last executing test programs: 16m45.298322058s ago: executing program 1 (id=543): socket$inet6(0xa, 0x80002, 0x0) io_uring_setup(0x4685, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) 16m43.33705102s ago: executing program 1 (id=546): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x0, 0x87, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000300)="934e2e") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)={0x1, 0x9, 0x32}) sendmsg$nl_xfrm(r4, 0x0, 0x24000058) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0xfe01, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x377]}}, 0x4000}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) keyctl$session_to_parent(0x12) 16m40.283725677s ago: executing program 1 (id=550): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 16m40.18841306s ago: executing program 1 (id=551): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x10001}}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}, {@fat=@quiet}, {@shortname_mixed}, {@uni_xlate}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 16m39.766521243s ago: executing program 1 (id=552): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$eJzs3c9qY1UcB/DfzZ820UWycCVCL+jCVWl9ghapIBYEJQt1ocWmIE0otBDwD8aufAKfwFfwNdyIL+ADOMxuuihzh5vcpJnJTUs606bMfD6b/jjnfO/9nZOErnLz3Xv948OTs6PzX/6LRiOJyk7sxEUS7ajExG9R6t9H5eMAwAN3kWXxOBtbL11RX5CsVe60MQDgzsz+/191LwDA/fjyq68/293f3/siTRsR/d8HnSTGf8fzu0fxQ/SiG1vRisuIbGpcf/Lp/l7U0lw7PugPB5082f/27+L6u/9HjPLb0Yp2eX47HZvJDwederxV3H+nF93P/4xWvFOe/6gkH521+PD9mf43oxX/fB8n0YvDordJ/tftNP04++PJz9/ko3k+GQ4669N1xerqvb4wAAAAAAAAAAAAAAAAAAAAAAC81jbTqfbzz9+pXo7mN+fmk9n8oucDDWeez7OVpmlWpK6uX4t3a1Fbza4BAAAAAAAAAAAAAAAAAADgYTn78afjg16ve1parBerrltTVky+1l8yFU+XuM6NxcayqagWrfWSiOXuVS+SNy+ulk7FwsNs5v10T5Na5COVWxz4fJFMR5qzUxsxvlc+0hwXMyMv/aI0YlRMtnp8kMQNqUbZm2Su+GvpfrL5t18j32h5au3FkWaxg5LFzWvuvvb2rY4uay2YSiKiPj3M669Tf3Ufq9EnBQAAAAAAAAAAAAAAAAAAuGdXX/otmTxfQUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsAJXv/+/RDEswovWZNW8qEUxsuItAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AZ4FgAA//8YB15i") socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r3, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0), 0x0) sendmmsg$sock(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x2, 0x4000080) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) 16m38.90110366s ago: executing program 1 (id=554): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4800) close(r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 16m37.96020969s ago: executing program 32 (id=554): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4800) close(r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 14m16.475381806s ago: executing program 3 (id=878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x8, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x4010004) 14m16.078904428s ago: executing program 3 (id=883): syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000), 0x0) setgroups(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getgroups(0x1, &(0x7f0000000280)=[0xee00]) setregid(r5, r5) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 14m13.582389017s ago: executing program 3 (id=886): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006) 14m13.375512594s ago: executing program 3 (id=888): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f00000021c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 14m12.386860675s ago: executing program 3 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 14m10.037309969s ago: executing program 3 (id=898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 14m9.726006708s ago: executing program 33 (id=898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 5m30.003187836s ago: executing program 0 (id=2061): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x482) readv(r0, 0x0, 0x0) 5m27.351686699s ago: executing program 0 (id=2064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r1, 0x3e8c4ddb697c9f8f, 0x70bd25, 0x0, {0x4}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r0) 5m27.305742811s ago: executing program 0 (id=2065): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@mblk_io_submit}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES64=0x0], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) 5m27.112914307s ago: executing program 0 (id=2068): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) recvmmsg(0xffffffffffffffff, &(0x7f0000019080), 0x0, 0x12102, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r3) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e0000"], &(0x7f0000000000)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r5}, 0xc) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000004c0)='./file0\x00', 0x4804, &(0x7f0000001400)={[{@nojoliet}, {@hide}, {@map_acorn}, {@check_relaxed}]}, 0x1, 0x52a, &(0x7f0000000a80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101940, 0x100) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x10) 5m26.879955945s ago: executing program 0 (id=2069): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, 0x0, 0x1ff) 5m25.74188774s ago: executing program 0 (id=2071): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2781, 0x0) io_setup(0x8, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42) eventfd(0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$eJzs3M1rHOcZAPBnRp+25a5cSql7sUopNpSuZReZ2hRqF5deeii014CFvDJC6w8kBUeyIKvkHwhJzoFcAklMgg/x2ZcEcs0lca4xOQRMUKwEQkgUZj8kWdqVLGtXo8i/H7ya92Nm3ufRSDvzwu4G8Mwayn6kEUcj4lISUaj3pxHRW631R1Rq+y0tzo99tzg/lsTy8v++TiKJiEeL82ONcyX17aF6oz8iPvlnEr9+eeO807Nzk6Plcmmq3j45c/XGyenZub9MXB29UrpSunbqzN9GTo+cGT470rZcv//i/N1v//DvLys/vPPj7W9eeyuJ8zFQH1ubRz3rHRuKoZXfyVrdETHahvPvBV31fNbmmXRvcVDa4aAAAGgpXfMM99soRFesPrwV4sNPcw0OAAAAaIvlrohlAAAAYJ9LrP8BAABgn2u8D+DR4vxYo+T7joTd9fBCRAzW8l+ql9pId1Sq2/7oiYiDj5JY+7HWpHbYjg1FxIPPz76flWjyOeROqyxExO+aXf+kmv9g/ZPQ6/NPI2K4DfMPrWv/kvI/34b5884fgGfTvQu1G9nG+1+68vwTTe5/3U3uXU8j7/tf4/lvacPz32r+XS2e//77hHPcevuNm63Gsvz/fvdf7zVKNn+23VFS2/BwIeL33c3yT1byT1rkf2mLcydRO0Xhp5ulVvvknf/ymxHHo3n+Dcnm3090cnyiXBqu/Ww6x8LHI++2mj/v/LPrf7BF/ptc//6s78ZjZ2r9pT7PXbx4Z0Nnffet80+/6k3+X6311nteGJ2ZmToV0Zv8Z2P/6c3zbezTOEeW/4k/bv7/3+zvP3tNqNT/NrJUFurbrP3Sujn/cfvWB63iaaz/8rz+l7d//at9rzzhHH/66NUT6/sa36+1dv2blWz+B0ltLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWlEDESSFiMiqdbTtFiMOBQRv4mDafn69Myfx68/f+1yNhYxGD3p+ES5NBwRhVo7ydqnqvXV9ul17b9GxJGIeL1woNoujl0vX847eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFYcioiBSNJiRKQRsVRI02Ix76gAAACAthvMOwAAAACg46z/AQAAYP+z/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjhy7dz+JiMq5A9WS6a2P9eQaGdBpad4BALnpyjsAIDfdeQcA5Gaba3yPC7APJVuM9zftzV49+joSDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB70/Gj9+4nEVE5d6BaMr31sZ6mRxzbxeiATkrzDgDITddmg927Fwew+576X/xwe+MAdl/zNT7wLEm2GO9f3afy+Ehfx2ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYO8ZqJYkLUZEWq2nabEYcTgiBqMnGZ8ol4Yj4lcR8Vmhpy9r9+UdNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG03PTs3OVoul6aeppLs7HAVlVaVF/dGGLtbSfZGGLVK3q9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYXp2bnK0XC5NTecdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC36dm5ydFyuTT1BJU729l5TSXvHAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM/PAQAA///E/w3d") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x210) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) mount$bpf(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x300c8d4, &(0x7f0000001240)={[{@mode={'mode', 0x3d, 0xffffffff}}, {@gid={'gid', 0x3d, 0xee01}}, {@gid}, {@mode={'mode', 0x3d, 0x42}}, {@mode={'mode', 0x3d, 0x8}}, {@gid}], [{@uid_gt}]}) ioctl$TCFLSH(r6, 0x5608, 0x0) mlock2(&(0x7f000066c000/0x3000)=nil, 0x3000, 0x0) 5m9.20186752s ago: executing program 34 (id=2071): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2781, 0x0) io_setup(0x8, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42) eventfd(0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x210) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) mount$bpf(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x300c8d4, &(0x7f0000001240)={[{@mode={'mode', 0x3d, 0xffffffff}}, {@gid={'gid', 0x3d, 0xee01}}, {@gid}, {@mode={'mode', 0x3d, 0x42}}, {@mode={'mode', 0x3d, 0x8}}, {@gid}], [{@uid_gt}]}) ioctl$TCFLSH(r6, 0x5608, 0x0) mlock2(&(0x7f000066c000/0x3000)=nil, 0x3000, 0x0) 4m9.430099897s ago: executing program 2 (id=2196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$eJzs3M1uG1UUAODjpClNKCVCLNh1JISUSLUVJ2kFuwCpAIlUET8LVuDYjuXWP1HsJKYIEVgjln0RWLFnz0uwQyyQ2BWBPDOGphQRqHGS5vuk8Zl7PXN8rlWpOnMjB3BuzSe//FyIKzEbEdMRcTkiPS/kR2otCy9ExNWImHrgKOTzf0xcjIi5iLgyTJ7lLORvfXrvcOP+YGMuz3rtZFYMnAYvRUR7Jzs/aGex28ji7Xy+st9MY3t1P4/ZG+07+bibxYP6VprhoDK6rpLGlUZ2fXdnrzeM261KdRgbze10fqeTfWBvvzHKk95wu7Kbjmv1rVG5h+l9d7PBII93e/0sTy3P93GaPvr9Uczm64N6tp6dO2msdvr5fDerr1YfDON+HnvZdFS7rVpax9Z//JLPgLebnb1Bsl/f7TW7neR6qfxyqXyjWN7t1ur9+mqx0q7dWE0WGq3hZcV+vdJea3S7jVa9VO22F5OFRrVaLJeThfX6VrPSScrl0kppqXh9MT+7lrxx6/2kVUsWhvG1Zmev32z1ku3ubpLdsZgsl1ZeWUxeLCfvbmwmm+/cvLmx+d6H6x/cenXjrdfzi/5SVrKwvLS8XCwvFZfLi/9ywb+eyvUP/4uezPofcunxbue8K5x0AQBnT9r/z8Yk+/9Pvr330/oXle/1/3COnaX+v5k35Pr/8Tsl/e/k+v9jrP/zc7R+/T+PRf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBu/TDz9ZvpyXw2fjqffyafei4fFyJiKiJ+e4TpuHgk53SeZ+Zvrp95qIbvCpFmGH7GU/kxFxFr+XH/2UfXfmGs3wQAAAA8mb45vPpV1q1nL/MnXRCTlD20mbr80ZjyFSJiZv7HMWWbGr48P6Zk6b/vCzEYU7b0AdalMSXLH4p9NqZ0xzJ9JFx6IBSyMDXJagAAgMk42gnYUQcAAHhyfXnSBTB+x9m/K8RoK3O0F5z+5f2fG4KzR0YAAADAGVQ46QIAAACA/13a/5/l3/8DAAAA/ln2+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRHMCfDW7pl4qqLiv1Kt3BMXqELrtEHKCX4Aj0CrkAZyC7HCHCER6j4IhIURgbBf1+kj/Ggj/PiM2bQQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT7fVev5/8fPfuTm7+jx57gYAAAA4ZVut583JNI0/tde/tJe+teMiIsqIONW7j+JdJ3PU5lTPvL56UsNNRJOw/4z37fYxIn612/3Xvr8FAAAAuF6b5WqWuvW0m166IIaUJm3Kz78z5RURUU3vMqWV+933TGHN73scfzOlNRNYk0xhacptnCvtRUadw+ToUKRDOWg5AADAILqdwLBdCAAAAEP6c3S+uGAdDKyIw1LmYS24+ef944Lgh84IAAAAeIOKSxcAAAAA9K7p/z3/DwAAAK5bev4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfdpW6/lmuZqdm7OrX+HHJL25rusMtwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MD+vKNACIRBGOxd35nM/Q8rDRobmlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xpJFQcA/M3uzt4PkFujLJyNJ56cKF6y5y8EmyuEYCFYieWS2z1W91TuUnhHCtNYCP4HNtpeIwQEOQv/giusvDI2EWSLCBZWyvyKk2zQiZrZ3dznA2/eN5OXed83gZDvvEkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMLkarhQxM3k0MniRn7ux92NtaR/cKBP7PTvnk9aEkf1pr1wWsk96s46CwAAAE66ZlHfhxC2463VpG900vr/mWJMUvNvPJLFRT1/sO4v+qL2T9q97756e2+iTjZPHEL4pjMerNS2wvl2seK4cxXGpM8Ssic0zfTb1nhz87FJnN716PP7999op+Gp/5YxAPB/uFz0eTCMPkl/PxqOxoPeLBMDYHG1/vnTxZCi/m92asgLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMYmm+H5Io5CCE+0/ooTD3Y31g7rd/p3zxft3LuPf1q+ZnKJOIQwHI0Hp2tcyzy7WHHcrdt33u+Px4ObRwqe/FdfJRAIFiU45h9QAACcKHHekrp+O95aTc5FSyH88eX++v9SKQ4V6//vR/culecq1/+92lY436rW/8vrNz5avnX7zgujG/3rg+uDD670Xuq9uvLay71XlpP7uZIdjzlbAAAAFlU7b+X6v7E0vf9/thSHivX/Dz+/80t5rqb6f8rR9/+POSEAAICH2KMXfvs1OuR81G6Hj/vr6zd72XHv4yvZcQap/r0z06dO5a1c/zeXZpAbAAAAULvJZrRv//9aKQ4V9/+/fe73L8rXbOaPIIaj8eDy2ofja/UtZ25N7/93Dh1Xx58T17BcAAAAZuRM3sr7/3H6/n/jqWJMI4Tw7NNZnP8bwEr1/+utz66W5yq///9ifUucS41udj+qvP+fju2G0OrWkBgAAAAn0um8JfX/T/HW6ntfn32r7f1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5kf+5tEwbCOA6/viRK3CYjpLf4mIGGCsEKgIRkyTMwAAvRUNFaLAIrgATnms5QPE/z/xVX3AsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvL3r0xcfEVFE6jJFmm7/zp8R8RVp17aT73sW+8up+Xnk4nCc5fyN+X8ZEWUUfZwDANC7qtsc6029GuQd5h3lHeetyqZevvLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGCgAA//9fbFmx") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4m6.593179476s ago: executing program 2 (id=2199): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101400, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sigaltstack(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) socket(0x10, 0x1, 0x3) 4m1.932291922s ago: executing program 2 (id=2210): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0xfffffffffffffffd, 0x58) 4m1.470038757s ago: executing program 2 (id=2212): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000340)={'fscrypt:', @auto=[0x33, 0x36, 0x37, 0x45, 0x63, 0x62, 0x65, 0x64, 0x39, 0x35, 0x38, 0x62, 0x38, 0x65, 0x35, 0x72965fd843077320]}, &(0x7f00000005c0)={0x0, "7c80f794913f488c37c8372afe0335267888cc11eef667ca602b4f85913c827aedd707789d1c79dda6f4cf15d9e91a2922c80c43cde9ebd1553034d2efa4a948", 0x1f}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x67, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000040)={@id={0x2, 0x0, @c}, 0x0, r1}) 4m0.775324289s ago: executing program 2 (id=2213): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000100004800400c98008003500", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffff", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="400001", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 4m0.034062402s ago: executing program 2 (id=2215): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) 3m59.371355822s ago: executing program 35 (id=2215): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) 17.690761605s ago: executing program 4 (id=2771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000015c0)='./file0\x00', 0x80600, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getrlimit(0x4, &(0x7f0000000380)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000100100"}}}]}, 0x48}}, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r6, r7+60000000}) 14.233515304s ago: executing program 4 (id=2775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 12.410201161s ago: executing program 4 (id=2784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000015c0)='./file0\x00', 0x80600, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getrlimit(0x4, &(0x7f0000000380)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000100100"}}}]}, 0x48}}, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r6, r7+60000000}) 9.977166737s ago: executing program 4 (id=2794): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x100003}}, 0x10) bind$tipc(r1, 0x0, 0x0) 9.288330088s ago: executing program 4 (id=2797): rename(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="a80100001900010000000000fbdbdf251d010900500012804c00f8804800738008008400", @ANYRES32=0x0, @ANYBLOB="9d6e2400000000", @ANYRES32, @ANYBLOB="0c00a100090000000000000028002b800400c9801d0017004cb42ee3a03b5668ab4b3911ae4e379e45f284e4d167"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xda}}]}}]}, 0x48}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000180)=""/225, &(0x7f0000000280)=0xe1) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xffe8}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000304000000ffff86dd69000000001406fffe800000000000000000000000000039fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5110000790780003"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000021b7384786dd69000000001806fffe800000000000000000000000f0ff38fe8001000000000000000000000000aa4e229524", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c2fffb90780ffd04020000"], 0x0) 6.333163931s ago: executing program 5 (id=2806): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/204, 0x0, 0xcc, 0x1}, 0x28) 5.163314908s ago: executing program 5 (id=2809): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0x4, 0x1, 0x171d, 0x4, 0xffff}}}}, 0x17) 4.929205406s ago: executing program 5 (id=2811): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x3f, "aede62497cf56c9ab5bfd7b842f6b7ea6b8579d27d9c47d7da09f5817eca1da83916033b2342e16b1f2c94869568b0053796cda0cb5964da51ebf700000000"}}) 4.928650206s ago: executing program 7 (id=2812): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) creat(&(0x7f0000000140)='./file0\x00', 0x182) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800) 4.574264376s ago: executing program 5 (id=2813): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 4.491395949s ago: executing program 6 (id=2814): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) shutdown(r1, 0x0) 4.393897522s ago: executing program 7 (id=2815): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x400002) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 4.347075654s ago: executing program 5 (id=2816): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000002000)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$evdev(0x0, 0x1, 0x80) fcntl$setstatus(r5, 0x4, 0x2c00) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 4.14498009s ago: executing program 6 (id=2817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.054686183s ago: executing program 6 (id=2818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000015c0)='./file0\x00', 0x80600, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0xc00) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000100100"}}}]}, 0x48}}, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r7, r8+60000000}) 2.900218359s ago: executing program 7 (id=2819): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/181, 0x47}], 0x1, 0xfffffffd, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write$binfmt_aout(r0, 0x0, 0xc8) 1.898269411s ago: executing program 6 (id=2820): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/204, 0x0, 0xcc, 0x1}, 0x28) 1.820937353s ago: executing program 7 (id=2821): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') write$P9_RGETLOCK(r1, &(0x7f0000000280)=ANY=[], 0xffffff6a) splice(r0, 0x0, r3, 0x0, 0xa, 0xc) 1.704763967s ago: executing program 6 (id=2822): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x40c040, &(0x7f0000000240)={[{@bsdgroups}, {@bh}, {@data_err_ignore}, {@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@resuid}, {@usrquota}, {@data_err_abort}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00\x00\x00\x00\x00\x00\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, 't'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x3e, 0x51b, &(0x7f0000000c40)="$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") socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x24040084) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb8e, 0x1, 0x1, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xa80a46a7f0b8f798, r0, 0xb4ee0000) 540.184733ms ago: executing program 7 (id=2823): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, 0x0, 0x1080a0, 0x0, 0x1, 0x0, 0x0) rename(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @auto="e4c858f988c79593"}) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000240)={{0x969b, 0x6}, 0x100, './file0\x00'}) 441.774116ms ago: executing program 6 (id=2824): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x6, 0x0, 0xffffff0c, 0xb, 0xfffffffffffffac8, 0x4, 0x6f, 0x8, 0x91}, 0x0) write(r5, &(0x7f0000000000)="2d000000010001", 0x7) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32]) 284.498831ms ago: executing program 7 (id=2825): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0]) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x30100d0, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="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", @ANYBLOB="0d00000023f4c61efde8167a8ec0328a", @ANYRESHEX=r3, @ANYBLOB="af72283161d21ff1a39e0e9a48eed57ed6e48f1b7bdc923afa26ed13a18db320f24db2d62c52484d920487a4b462a2afc74f0637dcbf3a1806a309d33a4f35d0bba3d07588aeda34dd7eedf7813210d216fa51885b2456ba4cb76201db299cc29ea5f0c094381a6710449d6d3cbfeb47f934bede2a3f8b14ae2cd10379c408b0aa70ecacfa4af5b3c6812652571985d6652c36988e46b0cff5f3ace4a1d5d32c1d0c788b7e8783ab43888bd5bfcfcc7a994243"], 0x1, 0x1506, &(0x7f0000003100)="$eJzs3Au4T9XWMPAx5pyLTdI/yX2OORb/5DJJklwSEkmSJEluCUmSJCGxyS0JScg9yT0kt9jJ/X7LPUmOJElCQpL5PXo7n/e8nfN2znfO9/q+s8fveeZjDmuN8Z9zj/38/2utZ+/9bcfBVetXq1yXmeGfgv/xTyoApABAPwC4BgAiACiVrVQ2wGGQSWPqP/ci4l/roWlXegXiSpL+p2/S//RN+p++Sf/TN+l/+ib9T9+k/+mb9F+I9Gzr9NzXyki/43/u+T/I8///58jn/7+Rw8XGfLm+2PWd/oEU6X/6Jv1P36T/6Zv0P32T/qdv0v9/cxFApf/msPQ/fZP+C5GeXennzzKu7LjS339CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIdKHc+EyAwB/nl/pdQkhhBBCCCGEEOJfJ2S80isQQgghhBBCCCHE/30ICjQYiCADZIQUyASZ4SrIAldDVrgGEnAtZIPrIDtcDzkgJ+SC3JAH8kI+sEDggCGG/FAAknADFIQboRAUhiJQFDwUg+JwE5SAm6Ek3AKl4FYoDbdBGSgL5aA83A4V4A6oCJWgMtwJVeAuqArV4G6oDvdADbgXasJ9UAvuh9rwANSBB6EuPAT14GGoD49AA3gUGkIjaAxNoOn/Uf6L0BVegm7QHVKhB/SEl6EX9IY+0Bf6wSvQH16FAfAaDIRBMBhehyHwBgyFN2EYDIcR8BaMhFEwGsbAWBgH4+FtmADvwER4FybBZJgCU2EaTIcZ8B7MhFkwG96HOfABzIV5MB8WwEL4EBbBYkiDj2AJfAxLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlvhE9gG22EH7IRdsBv2wKewFz6DffA57Icv/sH8s/8lvxMCAipUaNBgBsyAKZiCmTEzZsEsmBWzYgITmA2zYXbMjjkwB+bCXJgH82A+zIeEhIyM+TE/JjGJBbEgFsJCWASLoEePxbE4lsCbsSSWxFJYCktjaSyDZbEslsfyWAErYEWsiJWxMlbBKlgVq+LdeDfegzWwBtbEmlgLa2FtrI11sA7WxbpYD+thfayPDbABNsSG2BgbY1Nsis2wGTbH5tgSW2IrbIWtsTW2wTbYFttiO2yH7bE9dsAO2BE7YifsjJ3xRXwRX8KXsDtWUT2wJ/bEXtgL+2Bf7IuvYH98FV/F13AgDsLB+Dq+jm/gUDyDw3A4jsARWEGNwtE4BlmNw/E4HifgBJyIE3ESTsbJOBWn4XScgTNwJs7CWfg+zsEP8AOch/NwAS7EhbgIF2MapuESPItLcRkuxxW4ElfhSlyDa3ENrscNuB434SbcglvwE/wEt+N23Ik7cTfuxk/xU/wMP8OBuB/34wE8gAfxIB7CQ3gYD+MRPIJH8Sgew2N4HI/jCTyJp/AknsbTeAbP4jk8h+fxPF7A5/N8XW934XUDQV1ilFEZVAaVolJUZpVZZVFZVFaVVSVUQmVT2VR2lV3lUDlULpVL5VF5VD6VT5EixSpW+VV+lVRJVVAVVIVUIVVEFVFeeVVcFVclVAlVUpVUpdStqrS6TZVRZVULX16VVxVUS19RVVKVVWVVRd2lqqpqqpqqrqqrGqqGqqlqqlqqlqqtHlB1VA/sgw+pS52prwZhAzUYG6pGqrFqot7Ax1QzNRSbqxaqpXpCDcdh2Fo1823U06qtGo3t1LNqDD6nOqhx2FG9oDqpzqqLelF1Vc19twy/vQWqqdhL9VZ9VF81E+9SlzpWVb2mBqpBarB6XS3AN9RQ9aYapoarEeotNVKNUqPVGDVWjVPj1dtqgnpHTVTvqklqspqipqpparqaod5TM9UsNVu9r+aoD9RcNU/NVwvUQvWhWqQWqzT1kVqiPlZL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RW9UnapvarnaonWqX2q32qE/VXvWZ2qc+V/vVF+qA+pM6qL5Uh9RX6rD6Wh1R36ij6lt1TH2njqvv1Ql1Up1SP6jT6kd1Rp1V59RP6rz6WV1Qv6iLKijQqJXW2uhIZ9AZdYrOpDPrq3QWfbXOqq/RCX2tzqav09n19TqHzqlz6dw6j86r82mrSTvNOtb5dQGd1DfogvpGXUgX1kV0Ue11MV1c36RL6Jt1SX2LLqVv1aX1bbqMLqvL6fL6dl1B36Er6kq6sr5TV9F36aq6mr5bV9f36Br6Xl1T36dr6ft1bf2ArqMf1HX1Q7qefljX14/oBvpR3VA30o11E91UP6ab6cd1c91Ct9RP6Fb6Sd1aP6Xb6Kd1W/2Mbqef1e31c7qDfl531C/oTrqz7qJ/0Rd10N10d52qe+ie+mXdS/fWfXRf3U+/ovvrV/UA/ZoeqAfpwfp1PUS/oYfqN/UwPVyP0G/pkXqUHq3H6LF6nB6v39YT9Dt6on5XT9KT9RQ9VU/T03Wf3yrN/jvy3/kr+QN+ffUteqv+RG/T2/UOvVPv0rv1Hr1H79V79T69T+/X+/UBfUAf1Af1IX1IH9aH9RF9RB/VR/UxfUwf18f1CX1S/6R/0Kf1j/qMPqvP6p/0eX1eX/jtawAGjTLaGBOZDCajSTGZTGZzlclirjZZzTUmYa412cx1Jru53uQwOU0uk9vkMXlNPmMNGWfYxCa/KWCS5gZT0NxoCpnCpogparwpZoqbm/7p/D9aX1PT1DQzzUxz09y0NC1NK9PKtDatTRvTxrQ1bU070860N+1NB9PBdDQdTSfTyXQxXUxX09V0M91Mqkk1Pc3LppfpbfqYvqafecX0N/3NADPADDQDzWAz2AwxQ8xQM9QMM8PMCDPCjDQjzWgz2ow1Y814M95MMBPMRDPRTDKTzBQzxUwz08wMM8PMNDPNbDPbzDFzzFwz18w3881Cs9AsMotMmkkzS8wSs9QsM8vMCrPCrDKrzBqzxqwz68wGs8FsMpvMUrPVbDXbzDazw+wwu8wus8fsMXvNXrPP7DP7zX5zwBwwB81Bc8gcMofNYXPEHDFHzVFzzBwzx81xc8KcMKfMKXPanDZnzBlzzpwz5815c8FcMBfNxUuXfZGKVGQiE2WIMkQpUUqUOcocZYmyRFmjrFEiSkTZomxR9uj6KEeUM8oV5Y7yRHmjVLARRS7iKI7yRwWiZHRDVDC6MSoUFY6KREUjHxWLikc3RSWim6OS0S1RqejWqHR0W1QmKhuVi8pHt0cVojuiilGlqHJ0Z1QluiuqGlWL7o6qR/dENaJ7o5rRfVGt6P6odvRAVCd6MKobPRTVix6O6kePRA2iR6OGUaOocdQkavovrR/CmZyP+262u021PWxP+7LtZXvbPrav7Wdfsf3tq3aAfc0OtIPsYPu6HWLfsEPtm3aYHW5H2LfsSDvKjrZj7Fg7zo63b9sJ9h070b5rJ9nJdoqdaqfZ6XaGfc/OtLPsbPu+nWM/sHPtPDvfLrAL7Yd2kV1s0+xHdon92C61y+xyu8KutKvsarvGrrXr7Hq7wW60m+xmu8VutZ/YbXa73WF32l12t91jP7V77Wd2n/3c7rdf2AP2T/ag/dIesl/Zw/Zre8R+Y4/ab+0x+509br+3J+xJe8r+YE/bH+0Ze9aesz/Z8/Zne8H+Yi/acOni/tLHOxkylIEyUAqlUGbKTFkoC2WlrJSgBGWjbJSdslMOykG5KBfloTyUj/LRJUxM+Sk/JSlJBakgFaJCVISKkCdPxak4laASVJJKUikqRaWpNJWhMlSOytHtdDvdQXdQJapEd9KddBfdRdWoGlWn6lSDalBNqkm1qBbVptpUh+pQXapL9age1af61IAaUENqSI2pMTWlptSMmlFzak4tqSW1olbUmlpTG2pDbakttaN21J7aUwfqQB2pI3WiTtSFulBX6krdqBulUir1pJ7Ui3pRH+pD/agf9af+NIAG0EAaSINpMA2hITSUhtIwGk4j6C0aSaNoNI2hsTSOxtN4mkATaCJNpEk0iabQFJpG02gGzaCZNJNm02yaQ3NoLs2l+TSfFtJCWkSLKI3SaAktoaW0lJbTclpJK2k1raa1tJbW03raSBtpM22mrbSVttE22kE7aBftoj20h/bSXtpH+2g/7acDdIAO0kE6RIfoMB2mI3SEjtJROkbH6DgdpxN0gk7RKTpNp+kMnaFzdI7O0890gX6hixQoxSnI7K5yWdzVLqu7xqW4TO5SHAHApTiXy+3yuLwun7Muh8v5FzE55wq5wq6IK+q8K+aKu5t+F5dxZV05V97d7iq4O1zF38XV3T2uhrvX1XT3uWru7r+Ia7n7XW33iKvjHnV1XSNXzzVx9d0jroF71DV0jVxj18S1ck+61u4p18Y97dq6Z34XL3KL3Vq3zq13G9xe95k7535yR9237rz72XVz3V0/94rr7151A9xrbqAb9Lt4hHvLjXSj3Gg3xo11434XT3FT3TQ33c1w77mZbtbv4oXuQzfHpbm5bp6b7xb8Gl9aU5r7yC1xH7ulbplb7la4lW6VW+3W/O+1rnCb3Ga3xe1xn7ptbrvb4Xa6XW73r/Glfexzn7v97gt3xH3jDrov3SF3zB12X/8aX9rfMfedO+6+dyfcSXfK/eBOux/dGXf21/1f2vsP7hd30QUHjKxYs+GIM3BGTuFMnJmv4ix8NWflazjB13I2vo6z8/Wcg3NyLs7NeTgv52PLxI6ZY87PBTjJN3BBvpELcWEuwkXZczEuzjdxCb6ZS/ItXIpv5dJ8G5fhslyOy/PtXIHv4IpciSvznVwlBK7K1fhurs73cA2+l2vyfVyL7+fa/ADX4Qe5Lj/E9fhhrs+PcAN+lBtyI27MTbgpP8bN+HFuzi24JT/BrfhJbs1PcRt+mtvyM9yOn+X2/Bx34Oe5I7/Anbgzd+EXuSu/xN24O6dyD+7JL3Mv7s19uC/341e4P7/KA/g1HsiDeDC/zkP4DR7Kb/IwHs4j+C0eyaN4NI/hsTyOx/PbPIHf4Yn8Lk/iyTyFp/I0ns4z+D2eybN4Nr/Pc/gDnsvzeD4v4IX8IS/ixZzGH/ES/piX8jJezit4Ja/i1byG1/I6Xs8beCNv4s28hbfyJ7yNt/MO3sm7eDfv4U95L3/G+/hz3s9f8AH+Ex/kL/kQf8WH+Ws+wt/wUf6Wj/F3fJy/5xN8kk/xD3yaf+QzfJbP8U98nn/mC/wLX+TAEGOsYh2bOIozxBnjlDhTnDm+Ks4SXx1nja+JE/G1cbb4ujh7fH2cI84Z54pzx3nivHG+2MYUu5jjOM4fF4iT8Q1xwfjGuFBcOC4SF419XCwuHt8Ul4hvjkvGt8Sl4lvj0vFtcZm4bPzIfeXj2+MK8R1xxbhSXDm+M64S3xVXjavFd8fV43viGvG9cc34vrhkfH9cO34grhM/GNeNH4rrxQ/H9eNH4gbxo3HDuFHcOG4SN40fi5vFj8fN4xZxy/iJuFX8ZNw6fipuEz8dt42f+cPjqXGPuGf8cvxyHMK9en5yQXJh8sPkouTiZFryo+SS5MfJpcllyeXJFcmVyVXJ1ck1ybXJdcn1yQ3JjclNyc3JLckQqmUEj1557Y2PfAaf0af4TD6zv8pn8Vf7rP4an/DX+mz+Op/dX+9z+Jw+l8/t8/i8Pp+3nrzz7GOf3xfwSX+DL+hv9IV8YV/EF/XeF/PFfRPf1Df1zfzjvrlv4Vv6J/wT/kn/pH/KP+Wf9m39M76df9a398/5Dv55/7x/wXfynX0X/6Lv6l/y3Xx3n+pTfU/f0/fyvXwf38f38/18f9/fD/AD/EA/0A/2g/0QP8QP9UP9MD/Mj/Aj/Eg/0o/2o/1YP9aP9+P9BD/BT/QT/SQ/yU/xU/w0P83P8DP8TD/Tz/az/ZxCc/xcP9fP9/P9Qr/QL/KLfJpP80v8Er/UL/XL/XK/0q/0q/1qv9av9ev9er/Rb/Sb/Wa/1W/12/w2v8Pv8Lv8Lr/H7/F7/V6/z+/z+/1+f8Af8Af9QX/If+UP+6/9Ef+NP+q/9cf8d/64/96f8Cf9Kf+DP+1/9Gf8WX/O/+TP+5/9Bf+Lv+iDH594OzEh8U5iYuLdxKTE5MSUxNTEtMT0xIzEe4mZiVmJ2Yn3E3MSHyTmJuYl5icWJBYmPkwsSixOpCU+SixJfJxYmliWWJ5YkViZWJUIIe+2OOQPBUIy3BAKhhtDoVA4FAlFgw/FQvFwUygRbg4lwy2hVLg1lA63hTKhbCgXHg0NQ6PQODQJTcNjoVl4PDQPLULL8ERoFZ4MrcNToU14OrQNz4R24dnQPjwXOoTnQ8fwQugUOocu4cXQNbwUuoXuITX0CD3Dy6FX6B36hL6hX3gl9A+vhgHhtTAwDAqDw+thSHgjDA1vhmFheBgR3gojw6gwOowJY8O4MD68HSaEd8LE8G6YFCaHKWFqmBamhxnhvTAzzAqzw/thTvggzA3zwvywICwMH4ZFYXFICx+FJeHjsDQsC8vDirAyrAqrw5qwNqwL68OGsDFsCpvDlrA1fBK2he1hR9gZdoXdYU/4NOwNn4V94fOwP3wRDoQ/hYPhy3AofBUOh6/DkfBNOBq+DcfCd+F4+D6cCCfDqfBDOB1+DGfC2XAu/BTOh5/DhfBLuCi/syaEEEII8XfRf3C8x1/5vwwAoH6b9wSAq7fnPvxfa27M8R/z3ipPqwQAPN2940N/HlWqpKam/nbuUg1RgXkAkPjL+n+Ol0FLeBLaQAso8VfX11t1Ps9/UD95K0Dm/5STApfjy/Vv/hv1H3tixKLS8bls/039eQCFClzOyQSX48v1S/6N+jmb/cH6M305HqD5f8rJApfjy/WLw+PwDLT5izP/pujvOUkIIYQQQgghxL+P3qpc+z+6f750f57HXM7JCJfjP7o/F0IIIYQQQgghxJX3XOcuTz3Wpk2L9n/fBFP/4wcG/rEsmchEJv+fTa70O5MQQgghhBDiX+3yRf+VXokQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF+/U/8ObErvUchhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDiSvtfAQAA//8s4Dlx") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) 109.703697ms ago: executing program 4 (id=2826): connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c54000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 0s ago: executing program 5 (id=2827): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) kernel console output (not intermixed with test programs): led to enable media [ 759.637157][T12484] syzkaller0: entered promiscuous mode [ 759.646052][T12489] loop4: detected capacity change from 0 to 256 [ 759.817386][T12484] syzkaller0: entered allmulticast mode [ 760.134420][T12489] FAT-fs (loop4): Directory bread(block 64) failed [ 760.147409][T12489] FAT-fs (loop4): Directory bread(block 65) failed [ 760.180504][T12489] FAT-fs (loop4): Directory bread(block 66) failed [ 760.460356][T12489] FAT-fs (loop4): Directory bread(block 67) failed [ 760.519974][T12489] FAT-fs (loop4): Directory bread(block 68) failed [ 760.526584][T12489] FAT-fs (loop4): Directory bread(block 69) failed [ 760.581158][T12489] FAT-fs (loop4): Directory bread(block 70) failed [ 760.587766][T12489] FAT-fs (loop4): Directory bread(block 71) failed [ 760.638939][T12489] FAT-fs (loop4): Directory bread(block 72) failed [ 760.738962][T12489] FAT-fs (loop4): Directory bread(block 73) failed [ 763.415540][T12508] fuse: Bad value for 'fd' [ 767.662361][T12530] tipc: Enabling of bearer rejected, failed to enable media [ 769.017745][T12544] fuse: Bad value for 'fd' [ 771.688873][ T5835] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 772.220848][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.231221][ T5835] usb 5-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 772.401773][ T5835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 772.409096][ T5835] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 772.418733][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.442107][ T5835] usb 5-1: config 0 descriptor?? [ 772.805420][ T5835] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 773.599436][T12574] tipc: Enabling of bearer rejected, failed to enable media [ 774.283561][ T28] audit: type=1326 audit(1781120597.619:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.2.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c7ef9ce59 code=0x0 [ 774.451766][T12589] fuse: Bad value for 'fd' [ 774.471754][ T27] usb 5-1: USB disconnect, device number 12 [ 776.834872][T12609] loop2: detected capacity change from 0 to 40427 [ 776.884271][T12609] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 776.997086][T12609] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 777.004146][T12609] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 778.035786][T12624] tipc: Enabling of bearer rejected, failed to enable media [ 779.957654][T12652] loop4: detected capacity change from 0 to 40427 [ 780.051792][T12652] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 780.079255][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 780.115716][T12652] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 780.122929][T12652] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 780.816055][T12662] syzkaller0: entered promiscuous mode [ 780.889706][T12662] syzkaller0: entered allmulticast mode [ 784.186726][T12701] qrtr: Invalid version 0 [ 786.778956][ T1198] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 786.971201][ T1198] usb 6-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 787.006585][ T1198] usb 6-1: config 0 interface 0 has no altsetting 0 [ 787.013622][ T1198] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 787.023120][ T1198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.034607][ T1198] usb 6-1: config 0 descriptor?? [ 787.044668][ T1198] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 788.701550][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 789.085705][T12753] binder: BINDER_SET_CONTEXT_MGR already set [ 789.091950][T12753] binder: 12751:12753 ioctl 4018620d 200000004a80 returned -16 [ 789.944632][ T2182] usb 6-1: USB disconnect, device number 10 [ 791.472812][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 791.511354][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1592'. [ 791.607245][ T1096] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 791.976000][T12795] binder: BINDER_SET_CONTEXT_MGR already set [ 791.982894][T12795] binder: 12793:12795 ioctl 4018620d 200000004a80 returned -16 [ 793.824354][T12809] qrtr: Invalid version 0 [ 795.012146][T12830] loop4: detected capacity change from 0 to 512 [ 795.055081][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 795.080367][T12830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 795.147760][T12830] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1603: iget: bad i_size value: 38620345925642 [ 795.214810][T12830] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1603: couldn't read orphan inode 15 (err -117) [ 795.281189][T12830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.436972][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.987829][T12853] qrtr: Invalid version 0 [ 798.494390][T12863] binder: BINDER_SET_CONTEXT_MGR already set [ 798.500554][T12863] binder: 12860:12863 ioctl 4018620d 200000004a80 returned -16 [ 799.604011][T12871] syzkaller0: entered promiscuous mode [ 799.613259][T12871] syzkaller0: entered allmulticast mode [ 801.676093][T12894] loop4: detected capacity change from 0 to 512 [ 801.746229][T12894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 801.824742][T12894] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1624: iget: bad i_size value: 38620345925642 [ 801.858529][T12894] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1624: couldn't read orphan inode 15 (err -117) [ 801.916580][T12894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.088387][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.635235][T12911] syzkaller0: entered promiscuous mode [ 803.648784][T12911] syzkaller0: entered allmulticast mode [ 805.464030][T12924] loop4: detected capacity change from 0 to 512 [ 805.622791][T12924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 805.865642][T12924] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1633: iget: bad i_size value: 38620345925642 [ 805.989105][T12924] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1633: couldn't read orphan inode 15 (err -117) [ 806.023795][T12924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.167326][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.883770][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.890328][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.318038][ T28] audit: type=1326 audit(1781120632.649:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.4.1643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2499ce59 code=0x7fc00000 [ 810.148448][T12971] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 811.908614][ C1] hrtimer: interrupt took 55824 ns [ 812.078821][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 812.696681][ T28] audit: type=1326 audit(1781120636.029:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12983 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 814.188905][T13010] loop4: detected capacity change from 0 to 736 [ 816.179859][ T28] audit: type=1326 audit(1781120639.499:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 816.346506][ T28] audit: type=1326 audit(1781120639.499:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 816.434023][ T28] audit: type=1326 audit(1781120639.499:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 816.529637][ T28] audit: type=1326 audit(1781120639.499:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 816.581628][T13037] binder: BINDER_SET_CONTEXT_MGR already set [ 816.587716][T13037] binder: 13031:13037 ioctl 4018620d 200000004a80 returned -16 [ 816.849537][ T28] audit: type=1326 audit(1781120639.499:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 817.260948][ T28] audit: type=1326 audit(1781120639.499:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 817.321118][ T28] audit: type=1326 audit(1781120639.499:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 817.345683][ T28] audit: type=1326 audit(1781120639.499:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 817.370401][ T28] audit: type=1326 audit(1781120639.499:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 817.395990][ T28] audit: type=1326 audit(1781120639.499:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.0.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c6b9ce59 code=0x7fc00000 [ 819.702600][T13063] binder: BINDER_SET_CONTEXT_MGR already set [ 819.708939][T13063] binder: 13061:13063 ioctl 4018620d 200000004a80 returned -16 [ 820.623730][T13068] batman_adv: batadv0: Adding interface: dummy0 [ 820.630263][T13068] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.656956][T13068] batman_adv: batadv0: Interface activated: dummy0 [ 820.690035][T13068] batadv0: mtu less than device minimum [ 820.698178][T13068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 820.711869][T13068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 820.724838][T13068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 820.737749][T13068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 820.750686][T13068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 820.763575][T13068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 820.776190][T13068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 820.788806][T13068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 820.801318][T13068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 822.607227][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 823.189183][T13102] binder: BINDER_SET_CONTEXT_MGR already set [ 823.195805][T13102] binder: 13100:13102 ioctl 4018620d 200000004a80 returned -16 [ 823.615414][ T746] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 823.686391][T13105] loop5: detected capacity change from 0 to 256 [ 823.872459][T13105] exfat: Deprecated parameter 'utf8' [ 823.950279][T13105] exfat: Deprecated parameter 'namecase' [ 823.968919][T13105] exfat: Deprecated parameter 'namecase' [ 823.984583][T13105] exfat: Deprecated parameter 'utf8' [ 824.136532][T13105] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 824.590122][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 830.568638][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 834.350812][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1709'. [ 834.425099][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'. [ 839.503402][T13209] syzkaller0: entered promiscuous mode [ 839.527070][T13209] syzkaller0: entered allmulticast mode [ 839.844643][T13204] loop2: detected capacity change from 0 to 32768 [ 839.869054][T13204] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1718 (13204) [ 839.912281][T13204] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 840.043150][T13204] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 840.104837][T13204] BTRFS info (device loop2): using free space tree [ 840.197228][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'. [ 840.555272][T13204] BTRFS info (device loop2): enabling ssd optimizations [ 840.564168][T13204] BTRFS info (device loop2): auto enabling async discard [ 840.753972][ T5773] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 840.972784][T13241] loop4: detected capacity change from 0 to 512 [ 840.995088][T13241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 841.062079][T13241] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1724: iget: bad i_size value: 38620345925642 [ 841.091674][T13241] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1724: couldn't read orphan inode 15 (err -117) [ 841.372397][T13241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.367917][ T5788] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (5788) [ 842.525757][T13253] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 842.535303][T13253] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 842.544369][T13253] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 842.595352][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.449835][T10643] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 848.354618][T13300] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 849.359788][ T5835] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 849.782021][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 850.057488][ T5835] usb 3-1: config 4 has an invalid interface number: 169 but max is 0 [ 850.114842][ T5835] usb 3-1: config 4 has no interface number 0 [ 850.185540][ T5835] usb 3-1: config 4 interface 169 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0 [ 850.243402][ T5835] usb 3-1: config 4 interface 169 altsetting 6 bulk endpoint 0xE has invalid maxpacket 0 [ 850.314387][ T5835] usb 3-1: config 4 interface 169 altsetting 6 endpoint 0xD has an invalid bInterval 33, changing to 9 [ 850.373070][ T5835] usb 3-1: config 4 interface 169 has no altsetting 0 [ 850.429164][ T5835] usb 3-1: New USB device found, idVendor=0b57, idProduct=e6d7, bcdDevice=32.78 [ 850.443156][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.452587][ T5835] usb 3-1: Product: syz [ 850.456807][ T5835] usb 3-1: Manufacturer: syz [ 850.473414][ T5835] usb 3-1: SerialNumber: syz [ 851.398929][ T5835] usbhid 3-1:4.169: couldn't find an input interrupt endpoint [ 851.432145][ T5835] usb 3-1: USB disconnect, device number 10 [ 855.643110][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 859.706828][T13351] loop4: detected capacity change from 0 to 32768 [ 859.808988][T13351] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 859.829006][T13378] loop2: detected capacity change from 0 to 1764 [ 859.939071][T13351] XFS (loop4): Ending clean mount [ 860.099844][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 860.099895][ T28] audit: type=1800 audit(1781120683.429:225): pid=13351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1753" name="file1" dev="loop4" ino=6154 res=0 errno=0 [ 860.183372][ T27] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 860.206909][ T27] XFS (loop4): Unmount and run xfs_repair [ 860.227187][ T27] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 860.254050][ T27] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 860.349934][ T27] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 860.376016][ T27] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 860.554599][ T27] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 860.564422][ T27] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 860.573739][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 860.588804][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 860.598956][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 860.608239][T13351] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 861.018232][T13351] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 861.403955][T13351] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 861.649426][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1763'. [ 861.676175][ T8586] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 863.626003][T13397] tipc: Enabled bearer , priority 0 [ 863.768259][T13397] tipc: Resetting bearer [ 863.791103][T13396] tipc: Disabling bearer [ 863.847026][T13401] fuse: Unknown parameter 'grou00000000000000000000' [ 863.969293][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 864.171737][ T8] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.201685][ T8] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.218197][ T8] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.237072][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 864.246168][ T8] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 864.262697][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.280511][ T8] usb 5-1: config 0 descriptor?? [ 865.296920][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 865.705671][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 865.735933][ T8] usb 5-1: USB disconnect, device number 13 [ 866.787476][T13426] fuse: Unknown parameter 'grou00000000000000000000' [ 869.531186][T13442] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 869.643381][T13442] bond1: (slave lo): Enslaving as an active interface with an up link [ 869.717939][T13442] net_ratelimit: 10 callbacks suppressed [ 869.718040][T13442] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 870.324403][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.649130][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.480659][T13453] bridge1: entered allmulticast mode [ 871.497350][T13453] team0: Port device bridge1 added [ 871.513585][T13453] bridge0: port 3(team0) entered blocking state [ 871.521084][T13453] bridge0: port 3(team0) entered disabled state [ 871.527956][T13453] team0: entered allmulticast mode [ 871.537798][T13453] team_slave_0: entered allmulticast mode [ 871.547462][T13453] team_slave_1: entered allmulticast mode [ 871.557453][T13453] team0: entered promiscuous mode [ 871.562781][T13453] team_slave_0: entered promiscuous mode [ 871.570364][T13453] team_slave_1: entered promiscuous mode [ 871.577451][T13453] bridge1: entered promiscuous mode [ 871.586849][T13453] bridge0: port 3(team0) entered blocking state [ 871.593591][T13453] bridge0: port 3(team0) entered forwarding state [ 871.618722][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 871.934411][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 871.948842][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.969279][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 871.979086][ T8] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 871.990496][ T8] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 872.008880][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 872.110857][ T8] usb 3-1: config 1 interface 1 has no altsetting 0 [ 872.122746][ T8] usb 3-1: string descriptor 0 read error: -22 [ 872.129452][ T8] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 872.138533][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.372845][ T8] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 873.422248][ T8] usb 3-1: USB disconnect, device number 11 [ 873.498247][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.727426][ T1096] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 876.312742][T13475] loop5: detected capacity change from 0 to 32768 [ 876.358316][T13475] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 876.608672][T13475] XFS (loop5): Ending clean mount [ 876.825773][T10072] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 877.968712][ T5834] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 879.308797][ T5834] usb 6-1: device descriptor read/64, error -71 [ 879.599818][ T5834] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 879.788709][ T5834] usb 6-1: device descriptor read/64, error -71 [ 879.912985][ T5834] usb usb6-port1: attempt power cycle [ 881.848880][ T5834] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 881.929357][ T5834] usb 6-1: device descriptor read/8, error -71 [ 882.321355][ T5834] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 882.361925][ T5834] usb 6-1: device descriptor read/8, error -71 [ 882.518891][ T5834] usb usb6-port1: unable to enumerate USB device [ 883.012698][T13534] loop5: detected capacity change from 0 to 736 [ 887.881238][T13550] loop2: detected capacity change from 0 to 32768 [ 887.911097][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 887.932235][T13550] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 890.195220][ T5788] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 897.458380][T13617] : renamed from bond0 (while UP) [ 897.539018][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 897.645055][T13617] team1: entered promiscuous mode [ 897.666776][T13617] team1: entered allmulticast mode [ 897.676042][T13617] 8021q: adding VLAN 0 to HW filter on device team1 [ 897.695824][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 897.726954][T13618] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 898.703853][T13618] team2: entered promiscuous mode [ 898.720221][T13618] team2: entered allmulticast mode [ 898.757945][T13618] 8021q: adding VLAN 0 to HW filter on device team2 [ 902.079718][T13639] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 903.583339][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf0e800: rx timeout, send abort [ 903.595200][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf0ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 904.093650][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf0e800: abort rx timeout. Force session deactivation [ 904.260998][T13657] loop5: detected capacity change from 0 to 512 [ 904.309910][T13657] EXT4-fs: inline encryption not supported [ 904.393542][T13657] EXT4-fs (loop5): Test dummy encryption mode enabled [ 904.437930][T13657] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 904.508367][T13657] EXT4-fs (loop5): Invalid default hash set in the superblock [ 904.859964][T13666] loop5: detected capacity change from 0 to 512 [ 904.875537][T13666] EXT4-fs (loop5): unable to read superblock [ 907.448885][ T5848] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 909.861613][T13691] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1850'. [ 911.133477][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025ee8400: rx timeout, send abort [ 911.143209][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025ee8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 911.641829][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025ee8400: abort rx timeout. Force session deactivation [ 913.052081][T13720] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1860'. [ 913.065007][T13695] loop2: detected capacity change from 0 to 40427 [ 913.108790][T13695] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 913.128192][T13695] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 913.187063][T13695] F2FS-fs (loop2): invalid crc value [ 913.216506][T13695] F2FS-fs (loop2): Found nat_bits in checkpoint [ 915.191015][T13735] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 915.226511][T13735] kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 915.266890][T13735] kvm: requested 161752 ns i8254 timer period limited to 200000 ns [ 915.313617][T13735] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 915.352837][T13735] kvm: requested 68723 ns i8254 timer period limited to 200000 ns [ 915.380580][T13735] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 915.390017][T13735] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 915.400323][T13735] kvm: requested 139962 ns i8254 timer period limited to 200000 ns [ 915.409246][T13735] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 915.418166][T13735] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 915.550157][T13744] loop2: detected capacity change from 0 to 1024 [ 915.566190][T13744] EXT4-fs: Ignoring removed bh option [ 915.595183][T13744] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 915.647800][T13744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.883353][T13750] loop5: detected capacity change from 0 to 736 [ 916.621906][T13744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1865: bg 0: block 99: padding at end of block bitmap is not set [ 916.728772][T13744] EXT4-fs (loop2): Remounting filesystem read-only [ 916.739706][T13753] fuse: Bad value for 'fd' [ 916.824757][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.265895][ T1198] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 917.617392][T13765] loop2: detected capacity change from 0 to 512 [ 917.748887][ T1198] usb 6-1: Using ep0 maxpacket: 16 [ 917.833303][ T1198] usb 6-1: unable to get BOS descriptor or descriptor too short [ 918.681036][ T1198] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 918.759493][ T1198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.767703][ T1198] usb 6-1: Product: syz [ 918.847951][ T1198] usb 6-1: Manufacturer: syz [ 918.862150][ T1198] usb 6-1: SerialNumber: syz [ 919.979139][T13771] loop4: detected capacity change from 0 to 4096 [ 920.322484][T13771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 921.802432][T10642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 921.854572][ T1198] usb 6-1: can't set config #1, error -71 [ 921.888222][ T1198] usb 6-1: USB disconnect, device number 15 [ 923.120213][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.369916][T13805] fuse: Bad value for 'fd' [ 924.812608][T13816] qrtr: Invalid version 0 [ 927.767071][T13827] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 929.269906][T13836] fuse: Bad value for 'fd' [ 930.824647][T13850] loop2: detected capacity change from 0 to 512 [ 931.825202][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.842483][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.927793][T13850] FAT-fs (loop2): FAT read failed (blocknr 128) [ 932.301322][T13857] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 933.361381][T13860] fuse: Bad value for 'fd' [ 934.552833][T13871] loop4: detected capacity change from 0 to 736 [ 936.158128][T13881] loop2: detected capacity change from 0 to 512 [ 936.244125][T13879] loop4: detected capacity change from 0 to 8192 [ 936.277786][T13881] FAT-fs (loop2): FAT read failed (blocknr 128) [ 936.319995][ T28] audit: type=1800 audit(1781120759.649:226): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1904" name="file1" dev="loop4" ino=1048644 res=0 errno=0 [ 936.790021][T13884] qrtr: Invalid version 0 [ 938.046189][T13887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1906'. [ 938.084220][T13894] fuse: Bad value for 'fd' [ 938.604462][T13897] loop5: detected capacity change from 0 to 4096 [ 938.969752][T13897] EXT4-fs: inline encryption not supported [ 939.002727][T13897] EXT4-fs (loop5): Test dummy encryption mode enabled [ 939.061980][T13897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.149402][T13915] loop2: detected capacity change from 0 to 512 [ 939.215163][ T28] audit: type=1800 audit(1781120762.465:227): pid=13897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1909" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 939.256062][T13915] FAT-fs (loop2): FAT read failed (blocknr 128) [ 939.347904][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.544048][T13922] fuse: Bad value for 'fd' [ 939.940780][T13925] qrtr: Invalid version 0 [ 940.548406][T13927] overlayfs: failed to clone upperpath [ 941.094178][T13927] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 941.314978][ T64] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 941.935948][T13933] loop5: detected capacity change from 0 to 736 [ 944.498887][T13956] loop5: detected capacity change from 0 to 512 [ 945.383409][T13951] xt_hashlimit: size too large, truncated to 1048576 [ 946.350896][T13964] fuse: Invalid rootmode [ 946.949901][T13971] overlayfs: overlapping lowerdir path [ 946.970314][T13971] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 950.970625][T13993] fuse: Invalid rootmode [ 951.257092][T14002] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1939'. [ 954.582143][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 955.590186][T14026] input: syz0 as /devices/virtual/input/input9 [ 956.098516][T14033] fuse: Invalid rootmode [ 960.586233][T14057] fuse: Bad value for 'rootmode' [ 966.384381][T14092] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1966'. [ 967.972201][T14102] loop5: detected capacity change from 0 to 512 [ 969.963709][T14112] overlayfs: failed to clone upperpath [ 970.920622][T14110] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 972.736622][T14120] tipc: Started in network mode [ 972.747792][T14120] tipc: Node identity 6239fc2b54f9, cluster identity 4711 [ 972.764096][T14120] tipc: Enabled bearer , priority 0 [ 972.787329][T14120] syzkaller0: entered promiscuous mode [ 972.801468][T14120] syzkaller0: entered allmulticast mode [ 972.847535][T14120] tipc: Resetting bearer [ 972.894874][T14119] tipc: Resetting bearer [ 972.985938][T14119] tipc: Disabling bearer [ 973.257843][T14132] loop5: detected capacity change from 0 to 512 [ 973.311509][T14132] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 973.375737][T14132] EXT4-fs (loop5): 1 truncate cleaned up [ 973.391017][T14132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.483711][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.361905][T14146] overlayfs: failed to clone upperpath [ 975.378086][T14146] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 975.748983][T14136] loop5: detected capacity change from 0 to 40427 [ 975.771174][T14136] F2FS-fs (loop5): Image doesn't support compression [ 975.782026][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 975.826884][T14136] F2FS-fs (loop5): Unrecognized mount option "whint_mode=fs-based" or missing value [ 980.178296][ T28] audit: type=1326 audit(1781120800.805:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.5.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaff9ce59 code=0x7ffc0000 [ 980.205512][ T28] audit: type=1326 audit(1781120800.805:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.5.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaff9ce59 code=0x7ffc0000 [ 980.230184][ T28] audit: type=1326 audit(1781120800.805:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.5.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaff9ce59 code=0x7ffc0000 [ 980.259150][ T28] audit: type=1326 audit(1781120800.889:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.5.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaff9ce59 code=0x7ffc0000 [ 980.290945][ T28] audit: type=1326 audit(1781120800.889:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.5.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f0eaff9ce59 code=0x7ffc0000 [ 980.335398][ T28] audit: type=1326 audit(1781120800.889:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.5.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaff9ce59 code=0x7ffc0000 [ 980.397832][ T28] audit: type=1326 audit(1781120800.889:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.5.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaff9ce59 code=0x7ffc0000 [ 980.573906][ T28] audit: type=1326 audit(1781120800.889:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.5.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0eaff9ce59 code=0x7ffc0000 [ 980.637400][ T28] audit: type=1326 audit(1781120800.889:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.5.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0eaff9ce59 code=0x7ffc0000 [ 982.166524][T14181] qrtr: Invalid version 0 [ 983.433674][T14195] loop2: detected capacity change from 0 to 512 [ 983.632813][T14195] FAT-fs (loop2): FAT read failed (blocknr 128) [ 985.088862][T14204] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1997'. [ 987.750375][T14218] bridge1: entered allmulticast mode [ 988.015839][T14222] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2006'. [ 988.197972][T14225] binder: BINDER_SET_CONTEXT_MGR already set [ 988.204144][T14225] binder: 14223:14225 ioctl 4018620d 200000004a80 returned -16 [ 988.985822][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 991.858554][T14250] loop5: detected capacity change from 0 to 512 [ 991.900088][T14250] FAT-fs (loop5): FAT read failed (blocknr 128) [ 992.525385][T14253] loop4: detected capacity change from 0 to 256 [ 993.129297][T14257] bridge3: entered allmulticast mode [ 995.458421][T14264] qrtr: Invalid version 0 [ 997.978059][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.984444][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.432849][T14280] bridge1: entered allmulticast mode [ 998.664226][T14284] loop5: detected capacity change from 0 to 512 [ 998.772360][T14284] EXT4-fs (loop5): Test dummy encryption mode enabled [ 999.004024][T14284] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2021: inode has both inline data and extents flags [ 999.861593][T14284] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2021: couldn't read orphan inode 15 (err -117) [ 999.989357][T14284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.112492][T14303] loop2: detected capacity change from 0 to 256 [ 1001.315292][T14303] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1001.326116][T14303] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1001.438954][T14303] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1003.002095][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.274445][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2032'. [ 1004.730010][T14322] qrtr: Invalid version 0 [ 1007.562437][T14329] loop5: detected capacity change from 0 to 4096 [ 1007.584360][T14329] EXT4-fs: inline encryption not supported [ 1007.675089][T14329] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1007.690807][T14329] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1007.848013][T14329] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c128, mo2=0002] [ 1007.873121][T14329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.364695][T14355] loop2: detected capacity change from 0 to 256 [ 1010.373054][T14355] exfat: Deprecated parameter 'utf8' [ 1010.429058][T14355] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1012.068228][T10643] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1012.084387][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.281862][T14365] tipc: Enabling of bearer rejected, failed to enable media [ 1017.972034][T14409] tipc: Enabled bearer , priority 0 [ 1017.990516][T14409] syzkaller0: entered promiscuous mode [ 1018.007095][T14409] syzkaller0: entered allmulticast mode [ 1018.087526][T14409] tipc: Resetting bearer [ 1018.165740][T14408] tipc: Resetting bearer [ 1018.182037][T14407] loop2: detected capacity change from 0 to 40427 [ 1018.217560][T14407] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1018.248033][T14407] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1018.272146][T14407] F2FS-fs (loop2): Image doesn't support compression [ 1018.278942][T14407] F2FS-fs (loop2): Image doesn't support compression [ 1018.291460][T14408] tipc: Disabling bearer [ 1018.309304][T14407] F2FS-fs (loop2): invalid crc value [ 1018.556457][T14407] F2FS-fs (loop2): Start checkpoint disabled! [ 1018.617775][T14407] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1018.629612][T14407] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1021.636024][T14431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1021.909377][ T1096] kworker/u4:6: attempt to access beyond end of device [ 1021.909377][ T1096] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1021.927614][ T1096] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1021.940105][ T1096] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1021.990835][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'. [ 1023.668118][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1024.294366][T14460] loop5: detected capacity change from 0 to 512 [ 1028.100825][T14476] binder: 14475:14476 ioctl c0306201 200000000240 returned -22 [ 1031.376893][T14494] loop2: detected capacity change from 0 to 512 [ 1031.422616][T14494] FAT-fs (loop2): FAT read failed (blocknr 128) [ 1032.585008][T14499] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1034.749068][T14506] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.759039][T14506] binder: 14504:14506 ioctl 4018620d 200000004a80 returned -16 [ 1037.713953][T14511] loop2: detected capacity change from 0 to 40427 [ 1037.767225][T14511] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1037.789316][T14511] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1037.823597][T14511] F2FS-fs (loop2): Image doesn't support compression [ 1037.835490][T14511] F2FS-fs (loop2): Image doesn't support compression [ 1037.866303][T14511] F2FS-fs (loop2): invalid crc value [ 1038.916813][T14511] F2FS-fs (loop2): Start checkpoint disabled! [ 1040.876482][T14540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2091'. [ 1040.888737][T14536] qrtr: Invalid version 0 [ 1042.184795][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1042.368061][T14554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1042.381499][T14554] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1042.391003][T14554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1042.401935][T14554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1042.413306][ T8] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1042.427571][T14554] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1042.434960][ T8] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.445524][T14554] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1042.452884][ T8] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1042.462622][ T8] usb 6-1: config 220 has no interface number 1 [ 1042.468972][ T8] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1042.477182][ T8] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1042.487353][ T8] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1042.497355][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.505756][ T8] usb 6-1: Product: syz [ 1042.509973][ T8] usb 6-1: Manufacturer: syz [ 1042.514619][ T8] usb 6-1: SerialNumber: syz [ 1042.812089][ T8] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1042.845848][ T8] usb 6-1: No valid video chain found. [ 1043.129199][ T8] usb 6-1: USB disconnect, device number 16 [ 1043.378283][ T5788] udevd[5788]: setting mode of /dev/bus/usb/006/016 to 020664 failed: No such file or directory [ 1043.460245][ T5788] udevd[5788]: setting owner of /dev/bus/usb/006/016 to uid=0, gid=0 failed: No such file or directory [ 1043.798783][T14467] syz_tun (unregistering): left allmulticast mode [ 1044.205492][T14568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2102'. [ 1044.564468][T14571] qrtr: Invalid version 0 [ 1044.694706][T14554] Bluetooth: hci4: command tx timeout [ 1046.242606][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.484104][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.515265][T14587] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2107'. [ 1046.542185][T14553] chnl_net:caif_netlink_parms(): no params data found [ 1046.698429][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.817725][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.856063][T14590] tipc: Enabled bearer , priority 0 [ 1046.908465][T10188] Bluetooth: hci4: command tx timeout [ 1046.950296][T14593] syzkaller0: entered promiscuous mode [ 1046.956010][T14593] syzkaller0: entered allmulticast mode [ 1047.042719][T14597] loop5: detected capacity change from 0 to 8192 [ 1047.053485][T14590] tipc: Resetting bearer [ 1047.177113][T14589] tipc: Resetting bearer [ 1047.262753][T14589] tipc: Disabling bearer [ 1047.336549][T14553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.343891][T14553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.366136][T14553] bridge_slave_0: entered allmulticast mode [ 1047.374145][T14553] bridge_slave_0: entered promiscuous mode [ 1047.423737][T14553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.447786][T14553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.500025][T14553] bridge_slave_1: entered allmulticast mode [ 1047.557203][T14553] bridge_slave_1: entered promiscuous mode [ 1047.575290][T14603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2111'. [ 1047.596696][T10643] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1049.038773][T14553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.173343][T14554] Bluetooth: hci4: command tx timeout [ 1050.230929][T14553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.572760][T14611] qrtr: Invalid version 0 [ 1051.354384][T14554] Bluetooth: hci4: command tx timeout [ 1051.374005][ T1106] tipc: Left network mode [ 1051.412945][T14553] team0: Port device team_slave_0 added [ 1051.449884][T14624] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2116'. [ 1051.523564][T14553] team0: Port device team_slave_1 added [ 1051.651269][T14553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.698114][T14553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.744377][T14630] loop2: detected capacity change from 0 to 256 [ 1051.783769][T14553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.971283][T14630] FAT-fs (loop2): Directory bread(block 64) failed [ 1052.028721][T14553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.035732][T14553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.061926][T14630] FAT-fs (loop2): Directory bread(block 65) failed [ 1052.113076][T14630] FAT-fs (loop2): Directory bread(block 66) failed [ 1052.275578][T14630] FAT-fs (loop2): Directory bread(block 67) failed [ 1052.398914][T14630] FAT-fs (loop2): Directory bread(block 68) failed [ 1052.447422][T14553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.539394][T14630] FAT-fs (loop2): Directory bread(block 69) failed [ 1052.689142][T14630] FAT-fs (loop2): Directory bread(block 70) failed [ 1052.740448][T14630] FAT-fs (loop2): Directory bread(block 71) failed [ 1052.769444][T14630] FAT-fs (loop2): Directory bread(block 72) failed [ 1052.784158][T14630] FAT-fs (loop2): Directory bread(block 73) failed [ 1053.097645][T14553] hsr_slave_0: entered promiscuous mode [ 1053.131689][T14553] hsr_slave_1: entered promiscuous mode [ 1053.156639][T14553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1053.180612][T14553] Cannot create hsr debugfs directory [ 1053.306392][T14648] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1054.346957][T14654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2121'. [ 1057.140340][T14670] qrtr: Invalid version 0 [ 1057.614381][T14674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2125'. [ 1058.317761][T14553] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1059.291633][T14553] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1059.302819][T14553] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1059.914289][ T746] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1060.415146][T14694] bridge2: entered allmulticast mode [ 1060.578883][T14553] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1062.745690][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.752063][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.097645][ T1106] hsr_slave_0: left promiscuous mode [ 1064.113659][ T1106] hsr_slave_1: left promiscuous mode [ 1064.136709][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.160605][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.172048][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.218477][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.248471][ T1106] bridge_slave_1: left allmulticast mode [ 1064.378354][ T1106] bridge_slave_1: left promiscuous mode [ 1064.388492][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.438901][ T1106] bridge_slave_0: left promiscuous mode [ 1064.475300][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.624743][ T1106] veth1_macvtap: left promiscuous mode [ 1064.650256][ T1106] veth0_macvtap: left promiscuous mode [ 1064.656171][ T1106] veth1_vlan: left promiscuous mode [ 1064.674052][ T1106] veth0_vlan: left promiscuous mode [ 1066.488637][T14745] loop2: detected capacity change from 0 to 256 [ 1066.717377][ T28] audit: type=1800 audit(1781120881.789:237): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2141" name="file1" dev="loop2" ino=1048734 res=0 errno=0 [ 1067.130553][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 1067.685944][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 1068.073603][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.160022][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.865365][ T1106] bond0 (unregistering): Released all slaves [ 1069.001486][T14737] bridge3: entered allmulticast mode [ 1069.247461][T14756] tipc: Enabled bearer , priority 0 [ 1069.255572][T14756] syzkaller0: entered promiscuous mode [ 1069.263360][T14756] syzkaller0: entered allmulticast mode [ 1069.596162][T14756] tipc: Resetting bearer [ 1069.678637][T14553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.704160][T14553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.808947][T14753] tipc: Resetting bearer [ 1069.909416][T14753] tipc: Disabling bearer [ 1069.923991][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.931187][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.331055][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.338264][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.276609][T11961] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1072.530753][T11961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.559072][T11961] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1072.569925][T11961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.582720][T11961] usb 3-1: Product: syz [ 1072.590176][T11961] usb 3-1: Manufacturer: syz [ 1072.595060][T11961] usb 3-1: SerialNumber: syz [ 1073.121131][T14553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.512107][T11961] cdc_ncm 3-1:1.0: failed to get mac address [ 1074.618730][T11961] cdc_ncm 3-1:1.0: bind() failure [ 1074.883392][T11961] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1075.005817][T11961] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1075.105656][T11961] usbtest: probe of 3-1:1.1 failed with error -71 [ 1075.169114][T11961] usb 3-1: USB disconnect, device number 12 [ 1075.430724][T14807] bridge4: entered allmulticast mode [ 1075.710550][T14816] loop4: detected capacity change from 0 to 512 [ 1075.731653][T14816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1076.080839][T14816] EXT4-fs (loop4): 1 truncate cleaned up [ 1076.087922][T14816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.119200][T14553] veth0_vlan: entered promiscuous mode [ 1076.235543][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.260442][T14553] veth1_vlan: entered promiscuous mode [ 1076.339345][T14825] tipc: Enabled bearer , priority 0 [ 1076.382525][T14825] syzkaller0: entered promiscuous mode [ 1076.388064][T14825] syzkaller0: entered allmulticast mode [ 1077.000050][T14825] tipc: Resetting bearer [ 1077.085309][T14824] tipc: Resetting bearer [ 1077.417305][T14824] tipc: Disabling bearer [ 1077.477866][T14553] veth0_macvtap: entered promiscuous mode [ 1077.557412][T14553] veth1_macvtap: entered promiscuous mode [ 1078.469911][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.480738][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.506911][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.542187][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.571935][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.618353][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.643166][T14553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.655556][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.666546][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.676869][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.687875][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.837788][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.850675][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.331128][T14553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.431708][T14850] loop4: detected capacity change from 0 to 128 [ 1079.667302][T14553] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.729801][T14553] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.761351][T14553] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.051737][T14553] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.582649][T14861] loop5: detected capacity change from 0 to 128 [ 1080.618822][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.670345][T14861] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1080.681859][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.778305][T14861] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 1080.830161][T14861] FAT-fs (loop5): Filesystem has been set read-only [ 1080.843619][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.857621][T14861] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 1080.878787][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.442008][T14876] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1084.354502][T14869] loop5: detected capacity change from 0 to 40427 [ 1087.665771][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2172'. [ 1088.119683][T14928] loop6: detected capacity change from 0 to 256 [ 1088.162585][T14930] syz.2.2174 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1089.776112][T14928] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1091.542724][ T28] audit: type=1800 audit(1781120905.016:238): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2176" name="file1" dev="loop6" ino=1048741 res=0 errno=0 [ 1094.255846][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2173'. [ 1094.492229][T14942] loop4: detected capacity change from 0 to 40427 [ 1094.504067][T14942] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 1094.511875][T14957] bond0: (slave bond_slave_0): Releasing backup interface [ 1094.524133][T14942] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1094.538393][T14942] F2FS-fs (loop4): Image doesn't support compression [ 1094.554034][T14942] F2FS-fs (loop4): Image doesn't support compression [ 1094.633273][T14942] F2FS-fs (loop4): invalid crc value [ 1094.703228][T14946] loop6: detected capacity change from 0 to 40427 [ 1094.781096][T14946] F2FS-fs (loop6): build fault injection attr: rate: 174, type: 0x7ffff [ 1095.001324][T14942] F2FS-fs (loop4): Start checkpoint disabled! [ 1095.704038][ T746] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1096.584721][T14978] loop6: detected capacity change from 0 to 736 [ 1097.680486][T14991] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1100.335748][T15008] loop6: detected capacity change from 0 to 40427 [ 1100.385542][T15008] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1100.443604][T15008] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1100.491090][T15008] F2FS-fs (loop6): Image doesn't support compression [ 1100.537182][T15008] F2FS-fs (loop6): Image doesn't support compression [ 1100.586072][T15008] F2FS-fs (loop6): invalid crc value [ 1101.239808][T15015] loop2: detected capacity change from 0 to 131072 [ 1101.291828][T15015] F2FS-fs (loop2): invalid crc value [ 1101.299079][T15008] F2FS-fs (loop6): Start checkpoint disabled! [ 1101.329470][T15015] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1101.434808][T15028] loop5: detected capacity change from 0 to 736 [ 1101.464236][T15015] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1101.501639][T15008] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1101.720358][T15008] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1103.018319][ T1106] kworker/u4:7: attempt to access beyond end of device [ 1103.018319][ T1106] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1103.082328][ T1106] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1103.124334][ T1106] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1104.184111][T15054] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1104.813292][T15059] loop5: detected capacity change from 0 to 512 [ 1105.013342][T15059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.079690][T15059] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.208941][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.526569][T15089] loop2: detected capacity change from 0 to 256 [ 1107.643777][T15089] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 1108.041877][T15101] loop2: detected capacity change from 0 to 128 [ 1108.089612][T15101] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1108.169544][T15101] ext4 filesystem being mounted at /553/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.506877][T15081] loop6: detected capacity change from 0 to 40427 [ 1108.557908][T15081] F2FS-fs (loop6): invalid crc value [ 1108.609302][T15081] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1108.703307][T15081] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1108.795424][T15081] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 1108.812792][ T6474] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1109.225162][ T6474] syz_tun (unregistering): left allmulticast mode [ 1110.057011][T15136] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2217'. [ 1111.494119][T10188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1111.508826][T10188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1111.525486][T10188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1111.546459][T10188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1111.562516][T10188] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1111.570050][T10188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1111.644041][T14335] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1111.885035][T14335] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1111.919480][T14335] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1111.956367][T14335] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1111.976012][T14335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.004354][T14335] usb 6-1: Product: syz [ 1112.016148][T14335] usb 6-1: Manufacturer: syz [ 1112.034763][T14335] usb 6-1: SerialNumber: syz [ 1112.139786][T15151] chnl_net:caif_netlink_parms(): no params data found [ 1112.268341][T15151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.275679][T15151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.283174][T15151] bridge_slave_0: entered allmulticast mode [ 1112.290701][T15151] bridge_slave_0: entered promiscuous mode [ 1112.299828][T15151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.307276][T15151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.315207][T15151] bridge_slave_1: entered allmulticast mode [ 1112.323024][T15151] bridge_slave_1: entered promiscuous mode [ 1112.406776][T14335] usb 6-1: unit 4 not found! [ 1112.431506][T15151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.432650][T14335] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1112.456780][T14335] usb 6-1: clock source 0 is not valid, cannot use [ 1112.463929][T14335] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 1112.476697][T15151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.483729][T14335] usb 6-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 1112.602093][T15151] team0: Port device team_slave_0 added [ 1112.633776][T14335] usb 6-1: USB disconnect, device number 17 [ 1112.639941][T15151] team0: Port device team_slave_1 added [ 1112.695692][T15151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.712909][T15151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.780923][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.797119][T15151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.848125][T15151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.878661][T15151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.918342][T15151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.032269][T15151] hsr_slave_0: entered promiscuous mode [ 1113.040355][T15151] hsr_slave_1: entered promiscuous mode [ 1113.338246][T15176] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2225'. [ 1113.770995][T10188] Bluetooth: hci0: command tx timeout [ 1113.830257][T15151] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1113.858893][T15151] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1113.885843][T15151] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1113.922658][T15151] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1114.173308][T15151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.240222][T15151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.318186][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.325386][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.449338][T14793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.456579][T14793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.530117][T15151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1115.990289][T10188] Bluetooth: hci0: command tx timeout [ 1116.375312][T15151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.219832][T15234] loop6: detected capacity change from 0 to 1024 [ 1117.276611][T15234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1117.305315][T15236] loop5: detected capacity change from 0 to 256 [ 1117.329848][T15151] veth0_vlan: entered promiscuous mode [ 1117.330298][T15236] exfat: Deprecated parameter 'namecase' [ 1117.391918][T15236] exfat: Deprecated parameter 'utf8' [ 1117.408329][T15151] veth1_vlan: entered promiscuous mode [ 1117.462843][T15236] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 1117.547068][T15151] veth0_macvtap: entered promiscuous mode [ 1117.595891][T15151] veth1_macvtap: entered promiscuous mode [ 1117.632294][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.648976][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.660125][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.670608][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.709071][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.731169][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.744858][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.761825][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.774478][T15151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.816366][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.828463][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.848397][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.860570][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.877571][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.892758][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.909225][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.928532][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.957697][T15151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.983229][T15151] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.996854][T15151] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.009970][T15151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.025069][T15151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.162554][T11961] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1118.216260][T10188] Bluetooth: hci0: command tx timeout [ 1118.253776][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.266818][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.347309][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.357799][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.824919][T11961] usb 6-1: Using ep0 maxpacket: 32 [ 1118.837719][T11961] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1118.861175][T11961] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1118.869764][T11961] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.921139][T11961] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1118.949901][T11961] usb 6-1: config 128 has no interface number 0 [ 1118.996456][T11961] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1119.018063][T11961] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1119.047393][T11961] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1119.071797][T11961] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1119.080920][T11961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.101960][T11961] usb 6-1: Product: syz [ 1119.107064][T11961] usb 6-1: Manufacturer: syz [ 1119.111801][T11961] usb 6-1: SerialNumber: syz [ 1120.428273][T10188] Bluetooth: hci0: command tx timeout [ 1121.541962][T11961] usb 6-1: USB disconnect, device number 18 [ 1121.742281][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1124.163412][ T28] audit: type=1326 audit(1781120935.551:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0eaff9ce59 code=0x0 [ 1124.278379][T15301] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2246'. [ 1124.742957][T15308] loop6: detected capacity change from 0 to 256 [ 1124.768879][T15308] exfat: Deprecated parameter 'utf8' [ 1124.774359][T15308] exfat: Deprecated parameter 'namecase' [ 1124.848208][T15308] exfat: Deprecated parameter 'namecase' [ 1125.176983][T15308] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1125.681064][T15315] loop4: detected capacity change from 0 to 256 [ 1125.703337][T15315] exfat: Deprecated parameter 'utf8' [ 1125.863176][T15315] exfat: Deprecated parameter 'namecase' [ 1125.869563][T15315] exfat: Deprecated parameter 'namecase' [ 1127.185796][T15315] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1128.301924][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1128.333776][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1129.654853][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1131.035469][T15358] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2256'. [ 1132.947493][T15390] loop7: detected capacity change from 0 to 2048 [ 1133.166351][T15390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.987723][T15151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.683629][T15409] xt_CT: No such helper "snmp_trap" [ 1135.801743][T15415] Bluetooth: MGMT ver 1.22 [ 1138.661866][T15445] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2269'. [ 1145.350810][T15522] binder: BINDER_SET_CONTEXT_MGR already set [ 1145.357721][T15522] binder: 15521:15522 ioctl 4018620d 200000004a80 returned -16 [ 1146.198768][T15536] binder: 15535:15536 ioctl c0306201 200000000080 returned -22 [ 1147.888660][T15555] loop6: detected capacity change from 0 to 256 [ 1148.072810][T15555] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1148.083816][T15555] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1148.203600][T15555] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1148.902109][T15562] loop7: detected capacity change from 0 to 512 [ 1149.035887][T15562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1149.061027][T15562] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.295025][T15151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1150.903146][T15589] loop7: detected capacity change from 0 to 16 [ 1150.997004][T15589] erofs: (device loop7): mounted with root inode @ nid 36. [ 1151.041527][T15589] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1151.171158][T15589] syz.7.2311: attempt to access beyond end of device [ 1151.171158][T15589] loop7: rw=0, sector=296, nr_sectors = 8 limit=16 [ 1151.622131][T15589] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1151.910628][T15589] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1151.975656][ T28] audit: type=1326 audit(1781121473.605:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.6.2314" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f213619ce59 code=0x0 [ 1152.165820][T15601] loop5: detected capacity change from 0 to 256 [ 1152.278638][T15601] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1152.289539][T15601] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1152.354674][T15601] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1156.621938][T15627] team0: left allmulticast mode [ 1156.627452][T15627] team_slave_0: left allmulticast mode [ 1156.634374][T15627] team_slave_1: left allmulticast mode [ 1156.639970][T15627] team0: left promiscuous mode [ 1156.666029][T15627] team_slave_0: left promiscuous mode [ 1156.687649][T15627] team_slave_1: left promiscuous mode [ 1156.705901][T15627] bridge1: left promiscuous mode [ 1156.724010][T15627] bridge0: port 3(team0) entered disabled state [ 1156.750003][T15627] bridge_slave_0: left allmulticast mode [ 1156.764211][T15627] bridge_slave_0: left promiscuous mode [ 1156.770140][T15627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.817442][T15627] bridge_slave_1: left allmulticast mode [ 1156.836263][T15627] bridge_slave_1: left promiscuous mode [ 1156.858448][T15627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.894988][T15627] bond0: (slave bond_slave_1): Releasing backup interface [ 1158.763737][T15627] team0: Port device team_slave_0 removed [ 1158.875157][T15627] team0: Port device team_slave_1 removed [ 1158.896171][T15627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.908853][T15627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.934414][T15627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.942560][T15627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.040141][T15627] team0: Port device bridge1 removed [ 1159.313620][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2328'. [ 1159.354360][T15637] bridge_slave_1: left allmulticast mode [ 1159.374875][T15637] bridge_slave_1: left promiscuous mode [ 1159.432525][T15637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.543813][T15637] bridge_slave_0: left allmulticast mode [ 1159.579407][T15637] bridge_slave_0: left promiscuous mode [ 1159.604034][T15637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.650173][T15644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1161.280751][T15658] dccp_invalid_packet: P.Data Offset(4) too small [ 1163.822099][ T1096] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1164.608831][T15680] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.615255][T15680] binder: 15678:15680 ioctl 4018620d 200000004a80 returned -16 [ 1166.124338][T15684] loop6: detected capacity change from 0 to 256 [ 1166.158070][T15683] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1166.621998][T15684] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1166.632835][T15684] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1166.850023][T15684] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1166.900325][T15687] loop5: detected capacity change from 0 to 128 [ 1170.497266][T14335] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1170.747400][T14335] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.769461][T14335] usb 7-1: config 0 has no interfaces? [ 1170.786843][T14335] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1170.814686][T14335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.841414][T14335] usb 7-1: config 0 descriptor?? [ 1171.126165][T14335] usb 7-1: USB disconnect, device number 2 [ 1171.202971][T15712] loop4: detected capacity change from 0 to 40427 [ 1171.233275][T15712] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 1171.240702][T15712] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1171.268574][T15712] F2FS-fs (loop4): Image doesn't support compression [ 1171.297613][T15712] F2FS-fs (loop4): Image doesn't support compression [ 1171.338551][T15712] F2FS-fs (loop4): invalid crc value [ 1171.710895][T15712] F2FS-fs (loop4): Start checkpoint disabled! [ 1171.757934][T15712] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1171.765386][T15712] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1172.351235][T15728] loop7: detected capacity change from 0 to 256 [ 1173.164187][T15728] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1173.174908][T15728] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1173.249009][T15728] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1173.367225][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2355'. [ 1173.508078][T10643] kworker/u4:10: attempt to access beyond end of device [ 1173.508078][T10643] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1173.862579][T10643] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1173.965880][T10643] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1174.247462][T14554] Bluetooth: hci4: command 0x0406 tx timeout [ 1174.344336][T15736] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1175.639146][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2365'. [ 1175.657414][T15752] loop5: detected capacity change from 0 to 512 [ 1175.692585][T15752] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2362: inode has both inline data and extents flags [ 1175.753980][T15752] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2362: couldn't read orphan inode 15 (err -117) [ 1175.767827][T15752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.830466][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.022763][T15764] loop4: detected capacity change from 0 to 16 [ 1176.042644][T15764] erofs: (device loop4): mounted with root inode @ nid 36. [ 1176.065282][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2368'. [ 1176.092755][T15764] syz.4.2358: attempt to access beyond end of device [ 1176.092755][T15764] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1176.128918][T15764] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -32 in[55, 4041] out[4096] [ 1176.155298][ T28] audit: type=1800 audit(1781121496.245:241): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2358" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1176.371526][T15770] loop5: detected capacity change from 0 to 736 [ 1177.329038][T15774] binder: BINDER_SET_CONTEXT_MGR already set [ 1177.335140][T15774] binder: 15773:15774 ioctl 4018620d 200000004a80 returned -16 [ 1177.360313][T15777] loop7: detected capacity change from 0 to 256 [ 1177.623575][T15785] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2374'. [ 1178.424472][T15807] loop5: detected capacity change from 0 to 8192 [ 1178.458889][T15809] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2384'. [ 1178.701386][T15816] loop4: detected capacity change from 0 to 256 [ 1178.710566][T15816] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1178.721552][T15816] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1178.786466][T15816] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1180.298940][T15838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2394'. [ 1180.332439][T15840] loop5: detected capacity change from 0 to 256 [ 1180.344783][T15840] exfat: Deprecated parameter 'utf8' [ 1180.350132][T15840] exfat: Deprecated parameter 'utf8' [ 1180.365752][T15840] exfat: Deprecated parameter 'namecase' [ 1180.387180][T15840] exfat: Deprecated parameter 'namecase' [ 1180.452652][T15840] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1181.801454][T15863] loop6: detected capacity change from 0 to 256 [ 1181.810858][T15863] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1181.821766][T15863] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1181.845698][T15863] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1183.013977][T15871] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2406'. [ 1183.026082][T15873] loop5: detected capacity change from 0 to 512 [ 1183.048510][T15873] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1183.153725][T15873] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2405: casefold flag without casefold feature [ 1183.171262][T15873] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2405: couldn't read orphan inode 15 (err -117) [ 1183.197560][T15873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1183.306264][T15873] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #2: block 4: comm syz.5.2405: lblock 0 mapped to illegal pblock 4 (length 1) [ 1183.397231][T15882] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.2405: bg 0: block 5: invalid block bitmap [ 1183.530298][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.589356][T15889] loop4: detected capacity change from 0 to 256 [ 1183.666833][T15891] loop5: detected capacity change from 0 to 512 [ 1183.701381][T15891] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1183.742702][T10584] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1183.752673][T15891] EXT4-fs (loop5): 1 truncate cleaned up [ 1183.926004][T15891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.066470][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.349365][T15902] loop5: detected capacity change from 0 to 256 [ 1184.362903][T15902] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1184.374802][T15902] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1184.399632][T15902] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1184.963859][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2416'. [ 1185.381730][T15912] xt_hashlimit: size too large, truncated to 1048576 [ 1185.435354][T15910] loop5: detected capacity change from 0 to 4096 [ 1185.502903][T15910] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1185.539953][T15910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.774365][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.160302][ T5834] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1187.393266][ T5834] usb 7-1: Using ep0 maxpacket: 32 [ 1187.465023][T15927] loop5: detected capacity change from 0 to 512 [ 1187.488596][T15927] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1187.539515][T15927] EXT4-fs (loop5): 1 truncate cleaned up [ 1187.579151][T15927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.939399][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.204651][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2425'. [ 1188.489101][T15939] loop5: detected capacity change from 0 to 256 [ 1188.497343][T15939] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1188.508240][T15939] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1188.561226][T15939] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1189.226399][ T5834] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1189.273288][ T5834] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1189.282973][ T5834] usb 7-1: can't read configurations, error -71 [ 1190.281548][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2434'. [ 1190.299616][T15955] loop4: detected capacity change from 0 to 512 [ 1190.326699][T15955] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1190.528729][T15955] EXT4-fs (loop4): 1 truncate cleaned up [ 1190.552444][T15955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.577998][T15961] loop6: detected capacity change from 0 to 16 [ 1190.643761][T15961] erofs: (device loop6): mounted with root inode @ nid 36. [ 1190.681493][T15961] syz.6.2435: attempt to access beyond end of device [ 1190.681493][T15961] loop6: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1190.888399][T15961] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 1190.972605][ T28] audit: type=1800 audit(1781121510.130:242): pid=15961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2435" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1191.050791][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.517486][T15961] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2435'. [ 1192.628490][T15977] binder: BINDER_SET_CONTEXT_MGR already set [ 1192.634748][T15977] binder: 15974:15977 ioctl 4018620d 200000004a80 returned -16 [ 1193.255399][T15985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2444'. [ 1193.460235][T15990] xt_policy: neither incoming nor outgoing policy selected [ 1193.984196][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1194.012711][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1196.242130][T15994] loop5: detected capacity change from 0 to 2048 [ 1196.254001][T15994] EXT4-fs: quotafile must be on filesystem root [ 1196.640509][T16000] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2448'. [ 1196.661075][T16002] 8021q: VLANs not supported on lo [ 1197.226667][T16011] loop5: detected capacity change from 0 to 256 [ 1198.174396][T16021] loop6: detected capacity change from 0 to 512 [ 1198.201510][T16021] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1198.355331][T16021] EXT4-fs (loop6): 1 truncate cleaned up [ 1198.377232][T16021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1199.428179][T10642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1200.742919][T14553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.977763][T16041] loop6: detected capacity change from 0 to 512 [ 1201.004674][T16046] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2463'. [ 1203.491864][T16066] loop6: detected capacity change from 0 to 512 [ 1203.527300][T16066] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1203.724394][T16066] EXT4-fs (loop6): 1 truncate cleaned up [ 1203.840017][T16066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.244261][T14553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.190554][ T28] audit: type=1326 audit(1781121523.435:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16079 comm="syz.7.2474" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1899ce59 code=0x7ffc0000 [ 1205.426607][ T28] audit: type=1326 audit(1781121523.435:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16079 comm="syz.7.2474" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1899ce59 code=0x7ffc0000 [ 1205.481764][ T28] audit: type=1326 audit(1781121523.463:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16079 comm="syz.7.2474" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d1899ce59 code=0x7ffc0000 [ 1205.534848][ T28] audit: type=1326 audit(1781121523.463:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16079 comm="syz.7.2474" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1899ce59 code=0x7ffc0000 [ 1205.567856][ T28] audit: type=1326 audit(1781121523.463:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16079 comm="syz.7.2474" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1899ce59 code=0x7ffc0000 [ 1205.715760][T16093] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2477'. [ 1205.735989][T16090] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2477'. [ 1206.551820][T16099] loop5: detected capacity change from 0 to 512 [ 1206.621561][T16099] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1206.826207][T16099] EXT4-fs (loop5): 1 truncate cleaned up [ 1206.882035][T16099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1207.124426][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.837804][ T28] audit: type=1326 audit(1781121525.907:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.6.2484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213619ce59 code=0x7ffc0000 [ 1207.886992][ T28] audit: type=1326 audit(1781121525.907:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.6.2484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f213619ce59 code=0x7ffc0000 [ 1207.940314][ T28] audit: type=1326 audit(1781121525.907:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.6.2484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213619ce59 code=0x7ffc0000 [ 1208.032923][T16118] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2487'. [ 1211.698549][T16135] loop5: detected capacity change from 0 to 512 [ 1211.827057][T16135] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1211.876828][T16135] EXT4-fs (loop5): 1 truncate cleaned up [ 1211.895009][T16135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.284307][T16135] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.2492: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1213.389734][T16135] EXT4-fs (loop5): Remounting filesystem read-only [ 1213.396452][T16135] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #2: comm syz.5.2492: Deleting old file: nlink 5, error=-117 [ 1213.439150][T16152] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2497'. [ 1213.754705][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.900177][T16174] xt_TCPMSS: Only works on TCP SYN packets [ 1215.752613][T16179] loop5: detected capacity change from 0 to 736 [ 1218.218912][T16186] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2506'. [ 1221.138190][T16212] loop5: detected capacity change from 0 to 40427 [ 1221.189994][T16228] loop6: detected capacity change from 0 to 512 [ 1221.203157][T16212] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1221.222321][T16228] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1221.243023][T16212] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1221.349366][T16212] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1221.638215][T16239] mmap: syz.7.2519 (16239) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1223.303276][T16228] EXT4-fs (loop6): 1 truncate cleaned up [ 1223.764276][T16228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.057816][T14553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.405041][T16263] binder: 16251:16263 ioctl 4018620d 0 returned -22 [ 1227.273665][T16280] loop5: detected capacity change from 0 to 512 [ 1227.302525][T16280] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1227.349114][T16280] EXT4-fs (loop5): 1 truncate cleaned up [ 1227.386040][T16280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.627137][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.901205][T16294] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1229.671107][T16303] loop5: detected capacity change from 0 to 256 [ 1229.679225][T16303] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1229.690063][T16303] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1229.895531][T16303] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1230.054615][T16306] loop4: detected capacity change from 0 to 512 [ 1230.118977][T16307] overlayfs: failed to clone upperpath [ 1230.128350][T16307] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1230.143531][T16306] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1230.221913][T16306] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1230.254545][T16306] EXT4-fs error (device loop4): ext4_ext_check_inode:530: inode #3: comm syz.4.2540: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 1230.324685][T16310] loop5: detected capacity change from 0 to 736 [ 1230.351213][T16306] EXT4-fs error (device loop4): ext4_quota_enable:7147: comm syz.4.2540: Bad quota inode: 3, type: 0 [ 1230.371487][T16306] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1230.420228][T16306] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1230.468528][T16306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1230.660999][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.761549][T16290] loop6: detected capacity change from 0 to 40427 [ 1231.344610][T16333] binder: 16327:16333 ioctl 4018620d 0 returned -22 [ 1232.379782][T16340] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1233.518347][T16347] loop4: detected capacity change from 0 to 1024 [ 1233.563736][T16347] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1233.640728][T16347] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1233.685758][T16347] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1233.752941][T16347] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1233.791702][T16347] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1233.882152][T16347] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2557: Failed to acquire dquot type 0 [ 1234.091739][T16347] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1234.217469][T10643] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1234.258253][T16347] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1234.381447][T16347] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2557: Failed to acquire dquot type 0 [ 1234.446045][T16347] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.2557: Freeing blocks not in datazone - block = 0, count = 4096 [ 1234.517024][T16347] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1234.546548][T16347] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1234.585904][T16347] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2557: Failed to acquire dquot type 0 [ 1234.607200][T16347] EXT4-fs (loop4): 1 orphan inode deleted [ 1234.618348][T16347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1235.110348][T16365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2557: bg 0: block 10: padding at end of block bitmap is not set [ 1235.680553][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.172990][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2564'. [ 1237.630036][T16381] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1245.772410][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2574'. [ 1247.501262][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 1248.051956][T16429] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1248.180866][T16433] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2579'. [ 1249.467599][T16452] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1249.910333][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2586'. [ 1251.881864][T16472] loop4: detected capacity change from 0 to 1024 [ 1251.889410][T16472] EXT4-fs: Ignoring removed bh option [ 1251.922171][T16472] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1252.108342][T16476] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1252.461232][T16479] loop4: detected capacity change from 0 to 256 [ 1252.552075][T16479] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1252.621146][T16479] syz.4.2592: attempt to access beyond end of device [ 1252.621146][T16479] loop4: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 1252.667703][T16479] syz.4.2592: attempt to access beyond end of device [ 1252.667703][T16479] loop4: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 1252.735804][ T28] audit: type=1800 audit(1232.584:251): pid=16479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2592" name="file1" dev="loop4" ino=1048875 res=0 errno=0 [ 1252.770465][T16479] syz.4.2592: attempt to access beyond end of device [ 1252.770465][T16479] loop4: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 1253.683923][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2595'. [ 1253.850749][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2598'. [ 1253.955813][T16501] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1255.092651][T16497] bond0: (slave bond_slave_0): Releasing backup interface [ 1258.060321][T16526] loop6: detected capacity change from 0 to 512 [ 1258.177132][T16526] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1258.282085][T16526] EXT4-fs (loop6): 1 truncate cleaned up [ 1258.332947][T16526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1258.419230][T16526] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.2604: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1258.484175][T16536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2608'. [ 1258.539709][T16526] EXT4-fs (loop6): Remounting filesystem read-only [ 1258.548531][T16526] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #2: comm syz.6.2604: Deleting old file: nlink 5, error=-117 [ 1258.708120][T14553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.776565][T16541] loop5: detected capacity change from 0 to 256 [ 1260.076989][T16551] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2610'. [ 1260.333821][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1260.343738][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1260.802114][T16555] loop6: detected capacity change from 0 to 1024 [ 1261.711452][ T28] audit: type=1800 audit(1240.852:252): pid=16551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2610" name="file1" dev="loop5" ino=1048877 res=0 errno=0 [ 1261.761220][T16555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1264.532339][T14553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.087386][T16571] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2616'. [ 1265.156555][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 1265.715422][T16574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2619'. [ 1266.624537][T16577] loop4: detected capacity change from 0 to 4096 [ 1266.632330][T16577] EXT4-fs: inline encryption not supported [ 1266.725815][T16577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1266.830927][T16577] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800c018, mo2=0002] [ 1266.844298][T16577] System zones: 0-5 [ 1266.867795][T16577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1268.220298][T16597] overlayfs: failed to clone upperpath [ 1268.232543][T16597] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1268.266114][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.631166][T16603] loop5: detected capacity change from 0 to 128 [ 1269.498242][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2629'. [ 1269.546865][T16590] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2623'. [ 1269.760885][ T1106] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1269.826297][T16618] loop4: detected capacity change from 0 to 16 [ 1269.865725][T16618] erofs: (device loop4): mounted with root inode @ nid 36. [ 1269.947021][T16618] syz.4.2631: attempt to access beyond end of device [ 1269.947021][T16618] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1270.003220][T16618] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 1270.043563][ T28] audit: type=1800 audit(1248.820:253): pid=16618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2631" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1270.711233][T16630] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1272.964749][T16640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2639'. [ 1273.089596][T16642] loop6: detected capacity change from 0 to 512 [ 1273.123037][T16642] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1273.212960][T16642] EXT4-fs (loop6): 1 truncate cleaned up [ 1273.228258][T16642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1273.297562][T16642] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.2640: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1273.432865][T16642] EXT4-fs (loop6): Remounting filesystem read-only [ 1273.440521][T16642] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #2: comm syz.6.2640: Deleting old file: nlink 5, error=-117 [ 1273.554748][T14553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.797629][T15271] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 1275.337096][T16670] loop5: detected capacity change from 0 to 512 [ 1275.377417][T16670] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1275.538404][T16670] EXT4-fs (loop5): 1 truncate cleaned up [ 1275.547323][T16670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.636159][T15271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1275.648457][T15271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1275.660261][T15271] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 1275.674030][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.678913][T15271] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1275.693514][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2651'. [ 1275.736761][T15271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.796510][T15271] usb 5-1: config 0 descriptor?? [ 1275.813813][T16654] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1276.638122][T15271] holtek_mouse 0003:04D9:A070.0005: ignoring exceeding usage max [ 1276.852544][T15271] holtek_mouse 0003:04D9:A070.0005: unknown main item tag 0x0 [ 1276.920630][T15271] holtek_mouse 0003:04D9:A070.0005: unknown main item tag 0x0 [ 1276.945416][T15271] holtek_mouse 0003:04D9:A070.0005: unknown main item tag 0x0 [ 1276.976722][T15271] holtek_mouse 0003:04D9:A070.0005: unknown main item tag 0xe [ 1277.027933][T15271] holtek_mouse 0003:04D9:A070.0005: item fetching failed at offset 38/40 [ 1277.068435][T15271] holtek_mouse 0003:04D9:A070.0005: hid parse failed: -22 [ 1277.143248][T15271] holtek_mouse: probe of 0003:04D9:A070.0005 failed with error -22 [ 1277.208910][T15271] usb 5-1: USB disconnect, device number 14 [ 1277.688362][T16694] loop5: detected capacity change from 0 to 512 [ 1277.706853][T16694] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1277.883100][T16694] EXT4-fs (loop5): 1 truncate cleaned up [ 1277.936645][T16694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.784753][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.093520][T16703] loop4: detected capacity change from 0 to 4096 [ 1279.118296][T16703] EXT4-fs: Ignoring removed mblk_io_submit option [ 1279.166675][T16703] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1279.187443][T16703] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1279.223420][T16703] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 1279.234751][T16703] System zones: 0-5 [ 1279.247097][T16703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.349540][T16708] loop6: detected capacity change from 0 to 512 [ 1279.431072][T16708] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1279.492085][T16708] EXT4-fs (loop6): 1 truncate cleaned up [ 1279.517844][T16708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.613735][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2661'. [ 1279.794107][T16714] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1280.668104][T14553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.360431][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.401875][T16729] loop6: detected capacity change from 0 to 512 [ 1283.467185][T16729] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1283.575921][T16729] EXT4-fs (loop6): 1 truncate cleaned up [ 1283.588116][T16729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1283.676106][T16729] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.2666: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1283.990649][T16729] EXT4-fs (loop6): Remounting filesystem read-only [ 1284.161049][T16729] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #2: comm syz.6.2666: Deleting old file: nlink 5, error=-117 [ 1284.468407][T14553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.640752][T16744] xt_hashlimit: size too large, truncated to 1048576 [ 1284.675947][T16746] loop5: detected capacity change from 0 to 512 [ 1284.708535][T16746] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1284.780841][T16749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2671'. [ 1284.788258][T16746] EXT4-fs (loop5): 1 truncate cleaned up [ 1284.818198][T16746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1285.037865][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.405359][T16762] loop5: detected capacity change from 0 to 512 [ 1285.596873][T16762] EXT4-fs: Ignoring removed bh option [ 1285.747642][T16762] ext4: Unknown parameter 'smackfstransmute' [ 1287.349436][T11961] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1287.563141][T11961] usb 5-1: Using ep0 maxpacket: 16 [ 1287.580593][T11961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.605994][T11961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1287.632907][T11961] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1287.645729][T11961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.664916][T11961] usb 5-1: Product: syz [ 1287.669157][T11961] usb 5-1: Manufacturer: syz [ 1287.677038][T11961] usb 5-1: SerialNumber: syz [ 1287.717387][T16773] loop5: detected capacity change from 0 to 40427 [ 1287.745081][T16773] F2FS-fs (loop5): build fault injection attr: rate: 174, type: 0x7ffff [ 1287.911271][T11961] usb 5-1: 0:2 : does not exist [ 1287.943812][T11961] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1288.043600][T11961] usb 5-1: USB disconnect, device number 15 [ 1288.193103][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1288.942428][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2679'. [ 1289.606630][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2683'. [ 1289.678920][T15271] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1289.892717][T15271] usb 6-1: Using ep0 maxpacket: 16 [ 1289.913033][T15271] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1289.967705][T15271] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1289.996743][T15271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.007225][T15271] usb 6-1: Product: syz [ 1290.017478][T15271] usb 6-1: Manufacturer: syz [ 1290.027948][T15271] usb 6-1: SerialNumber: syz [ 1291.351657][T16807] batadv_slave_1: entered promiscuous mode [ 1292.081305][T16802] batadv_slave_1: left promiscuous mode [ 1292.315494][T16811] loop6: detected capacity change from 0 to 256 [ 1292.391523][T16811] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1292.511155][T16811] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1292.609234][T16811] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1293.943392][T16806] loop4: detected capacity change from 0 to 40427 [ 1294.004577][T16806] F2FS-fs (loop4): invalid crc value [ 1294.099969][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2691'. [ 1294.341889][T16806] F2FS-fs (loop4): Start checkpoint disabled! [ 1294.435611][T16806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1294.639647][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2692'. [ 1295.359238][T16834] overlayfs: failed to clone lowerpath [ 1295.379319][T11961] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1295.638481][T11961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.767807][T11961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.923118][T11961] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1295.988309][T11961] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1296.035325][T11961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.098125][T11961] usb 7-1: config 0 descriptor?? [ 1296.190939][T16836] loop4: detected capacity change from 0 to 512 [ 1296.224536][T16836] EXT4-fs: Ignoring removed bh option [ 1296.254247][T16836] ext4: Unknown parameter 'smackfstransmute' [ 1298.312947][T11961] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x4 [ 1298.381380][T11961] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1298.510369][T11961] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1298.655888][T15271] usb 6-1: failed waiting for Axe-Fx III to boot: -32 [ 1298.662764][T15271] snd-usb-audio: probe of 6-1:1.0 failed with error -32 [ 1298.698891][T11961] usb 7-1: USB disconnect, device number 5 [ 1299.477287][T16853] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1300.281922][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2700'. [ 1300.591828][T16855] bond0: (slave bond_slave_0): Releasing backup interface [ 1300.931713][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2703'. [ 1301.315038][T16869] overlayfs: failed to clone lowerpath [ 1303.806875][T16884] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1304.642348][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1304.652872][T15638] usb 6-1: USB disconnect, device number 19 [ 1305.100927][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2713'. [ 1305.826147][T16900] 9pnet: p9_errstr2errno: server reported unknown error  [ 1307.028274][T16912] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1307.797181][T16916] loop4: detected capacity change from 0 to 512 [ 1308.582402][T16917] loop5: detected capacity change from 0 to 736 [ 1308.589349][T16916] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1308.877586][T16916] EXT4-fs (loop4): 1 truncate cleaned up [ 1309.058998][T16916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1309.677238][ T8586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.853802][T16927] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1311.049277][T16935] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1313.878433][T16955] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1315.756179][T16954] loop6: detected capacity change from 0 to 8192 [ 1315.895921][T16965] loop5: detected capacity change from 0 to 256 [ 1315.922227][T16965] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1315.933226][T16965] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1316.011737][T16965] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1318.255507][T16974] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2733'. [ 1318.531107][T16982] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000040xffffffffffffffff [ 1318.910975][T16988] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1321.025785][T16992] overlayfs: failed to clone lowerpath [ 1321.842468][T16995] loop5: detected capacity change from 0 to 128 [ 1321.957613][T16995] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1322.009376][T16995] FAT-fs (loop5): Filesystem has been set read-only [ 1322.973060][T17006] loop4: detected capacity change from 0 to 256 [ 1323.035276][T17006] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1323.046152][T17006] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1323.107033][T17006] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1323.875493][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2747'. [ 1324.449012][T17024] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1325.852111][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1325.858474][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1326.320076][T17025] qrtr: Invalid version 0 [ 1327.708803][T17036] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1329.133556][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2757'. [ 1329.402124][T17034] loop5: detected capacity change from 0 to 40427 [ 1329.463317][T17034] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1329.470601][T17034] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1329.560690][T17034] F2FS-fs (loop5): Image doesn't support compression [ 1329.613431][T17034] F2FS-fs (loop5): Image doesn't support compression [ 1329.660068][T17034] F2FS-fs (loop5): invalid crc value [ 1329.882125][T17034] F2FS-fs (loop5): Start checkpoint disabled! [ 1329.935118][T17034] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1329.942233][T17034] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1330.186258][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1330.610150][T17063] loop6: detected capacity change from 0 to 128 [ 1330.647496][T17063] FAT-fs (loop6): FAT read failed (blocknr 1312) [ 1330.657926][T10643] kworker/u4:10: attempt to access beyond end of device [ 1330.657926][T10643] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1330.664472][T17056] bond0: (slave bond_slave_0): Releasing backup interface [ 1330.683130][T10643] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1330.690633][T10643] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1330.726725][ T5788] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1331.107091][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 1332.859682][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2772'. [ 1333.247940][T17088] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1335.208338][T17096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2776'. [ 1337.179017][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2787'. [ 1337.468311][T17133] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1339.358064][ T1106] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1339.498855][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2792'. [ 1340.164243][T17160] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2797'. [ 1340.231928][T17160] xt_hashlimit: size too large, truncated to 1048576 [ 1341.215811][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2800'. [ 1341.729891][T17176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1341.858054][T17178] overlayfs: failed to clone lowerpath [ 1344.471351][T17195] loop6: detected capacity change from 0 to 4096 [ 1344.503949][T17199] bridge0: port 1(macvtap0) entered blocking state [ 1344.527658][T17199] bridge0: port 1(macvtap0) entered disabled state [ 1344.550229][T17199] macvtap0: entered allmulticast mode [ 1344.571955][T17199] veth0_macvtap: entered allmulticast mode [ 1344.602887][T17195] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1344.617343][T17199] macvtap0: left allmulticast mode [ 1344.630990][T17195] ntfs3: loop6: Failed to initialize $Extend/$ObjId. [ 1344.648663][T17199] veth0_macvtap: left allmulticast mode [ 1344.654519][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2812'. [ 1344.682484][T17195] x_tables: duplicate underflow at hook 1 [ 1345.718611][T17217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1347.303469][T17223] overlayfs: failed to clone upperpath [ 1347.312004][T17223] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1347.691065][T17230] loop6: detected capacity change from 0 to 512 [ 1347.727320][T17230] EXT4-fs: Ignoring removed bh option [ 1347.733064][T17230] ext4: Unknown parameter 'smackfstransmute' [ 1349.384443][ T5848] ------------[ cut here ]------------ [ 1349.390492][ T5848] WARNING: CPU: 0 PID: 5848 at net/mac80211/ibss.c:501 ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 1349.400945][ T5848] Modules linked in: [ 1349.404962][ T5848] CPU: 0 PID: 5848 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1349.412570][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1349.422788][ T5848] Workqueue: events_unbound cfg80211_wiphy_work [ 1349.429267][ T5848] RIP: 0010:ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 1349.436234][ T5848] Code: f7 c6 05 67 3b 7a 04 01 48 c7 c7 00 18 df 8b be fe 01 00 00 48 c7 c2 a0 18 df 8b e8 3d 1e 6d f7 e9 5f fe ff ff e8 f3 64 8b f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 e2 64 8b f7 0f 0b e9 b2 fa [ 1349.457600][ T5848] RSP: 0018:ffffc90004a8f2e0 EFLAGS: 00010283 [ 1349.464172][ T5848] RAX: ffffffff89fbc69d RBX: ffff8880590c8700 RCX: 0000000000100000 [ 1349.472306][ T5848] RDX: ffffc90016ee9000 RSI: 00000000000010fc RDI: 00000000000010fd [ 1349.480434][ T5848] RBP: 1ffff1100f9a6ac3 R08: ffffffff911cd5c7 R09: 1ffffffff2239ab8 [ 1349.488479][ T5848] R10: dffffc0000000000 R11: fffffbfff2239ab9 R12: ffffc90004a8f4c0 [ 1349.496555][ T5848] R13: ffff88807cd35618 R14: ffff88807cd35b08 R15: ffff88807cd34d00 [ 1349.504975][ T5848] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1349.514042][ T5848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1349.520823][ T5848] CR2: 000020000005f030 CR3: 0000000066375000 CR4: 00000000003506f0 [ 1349.528867][ T5848] Call Trace: [ 1349.532574][ T5848] [ 1349.535581][ T5848] ? ieee80211_recalc_dtim+0x240/0x240 [ 1349.541534][ T5848] ieee80211_set_csa_beacon+0x77e/0xa10 [ 1349.547382][ T5848] ieee80211_channel_switch+0x7e9/0xe70 [ 1349.553184][ C1] Unknown status report in ack skb [ 1349.559195][ T5848] ? cfg80211_chandef_valid+0xd0e/0x1010 [ 1349.565254][ T5848] ? ieee80211_csa_finalize+0xf20/0xf20 [ 1349.570892][ T5848] ? rcu_is_watching+0x15/0xb0 [ 1349.575798][ T5848] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1349.581794][ T5848] ieee80211_ibss_process_chanswitch+0x9d6/0xd70 [ 1349.588270][ T5848] ? trace_drv_return_int+0x1c0/0x1c0 [ 1349.593721][ T5848] ? cfg80211_find_elem_match+0x1bc/0x1f0 [ 1349.599711][ T5848] ? mutex_lock_nested+0x20/0x20 [ 1349.604751][ T5848] ieee80211_ibss_rx_queued_mgmt+0x1045/0x2c80 [ 1349.611110][ T5848] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1349.616957][ T5848] ? mark_lock+0x94/0x320 [ 1349.621361][ T5848] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1349.627445][ T5848] ? lock_chain_count+0x20/0x20 [ 1349.632445][ T5848] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1349.638516][ T5848] ? kcov_remote_start+0x4cb/0x7e0 [ 1349.643727][ T5848] ? lockdep_hardirqs_on+0x98/0x150 [ 1349.649093][ T5848] ? kcov_remote_start+0x8f/0x7e0 [ 1349.654199][ T5848] ieee80211_iface_work+0x717/0xc70 [ 1349.659507][ T5848] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.665907][ T5848] cfg80211_wiphy_work+0x225/0x260 [ 1349.671389][ T5848] ? process_scheduled_works+0x96f/0x15d0 [ 1349.677194][ T5848] process_scheduled_works+0xa5d/0x15d0 [ 1349.682942][ T5848] ? worker_attach_to_pool+0x380/0x380 [ 1349.688493][ T5848] ? assign_work+0x3d2/0x5d0 [ 1349.693281][ T5848] worker_thread+0xa55/0xfc0 [ 1349.697984][ T5848] kthread+0x2fa/0x390 [ 1349.702131][ T5848] ? pr_cont_work+0x560/0x560 [ 1349.706981][ T5848] ? kthread_blkcg+0xd0/0xd0 [ 1349.711655][ T5848] ret_from_fork+0x48/0x80 [ 1349.716204][ T5848] ? kthread_blkcg+0xd0/0xd0 [ 1349.720870][ T5848] ret_from_fork_asm+0x11/0x20 [ 1349.725813][ T5848] [ 1349.728887][ T5848] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1349.736215][ T5848] CPU: 0 PID: 5848 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1349.743857][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1349.753972][ T5848] Workqueue: events_unbound cfg80211_wiphy_work [ 1349.760295][ T5848] Call Trace: [ 1349.763616][ T5848] [ 1349.766597][ T5848] dump_stack_lvl+0x18c/0x250 [ 1349.771342][ T5848] ? show_regs_print_info+0x20/0x20 [ 1349.776602][ T5848] ? load_image+0x420/0x420 [ 1349.781204][ T5848] panic+0x2dc/0x730 [ 1349.785641][ T5848] ? bpf_jit_dump+0xd0/0xd0 [ 1349.790218][ T5848] ? ret_from_fork_asm+0x11/0x20 [ 1349.795239][ T5848] __warn+0x2e0/0x470 [ 1349.799271][ T5848] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 1349.805151][ T5848] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 1349.811001][ T5848] report_bug+0x2be/0x4f0 [ 1349.815376][ T5848] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 1349.821238][ T5848] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 1349.827079][ T5848] ? ieee80211_ibss_csa_beacon+0x5bf/0x6a0 [ 1349.832917][ T5848] handle_bug+0xcf/0x120 [ 1349.837190][ T5848] exc_invalid_op+0x1a/0x50 [ 1349.841731][ T5848] asm_exc_invalid_op+0x1a/0x20 [ 1349.846665][ T5848] RIP: 0010:ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 1349.853118][ T5848] Code: f7 c6 05 67 3b 7a 04 01 48 c7 c7 00 18 df 8b be fe 01 00 00 48 c7 c2 a0 18 df 8b e8 3d 1e 6d f7 e9 5f fe ff ff e8 f3 64 8b f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 e2 64 8b f7 0f 0b e9 b2 fa [ 1349.872841][ T5848] RSP: 0018:ffffc90004a8f2e0 EFLAGS: 00010283 [ 1349.878937][ T5848] RAX: ffffffff89fbc69d RBX: ffff8880590c8700 RCX: 0000000000100000 [ 1349.886935][ T5848] RDX: ffffc90016ee9000 RSI: 00000000000010fc RDI: 00000000000010fd [ 1349.894934][ T5848] RBP: 1ffff1100f9a6ac3 R08: ffffffff911cd5c7 R09: 1ffffffff2239ab8 [ 1349.902942][ T5848] R10: dffffc0000000000 R11: fffffbfff2239ab9 R12: ffffc90004a8f4c0 [ 1349.910971][ T5848] R13: ffff88807cd35618 R14: ffff88807cd35b08 R15: ffff88807cd34d00 [ 1349.918976][ T5848] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 1349.924826][ T5848] ? ieee80211_recalc_dtim+0x240/0x240 [ 1349.930326][ T5848] ieee80211_set_csa_beacon+0x77e/0xa10 [ 1349.935905][ T5848] ieee80211_channel_switch+0x7e9/0xe70 [ 1349.941487][ T5848] ? cfg80211_chandef_valid+0xd0e/0x1010 [ 1349.947152][ T5848] ? ieee80211_csa_finalize+0xf20/0xf20 [ 1349.952736][ T5848] ? rcu_is_watching+0x15/0xb0 [ 1349.957534][ T5848] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1349.963391][ T5848] ieee80211_ibss_process_chanswitch+0x9d6/0xd70 [ 1349.969756][ T5848] ? trace_drv_return_int+0x1c0/0x1c0 [ 1349.975159][ T5848] ? cfg80211_find_elem_match+0x1bc/0x1f0 [ 1349.980940][ T5848] ? mutex_lock_nested+0x20/0x20 [ 1349.985923][ T5848] ieee80211_ibss_rx_queued_mgmt+0x1045/0x2c80 [ 1349.992130][ T5848] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1349.997894][ T5848] ? mark_lock+0x94/0x320 [ 1350.002255][ T5848] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1350.008264][ T5848] ? lock_chain_count+0x20/0x20 [ 1350.013147][ T5848] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1350.019079][ T5848] ? kcov_remote_start+0x4cb/0x7e0 [ 1350.024217][ T5848] ? lockdep_hardirqs_on+0x98/0x150 [ 1350.029444][ T5848] ? kcov_remote_start+0x8f/0x7e0 [ 1350.034498][ T5848] ieee80211_iface_work+0x717/0xc70 [ 1350.039736][ T5848] ? _raw_spin_unlock_irq+0x23/0x50 [ 1350.044969][ T5848] cfg80211_wiphy_work+0x225/0x260 [ 1350.050113][ T5848] ? process_scheduled_works+0x96f/0x15d0 [ 1350.055864][ T5848] process_scheduled_works+0xa5d/0x15d0 [ 1350.061465][ T5848] ? worker_attach_to_pool+0x380/0x380 [ 1350.066965][ T5848] ? assign_work+0x3d2/0x5d0 [ 1350.071591][ T5848] worker_thread+0xa55/0xfc0 [ 1350.076244][ T5848] kthread+0x2fa/0x390 [ 1350.080338][ T5848] ? pr_cont_work+0x560/0x560 [ 1350.085046][ T5848] ? kthread_blkcg+0xd0/0xd0 [ 1350.089667][ T5848] ret_from_fork+0x48/0x80 [ 1350.094107][ T5848] ? kthread_blkcg+0xd0/0xd0 [ 1350.098722][ T5848] ret_from_fork_asm+0x11/0x20 [ 1350.103537][ T5848] [ 1350.106729][ T5848] Kernel Offset: disabled [ 1350.111188][ T5848] Rebooting in 86400 seconds..