last executing test programs: 15m8.568791928s ago: executing program 32 (id=621): sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x0, 0x321, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000140)={0x7, 0x50323234, 0x3, @discrete={0x789, 0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 14m26.244674461s ago: executing program 33 (id=717): name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x600) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @remote}}}]}]}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$RTC_PIE_ON(r0, 0x4008700c) ptrace(0x10, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000080)={&(0x7f0000000040)=""/47, 0x2f}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(0x0, 0x2e) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="0253e0498afbbe"], 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20044451, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f00000000c0)={0xce, 0x0, 0x3}, &(0x7f00000001c0)=[{}, {}, {}]) 14m17.728710983s ago: executing program 34 (id=731): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x1, 0x4) 14m9.202137715s ago: executing program 35 (id=743): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000600)="4232b290f6b82ab92d775f58ec1ba56ac4c8a4a1bcd642685ada1ea2238f696146c4fe3a00b783141d4b044cb09517114206a28fde3c9fc4077ffbc4c04e71fb214238045d2b7df89a", 0x49}, {&(0x7f0000000680)="5287932dd18c4f03ae2483e91d8f03526f4c3debd7e8d848f95a854ee5d6b934f22c3659d38d4f33d5dff1dd34327fd327010277d7489e5f9628d3d34b87edb96ac921c8e2fc02248a5a3ceecb32a879528bada790700b406806b5a5c8333c19317b5b3e8eeccb6eb6cd3cf4026feae08df61f06117f25367d57baac9aa10d052082d968b3ddb389abe8209cc9049d9a8c390e943508889f6f3a22d791d9990b68c1d544", 0xa4}, {&(0x7f0000000740)="d929dca30e7e685e34c4b320a2d0b367d9d82f8a7e637abdd394dfe4922ebd5db3670ce259e6fc5fbcd4d8a9b7adce5229aacd9bf405c742fed1fa9a4cf2d3957fc3df0972dfe2b5f56b76641cb625c6ce526e7dd15d3ab4f8a32cec5dcc9e7ddab81b12264feea77a29a8bf0f00ac2492720923a3d7e4ce1fe5a42467df5e1637e89e3e7f1aa7c109097de9ee86ae02f573f20eba16857ad4611f3b10200075eda069cfa1365b7875aae0672e983e3de4492cbf0df99eb26f379387fe5d6f80050d02f2ed73fb9b6275319f9dca747aba41702968c6f15f", 0xd8}, {&(0x7f0000000840)="a812010f98920a3fa8a673ef42d520ebfa28e68c1b9fbb1d9c856a473cc18f144481672f87e62c193bbb8b654e9607c48515132175f9868f1fdf341d37d69a5a98325b6980653728dae3af2a8b6ae2974edc32ee2e9655ea4963559df2e18569f4607caa862e6a9614979857498f3ea73f3c65859930951b1dc5888d0e569c0e666c4fe4ce94d789a582790353e2ac14762f907f2f7493e2d5409eaf479395ce1383d7a54de169b4727d7ef686f1ae4e056a2cdd9917ef6cb35ccb1ef4729e208f2bf4283ee03213b6153911493a22d31a5c", 0xd2}, {&(0x7f0000000940)="d2181e616a", 0x5}, {&(0x7f0000000980)="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", 0xff}, {&(0x7f0000000a80)="0f30e7fbd034bdee2b44b158882a2872bc4d0de5df7ab3f62c71edc06b1cd6c5e1dd5ebdfd6da0189e126b7f8636390c789911212d101b42a7ed64e3151927a649416a80cf8d10978a7f484fa6d6538d07704c1b62cdfad3b90505066a82f822d43b19447278", 0x66}, {&(0x7f0000000b00)="cf32ff8a2af3b1b000cd887b99d19df02b4913ad2b2d9675cb62ba4913a93d66994863c7915097e8e4e68ed58533f61bfbf159a5b4c69360146559f0ea760fa448f90bbfc86b76d628ffcb8637e4522c185eb964bd5b2ca2ef0c9fa11cf5cf9d45b73388a1b97f106cd8921b848881cad991592fdff18561a0016ad8593a8ec39c42cf8e5033ff2c85007ed8f2f27814bd671f4cd7b16e4f6f8c2a1f50ce1af3335e16a4d1b602dc3fc1672a44c89fc46be3619f1bc0f7854025b333c0e46768aaf0e3475dca24cb4c093c56145c0ccbfadd8a74f8d45a9ba38e395f0d432f", 0xdf}, {&(0x7f0000000c00)="752d503cfac0a693c485a2a62ef9f460f84f71d4929a402a345c4ed6c8e995a202f78b3e6da233", 0x27}], 0x9, &(0x7f0000003e40)=[@hopopts={{0x5c, 0x29, 0x36, {0x89, 0x8, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0x9, [0xfffffffffffffffb, 0x6, 0x7, 0x0, 0x3980000]}}]}}}], 0x5c}}], 0x1, 0x827eae51f2ff7e34) 14m3.893575042s ago: executing program 36 (id=752): syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe4dc, 0x8, 0x0, 0x2f0}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x9, 0x4, 0xe6, 0x73, 0xa, 0x4, 0x9, 0x6, 0x2, 0xa, 0x2, 0x0, 0x2}, 0xe) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018"], 0x48}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={r5, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0x7, 0x1}, &(0x7f0000000140)=0x8) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf25210000000c0005000202aaaaaaaaaaaa09001f007068793100000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, &(0x7f00000006c0)=[{&(0x7f0000000100)="e2", 0x1}], 0x1, 0xe, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0x1000000, 0x8308}, {0x2, 0x9}]}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x30]}}, &(0x7f0000001540)=""/4096, 0x3b, 0x1000, 0x1}, 0x28) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) 12m46.491784558s ago: executing program 37 (id=842): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)}], 0x1}, 0x865) 12m33.845351141s ago: executing program 38 (id=860): syz_usb_connect(0x0, 0x188, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x5, 0x3, 0x40300000, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x1, 0x10087, 0x3, 0x0, 0x2, 0x80000001, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 10m8.30348818s ago: executing program 39 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x40, 0x1e, 0x20, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, [@NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}, @NDA_VNI={0x8, 0x7, 0x72}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44100}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r4 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fallocate(r4, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x18, 0x0, 0xfffffffffe000001}) 9m15.093733325s ago: executing program 40 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x22}], 0x1) 8m45.491104631s ago: executing program 41 (id=1230): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 7m22.870268179s ago: executing program 6 (id=1361): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 7m18.569588212s ago: executing program 6 (id=1364): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0xa8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_MASK={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x5c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 7m17.222425718s ago: executing program 6 (id=1366): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 7m12.892963418s ago: executing program 6 (id=1370): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000480)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xffdd) 7m11.830345024s ago: executing program 6 (id=1372): recvmmsg(0xffffffffffffffff, &(0x7f0000004f40), 0x0, 0x40010104, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xfd) read$msr(r3, 0x0, 0x0) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) 7m7.386659632s ago: executing program 42 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 6m57.090301637s ago: executing program 6 (id=1389): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0x4, 0xe3, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nyUt2nfxFq/2qrTBjGgJk2iQsBNRUVBcKE7FxKaaSlOmtKM2BYXKoKr4saVrlzpH+DGhSDuXQmudC+FIMW1jNyZe5txMhMzyYyjvb8fTHLO3DOc88yZZ+bcc2cCKK1K9ieJOBIRP0fEdKv61waV1r/fb793Prsl0Wi8/lvSbJfVi6bF46byylwakX6UxMku/W5ev/H2aq1WvZrXF+rrVxY2r9946tL66sXqxerl5ZVnzi4trzy7sjywWG/ePvXTxuev/fHJmV+mnr/51gvZeI/kx9rjGJRKVKKR6zz22KA7G7GjbeVkfIQDoS9jEZFN10Qz/6djLLYnbzpe/HCkgwOGKvtsOtT78PsN4C6WxKhHAIxG8UFfnNsP4zz432zrXOsEaGf845HmbSY6zm8HKTvbuvbmx99mtxjSPgQAQLvvsvXPk93WP2nc39bu//m1oZmIuCcijkXEvRFxPCLui2i2fSAiHuyz/0pHfef6J721r8D2KFv/Pdd1/Vus/mJmLK8dbcY/kVy4VKuezZ+TuZg4lNUXd+njx1e++rLXsUrb+i+7Zf0Xa8F8HLfGOzbo1lbrqweJud3WBxEnuq5/kztXApKIeCgiTuyzj2/ONT7rdezv4x+uxhcRj3ed/+2roMnu1ycXmq+HheJVsdOpd6+s9ep/1PFn83949/hnkvbrtZv99/H1zOmtXsf2+/qfTN5olifz+66t1utXFyMmk1d33r+0/diiXrTP4p+b7Z7/x2L7mTiZzWNEPBwRj0TEo/nYT0fEmYiY3SX+l2Zfru4//uHK4l/ra/77L6wvff9Dr/73Nv9PN0tz+T17ef/b6wAP8twBAADAf0Xa/A58ks7fKafp/HzrO/zH43Ba29isP3Fh453La63vys/ERFrsdE237Ycu5nvDRX2po76c7xt/Ova/Zn3+/Eat56YY8I+Y6pH/mV/HRj06YOj8XgvKS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kMpHeR3/QoKCndrYdTvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPxZwAAAP//jYTnFQ==") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r5, 0x81fe) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000, 0xa00}]) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x35, 0x0, 0x0) 6m41.162527873s ago: executing program 43 (id=1389): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0x4, 0xe3, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r5, 0x81fe) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000, 0xa00}]) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x35, 0x0, 0x0) 5m50.531220439s ago: executing program 9 (id=1470): syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) 5m49.543293408s ago: executing program 9 (id=1471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f0000000600)=[{0x45, 0x2}]}) 5m47.984094423s ago: executing program 9 (id=1473): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r2, 0x12) 5m45.78380344s ago: executing program 44 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x80000001, 0x2001) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000001c0)="0310aa9f9cd61678abced4", 0xb, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0x6, 0x0, &(0x7f0000000140)) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5m45.65842749s ago: executing program 9 (id=1476): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 5m44.369287424s ago: executing program 9 (id=1479): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000340)=0x10001, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/64, 0x40}, 0x2161) 5m42.456080819s ago: executing program 9 (id=1481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10104a8, 0x0, 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x22e00e0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300), &(0x7f00000003c0)=@v3={0x3000000, [{0xab0, 0x6}, {0x8}]}, 0x18, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 5m26.595445162s ago: executing program 45 (id=1481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10104a8, 0x0, 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x22e00e0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300), &(0x7f00000003c0)=@v3={0x3000000, [{0xab0, 0x6}, {0x8}]}, 0x18, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 5m15.911826522s ago: executing program 46 (id=1516): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@delalloc}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffc}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) setuid(0xee01) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40086604, 0x0) 5m3.874661851s ago: executing program 5 (id=1532): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000607"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, 0x0, 0x0}, &(0x7f0000000500)={0x2c, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380), &(0x7f00000001c0)={0x20, 0x3, 0x1, 0x7}}) 5m0.611565616s ago: executing program 5 (id=1534): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x10000a0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 4m59.873349874s ago: executing program 5 (id=1535): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m57.602747255s ago: executing program 5 (id=1537): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) socket(0x400000000010, 0x6, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) pipe(&(0x7f00000001c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x6e) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpquota}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x38000000000000) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 4m56.316890852s ago: executing program 5 (id=1539): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000002080)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 4m50.781128307s ago: executing program 5 (id=1545): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x503c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x9, "a5af9962"}, @global=@item_012={0x1, 0x1, 0x8, 'O'}]}}, 0x0}, 0x0) 4m48.226992701s ago: executing program 47 (id=1545): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x503c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x9, "a5af9962"}, @global=@item_012={0x1, 0x1, 0x8, 'O'}]}}, 0x0}, 0x0) 2m16.66548538s ago: executing program 8 (id=1783): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) 2m15.237085842s ago: executing program 8 (id=1787): socket$can_raw(0x1d, 0x3, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9/pWgQcaKJ2YGlsFF3ElgoWCrm3DZBpqJpmSmZQmZNEightBxYWgm679UXdu/bFwo/+FC2mpmhYrLiRy50czTWbSSZqZCeTzgZs55/7IOd8595577sxlbgCH1lj6JxNxIiLeSyJGavOTiBiopPojpqvrPVhfy6VTEhsbr/2aVNa5v76Wi4ZtUsdqmf9GxLdvR5zMbC+3tLI6P1Mo5Jdq+YnywpWJ0srqqcsLM3P5ufzimcmpqdNnnzt7Zv9i/f3H1eN33n/56S+m/3zrP7fe/S6J6TheW9YYx34Zi7HaezKQvoWbRva7pN5Lel0B9iQ9NPuqR3mciJHoq6RaGOpmzQCATtkAAA6hxBgAAA6Z+ucA99fXcvWpt59IdNfdlyLiaDX++veb1SX9MR2DlYUDETF8P3nkm5EkIkb3ofyxiPjkqzc+S6eotYPv0oBuuH4jIi6Ojm3v/5NH71nYg2d2WrgxWHkZ2zL7sJ1/oJe+Tsc/zzcb/2Vqx//Ryt+t45/BJsfuXjz++M/c3rrN96/vQ8E16fjvxYZ72x40xF8z2lfL/aMy5htILl0u5NO+7Z8RMR4Dg2l+srJq85Hb+L2/7rUqv3H899sHb36alp++bq6Rud0/+Og2szPlmSeNu+7ujYj/9TeLP3nY/kmL8e/5Nst45YV3Pm61LI0/jbc+bY+/szZuRjzVtP032zLZ8f7EicruMFHfKZr48qePhluV39j+6ZSWX78W6Ia0/Yd3jn80abxfs7T7Mn64OfJNq2WPj7/5/n8kqXYCR2rzrs2Uy0uTEUeSV7fPP725bT1fXz+Nf/z/zY//arHN9//0mvBim/H33/nl873H31lp/LO7av/dJ249mO9rVX577T9VSY3X5rTT/7VbwSd57wAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOB5JJvswnclks9VneP87hjOFYql88lJxeXE2Ks/KHo2BTP2nLkcafg91svZ7+PX86S35ZyPiXxHx4eBQJZ/NFQuzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGqOtXj+f+rnwV7XDgDomKO9rgAA0HXO/wBw+Ozu/D/UsXoAAN3j+h8ADp+2z/8XO1sPAKB7XP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYefPnUunjT/W13JpfvbqyvJ88eqp2XxpPruwnMvmiktXsnPF4lwhn80VF1r+o+vVl0KxeGUqFpevTZTzpfJEaWX1wkJxebF84fLCzFz+Qn6ga5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtKK6vzM4VCfklix8TQwajGgUn0x4GohkTHEo29xFDvOigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+7vAAAA//9oei8M") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000040060000000000000000000018010000756c6c2500000000002020207b1a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/249, 0xf9}], 0x1}, 0x2}], 0x1, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xdf46ab6bb582189c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m12.671124296s ago: executing program 8 (id=1795): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x197, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) mmap(&(0x7f0000454000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r0, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) 2m8.636549691s ago: executing program 8 (id=1804): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) socket(0x400000000010, 0x6, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) pipe(&(0x7f00000001c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x6e) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpquota}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x38000000000000) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 2m6.401709689s ago: executing program 8 (id=1809): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 2m6.333545995s ago: executing program 4 (id=1810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='^', 0x1, 0x40001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000002c0)='0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0/file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) sendfile(r3, r4, 0x0, 0xffff) 2m4.937992219s ago: executing program 4 (id=1814): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m1.05878493s ago: executing program 48 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0/file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) sendfile(r3, r4, 0x0, 0xffff) 2m1.001447044s ago: executing program 4 (id=1816): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000480)={0x11, 0xf8, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xffdd) 2m0.985607297s ago: executing program 2 (id=1817): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 2m0.181396708s ago: executing program 4 (id=1819): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) socket(0x400000000010, 0x6, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) pipe(&(0x7f00000001c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x6e) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpquota}]}, 0xd, 0x5e1, &(0x7f0000001200)="$eJzs3c1vVFUbAPDnTD9oKe/bQoyKC2liDCSGlhYwxLiArSENfsSNGystiBRoaI0WTSgJbkyMG2NMXLkQ/wslsmWlKxduXBkSooaliWNmem/baWdaOrS92Pv7JUPvvWcO59xOnznnnjnnTgClNVj7pxKxPyKmU0R/ml9M64wscXDheQ/++vhs7ZGiWn39jxQpO5Y/P2U/+7LMPRHx048p9nWsLndm7trF8ampyavZ/vDspenhmblrhy9cGj8/eX7y8uiLoyeOHzt+YuRIW+d1vcmx0zff+6D/07G3vv367zTy3a9jKU7GK9kTl5/HZhmMwfrvJK1O6jux2YUVpCP7O1n+EqfOAivEhuSvX1dEPBX90RFLL15/fPJqoZUDtlQ1RVSBkkriH0oq7wfk1/Yrr4MrhfRKgO1w/9TCAMDq+O9cGBuMnvrYwO4HKZYP66SIaG9krtGeiLh7Z+zmuTtjN2OLxuGA5uZvRMTTzeI/1eN/IHpioB7/lYb4r/ULzmQ/a8dfa7P8lUPF4h+2z0L896wZ/9Ei/t9eFv/vtFn+4NLmu70N8d/b7ikBAAAAAABAad0+FdknfEtzABb2Kovzf6LJ/J++iDi5CeUPrthf/fl/5d4mFAM0cf9UxMtN5/9W8tm/Ax3Z1v/q8wG60rkLU5NHIuL/EXEounbV9kfWKOPwZ/u+apU2mM3/yx+18u9mcwGzetzr3NWYZ2J8dvxRzxuIuH8j4pmm83/TYvufmrT/tfeD6YcsY9/zt860Sls//oGtUv0m4mDT9n/prhVp7ftzDNf7A8N5r2C1Zz/6/PtW5bcb/24xAY+u1v7vXjv+B9Ly+/XMbLyMo3Od1VZp7fb/u9Mb9VvOdGfHPhyfnb06EtGdTnf0RHfj8dGN1xl2ojwe8nipxf+h55pf/6/V/++NiPkV/3f6s3FNce7Jf/p+a1Uf/X8oTi3+JzbU/m98Y/TWwA+tyn+49v9Yva0/lB0x/gcLvszDtLvxeJNw7GyWtN31BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdoBIReyJVhha3K5WhoYi+iHgidlemrszMvnDuyvuXJ2pp9e//r+Tf9Nu/sJ/y7/8fWLY/umL/aETsjYgvOnrr+0Nnr0xNFH3yAAAAAAAAAAAAAAAAAAAA8Jjoa7H+v+b3jqJrB2y5zqIrABSmSfz/XEQ9gO2n/YfyEv9QXuIfykv8Q3mJfygv8Q/lJf6hvMQ/AAAAAADsKHsP3P4lRcT8S731R013ltZVaM2ArVYpugJAYdziB8rL1B8ory7vAFB6aZ30npaZ1su5lumzj5AZAAAAAAAAAAAAAErn4H7r/6GsrP+H8rL+H8orX/17oOB6ANvPNT4Q66zkb7r+f91cAAAAAAAAAAAAAMBmmpm7dnF8amryqo03N5ZrJ/zqqtXq9dpfweNSn//4Rj4V/nGpz4qNfK3fw+Uq7j0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9G8AAAD//0JvIXg=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x38000000000000) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 1m59.801476988s ago: executing program 2 (id=1820): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file3\x00', 0x2000400, &(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x5, 0x258, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) 1m57.978116538s ago: executing program 2 (id=1822): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0)=0x7, 0x4) 1m56.862151976s ago: executing program 4 (id=1824): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x10812, r0, 0x855a5000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1m56.725221343s ago: executing program 2 (id=1825): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 1m56.558083218s ago: executing program 1 (id=1826): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x89, 0x20000000000001fe, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}], 0x1, 0x0) 1m55.655621794s ago: executing program 1 (id=1828): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000480)={0x11, 0xf8, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xffdd) 1m54.735985656s ago: executing program 1 (id=1830): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = io_uring_setup(0x79bf, &(0x7f0000000180)) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000100)={0x0, 0x0, 0x2}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) syz_clone3(0x0, 0x0) fsopen(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0xfea000, 0x2000402) pwritev2(r1, &(0x7f00000013c0)=[{&(0x7f0000000140)="e5", 0x1}], 0x1, 0xa, 0xb, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.964692791s ago: executing program 1 (id=1831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x44810) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 1m51.862005307s ago: executing program 1 (id=1834): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) socket(0x400000000010, 0x6, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) pipe(&(0x7f00000001c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x6e) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpquota}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x38000000000000) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 1m51.662852362s ago: executing program 2 (id=1835): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0xb00, 0x2000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x100000000000003, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 1m50.895787898s ago: executing program 4 (id=1837): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockname$tipc(r0, 0x0, &(0x7f0000000100)) 1m47.953130419s ago: executing program 49 (id=1837): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockname$tipc(r0, 0x0, &(0x7f0000000100)) 1m47.933396061s ago: executing program 2 (id=1840): openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x4041051}, 0x4040004) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000480)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x1, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd611, 0x10000006, 0x9, 0x7, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 1m47.868392009s ago: executing program 1 (id=1841): socket(0x1e, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000240)={'syz_tun\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1000007fd) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x40, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) 1m45.821576234s ago: executing program 50 (id=1841): socket(0x1e, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000240)={'syz_tun\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1000007fd) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x40, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) 1m32.662760566s ago: executing program 51 (id=1840): openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x4041051}, 0x4040004) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000480)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x1, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd611, 0x10000006, 0x9, 0x7, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 23.281594746s ago: executing program 7 (id=1917): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x0, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x2, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x3, 0x41, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x3) 21.887181317s ago: executing program 7 (id=1919): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x80, 0x1, 0x5, 0x5, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x64, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@generic={0x7, 0x2}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="7b87f20fbc"], &(0x7f0000000200)='GPL\x00', 0x20000000, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.079783463s ago: executing program 7 (id=1922): syz_emit_ethernet(0x36, &(0x7f0000002340)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 20.464598654s ago: executing program 7 (id=1924): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x1, 0xbb8, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 18.232987073s ago: executing program 7 (id=1927): unshare(0x62040200) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r0, &(0x7f0000001240)=""/102390, 0x18ff6, 0x0) 14.115161328s ago: executing program 3 (id=1935): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_emit_ethernet(0x137, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x101, 0x0, 0x0, @private2, @empty, {[], "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"}}}}}, 0x0) syz_clone3(0x0, 0x0) chdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 13.571906557s ago: executing program 7 (id=1936): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000180)=0x9, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 10.800270596s ago: executing program 52 (id=1936): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000180)=0x9, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 10.777325493s ago: executing program 3 (id=1939): r0 = socket$inet6(0x10, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file0/file0\x00', 0x800020, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0], 0x2, 0x150e, &(0x7f0000001540)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@auto_da_alloc}, {@nombcache}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time}, {@commit}, {@nodiscard}], [{@seclabel}]}, 0x1, 0xbb9, &(0x7f0000006f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x7, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002e00)={0x2020}, 0x2020) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioprio_get$pid(0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="06001600ea"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x90) pread64(r5, &(0x7f0000000080)=""/234, 0xea, 0x58) 8.580230998s ago: executing program 0 (id=1943): r0 = inotify_init() ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_012={0x1, 0x0, 0x9, 'a'}, @global=@item_012={0x1, 0x1, 0x1, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.549514426s ago: executing program 0 (id=1944): socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0xffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1, @ANYRESHEX], 0x0) 6.863088985s ago: executing program 3 (id=1945): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 6.420906022s ago: executing program 0 (id=1946): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x105da, &(0x7f00000311c0)="$eJzs3E1vG2UQAOBx0pQ2lBIhDty6EkJKpNqKk7SCW4BUgESqiI8DJ3Bsx3Lrjyh2ElOECJwRx/4ROHHnzp/ghjggcSsCeXcNTSlqoMYh9fNI69n39e7svFakaHYtBzC1FpJffi7E5bgYEbMRcSki3S/kW2o9Cy9ExJWImLlvK+Tzf0ycj4j5iLg8TJ7lLORvfXr3aPPeYHM+z3r1dFYM/B+8FBHt3Wz/sJ3FbiOLt/L5ykEzje21gzxmb7Rv5+NuFg/r22mGw8rouEoaVxvZ8d3d/d4w7rQq1WFsNHfS+d1OdsHeQWOUJz3hVmUvHdfq26Nyj9Lz7mSDQR7v9PpZnlqe7+M0ffT7o5jN1wf1bD27t9NY7fTz+W5WX60+GMaDPPay6ah2W7W0ju1/+SGfAW83O/uD5KC+12t2O8m1UvnlUvl6sbzXrdX79bVipV27vpYsNlrDw4r9eqW93uh2G616qdptLyWLjWq1WC4nixv17Walk5TLpdXScvHaUr53NXnj5vtJq5YsDuNrzc5+v9nqJTvdvSQ7YylZKa2+spS8WE7e3dxKtt65cWNz670PNz64+ermW6/nB/2lrGRxZXllpVheLq6Ul/7hgn+d4Ppn84s8ev3Df9GTWf8DLjze6Uy7wmkXAHD2pP3/xZhk///Jt3d/2vii8r3+H6bYWer/m3lDrv8fv6nr/0+w/s+naP36fx6L/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGr9MPf1m+nOQjZ+Op9/Jp96Lh8XImImIn57iNk4fyznbJ5n7m+On3ughu8KkWYYXuOpfJuPiPV8u/fsw2s/N9ZPAgAAAJ5M3xxd+Srr1rOXhdMuiEnKbtrMXPpoTPkKETG38OOYss0MX54fU7L07/tcDMaULb2BdWFMyfKbYp+NKd2JzB4LF+4LhSzMTLIaAABgMo53Ap6oAwAAPLm+PO0CGL+TPL8rxOhR5uhZcPrN+z8fCF48NgIAAADOoMJpFwAAAAD859L+/yz//h8AAADwaNnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zcTW7aQBQH8GeDW/qloqrLSr1Kd3CMHqHLLhEH6CU4Ar1CLsAZyC5HiHCExyg4IlIUxkZBv5/kj7HgzzNi82aQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA+3Vbr+f/Fz3/n5uzq8+S5GwAAAOCUbbWeNyfTNP7UXv/SXvrWjouIKCPiVO8+inedzFGbUz3z+upJDTcRTcL+M96328eI+NVu91/7/hYAAADgem2Wq1nq1tNueumCGFKatCk//86UV0RENb3LlFbud98zhTW/73H8zZTWTGBNMoWlKbdxrrQXGXUOk6NDkQ7loOUAAACD6HYCw3YhAAAADOnP0fnignUwsCIOS5mHteDmn/ePC4IfOiMAAADgDSouXQAAAADQu6b/9/w/AAAAuG7p+X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0aVut55vlanZuzq5+hR+T9Oa6rjPcCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8sD/vKBACYRAGe9d3JnP/w0qDxoYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCL3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAiDQRjsybx0J7n/YaUDnkGEKhA+fulFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOf555WsL+OKd+NI8um18e15Jvn111y7ZDS2Dhp7B/Pu9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLJzP69xVHEAwN/s7mx/gHSNslAvVqxUFJts/YXgpQcheBA8iccl3S2rW5U2B1tyMBcPgv+BF732IgQEqQf/gh482WO9VJA9RPDgSZlfcZJddaJmdjd+PvDmfTN5mfm+CYR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKEwuh3NF3EwOnSxu5Oe+393aSPp7B/rEg/7ts0lL4qjetJdOK3lG3XlnAQAAwHHXLOr7EML9eGc96RudtP5/qhiT1PxbD2VxUc8frPuLvqj9k3bnmy/e3LtRJ7tPHEL4qjMerNU2w8V2vuK4MxXGpO8Ssjc0zfTb1nh9+5FJnD716NO7d19rp+GJf5cxAPBfuFj0eTCMPkp/PxqOxoPePBMDYHm1/v7TxZCi/m92asgLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM4m2+HZIo5CCI+1/ogT93a3Nmb1D/q3zxbtzNuPfly+ZnKJOIQwHI0HJ2ucyyI7X3HcjZu33u2Px4Prhwoe/0dfJRAIliU44h9QAAAcK3Hekrr+fryznpyLVkL47fP99f+FUhwq1v/fju5cKN+rXP/3apvhYqta/69uXvtg9cbNW8+NrvWvDq4O3rvUe6H38torL/ZeWk2e51p2POJsAQAAWFbtvJXr/8bK9Pr/6VIcKtb/3/341k/lezXV/1MOv/5/xAkBAAD8jz187pefoxnno3Y7fNjf3Lzey457H1/KjnNI9a+dmj51Im/l+r+5MofcAAAAgNpNtqN96/9XSnH48/X/Vghhb/3/62d+/ax8zWb+CmI4Gg8ubrw/vlLjfBbV9Pp/Z+a4Ov6cuIbpAgAAMCen8lZe/4/T/f+NJ4oxjRDC009mcf5vACvt/3+19cnl8r3K+/+fr2+KC6nRzZ5Hlf3/6dhuCK1uDYkBAACw7Gbs/g/hZN6S+v+HeGf9nS9Pv9G2/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDf2Z9724SBMI7Dry+JErfJCOktPmagoUKwAiAhWfIMDMBCNFS0FovACiDBuaYzFM/T/H/FFfcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv7/r0xUdEFJG6TJGm27/zZ0R8Rdq17eT7nsX+cmp+Hrk4HGc5f2P+X0ZEGUUf5wAA9K7qNsd6U68GeYd5R3nHeauyqZev/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLECAAD//54WVeM=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5.484316434s ago: executing program 3 (id=1947): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000400)) pipe(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000140)={0x1, 0xffffffff, 0xfffffffc, 0x9, 0x1, 0x101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}]}}}]}, 0x60}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4(r0, 0x0, &(0x7f0000000240), 0x800) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="aaabc8c714b923ff4904421c1f8a113ead79799b2e3e5621fc4c0be75ab0a7ac93ae2aeb9cf25facfd230e3a95988c710bfa16df9ad4c2944f40e32ab68ca802c5c5f1b73565060e19b4d05ff6a57fb9974a93ea9d31fb4aa44b7e721e548911"], 0x1, 0x23e, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r6, 0x0, 0x8001) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 2.181910771s ago: executing program 0 (id=1948): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @adiantum, 0x4, @desc4}) 993.12843ms ago: executing program 0 (id=1949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000001a27030000000000000000000000000000fdffffffffffffff0000000000000000ff0f000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a00040000000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200", @ANYRESOCT=r0], 0x170}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 954.400432ms ago: executing program 3 (id=1950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x2, 0x6}) 132.02662ms ago: executing program 0 (id=1951): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x5508, &(0x7f0000000740)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9jCJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmamuvUDhKaJ3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/drSulsWVVr4+3dnrj+J2p1YfxVZ7O5vf6eUX7A9bR3myDzys7WbjRnMri+1+msXWYV7XwWH+f9thf5DnaRT5PszSx2BwFPP55kEz38/OoyzWe4NiPs+bNpoHozgsYnG5qKedRlbH1km+6f+3t9q9vYNk2Nztt9Neslapvlip3ilXd9NGc9BcLde6jTuryUKrM1pWHjRr3fVWmrY6zUo97S4mC616vVytJgt3m1vtWi+pVisrlaXy2mJxdjt57f67SaeRLIziK+3e3qDd6Sfb6W6Sf2IxWa6svLSY3Komb29sJpsP7t3b2Hzn/bvv3X95441Xi0V/KytZWF5aXi5Xl8rL1cVztP+Pi6LHuH84kdK0CwA4e/T/wDScXv+/+yDi9Pv/0P+PxZnqfyfY/79wTvYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4t76f++L17GQ+H18r5p8qpp4pxqWImImI3/7BbFw8lnO2yDP3L+vn/lLDN6XIMoyucak4rkbEenH8+vRpfwsAAADw5Pryo5uf5t16/jI/7YKYpPymzcz1D8aUrxQRc/M/jCnbzOjl2TEly/59X4iDMWXLbmBdHlOy/JbbhXFl+09mj4XLj4VSHmYmWg4AADARxzuByXYhAAAATNIn0y6A6SjF0aPMo2fB2V/e//lA8MqxEQAAAHAGlaZdAAAAAHDqsv7f7/8BAADAky3//T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+Z+d+bhMHojgAPxu8sP+0aLX3bWVvUMaWsMc9RhSQJiggB9JCGqAGcksJEUR4HAIRh0ge20r0fZIzGcv8eIPgMDPSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdOm+Wi9ur35ft83Z7dvJMxoAAADgkm21XtT/zFL/a3P/e3PrZ9MvIqKMiEtz91F8OsscNTnVy/M3p89Xr2q4i6gTDu8xaa4vEfGnuR5/dP0pAAAAwMe1Wa7mabae/syGLog+pUWb8tvfTHlFRFSzh0xp5SHvV6aw+vs9jv+Z0uoFrGmmsLTkNs6V9ib1z/24ajc9aYrUlBdfdiwy29gBAIAejc6afmchAAAA9Onf0AUwjCKetzKPW4GT1DTbe5/PegAAAMA7VAxdAAAAANC5ev7f0/l/e+f/AQAAwDDS+X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0aVutF5vlat42Z7dvJ89oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGJ/3lEgBMIgDPau70zm/oeVBk1NTapA+PgbgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi/15SYEQCIIomDP+d9L3P6wk6BlEiICGRxW1aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi527542jCAMAPLt7eyHh6zDoCiMEEgU05HIJCekQBcii4CcgWc4lmFz4SFyQKEK4oUOu0yAoEUICmS7/IXUipQldiiuCRA2avV3fJrHk42v3bD+PNDvvrVY77+xJlt+dsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAyeWcWZ/HQm8Zpee72g+trsb/zSB/d3Lq7HFuMkyaT3h9eqn9I+u0lAgAAwOGRVfV9COFevr0S+7RX1P95dU2s+b97ehpX9fyjdX/VV7V/bL/+cv+FnYF603HiTc+vj0cnHk+l8//NcrE9u+cVneLJF+9esuILSd/ffH6SF88z+ebWrXe7RXikiWwBgH/ieNWXQfX7UOyHbSYGwKHRqRXeVf2f9drNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAJk83wZBUnIYTlziyO7jy4vrZbf3Pr7nLVzty4sRW+mt0z3iIPIZxfH49ONDqbxXbl6rWLq+Px6HLzwcshhLZGf7uc/sUPx8/seXEIrTwfwX8UpOWXvSj57I+gxR9KAAAcSHnZYl1/L99eieeSpRD+/P7h+v+1WhzmrP/vf3Tmdn2sev0/bGyGi2+wcemzwZWr195Yv7R6YXRh9MmbJ4dvDU+dPX367KB4VzLwxgQAAIB/p1u2ev2fLj2+/n+sFoc56//Pvx1+WR8rU//varbo13YmAAAAh9tzr/zxe7LL+aTbDV+sbmxc7oR4HO58Pjk9tpDq33akbPX6P1tqOysAAACgCZPN5KH1/3O1OMy5/v/UDy/+VL9nFkI4Wq7/H1/7dHyuuekstCb+nLjtOQIAANCuo2Wrr//nxf7/dGfLQxpCeP3VaVz+G8C56v/sva9/rI9V3/9/qrkpLqS0P30eRd8PodNvOyMAAAAOsifKFov93/LtlY9/PvZB1/5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKb9FQAA//+AcD1H") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) 0s ago: executing program 3 (id=1952): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): c03 length: 249 > 1 [ 1062.011033][ T5873] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.033305][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1062.048967][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1062.093037][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1062.119228][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1062.185986][T11977] loop5: detected capacity change from 0 to 1024 [ 1062.622763][T11929] chnl_net:caif_netlink_parms(): no params data found [ 1062.969293][T11815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1063.465212][T11988] loop5: detected capacity change from 0 to 256 [ 1063.529056][T11815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1063.752471][T11815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1064.003100][T11815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1064.302960][ T5785] Bluetooth: hci3: command tx timeout [ 1064.577077][ T5873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.791115][ T5873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.061255][ T5873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.428851][ T5873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.853743][T11929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.862276][T11929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.870530][T11929] bridge_slave_0: entered allmulticast mode [ 1065.890000][T11929] bridge_slave_0: entered promiscuous mode [ 1065.958311][T11929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.968887][T11929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.013006][T11929] bridge_slave_1: entered allmulticast mode [ 1066.054462][T11929] bridge_slave_1: entered promiscuous mode [ 1066.362216][ T5785] Bluetooth: hci3: command tx timeout [ 1066.824437][T11929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.247795][T11929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.059691][ T5873] bridge_slave_1: left allmulticast mode [ 1068.066139][ T5873] bridge_slave_1: left promiscuous mode [ 1068.073158][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.116986][ T5873] bridge_slave_0: left allmulticast mode [ 1068.123436][ T5873] bridge_slave_0: left promiscuous mode [ 1068.130140][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.223407][ T5873] bridge_slave_1: left allmulticast mode [ 1068.229333][ T5873] bridge_slave_1: left promiscuous mode [ 1068.236564][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.270110][ T5873] bridge_slave_0: left allmulticast mode [ 1068.277250][ T5873] bridge_slave_0: left promiscuous mode [ 1068.290032][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.347961][ T5873] bridge_slave_1: left allmulticast mode [ 1068.354093][ T5873] bridge_slave_1: left promiscuous mode [ 1068.360744][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.418570][ T5873] bridge_slave_0: left allmulticast mode [ 1068.424715][ T5873] bridge_slave_0: left promiscuous mode [ 1068.431443][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.455830][ T5785] Bluetooth: hci3: command tx timeout [ 1070.124931][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.182226][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.207509][ T5873] bond0 (unregistering): Released all slaves [ 1070.522997][ T5785] Bluetooth: hci3: command tx timeout [ 1070.674318][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.701347][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.759849][ T5873] bond0 (unregistering): Released all slaves [ 1071.180214][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.201025][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.218755][ T5873] bond0 (unregistering): Released all slaves [ 1071.269406][T11929] team0: Port device team_slave_0 added [ 1071.333145][T11978] chnl_net:caif_netlink_parms(): no params data found [ 1071.625056][T11929] team0: Port device team_slave_1 added [ 1071.738855][T12026] loop2: detected capacity change from 0 to 40427 [ 1071.811038][T12026] F2FS-fs (loop2): Unable to read 1th superblock [ 1071.853119][T12026] F2FS-fs (loop2): Unable to read 2th superblock [ 1072.767747][T11929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.776379][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.807616][T11929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.232031][T11929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.239330][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.266386][T11929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.343080][ T5915] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1073.530205][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1073.567457][ T5915] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1073.576225][ T5915] usb 6-1: config 0 has no interface number 0 [ 1073.602299][ T5915] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.616480][ T5915] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.627681][ T5915] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1073.637240][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.765847][ T5915] usb 6-1: config 0 descriptor?? [ 1073.964665][T11815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.365993][T11929] hsr_slave_0: entered promiscuous mode [ 1074.396462][T11929] hsr_slave_1: entered promiscuous mode [ 1074.471116][T11929] debugfs: 'hsr0' already exists in 'hsr' [ 1074.477286][T11929] Cannot create hsr debugfs directory [ 1074.589459][ T5915] uclogic 0003:28BD:0094.0012: pen parameters not found [ 1074.598503][ T5915] uclogic 0003:28BD:0094.0012: interface is invalid, ignoring [ 1074.876013][ T5915] usb 6-1: USB disconnect, device number 43 [ 1075.439521][T11978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.447544][T11978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.512596][T11978] bridge_slave_0: entered allmulticast mode [ 1075.542273][T11978] bridge_slave_0: entered promiscuous mode [ 1075.796859][T11978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.808596][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.852672][T11978] bridge_slave_1: entered allmulticast mode [ 1075.894259][T11978] bridge_slave_1: entered promiscuous mode [ 1076.487379][T11815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.676379][ T5873] hsr_slave_0: left promiscuous mode [ 1076.736506][ T5873] hsr_slave_1: left promiscuous mode [ 1076.754377][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.762426][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.794677][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.802735][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.876184][ T5873] hsr_slave_0: left promiscuous mode [ 1076.904045][ T5873] hsr_slave_1: left promiscuous mode [ 1076.934621][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.942683][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.973350][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.981097][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.055018][ T5873] hsr_slave_0: left promiscuous mode [ 1077.062369][T11032] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1077.095016][ T5873] hsr_slave_1: left promiscuous mode [ 1077.115749][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.123784][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.142506][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.150207][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.241535][ T5873] veth1_macvtap: left promiscuous mode [ 1077.264764][ T5873] veth0_macvtap: left promiscuous mode [ 1077.271044][ T5873] veth1_vlan: left promiscuous mode [ 1077.287578][T11032] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1077.300082][T11032] usb 6-1: config 0 has no interface number 0 [ 1077.309972][ T5873] veth0_vlan: left promiscuous mode [ 1077.333358][T11032] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1077.342915][T11032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.351330][T11032] usb 6-1: Product: syz [ 1077.355945][T11032] usb 6-1: Manufacturer: syz [ 1077.360778][T11032] usb 6-1: SerialNumber: syz [ 1077.372840][ T5873] veth1_macvtap: left promiscuous mode [ 1077.379015][ T5873] veth0_macvtap: left promiscuous mode [ 1077.385221][ T5873] veth1_vlan: left promiscuous mode [ 1077.391309][ T5873] veth0_vlan: left promiscuous mode [ 1077.434833][T11032] usb 6-1: config 0 descriptor?? [ 1077.450895][ T5873] veth1_macvtap: left promiscuous mode [ 1077.473932][ T5873] veth0_macvtap: left promiscuous mode [ 1077.480232][ T5873] veth1_vlan: left promiscuous mode [ 1077.512626][ T5873] veth0_vlan: left promiscuous mode [ 1077.938033][T11032] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1077.950189][T11032] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1077.993679][T11032] asix 6-1:0.251: probe with driver asix failed with error -5 [ 1078.086821][T11032] usb 6-1: USB disconnect, device number 44 [ 1079.360285][T12081] loop5: detected capacity change from 0 to 1024 [ 1079.405213][T12081] EXT4-fs: Ignoring removed i_version option [ 1079.430672][T12081] EXT4-fs: inline encryption not supported [ 1080.416302][T12086] loop2: detected capacity change from 0 to 512 [ 1080.508088][T12086] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1538: inode has both inline data and extents flags [ 1080.549800][T12086] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1538: couldn't read orphan inode 15 (err -117) [ 1080.599916][T12086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.131684][T10894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.218474][ T5873] team0 (unregistering): Port device team_slave_1 removed [ 1081.323239][ T5873] team0 (unregistering): Port device team_slave_0 removed [ 1081.630625][T12096] loop2: detected capacity change from 0 to 1024 [ 1081.719751][T12096] EXT4-fs: Ignoring removed oldalloc option [ 1081.726879][T12096] EXT4-fs: Ignoring removed bh option [ 1081.874670][T12096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.038455][T12096] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1082.331179][T10894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.656343][ T5873] team0 (unregistering): Port device team_slave_1 removed [ 1082.753949][ T5873] team0 (unregistering): Port device team_slave_0 removed [ 1083.547805][T12109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1084.190044][ T5873] team0 (unregistering): Port device team_slave_1 removed [ 1084.275962][ T5873] team0 (unregistering): Port device team_slave_0 removed [ 1084.339604][T12117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1543'. [ 1084.959239][T11978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.162701][ T7874] bridge0: port 3(syz_tun) entered disabled state [ 1085.189724][T12122] loop2: detected capacity change from 0 to 1024 [ 1085.209382][ T7874] syz_tun (unregistering): left allmulticast mode [ 1085.216334][ T7874] syz_tun (unregistering): left promiscuous mode [ 1085.223385][ T7874] bridge0: port 3(syz_tun) entered disabled state [ 1085.269205][T12122] EXT4-fs: inline encryption not supported [ 1085.397458][T11978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.421254][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.429037][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.493272][T12122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.106663][T10894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.310759][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.318491][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.445241][T11978] team0: Port device team_slave_0 added [ 1086.643664][T11978] team0: Port device team_slave_1 added [ 1087.200125][T11978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.208926][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.241427][T11978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.379361][T11978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.388000][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.416028][T11978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.165237][T11978] hsr_slave_0: entered promiscuous mode [ 1088.198372][T11978] hsr_slave_1: entered promiscuous mode [ 1088.787994][T10030] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.198876][T10732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1089.210419][T10732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1089.220914][T10732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1089.259402][T10732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1089.285245][T10030] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.288530][T10732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1089.597132][T10030] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.672487][T11929] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1089.735135][T11929] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1089.976542][T10030] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.007127][T11929] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1090.209006][T11929] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1091.325184][T10732] Bluetooth: hci1: command tx timeout [ 1091.948670][T10030] bridge_slave_1: left allmulticast mode [ 1091.957302][T10030] bridge_slave_1: left promiscuous mode [ 1091.968683][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.984746][T10030] bridge_slave_0: left allmulticast mode [ 1091.990712][T10030] bridge_slave_0: left promiscuous mode [ 1091.999663][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.486297][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1092.501072][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1092.512511][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1092.556251][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1092.569025][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1093.183788][T12179] loop2: detected capacity change from 0 to 512 [ 1093.232391][T12179] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1093.314280][T12179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 1093.333770][T10030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.354619][T12179] System zones: 1-12 [ 1093.377199][T12179] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1553: corrupted in-inode xattr: e_value size too large [ 1093.378400][T10030] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 1093.402165][ T5785] Bluetooth: hci1: command tx timeout [ 1093.443406][T10030] bond0 (unregistering): Released all slaves [ 1093.489660][T12179] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1553: couldn't read orphan inode 15 (err -117) [ 1093.629748][T12179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.934808][T10030] tipc: Disabling bearer [ 1093.940949][T10030] tipc: Left network mode [ 1094.682403][ T5785] Bluetooth: hci5: command tx timeout [ 1094.866869][T10894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.061176][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1095.069598][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1095.406815][T10030] hsr_slave_0: left promiscuous mode [ 1095.417443][T10030] hsr_slave_1: left promiscuous mode [ 1095.433449][T10030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.441077][T10030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.454530][T10030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.462558][T10030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.482963][T10732] Bluetooth: hci1: command tx timeout [ 1095.501256][T10030] veth1_macvtap: left promiscuous mode [ 1095.507856][T10030] veth0_macvtap: left promiscuous mode [ 1095.517001][T10030] veth1_vlan: left promiscuous mode [ 1095.526769][T10030] veth0_vlan: left promiscuous mode [ 1096.601572][T10030] team0 (unregistering): Port device team_slave_1 removed [ 1096.669421][T10030] team0 (unregistering): Port device team_slave_0 removed [ 1096.762363][T10732] Bluetooth: hci5: command tx timeout [ 1097.340707][T12147] chnl_net:caif_netlink_parms(): no params data found [ 1097.565580][T10732] Bluetooth: hci1: command tx timeout [ 1097.997477][T10030] IPVS: stop unused estimator thread 0... [ 1098.576047][T11978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1098.647409][T11978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1098.845426][T10732] Bluetooth: hci5: command 0x040f tx timeout [ 1098.879420][T11978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1098.944624][T11978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1099.448647][T11929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.502085][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.509712][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.543632][T12147] bridge_slave_0: entered allmulticast mode [ 1099.569581][T12147] bridge_slave_0: entered promiscuous mode [ 1099.618786][T12171] chnl_net:caif_netlink_parms(): no params data found [ 1099.791076][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.799085][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.842625][T12147] bridge_slave_1: entered allmulticast mode [ 1099.868031][T12147] bridge_slave_1: entered promiscuous mode [ 1099.948984][T12207] loop2: detected capacity change from 0 to 40427 [ 1100.013501][T12207] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1100.021596][T12207] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1100.058146][T12207] F2FS-fs (loop2): invalid crc value [ 1100.487027][T11929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.574547][T12147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.780068][T12147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.922207][T10732] Bluetooth: hci5: command 0x040f tx timeout [ 1101.292239][T12207] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1101.481390][T10029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.489081][T10029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.534756][T12147] team0: Port device team_slave_0 added [ 1101.557388][T12147] team0: Port device team_slave_1 added [ 1102.067470][T10030] bridge_slave_1: left allmulticast mode [ 1102.076254][T10030] bridge_slave_1: left promiscuous mode [ 1102.084202][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.102138][T10030] bridge_slave_0: left allmulticast mode [ 1102.108045][T10030] bridge_slave_0: left promiscuous mode [ 1102.115067][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.697616][T10030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.735456][T10030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.754325][T10030] bond0 (unregistering): Released all slaves [ 1102.902571][T12147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.909791][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.936451][T12147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.976687][T10029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.984421][T10029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.005914][T10732] Bluetooth: hci5: command 0x040f tx timeout [ 1103.088541][T12147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.095996][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.126188][T12147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.189915][T10030] hsr_slave_0: left promiscuous mode [ 1103.200007][T10030] hsr_slave_1: left promiscuous mode [ 1103.227563][T10030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.238444][T10030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.840981][T10030] team0 (unregistering): Port device team_slave_1 removed [ 1103.881118][T10030] team0 (unregistering): Port device team_slave_0 removed [ 1104.171509][T12171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.185258][T12171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.196513][T12171] bridge_slave_0: entered allmulticast mode [ 1104.210901][T12171] bridge_slave_0: entered promiscuous mode [ 1104.381503][T12171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.389427][T12171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.403147][T12171] bridge_slave_1: entered allmulticast mode [ 1104.413732][T12171] bridge_slave_1: entered promiscuous mode [ 1104.757655][T12171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.849420][T12147] hsr_slave_0: entered promiscuous mode [ 1104.862390][T12147] hsr_slave_1: entered promiscuous mode [ 1104.872507][T12147] debugfs: 'hsr0' already exists in 'hsr' [ 1104.878469][T12147] Cannot create hsr debugfs directory [ 1104.936535][T12171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.182156][T12259] loop2: detected capacity change from 0 to 256 [ 1105.205734][T12171] team0: Port device team_slave_0 added [ 1105.208589][T12259] exfat: Deprecated parameter 'utf8' [ 1105.254891][T12259] exfat: Deprecated parameter 'utf8' [ 1105.318452][T12171] team0: Port device team_slave_1 added [ 1105.339853][T12259] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1105.663844][T12171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.671374][T12171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.699836][T12171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.816843][T12171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.824553][T12171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.851322][T12171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.563268][T12171] hsr_slave_0: entered promiscuous mode [ 1106.574843][T12171] hsr_slave_1: entered promiscuous mode [ 1106.589124][T12171] debugfs: 'hsr0' already exists in 'hsr' [ 1106.595541][T12171] Cannot create hsr debugfs directory [ 1106.735078][T11978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.643661][T11978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.875396][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.883309][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.000334][T10029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.008275][T10029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.476285][T11929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.518084][T12147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1108.661035][T12147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1108.852928][T12147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1108.917672][T12147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1110.081651][T12171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1110.251509][T12171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1110.354423][T12171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1110.547743][T12171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1111.560944][T12147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.664561][T11978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.908202][T10732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1111.955611][T10732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1111.981109][T10732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1112.054183][T10732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1112.084286][T10732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1112.234286][T12147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.337029][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.344801][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.638480][T10029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.646201][T10029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.752901][T12171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.202604][ T5785] Bluetooth: hci2: command tx timeout [ 1114.258483][T12147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1114.792495][T12171] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.958648][T10030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.966460][T10030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.455784][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.463510][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.781588][T12285] chnl_net:caif_netlink_parms(): no params data found [ 1116.283945][ T5785] Bluetooth: hci2: command tx timeout [ 1116.563841][T10029] bridge_slave_1: left allmulticast mode [ 1116.569740][T10029] bridge_slave_1: left promiscuous mode [ 1116.576793][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.630427][T10029] bridge_slave_0: left allmulticast mode [ 1116.636704][T10029] bridge_slave_0: left promiscuous mode [ 1116.648080][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.020620][T12314] loop2: detected capacity change from 0 to 256 [ 1117.093757][T12314] exfat: Deprecated parameter 'utf8' [ 1117.099538][T12314] exfat: Deprecated parameter 'utf8' [ 1117.113543][T12314] exfat: Deprecated parameter 'utf8' [ 1117.263973][T12314] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1117.508128][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.528494][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.564272][T10029] bond0 (unregistering): Released all slaves [ 1117.897026][T10029] hsr_slave_0: left promiscuous mode [ 1117.917853][T10029] hsr_slave_1: left promiscuous mode [ 1117.937629][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.970645][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.362400][ T5785] Bluetooth: hci2: command tx timeout [ 1118.444171][T12317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.018663][T10029] team0 (unregistering): Port device team_slave_1 removed [ 1119.069320][T10029] team0 (unregistering): Port device team_slave_0 removed [ 1119.976386][T11978] veth0_vlan: entered promiscuous mode [ 1120.112029][T12147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.377268][T11978] veth1_vlan: entered promiscuous mode [ 1120.442561][ T5785] Bluetooth: hci2: command tx timeout [ 1120.798103][T12285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.805880][T12285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.853185][T12285] bridge_slave_0: entered allmulticast mode [ 1120.903858][T12285] bridge_slave_0: entered promiscuous mode [ 1121.015222][T12285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.025570][T12285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.045163][T12285] bridge_slave_1: entered allmulticast mode [ 1121.059754][T12285] bridge_slave_1: entered promiscuous mode [ 1121.612516][T12285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.793020][T12285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.219574][T12285] team0: Port device team_slave_0 added [ 1122.359314][T12285] team0: Port device team_slave_1 added [ 1122.622896][T12331] loop2: detected capacity change from 0 to 512 [ 1122.783867][T10732] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1122.787913][T10732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1122.790668][T10732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1122.814960][T10732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1122.818614][T12147] veth0_vlan: entered promiscuous mode [ 1122.819894][T10732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1122.829172][T12285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.829261][T12285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.829433][T12285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.933823][T12171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.973016][T12285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.973112][T12285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.973456][T12285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.406496][T12147] veth1_vlan: entered promiscuous mode [ 1123.560592][T12285] hsr_slave_0: entered promiscuous mode [ 1123.587455][T12285] hsr_slave_1: entered promiscuous mode [ 1123.615037][T12285] debugfs: 'hsr0' already exists in 'hsr' [ 1123.621164][T12285] Cannot create hsr debugfs directory [ 1124.922151][ T5785] Bluetooth: hci4: command tx timeout [ 1125.150079][T12343] loop2: detected capacity change from 0 to 512 [ 1125.196726][T12343] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1125.778390][T12343] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6 [ 1125.798089][T12147] veth0_macvtap: entered promiscuous mode [ 1126.381592][T12147] veth1_macvtap: entered promiscuous mode [ 1126.740377][T12171] veth0_vlan: entered promiscuous mode [ 1127.011135][ T5785] Bluetooth: hci4: command tx timeout [ 1127.030031][T12147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.238497][T12335] chnl_net:caif_netlink_parms(): no params data found [ 1127.397373][T12147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.521109][T12171] veth1_vlan: entered promiscuous mode [ 1127.819517][ T1125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.952121][ T59] bridge_slave_1: left allmulticast mode [ 1127.958125][ T59] bridge_slave_1: left promiscuous mode [ 1127.965453][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.023024][ T59] bridge_slave_0: left allmulticast mode [ 1128.028932][ T59] bridge_slave_0: left promiscuous mode [ 1128.035961][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.079203][T12350] loop2: detected capacity change from 0 to 256 [ 1128.502103][T10991] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1128.703458][T10991] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1128.712742][T10991] usb 3-1: config 1 has an invalid descriptor of length 161, skipping remainder of the config [ 1128.723702][T10991] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1128.733101][T10991] usb 3-1: config 1 has no interface number 0 [ 1128.751303][T10991] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1128.803646][T10991] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1128.839222][T10991] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1128.849030][T10991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.858089][T10991] usb 3-1: Product: syz [ 1128.862591][T10991] usb 3-1: Manufacturer: syz [ 1128.867422][T10991] usb 3-1: SerialNumber: syz [ 1128.968646][T10991] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1128.976206][T10991] cdc_ncm 3-1:1.1: bind() failure [ 1129.093434][ T5785] Bluetooth: hci4: command tx timeout [ 1129.587526][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.612537][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.637641][ T59] bond0 (unregistering): Released all slaves [ 1129.931405][ T1125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.967145][ T1125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.208525][ T1125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.515553][ T59] hsr_slave_0: left promiscuous mode [ 1130.533001][ T59] hsr_slave_1: left promiscuous mode [ 1130.563246][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.585226][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.642630][ T59] veth1_vlan: left promiscuous mode [ 1130.662182][ T59] veth0_vlan: left promiscuous mode [ 1131.162428][ T5785] Bluetooth: hci4: command tx timeout [ 1131.886521][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1131.971436][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1132.287688][T10991] usb 3-1: USB disconnect, device number 23 [ 1132.562362][T12285] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1132.636027][T12285] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1132.753395][T12285] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1132.852401][T12285] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1133.460642][T12171] veth0_macvtap: entered promiscuous mode [ 1133.495709][T12335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.503604][T12335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.548813][T12335] bridge_slave_0: entered allmulticast mode [ 1133.584078][T12335] bridge_slave_0: entered promiscuous mode [ 1133.629912][T12335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.637685][T12335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.672460][T12335] bridge_slave_1: entered allmulticast mode [ 1133.692488][T12335] bridge_slave_1: entered promiscuous mode [ 1133.879491][T12360] loop2: detected capacity change from 0 to 128 [ 1133.959142][T12171] veth1_macvtap: entered promiscuous mode [ 1133.981315][T12360] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1134.131044][T12360] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.207273][T12335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.378302][T12335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.577343][T10894] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1134.797981][T12335] team0: Port device team_slave_0 added [ 1134.903770][T12335] team0: Port device team_slave_1 added [ 1134.929715][T12171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.279083][T12171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.461106][T12335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.468414][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.497518][T12335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.640199][T12335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.648090][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.676045][T12335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.087176][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.227363][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.325541][T12335] hsr_slave_0: entered promiscuous mode [ 1136.349297][T12335] hsr_slave_1: entered promiscuous mode [ 1136.394748][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.432540][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.438832][T12285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.049853][T12383] loop2: detected capacity change from 0 to 512 [ 1138.387675][T12285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.815081][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.822773][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.058851][T10030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.066741][T10030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.382753][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.390938][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.709273][T12335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1140.827127][T12335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1140.938504][T12335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1141.064721][ T5873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.073450][ T5873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.119429][T12335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1143.077558][T12421] syzkaller0: entered promiscuous mode [ 1143.084240][T12421] syzkaller0: entered allmulticast mode [ 1143.963922][T12285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.203633][T12335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.511382][T12335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.706045][T10029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.713934][T10029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.792708][T10029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.800505][T10029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.439597][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.448350][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.059177][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.067581][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.694027][T12461] loop0: detected capacity change from 0 to 128 [ 1146.888938][T12461] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1146.978790][T12461] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.398677][T12461] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 20: comm syz.0.1588: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1147.560930][T12461] EXT4-fs error (device loop0) in do_split:2027: Corrupt filesystem [ 1148.013768][T12285] veth0_vlan: entered promiscuous mode [ 1148.153259][T12147] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1148.251041][T12285] veth1_vlan: entered promiscuous mode [ 1148.615858][T12335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.889409][T12285] veth0_macvtap: entered promiscuous mode [ 1149.044734][T12285] veth1_macvtap: entered promiscuous mode [ 1149.356926][T12285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.569212][T12285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.772420][T10029] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.822610][ T8636] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.948858][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.069811][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.547898][T12514] loop2: detected capacity change from 0 to 512 [ 1152.594784][T12516] loop1: detected capacity change from 0 to 128 [ 1152.642615][T12335] veth0_vlan: entered promiscuous mode [ 1152.712470][T12514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1152.754963][T12516] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1152.830559][T12514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 1152.844036][T12335] veth1_vlan: entered promiscuous mode [ 1152.852367][T12514] System zones: 1-2, 4-12, 8-8 [ 1152.890137][T12516] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.902237][T12514] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1598: iget: bad i_size value: 38620345925642 [ 1153.041897][T12514] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1598: couldn't read orphan inode 15 (err -117) [ 1153.156638][T12514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.501906][T12335] veth0_macvtap: entered promiscuous mode [ 1153.696378][T12335] veth1_macvtap: entered promiscuous mode [ 1153.846306][T10894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.958057][T12335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.156932][T12335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.360610][ T1125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.421896][ T1125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.495582][ T1125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.569481][ T1125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.388801][T12171] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1156.414736][T12551] loop2: detected capacity change from 0 to 1024 [ 1156.485774][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.492759][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.584202][T12551] EXT4-fs: Ignoring removed orlov option [ 1156.688764][T12551] EXT4-fs: Ignoring removed orlov option [ 1156.848661][T12551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1157.099459][T12551] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1157.747014][T12567] loop1: detected capacity change from 0 to 512 [ 1157.822759][T10894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.771972][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.780461][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.155576][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.164460][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.361084][T12620] loop1: detected capacity change from 0 to 512 [ 1162.788912][T12630] loop8: detected capacity change from 0 to 512 [ 1163.908983][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.917250][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.102229][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1164.356691][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.365504][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.455665][ T24] usb 2-1: config 0 has no interfaces? [ 1164.558985][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1164.568540][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.577097][ T24] usb 2-1: Product: syz [ 1164.581504][ T24] usb 2-1: Manufacturer: syz [ 1164.586527][ T24] usb 2-1: SerialNumber: syz [ 1164.697100][ T24] usb 2-1: config 0 descriptor?? [ 1165.531096][ T24] usb 2-1: USB disconnect, device number 23 [ 1165.762852][T12649] loop4: detected capacity change from 0 to 256 [ 1165.810450][T12649] msdos: Invalid gid '0x00000000ffffffff' [ 1166.584445][T12654] fuse: Bad value for 'group_id' [ 1166.596618][T12654] fuse: Bad value for 'group_id' [ 1168.321488][T12669] loop4: detected capacity change from 0 to 512 [ 1169.552951][T12680] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1633'. [ 1169.569869][T12680] tipc: Enabling not permitted [ 1169.578055][T12680] tipc: Enabling of bearer rejected, failed to enable media [ 1170.152281][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1170.394964][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1170.407289][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.417814][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1170.506465][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1170.591362][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1170.604304][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1170.613004][ T24] usb 3-1: Product: syz [ 1170.617382][ T24] usb 3-1: Manufacturer: syz [ 1170.777108][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 1170.817450][ T24] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1170.988576][T11032] usb 3-1: USB disconnect, device number 24 [ 1171.293617][T12695] fuse: Bad value for 'group_id' [ 1171.306108][T12695] fuse: Bad value for 'group_id' [ 1171.514403][T11032] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1171.742029][T11032] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1171.751246][T11032] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.762010][T11032] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1171.834351][T11032] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1171.932922][T11032] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1171.942806][T11032] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1171.951078][T11032] usb 3-1: Product: syz [ 1171.955974][T11032] usb 3-1: Manufacturer: syz [ 1171.989224][T12706] loop1: detected capacity change from 0 to 1024 [ 1172.110582][T11032] cdc_wdm 3-1:1.0: skipping garbage [ 1172.242792][T11032] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1172.362109][T12706] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 1172.371651][T12706] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1172.381592][T12706] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1642: Failed to acquire dquot type 0 [ 1172.548575][T12706] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1172.750730][T12706] EXT4-fs (loop1): 1 truncate cleaned up [ 1172.825551][T12706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.069499][T12706] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 1173.079441][T12706] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1173.096095][T12706] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1642: Failed to acquire dquot type 0 [ 1173.698361][T12171] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.136453][T11032] usb 3-1: USB disconnect, device number 25 [ 1176.434466][ T5915] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1176.458924][T12754] fuse: Bad value for 'group_id' [ 1176.464450][T12754] fuse: Bad value for 'group_id' [ 1176.642302][ T5915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.653007][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1176.673036][T11032] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1176.768667][ T5915] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1176.778429][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.786868][ T5915] usb 5-1: Product: syz [ 1176.791365][ T5915] usb 5-1: Manufacturer: syz [ 1176.796460][ T5915] usb 5-1: SerialNumber: syz [ 1176.871218][T11032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.883566][T11032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.893803][T11032] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1176.907302][T11032] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1176.917028][T11032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.187723][T11032] usb 3-1: config 0 descriptor?? [ 1177.413255][ T5915] usb 5-1: cannot find UAC_HEADER [ 1177.575812][ T5915] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1177.702443][ T5915] usb 5-1: USB disconnect, device number 18 [ 1177.933187][T11032] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1177.981139][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1178.116590][T11032] usb 3-1: USB disconnect, device number 26 [ 1179.001645][T12766] fido_id[12766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1179.759514][T12782] loop2: detected capacity change from 0 to 512 [ 1181.862878][T12802] loop4: detected capacity change from 0 to 256 [ 1181.917406][T12802] exfat: Unknown parameter '†tf8`Bldh‡q>ä—éIO' [ 1183.022676][T12815] tipc: Started in network mode [ 1183.027956][T12815] tipc: Node identity 00000000000000000000ffffac1e0101, cluster identity 4711 [ 1183.038622][T12815] tipc: Enabling of bearer rejected, failed to enable media [ 1183.430984][T12817] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20003 [ 1183.732487][T12818] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1184.017212][T12824] loop8: detected capacity change from 0 to 512 [ 1184.193110][T11032] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1184.300192][T12824] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.388683][T12824] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.426981][T12824] Quota error (device loop8): do_check_range: Getting block 33554437 out of range 1-5 [ 1184.437597][T12824] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1184.447549][T12824] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.1672: Failed to acquire dquot type 0 [ 1184.460254][T11032] usb 5-1: Using ep0 maxpacket: 16 [ 1184.553069][T11032] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1184.562815][T11032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.571084][T11032] usb 5-1: Product: syz [ 1184.575748][T11032] usb 5-1: Manufacturer: syz [ 1184.580578][T11032] usb 5-1: SerialNumber: syz [ 1184.857545][T11032] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1184.865128][T11032] r8152-cfgselector 5-1: config 0 descriptor?? [ 1185.577036][T12285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.882690][T11032] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1186.912553][T11032] r8152-cfgselector 5-1: bad CDC descriptors [ 1186.999669][T11032] r8152-cfgselector 5-1: USB disconnect, device number 19 [ 1187.756694][T12858] loop4: detected capacity change from 0 to 512 [ 1188.016482][T12858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.152473][T12858] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1189.499488][T12335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.019941][T12887] loop2: detected capacity change from 0 to 512 [ 1190.208028][T12887] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1685: inode has both inline data and extents flags [ 1190.321304][T12887] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1685: couldn't read orphan inode 15 (err -117) [ 1190.444675][T12887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1191.003682][T12894] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1191.145354][T10894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.587525][T12903] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1689'. [ 1191.870218][T12908] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 1193.280435][T12927] loop8: detected capacity change from 0 to 256 [ 1193.347927][T12927] exfat: Unknown parameter '†tf8`Bldh‡q>ä—éIO' [ 1194.473821][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 1194.563720][T12936] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1695'. [ 1194.573325][T12936] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1695'. [ 1196.832596][T12955] loop2: detected capacity change from 0 to 256 [ 1197.123457][T12955] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1198.568956][T12976] loop2: detected capacity change from 0 to 128 [ 1198.694669][T12973] loop8: detected capacity change from 0 to 256 [ 1198.696524][T12976] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1198.749232][T12973] exfat: Unknown parameter '†tf8`Bldh‡q>ä—éIO' [ 1198.817500][T12976] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.423511][T10894] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1201.792597][T11032] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1202.027467][T11032] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1202.054784][T13006] tipc: Enabling of bearer rejected, failed to enable media [ 1202.068158][T11032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.079662][T11032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.089941][T11032] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1202.231514][T11032] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1202.241195][T11032] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1202.249841][T11032] usb 2-1: Manufacturer: syz [ 1202.359320][T11032] usb 2-1: config 0 descriptor?? [ 1202.984770][T11032] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 1203.109638][T11032] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1203.242880][T11032] usb 2-1: USB disconnect, device number 24 [ 1204.395116][T13016] fido_id[13016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1206.939070][ T5915] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1207.172715][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 1207.229108][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1207.272135][ T5915] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1207.280142][ T5915] usb 3-1: can't read configurations, error -71 [ 1209.300225][ T5915] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1209.482506][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 1209.557555][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.573429][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.585067][ T5915] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1209.595060][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.665558][ T5915] usb 2-1: config 0 descriptor?? [ 1210.075892][T13079] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 1210.234106][ T5915] koneplus 0003:1E7D:2D51.0015: item fetching failed at offset 5/7 [ 1210.283587][ T5915] koneplus 0003:1E7D:2D51.0015: parse failed [ 1210.290356][ T5915] koneplus 0003:1E7D:2D51.0015: probe with driver koneplus failed with error -22 [ 1210.304881][T13085] fuse: Bad value for 'group_id' [ 1210.310071][T13085] fuse: Bad value for 'group_id' [ 1210.498925][T11032] usb 2-1: USB disconnect, device number 25 [ 1211.515014][T13093] loop8: detected capacity change from 0 to 512 [ 1211.705371][T13093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.815882][T13093] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.376352][T13108] loop1: detected capacity change from 0 to 512 [ 1212.654465][T12285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.656067][T13108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.746765][T13108] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.959768][T13108] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1741: invalid fast symlink length 10 [ 1213.151307][T13123] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1741: invalid fast symlink length 10 [ 1213.925262][T12171] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.843167][T13121] Bluetooth: hci1: command 0x0406 tx timeout [ 1214.852693][T13121] Bluetooth: hci5: command 0x040f tx timeout [ 1215.976939][T13148] loop1: detected capacity change from 0 to 256 [ 1216.086633][T13148] exfat: Unknown parameter '†tf8`Bldh‡q>ä—éIO' [ 1216.405087][T13155] fuse: Bad value for 'group_id' [ 1216.410433][T13155] fuse: Bad value for 'group_id' [ 1217.170806][T13162] loop1: detected capacity change from 0 to 256 [ 1217.222391][T13162] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1217.233665][T13162] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1217.536117][T13162] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xaaf53d22, utbl_chksum : 0xe619d30d) [ 1217.623125][T13162] exFAT-fs (loop1): failed to load alloc-bitmap [ 1217.629631][T13162] exFAT-fs (loop1): failed to recognize exfat type [ 1217.929500][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1217.936473][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1219.093466][T13170] loop2: detected capacity change from 0 to 4096 [ 1219.294916][T13170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.775964][T10894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.277620][T13211] loop4: detected capacity change from 0 to 128 [ 1224.490882][T13212] loop1: detected capacity change from 0 to 256 [ 1224.597811][T13212] exfat: Unknown parameter '†tf8`Bldh‡q>ä—éIO' [ 1226.123103][T11032] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1226.316289][T11032] usb 2-1: Using ep0 maxpacket: 16 [ 1226.401378][T11032] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.412161][T11032] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1226.472863][T11032] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1226.482666][T11032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.496821][T11032] usb 2-1: Product: syz [ 1226.501218][T11032] usb 2-1: Manufacturer: syz [ 1226.507991][T11032] usb 2-1: SerialNumber: syz [ 1226.943974][T11032] usb 2-1: 0:2 : does not exist [ 1227.069911][T11032] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1227.365236][T11032] usb 2-1: USB disconnect, device number 26 [ 1227.757763][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.655355][T13260] erspan1: entered allmulticast mode [ 1232.654588][T13268] loop1: detected capacity change from 0 to 256 [ 1232.714473][T13268] exfat: Unknown parameter '†tf8`Bldh‡q>ä—éIO' [ 1233.730008][T13281] loop1: detected capacity change from 0 to 512 [ 1234.012658][T13281] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1234.122901][T13281] EXT4-fs (loop1): 1 truncate cleaned up [ 1234.230390][T13281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.374498][T13287] loop8: detected capacity change from 0 to 512 [ 1234.464691][T13287] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1234.470164][T13281] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1234.718584][T13287] EXT4-fs (loop8): 1 truncate cleaned up [ 1234.755247][T13287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.255504][T12171] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.358665][T13142] Bluetooth: hci2: command 0x0406 tx timeout [ 1236.051264][T13296] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1778'. [ 1239.625203][T12285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.559768][T13311] loop2: detected capacity change from 0 to 512 [ 1240.639536][T13311] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1240.650778][T13311] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (1000000) [ 1240.661269][T13311] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1241.166342][T13317] syz.1.1785 uses obsolete (PF_INET,SOCK_PACKET) [ 1241.939031][T13324] loop8: detected capacity change from 0 to 2048 [ 1242.217972][T13324] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.608650][T13340] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1242.756723][T13340] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 124 with error 28 [ 1242.769748][T13340] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1242.769748][T13340] [ 1242.786390][T13340] EXT4-fs (loop8): Total free blocks count 0 [ 1242.801949][T13340] EXT4-fs (loop8): Free/Dirty block details [ 1242.808097][T13340] EXT4-fs (loop8): free_blocks=2415919504 [ 1242.817415][T13340] EXT4-fs (loop8): dirty_blocks=128 [ 1242.823009][T13340] EXT4-fs (loop8): Block reservation details [ 1242.829203][T13340] EXT4-fs (loop8): i_reserved_data_blocks=8 [ 1243.034716][T13343] loop1: detected capacity change from 0 to 256 [ 1243.662907][T10030] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 1243.839042][T13351] loop2: detected capacity change from 0 to 512 [ 1244.174689][T13351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.677339][T13362] loop8: detected capacity change from 0 to 16 [ 1244.753861][T13362] erofs (device loop8): mounted with root inode @ nid 36. [ 1244.861230][T13362] syz.8.1795: attempt to access beyond end of device [ 1244.861230][T13362] loop8: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1244.994858][T13362] syz.8.1795: attempt to access beyond end of device [ 1244.994858][T13362] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1245.112518][T13362] erofs (device loop8): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192 [ 1245.222745][T13362] erofs (device loop8): read error -117 @ 1 of nid 89 [ 1245.290141][T13368] loop4: detected capacity change from 0 to 1024 [ 1245.365096][ T30] audit: type=1800 audit(1770239115.390:37): pid=13362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1795" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 1245.495151][T13368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1245.562699][T13142] Bluetooth: hci4: command 0x0406 tx timeout [ 1245.607953][T13368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.911253][T10894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.524484][T12335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.777157][T13399] loop8: detected capacity change from 0 to 1024 [ 1248.887980][T13399] EXT4-fs: Ignoring removed i_version option [ 1248.943309][T13399] EXT4-fs: inline encryption not supported [ 1249.091987][T13399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1250.402553][T12285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.941327][T10029] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.218147][T10029] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.558175][T10029] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.740531][T13424] loop2: detected capacity change from 0 to 128 [ 1251.847413][T10029] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.985631][T13424] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1252.082632][T13424] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.858774][T10029] bridge_slave_1: left allmulticast mode [ 1252.866200][T10029] bridge_slave_1: left promiscuous mode [ 1252.873329][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.981586][T10029] bridge_slave_0: left allmulticast mode [ 1252.987892][T10029] bridge_slave_0: left promiscuous mode [ 1252.995118][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.087530][T10894] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1254.315787][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.360013][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.408675][T10029] bond0 (unregistering): Released all slaves [ 1255.277202][T10029] hsr_slave_0: left promiscuous mode [ 1255.322250][T10029] hsr_slave_1: left promiscuous mode [ 1255.330733][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.338917][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.434668][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.443578][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.643509][T10029] veth1_macvtap: left promiscuous mode [ 1255.653742][T10029] veth0_macvtap: left promiscuous mode [ 1255.659728][T10029] veth1_vlan: left promiscuous mode [ 1255.741026][T10029] veth0_vlan: left promiscuous mode [ 1255.892438][T11032] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1256.124072][T11032] usb 2-1: Using ep0 maxpacket: 16 [ 1256.183517][T11032] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1256.195413][T11032] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.207184][T11032] usb 2-1: config 0 has no interface number 0 [ 1256.369524][T11032] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1256.379006][T11032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.390511][T11032] usb 2-1: Product: syz [ 1256.399158][T11032] usb 2-1: Manufacturer: syz [ 1256.405307][T11032] usb 2-1: SerialNumber: syz [ 1256.576015][T11032] usb 2-1: config 0 descriptor?? [ 1256.658034][T11032] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1256.666137][T11032] uvcvideo 2-1:0.105: No valid video chain found. [ 1256.867286][ T5915] usb 2-1: USB disconnect, device number 27 [ 1257.074270][T13142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1257.094082][T13142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1257.117045][T13142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1257.163596][T13142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1257.199250][T13142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1257.378649][T13449] loop4: detected capacity change from 0 to 1024 [ 1257.451458][T13454] loop2: detected capacity change from 0 to 16 [ 1257.500964][T13454] erofs (device loop2): mounted with root inode @ nid 36. [ 1257.560796][T13454] erofs (device loop2): bogus i_mode (60) @ nid 46 [ 1257.609928][T13449] EXT4-fs: Ignoring removed i_version option [ 1257.702680][T13449] EXT4-fs: inline encryption not supported [ 1258.064936][T13449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.340466][T13142] Bluetooth: hci2: command tx timeout [ 1259.697503][T12335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.764524][T10029] team0 (unregistering): Port device team_slave_1 removed [ 1260.031155][T10029] team0 (unregistering): Port device team_slave_0 removed [ 1261.402758][T13142] Bluetooth: hci2: command tx timeout [ 1261.842398][T13483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1262.717035][T10029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.875940][T10029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.017449][T10029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.349410][T10029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.485648][T13142] Bluetooth: hci2: command tx timeout [ 1264.542299][T10029] bridge_slave_1: left allmulticast mode [ 1264.548227][T10029] bridge_slave_1: left promiscuous mode [ 1264.555384][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.727792][T10029] bridge_slave_0: left allmulticast mode [ 1264.735042][T10029] bridge_slave_0: left promiscuous mode [ 1264.742008][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.485198][T13515] loop1: detected capacity change from 0 to 1024 [ 1265.562403][T13142] Bluetooth: hci2: command tx timeout [ 1265.580772][T13515] EXT4-fs: Ignoring removed i_version option [ 1265.642859][T13515] EXT4-fs: inline encryption not supported [ 1265.840214][T13515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1266.295509][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.414797][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.457530][T10029] bond0 (unregistering): Released all slaves [ 1266.593311][T13450] chnl_net:caif_netlink_parms(): no params data found [ 1266.678550][T12171] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.533607][T10029] hsr_slave_0: left promiscuous mode [ 1267.582770][T10029] hsr_slave_1: left promiscuous mode [ 1267.591446][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.599312][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.639514][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.647475][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.771895][T10029] veth1_macvtap: left promiscuous mode [ 1267.777712][T10029] veth0_macvtap: left promiscuous mode [ 1267.811269][T10029] veth1_vlan: left promiscuous mode [ 1267.822843][T10029] veth0_vlan: left promiscuous mode [ 1269.607237][T13119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1269.618410][T13119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1269.629463][T13119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1269.650880][T13119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1269.663491][T13119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1270.059171][T10029] team0 (unregistering): Port device team_slave_1 removed [ 1270.138088][T10029] team0 (unregistering): Port device team_slave_0 removed [ 1271.721984][T13142] Bluetooth: hci3: command tx timeout [ 1271.735117][T13142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1271.763514][T13142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1271.783629][T13142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1271.813329][T13142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1271.827551][T13142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1271.919510][T13450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.927627][T13450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.952390][T13450] bridge_slave_0: entered allmulticast mode [ 1271.986957][T13450] bridge_slave_0: entered promiscuous mode [ 1272.102957][T13450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.110761][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.148204][T13450] bridge_slave_1: entered allmulticast mode [ 1272.181290][T13450] bridge_slave_1: entered promiscuous mode [ 1272.656174][T13450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.797458][T10029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.875961][T13450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.132779][T10029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.544382][T13450] team0: Port device team_slave_0 added [ 1273.589056][T10029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.785019][T13450] team0: Port device team_slave_1 added [ 1273.812569][T13142] Bluetooth: hci3: command tx timeout [ 1273.847802][T10029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.887423][T13142] Bluetooth: hci4: command tx timeout [ 1274.499664][T13450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.507314][T13450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.538281][T13450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.580864][T13450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.588585][T13450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.615315][T13450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.550422][T13544] chnl_net:caif_netlink_parms(): no params data found [ 1275.882223][T13142] Bluetooth: hci3: command tx timeout [ 1275.961918][T13142] Bluetooth: hci4: command tx timeout [ 1276.101611][T13450] hsr_slave_0: entered promiscuous mode [ 1276.116734][T13450] hsr_slave_1: entered promiscuous mode [ 1276.139023][T10029] bridge_slave_1: left allmulticast mode [ 1276.145226][T10029] bridge_slave_1: left promiscuous mode [ 1276.152194][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.190200][T10029] bridge_slave_0: left allmulticast mode [ 1276.196484][T10029] bridge_slave_0: left promiscuous mode [ 1276.203989][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.793540][T13588] capability: warning: `syz.0.1844' uses 32-bit capabilities (legacy support in use) [ 1277.320284][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.414569][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.439050][T10029] bond0 (unregistering): Released all slaves [ 1277.973342][T13142] Bluetooth: hci3: command tx timeout [ 1278.042016][T13142] Bluetooth: hci4: command tx timeout [ 1278.434570][T13554] chnl_net:caif_netlink_parms(): no params data found [ 1278.975670][T10029] hsr_slave_0: left promiscuous mode [ 1278.994437][T10029] hsr_slave_1: left promiscuous mode [ 1279.030854][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.039479][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.078582][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.087097][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.173204][T10029] veth1_macvtap: left promiscuous mode [ 1279.189754][T10029] veth0_macvtap: left promiscuous mode [ 1279.200308][T10029] veth1_vlan: left promiscuous mode [ 1279.220920][T10029] veth0_vlan: left promiscuous mode [ 1279.374203][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1279.380912][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1280.122045][T13142] Bluetooth: hci4: command tx timeout [ 1280.894378][T10029] team0 (unregistering): Port device team_slave_1 removed [ 1280.992128][T10029] team0 (unregistering): Port device team_slave_0 removed [ 1282.521307][T13544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.529257][T13544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.544005][T13544] bridge_slave_0: entered allmulticast mode [ 1282.555624][T13544] bridge_slave_0: entered promiscuous mode [ 1282.715518][T13544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.723425][T13544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.762329][T13544] bridge_slave_1: entered allmulticast mode [ 1282.777493][T13544] bridge_slave_1: entered promiscuous mode [ 1283.310478][T13544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.477631][T13544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.035291][T13554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.047743][T13554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.082388][T13554] bridge_slave_0: entered allmulticast mode [ 1284.130359][T13554] bridge_slave_0: entered promiscuous mode [ 1284.188407][T13554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.196246][T13554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.280535][T13554] bridge_slave_1: entered allmulticast mode [ 1284.300496][T13554] bridge_slave_1: entered promiscuous mode [ 1284.697566][T13544] team0: Port device team_slave_0 added [ 1284.838823][T13119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1284.848672][T13119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1284.861485][T13119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1284.876476][T13119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1284.889575][T13119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1285.009855][T13544] team0: Port device team_slave_1 added [ 1285.175530][T13554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.344648][T13554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.492428][T13544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.499845][T13544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.526636][T13544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.902985][T13544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.910180][T13544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.936841][T13544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.121532][T13554] team0: Port device team_slave_0 added [ 1286.366085][T13554] team0: Port device team_slave_1 added [ 1286.922188][T13119] Bluetooth: hci5: command tx timeout [ 1286.945638][T13554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.952997][T13554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.979920][T13554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.224883][T13544] hsr_slave_0: entered promiscuous mode [ 1287.264101][T13544] hsr_slave_1: entered promiscuous mode [ 1287.302514][T13544] debugfs: 'hsr0' already exists in 'hsr' [ 1287.308540][T13544] Cannot create hsr debugfs directory [ 1287.326888][T13554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.334329][T13554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.360974][T13554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.618618][T13450] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1287.960718][T13450] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1288.384297][T13450] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1288.468416][T13450] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1288.617933][T13554] hsr_slave_0: entered promiscuous mode [ 1288.681420][T13554] hsr_slave_1: entered promiscuous mode [ 1288.722666][T13554] debugfs: 'hsr0' already exists in 'hsr' [ 1288.728653][T13554] Cannot create hsr debugfs directory [ 1289.005907][T13119] Bluetooth: hci5: command tx timeout [ 1290.635701][T13639] chnl_net:caif_netlink_parms(): no params data found [ 1291.083036][T13119] Bluetooth: hci5: command tx timeout [ 1292.611250][T13544] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1292.875769][T13544] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1293.132368][T13544] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1293.162182][T13119] Bluetooth: hci5: command tx timeout [ 1293.217259][T13544] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1293.281018][T13450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.400182][T13639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.409681][T13639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.504757][T13639] bridge_slave_0: entered allmulticast mode [ 1293.556130][T13639] bridge_slave_0: entered promiscuous mode [ 1293.621149][T13639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.629109][T13639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.687836][T13639] bridge_slave_1: entered allmulticast mode [ 1293.717514][T13639] bridge_slave_1: entered promiscuous mode [ 1294.181130][T13639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.398327][T13639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.891368][T13450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.030047][T13639] team0: Port device team_slave_0 added [ 1295.213988][T13639] team0: Port device team_slave_1 added [ 1295.230369][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.238124][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.743250][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.750941][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.819475][T13639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.826974][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.853726][T13639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.934008][T13554] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1296.007895][T13554] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1296.117097][T13639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.127980][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.158741][T13639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.321226][T13554] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1296.411058][T13554] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1296.952391][T13639] hsr_slave_0: entered promiscuous mode [ 1296.976111][T13639] hsr_slave_1: entered promiscuous mode [ 1297.012761][T13639] debugfs: 'hsr0' already exists in 'hsr' [ 1297.018737][T13639] Cannot create hsr debugfs directory [ 1298.752205][T13544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.828334][T13544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.041264][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.049020][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.250615][T10030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.258327][T10030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.587546][T13554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.180873][T13554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.373133][T13639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1301.443065][T13639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1301.594496][T10030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.602183][T10030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.673279][T13639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1301.753403][T13639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1302.011034][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.018752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.756683][T13450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.186881][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.698186][T13639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.824732][T13544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.039334][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.047050][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.321021][ T8636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.328814][ T8636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.257532][T13554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.539274][T13544] veth0_vlan: entered promiscuous mode [ 1307.004414][T13544] veth1_vlan: entered promiscuous mode [ 1307.334691][T13450] veth0_vlan: entered promiscuous mode [ 1307.595085][T13450] veth1_vlan: entered promiscuous mode [ 1308.175084][T13544] veth0_macvtap: entered promiscuous mode [ 1308.379187][T13450] veth0_macvtap: entered promiscuous mode [ 1308.431262][T13544] veth1_macvtap: entered promiscuous mode [ 1308.537195][T13450] veth1_macvtap: entered promiscuous mode [ 1308.865331][T13544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.118343][T13450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.263498][T13544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.653383][T13450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.682138][ T1125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.824950][ T1125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.943726][T13639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.062308][ T1125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.269526][ T166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.360557][ T166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.485953][ T166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.569485][T13819] overlayfs: failed to clone upperpath [ 1310.605297][ T166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.787985][ T166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.142788][T13554] veth0_vlan: entered promiscuous mode [ 1311.339698][T13554] veth1_vlan: entered promiscuous mode [ 1312.079218][T13554] veth0_macvtap: entered promiscuous mode [ 1312.230493][T13554] veth1_macvtap: entered promiscuous mode [ 1312.694368][T13554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.858914][T13554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.064796][ T166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.170084][ T166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.273904][ T166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.448503][ T166] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.884535][T13639] veth0_vlan: entered promiscuous mode [ 1314.034574][T13639] veth1_vlan: entered promiscuous mode [ 1314.663514][T13639] veth0_macvtap: entered promiscuous mode [ 1314.823191][T13639] veth1_macvtap: entered promiscuous mode [ 1315.155329][T13639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.299214][T13639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.484201][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.584658][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.652097][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.717402][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.510919][T13142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1318.544963][T13142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1318.558370][T13142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1318.581212][T13142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1318.598336][T13142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1320.127323][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.136377][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.772385][T13142] Bluetooth: hci6: command tx timeout [ 1321.136846][T10029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.146316][T10029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.540984][ T1125] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.769712][ T1125] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.854915][T13887] chnl_net:caif_netlink_parms(): no params data found [ 1322.350085][ T1125] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.718085][ T1125] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.896695][T13142] Bluetooth: hci6: command tx timeout [ 1323.748588][T13934] loop3: detected capacity change from 0 to 512 [ 1323.992550][ T1125] bridge_slave_1: left allmulticast mode [ 1323.998661][ T1125] bridge_slave_1: left promiscuous mode [ 1324.005792][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.067463][ T1125] bridge_slave_0: left allmulticast mode [ 1324.073775][ T1125] bridge_slave_0: left promiscuous mode [ 1324.086441][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.118029][T13934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.245891][T13934] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1324.709064][T13945] syz.0.1872 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1324.922152][T13142] Bluetooth: hci6: command tx timeout [ 1325.027744][T13544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.689401][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.764830][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.800449][ T1125] bond0 (unregistering): Released all slaves [ 1326.726576][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.861262][T13949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.002133][T13142] Bluetooth: hci6: command tx timeout [ 1327.905519][T13887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.913416][T13887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.943876][T13887] bridge_slave_0: entered allmulticast mode [ 1327.978401][T13887] bridge_slave_0: entered promiscuous mode [ 1328.084707][ T1125] hsr_slave_0: left promiscuous mode [ 1328.125172][ T1125] hsr_slave_1: left promiscuous mode [ 1328.144746][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1328.153027][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.217842][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1328.225633][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.347840][ T1125] veth1_macvtap: left promiscuous mode [ 1328.372799][ T1125] veth0_macvtap: left promiscuous mode [ 1328.392138][ T1125] veth1_vlan: left promiscuous mode [ 1328.427490][ T1125] veth0_vlan: left promiscuous mode [ 1331.156617][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1331.280290][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1332.549317][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.557756][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.574396][T13887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.588206][T13887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.674194][T13887] bridge_slave_1: entered allmulticast mode [ 1332.727087][T13887] bridge_slave_1: entered promiscuous mode [ 1333.084980][T13119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1333.115239][T13119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1333.128980][T13119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1333.155252][T13119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1333.183825][T13119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1333.580915][T13887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.658613][ T2128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.666992][ T2128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.789363][T13887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.304590][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.312809][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.711797][T13887] team0: Port device team_slave_0 added [ 1334.877535][T13887] team0: Port device team_slave_1 added [ 1335.322212][T13119] Bluetooth: hci2: command tx timeout [ 1335.842390][T13887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.849736][T13887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.881236][T13887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.238387][ T166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.298311][T13887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.305885][T13887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.332396][T13887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.039920][ T166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.247191][ T166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.401916][T13119] Bluetooth: hci2: command tx timeout [ 1337.548661][ T166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.785783][T13887] hsr_slave_0: entered promiscuous mode [ 1337.869959][T13887] hsr_slave_1: entered promiscuous mode [ 1338.287689][T14019] loop7: detected capacity change from 0 to 256 [ 1338.542892][T14019] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 1338.614813][T14019] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1338.704066][T14019] exFAT-fs (loop7): failed to load alloc-bitmap [ 1338.710568][T14019] exFAT-fs (loop7): failed to recognize exfat type [ 1339.489769][T13142] Bluetooth: hci2: command tx timeout [ 1339.838514][ T166] bridge_slave_1: left allmulticast mode [ 1339.853066][ T166] bridge_slave_1: left promiscuous mode [ 1339.861545][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.925326][ T166] bridge_slave_0: left allmulticast mode [ 1339.931229][ T166] bridge_slave_0: left promiscuous mode [ 1339.938708][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.977003][T14034] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1340.523476][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1340.745526][T14038] loop7: detected capacity change from 0 to 128 [ 1340.787963][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1340.805830][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1340.813083][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1340.843474][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.854808][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.865062][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1340.900067][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1340.911904][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1340.920265][ T10] usb 4-1: Manufacturer: syz [ 1341.048775][ T10] usb 4-1: config 0 descriptor?? [ 1341.433303][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.520897][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.563127][T13119] Bluetooth: hci2: command tx timeout [ 1341.622557][ T10] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 1341.632355][ T166] bond0 (unregistering): Released all slaves [ 1341.721457][ T10] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1341.927802][ T5840] usb 4-1: USB disconnect, device number 14 [ 1341.944503][T13985] chnl_net:caif_netlink_parms(): no params data found [ 1342.800867][T14047] fido_id[14047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1342.825545][T14051] binder: 14050:14051 ioctl 4018620d 0 returned -22 [ 1343.609905][ T166] hsr_slave_0: left promiscuous mode [ 1343.651165][ T166] hsr_slave_1: left promiscuous mode [ 1343.676696][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.685428][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.764681][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.774325][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.833495][ T166] veth1_macvtap: left promiscuous mode [ 1343.855792][ T166] veth0_macvtap: left promiscuous mode [ 1343.873776][ T166] veth1_vlan: left promiscuous mode [ 1343.887633][ T166] veth0_vlan: left promiscuous mode [ 1345.155533][ T166] team0 (unregistering): Port device team_slave_1 removed [ 1345.297269][ T166] team0 (unregistering): Port device team_slave_0 removed [ 1347.347154][T13985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.355404][T13985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.395669][T13985] bridge_slave_0: entered allmulticast mode [ 1347.415575][T13848] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1347.420046][T13985] bridge_slave_0: entered promiscuous mode [ 1347.552320][T13985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.559927][T13985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.606496][T13985] bridge_slave_1: entered allmulticast mode [ 1347.613146][T13848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.624615][T13848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.639897][T13848] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1347.649874][T13985] bridge_slave_1: entered promiscuous mode [ 1347.657154][T13848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.681438][T13887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1347.806711][T13848] usb 8-1: config 0 descriptor?? [ 1348.083465][ T166] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.159125][T13887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1348.343092][T13848] hid-steam 0003:28DE:1142.0017: item fetching failed at offset 1/5 [ 1348.429849][T13848] hid-steam 0003:28DE:1142.0017: steam_probe:parse of hid interface failed [ 1348.437397][ T166] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.439281][T13848] hid-steam 0003:28DE:1142.0017: probe with driver hid-steam failed with error -22 [ 1348.567638][T13887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1348.635826][T13848] usb 8-1: USB disconnect, device number 4 [ 1348.749011][T13985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.813487][ T166] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.883410][T13887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1348.990684][T13985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.049133][ T166] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.500858][T13985] team0: Port device team_slave_0 added [ 1349.633389][T13985] team0: Port device team_slave_1 added [ 1349.876219][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1909'. [ 1350.130983][T13985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.138703][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.165487][T13985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.337821][T13985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.345294][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.373707][T13985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.892244][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1351.079364][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.090911][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.101457][ T24] usb 8-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1351.114991][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.238038][T13985] hsr_slave_0: entered promiscuous mode [ 1351.265731][T13985] hsr_slave_1: entered promiscuous mode [ 1351.282536][ T24] usb 8-1: config 0 descriptor?? [ 1351.321349][T13985] debugfs: 'hsr0' already exists in 'hsr' [ 1351.329162][T13985] Cannot create hsr debugfs directory [ 1351.355637][ T166] bridge_slave_1: left allmulticast mode [ 1351.362173][ T166] bridge_slave_1: left promiscuous mode [ 1351.369666][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.481365][ T166] bridge_slave_0: left allmulticast mode [ 1351.488018][ T166] bridge_slave_0: left promiscuous mode [ 1351.496469][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.877487][ T24] betop 0003:20BC:5500.0018: hidraw0: USB HID v0.06 Device [HID 20bc:5500] on usb-dummy_hcd.7-1/input0 [ 1351.889533][ T24] betop 0003:20BC:5500.0018: no inputs found [ 1352.021183][T13848] usb 8-1: USB disconnect, device number 5 [ 1352.570068][T14108] fido_id[14108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1352.674032][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'. [ 1352.941186][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.036187][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.069774][ T166] bond0 (unregistering): Released all slaves [ 1354.334019][ T166] hsr_slave_0: left promiscuous mode [ 1354.346602][ T166] hsr_slave_1: left promiscuous mode [ 1354.356870][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.364765][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.397502][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1354.405964][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.525145][ T166] veth1_macvtap: left promiscuous mode [ 1354.530947][ T166] veth0_macvtap: left promiscuous mode [ 1354.572166][ T166] veth1_vlan: left promiscuous mode [ 1354.577831][ T166] veth0_vlan: left promiscuous mode [ 1356.494206][ T166] team0 (unregistering): Port device team_slave_1 removed [ 1356.584440][ T166] team0 (unregistering): Port device team_slave_0 removed [ 1357.007880][T14139] loop7: detected capacity change from 0 to 4096 [ 1357.210131][T14139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.073131][T13639] EXT4-fs error (device loop7): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /14/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.194148][T13639] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.273407][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1358.328962][T13639] EXT4-fs error (device loop7): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /14/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.432803][T13639] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.528148][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1358.576358][T13639] EXT4-fs error (device loop7): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /14/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.674408][T13639] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.727412][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1358.811197][T13639] EXT4-fs error (device loop7): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /14/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.859835][T13639] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.887279][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1358.902195][T13887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.943895][T13639] EXT4-fs error (device loop7): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /14/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.969056][T13639] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1358.995120][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1359.072579][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1359.135228][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1359.198230][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1359.249480][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1359.254919][T13887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.310749][T13639] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1359.493429][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.501118][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.676798][T10029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.684565][T10029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.614628][T13985] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1360.741492][T13985] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1360.907890][T13985] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1360.947716][T14156] loop3: detected capacity change from 0 to 512 [ 1360.985825][T13985] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1361.130594][T14156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1361.205715][T14156] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.415225][T14156] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1931: corrupted inode contents [ 1361.492038][T14156] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1931: mark_inode_dirty error [ 1361.575227][T14156] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1931: corrupted inode contents [ 1361.634371][T14156] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1931: mark_inode_dirty error [ 1362.205930][T13544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.565094][T13639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.619057][T13298] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.847238][T13298] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.072908][T13848] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1363.138163][T13298] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.243804][T13887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1363.272396][T13848] usb 4-1: Using ep0 maxpacket: 32 [ 1363.305370][T13848] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1363.314089][T13848] usb 4-1: config 0 has no interface number 0 [ 1363.334104][T13848] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1363.342774][T13985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.375818][T13848] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1363.385404][T13848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.394035][T13848] usb 4-1: Product: syz [ 1363.398443][T13848] usb 4-1: Manufacturer: syz [ 1363.408504][T13848] usb 4-1: SerialNumber: syz [ 1363.500093][T13298] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.547451][T13848] usb 4-1: config 0 descriptor?? [ 1363.586205][T14170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1363.720996][T13985] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.870760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.878510][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.896634][T14170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1364.008340][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.016062][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.183560][T13848] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1364.243511][T13848] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1364.363089][T13848] usb 4-1: USB disconnect, device number 15 [ 1364.645626][T13298] bridge_slave_1: left allmulticast mode [ 1364.651548][T13298] bridge_slave_1: left promiscuous mode [ 1364.659108][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.710911][T13298] bridge_slave_0: left allmulticast mode [ 1364.717584][T13298] bridge_slave_0: left promiscuous mode [ 1364.724771][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.500643][T13298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.555064][T13298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.633857][T13298] bond0 (unregistering): Released all slaves [ 1365.785863][T14181] loop3: detected capacity change from 0 to 256 [ 1366.657573][T14181] loop3: detected capacity change from 0 to 4096 [ 1366.718517][T14181] ext4: Unknown parameter 'seclabel' [ 1366.902303][T13298] hsr_slave_0: left promiscuous mode [ 1366.937538][T13298] hsr_slave_1: left promiscuous mode [ 1366.965048][T13142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1366.974853][T13298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.986791][T13298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.998113][T13142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1367.015623][T13142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1367.040836][T13298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.048744][T13298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.065403][T13142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1367.101568][T13142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1367.186535][T13298] veth1_macvtap: left promiscuous mode [ 1367.205516][T13298] veth0_macvtap: left promiscuous mode [ 1367.211520][T13298] veth1_vlan: left promiscuous mode [ 1367.232295][T13298] veth0_vlan: left promiscuous mode [ 1368.789063][T13298] team0 (unregistering): Port device team_slave_1 removed [ 1368.837387][T13298] team0 (unregistering): Port device team_slave_0 removed [ 1369.162480][T13119] Bluetooth: hci0: command tx timeout [ 1370.423035][T13887] veth0_vlan: entered promiscuous mode [ 1370.799922][T13985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.845326][T13887] veth1_vlan: entered promiscuous mode [ 1371.242585][T13119] Bluetooth: hci0: command tx timeout [ 1371.428996][T14209] loop3: detected capacity change from 0 to 16 [ 1371.535804][T14209] erofs (device loop3): mounted with root inode @ nid 36. [ 1371.596860][T14209] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1371.680747][T14209] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851 [ 1371.690859][T14209] erofs (device loop3): read error -117 @ 43 of nid 36 [ 1371.752265][T14210] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1371.761109][T14210] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851 [ 1371.850181][T13887] veth0_macvtap: entered promiscuous mode [ 1371.876700][T14210] erofs (device loop3): read error -117 @ 43 of nid 36 [ 1371.958826][T14213] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1372.022146][T14213] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851 [ 1372.044501][T13887] veth1_macvtap: entered promiscuous mode [ 1372.145282][T14209] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1372.218865][T14209] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851 [ 1372.292236][T14213] erofs (device loop3): read error -117 @ 43 of nid 36 [ 1372.319108][T14187] chnl_net:caif_netlink_parms(): no params data found [ 1372.358115][T14209] erofs (device loop3): read error -117 @ 43 of nid 36 [ 1372.455623][T13887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1372.918507][T13887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.148258][ T166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.276410][ T166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.324822][T13119] Bluetooth: hci0: command tx timeout [ 1373.362796][ T166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.425729][ T166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.875685][T13985] veth0_vlan: entered promiscuous mode [ 1374.896272][T14187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.904197][T14187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.942384][T14187] bridge_slave_0: entered allmulticast mode [ 1374.962998][T14187] bridge_slave_0: entered promiscuous mode [ 1375.147280][T14187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.155004][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.222916][T14187] bridge_slave_1: entered allmulticast mode [ 1375.248605][T14187] bridge_slave_1: entered promiscuous mode [ 1375.395997][T13985] veth1_vlan: entered promiscuous mode [ 1375.402385][T13119] Bluetooth: hci0: command tx timeout [ 1375.763285][T14187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.867181][T14232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1949'. [ 1375.878811][T14187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.239099][T14187] team0: Port device team_slave_0 added [ 1376.333526][T14187] team0: Port device team_slave_1 added [ 1376.679497][T13985] veth0_macvtap: entered promiscuous mode [ 1376.748767][T14187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.756482][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.783157][T14187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.870677][T14187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.879762][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.906912][T14187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.923405][T13298] ===================================================== [ 1376.930667][T13298] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xe7b/0xc820 [ 1376.939443][T13298] n_tty_receive_buf_standard+0xe7b/0xc820 [ 1376.945625][T13298] n_tty_receive_buf_common+0x1a59/0x2610 [ 1376.951737][T13298] n_tty_receive_buf2+0x4c/0x60 [ 1376.956824][T13298] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1376.962392][T13298] tty_port_default_receive_buf+0xd7/0x1a0 [ 1376.968437][T13298] flush_to_ldisc+0x43e/0xe40 [ 1376.973564][T13298] process_scheduled_works+0xae7/0x1d60 [ 1376.979356][T13298] worker_thread+0x1741/0x1de0 [ 1376.984525][T13298] kthread+0xd5a/0xf00 [ 1376.988779][T13298] ret_from_fork+0x207/0x6f0 [ 1376.994280][T13298] ret_from_fork_asm+0x1a/0x30 [ 1376.999282][T13298] [ 1377.002872][T13298] Uninit was stored to memory at: [ 1377.008214][T13298] n_tty_receive_buf_standard+0xe74/0xc820 [ 1377.015045][T13298] n_tty_receive_buf_common+0x1a59/0x2610 [ 1377.024375][T13298] n_tty_receive_buf2+0x4c/0x60 [ 1377.029549][T13298] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1377.036237][T13298] tty_port_default_receive_buf+0xd7/0x1a0 [ 1377.042477][T13298] flush_to_ldisc+0x43e/0xe40 [ 1377.047368][T13298] process_scheduled_works+0xae7/0x1d60 [ 1377.053354][T13298] worker_thread+0x1741/0x1de0 [ 1377.058450][T13298] kthread+0xd5a/0xf00 [ 1377.062990][T13298] ret_from_fork+0x207/0x6f0 [ 1377.067827][T13298] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1377.073013][T13298] [ 1377.075443][T13298] Uninit was created at: [ 1377.079953][T13298] __kmalloc_noprof+0xae9/0x1bf0 [ 1377.085346][T13298] __tty_buffer_request_room+0x3d4/0x7a0 [ 1377.091194][T13298] __tty_insert_flip_string_flags+0x157/0x6e0 [ 1377.098108][T13298] uart_insert_char+0x368/0x930 [ 1377.103286][T13298] serial8250_read_char+0x1ba/0x670 [ 1377.108680][T13298] serial8250_handle_irq+0x930/0x1110 [ 1377.114445][T13298] serial8250_default_handle_irq+0x116/0x370 [ 1377.125283][T13298] serial8250_interrupt+0xcb/0x420 [ 1377.130645][T13298] __handle_irq_event_percpu+0x118/0xed0 [ 1377.137818][T13298] handle_irq_event+0xe0/0x2a0 [ 1377.142931][T13298] handle_edge_irq+0x2a9/0xb30 [ 1377.147903][T13298] __common_interrupt+0x9d/0x180 [ 1377.153260][T13298] common_interrupt+0x94/0xb0 [ 1377.158207][T13298] asm_common_interrupt+0x2b/0x40 [ 1377.163622][T13298] [ 1377.166064][T13298] CPU: 1 UID: 0 PID: 13298 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1377.176413][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1377.186786][T13298] Workqueue: events_unbound flush_to_ldisc [ 1377.193507][T13298] ===================================================== [ 1377.200540][T13298] Disabling lock debugging due to kernel taint [ 1377.206970][T13298] Kernel panic - not syncing: kmsan.panic set ... [ 1377.213557][T13298] CPU: 1 UID: 0 PID: 13298 Comm: kworker/u8:2 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 1377.225336][T13298] Tainted: [B]=BAD_PAGE [ 1377.229618][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1377.239843][T13298] Workqueue: events_unbound flush_to_ldisc [ 1377.245887][T13298] Call Trace: [ 1377.249278][T13298] [ 1377.252324][T13298] __dump_stack+0x26/0x30 [ 1377.256876][T13298] dump_stack_lvl+0x50/0x1c0 [ 1377.261681][T13298] ? dump_stack+0x12/0x25 [ 1377.266282][T13298] dump_stack+0x1e/0x25 [ 1377.270647][T13298] vpanic+0x435/0xd40 [ 1377.274875][T13298] panic+0x15d/0x160 [ 1377.279029][T13298] kmsan_report+0x31a/0x320 [ 1377.283789][T13298] ? __msan_warning+0x1b/0x30 [ 1377.288693][T13298] ? n_tty_receive_buf_standard+0xe7b/0xc820 [ 1377.294923][T13298] ? n_tty_receive_buf_common+0x1a59/0x2610 [ 1377.301090][T13298] ? n_tty_receive_buf2+0x4c/0x60 [ 1377.306444][T13298] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1377.312062][T13298] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1377.318291][T13298] ? flush_to_ldisc+0x43e/0xe40 [ 1377.323370][T13298] ? process_scheduled_works+0xae7/0x1d60 [ 1377.329339][T13298] ? worker_thread+0x1741/0x1de0 [ 1377.334550][T13298] ? kthread+0xd5a/0xf00 [ 1377.338986][T13298] ? ret_from_fork+0x207/0x6f0 [ 1377.344095][T13298] ? ret_from_fork_asm+0x1a/0x30 [ 1377.349279][T13298] ? ret_from_fork_asm+0x1a/0x30 [ 1377.354451][T13298] ? kmsan_get_metadata+0xf1/0x160 [ 1377.359840][T13298] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1377.366436][T13298] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1377.372770][T13298] ? kmsan_get_metadata+0xf1/0x160 [ 1377.378166][T13298] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1377.384761][T13298] ? kmsan_get_metadata+0x146/0x160 [ 1377.390224][T13298] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1377.396323][T13298] ? n_tty_receive_char+0x1223/0x14f0 [ 1377.401972][T13298] ? __wake_up+0x29d/0x2f0 [ 1377.406623][T13298] ? kmsan_get_metadata+0xf1/0x160 [ 1377.412077][T13298] __msan_warning+0x1b/0x30 [ 1377.416854][T13298] n_tty_receive_buf_standard+0xe7b/0xc820 [ 1377.423019][T13298] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1377.429116][T13298] ? kmsan_get_metadata+0xf1/0x160 [ 1377.434539][T13298] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1377.441149][T13298] ? kmsan_get_metadata+0xf1/0x160 [ 1377.446571][T13298] ? advisor_target_scan_time_store+0x110/0x180 [ 1377.453133][T13298] n_tty_receive_buf_common+0x1a59/0x2610 [ 1377.459130][T13298] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1377.465307][T13298] n_tty_receive_buf2+0x4c/0x60 [ 1377.470416][T13298] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1377.476310][T13298] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1377.481762][T13298] tty_port_default_receive_buf+0xd7/0x1a0 [ 1377.487855][T13298] flush_to_ldisc+0x43e/0xe40 [ 1377.492788][T13298] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1377.499567][T13298] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1377.505095][T13298] process_scheduled_works+0xae7/0x1d60 [ 1377.510987][T13298] worker_thread+0x1741/0x1de0 [ 1377.516071][T13298] kthread+0xd5a/0xf00 [ 1377.520336][T13298] ? __pfx_worker_thread+0x10/0x10 [ 1377.525730][T13298] ? __pfx_kthread+0x10/0x10 [ 1377.530512][T13298] ret_from_fork+0x207/0x6f0 [ 1377.535349][T13298] ? __switch_to+0x521/0x750 [ 1377.540230][T13298] ? __pfx_kthread+0x10/0x10 [ 1377.545019][T13298] ret_from_fork_asm+0x1a/0x30 [ 1377.550049][T13298] [ 1377.553660][T13298] Kernel Offset: disabled [ 1377.558048][T13298] Rebooting in 86400 seconds..