/T+WMW/33yxyz+++aPWfz3yx+z+H8mf8zi/9n8MYv/5/LHLP77549Z/A/IH7P4fz5/zOJ/YP6Yxf+g/DGL/xfyxyz+B+ePWfwPyR+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/5v5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4v+t/DGL/7fzxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOL/nfwxi/+Z+WMW/7Pyxyz+Z+ePWfy/mz9m8f9e/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/4X5Yxb/i/LHLP4/zR+z+F+cP2bx/1n+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/df6Yxf+a/DGL/6/zxyz+v8kfs/hfmz9m8f9t/pjF/7r8MYv/9fljFv8b8scs/r/LH7P435g/ZvG/KX/M4n9z/pjF//f5Yxb/P+SPWfz/mD9m8b8lf8zi/6f8MYv/rfljFv/b8scs/rfnj1n878gfs/j/OX/M4n9n/pjF/678MYv/X/LHLP53549Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/lPwxi/+D+WMW/4fyxyz+U/PHJP4LDPLHLP5D+WMW/1H5Yxb/2fLHLP6z5/+oZht5tPiPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+WMW/+fnj1n8F88fs/gvkT9m8X9B/pjFf8n8MYv/UvljFv8X5o9Z/F+UP2bxf3H+mMX/JfljFv+l88cs/i/NH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/i/LH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/y/PHLP6r5Y9Z/FfPH7P4vyJ/zOL/yvwxi/+r8scs/uPzxyz+E/LHLP4T88cs/mvkj1n818wfs/ivlT9m8Z+UP2bxn5w/ZvFfO3/M4r9O/pjF/9X5Yxb/1+SPWfzXzR+z+K+XP2bxXz9/zOL/2vwxi/8G+WMW/9flj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/9fljFv9N88cs/pvlj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6Yxf9t+WMW/83zxyz+W+SPWfy3zB+z+L89f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+78gfs/hvlz9m8d8+f8zi/878MYv/DvljFv8d88cs/jvlj1n8d84fs/i/K3/M4v/u/DGL/y75Yxb/9+SPWfx3zR+z+L83f8zi/778MYv/+/PHLP675Y9Z/HfPH7P475E/ZvH/QP6Yxf+D/z/26MEADEOBAuA3i9S2bdu2bdtMUtu2bdu2bdt2u8CboO9uhfMftfwP9B+1/A/yH7X8D/Yftfzv4T9q+d/Tf9Tyv5f/qOV/b/9Ry/8+/qOW/339Ry3/+/mPWv739x+1/B/gP2r5P9B/1PJ/kP+o5f9g/1HL/yH+o5b/Q/1HLf+H+Y9a/g/3H7X8H+E/avk/0n/U8n+U/6jl/2j/Ucv/Mf6jlv9j/Uct/8f5j1r+j/cftfyf4D9q+T/Rf9Tyf5L/qOX/ZP9Ry/8p/qOW/1P9Ry3/p/mPWv5P9x+1/J/hP2r5P9N/1PJ/lv+o5f9s/1HL/zn+o5b/c/1HLf/n+Y9a/s/3H7X8X+A/avm/0H/U8n+R/6jl/2L/Ucv/Jf6jlv9L/Uct/5f5j1r+L/cftfxf4T9q+b/Sf9Tyf5X/qOX/av9Ry/81/qOW/2v9Ry3/1/mPWv6v9x+1/N/gP2r5v9F/1PJ/k/+o5f9m/1HL/y3+o5b/W/1HLf+3+Y9a/m/3H7X83+E/avm/03/U8n+X/6jl/27/Ucv/Pf6jlv97/Uct//f5j1r+7/cftfw/4D9q+X/Qf9Ty/5D/qOX/Yf9Ry/8j/qOW/0f9Ry3/j/mPWv4f9x+1/D/hP2r5f9J/1PL/lP+o5f9p/1HL/zP+o5b/Z/1HLf/P+Y9a/p/3H7X8v+A/avl/0X/U8v+S/6jl/2X/Ucv/K/6jlv9X/Uct/6/5j1r+X/cftfy/4T9q+X/Tf9Ty/5b/qOX/bf9Ry/87/qOW/3f9Ry3/7/mPWv7f9x+1/H/gP2r5/9B/1PL/kf+o5f9j/1HL/yf+o5b/T/1HLf+f+Y9a/j/3H7X8f+E/avn/0n/U8v+V/6jl/2v/Ucv/N/6jlv9v/Uct/9/5j1r+v/cftfz/4D9q+f/Rf9Ty/5P/qOX/Z/9Ry/8v/qOW/1/9Ry3/v/mPWv5/9x+V/A/4i/+o5f+v/qOW/7/5j1r+/+4/avn/h/+o5f+f/qOW/3/5j1r+/+0/avn/j/+o5f+//qOW///5j1r+/+8/avkfwn/U8j+k/6jlfyj/Ucv/0P6jlv8B/qOW/2H8Ry3/w/qPWv6H8x+1/A/vP2r5H8F/1PI/ov+o5X8k/1HL/8j+o5b/UfxHLf+j+o9a/kfzH7X8j+4/avkfw3/U8j+m/6jlfyz/Ucv/2P6jlv9x/Ect/+P6j1r+x/MftfyP7z9q+Z/Af9TyP6H/qOV/Iv9Ry//E/qOW/0n8Ry3/k/qPWv4n8x+1/E/uP2r5n8J/1PI/pf+o5X8q/1HL/9T+o5b/afxHLf/T+o9a/qfzH7X8T+8/avmfwX/U8j+j/6jlfyb/Ucv/zP6jlv9Z/Ect/7P6j1r+Z/MftfzP7j9q+Z/Df9TyP6f/qOV/Lv9Ry//c/qOW/3n8Ry3/8/qPWv7n8x+1/M/vP2r5X8B/1PK/oP+o5X8h/1HL/8L+o5b/RfxHLf+L+o9a/hfzH7X8L+4/avlfwn/U8r+k/6jlfyn/Ucv/0v6jlv9l/Ect/8v6j1r+l/Mftfwv7z9q+V/Bf9Tyv6L/qOV/Jf9Ry//K/qOW/1X8Ry3/q/qPWv5X8x+1/K/uP2r5X8N/1PK/pv+o5X8t/1HL/9r+o5b/dfxHLf/r+o9a/tfzH7X8r+8/avnfwH/U8r+h/6jlfyP/Ucv/xv6jlv9N/Ect/5v6j1r+N/Mftfxv7j9q+d/Cf9Tyv6X/qOV/K/9Ry//W/qOW/238Ry3/2/qPWv638x+1/G/vP2r538F/1PK/o/+o5X8n/1HL/87+o5b/XfxHLf+7+o9a/nfzH7X87+4/avkf6D9q+R/kP2r5H+w/+tP9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8wb7dx9ZVFnAcP93aAROTERdchiabPCgkwmz3kvEHYZOxrQ668T4GOLa1GxvtNrsOuwLu5Y9JhPAiySRLlChbhhJmQiMxEKwgokEXNdHgCyAKUTROhKBb4mLNbW9Le+0a7lOfZ1E+nz967znt72xr8t05DQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjf1dg0//D4mmGnxg89+PChlr7XWUeW37T/9z0XDLyWP71khEuOG3rQ29vbO+vZmdvLhycVRVH61XaUj0+uHJeuv6PhS539R2Fez4uLjk36ZdPh/atPe7i++8h9dX1n64ob165vbfnEuKIIF9UVnaWD+pqiCAvrintLBw2lg0V1xcOlg5l9B6cU3y0dnLdmU2tz6cTi6O8Z/L9obNpRjB9WbDHsb4Oh/e9o+M4dA6+jXHLgarVFuf/Lu374ZsXnBhyn/4Hrh/mV/Vf9BwSOq7r+n5838DrKJf/j/j/xyRUvj/S54/c/cP3wSf1DOiM8/w9rtPK5v+L5f9oIlxzcX1nTdazU/yW3PjO9fKr23Tz/v3P9cFFl/+OGPf+XnuMXDDz/n1QU4eIxfjvgPaWxaefh0e7/o/dfO7ViUzO0/9PbN+0r9f/Yoh88Xj5VV2X/C0a5/49bXPF7BarT2PTV3or7fxX9Fx8b4ZKD/b/1+G8fKvX/6B/vP2PI56rp/+LK/md0tG2esWVb17nr21ata1nXsrF+5txZcxrq55w/e0bfI0H/xzF+V+C9YWz3/2JixaamKFoG91d373+q1P/sBx6YVT51cpX9Lxz1/j/N/R9G9JFxxYQJReeqjo72+v6PA4cN/R/7v2yE/qv4+f/Ms8tfVld+rSmKKYP7O8+4a1mp/7cPPrOrfGpClf0vGrX/eYO/LhBhjPf/5orNsP4PHHyx7/l/yT0HTi+fqvbn/8Wj9v+K+z+MRWNTxf/w819W6n9ncWlkp6HRf/+DdHL0/+jb1/fErcOn9A/p5Oj/D184ck7cOizRP6STo//aDfc/F7cOl+gf0snR/9LJc5fFrcOl+od0cvS/5pVz/hq3Dk36h3Ry9H/2V3Z1xq3DUv1DOjn6f7B91ta4dVimf0gnR/8/P/XBV+PW4TL9Qzo5+j969O4b4tbhcv1DOjn679591o/i1uEK/UM6Ofq/bO38ELcOV+of0snR/9Qpf34sbh2u0j+kk6P/OX/556nv9utrhx2Fq/UP6eTo//YvLtsbtw7X6B/SydH/+OtefiFuHZbrH9LJ0f/is7bOj1uHa/UP6eTov/lnzb1x67BC/5BOjv5nfPMn6+PW4Tr9Qzo5+j+09JHdcetwvf4hnRz9764vJsWtww36h3Ry9P+N7592MG4dPq1/SCdH/7978om5ceuwUv+QTo7+n/3Qbd+KW4cb9Q/p5Oj/ntUvnBm3Dqv0D+nk6P+hPc99OW4dVusf0snR/+uvt70vbh3W6B/SydH/xJNPeS1uHZr1D+nk6H/+LV9rj1uHFv1DOjn6b9vV/eO4dVirf0gnR/8fPTZlRdw6rNM/pJOj/+Wz93wwbh1u0j+kk6P/Dyy5YGfcOqzXP6STo/8Lez5+Ydw6bNA/pJOj/46nP//1uHW4Wf+QTo7+90x/dWHcOrTqH9LJ0f9LKxf/NG4d2vQP6eTo/81Hrt0Ytw4b9Q/p5Oj/iV+8dTRuHTbpH9LJ0f/7z1/w97h12Kx/SCdH/wsXvbEmbh0+o39IJ0f/G7r/9VLcOrTrH9LJ0f/0Q1ctiVuHLfqHdHL0/71z6/fFrUOH/iGdHP3fccXehrh12Kp/SCdH//sO3HlX3Drcon9IJ0f/b/xq2tS4dfis/iGdHP3fN+ngNXHr0Kl/SCdH/7/eWPd03Dps0z+kk6P/f+ydvD1uHbr0D+nk6P+p13r+FLcOt+of0snR/8ra30yIW4fb9A/p5Oh/ctfme+PW4Xb9Qzo5+p9796rz4tbhc/qHdHL0v+Vvz387bh226x/S2bKt6+ZVra0t7d544403g29O9N9MQGrvRH+ifycAAAAAAAAAAAAAAMDx5PjnRCf6zwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgKAAD//7ES29I=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0xeffb, 0x9) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x80010, r4, 0xffffe000) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setuid(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 5.978998984s ago: executing program 0 (id=414): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x5}}, {@nodelalloc}, {@mb_optimize_scan}, {@lazytime}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xab8}}, {@noquota}, {@noauto_da_alloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) truncate(&(0x7f0000000080)='./file1\x00', 0xc1a) 5.905598377s ago: executing program 2 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000080)={'syzkaller0\x00', @random='\x00#\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) write$tun(r0, &(0x7f0000000100)={@void, @void, @ipv4=@dccp={{0xc, 0x4, 0x0, 0x2, 0x8c, 0x64, 0x0, 0x4, 0x21, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x72, 0x3, 0x2, [{@empty, 0x4}, {@empty, 0x4388}, {@rand_addr=0x64010102, 0x1b}]}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x1, 0x0, 0x0, 0xa, 0x0, "93c6fc", 0x81, "2852ff"}, "b4741e72cec2c9777541054055352430f5f8efa3d2008b9c0f294f95ce2292827ffd6903737550274d253a654d03d38eca2fdcf607249b180b44d44916baa0545f6f6a247ea3f469734678be"}}}, 0x8c) 5.572901872s ago: executing program 2 (id=416): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x80) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r1) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0xfece, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000004, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2}, 0x94) ioctl$KVM_RUN(r9, 0xae80, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x3}}, 0x24, 0x1) 4.92064098s ago: executing program 0 (id=417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x8, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8, 0x6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r4, r4, 0x0, 0x80000000) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@allocspi={0x100, 0x16, 0x21, 0x70bd29, 0x25dfdbfe, {{{@in6=@private0, @in=@multicast1, 0x4e21, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x11, 0x0, 0xffffffffffffffff}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x6c}, @in6=@local, {0x7, 0x591, 0x8, 0x9, 0x20000000000000, 0x52eb, 0x1a, 0x5}, {0x2, 0x8, 0x7}, {0xfffff000, 0x2}, 0x70bd28, 0x3506, 0x2, 0x2, 0x0, 0x34}, 0x7, 0x8009}, [@tfcpad={0x8, 0x16, 0x1000000}]}, 0x100}}, 0x4000) 4.44137969s ago: executing program 1 (id=418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000038c0)=ANY=[@ANYBLOB="dbaa00fe40000000711020000000020095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 4.238907498s ago: executing program 1 (id=419): syz_usb_connect(0x6, 0x121, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xfe, 0x3c, 0x8c, 0x10, 0x12d1, 0x141c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x10f, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x11, 0xcc, 0x1, 0x28, 0xef, 0x6, 0x2, [], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}]}}, {{0x9, 0x4, 0x17, 0xfa, 0x0, 0xc8, 0x28, 0xc5, 0x6, [@generic={0x95, 0xf, "cf45cfcda973b61c1b3e71b9a378272dd87d1a091fc40e160c19fb9d93bbde5f2a72632e1c7316f90ee83832cb868930c1f0ef70b9f820e0e163c680e74cd7eb1b3bf6ab9cda24dbd42f1749159ba1a409462add2448a38e6c694411105da2f186b2b6d334078c96ae6ced1f1a9c720a5a7a39938e776e7d109bacded2a69f1153b4caec57b929b7fa51f9cb58184a907d1748"}]}}, {{0x9, 0x4, 0x64, 0x1, 0x1, 0xff, 0xff, 0xff, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x9026, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x305, 0x1, 0x2, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x3, 0x33, 0x7ff, 0x4}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x1ff, 0x80, "102ec2f352d6"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x6, 0x1, "b23c"}]}, @hid_hid={0x9, 0x21, 0xff, 0x7, 0x1, {0x22, 0xe6f}}], [{{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x3, 0xfa, 0xff}}]}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x181400) ioctl$NBD_DO_IT(r1, 0xab03) 4.104016294s ago: executing program 2 (id=420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x277, 0x0, 0xffffffffffffffff}]}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014024000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace80ffcbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x103803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x5, 0x6, 0x3, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.74092613s ago: executing program 3 (id=421): fchmod(0xffffffffffffffff, 0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioperm(0x2, 0x7, 0x13) unshare(0x24020400) r0 = memfd_create(&(0x7f0000000000)='\\\\&\x0e\x00', 0x4) fchmod(r0, 0x84) request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\\\&\x0e\x00', 0x0) 3.575133848s ago: executing program 1 (id=422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x5, 0x6, 0x3, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x2100, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.366138316s ago: executing program 3 (id=423): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703836362c696f636861727365743d63703836362c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835322c756e695f786c6174653d312c757466383d302c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c747a3d5554432c73686f72746e616d653d77696e39352c00a00a0cd39f36d6b13ea19f07b37c61c4cf4ebfcb3df05994c20b6e4aaf23620b4cc18ae687df50c7079c24b6115418d83b45e9eeca405cd5d311a10231ee3d6c8d6b8f5c2509c98010751480ddcc0b6d6dd3c7b4df119719a21f887458644c085b43c0c5e06375dc26c7444fc499f4d0e888683e864bc9a2e359756312102a0a492d23f790e5a2a9e539d2c328e973e85c53802527c1d237445a1abab1908ffdd9057f6272d8b377baa22675d9f1db55e5407fc6690f3fc15b929ef7279054d9e55a"], 0x6, 0x2d5, &(0x7f0000000680)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) 3.309959319s ago: executing program 2 (id=424): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 2.995040912s ago: executing program 0 (id=425): unshare(0x20020080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x6, 0x4) 2.910773146s ago: executing program 1 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1300000065ffff041000000600395032303030"], 0x13) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x3, 0xee4, 0x2}}}, 0x28) write$P9_RREAD(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='4'], 0x34) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r2 = syz_clone(0xb0811800, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x56fcc3c8c9625f5c, 0x8, 0x0, 0x1, 0x806, 0x4, 0x8, 0x0, 0x400003}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0xc555149bf72bdb18, 0x40840) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x2a060300) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 2.888899907s ago: executing program 2 (id=427): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0xf4, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "556e741a233ed05bf91e6550236ea950e1d29a01186adfbe"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5b3d4732d9dabe7f74c537ba85fa013d3ed580d8ce256cc2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "65739f4c4af8cc60a9c22b0fe2899e21d81085294d44e105"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fbfff95e4b69a96ed1c26461af1e4d47a1ab13e859ba5975"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "54ecfff8cb48bc2a9cda8d33e51404937f90147ba8fd74d4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "120e21c52112cf22e60a7ce22fa923f6a1262a26348c85e1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2e31c340b55c05df015580be26b6e725a685e97a624b8b61"}]]}, 0xf4}, 0x1, 0x0, 0x0, 0x4008085}, 0x2010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="11000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r4, @ANYBLOB="3cd801c780a0abf176c6b02bbf429212ed893bd36998a2a0879896b9e1c30e5975bcadff2f8776"], 0x44}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb47, 0x0, 0x0, 0x34f}, &(0x7f00000002c0), &(0x7f0000000080)) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfff6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, 'geneve1\x00'}}, 0x1e) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) 2.242980844s ago: executing program 3 (id=428): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x68, r0, 0x100, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x38}}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 2.083053281s ago: executing program 3 (id=429): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000800)={[{@fileset={'fileset', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x10002}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uid_ignore}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@volume={'volume', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x1, 0xc37, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x480, 0xa3, 0xffff68e7}, 0xc) 1.794037974s ago: executing program 1 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x1000001, 0x15b}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000001000)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105442, 0xf8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x11a, 0x1, 0xce}}], 0x18}, 0x8000) 1.723101637s ago: executing program 0 (id=431): fchmod(0xffffffffffffffff, 0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioperm(0x2, 0x7, 0x13) unshare(0x24020400) memfd_create(&(0x7f0000000000)='\\\\&\x0e\x00', 0x4) request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\\\&\x0e\x00', 0x0) 1.673497799s ago: executing program 3 (id=432): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000013, &(0x7f0000000080)={[{@logdev={'logdev', 0x3d, './file0'}}, {@dax_inode}, {@dax}, {@noikeep}, {@bsdgroups}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x98b9, &(0x7f000001c300)="$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") 1.660477559s ago: executing program 0 (id=433): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3, 0x1, 0x800, 0x4, 0x0, [0x0], [0x0, 0x6, 0x0, 0x4], [0xa, 0x8, 0x10000, 0x3], [0x1019cd22, 0x0, 0xe4, 0x21d]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2, r4], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x1ffd) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000740)={0x4, 0xd}) 1.378781202s ago: executing program 1 (id=434): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3040, 0x140) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000000c0)={'macvlan0\x00'}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_extract_tcp_res(&(0x7f0000000340)={0x41424344, 0x41424344}, 0xfffffff3, 0x7) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x7, 0x4f) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r6 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r6, &(0x7f0000000240)=""/24, 0x18, 0x41, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, r5, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x3, 0x9}, @timestamp={0x8, 0xa, 0x5}]}}}}}}}}, 0x0) syz_emit_ethernet(0x111, &(0x7f0000000540)={@local, @random="c7361d1cdc85", @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0x6, 0x6, "368877", 0xd7, 0x6, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[@dstopts={0x3b, 0x5, '\x00', [@padn, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1, @padn={0x1, 0x1, [0x0]}]}, @fragment={0x0, 0x0, 0x9, 0x1, 0x0, 0x8, 0x67}], {{0x4e22, 0x4e21, r4, r5, 0x0, 0x0, 0x7, 0x1, 0x6, 0x0, 0x1, {[@sack_perm={0x4, 0x2}, @generic={0x0, 0x3, 'U'}]}}, {"f50ae6644b3a363c705cbb9ab925d854e41c5eda8aa6f9b295286bc5cb7ef28cdc9e853730ad7c597507ee2c7d549f766dccb32162b97dfcd620db3a28404f117dec4d2c5960560fcfae250b31b24ba2c2165b3b3b0c746a869d764f71212dd1d0fbd6f01b9a5602b7bffe0c18d4678967da891fb06c841230745e"}}}}}}}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x1a080, &(0x7f00000003c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbaTFBAhoEgEoSJ1gIWmbmnpihAoYuBPQIpSpwRcCm0GWkWULGwoC0sXBCNCSKCw5X/o3EhdytYhQ5CYGILufJeeY5dEBc6m+f2kd+/z+Xrve+dTlc/vDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ2HkrviniJN1Mp5uJqOf77u6uLaX99oE+tbVxby5taVyrOvHx93L5xcnZ0SUCAADA8ZEU9X1E3G9uLqR9fTqr/5vFMWnN/90zvbio5w/W/du7a5P5W3NF/f/rLw9e2B9oOsnGSU+6vNLtnBlMpfEfTXHsPXvoEY3symffvSTZB1J/b/35nWZ2PWtf37nzTisLJ6rIFgB4HKeLPg+Kv4fSvj3KxAA4Nhqlwruo/5Pp0eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIWd9XiqiGsRMdd4GKe2d9eWhvVfbtyb28rbhdu3N8rnTE/RjIjllW7nTIVzGV/F1bz58WK327l2/UbVwcmIGPLWraP98yRP/5HHtCKib8+pF4ec54MjjHXgPANBfntGtddwKp3foQfX+vbUBi7423s9o7gBqgrq+eczLvkMBpOPvo0PCYp7799PrOL/jgAAeOI185ZWovebmwvpvtpMxN73/fX/q6U4+ur+vVu9Pb3XW6X6/8GHF+6WxyrX/+2K5vd/ML965dP56zduvr5yZfFy53LnkzfOtt9sn7t4/vzF+ey7kvnlqPvGBAAAgH+glbdy/V+fGVz/P1GK42/W/8v1/2fftr8oj5Wo/4d6uOg36kwAAACOo9Z+9Nwrf/xeG3JErdWKzxdXV6+1e9v912d720rTfUwTeSvX/8nMqLMCAAAAqrCzXutb/79UiuOI6/9P//DST+VzJhExFXE1Ijqnl652L1U3nbFWxc+bs4Fao54pAAAAozKVt/L6fzN7/r++/8hDPSJeOxXxZ/4b/jhi/Z+8+9WP5bHKz/+fq3SW46c+27seWT8b0ZgddUYAAAA8ySbzlhb7vzU3Fz76+cT7Lc//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//VDwyJg==") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) 792.205317ms ago: executing program 2 (id=435): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioperm(0x23d, 0x59, 0x1000) gettid() syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x301c802, &(0x7f0000000f80)=ANY=[], 0x11, 0x605c, &(0x7f000000a140)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a02404, 0x0, 0x1, 0x0, &(0x7f0000000240)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000f0000082ff97adfc846890aa1bfdf4d6b616d46549c04166924801cc00"/54], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$hfs(&(0x7f0000000840), &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000001,iocharset=macturkish,codepage=cp857,gid=', @ANYRESHEX=r4, @ANYBLOB=',dir_umask=00000000000000000000011,file_umask=00000000000000000000001,part=0x0000000000000009,uid=', @ANYRESOCT, @ANYBLOB="2c646f6e745f6d6561737572652c73796e632c00f33c2875623820bdfb47432ee6e15ddd51dc8f02e7fdfc6e27041de21afe232d9b5f647ac899b7cbf1c485c871d50bac42849034eddf9f760d22531d7d25b94ded9277fa8d0d55606156b09edde01ca7b52dd92643496213f20507d854b02e9252f29d95a21907ab068d39da46736a94266f48b5e37d6ffa4832846f23d9127fef6a0b79d3b4caedbb6c0e38197553d820306e3c90521c278cffcdcc6d336abe6075e6f00cb2b95600b6db3f7ca2bdeb"], 0x11, 0x2ed, &(0x7f0000000500)="$eJzs3ctu00ocx/HfOEmbXtTj0/boSGxAhUqwqSiwQGyCULbsWSGgSaWKqIi2SLQbCmKJeAD2vAIPwQbEC8CKFQ/QndFMJq6T2E5bJXEv34+UaDyeGf+tsT0zltoIwIX1oP7z8+3f9mOkkkqS7kmBpKpUlvSf/q++2tzZ2Gk1G3kNlVwN+zFq1zR9ZdY2m2lVbT1XwwvtVlmzybwk098yTiiKovu/ig4ChXN3f4pAmvT3odtfHXNco7IvXS46hpHIeTYmO9gc6ECvNTeOkAAAp5cf/wM/TMy6LKMgkJb9sH+uxv+DogMYrjutvqwot0Ji/Hezu8jY/v3H7Tpc77nJhN0fdFaJRwmm0rM9ofaV1TXBNINWlS6WYGp9o6yVtbdqBHqnmpcotui+G+1Lt2NAtEt5s6R+2a1V9HC6fTZuRtmrE9L6Rqs5aROJ+DsRLBzjiJPHiTqL+Wq+m8cm1Cc14vlfOTK2m1xPhT09FVRs/DezW5xxtWwp+ROr1WpBV5F/3UEu+SN4A3qpmr4iSbbZeUGwH0eQF6c79ry6Xyu0z251QK2FtFphvJVRa7GrVslfCStrL1q5r1JGo3OK5qN5ZJb0R19UT8z/AxvfshJ3Zt6j3riS/spon89EesmyKxn2jRyHt8uVOAJvKJf5xZPxtizDBz3TXc1t7+49L7VazS2beJqSeDm7ZXxO5b2UWmb0iZJyymj/MCey3kTRUVuORhn8jaE2aJ8fcY69fdIK27sszgl290oqpL/OeaL+TXkXpEvYcfAUhJqfiCIpY9fInlM4RbZNp9PdZllTRUeEMbPzLtNe/7mZvJ/VuQWK/Qpz5un5i0x1tbgar+C6p4Lz7nv6WCu4md4V3FzaEW9lrBndmuvqdelaItMo94ihj/OcMHX90BPe/wMAAAAAAAAAAAAAAAAAAJw14/hLg6LPEQAAAAAAAAAAAAAAAAAAAACAs+5Ev/+b9j/i3e//hmP5/V8Aw/E3AAD//6vmdng=") timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'nat\x00', 0x0, [0x58dd9f07, 0x7, 0x3, 0x9bd, 0x6]}, &(0x7f00000001c0)=0x54) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) recvmmsg(r5, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=436): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703836362c696f636861727365743d63703836362c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835322c756e695f786c6174653d312c757466383d302c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c747a3d5554432c73686f72746e616d653d77696e39352c00a00a0cd39f36d6b13ea19f07b37c61c4cf4ebfcb3df05994c20b6e4aaf23620b4cc18ae687df50c7079c24b6115418d83b45e9eeca405cd5d311a10231ee3d6c8d6b8f5c2509c98010751480ddcc0b6d6dd3c7b4df119719a21f887458644c085b43c0c5e06375dc26c7444fc499f4d0e888683e864bc9a2e359756312102a0a492d23f790e5a2a9e539d2c328e973e85c53802527c1d237445a1abab1908ffdd9057f6272d8b377baa22675d9f1db55e5407fc6690f3fc15b929ef7279054d9e55a"], 0x6, 0x2d5, &(0x7f0000000680)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) kernel console output (not intermixed with test programs): 70.583522][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.610427][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.625609][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.635808][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.646412][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.656505][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.693302][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.728179][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.831459][ T5778] veth0_vlan: entered promiscuous mode [ 70.879566][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.885986][ T51] Bluetooth: hci2: command tx timeout [ 70.893032][ T51] Bluetooth: hci0: command tx timeout [ 70.900582][ T5791] Bluetooth: hci1: command tx timeout [ 70.906761][ T5102] Bluetooth: hci3: command tx timeout [ 70.912315][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.951712][ T5778] veth1_vlan: entered promiscuous mode [ 70.967994][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.976693][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.999094][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.009808][ T5789] veth0_vlan: entered promiscuous mode [ 71.073415][ T5789] veth1_vlan: entered promiscuous mode [ 71.136567][ T5778] veth0_macvtap: entered promiscuous mode [ 71.160083][ T5778] veth1_macvtap: entered promiscuous mode [ 71.191772][ T5782] veth0_vlan: entered promiscuous mode [ 71.214294][ T5789] veth0_macvtap: entered promiscuous mode [ 71.247685][ T5789] veth1_macvtap: entered promiscuous mode [ 71.266265][ T5782] veth1_vlan: entered promiscuous mode [ 71.276589][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.294689][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.306638][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.347292][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.368707][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.391936][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.412204][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.422913][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.437996][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.450026][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.461766][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.480129][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.490734][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.501530][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.512114][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.535609][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.594547][ T5880] 9pnet_fd: Insufficient options for proto=fd [ 71.652086][ T5880] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.672327][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.711090][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.797485][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.029214][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.038111][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.056959][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.088662][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.099240][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.108514][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.117889][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.151426][ T5782] veth0_macvtap: entered promiscuous mode [ 72.176755][ T5782] veth1_macvtap: entered promiscuous mode [ 72.302607][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.314631][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.327717][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.338964][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.349169][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.359947][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.371127][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.393794][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.401647][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.480194][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.501703][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.512767][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.527044][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.538215][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.549142][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.560916][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.579182][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.591017][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.600375][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.609201][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.744302][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.752190][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.764009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.771628][ T5884] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6'. [ 72.793794][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.802624][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.963751][ T5791] Bluetooth: hci2: command tx timeout [ 72.974924][ T5102] Bluetooth: hci3: command tx timeout [ 72.981026][ T51] Bluetooth: hci0: command tx timeout [ 72.986549][ T5791] Bluetooth: hci1: command tx timeout [ 73.117770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.141913][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.249444][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.294322][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.820872][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.998016][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.033765][ T5896] syz.3.4[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.250633][ T5896] loop3: detected capacity change from 0 to 2048 [ 74.319977][ T5896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.643779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 74.654395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 74.814569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.848722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.848937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.857341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.884410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.892628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.053997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.682441][ T5901] loop2: detected capacity change from 0 to 32768 [ 76.052102][ T5791] Bluetooth: hci1: command tx timeout [ 76.052141][ T5102] Bluetooth: hci3: command tx timeout [ 76.057594][ T5791] Bluetooth: hci2: command tx timeout [ 76.062926][ T51] Bluetooth: hci0: command tx timeout [ 76.692036][ T5910] Zero length message leads to an empty skb [ 76.755034][ T5910] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.7'. [ 77.504136][ T5901] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 77.504675][ T5901] (syz.2.8,5901,1):ocfs2_initialize_super:2285 ERROR: status = -12 [ 77.522840][ T5901] (syz.2.8,5901,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 77.596157][ T27] audit: type=1326 audit(1764906476.214:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 77.716526][ T27] audit: type=1326 audit(1764906476.214:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 77.853812][ T27] audit: type=1326 audit(1764906476.214:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 77.965106][ T27] audit: type=1326 audit(1764906476.214:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 78.064148][ T27] audit: type=1326 audit(1764906476.244:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 78.173849][ T27] audit: type=1326 audit(1764906476.244:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 78.173895][ T27] audit: type=1326 audit(1764906476.244:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 78.173928][ T27] audit: type=1326 audit(1764906476.244:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 78.173963][ T27] audit: type=1326 audit(1764906476.264:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 78.173999][ T27] audit: type=1326 audit(1764906476.264:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb71d8f749 code=0x7ffc0000 [ 78.275790][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.289460][ T5917] loop0: detected capacity change from 0 to 2048 [ 78.395299][ T5917] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.996319][ T5922] loop3: detected capacity change from 0 to 64 [ 79.006391][ T5922] hfs: unable to parse mount options [ 79.166721][ T5926] netlink: 124 bytes leftover after parsing attributes in process `syz.3.13'. [ 79.200654][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 79.258807][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'. [ 79.330564][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12'. [ 79.754168][ T5938] loop1: detected capacity change from 0 to 128 [ 79.776628][ T5938] ======================================================= [ 79.776628][ T5938] WARNING: The mand mount option has been deprecated and [ 79.776628][ T5938] and is ignored by this kernel. Remove the mand [ 79.776628][ T5938] option from the mount to silence this warning. [ 79.776628][ T5938] ======================================================= [ 79.811860][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.880185][ T5926] loop3: detected capacity change from 0 to 4096 [ 79.915646][ T5938] hpfs: [ 79.915646][ T5938] HPFS filesystem options: [ 79.915646][ T5938] help do not mount and display this text [ 79.915646][ T5938] uid=xxx set uid of files that don't have uid specified in eas [ 79.915646][ T5938] gid=xxx set gid of files that don't have gid specified in eas [ 79.915646][ T5938] umask=xxx set mode of files that don't have mode specified in eas [ 79.915646][ T5938] case=lower lowercase all files [ 79.915646][ T5938] case=asis do not lowercase files (default) [ 79.915646][ T5938] check=none no fs checks - kernel may crash on corrupted filesystem [ 79.915646][ T5938] check=normal do some checks - it should not crash (default) [ 79.915646][ T5938] check=strict do extra time-consuming checks, used for debugging [ 79.915646][ T5938] errors=continue continue on errors [ 79.915646][ T5938] errors=remount-ro remount read-only if errors found (default) [ 79.915646][ T5938] errors=panic panic on errors [ 79.915646][ T5938] chkdsk=no do not mark fs for chkdsking even if there were errors [ 79.915646][ T5938] chkdsk=errors mark fs dirty if errors found (default) [ 79.915646][ T5938] chkdsk=always always mark fs dirty - used for debugging [ 79.915646][ T5938] e [ 80.409057][ T5950] capability: warning: `syz.2.9' uses deprecated v2 capabilities in a way that may be insecure [ 80.535740][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.135746][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.828223][ T5954] process 'syz.2.14' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 81.917836][ T9] cfg80211: failed to load regulatory.db [ 81.954693][ T6014] loop1: detected capacity change from 0 to 16 [ 81.992558][ T6014] erofs: (device loop1): mounted with root inode @ nid 36. [ 82.092372][ T6014] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 82.136947][ T6014] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 82.166305][ T6015] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 82.187039][ T6015] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 82.723636][ T6015] erofs: (device loop1): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 82.743669][ T6015] erofs: (device loop1): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 82.787143][ T6015] syz.1.16: attempt to access beyond end of device [ 82.787143][ T6015] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 82.803297][ T6015] syz.1.16: attempt to access beyond end of device [ 82.803297][ T6015] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 82.890340][ T6015] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[3749] [ 83.416297][ T6017] loop2: detected capacity change from 0 to 32768 [ 83.533016][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 83.533031][ T27] audit: type=1800 audit(1764906482.144:50): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 83.635382][ T6022] loop0: detected capacity change from 0 to 32768 [ 84.062161][ T6026] loop1: detected capacity change from 0 to 2048 [ 84.144070][ T6026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.653434][ T6030] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.20'. [ 86.848431][ T6042] loop1: detected capacity change from 0 to 64 [ 86.890042][ T6042] hfs: unable to parse mount options [ 87.020754][ T6044] netlink: 124 bytes leftover after parsing attributes in process `syz.1.24'. [ 87.077590][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 87.141968][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 87.478132][ T6044] loop1: detected capacity change from 0 to 4096 [ 87.594431][ T5794] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.617108][ T6056] loop0: detected capacity change from 0 to 128 [ 87.650979][ T6056] hpfs: [ 87.650979][ T6056] HPFS filesystem options: [ 87.650979][ T6056] help do not mount and display this text [ 87.650979][ T6056] uid=xxx set uid of files that don't have uid specified in eas [ 87.650979][ T6056] gid=xxx set gid of files that don't have gid specified in eas [ 87.650979][ T6056] umask=xxx set mode of files that don't have mode specified in eas [ 87.650979][ T6056] case=lower lowercase all files [ 87.650979][ T6056] case=asis do not lowercase files (default) [ 87.650979][ T6056] check=none no fs checks - kernel may crash on corrupted filesystem [ 87.650979][ T6056] check=normal do some checks - it should not crash (default) [ 87.650979][ T6056] check=strict do extra time-consuming checks, used for debugging [ 87.650979][ T6056] errors=continue continue on errors [ 87.650979][ T6056] errors=remount-ro remount read-only if errors found (default) [ 87.650979][ T6056] errors=panic panic on errors [ 87.650979][ T6056] chkdsk=no do not mark fs for chkdsking even if there were errors [ 87.650979][ T6056] chkdsk=errors mark fs dirty if errors found (default) [ 87.650979][ T6056] chkdsk=always always mark fs dirty - used for debugging [ 87.650979][ T6056] e [ 87.719010][ T5795] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.780048][ T6092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.27'. [ 89.777794][ T6100] loop0: detected capacity change from 0 to 16 [ 89.814246][ T6100] erofs: (device loop0): mounted with root inode @ nid 36. [ 89.923043][ T6100] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 89.946679][ T6100] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 89.959860][ T6100] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 89.975189][ T6100] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 90.007280][ T6096] loop2: detected capacity change from 0 to 32768 [ 90.154214][ T6103] erofs: (device loop0): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 90.163790][ T6103] erofs: (device loop0): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 90.178786][ T6103] syz.0.28: attempt to access beyond end of device [ 90.178786][ T6103] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 90.194094][ T6103] syz.0.28: attempt to access beyond end of device [ 90.194094][ T6103] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 90.213723][ T6103] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[3749] [ 90.796022][ T6108] loop1: detected capacity change from 0 to 2048 [ 90.885653][ T6108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.853495][ T6118] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.35'. [ 92.715405][ T6106] loop3: detected capacity change from 0 to 32768 [ 92.853739][ T27] audit: type=1800 audit(1764906491.384:51): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.30" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 93.746570][ T6126] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 93.804319][ T6126] veth3: entered promiscuous mode [ 93.912370][ T6127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.948767][ T6127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.988010][ T6127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.014649][ T6127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.037827][ T6127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.052772][ T6127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.068172][ T6127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.079016][ T6127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.137748][ T6132] FAULT_INJECTION: forcing a failure. [ 94.137748][ T6132] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 94.158692][ T6132] CPU: 0 PID: 6132 Comm: syz.3.40 Not tainted syzkaller #0 [ 94.165945][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.176027][ T6132] Call Trace: [ 94.179317][ T6132] [ 94.182264][ T6132] dump_stack_lvl+0x16c/0x230 [ 94.186982][ T6132] ? show_regs_print_info+0x20/0x20 [ 94.192203][ T6132] ? load_image+0x3b0/0x3b0 [ 94.196730][ T6132] ? __lock_acquire+0x7c80/0x7c80 [ 94.201774][ T6132] should_fail_ex+0x39d/0x4d0 [ 94.206471][ T6132] prepare_alloc_pages+0x1e2/0x5f0 [ 94.211594][ T6132] __alloc_pages+0x127/0x460 [ 94.216448][ T6132] ? zone_statistics+0x170/0x170 [ 94.221381][ T6132] ? rcu_is_watching+0x15/0xb0 [ 94.226146][ T6132] ? down_write+0x162/0x1f0 [ 94.230643][ T6132] ? alloc_pages+0x4dc/0x740 [ 94.235233][ T6132] binder_update_page_range+0xc7f/0x1a30 [ 94.240877][ T6132] binder_alloc_new_buf+0xaac/0x13d0 [ 94.246174][ T6132] binder_transaction+0x2363/0x64d0 [ 94.251404][ T6132] ? mark_lock+0x94/0x320 [ 94.255753][ T6132] ? binder_free_buf+0x980/0x980 [ 94.260712][ T6132] ? __might_fault+0xaa/0x120 [ 94.265386][ T6132] ? __lock_acquire+0x7c80/0x7c80 [ 94.270405][ T6132] ? __lock_acquire+0x7c80/0x7c80 [ 94.275424][ T6132] ? __might_fault+0xaa/0x120 [ 94.280090][ T6132] ? __might_fault+0xc6/0x120 [ 94.284755][ T6132] ? __might_fault+0xaa/0x120 [ 94.289425][ T6132] binder_ioctl_write_read+0xb7c/0x8700 [ 94.294975][ T6132] ? __lock_acquire+0x1334/0x7c80 [ 94.300003][ T6132] ? do_syscall_64+0x55/0xb0 [ 94.304592][ T6132] ? verify_lock_unused+0x140/0x140 [ 94.309781][ T6132] ? kasan_set_track+0x5f/0x70 [ 94.314546][ T6132] ? binder_debug+0x1a0/0x1a0 [ 94.319218][ T6132] ? slab_free_freelist_hook+0x130/0x1b0 [ 94.324931][ T6132] ? __kmem_cache_free+0xba/0x1f0 [ 94.329945][ T6132] ? tomoyo_path_number_perm+0x477/0x590 [ 94.335574][ T6132] ? security_file_ioctl+0x70/0xa0 [ 94.340680][ T6132] ? __se_sys_ioctl+0x48/0x170 [ 94.345437][ T6132] ? do_syscall_64+0x55/0xb0 [ 94.350027][ T6132] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.356109][ T6132] ? binder_get_thread+0x16d/0x6c0 [ 94.361221][ T6132] ? __lock_acquire+0x7c80/0x7c80 [ 94.366237][ T6132] ? __rwlock_init+0x150/0x150 [ 94.371003][ T6132] ? _raw_spin_unlock+0x28/0x40 [ 94.375930][ T6132] ? binder_get_thread+0x177/0x6c0 [ 94.381037][ T6132] binder_ioctl+0x3f9/0x1950 [ 94.385621][ T6132] ? tomoyo_path_number_perm+0x4dc/0x590 [ 94.391245][ T6132] ? tomoyo_path_number_perm+0x1ba/0x590 [ 94.396874][ T6132] ? binder_poll+0x370/0x370 [ 94.401479][ T6132] ? __fget_files+0x28/0x4d0 [ 94.406070][ T6132] ? bpf_lsm_file_ioctl+0x9/0x10 [ 94.410998][ T6132] ? security_file_ioctl+0x80/0xa0 [ 94.416107][ T6132] ? binder_poll+0x370/0x370 [ 94.420689][ T6132] __se_sys_ioctl+0xfd/0x170 [ 94.425275][ T6132] do_syscall_64+0x55/0xb0 [ 94.429685][ T6132] ? clear_bhb_loop+0x40/0x90 [ 94.434351][ T6132] ? clear_bhb_loop+0x40/0x90 [ 94.439018][ T6132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.444899][ T6132] RIP: 0033:0x7fcb71d8f749 [ 94.449313][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.468923][ T6132] RSP: 002b:00007fcb72ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.477329][ T6132] RAX: ffffffffffffffda RBX: 00007fcb71fe6090 RCX: 00007fcb71d8f749 [ 94.485291][ T6132] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 94.493287][ T6132] RBP: 00007fcb72ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 94.501264][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.509269][ T6132] R13: 00007fcb71fe6128 R14: 00007fcb71fe6090 R15: 00007ffcde1b7c28 [ 94.517267][ T6132] [ 94.533991][ T6132] binder_alloc: 6130: binder_alloc_buf failed for page at 0000200000ffd000 [ 94.667954][ T6136] loop2: detected capacity change from 0 to 16 [ 94.703300][ T6136] erofs: (device loop2): mounted with root inode @ nid 36. [ 94.848347][ T6136] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 95.510762][ T6136] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 95.589676][ T6139] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 95.615815][ T6139] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 95.877552][ T6139] erofs: (device loop2): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 95.893756][ T6139] erofs: (device loop2): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 95.924260][ T6139] syz.2.42: attempt to access beyond end of device [ 95.924260][ T6139] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 95.947921][ T6139] syz.2.42: attempt to access beyond end of device [ 95.947921][ T6139] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 95.988261][ T6139] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[3749] [ 96.256087][ T6146] loop3: detected capacity change from 0 to 1024 [ 96.296484][ T6146] hfsplus: unable to parse mount options [ 96.323147][ T6143] loop0: detected capacity change from 0 to 4096 [ 96.379110][ T5794] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.410528][ T6150] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.430963][ T6145] loop3: detected capacity change from 0 to 512 [ 96.455161][ T5794] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.636389][ T6145] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 97.048583][ T6145] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.324413][ T6145] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.44: Block bitmap for bg 0 marked uninitialized [ 97.385351][ T6145] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 97.395428][ T6145] EXT4-fs (loop3): 1 orphan inode deleted [ 97.402476][ T6145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 97.419458][ T6145] ext4: Unknown parameter '׷RI%b1R(GIv/urD߈I2G7~_˟䚧hT3dd:}g~(tA%Gn'TNsޜgb6 [ 97.419458][ T6145] Boos?*' [ 97.548295][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.819610][ T6165] loop2: detected capacity change from 0 to 512 [ 97.834127][ T6165] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.880460][ T6165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 97.910185][ T6165] System zones: 1-2, 4-12, 8-8 [ 97.935832][ T6165] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.51: iget: bad i_size value: 38620345925642 [ 97.958895][ T6165] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.51: couldn't read orphan inode 15 (err -117) [ 97.975699][ T6165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.384818][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.625020][ T6171] loop2: detected capacity change from 0 to 1024 [ 98.704538][ T6171] EXT4-fs: Ignoring removed orlov option [ 98.761940][ T6171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.870999][ T6166] loop3: detected capacity change from 0 to 32768 [ 98.887528][ T27] audit: type=1800 audit(1764906497.494:52): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.52" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 98.930151][ T6171] Trying to write to read-only block-device loop2 [ 98.952228][ T6166] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.036097][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 99.081957][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.161458][ T6173] loop1: detected capacity change from 0 to 32768 [ 99.163299][ T6166] XFS (loop3): Ending clean mount [ 99.245804][ T6173] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.267177][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 99.281418][ T9] usb 1-1: config 9 has an invalid interface number: 156 but max is 2 [ 99.292470][ T9] usb 1-1: config 9 has an invalid interface number: 3 but max is 2 [ 99.301039][ T9] usb 1-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 99.310033][ T9] usb 1-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 99.319348][ T9] usb 1-1: config 9 has an invalid interface number: 104 but max is 2 [ 99.319401][ T6166] binder: 6162:6166 ioctl c0306201 2000000004c0 returned -22 [ 99.328701][ T9] usb 1-1: config 9 has an invalid interface number: 8 but max is 2 [ 99.344371][ T9] usb 1-1: config 9 has an invalid interface descriptor of length 5, skipping [ 99.353848][ T9] usb 1-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 99.364704][ T9] usb 1-1: config 9 has 4 interfaces, different from the descriptor's value: 3 [ 99.375136][ T9] usb 1-1: config 9 has no interface number 0 [ 99.381331][ T9] usb 1-1: config 9 has no interface number 1 [ 99.387644][ T9] usb 1-1: config 9 has no interface number 2 [ 99.393833][ T9] usb 1-1: config 9 interface 156 altsetting 4 endpoint 0x6 has an invalid bInterval 161, changing to 4 [ 99.405722][ T9] usb 1-1: config 9 interface 156 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 99.416688][ T9] usb 1-1: config 9 interface 156 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 99.428401][ T9] usb 1-1: config 9 interface 156 altsetting 4 has an invalid endpoint with address 0xE1, skipping [ 99.439515][ T9] usb 1-1: config 9 interface 156 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 99.458104][ T9] usb 1-1: config 9 interface 156 altsetting 4 endpoint 0xB has invalid maxpacket 608, setting to 64 [ 99.475382][ T9] usb 1-1: config 9 interface 3 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 99.494484][ T9] usb 1-1: config 9 interface 3 altsetting 6 endpoint 0xE has an invalid bInterval 107, changing to 4 [ 99.498417][ T6173] XFS (loop1): Ending clean mount [ 99.517041][ T9] usb 1-1: config 9 interface 3 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 99.573708][ T9] usb 1-1: config 9 interface 3 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 99.587403][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.613668][ T9] usb 1-1: config 9 interface 3 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 99.642872][ T9] usb 1-1: config 9 interface 3 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 99.671669][ T9] usb 1-1: config 9 interface 3 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 99.703543][ T9] usb 1-1: config 9 interface 3 altsetting 6 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 99.745155][ T9] usb 1-1: config 9 interface 3 altsetting 6 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 99.777062][ T5778] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.805448][ T9] usb 1-1: config 9 interface 104 altsetting 160 has a duplicate endpoint with address 0x7, skipping [ 99.834786][ T9] usb 1-1: config 9 interface 104 altsetting 160 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 99.884090][ T9] usb 1-1: config 9 interface 8 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 99.932413][ T9] usb 1-1: config 9 interface 156 has no altsetting 0 [ 99.969486][ T9] usb 1-1: config 9 interface 3 has no altsetting 0 [ 99.999868][ T9] usb 1-1: config 9 interface 104 has no altsetting 0 [ 100.033692][ T9] usb 1-1: config 9 interface 8 has no altsetting 0 [ 100.044608][ T9] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=5a.29 [ 100.061238][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.084002][ T9] usb 1-1: Product: 涶ꜚ㭨堭䛆䠗埵•먴☚찀︢疢ූ㗥虼皽㖓䆄䵚ဩꖝ༪⼻번О햜녦긞徐벇믑㎃は彄⮗䮹遾良젂鄨Ͷ臊ᕪ뾝ⳡ䁷鄤ꈍڪ趵ᐂ [ 100.133998][ T9] usb 1-1: Manufacturer: 쁌至魸ᄨ홼夥ᱺ퀥頜낚灦퐏좀啮╤廓괚陡샍흻鎫业廄㹍ㅀ쑈ꩯ紳緽怲찦쁎⟊ꅃ謀뒹悪␤㥝휋嗽斻균眲縡᫑泆緱亀鶠駆꺊钫窼뎘㮡ꔁ㎸嚓褾웇浮큰ꤴ𢡊咳响햌칢๵鮻ѵ̣靆摍톓뫽둷攸먽ꆼ䴳⦮澳 [ 100.136011][ T6202] fuse: Bad value for 'group_id' [ 100.195445][ T9] usb 1-1: SerialNumber: 욫㉯⊔ᒳ⁄㷃픋뿜助톁뻒ꄲ哜쏊䡎온뺡ॣ숕㻷ୌ슾㒇䭸ፃퟭℌ嬬쌽∽䠀圂낲㚒锻铕꣦㛹䫡ᔎહ운鲳쪴劗ᯨ북gꖍ齉콉隷ᧉ㭓搻郒咍꾇ᐮ殚붉撌 [ 100.373403][ T6198] loop2: detected capacity change from 0 to 32768 [ 100.473753][ T5795] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.500408][ T9] usb 1-1: bad CDC descriptors [ 101.140609][ T6210] loop3: detected capacity change from 0 to 1024 [ 101.205469][ T6210] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.227851][ T9] usb 1-1: USB disconnect, device number 2 [ 101.327620][ T6210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.382185][ T6210] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 101.457102][ T6210] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.60: missing EA_INODE flag [ 101.484662][ T6210] EXT4-fs (loop3): Remounting filesystem read-only [ 101.562468][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.623726][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 101.743729][ T5784] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.815820][ T23] usb 2-1: config 0 has no interfaces? [ 101.825374][ T23] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 101.834636][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.843188][ T23] usb 2-1: Product: syz [ 101.847653][ T23] usb 2-1: Manufacturer: syz [ 101.852269][ T23] usb 2-1: SerialNumber: syz [ 101.864430][ T23] usb 2-1: config 0 descriptor?? [ 101.888145][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.933679][ T5784] usb 3-1: Using ep0 maxpacket: 32 [ 101.941354][ T5784] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 101.954764][ T5784] usb 3-1: config 4 has no interface number 0 [ 101.961476][ T5784] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.977371][ T5784] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.991389][ T5784] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.006418][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.026884][ T5784] hub 3-1:4.128: USB hub found [ 102.097179][ T9] usb 1-1: config 0 has no interfaces? [ 102.109249][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 102.118827][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.130727][ T9] usb 1-1: Product: syz [ 102.136836][ T9] usb 1-1: Manufacturer: syz [ 102.142562][ T9] usb 1-1: SerialNumber: syz [ 102.147570][ T23] usb 2-1: USB disconnect, device number 2 [ 102.167462][ T9] usb 1-1: config 0 descriptor?? [ 102.227342][ T5784] hub 3-1:4.128: 2 ports detected [ 102.232745][ T5784] hub 3-1:4.128: Using single TT (err -22) [ 102.475197][ T23] usb 1-1: USB disconnect, device number 3 [ 102.669825][ T6233] loop3: detected capacity change from 0 to 8 [ 102.686655][ T5784] usb 3-1: USB disconnect, device number 2 [ 102.712412][ T6233] SQUASHFS error: Unable to read inode 0x11f [ 102.782459][ T6235] loop1: detected capacity change from 0 to 1024 [ 102.800445][ T5794] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.801239][ T6235] EXT4-fs: Ignoring removed orlov option [ 102.845088][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.919435][ T27] audit: type=1800 audit(1764906501.534:53): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.66" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 102.951115][ T6235] Trying to write to read-only block-device loop1 [ 103.071908][ T6246] loop3: detected capacity change from 0 to 512 [ 103.081185][ T6246] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.099169][ T6246] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.128431][ T6246] EXT4-fs (loop3): 1 truncate cleaned up [ 103.141463][ T6246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.180277][ T6246] syz.3.68 (pid 6246) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 103.215357][ T6246] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 103.269054][ T6249] loop0: detected capacity change from 0 to 4096 [ 103.288154][ T6249] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 103.311711][ T6249] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 103.340293][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.362192][ T6249] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 103.393648][ T6249] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 103.423688][ T6249] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 103.507759][ T6249] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 103.520842][ T6249] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 103.533316][ T6249] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 104.291297][ T6249] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 104.323945][ T6249] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 104.359593][ T6249] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 104.370542][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.375675][ T6249] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 104.436848][ T6259] loop3: detected capacity change from 0 to 2048 [ 104.464615][ T6249] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 104.473502][ T6249] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 104.504906][ T6249] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 104.526745][ T6259] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.548942][ T6249] ntfs: volume version 3.1. [ 104.568776][ T6249] ntfs: (device loop0): ntfs_check_logfile(): $LogFile is too small. [ 104.595685][ T6249] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 104.778076][ T6249] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x0 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 105.442333][ T6265] loop2: detected capacity change from 0 to 256 [ 105.562041][ T6209] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.470179][ T6291] FAULT_INJECTION: forcing a failure. [ 107.470179][ T6291] name failslab, interval 1, probability 0, space 0, times 1 [ 107.531680][ T6291] CPU: 0 PID: 6291 Comm: syz.3.82 Not tainted syzkaller #0 [ 107.538951][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.549021][ T6291] Call Trace: [ 107.552329][ T6291] [ 107.555267][ T6291] dump_stack_lvl+0x16c/0x230 [ 107.559965][ T6291] ? show_regs_print_info+0x20/0x20 [ 107.565180][ T6291] ? load_image+0x3b0/0x3b0 [ 107.569792][ T6291] ? __lock_acquire+0x7c80/0x7c80 [ 107.574842][ T6291] should_fail_ex+0x39d/0x4d0 [ 107.579543][ T6291] should_failslab+0x9/0x20 [ 107.584068][ T6291] slab_pre_alloc_hook+0x59/0x310 [ 107.589106][ T6291] ? rcu_is_watching+0x15/0xb0 [ 107.593880][ T6291] ? iovec_from_user+0x87/0x250 [ 107.598742][ T6291] ? iovec_from_user+0x87/0x250 [ 107.603598][ T6291] __kmem_cache_alloc_node+0x53/0x260 [ 107.609077][ T6291] ? iovec_from_user+0x87/0x250 [ 107.613961][ T6291] __kmalloc+0xa4/0x240 [ 107.618142][ T6291] iovec_from_user+0x87/0x250 [ 107.622849][ T6291] __import_iovec+0x13d/0x860 [ 107.627559][ T6291] import_iovec+0x73/0xa0 [ 107.631918][ T6291] do_writev+0x209/0x410 [ 107.636193][ T6291] ? do_readv+0x3e0/0x3e0 [ 107.640564][ T6291] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 107.646556][ T6291] ? lock_chain_count+0x20/0x20 [ 107.651405][ T6291] ? lockdep_hardirqs_on+0x98/0x150 [ 107.656595][ T6291] do_syscall_64+0x55/0xb0 [ 107.661003][ T6291] ? clear_bhb_loop+0x40/0x90 [ 107.665679][ T6291] ? clear_bhb_loop+0x40/0x90 [ 107.670350][ T6291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.676233][ T6291] RIP: 0033:0x7fcb71d8f749 [ 107.680900][ T6291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.700503][ T6291] RSP: 002b:00007fcb72ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 107.708911][ T6291] RAX: ffffffffffffffda RBX: 00007fcb71fe6090 RCX: 00007fcb71d8f749 [ 107.716873][ T6291] RDX: 0000000000000021 RSI: 0000200000000a40 RDI: 0000000000000004 [ 107.724837][ T6291] RBP: 00007fcb72ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 107.732801][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.741107][ T6291] R13: 00007fcb71fe6128 R14: 00007fcb71fe6090 R15: 00007ffcde1b7c28 [ 107.749080][ T6291] [ 107.848894][ T6294] warning: `syz.2.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.941525][ T6301] loop3: detected capacity change from 0 to 1024 [ 107.967661][ T6301] EXT4-fs: Ignoring removed orlov option [ 108.054857][ T6301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.140752][ T6301] Trying to write to read-only block-device loop3 [ 108.232655][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.337677][ T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.397323][ T6307] loop0: detected capacity change from 0 to 8 [ 108.434395][ T6307] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 108.452314][ T5794] udevd[5794]: incorrect cramfs checksum on /dev/loop0 [ 108.553724][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 109.962051][ T6298] cramfs: Error -3 while decompressing! [ 109.967968][ T6298] cramfs: ffffffff96fde388(26)->ffff888057a20000(4096) [ 109.975455][ T6298] cramfs: Error -3 while decompressing! [ 109.981055][ T6298] cramfs: ffffffff96fde3a2(26)->ffff888057a21000(4096) [ 109.988122][ T6298] cramfs: Error -3 while decompressing! [ 109.993829][ T6298] cramfs: ffffffff96fde3bc(16)->ffff888057a22000(4096) [ 110.000869][ T6298] cramfs: Error -3 while decompressing! [ 110.006958][ T6298] cramfs: ffffffff96fde388(26)->ffff888057a20000(4096) [ 110.038628][ T787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.056612][ T787] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.068617][ T787] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.075021][ T5794] udevd[5794]: incorrect cramfs checksum on /dev/loop0 [ 110.083657][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.099586][ T787] usb 3-1: Product: syz [ 110.120249][ T787] usb 3-1: Manufacturer: syz [ 110.132095][ T787] usb 3-1: SerialNumber: syz [ 110.386541][ T6316] loop0: detected capacity change from 0 to 256 [ 110.418481][ T6316] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.356338][ T6320] loop1: detected capacity change from 0 to 4096 [ 111.407467][ T6320] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 111.447130][ T6320] ntfs3: loop1: Failed to load $UpCase (-2). [ 111.460736][ T787] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 111.541719][ T787] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 111.559945][ T6320] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.606597][ T787] usb 3-1: USB disconnect, device number 3 [ 112.063770][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.548270][ T6340] loop2: detected capacity change from 0 to 2048 [ 112.619678][ T5794] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.016808][ T5784] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.173136][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 113.870821][ T5784] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 113.883877][ T5784] usb 2-1: config 0 has no interface number 0 [ 113.932614][ T5784] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 113.953725][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.961777][ T5784] usb 2-1: Product: syz [ 113.969971][ T5784] usb 2-1: Manufacturer: syz [ 113.976462][ T5784] usb 2-1: SerialNumber: syz [ 113.988795][ T5784] usb 2-1: config 0 descriptor?? [ 114.004363][ T5784] hub 2-1:0.217: bad descriptor, ignoring hub [ 114.010586][ T5784] hub: probe of 2-1:0.217 failed with error -5 [ 114.263909][ T5784] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 114.284013][ T5784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.294426][ T5784] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 114.303233][ T5784] usb 2-1: media controller created [ 114.328169][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.100938][ T5784] DVB: Unable to find symbol dib7000p_attach() [ 115.114493][ T5784] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 115.273830][ T5784] rc_core: IR keymap rc-dib0700-rc5 not found [ 115.285458][ T5784] Registered IR keymap rc-empty [ 115.294177][ T5784] dvb-usb: could not initialize remote control. [ 115.301099][ T5784] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 115.336108][ T5784] usb 2-1: USB disconnect, device number 3 [ 115.668280][ T6382] loop1: detected capacity change from 0 to 4096 [ 115.677873][ T6382] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.785037][ T5784] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 117.005606][ T6380] loop2: detected capacity change from 0 to 32768 [ 117.198524][ T6397] loop2: detected capacity change from 0 to 2048 [ 117.568888][ T6395] loop3: detected capacity change from 0 to 32768 [ 117.642387][ T5795] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.762487][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 118.589029][ T6409] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 118.761352][ T6409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.888884][ T6415] FAULT_INJECTION: forcing a failure. [ 118.888884][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 118.902146][ T6415] CPU: 1 PID: 6415 Comm: syz.1.108 Not tainted syzkaller #0 [ 118.909453][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.919525][ T6415] Call Trace: [ 118.922809][ T6415] [ 118.925753][ T6415] dump_stack_lvl+0x16c/0x230 [ 118.930480][ T6415] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 118.936148][ T6415] ? show_regs_print_info+0x20/0x20 [ 118.941360][ T6415] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 118.947102][ T6415] should_fail_ex+0x39d/0x4d0 [ 118.951803][ T6415] should_failslab+0x9/0x20 [ 118.956328][ T6415] slab_pre_alloc_hook+0x59/0x310 [ 118.961379][ T6415] ? mas_next_slot+0x915/0x980 [ 118.966177][ T6415] kmem_cache_alloc+0x5a/0x2e0 [ 118.971058][ T6415] ? vm_area_alloc+0x24/0x1d0 [ 118.975796][ T6415] vm_area_alloc+0x24/0x1d0 [ 118.980331][ T6415] mmap_region+0xc8a/0x2020 [ 118.984888][ T6415] ? file_mmap_ok+0x170/0x170 [ 118.989685][ T6415] ? cap_mmap_addr+0x169/0x2d0 [ 118.994517][ T6415] do_mmap+0x92f/0x10a0 [ 118.998719][ T6415] ? mlock_future_ok+0xf0/0xf0 [ 119.003567][ T6415] ? down_write+0x1f0/0x1f0 [ 119.008088][ T6415] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 119.014112][ T6415] vm_mmap_pgoff+0x1c0/0x400 [ 119.019253][ T6415] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 119.024912][ T6415] ? account_locked_vm+0x210/0x210 [ 119.030075][ T6415] ? ksys_mmap_pgoff+0xea/0x700 [ 119.035070][ T6415] ? __x64_sys_mmap+0x7a/0x130 [ 119.039866][ T6415] do_syscall_64+0x55/0xb0 [ 119.044305][ T6415] ? clear_bhb_loop+0x40/0x90 [ 119.049021][ T6415] ? clear_bhb_loop+0x40/0x90 [ 119.053725][ T6415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.059654][ T6415] RIP: 0033:0x7fa30938f783 [ 119.064106][ T6415] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 119.083753][ T6415] RSP: 002b:00007fa3075f5e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 119.092210][ T6415] RAX: ffffffffffffffda RBX: 0000000000000515 RCX: 00007fa30938f783 [ 119.100208][ T6415] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 119.108295][ T6415] RBP: 0000200000001182 R08: 00000000ffffffff R09: 0000000000000000 [ 119.116295][ T6415] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 119.124719][ T6415] R13: 00007fa3075f5ef0 R14: 00007fa3075f5eb0 R15: 00002000000006c0 [ 119.132728][ T6415] [ 119.409681][ T6411] veth3: entered promiscuous mode [ 119.459541][ T6411] bond1: (slave veth3): Enslaving as an active interface with a down link [ 119.515316][ T6413] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 121.469239][ T6432] loop0: detected capacity change from 0 to 2048 [ 121.520244][ T6432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.905524][ T6440] FAULT_INJECTION: forcing a failure. [ 121.905524][ T6440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.933347][ T6440] CPU: 1 PID: 6440 Comm: syz.2.118 Not tainted syzkaller #0 [ 121.940694][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.950785][ T6440] Call Trace: [ 121.954079][ T6440] [ 121.957018][ T6440] dump_stack_lvl+0x16c/0x230 [ 121.961724][ T6440] ? show_regs_print_info+0x20/0x20 [ 121.966942][ T6440] ? load_image+0x3b0/0x3b0 [ 121.971459][ T6440] ? __lock_acquire+0x7c80/0x7c80 [ 121.976495][ T6440] ? _copy_from_iter+0x181/0x1290 [ 121.981537][ T6440] should_fail_ex+0x39d/0x4d0 [ 121.986237][ T6440] prepare_alloc_pages+0x1e2/0x5f0 [ 121.991373][ T6440] __alloc_pages+0x127/0x460 [ 121.995983][ T6440] ? zone_statistics+0x170/0x170 [ 122.000947][ T6440] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 122.006439][ T6440] ? copy_page_from_iter+0xe8/0x100 [ 122.011656][ T6440] pipe_write+0x63b/0x1af0 [ 122.016127][ T6440] ? pipe_read+0x12a0/0x12a0 [ 122.020729][ T6440] ? end_current_label_crit_section+0x149/0x170 [ 122.026985][ T6440] ? common_file_perm+0x198/0x1f0 [ 122.032041][ T6440] vfs_write+0x43b/0x940 [ 122.036302][ T6440] ? file_end_write+0x250/0x250 [ 122.041173][ T6440] ? __fget_files+0x44a/0x4d0 [ 122.045873][ T6440] ? __fdget_pos+0x1d8/0x330 [ 122.050478][ T6440] ? ksys_write+0x75/0x250 [ 122.054914][ T6440] ksys_write+0x147/0x250 [ 122.059259][ T6440] ? __ia32_sys_read+0x90/0x90 [ 122.064044][ T6440] ? lockdep_hardirqs_on+0x98/0x150 [ 122.069341][ T6440] do_syscall_64+0x55/0xb0 [ 122.073849][ T6440] ? clear_bhb_loop+0x40/0x90 [ 122.078534][ T6440] ? clear_bhb_loop+0x40/0x90 [ 122.083221][ T6440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.089134][ T6440] RIP: 0033:0x7f7b22b8f749 [ 122.093576][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.113210][ T6440] RSP: 002b:00007f7b23a10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.121648][ T6440] RAX: ffffffffffffffda RBX: 00007f7b22de5fa0 RCX: 00007f7b22b8f749 [ 122.129636][ T6440] RDX: 00000000fffffecc RSI: 0000200000000000 RDI: 0000000000000004 [ 122.137639][ T6440] RBP: 00007f7b23a10090 R08: 0000000000000000 R09: 0000000000000000 [ 122.145628][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.153623][ T6440] R13: 00007f7b22de6038 R14: 00007f7b22de5fa0 R15: 00007ffc2d641de8 [ 122.161631][ T6440] [ 122.226288][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 122.312331][ T6438] loop1: detected capacity change from 0 to 8192 [ 122.388036][ T5794] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.559625][ T6447] loop2: detected capacity change from 0 to 4096 [ 122.666843][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 122.755575][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 122.779581][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 122.876137][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 123.318179][ T6463] loop0: detected capacity change from 0 to 2048 [ 123.341377][ T6463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.653769][ T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 124.857792][ T23] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 124.873856][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.903457][ T23] usb 3-1: config 0 descriptor?? [ 124.919814][ T6482] netlink: 36 bytes leftover after parsing attributes in process `syz.0.130'. [ 124.984255][ T6482] Bluetooth: MGMT ver 1.22 [ 125.023217][ T6484] loop3: detected capacity change from 0 to 7 [ 125.040915][ T6484] Dev loop3: unable to read RDB block 7 [ 125.046975][ T6484] loop3: unable to read partition table [ 125.052870][ T6484] loop3: partition table beyond EOD, truncated [ 125.063327][ T6484] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 125.336276][ T6486] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3183071107 (203716550848 ns) > initial count (190329080192 ns). Using initial count to start timer. [ 125.461238][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 125.518312][ T6497] FAULT_INJECTION: forcing a failure. [ 125.518312][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 125.531277][ T6497] CPU: 1 PID: 6497 Comm: syz.1.135 Not tainted syzkaller #0 [ 125.533231][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 125.538569][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.538592][ T6497] Call Trace: [ 125.538600][ T6497] [ 125.538607][ T6497] dump_stack_lvl+0x16c/0x230 [ 125.538637][ T6497] ? show_regs_print_info+0x20/0x20 [ 125.538658][ T6497] ? load_image+0x3b0/0x3b0 [ 125.538673][ T6497] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 125.538692][ T6497] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 125.538718][ T6497] should_fail_ex+0x39d/0x4d0 [ 125.538743][ T6497] should_failslab+0x9/0x20 [ 125.538764][ T6497] slab_pre_alloc_hook+0x59/0x310 [ 125.538800][ T6497] kmem_cache_alloc_node+0x60/0x330 [ 125.538821][ T6497] ? __alloc_skb+0x108/0x2c0 [ 125.538847][ T6497] __alloc_skb+0x108/0x2c0 [ 125.538869][ T6497] ? __neigh_notify+0x29/0x300 [ 125.538892][ T6497] __neigh_notify+0x15c/0x300 [ 125.538916][ T6497] __neigh_update+0x1e4a/0x2520 [ 125.538959][ T6497] ndisc_update+0x52/0xf0 [ 125.538989][ T6497] ndisc_recv_na+0xa10/0x10f0 [ 125.539019][ T6497] ? ndisc_recv_ns+0x1160/0x1160 [ 125.539060][ T6497] ? ndisc_rcv+0x4fe/0x720 [ 125.539081][ T6497] icmpv6_rcv+0x1379/0x1c10 [ 125.539115][ T6497] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 125.539157][ T6497] ? ip6_input_finish+0xd9/0x2c0 [ 125.539176][ T6497] ip6_input_finish+0x184/0x2c0 [ 125.539199][ T6497] NF_HOOK+0x303/0x390 [ 125.539220][ T6497] ? ip6_input+0xa0/0xa0 [ 125.539238][ T6497] ? NF_HOOK+0x9b/0x390 [ 125.539255][ T6497] ? ip6_rcv_core+0x1740/0x1740 [ 125.539275][ T6497] ? ip6_input+0xa0/0xa0 [ 125.692485][ T6497] ? ip6_rcv_finish+0x19a/0x230 [ 125.697343][ T6497] NF_HOOK+0x303/0x390 [ 125.701407][ T6497] ? sk_setup_caps+0xa10/0xa10 [ 125.706165][ T6497] ? net_zcopy_put_abort+0x90/0x90 [ 125.711269][ T6497] ? NF_HOOK+0x9b/0x390 [ 125.715417][ T6497] ? ip6_rcv_core+0x1740/0x1740 [ 125.720261][ T6497] ? net_zcopy_put_abort+0x90/0x90 [ 125.725370][ T6497] ? ip6_rcv_finish_core+0x420/0x420 [ 125.730650][ T6497] __netif_receive_skb+0xcc/0x290 [ 125.735764][ T6497] ? netif_receive_skb+0x106/0x6f0 [ 125.740892][ T6497] netif_receive_skb+0x1bc/0x6f0 [ 125.745837][ T6497] ? enqueue_to_backlog+0xe30/0xe30 [ 125.751034][ T6497] ? tun_rx_batched+0x161/0x730 [ 125.755883][ T6497] tun_rx_batched+0x1ba/0x730 [ 125.760560][ T6497] ? pskb_may_pull+0xf0/0xf0 [ 125.765144][ T6497] ? __local_bh_enable_ip+0x12e/0x1c0 [ 125.770593][ T6497] ? lockdep_hardirqs_on+0x98/0x150 [ 125.775928][ T6497] ? read_lock_is_recursive+0x20/0x20 [ 125.781335][ T6497] ? __local_bh_enable_ip+0x12e/0x1c0 [ 125.786724][ T6497] ? _local_bh_enable+0xa0/0xa0 [ 125.791583][ T6497] tun_get_user+0x283f/0x3bf0 [ 125.796257][ T6497] ? tun_get_user+0x2475/0x3bf0 [ 125.801546][ T6497] ? tun_get_user+0x637/0x3bf0 [ 125.806322][ T6497] ? aa_file_perm+0x3e8/0xec0 [ 125.811009][ T6497] ? rcu_read_unlock+0xa0/0xa0 [ 125.815888][ T6497] ? tun_get+0x1c/0x2e0 [ 125.820069][ T6497] ? __lock_acquire+0x7c80/0x7c80 [ 125.825112][ T6497] ? tun_get+0x1c/0x2e0 [ 125.829291][ T6497] tun_chr_write_iter+0x119/0x200 [ 125.834313][ T6497] vfs_write+0x43b/0x940 [ 125.838555][ T6497] ? file_end_write+0x250/0x250 [ 125.843418][ T6497] ? __fget_files+0x44a/0x4d0 [ 125.848117][ T6497] ? __fdget_pos+0x1d8/0x330 [ 125.852896][ T6497] ? ksys_write+0x75/0x250 [ 125.857312][ T6497] ksys_write+0x147/0x250 [ 125.861650][ T6497] ? __ia32_sys_read+0x90/0x90 [ 125.866417][ T6497] ? lockdep_hardirqs_on+0x98/0x150 [ 125.871615][ T6497] do_syscall_64+0x55/0xb0 [ 125.876026][ T6497] ? clear_bhb_loop+0x40/0x90 [ 125.880699][ T6497] ? clear_bhb_loop+0x40/0x90 [ 125.885391][ T6497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.891303][ T6497] RIP: 0033:0x7fa30938e1ff [ 125.895723][ T6497] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 125.915337][ T6497] RSP: 002b:00007fa30a170000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 125.923744][ T6497] RAX: ffffffffffffffda RBX: 00007fa3095e5fa0 RCX: 00007fa30938e1ff [ 125.931727][ T6497] RDX: 0000000000000056 RSI: 0000200000000880 RDI: 00000000000000c8 [ 125.939697][ T6497] RBP: 00007fa30a170090 R08: 0000000000000000 R09: 0000000000000000 [ 125.947668][ T6497] R10: 0000000000000056 R11: 0000000000000293 R12: 0000000000000001 [ 125.955735][ T6497] R13: 00007fa3095e6038 R14: 00007fa3095e5fa0 R15: 00007ffed0bc6218 [ 125.963717][ T6497] [ 126.414196][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.718440][ T42] usb 2-1: device descriptor read/64, error -71 [ 126.993737][ T42] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.044830][ T23] pegasus: probe of 3-1:0.0 failed with error -110 [ 127.164141][ T42] usb 2-1: device descriptor read/64, error -71 [ 127.306386][ T42] usb usb2-port1: attempt power cycle [ 127.386409][ T5846] usb 3-1: USB disconnect, device number 4 [ 127.841081][ T42] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.927145][ T42] usb 2-1: device descriptor read/8, error -71 [ 128.255071][ T42] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.571374][ T42] usb 2-1: device descriptor read/8, error -71 [ 128.773293][ T42] usb usb2-port1: unable to enumerate USB device [ 128.832433][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 128.904793][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 129.227755][ T6541] loop1: detected capacity change from 0 to 512 [ 129.285952][ T5794] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.851395][ T6570] mmap: syz.3.159 (6570) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.617998][ T6572] loop1: detected capacity change from 0 to 1024 [ 132.663839][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.293270][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 134.300585][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.304031][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.307080][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.326617][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.364983][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.473107][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.500458][ T8] usb 1-1: config 0 descriptor?? [ 134.516846][ T8] hub 1-1:0.0: USB hub found [ 134.640564][ T6590] loop1: detected capacity change from 0 to 256 [ 134.688323][ T5794] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.757881][ T8] hub 1-1:0.0: 1 port detected [ 135.226041][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 135.245988][ T8] hub 1-1:0.0: activate --> -90 [ 135.302319][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 135.681780][ T6603] bridge1: entered promiscuous mode [ 135.689113][ T6603] bridge1: entered allmulticast mode [ 135.701730][ T6603] team0: Port device bridge1 added [ 135.717822][ T6603] bridge0: port 3(team0) entered blocking state [ 135.728167][ T6603] bridge0: port 3(team0) entered disabled state [ 135.736734][ T6603] team0: entered allmulticast mode [ 135.742085][ T6603] team_slave_0: entered allmulticast mode [ 135.752110][ T6603] team_slave_1: entered allmulticast mode [ 135.763134][ T6603] team0: entered promiscuous mode [ 135.773476][ T6603] team_slave_0: entered promiscuous mode [ 135.782404][ T6603] team_slave_1: entered promiscuous mode [ 135.797414][ T6603] bridge0: port 3(team0) entered blocking state [ 135.804086][ T6603] bridge0: port 3(team0) entered forwarding state [ 135.906925][ T9] usb 1-1: USB disconnect, device number 4 [ 135.912843][ T8] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 135.925571][ T8] hub_port_connect: 15 callbacks suppressed [ 135.925585][ T8] usb 1-1-port1: connect-debounce failed [ 136.352163][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 139.990036][ T6635] FAULT_INJECTION: forcing a failure. [ 139.990036][ T6635] name failslab, interval 1, probability 0, space 0, times 0 [ 140.004568][ T6635] CPU: 1 PID: 6635 Comm: syz.1.178 Not tainted syzkaller #0 [ 140.011899][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.021965][ T6635] Call Trace: [ 140.025255][ T6635] [ 140.028194][ T6635] dump_stack_lvl+0x16c/0x230 [ 140.032891][ T6635] ? show_regs_print_info+0x20/0x20 [ 140.038103][ T6635] ? load_image+0x3b0/0x3b0 [ 140.042623][ T6635] ? __might_sleep+0xe0/0xe0 [ 140.047225][ T6635] ? __lock_acquire+0x7c80/0x7c80 [ 140.052518][ T6635] ? mark_lock+0x94/0x320 [ 140.056868][ T6635] should_fail_ex+0x39d/0x4d0 [ 140.061566][ T6635] should_failslab+0x9/0x20 [ 140.066089][ T6635] slab_pre_alloc_hook+0x59/0x310 [ 140.071138][ T6635] kmem_cache_alloc+0x5a/0x2e0 [ 140.075915][ T6635] ? mas_alloc_nodes+0x2f8/0x8c0 [ 140.080877][ T6635] mas_alloc_nodes+0x2f8/0x8c0 [ 140.085757][ T6635] mas_preallocate+0xa44/0x1190 [ 140.090631][ T6635] ? lockdep_softirqs_off+0x430/0x430 [ 140.096014][ T6635] ? mas_destroy+0x1fc0/0x1fc0 [ 140.100804][ T6635] ? vma_iter_config+0xe6/0x270 [ 140.105668][ T6635] __split_vma+0x2dc/0xc00 [ 140.110114][ T6635] ? mmap_write_unlock+0x160/0x160 [ 140.115247][ T6635] ? tomoyo_check_open_permission+0x16e/0x3c0 [ 140.121344][ T6635] do_vmi_align_munmap+0x377/0x1660 [ 140.126580][ T6635] ? __lock_acquire+0x1260/0x7c80 [ 140.131663][ T6635] ? do_vmi_munmap+0x2d0/0x2d0 [ 140.136458][ T6635] ? mtree_range_walk+0x674/0x7c0 [ 140.141521][ T6635] ? mas_find_setup+0x493/0x590 [ 140.146404][ T6635] do_vmi_munmap+0x252/0x2d0 [ 140.151015][ T6635] mmap_region+0x741/0x2020 [ 140.155533][ T6635] ? verify_lock_unused+0x140/0x140 [ 140.160759][ T6635] ? file_mmap_ok+0x170/0x170 [ 140.165456][ T6635] ? mtree_load+0xef/0x810 [ 140.169883][ T6635] ? cap_mmap_addr+0x169/0x2d0 [ 140.174672][ T6635] ? file_mmap_ok+0x11c/0x170 [ 140.179365][ T6635] do_mmap+0x92f/0x10a0 [ 140.183718][ T6635] ? mlock_future_ok+0xf0/0xf0 [ 140.188505][ T6635] __se_sys_remap_file_pages+0x782/0x840 [ 140.194165][ T6635] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 140.199912][ T6635] ? lock_chain_count+0x20/0x20 [ 140.204793][ T6635] ? lockdep_hardirqs_on+0x98/0x150 [ 140.210002][ T6635] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 140.215741][ T6635] do_syscall_64+0x55/0xb0 [ 140.220173][ T6635] ? clear_bhb_loop+0x40/0x90 [ 140.224862][ T6635] ? clear_bhb_loop+0x40/0x90 [ 140.229553][ T6635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.235458][ T6635] RIP: 0033:0x7fa30938f749 [ 140.239886][ T6635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.259520][ T6635] RSP: 002b:00007fa30a14f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 140.268053][ T6635] RAX: ffffffffffffffda RBX: 00007fa3095e6090 RCX: 00007fa30938f749 [ 140.276047][ T6635] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 140.284035][ T6635] RBP: 00007fa30a14f090 R08: 0000000000002000 R09: 0000000000000000 [ 140.292024][ T6635] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 140.300013][ T6635] R13: 00007fa3095e6128 R14: 00007fa3095e6090 R15: 00007ffed0bc6218 [ 140.308011][ T6635] [ 140.355330][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 140.367965][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 140.587844][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 141.087820][ T6656] loop0: detected capacity change from 0 to 256 [ 141.127554][ T6656] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.843834][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.930886][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 145.200410][ T6682] FAULT_INJECTION: forcing a failure. [ 145.200410][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 145.223720][ T6682] CPU: 0 PID: 6682 Comm: syz.2.189 Not tainted syzkaller #0 [ 145.231066][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.241131][ T6682] Call Trace: [ 145.244422][ T6682] [ 145.247356][ T6682] dump_stack_lvl+0x16c/0x230 [ 145.252057][ T6682] ? show_regs_print_info+0x20/0x20 [ 145.257308][ T6682] ? load_image+0x3b0/0x3b0 [ 145.261848][ T6682] ? __lock_acquire+0x7c80/0x7c80 [ 145.266988][ T6682] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.273095][ T6682] should_fail_ex+0x39d/0x4d0 [ 145.277802][ T6682] should_failslab+0x9/0x20 [ 145.282330][ T6682] slab_pre_alloc_hook+0x59/0x310 [ 145.287390][ T6682] ? usb_alloc_urb+0x46/0x140 [ 145.292156][ T6682] ? usb_alloc_urb+0x46/0x140 [ 145.296865][ T6682] __kmem_cache_alloc_node+0x53/0x260 [ 145.302278][ T6682] ? usb_alloc_urb+0x46/0x140 [ 145.306995][ T6682] __kmalloc+0xa4/0x240 [ 145.311183][ T6682] usb_alloc_urb+0x46/0x140 [ 145.315716][ T6682] usb_control_msg+0x119/0x3e0 [ 145.320518][ T6682] hub_ext_port_status+0x103/0x6d0 [ 145.325665][ T6682] hub_activate+0x77b/0x1a60 [ 145.330284][ T6682] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 145.336304][ T6682] hub_resume+0xa5/0x3b0 [ 145.340574][ T6682] ? hub_suspend+0x980/0x980 [ 145.345189][ T6682] usb_resume_both+0x5c3/0xad0 [ 145.349995][ T6682] ? autosuspend_check+0x5c0/0x5c0 [ 145.355135][ T6682] __rpm_callback+0x2eb/0x7e0 [ 145.359837][ T6682] ? read_tsc+0x9/0x20 [ 145.364011][ T6682] ? dev_pm_disable_wake_irq_check+0xb5/0x160 [ 145.370107][ T6682] rpm_resume+0x10ad/0x1a10 [ 145.374633][ T6682] ? autosuspend_check+0x5c0/0x5c0 [ 145.379783][ T6682] ? __pm_runtime_resume+0x170/0x170 [ 145.385095][ T6682] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 145.390493][ T6682] ? _raw_spin_lock+0x40/0x40 [ 145.395188][ T6682] ? bus_find_device+0x2cd/0x320 [ 145.395360][ T6685] loop0: detected capacity change from 0 to 2048 [ 145.400123][ T6682] ? device_match_fwnode+0x30/0x30 [ 145.400174][ T6682] ? bus_for_each_dev+0x2a0/0x2a0 [ 145.416643][ T6682] __pm_runtime_resume+0x11c/0x170 [ 145.421779][ T6682] usb_autoresume_device+0x23/0x60 [ 145.426917][ T6682] usbdev_open+0x1ae/0x760 [ 145.431367][ T6682] ? __lock_acquire+0x7c80/0x7c80 [ 145.436410][ T6682] ? do_raw_spin_lock+0x121/0x2c0 [ 145.441541][ T6682] ? usbdev_mmap+0x920/0x920 [ 145.446153][ T6682] ? do_raw_spin_unlock+0x121/0x230 [ 145.451373][ T6682] chrdev_open+0x59e/0x670 [ 145.455806][ T6682] ? cd_forget+0x160/0x160 [ 145.460241][ T6682] ? fsnotify_perm+0x3ed/0x5e0 [ 145.465026][ T6682] ? cd_forget+0x160/0x160 [ 145.469465][ T6682] do_dentry_open+0x8c6/0x1500 [ 145.474271][ T6682] path_openat+0x274b/0x3190 [ 145.478904][ T6682] ? __kasan_slab_alloc+0x6c/0x80 [ 145.483954][ T6682] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.490044][ T6682] ? verify_lock_unused+0x140/0x140 [ 145.495271][ T6682] ? do_filp_open+0x3d0/0x3d0 [ 145.499970][ T6682] ? __virt_addr_valid+0x18c/0x540 [ 145.505093][ T6682] do_filp_open+0x1c5/0x3d0 [ 145.509597][ T6682] ? vfs_tmpfile+0x490/0x490 [ 145.514200][ T6682] ? _raw_spin_unlock+0x28/0x40 [ 145.519044][ T6682] ? alloc_fd+0x58f/0x630 [ 145.523371][ T6682] do_sys_openat2+0x12c/0x1c0 [ 145.528042][ T6682] ? do_sys_open+0xe0/0xe0 [ 145.532451][ T6682] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 145.538439][ T6682] ? lock_chain_count+0x20/0x20 [ 145.543547][ T6682] ? lock_chain_count+0x20/0x20 [ 145.548393][ T6682] __x64_sys_openat+0x139/0x160 [ 145.553338][ T6682] do_syscall_64+0x55/0xb0 [ 145.557762][ T6682] ? clear_bhb_loop+0x40/0x90 [ 145.562431][ T6682] ? clear_bhb_loop+0x40/0x90 [ 145.567106][ T6682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.572992][ T6682] RIP: 0033:0x7f7b22b8df90 [ 145.577399][ T6682] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 145.597000][ T6682] RSP: 002b:00007f7b23a0fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 145.605409][ T6682] RAX: ffffffffffffffda RBX: 0000000000044680 RCX: 00007f7b22b8df90 [ 145.613393][ T6682] RDX: 0000000000044680 RSI: 00007f7b23a0fc10 RDI: 00000000ffffff9c [ 145.621395][ T6682] RBP: 00007f7b23a0fc10 R08: 0000000000000000 R09: 0000000000000000 [ 145.629374][ T6682] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 145.637349][ T6682] R13: 00007f7b22de6038 R14: 00007f7b22de5fa0 R15: 00007ffc2d641de8 [ 145.645394][ T6682] [ 145.660739][ T6682] hub 7-0:1.0: hub_ext_port_status failed (err = -12) [ 145.754010][ T6685] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=385, location=385 [ 145.763791][ T6685] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 145.911939][ T6685] loop0: detected capacity change from 0 to 2048 [ 145.977439][ T6685] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=385, location=385 [ 146.011778][ T6685] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 146.206715][ T6685] loop0: detected capacity change from 0 to 2048 [ 146.249448][ T6685] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=385, location=385 [ 146.265441][ T6685] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 146.422773][ T6685] loop0: detected capacity change from 0 to 2048 [ 146.442551][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 146.508768][ T6685] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=385, location=385 [ 146.533709][ T6685] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 146.610522][ T6685] loop0: detected capacity change from 0 to 2048 [ 146.665045][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 146.745773][ T6685] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=385, location=385 [ 146.764758][ T6685] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 146.859994][ T6697] bridge0: port 3(netdevsim2) entered blocking state [ 146.867182][ T6697] bridge0: port 3(netdevsim2) entered disabled state [ 146.875952][ T6697] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 146.891741][ T6697] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 146.901320][ T6697] bridge0: port 3(netdevsim2) entered blocking state [ 146.908516][ T6697] bridge0: port 3(netdevsim2) entered forwarding state [ 147.488718][ T6685] loop0: detected capacity change from 0 to 2048 [ 147.590287][ T6685] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=385, location=385 [ 147.620419][ T6685] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 147.678277][ T6706] loop3: detected capacity change from 0 to 8 [ 147.849051][ T6685] loop0: detected capacity change from 0 to 2048 [ 147.886155][ T6213] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.919763][ T6685] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=385, location=385 [ 147.984021][ T6685] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 148.253266][ T6712] loop3: detected capacity change from 0 to 256 [ 148.623121][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 148.851336][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 149.094109][ T6722] Bluetooth: MGMT ver 1.22 [ 149.204864][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 149.268900][ T6728] [U] 4Ocߖp=fD6lgE_bLdR [ 149.274574][ T6728] [U] !=UmsSV$ <ɔ:1dA0}Yr򲏄&̫3O2Ͽ@ [ 149.282830][ T6728] [U] #`t%R`.*S0{"v=>'|F/}L;yZc]d}B [敏*c'w&.嶑HRv!H;9WM [ 149.305751][ T6728] [U] fŚ)Š]ef5a#tR9ƨAnkXAN [ 149.305811][ T6728] [U] R^p7)Ys!!AF=K<{6qRː(V]s>_SݬEMYVD] ;W=g(nm$n [ 149.305866][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.413687][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.605725][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.615757][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 149.628052][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.640671][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 149.643818][ T788] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.653446][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 149.678477][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.690247][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.701091][ T9] usb 2-1: Product: syz [ 149.709350][ T9] usb 2-1: Manufacturer: syz [ 149.727396][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 149.732783][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 149.757622][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 149.766489][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 149.883855][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 149.927272][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 149.941102][ T788] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 149.951799][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.963202][ T9] usb 2-1: USB disconnect, device number 8 [ 149.968089][ T788] usb 1-1: config 0 descriptor?? [ 150.226147][ T6727] [U] bcsV\+ ҄i1m$eMk^)WNiLTt(y>yj8vbc [ 150.248236][ T788] usbhid 1-1:0.0: can't add hid device: -71 [ 150.261758][ T788] usbhid: probe of 1-1:0.0 failed with error -71 [ 150.298909][ T788] usb 1-1: USB disconnect, device number 5 [ 150.577303][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 151.677044][ T6760] FAULT_INJECTION: forcing a failure. [ 151.677044][ T6760] name failslab, interval 1, probability 0, space 0, times 0 [ 151.690070][ T6760] CPU: 1 PID: 6760 Comm: syz.2.211 Not tainted syzkaller #0 [ 151.697386][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.707464][ T6760] Call Trace: [ 151.710857][ T6760] [ 151.713809][ T6760] dump_stack_lvl+0x16c/0x230 [ 151.718515][ T6760] ? show_regs_print_info+0x20/0x20 [ 151.723754][ T6760] ? load_image+0x3b0/0x3b0 [ 151.728280][ T6760] ? __lock_acquire+0x7c80/0x7c80 [ 151.733333][ T6760] should_fail_ex+0x39d/0x4d0 [ 151.738039][ T6760] should_failslab+0x9/0x20 [ 151.742567][ T6760] slab_pre_alloc_hook+0x59/0x310 [ 151.747620][ T6760] kmem_cache_alloc+0x5a/0x2e0 [ 151.752403][ T6760] ? vm_area_alloc+0x10e/0x1d0 [ 151.757196][ T6760] vm_area_alloc+0x10e/0x1d0 [ 151.761811][ T6760] mmap_region+0xc8a/0x2020 [ 151.766354][ T6760] ? file_mmap_ok+0x170/0x170 [ 151.771059][ T6760] ? cap_mmap_addr+0x169/0x2d0 [ 151.775857][ T6760] do_mmap+0x92f/0x10a0 [ 151.780042][ T6760] ? mlock_future_ok+0xf0/0xf0 [ 151.784825][ T6760] ? down_write+0x1f0/0x1f0 [ 151.789354][ T6760] vm_mmap_pgoff+0x1c0/0x400 [ 151.793992][ T6760] ? account_locked_vm+0x210/0x210 [ 151.799129][ T6760] ? ksys_mmap_pgoff+0xea/0x700 [ 151.804004][ T6760] ? __x64_sys_mmap+0x7a/0x130 [ 151.808797][ T6760] do_syscall_64+0x55/0xb0 [ 151.813234][ T6760] ? clear_bhb_loop+0x40/0x90 [ 151.817930][ T6760] ? clear_bhb_loop+0x40/0x90 [ 151.822647][ T6760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.828559][ T6760] RIP: 0033:0x7f7b22b8f783 [ 151.833004][ T6760] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 151.852629][ T6760] RSP: 002b:00007f7b23a0fe18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 151.861107][ T6760] RAX: ffffffffffffffda RBX: 0000000000009e82 RCX: 00007f7b22b8f783 [ 151.869105][ T6760] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 151.877110][ T6760] RBP: 000020000000a182 R08: 00000000ffffffff R09: 0000000000000000 [ 151.885115][ T6760] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 151.893123][ T6760] R13: 00007f7b23a0fef0 R14: 00007f7b23a0feb0 R15: 0000200000000180 [ 151.901144][ T6760] [ 151.904210][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.443625][ C0] sched: RT throttling activated [ 154.641655][ T6768] netlink: 88 bytes leftover after parsing attributes in process `syz.0.215'. [ 154.685859][ T6766] loop2: detected capacity change from 0 to 1024 [ 155.376549][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 155.723283][ T6768] loop0: detected capacity change from 0 to 32768 [ 157.502181][ T6805] FAULT_INJECTION: forcing a failure. [ 157.502181][ T6805] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 157.524570][ T6801] loop0: detected capacity change from 0 to 4096 [ 157.534252][ T6805] CPU: 1 PID: 6805 Comm: syz.2.223 Not tainted syzkaller #0 [ 157.541598][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.551677][ T6805] Call Trace: [ 157.554969][ T6805] [ 157.557910][ T6805] dump_stack_lvl+0x16c/0x230 [ 157.562614][ T6805] ? show_regs_print_info+0x20/0x20 [ 157.567837][ T6805] ? load_image+0x3b0/0x3b0 [ 157.572358][ T6805] ? __might_fault+0xaa/0x120 [ 157.577045][ T6805] ? __lock_acquire+0x7c80/0x7c80 [ 157.582086][ T6805] should_fail_ex+0x39d/0x4d0 [ 157.586790][ T6805] _copy_from_user+0x2f/0xe0 [ 157.591405][ T6805] ___sys_recvmsg+0x12f/0x510 [ 157.596192][ T6805] ? __sys_recvmsg+0x270/0x270 [ 157.600995][ T6805] ? __lock_acquire+0x7c80/0x7c80 [ 157.606052][ T6805] ? __might_fault+0xc6/0x120 [ 157.610752][ T6805] ? __might_fault+0xaa/0x120 [ 157.615460][ T6805] do_recvmmsg+0x360/0x7d0 [ 157.619901][ T6805] ? file_end_write+0x159/0x250 [ 157.624764][ T6805] ? __sys_recvmmsg+0x280/0x280 [ 157.629625][ T6805] ? vfs_write+0x586/0x940 [ 157.634060][ T6805] ? mutex_unlock+0x10/0x10 [ 157.638561][ T6805] ? __fget_files+0x44a/0x4d0 [ 157.643238][ T6805] __x64_sys_recvmmsg+0x191/0x240 [ 157.648260][ T6805] ? do_recvmmsg+0x7d0/0x7d0 [ 157.652841][ T6805] ? lockdep_hardirqs_on+0x98/0x150 [ 157.658032][ T6805] do_syscall_64+0x55/0xb0 [ 157.662452][ T6805] ? clear_bhb_loop+0x40/0x90 [ 157.667124][ T6805] ? clear_bhb_loop+0x40/0x90 [ 157.671795][ T6805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.677704][ T6805] RIP: 0033:0x7f7b22b8f749 [ 157.682113][ T6805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.701726][ T6805] RSP: 002b:00007f7b239ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 157.710418][ T6805] RAX: ffffffffffffffda RBX: 00007f7b22de6090 RCX: 00007f7b22b8f749 [ 157.718389][ T6805] RDX: 00000000040001af RSI: 0000200000000a40 RDI: 0000000000000007 [ 157.726362][ T6805] RBP: 00007f7b239ef090 R08: 0000000000000000 R09: 0000000000000000 [ 157.734326][ T6805] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000001 [ 157.742295][ T6805] R13: 00007f7b22de6128 R14: 00007f7b22de6090 R15: 00007ffc2d641de8 [ 157.750280][ T6805] [ 157.857023][ T6801] ntfs3: loop0: failed to convert "0080" to maccenteuro [ 157.879660][ T6801] ntfs3: loop0: failed to convert name for inode 1e. [ 159.897742][ T6836] loop0: detected capacity change from 0 to 256 [ 159.979664][ T5794] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.195053][ T6843] loop3: detected capacity change from 0 to 256 [ 160.291125][ T5795] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.541221][ T6838] loop2: detected capacity change from 0 to 32768 [ 164.107069][ T6880] loop3: detected capacity change from 0 to 128 [ 165.385588][ T5794] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.436045][ T6880] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 165.872041][ T6877] loop1: detected capacity change from 0 to 32768 [ 166.123420][ T5794] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.606160][ T6887] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 167.789403][ T6918] loop1: detected capacity change from 0 to 128 [ 167.880599][ T5794] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.393703][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 170.512470][ T6940] loop2: detected capacity change from 0 to 32768 [ 170.598874][ T5794] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.609838][ T9] usb 4-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 170.634113][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.643333][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 170.652517][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.670662][ T9] usb 4-1: config 0 descriptor?? [ 170.978301][ T6947] loop3: detected capacity change from 0 to 4096 [ 171.034727][ T5795] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.920488][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.001259][ T6966] loop0: detected capacity change from 0 to 1024 [ 172.034458][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.073032][ T6970] i2c i2c-0: Invalid block write size 34 [ 172.186905][ T6966] hfsplus: extend alloc file! (16384,256,150995124) [ 172.212264][ T6966] hfsplus: failed to extend attributes file [ 173.469981][ T23] usb 4-1: USB disconnect, device number 2 [ 174.933737][ T6996] netlink: 68 bytes leftover after parsing attributes in process `syz.2.269'. [ 174.983515][ T6996] loop2: detected capacity change from 0 to 512 [ 175.087064][ T5794] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.700180][ T7008] bridge1: entered promiscuous mode [ 175.705499][ T7008] bridge1: entered allmulticast mode [ 180.354678][ T7037] nvme_fabrics: missing parameter 'transport=%s' [ 180.428979][ T7037] nvme_fabrics: missing parameter 'nqn=%s' [ 180.572071][ T7044] loop3: detected capacity change from 0 to 4096 [ 180.878816][ T7045] loop3: detected capacity change from 0 to 256 [ 180.973871][ T7050] loop2: detected capacity change from 0 to 8 [ 181.240469][ T7057] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 183.603546][ T7053] loop1: detected capacity change from 0 to 32768 [ 184.452568][ T7081] netlink: 'syz.1.293': attribute type 4 has an invalid length. [ 185.124721][ T7094] kvm: kvm [7093]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 185.134966][ T7094] kvm: kvm [7093]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 185.145958][ T7094] kvm: kvm [7093]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 185.157072][ T7094] kvm: kvm [7093]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 185.166341][ T7094] kvm: kvm [7093]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 185.185965][ T7095] loop3: detected capacity change from 0 to 1764 [ 185.230730][ T7094] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 185.496523][ T7099] netlink: 'syz.1.297': attribute type 1 has an invalid length. [ 186.086059][ T7109] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.298'. [ 186.186515][ T7100] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 186.238211][ T7100] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 186.322540][ T7100] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 186.335252][ T7100] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 186.405340][ T7100] bond1: (slave geneve2): making interface the new active one [ 186.427853][ T7100] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 186.823706][ T5846] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.893744][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 187.053729][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 187.064860][ T9] usb 2-1: device descriptor read/64, error -71 [ 187.066815][ T5846] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.087690][ T5846] usb 3-1: config 0 has no interface number 0 [ 187.099802][ T5846] usb 3-1: config 0 interface 1 has no altsetting 0 [ 187.116109][ T5846] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 187.129105][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.145013][ T5846] usb 3-1: Product: syz [ 187.155033][ T5846] usb 3-1: Manufacturer: syz [ 187.163811][ T5846] usb 3-1: SerialNumber: syz [ 187.170992][ T5846] usb 3-1: config 0 descriptor?? [ 187.381731][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.301'. [ 187.604097][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.623158][ T7122] loop2: detected capacity change from 0 to 16 [ 187.661525][ T7122] erofs: (device loop2): mounted with root inode @ nid 36. [ 187.766595][ T9] usb 2-1: device descriptor read/64, error -71 [ 187.830938][ T5846] i2c-cp2615: probe of 3-1:0.1 failed with error -71 [ 187.862424][ T5846] usb 3-1: USB disconnect, device number 6 [ 187.924450][ T9] usb usb2-port1: attempt power cycle [ 188.433683][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 188.484652][ T9] usb 2-1: device descriptor read/8, error -71 [ 189.221079][ T7149] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.307'. [ 190.006903][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 190.801057][ T9] usb 2-1: device descriptor read/8, error -71 [ 190.964110][ T9] usb usb2-port1: unable to enumerate USB device [ 191.156364][ T7159] loop0: detected capacity change from 0 to 64 [ 191.295786][ T5794] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.936763][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 191.942957][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 191.949335][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 192.493942][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 192.761060][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 192.774333][ T9] usb 4-1: config 0 has no interface number 0 [ 192.791342][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 192.857282][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 192.898406][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.931668][ T9] usb 4-1: Product: syz [ 192.967447][ T9] usb 4-1: Manufacturer: syz [ 192.972096][ T9] usb 4-1: SerialNumber: syz [ 193.066100][ T9] usb 4-1: config 0 descriptor?? [ 193.230218][ T7183] fuse: Bad value for 'fd' [ 193.391581][ T7183] loop0: detected capacity change from 0 to 8192 [ 193.863362][ T7181] loop2: detected capacity change from 0 to 32768 [ 193.973869][ T787] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.979097][ T6213] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (6213) [ 194.178753][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 194.210527][ T787] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 194.222753][ T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.246301][ T787] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.338061][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.481014][ T787] usb 1-1: Manufacturer: 뮡䔷࡮幯국㹄耉믬͸Ꜫ⧸ᓵ懓ꏰޠ燋홁떄ꋐ虤屿㆗ဦ泹䧮쬃衳ᘝ瀰硗鯾萎Ѡ닞ㄮ앯ࢉ嘳ᴧ꼭㖀慼ᆬꓛ燀掲✍๭ងᆃ䖙蠀ᅵ宺玊ﴰ䮃䏋观ョァ켇媁훫꦳㜱૷⥤辎嘕ଥ蠏퀙룢椷㴘喐 [ 194.593989][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.614036][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.669044][ T9] CoreChips: probe of 4-1:0.41 failed with error -71 [ 194.809294][ T9] usb 4-1: USB disconnect, device number 3 [ 194.827830][ T787] usb 1-1: SerialNumber: Ꝁ࿃㑗ꀋꊷꥴ﨡澜뱌搨ἑ쉝걣ⳛ쌉잾㘔榰븺ඕ鸱섗㞦炉溣〣䷿字蹿ᐁⲨ㇃鑨㢶豘⣼⤏ﹾ珌擊聽挞쨪餂엝鸻챃띕䞇寚翥历ⱴ잏ቌ䔋ē㚸朳⿒ꉎ凉 [ 194.949397][ T42] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 195.107244][ T787] usb 1-1: 0:2 : does not exist [ 195.151100][ T787] usb 1-1: USB disconnect, device number 6 [ 195.202028][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.314073][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 195.332584][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.357590][ T42] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 195.384086][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.414566][ T42] usb 2-1: config 0 descriptor?? [ 195.635180][ T42] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 195.693937][ T787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 195.863864][ T787] usb 4-1: device descriptor read/64, error -71 [ 196.113981][ T5784] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 196.143864][ T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.156014][ T42] usb 2-1: USB disconnect, device number 13 [ 196.162111][ T7207] loop2: detected capacity change from 0 to 256 [ 196.304180][ T787] usb 4-1: device descriptor read/64, error -71 [ 196.310526][ T5784] usb 1-1: Using ep0 maxpacket: 32 [ 196.317597][ T5784] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 196.326145][ T5784] usb 1-1: config 0 has no interface number 0 [ 196.332340][ T5784] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 196.347341][ T5784] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 196.356640][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.365206][ T5784] usb 1-1: Product: syz [ 196.369757][ T5784] usb 1-1: Manufacturer: syz [ 196.377418][ T5784] usb 1-1: SerialNumber: syz [ 196.383901][ T5784] usb 1-1: config 0 descriptor?? [ 196.390076][ T7202] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 196.433957][ T787] usb usb4-port1: attempt power cycle [ 196.599819][ T7201] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 196.624232][ T5784] asix: probe of 1-1:0.188 failed with error -71 [ 196.641200][ T5784] usb 1-1: USB disconnect, device number 7 [ 197.525859][ T787] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.636082][ T787] usb 4-1: device descriptor read/8, error -71 [ 197.873468][ T7228] loop1: detected capacity change from 0 to 164 [ 197.966879][ T787] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 198.004234][ T787] usb 4-1: device descriptor read/8, error -71 [ 198.650479][ T787] usb usb4-port1: unable to enumerate USB device [ 198.921436][ T7236] netlink: 88 bytes leftover after parsing attributes in process `syz.3.330'. [ 198.937441][ T7238] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.331'. [ 199.211744][ T7242] FAULT_INJECTION: forcing a failure. [ 199.211744][ T7242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.241636][ T7242] CPU: 0 PID: 7242 Comm: syz.1.333 Not tainted syzkaller #0 [ 199.248990][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.259082][ T7242] Call Trace: [ 199.262391][ T7242] [ 199.265346][ T7242] dump_stack_lvl+0x16c/0x230 [ 199.270081][ T7242] ? show_regs_print_info+0x20/0x20 [ 199.275318][ T7242] ? load_image+0x3b0/0x3b0 [ 199.279862][ T7242] ? __might_fault+0xaa/0x120 [ 199.284580][ T7242] ? __lock_acquire+0x7c80/0x7c80 [ 199.289634][ T7242] should_fail_ex+0x39d/0x4d0 [ 199.294337][ T7242] _copy_to_user+0x2f/0xa0 [ 199.298774][ T7242] bpf_test_finish+0x24b/0x620 [ 199.303553][ T7242] ? convert___skb_to_skb+0x590/0x590 [ 199.308936][ T7242] ? convert_skb_to___skb+0x420/0x420 [ 199.314418][ T7242] ? slab_build_skb+0x25f/0x3f0 [ 199.319294][ T7242] bpf_prog_test_run_skb+0xc28/0x11c0 [ 199.324698][ T7242] ? cpu_online+0x60/0x60 [ 199.329049][ T7242] bpf_prog_test_run+0x321/0x390 [ 199.334012][ T7242] __sys_bpf+0x440/0x800 [ 199.338284][ T7242] ? bpf_link_show_fdinfo+0x350/0x350 [ 199.343682][ T7242] ? lock_chain_count+0x20/0x20 [ 199.348564][ T7242] __x64_sys_bpf+0x7c/0x90 [ 199.352996][ T7242] do_syscall_64+0x55/0xb0 [ 199.357441][ T7242] ? clear_bhb_loop+0x40/0x90 [ 199.362185][ T7242] ? clear_bhb_loop+0x40/0x90 [ 199.366881][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.372803][ T7242] RIP: 0033:0x7fa30938f749 [ 199.377248][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.396890][ T7242] RSP: 002b:00007fa30a170038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.405334][ T7242] RAX: ffffffffffffffda RBX: 00007fa3095e5fa0 RCX: 00007fa30938f749 [ 199.413331][ T7242] RDX: 0000000000000050 RSI: 0000200000000740 RDI: 000000000000000a [ 199.421328][ T7242] RBP: 00007fa30a170090 R08: 0000000000000000 R09: 0000000000000000 [ 199.429324][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.437319][ T7242] R13: 00007fa3095e6038 R14: 00007fa3095e5fa0 R15: 00007ffed0bc6218 [ 199.445335][ T7242] [ 199.706721][ T7236] loop3: detected capacity change from 0 to 32768 [ 200.156054][ T7250] bridge0: port 4(netdevsim2) entered blocking state [ 200.163338][ T7250] bridge0: port 4(netdevsim2) entered disabled state [ 200.172438][ T7250] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 200.189544][ T7250] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 200.200016][ T7250] bridge0: port 4(netdevsim2) entered blocking state [ 200.206883][ T7250] bridge0: port 4(netdevsim2) entered forwarding state [ 200.370169][ T5794] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.775895][ T7260] loop2: detected capacity change from 0 to 256 [ 200.869110][ T5794] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.506562][ T7268] loop0: detected capacity change from 0 to 2048 [ 202.093229][ T7268] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 202.128026][ T7268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.630395][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 204.662653][ T7288] loop2: detected capacity change from 0 to 256 [ 206.363264][ T7295] nvme_fabrics: missing parameter 'transport=%s' [ 206.370078][ T7295] nvme_fabrics: missing parameter 'nqn=%s' [ 206.454178][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 206.493413][ T7305] loop2: detected capacity change from 0 to 256 [ 206.828584][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 206.927702][ T7311] loop2: detected capacity change from 0 to 4096 [ 206.949508][ T7311] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 206.982328][ T7311] ntfs3: loop2: Failed to load $UpCase (-2). [ 207.132492][ T7311] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 209.057469][ T7337] loop3: detected capacity change from 0 to 256 [ 209.232817][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 209.269382][ T7342] loop2: detected capacity change from 0 to 4096 [ 210.167398][ T7345] nvme_fabrics: missing parameter 'transport=%s' [ 210.273667][ T7345] nvme_fabrics: missing parameter 'nqn=%s' [ 210.497579][ T7355] loop3: detected capacity change from 0 to 2048 [ 211.441597][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 211.595915][ T7363] netlink: 'syz.2.365': attribute type 5 has an invalid length. [ 211.610864][ T7363] ip6erspan0: entered promiscuous mode [ 212.867195][ T7383] loop3: detected capacity change from 0 to 256 [ 212.941816][ T7384] loop2: detected capacity change from 0 to 256 [ 215.444639][ T42] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 215.627019][ T7403] loop1: detected capacity change from 0 to 40427 [ 215.646701][ T42] usb 1-1: config 7 has an invalid interface number: 213 but max is 0 [ 215.663850][ T42] usb 1-1: config 7 has an invalid interface number: 99 but max is 0 [ 215.672437][ T42] usb 1-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 215.688855][ T42] usb 1-1: config 7 has no interface number 0 [ 215.695203][ T42] usb 1-1: config 7 has no interface number 1 [ 215.702222][ T42] usb 1-1: config 7 interface 213 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 215.717500][ T42] usb 1-1: config 7 interface 213 altsetting 16 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 215.730899][ T42] usb 1-1: too many endpoints for config 7 interface 99 altsetting 212: 208, using maximum allowed: 30 [ 215.746652][ T42] usb 1-1: config 7 interface 99 altsetting 212 has a duplicate endpoint with address 0x2, skipping [ 215.760376][ T42] usb 1-1: config 7 interface 99 altsetting 212 has 1 endpoint descriptor, different from the interface descriptor's value: 208 [ 215.798362][ T42] usb 1-1: config 7 interface 213 has no altsetting 0 [ 215.813837][ T42] usb 1-1: config 7 interface 99 has no altsetting 0 [ 215.892515][ T42] usb 1-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=b6.76 [ 215.936040][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.973084][ T42] usb 1-1: Product: 脡 [ 215.983701][ T42] usb 1-1: Manufacturer: ᰉ [ 215.989080][ T42] usb 1-1: SerialNumber: syz [ 216.006209][ T7404] FAULT_INJECTION: forcing a failure. [ 216.006209][ T7404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.019691][ T7404] CPU: 0 PID: 7404 Comm: syz.1.379 Not tainted syzkaller #0 [ 216.027016][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.037088][ T7404] Call Trace: [ 216.040366][ T7404] [ 216.043304][ T7404] dump_stack_lvl+0x16c/0x230 [ 216.048013][ T7404] ? asm_sysvec_call_function_single+0x1a/0x20 [ 216.054199][ T7404] ? show_regs_print_info+0x20/0x20 [ 216.059426][ T7404] ? load_image+0x3b0/0x3b0 [ 216.063975][ T7404] should_fail_ex+0x39d/0x4d0 [ 216.068680][ T7404] _copy_to_user+0x2f/0xa0 [ 216.073124][ T7404] simple_read_from_buffer+0xe7/0x150 [ 216.078529][ T7404] proc_fail_nth_read+0x1e3/0x250 [ 216.083586][ T7404] ? proc_fault_inject_write+0x340/0x340 [ 216.089247][ T7404] ? fsnotify_perm+0x271/0x5e0 [ 216.094044][ T7404] ? proc_fault_inject_write+0x340/0x340 [ 216.099715][ T7404] vfs_read+0x27e/0x920 [ 216.103938][ T7404] ? kernel_read+0x1e0/0x1e0 [ 216.108559][ T7404] ? __fget_files+0x28/0x4d0 [ 216.113184][ T7404] ? __fget_files+0x44a/0x4d0 [ 216.117914][ T7404] ? __fdget_pos+0x2a3/0x330 [ 216.122531][ T7404] ? ksys_read+0x75/0x250 [ 216.126895][ T7404] ksys_read+0x147/0x250 [ 216.131166][ T7404] ? vfs_write+0x940/0x940 [ 216.135610][ T7404] ? lockdep_hardirqs_on+0x98/0x150 [ 216.140831][ T7404] do_syscall_64+0x55/0xb0 [ 216.145269][ T7404] ? clear_bhb_loop+0x40/0x90 [ 216.149959][ T7404] ? clear_bhb_loop+0x40/0x90 [ 216.154665][ T7404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.160689][ T7404] RIP: 0033:0x7fa30938e15c [ 216.165126][ T7404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 216.168724][ T7393] loop3: detected capacity change from 0 to 65536 [ 216.184731][ T7404] RSP: 002b:00007fa30a14f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.184786][ T7404] RAX: ffffffffffffffda RBX: 00007fa3095e6090 RCX: 00007fa30938e15c [ 216.184797][ T7404] RDX: 000000000000000f RSI: 00007fa30a14f0a0 RDI: 0000000000000008 [ 216.184807][ T7404] RBP: 00007fa30a14f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.184817][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.184826][ T7404] R13: 00007fa3095e6128 R14: 00007fa3095e6090 R15: 00007ffed0bc6218 [ 216.184850][ T7404] [ 216.184929][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.962889][ T7412] 9pnet_fd: Insufficient options for proto=fd [ 217.436675][ T42] dw2102: su3000_identify_state [ 217.441765][ T42] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 217.448646][ T42] dw2102: su3000_power_ctrl: 1, initialized 0 [ 217.456391][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 217.468079][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.480375][ T42] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 217.487824][ T42] usb 1-1: media controller created [ 217.494729][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 217.502268][ T42] dw2102: i2c transfer failed. [ 217.509049][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 217.518420][ T42] dw2102: i2c transfer failed. [ 217.523553][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 217.533286][ T42] dw2102: i2c transfer failed. [ 217.538646][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 217.648944][ T42] dw2102: i2c transfer failed. [ 217.662956][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 217.668900][ T42] dw2102: i2c transfer failed. [ 217.674091][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 217.680272][ T42] dw2102: i2c transfer failed. [ 217.685182][ T42] dvb-usb: MAC address: 02:02:02:02:02:02 [ 217.714065][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.743631][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 217.749409][ T42] dw2102: command 0x51 transfer failed. [ 217.966204][ T42] DVB: Unable to find symbol m88rs2000_attach() [ 217.972529][ T42] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 218.037009][ T7425] loop1: detected capacity change from 0 to 256 [ 218.414513][ T42] rc_core: IR keymap rc-su3000 not found [ 218.428199][ T42] Registered IR keymap rc-empty [ 218.438713][ T42] rc rc0: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 218.452640][ T42] input: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 218.478143][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 218.490981][ T42] dw2102: su3000_power_ctrl: 0, initialized 1 [ 218.510062][ T42] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 218.545227][ T42] dw2102: su3000_identify_state [ 218.561499][ T42] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 218.576879][ T42] dw2102: su3000_power_ctrl: 1, initialized 0 [ 218.596842][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 218.633064][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.663354][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 218.674578][ T42] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 218.684852][ T5846] dw2102: i2c transfer failed. [ 218.697386][ T42] usb 1-1: media controller created [ 218.715551][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 218.722197][ T42] dw2102: i2c transfer failed. [ 218.833773][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 218.839715][ T42] dw2102: i2c transfer failed. [ 218.853664][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 218.859586][ T42] dw2102: i2c transfer failed. [ 218.865696][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 218.871524][ T5846] dw2102: i2c transfer failed. [ 218.876532][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 218.882385][ T42] dw2102: i2c transfer failed. [ 218.901752][ T7436] loop3: detected capacity change from 0 to 128 [ 218.910749][ T7436] hpfs: bad mount options. [ 218.919686][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 218.927004][ T42] dw2102: i2c transfer failed. [ 218.932984][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 218.938889][ T42] dw2102: i2c transfer failed. [ 218.946870][ T42] dvb-usb: MAC address: 02:02:02:02:02:02 [ 219.073930][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 219.080514][ T5846] dw2102: i2c transfer failed. [ 219.126957][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.216418][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 219.222253][ T42] dw2102: command 0x51 transfer failed. [ 219.263843][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 219.283735][ T5846] dw2102: i2c transfer failed. [ 219.486350][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 219.492172][ T5846] dw2102: i2c transfer failed. [ 219.497512][ T42] DVB: Unable to find symbol m88rs2000_attach() [ 219.519119][ T42] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 219.644032][ T42] rc_core: IR keymap rc-su3000 not found [ 219.649744][ T42] Registered IR keymap rc-empty [ 219.673664][ T42] rc rc1: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1 [ 219.688115][ T7442] loop2: detected capacity change from 0 to 4096 [ 219.694733][ T42] input: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input7 [ 219.711055][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 219.718156][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 219.726616][ T5846] dw2102: i2c transfer failed. [ 219.732620][ T7442] ntfs: (device loop2): map_mft_record_page(): Attempt to read mft record 0x1, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 219.749372][ T42] dw2102: su3000_power_ctrl: 0, initialized 1 [ 219.750008][ T7442] ntfs: (device loop2): map_mft_record(): Failed with error code 2. [ 219.763880][ T7442] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 219.776827][ T42] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 219.783881][ T42] usb 1-1: USB disconnect, device number 8 [ 219.793147][ T7442] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 219.820643][ T7451] loop1: detected capacity change from 0 to 256 [ 219.837360][ T7442] ntfs: (device loop2): map_mft_record_page(): Attempt to read mft record 0x0, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 219.857028][ T7442] ntfs: (device loop2): map_mft_record(): Failed with error code 2. [ 219.866725][ T42] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 219.867734][ T7442] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 219.965188][ T42] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 219.979546][ T7442] ntfs: (device loop2): load_system_files(): Failed to load $MFT/$BITMAP attribute. [ 220.011706][ T7442] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 220.108398][ T7453] loop0: detected capacity change from 0 to 4096 [ 220.224014][ T5912] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 220.262432][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 220.299752][ T7462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.401530][ T7465] macvlan2: entered promiscuous mode [ 220.411240][ T5912] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 220.411710][ T7465] macvlan2: entered allmulticast mode [ 220.426661][ T7465] bond1: (slave macvlan2): Opening slave failed [ 220.432658][ T5912] usb 4-1: config 0 has no interface number 0 [ 220.446904][ T5912] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 221.226786][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.235458][ T5912] usb 4-1: Product: syz [ 221.240331][ T5912] usb 4-1: Manufacturer: syz [ 221.245132][ T5912] usb 4-1: SerialNumber: syz [ 221.252007][ T5912] usb 4-1: config 0 descriptor?? [ 221.259117][ T5912] hub 4-1:0.217: bad descriptor, ignoring hub [ 221.267173][ T5912] hub: probe of 4-1:0.217 failed with error -5 [ 221.467785][ T5912] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 221.496412][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.516616][ T5912] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 221.533885][ T5912] usb 4-1: media controller created [ 221.592013][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.857504][ T7488] loop1: detected capacity change from 0 to 2048 [ 222.769008][ T7490] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.781231][ T5912] DVB: Unable to find symbol dib7000p_attach() [ 222.834119][ T5912] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 222.896536][ T7476] loop2: detected capacity change from 0 to 32768 [ 222.977509][ T7497] Malformed UNC in devname [ 222.977509][ T7497] [ 222.984650][ T7497] CIFS: VFS: Malformed UNC in devname [ 223.023786][ T5912] rc_core: IR keymap rc-dib0700-rc5 not found [ 223.029919][ T5912] Registered IR keymap rc-empty [ 223.070881][ T5912] dvb-usb: could not initialize remote control. [ 223.092979][ T5912] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 223.147668][ T5912] usb 4-1: USB disconnect, device number 8 [ 223.274234][ T5912] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 223.314025][ T7497] loop3: detected capacity change from 0 to 40427 [ 223.584980][ T5846] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 223.602006][ T7503] loop2: detected capacity change from 0 to 256 [ 223.624532][ T7494] loop0: detected capacity change from 0 to 32768 [ 223.660117][ T7494] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.899477][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 223.925676][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 223.936959][ T5846] usb 2-1: unable to get BOS descriptor or descriptor too short [ 223.949178][ T5846] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 223.963963][ T5846] usb 2-1: config 8 has no interface number 0 [ 223.970190][ T5846] usb 2-1: config 8 interface 255 has no altsetting 0 [ 223.996870][ T5846] usb 2-1: string descriptor 0 read error: -22 [ 224.005510][ T5846] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 224.032663][ T5846] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 224.201749][ T7516] loop0: detected capacity change from 0 to 1024 [ 224.221755][ T7516] EXT4-fs: Ignoring removed bh option [ 224.243747][ T7516] EXT4-fs: inline encryption not supported [ 224.261394][ T7516] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 224.279364][ T7516] EXT4-fs (loop0): group descriptors corrupted! [ 224.632118][ T7521] loop0: detected capacity change from 0 to 512 [ 224.679117][ T7521] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 225.079854][ T7528] sp0: Synchronizing with TNC [ 225.195728][ T7528] loop2: detected capacity change from 0 to 1024 [ 225.225686][ T7528] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.376664][ T5846] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 225.505172][ T7514] loop3: detected capacity change from 0 to 32768 [ 226.041458][ T5912] usb 2-1: USB disconnect, device number 14 [ 226.580169][ T7541] netlink: 'syz.2.420': attribute type 21 has an invalid length. [ 226.610482][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.420'. [ 226.645506][ T7534] loop0: detected capacity change from 0 to 32768 [ 226.659244][ T7534] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.417 (7534) [ 226.660023][ T7541] syzkaller0: entered promiscuous mode [ 226.721171][ T7541] syzkaller0: entered allmulticast mode [ 226.731144][ T7534] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 226.761905][ T7534] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 226.787292][ T7534] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 226.815886][ T7534] BTRFS info (device loop0): use zstd compression, level 3 [ 226.823996][ T7534] BTRFS info (device loop0): using free space tree [ 226.953981][ T7559] syzkaller0: entered promiscuous mode [ 226.993774][ T7559] syzkaller0: entered allmulticast mode [ 227.004375][ T7534] BTRFS info (device loop0): enabling ssd optimizations [ 227.085894][ T7534] BTRFS info (device loop0): auto enabling async discard [ 227.199884][ T7559] tipc: Started in network mode [ 227.219093][ T7559] tipc: Node identity c6818bf21848, cluster identity 4711 [ 227.236775][ T7559] tipc: Enabled bearer , priority 0 [ 227.267976][ T7555] tipc: Resetting bearer [ 227.347728][ T7571] loop3: detected capacity change from 0 to 256 [ 227.358165][ T7555] tipc: Disabling bearer [ 227.709721][ T5782] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 228.148998][ T7576] loop2: detected capacity change from 0 to 32768 [ 228.608819][ T7585] loop3: detected capacity change from 0 to 2048 [ 228.767677][ T7576] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 228.893297][ T7592] loop1: detected capacity change from 0 to 2048 [ 228.930876][ T7592] EXT4-fs: Ignoring removed bh option [ 228.980832][ T7596] loop0: detected capacity change from 0 to 2048 [ 229.043580][ T7598] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.174985][ T7598] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 229.203798][ T7598] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 229.232976][ T7598] Remounting filesystem read-only [ 229.263462][ T5990] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 229.271878][ T7602] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 229.296713][ T5990] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 229.380271][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.407030][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.444004][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.480548][ T5990] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 229.506259][ T5990] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 229.538089][ T5990] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 229.571652][ T5990] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 229.600122][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.636290][ T7601] loop1: detected capacity change from 0 to 40427 [ 229.638935][ T5990] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 229.668035][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.693063][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.793784][ T5990] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 229.825452][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.834499][ T5990] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 229.841294][ T5990] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 229.855596][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.866072][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.875282][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.884935][ T5990] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 229.891663][ T5990] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 229.910437][ T7597] loop3: detected capacity change from 0 to 32768 [ 229.946025][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 229.981558][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.019281][ T7597] XFS: noikeep mount option is deprecated. [ 230.025314][ T5990] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.034590][ T7597] XFS: attr2 mount option is deprecated. [ 230.040830][ T7596] NILFS (loop0): mounting fs with errors [ 230.105660][ T7597] XFS (loop3): Invalid device [./file0], error=-15 [ 230.524082][ T7598] ------------[ cut here ]------------ [ 230.530093][ T7598] WARNING: CPU: 0 PID: 7598 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4d0 [ 230.539123][ T7598] Modules linked in: [ 230.543052][ T7598] CPU: 0 PID: 7598 Comm: segctord Not tainted syzkaller #0 [ 230.550466][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.560833][ T7598] RIP: 0010:mark_buffer_dirty+0x2bb/0x4d0 [ 230.566753][ T7598] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 bf ac fc ff e8 5a d8 89 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 da 52 e8 ff e8 45 d8 89 ff <0f> 0b e9 84 fd ff ff e8 39 d8 89 ff 0f 0b e9 b0 fd ff ff e8 2d d8 [ 230.586482][ T7598] RSP: 0000:ffffc900195676f0 EFLAGS: 00010293 [ 230.592548][ T7598] RAX: ffffffff81fbb87b RBX: ffff88805b9162b8 RCX: ffff88803091da00 [ 230.602777][ T7598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 230.610946][ T7598] RBP: ffffc90019567b01 R08: ffff88805b9162bf R09: 1ffff1100b722c57 [ 230.618975][ T7598] R10: dffffc0000000000 R11: ffffed100b722c58 R12: 1ffff1100b70e0f4 [ 230.627000][ T7598] R13: ffff88805b8707b0 R14: ffff8880316ae328 R15: 1ffff1100b70e0f6 [ 230.635044][ T7598] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 230.644027][ T7598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.650631][ T7598] CR2: 00007f7b198b7000 CR3: 0000000024093000 CR4: 00000000003506f0 [ 230.658644][ T7598] Call Trace: [ 230.661926][ T7598] [ 230.664911][ T7598] nilfs_segctor_do_construct+0x32c/0x6870 [ 230.670765][ T7598] ? finish_task_switch+0x265/0x920 [ 230.675988][ T7598] ? finish_task_switch+0x265/0x920 [ 230.681194][ T7598] ? __schedule+0x14da/0x44d0 [ 230.685922][ T7598] ? lock_chain_count+0x20/0x20 [ 230.690770][ T7598] ? asan.module_dtor+0x20/0x20 [ 230.695654][ T7598] ? nilfs_transaction_unlock+0x220/0x220 [ 230.701729][ T7598] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 230.707450][ T7598] ? preempt_schedule+0xab/0xc0 [ 230.712296][ T7598] ? preempt_schedule_common+0x82/0xc0 [ 230.717885][ T7598] ? preempt_schedule+0xab/0xc0 [ 230.722764][ T7598] ? schedule_preempt_disabled+0x20/0x20 [ 230.728667][ T7598] ? __lock_acquire+0x7c80/0x7c80 [ 230.733907][ T7598] ? __rwlock_init+0x150/0x150 [ 230.738700][ T7598] ? preempt_schedule_thunk+0x1a/0x30 [ 230.744174][ T7598] ? _raw_spin_unlock+0x3a/0x40 [ 230.749072][ T7598] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 230.754581][ T7598] nilfs_segctor_construct+0x17b/0x690 [ 230.760049][ T7598] nilfs_segctor_thread+0x4f6/0x1000 [ 230.765402][ T7598] ? nilfs_iput_work_func+0x70/0x70 [ 230.770609][ T7598] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 230.776547][ T7598] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 230.782823][ T7598] ? wake_bit_function+0x200/0x200 [ 230.787967][ T7598] ? __kthread_parkme+0x7a/0x1c0 [ 230.792952][ T7598] kthread+0x2fa/0x390 [ 230.797071][ T7598] ? nilfs_iput_work_func+0x70/0x70 [ 230.802466][ T7598] ? kthread_blkcg+0xd0/0xd0 [ 230.807351][ T7598] ret_from_fork+0x48/0x80 [ 230.811776][ T7598] ? kthread_blkcg+0xd0/0xd0 [ 230.816544][ T7598] ret_from_fork_asm+0x11/0x20 [ 230.821328][ T7598] [ 230.824387][ T7598] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.831666][ T7598] CPU: 0 PID: 7598 Comm: segctord Not tainted syzkaller #0 [ 230.838865][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.848917][ T7598] Call Trace: [ 230.852205][ T7598] [ 230.855136][ T7598] dump_stack_lvl+0x16c/0x230 [ 230.859813][ T7598] ? show_regs_print_info+0x20/0x20 [ 230.865006][ T7598] ? load_image+0x3b0/0x3b0 [ 230.869507][ T7598] panic+0x2c0/0x710 [ 230.873395][ T7598] ? bpf_jit_dump+0xd0/0xd0 [ 230.877894][ T7598] ? ret_from_fork_asm+0x11/0x20 [ 230.882834][ T7598] __warn+0x2e0/0x470 [ 230.886816][ T7598] ? mark_buffer_dirty+0x2bb/0x4d0 [ 230.891929][ T7598] ? mark_buffer_dirty+0x2bb/0x4d0 [ 230.897033][ T7598] report_bug+0x2be/0x4f0 [ 230.901357][ T7598] ? mark_buffer_dirty+0x2bb/0x4d0 [ 230.906467][ T7598] ? mark_buffer_dirty+0x2bb/0x4d0 [ 230.911575][ T7598] ? mark_buffer_dirty+0x2bd/0x4d0 [ 230.916688][ T7598] handle_bug+0xcf/0x120 [ 230.920925][ T7598] exc_invalid_op+0x1a/0x50 [ 230.925423][ T7598] asm_exc_invalid_op+0x1a/0x20 [ 230.930263][ T7598] RIP: 0010:mark_buffer_dirty+0x2bb/0x4d0 [ 230.935975][ T7598] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 bf ac fc ff e8 5a d8 89 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 da 52 e8 ff e8 45 d8 89 ff <0f> 0b e9 84 fd ff ff e8 39 d8 89 ff 0f 0b e9 b0 fd ff ff e8 2d d8 [ 230.955579][ T7598] RSP: 0000:ffffc900195676f0 EFLAGS: 00010293 [ 230.961634][ T7598] RAX: ffffffff81fbb87b RBX: ffff88805b9162b8 RCX: ffff88803091da00 [ 230.969694][ T7598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 230.977698][ T7598] RBP: ffffc90019567b01 R08: ffff88805b9162bf R09: 1ffff1100b722c57 [ 230.985664][ T7598] R10: dffffc0000000000 R11: ffffed100b722c58 R12: 1ffff1100b70e0f4 [ 230.993636][ T7598] R13: ffff88805b8707b0 R14: ffff8880316ae328 R15: 1ffff1100b70e0f6 [ 231.001604][ T7598] ? mark_buffer_dirty+0x2bb/0x4d0 [ 231.006730][ T7598] nilfs_segctor_do_construct+0x32c/0x6870 [ 231.012547][ T7598] ? finish_task_switch+0x265/0x920 [ 231.017744][ T7598] ? finish_task_switch+0x265/0x920 [ 231.022936][ T7598] ? __schedule+0x14da/0x44d0 [ 231.027617][ T7598] ? lock_chain_count+0x20/0x20 [ 231.032466][ T7598] ? asan.module_dtor+0x20/0x20 [ 231.037326][ T7598] ? nilfs_transaction_unlock+0x220/0x220 [ 231.043045][ T7598] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 231.048680][ T7598] ? preempt_schedule+0xab/0xc0 [ 231.053585][ T7598] ? preempt_schedule_common+0x82/0xc0 [ 231.059090][ T7598] ? preempt_schedule+0xab/0xc0 [ 231.063930][ T7598] ? schedule_preempt_disabled+0x20/0x20 [ 231.069561][ T7598] ? __lock_acquire+0x7c80/0x7c80 [ 231.074576][ T7598] ? __rwlock_init+0x150/0x150 [ 231.079330][ T7598] ? preempt_schedule_thunk+0x1a/0x30 [ 231.084707][ T7598] ? _raw_spin_unlock+0x3a/0x40 [ 231.089550][ T7598] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 231.095094][ T7598] nilfs_segctor_construct+0x17b/0x690 [ 231.100549][ T7598] nilfs_segctor_thread+0x4f6/0x1000 [ 231.105846][ T7598] ? nilfs_iput_work_func+0x70/0x70 [ 231.111048][ T7598] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 231.116947][ T7598] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 231.122832][ T7598] ? wake_bit_function+0x200/0x200 [ 231.127932][ T7598] ? __kthread_parkme+0x7a/0x1c0 [ 231.132864][ T7598] kthread+0x2fa/0x390 [ 231.136923][ T7598] ? nilfs_iput_work_func+0x70/0x70 [ 231.142114][ T7598] ? kthread_blkcg+0xd0/0xd0 [ 231.146712][ T7598] ret_from_fork+0x48/0x80 [ 231.151114][ T7598] ? kthread_blkcg+0xd0/0xd0 [ 231.155689][ T7598] ret_from_fork_asm+0x11/0x20 [ 231.160457][ T7598] [ 231.163740][ T7598] Kernel Offset: disabled [ 231.168137][ T7598] Rebooting in 86400 seconds..