last executing test programs: 13.664425577s ago: executing program 5 (id=622): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe8b80, 0xa3) 13.424686695s ago: executing program 1 (id=623): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000200)=ANY=[], 0x1, 0xa8, &(0x7f0000000980)="$eJzs0b9JBEEYBfC3f9CNLMUeTM2tYENDI0XQyDLEBmzFEraHTU3mWGbgLjy44Ljj94OZ7zG8YOD7+/+dcpeUj6SUUm6S/KTml9e356fH7R6S5DtjblPV2YcL17czbTsf2+NDvj4POsv6Pi9d5mUtzZk+CwAAnKTPfUvdEe2hjnEfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK7dLgAA//+pPCHm") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x20a, &(0x7f0000000640)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) fadvise64(r1, 0x8, 0xff39, 0x3) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='dirsync,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c00928922a9f83f5e7e88a5f6fa59076a77d304e07401d6c32c67cce42ab06264ca546778722e237c0f5cb7a4f0303c72c6d7f01d5b10d63e921722273d874e49d0e50617d16b82905a61ca62d8d6c30dfcd1cd62895465f0a4eb3037d1f84f4c20af1efe3285da57c04e9257892911a4231e4767f77088cb20a7e25daaa2858e6568761ffd4f79ad73f2e205c60d9f00d8114145807a317654d97df6f19d45b73043457905"], 0x1, 0x235, &(0x7f0000000300)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_open(0x0, 0x42, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4802) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000480)=""/165, 0xa5}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)="fe389c041dd487a3cc00c15cdc537470517157db4d4087965a6be0cea56467eb65b8ef178210bec2128ff9d5131f8a9880ad181a0446352eab77395308af7d200c11abaf83ff01e8554f35980601bc83627daf68a879df255c081692bb3c9d320f0000bd0a94cb25ea0c3f3b5cf43d4c8ce42a0700000000000000faee390d715d063ca314fb7e18ca471989265e92fc52c49d1bd90a6e38a94749a31a4da47efefc9a1624d17859bdc2a31717", 0xad}], 0x1, 0x5412, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000002c0)='./file1\x00', 0x0) 13.407032341s ago: executing program 5 (id=624): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x58, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "02d0e86cbe4d68f75ce39f0dab"}, @NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000ba0061114f00000000008510000002000000850000000000000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x0) r7 = socket$inet(0x2, 0x5, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10000}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r7, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 13.216791494s ago: executing program 0 (id=625): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x40024e}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x805, 0x80000d05, 0x2e1f, 0x7fffffff, 0x40000007, 0x0, 0x2000000000000000, 0xd402, 0xaa4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) getresuid(&(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000480)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x2418241, 0x0, 0xffff, 0x2, 0x9, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000083c0)="81f40dd9e622b21a8fed743e236ed65adadbfc29718f57c407489a65c9cf6b6d01ce24fec7c5baf418f83d8d749987569284445dbc22754b7e9f710945dd241b88c07121238feb25d1bf9e270494c8664c9df5b713c33514ecbb5863aae8d2e4bb4e30786c993fa59d71a83650a7cc46bccd4774220ba95ce4836eb2482fd1c9d040d8e8792278a60c365fdbb8857be78fc6364e7d5e7cde1aa4f1ca9ddc28679717755acbefd060c5eece6af76c80ac4f423c5a1e0bcf420cdd3dbb3ca59335c0e1790a9553bc2f73bb5d597b9ace5a7b6ca280c2fb9d18aafdb70149d2388bd5808bb05eb4f8bfeb86c2dceb2200311ad22424ae5c838d7a7375ad14c14d64cd1b73580b998d95ed2100411614e884de5d9801050fdd41a350763458c4c81e4e041e2f8bfcc09b9fe78e65bcbf3b6e84676c37abebbb6914e6914dede9f5d11e2597d3a0662c38eac7b3a139bfa88822f7bb2b4740304b1b4ba75478768e6c1ac901ff48dd4dce6af8a723c700ad5c53f11fe378146693f4e41ee962dc50495f29d6493de46531541c943e8084ceaba08b52fe87949a7d17826e4e7325987c862432159f320db4a9e9c257878afad80e2eee81b21b7b4963f2fdbd369f0df2afec92f10deba4747126a43d4861cdde10e7aaa15714758dec970da7d91569c63f5b7b7c50970c5c02922071494a14bd533bd43b71c7bbeb5536cefc9003c9e56ea7fa62ce9472d04dc07c736388f0565561551c6c4f5cff369ec8308f3402906a3de6a974de4067043447a40be8cc64c7a2fa2fbca617c933688897b37fb8492f58bead9f17b3c27a58144cefd43210cbaef7f18603a0051bbef079e9e040297d2fd0a24df95bbf399089cac24fd1694816f2738e9fa15416055e70f2336daf2a78f0e6a832087e8b32719383e932e3cea486936bb22fe3d1c525d91ca59f566b12ad768d72ba6b3db5a972e33b8ce51a7bdb46d8d447fa70024d6d3f5a6eb6273ea65b1af1c118bb0b284e6502e5cabff760b4fdb64789f7dfd9ec6c1a2a9d1ee8d023c3cfbb81c34b73c52d54fdf88d76a9f9dbcc762701f35cbe4e72b2acd5c995a02a412780d924a0c66911b01928ab02186d9dd67fad8b7cb818f7beb038cf6ceb6f297ecfba93f843ca5d8e7dfc0dbea9a511f6ea64bb3691764373a1e5535259e3b566034ff64473b9b3b0d31b547d6c0922a52d35f006290d3c38ff2b3f06028b14998d261bff078dd2641e871630d5b12b3bfe0fb0c4e28e8b6d1f6e66467e6f4f3b413ca56a1a2f2da2f11696af9bd2649c1d651d7f5f7c78bb5009667727f997ea19aa85665f99c52ec14e273df4b6bdbed5b6e40922e972a8a6ae1c7a232326a2b2f21726156dedb6c2a746211e708184b5fcdaf58a2ab64c45f396409e9862e89ba58b1e59713bc6cb2971e757b85d4cd203319ae6ebc5d1831dbf8b492ce8812010c34ae348494bc0dac44a47bca58b8b72d7e1d76577035f05ba9c0f04121147a652c9c51ae6d5ce98e270c3ffe4b66b67c73bd1593323ced878890e40b16ef87c852d80db8b01c7ddba8fc4209ea0bc391ef3d57783991f7b15b64b017cf2f3eeb2636ab1fd938e61815b7351e713cf2cef4b8e3c8f62ce5c6ec0a4b4f29240335754d0cb5bf035c16895032587186ea9c43d1e99e877d14ad5444fb386271676796a6f33af8987ff0058fe2b999c06d89bfe4f3fd9eeacf11fca8bee117df76540aecc71badcf0bda18f09c3c57bb9b750881848db9ce13a972dca51790010e86e6d78745d991aea7a29ab50c845b960cb653aff119232ddd6e774c972c88988ada47d2177aaecfef806641d73e3f1225d308a3eb7ff72fe801f65387dbe46979a2547da4b41c357666e99c64c9b08267f3f35df4484f3b768063393bb657ab6da8d6826562cb044827265dbb7d86fecd9437cf28d37d790725ab906471e7ae0dae55ce6279dc1ca7d2e23e9d7fba07f6b6b7c6170aecb5dce6dcb9cd0b7cd63243216ebca0d5fdb1a1765b6aadcf6fb6ae8cb133ffdd58814c179b88b8a6864ee38f6d24abc9225c7424e7259b45d077ca278ac6caeb5c70502e312c427c322d7a38c22a3f876c221f57bb62a108ca72a233d58ded94a570320ff58fe06b85e226bb746eacdb378ea33002fee96652e67ceeaf12faea38062a223433ae2f03fc72afeff2dd3e0591acb9d3288477f6e92cf8defc91e5908791c298bc025d50949729e77f479a6b9209f90e7bd33bb218c2450fe2691355a970407fcaee7419444d8b170a60fae659fbfbe90df8d69ac50c0782ef8d94970d0cb9e4e5cd7e93336bd8cc53e4d119bdbb9165f91d39152c2b14bd4ea87a27c668c3236fa1ea1f348308563363e46aecd916caf533b1e959ef68b490f99e5d76529581624a3597b29eac3561507da8f17d9e1175947c48758c3b07a6b6937a8db1243ca654ca2106ae654763ffb1036237854ca269353b26e66df1c857155e582c5a96d496b43e4fcfaee9848139bb2ed064586716db07c9c4004a0bdbc1789bc39e68657050ddf98d701997ab7ada3d861cdbcdf41ba8c3d1669d8eed9c4ff23a6baaeaf7fadc01c5e4148cbbadbfb9782dfee0679dd269162bb7914d6b33ee6ebf109e7ce1b298e0598ad98417baf844354cf4268480df97fd8c302d8ed844c1389305969151750cee2f0d9e4d8427635e812314dfa4763c1fb43c4b04c92bb41f2931dd86a2b77098b9715adde09ea00537ed1034420327d10c9e72af6aeb401242715cdf2f922061ce275c0dd6849ca040fef938f33bfa5dd518eec984ce9d1df2936d3289e6cb4aad8172d33b4d6fffb1ac605cb0d7be747c4240b58dea3ee152582f3f777e58452a929e44d6ffce87b544a3f67adccc70e2d951d9cb07466bfd110d9d29eb592124f5c50e1decb0aab3f3ab50c8a8110836e482f7eb3a6bc7391e4a363922fca390dd1659ce6f49f5de5be3c27d7e359b720211512df1b96dbdef5bed8ff9149a8a646c84e9d71e71be0a04dfc83f778f6c85b3bc2dd51a7868fb232a70f37f87e0596e3310850ea461178d9d7a8e7ddbdac0e32ed515ea0c0a938075743b90138f0bd6b6a6c324b28b0c6d8f9f64fc808b2284a08760df2fc0166139889f9e3eeb6d9968f956e739104b57f7a43ba9b3514bbbf31ae33e81860e7d9c6c6f04c6a1b9fa0877305ff3071fdc725ea50b888945fbaa99a410935f63967f8133e004b7e036bb92670109e6861a089956d71cd62430fbcb29955ffa0f7a4bb9097901e23346facb489567e1818d5602a62660d7eb894f8bdf10fd5108cddc57770d687c26a5866a12cfb8799253755d1f80ee6be7f264a1fac9e0ca650022024d1d2f2ff33bdc8ffe6601d4c4ba53b744096ea66625d510bd6586d72e5ae2c955af911718008df9b3e1e6466d06cbee526a1d06ddf5be355ae0a99f6912599f40728258967e92d84d43d8fc622152de9a5757b4dc670a951582455107ee10188fce875a0f3a4fa8cb962c23e6aaf209108d2a6f18ec61adca9f8a4ea6ecb96ca119c8b0ef99401a8e31cfa4aaee2202a87eb902fcbeb3342b5f8934d4967f39df4dc4f9e423ec3949a948807fa7e882b914eca32a8fa1a6e279538b336539aab9c8a5343222177067d9e65ee3387d77b3574e1ac0fccbc9685687fb5ec4073cddf0c3e25abec48cfbced2a9b1657eb405eb89aabcec3370a904121098d1caf3b554ab810a3cc95470727f256e6b7b0ececdfff881cd06d3c65a5312e261e44f10752e547b7433c1d168298a827f238aea6dd6859a1febb8657b2b0480934feedaf5fafa1d27c41d8f40bef5832b9fc7d4ebe48479e79c9491baf1c8485fb15be334e1bc116150d1b387304f65d7b65f901f2b1d1dbb5824c333ff2747111bf588a87d73dd4c0ce6ac6f00a1dc346737ea8cf499941e6e65f48a3c532510625d92cc0dc4d9a3558658edda85926435e4366fc8e77e94ab4d1879796ef1a9208820f8004a3c9378f88e2b99aee33b0975447d19f0f0354cfabee96fe4cc8fa4ec7c7a08f804d9740c295b6d97c7c122bc48568a09ee055878ad9f2e363030e6b2940a9379d1788e9a81b2eaa82aa16b21dac23acfb1f5f7f2f9c06c7eafba247487d0a0234f7c984f792e4be4a038649a65715d19edbaf002e2deb922486ec69a9842da0d2b207a0e781de4cd67f5f05f7fc961e2ec71c9bed7601b23f5a53dece4f40bd7c046778afaa38fc682ac06f55551db57d1f6820e474a6e6eaa48a10bff2136331daba51c16b97a6c3e130f7e5f95af4b799b7167d755fe69b425d3a7aa6ce58b0836e6bba9dd86ae8477fefcb4ea70ea2bd4487b08ae4ee273b28cc5a2bdb9c821ce4d66e3349d5009e3b241055b571936ae314398186a308baca7aa9f1d2e098a304fcb2c7e9e0ad2ee825d6b357cf5b6c80daf5ba280323e46fb01fa0d507e2dda3e9211e61f9dee28c3afd780adcdf9831f6113d54e1e0d644c24fa7ff67cf1c9765fccd01f5fb71d21d7dbd5eb71201b45f0a601299aa8b775428b2963a7c8b247fbd1b5787a87c722dc8611fd96e95e9123029a2e8daf22f9a5b42b4a6c1fb5d63a315685898f60b40caae4fc8da4d72a3de55dc6722866eb177a83a656cc15b8537660c4e0ddcdc39b69c5a6d04309641a8731be0aff7e01ea745a8fcc634db900a8964b819553fda8939ef16f72a4cb8876ab95cefe35c3e231a6a6824b8cb60bf248fda4ca2a021ce4cddad77389e300aae25be47115d93ae972df34653394eda298ba3674e2d4823783a6c217f8a6445568d1b32b354c151978fa56a91c4e569d362822a6742b2161b2e4df02d927570b8b4511470ea0f497d7daea61727b9d8cad84315906d980a21460f6a23eb425493cc4dbdf6c09ae41d4cdf04a94176f5c03a8f16bcb63bda9053351ad212ae58b0ffbb8bb7e79b6d7298bdf0f67f912e5ed32592f1a54c477eefafc6207a8dffaadd53533b3e53bdd5b184c0a3d16936c213266aa9cf14098c79d9401cc28ab323f831d5fa4685bee33d2d1f0cd17ec287c0f1600efcd71a3d63d7c4e2cfc9060c3ba4126c330e2ac9f66c1a5fa3fc62c0672186b053b29341cfe7888cd8afd4650a797ed6b26014e1b00e8732895f9ba254e9a07709438d098be48cfe6ab6c43a1027e6c589a8eff1d1ebf090eb45021dc07563b1a32010f9a63262ae1875704dc18abe52349ddef2b7b069d50400a9ba8eb5ef5094fb64ffef1019892b613b5f6ee0fddf0b1689dd01dfb36f209e0a3d73797ca61b974d3ceca84c858437301ec45d73856dd6dbaf983612bebb33ccbaaadd9e17f1e514784f785521ed90cf8240b3fbd6b4f4f446e5becc5d86775a01a0d9c42558bb101c8cc3857403dcc9485cbdb2e1fdf8c79fc7f664659b7fa50aaaa1ad47270fe7ddbdabc2091f01a7656f9ae48fa9571acee425d2224673de6f65d49b1eacfebc7a92d1b98d0281513e2789a8f561ca5acea63ca9e4121015e1b417565b1069fc6f4eb53f1d7331d2b78303e08095b08936055218678e753f29f2297c26a012e2de07c9163c4872b0bb7ab059c0efc73a7b61cbea2e0fd799ff270d2c5e7402eabb9f2fe907050eaecf78d5c74de3429291f2356452d8058bc603d62f2b272e8fc449225f3dd365f49759a62dd0686d2edde1563a116bed0a93a1eec5b63883f10afc8863a4332cec810bbe4d88273b629127f58f7ddbc65ba7c55644696fbe163a5650e2b89fda0a264e5ecf85bf3cd85dfb916dc6ebf99c04d8727a691cd8881ad5e2c87613f42fa4c6355995e39581809bada2429b4d607a8b018c8adcf0d6097eaa454caf451ebcc2b80fda7169d36dfe53758bf739446464913277096b57d3a7e7586b6ec5330e1289129de0ce4d3a9c6ec1109b36b993a9e312dd58afeeed0dca35e83094817bcd0595b034cadcd94b2228b938aa3317dd0160ac7283080962ea57c3dde33da479a6e4dfbf88e39aca27627266a1b103b8184cd091704b1e767f33ce099c409bedea9bb9d4172060b039b34a82d583b50dbc57d1f07866d40f44055286db3acb1d5f41fa531775a9bb655d67a5dce67a36fb0ee2838b3a51a1407fbbdf1626c988c3354f80f89b171a09bf0256aa187ea0cb04eb1c0d79c5054716f1fd1b1760614bf8e73ff8872150e7a084aae0aeda82644d4a7af70dd1f8f1cf8fd36bd0a12e87d8407ed037bbc84b08ccc40a47be9687de67958185603183c87967c182a0221773306fd00b1eca0c4cf3eb13d0ddafbfd13aacc8ac0ae55f78e112439c282e8d73bc35727ed212dfed7b5c0f04e64f692342aef0456faa04b02b3a8ae85aa086f6c276cd51ae450cce6ad3f2c4f1bcd001f448bcf732500944d6a4395834069899e1801ba651718fe7c24348c532c56a103bcbb6f6272ac676fbbd3291fd66667d47982bf4c89ffa72142a20da62d949beb5fc3dd215d8a46d637653ab5f50fd49f224161d2d87069258c06add29a0b8ee5d7e10bde53a794692674b417124ce9c6c584beb5a1b405881de08afb94f2702306b300284a9b38cd4b09662ba98d0ed7485dc8835c6886eaa562e1396f872f147fe940b8d0caa03a8a7ce31951c660c9ea46edf81f29e4ab37203c55a129d809008f8ebe000928260e81bb897130854b4cf2d4848b888a1142e73bd272aba174fac0b7bfc7d582c9dc17accc69f5f4394ac825e43c21f90a7647fee4decd3feff2ecea0f9969e773c300601d67bce6de2c396f693a1121ae00c5dcc01171975f1916f08b41ca6781857c5c393375b1b4506a88f414a527fafa5f0496ffec712efcba03457b2f7bd4ff768c45408bd297d3de0d89d3d3b16d304285763789dceda62703593acbbd59bf40106ca143b71c2759e716d1fedc4c868ea014f2e7c9f8de5bf20fa9e2093df5d19d4cc1890215547e1d9bdea071b31b1971198b6a7b27100c02e2a7546434ec17cf89b592ec271409aac2596cbad5a52c04cd261215129ac1d33e5c9088f48ce8a6427a60a84bf8890193bc7a1172c4097f53afc6053ceacddfe41398718747fff15ecae02fa961fe3c744478624f1a70838634d7ec7d91632e28fc78a98f769e61f116460036dd039ec6b05e292624f01e4b0964c0819ab6fa0dcf31af32c23a985fb8f8bd5aa630f421b940921d4285bab13fd5b9dca364b173946fa7dba398e4beaf5f48a89bc1d4f7a6380629142bc5980240ab27139341328a68211ba0c5c5c5dfc127f4ef609c2a623937d18e4ba33cc3525763c786bc69b3395e981fbfae868b5abc438b8d987c0f51135bd00387bad16d6451e931af6b261576b92855df76296ff9ad7871eedb631089e04b89ea69854478b4182fd7fe79fdd5e15a6943170a0fd8daa7597784f25228a6e507e43b34fa83bf0f08a14c3ef5475c7c3a2518e0aead5d9ab3512c5c9a8326ea393950d5f9f4af92b2a71d3ee4b2eccbfd99e55c95a1c6b47f5b3d42d123e0bfa2e4132aee5f00c66bc19edfe88427a7d0799f7b9ea01d747f3b75964942e22a0e1d0b0b5a6da81b6df0cbf73c0a7e24ef4214b7241ef4a4c948fd959d6a2e23928db38bdf3f4b8575d16e618dabc93974393d44f91ed75082fc8b53ac1621e18d95e7477720310befebdde4c9babd5dda84e6b27506a7de508ac11edb3448e724569e62fc89b8fd9ed303ab8b3612c25c48c846b3f5482fe6bb733ed782b6fbadcc16fff64dafd47bcb2997206a49205bf69bbd4c50a00e0f36b9ed464a6c600a7e360ed408a726995921670b802e887244a5c4370fe83d1ca47ffcb0a85275fd53b0736bc5bd699da60870b0df6f4eb9b2fee3b21118a93d750089e9ca5808c0cabff761b84c9897bdb7dddbd5a0d955f55e83d33a5789c80f7e18e15b58311734295580cb9aeb54634f1e07c09ae21b5cd7fb2b03df9657d23544698b14fea87576fc9391a067c2e245764f2cd0bc959394098c161c5f144c91cc9ab3d0c947bf4292158ab98e5a80bbccf2ded86c79ed4edff4c1d671f001951e86d6fd33089bc4bc6c51aa1c8fc41f30b6b6d7e1cbd305fdbba5157ac286793ba1a44a4e97f45b08f1eb18eb711935eb5ff3337cc173abd817eb3d0060963d52df01f884d388b9fe04b02826ca68e9e34bde5a1c1e810980bb178424cf1558728a576022003d26133898e919ec77da957379c0a845637d207d093e2f486919190a911ae9292348336c763938812bef0e5fdb14b14be7d4cfc04c5f96001ca009f682cab8bd912a49079239502b144e73504dd782663014c7f2de665e3c70cfe9913ebac41b6c32c1ffca96824d750129f7464712888dd21cae6a562fc2f025269a3fdc8390a8ce82588cdc8810b31c7a40c25ba142d73ad142330f28c9d027050fe4f8e67974e8a93daced3462cc08d128f50bec852d52e8db60f673558d69bc9ae4da7a6f8f5ee53d072a9b5c30e806e77addce87d5495417d94b9bd80c7cd1f181d4b112a8bb12f858e71cec4e8af70d9c5fc319ba4b2f04bc8e78a18b77c52794c58e72acf4060a74051307d2b0d3a89d29cc7ac873ea0870c8dfc56fb6b2182a657e645c63737e1cddb9fa6200398343c166efc4d084840c84386f3b193548bc4b1f3f81e6a8c87762f8ef2183ab9a150b4d0d53556158ffdf4604ab010f1bb2b3c4e616b3709db047f3f444e170b8f07d74771a5fe4e31873d4074dfefae44f5f17dd488543c4eaf2eded7ade010c4b092278ff3ca1cca016a4979edc0dc598f372e56c3cbbaced1e538c18ee2ed5aad70433517003bd1d4345069800625c4de3b4620c19e68a8bc8b955aaf3b8d97b91600e0388eafb59663ee7edfd72bab844258dca676edec157962c93d96fb0d9ee4e9e6178bfe4decae71e816d01de0adf586ede76a780bec91e3cc0cc3e7bff76915178aabfab2feed7a9810e6287f2dbb1b0c5c165c5215c49f90b5b16a54ba736e200348b5eab2d4e4037c4df3b7bd8a4ff99c2d534ac334e91592e5513a2c859a03902a1b05cac321e47a40df2fa470b7a33768dfa4209bbcddf307478ec5b093863472079dbef906d0d5dfc11c3e9a697cf4dcc6b2c40f4fff64c4ed60900aaffb20855802470f30a9d84d483c703b6b3a3484433f60041b8d6022c5b9d2b59a2fa343f9a033b5ac45bf28f6d906ef27076236fde539f80ca17c1f7a8a3607c424418c840e0bb9bb98ac19de8a5ff3218dc95e167d7e186f1f4584e351669870cb8abb991ddfa21764398e954a9c067c3771ab65cc2032da3275295f6e9f76485b1c7420887222e9b968d57135669e610b05de7b6c5bb4b089197f5dd55b153870a29e93f10bd344665dd5ca879fcb9efad233cd445c8199ccb2ec27b8b3ee25f4ac8c781b324e4da191e45e9e9213b06a43f1d15c57fa404cf1b5c9b2cb6b1c3ee1d7efeb311df2b848148aeee5acf659bd6b54d5785d9f26d36d13fe33ac97b6843c1d8ef54b030093b950b1128302cd65ad0ccf32d60248e391ef98f04111a1904a134034c14ecc9e52ddf1f620170566ac1efd2072f9fb5ccab7fdb04e60cd06b16785227a6deb912a64707bb4db4c787eda343de9906978bcdd8e1d87831457e52817e8c7915ce022dd738894ef349645896a021863a64727e842bbdf3c9438ac7c3901719c5b389bee3ea9e69609fa841cdd14077c98f4f56c2b4b677e9a99b49312d049339061442ae118b3f2dfe68f8ba96a6e9c82fd59e2696c89b2b685d080baf3ce69b09dd0cdd4ae3adc0d5e259764ac151b596579a35507a82b3b153da3d049d29251321a34f66de77879553e2905afd1ada76ab369446253cdf9a2735606a95d601c74c724d18883a533e4d787e1c3df6095e6e4f37d36ac8793f781b3d79253ba7c88c3c09308a8e448096fee33dcf19e42d4e5e0a3a189a64b786e4adcf62643ceda1ee7f59819ca54aacc632c957279d1b07e8af47a2aaffcd1d08122446d9268b6c1f94eca89c1b8989a25891c0355f27ea5dcaf2822c3927790e5bc20ae5d22ce3d00ef31e3e79ecb3692b6320d13197ab32524456d0ad8967f932797cfa028b1d280cc1e6df448f8b032122a3f6979144596917a887e7c9a7fac6b4b82d2d61092a37f70e8c12361eb9ca0edce00dfd9fc3e6c4af696f8827fad098796cf832fd6ae0af469b3301991aaff84fa5babd090f0900ca6571a18e82f35d8f4370b7c343a080f004e9f2c70b7b288422a13099c80d8c0ae7752bf5cf3b92f1080f27944828591e617ca84c8dd0bd2d2a0ac3251758cfe25e6c620f95b2050cea9e7575ed4c64f97e364b6cc43c23a964d173cee1c1ba22fd04e91c75b587898730c8a00309c787df815aadea0b3f946b576f9a559ea8fdb2a5202abdb5a4a6ad0f4445c96d3d040282a3f968d052f19a9baed853bb03d92b1ed5032bcb4309ff9a443df23a0d921b9825770b3d011273819e58f619d53a1814c2d21c81adabb9b4a9bf2b81e2669bc15c124eaae83ae281afef8d45f5eac7df9d0de259e128a29387ac73be752e100917d9e5dc111032ec4789b02fa7273034ce4ada37a49b88bbdf0fb720844fe863da9a4929aa3757634645f9da791c1b6d36fac2aaa81f1f3c7e4d6702f139cbbd67756c1a0cf4b6ae56b1d998a2dbc212c08289927dd6424d3c66748e373779f3b0549fe0bf1fe75139bc0a2361a1c9085d70cd3ec1f9bb3c1de61bfa59e4862b42618a81e38d92d59f07e7d6649ff10f0965db53207b3c33d39ba386292742433c2f1dfb74be9ada5d92500385c768ba0988973842c72e884d8d47bd3ca08e65bb9b45f5127a971a923ced39dcb881d8b53d893f73da390efdadedd2b2715591ae753abe41e2fad1aef78a1e141e9fb34a5a7e00a5de0d0f657fee70643464b4830629557ab25a3a3eb9fec80555cba971010c6f491b12ce097f967206767bbfcfc17bfcebab331a002878ced91c37b21bd560fdd1c754c86c608de0e9053e518bf0b4d177881d1ccc42243bb26aa943d55245f48369fce99bc1a288ef3e1ec3bbeb3271e223910f464b6f7558acb91b824357fd7ff2909f148d6c8b23668bbbdf58ebf5b2f4aafbc5e5e3a7f53159a21111ad2d82fb8cba79d73030e4d60c994b974698805a860f58faf463788783a442d1d123085f5d10404adeb4fcf40da426ddb4bae1b79892572f5ef1e029a577723140cd7e99ab6fca9536b4b1ac39ec76af38c8c3ef2198a9434c96c0651685cc6c2adf64fef23f277864b72216a143acb33ad0f24069bbe7c93af2598f4339b7bec17c5f7a4c9e6830f40c5a10fdf1107c4e0d81cc9cb126ff897bbc2e9b3e91dc531998956fdcd92baa6b3564dd83d45a804928c458f4a7f9b683dba0d4db5f7e4aa5fa1a2ba4b94ff0a969d273b11dcb3e6714c65634735be149b01f72dd1e8622e71d6adf601f0d7bf3b5311093b5cb6cf224c765d6d51e67d5a74ec3c2a6a2039404d22119392ce8e4d1b0eeb1278d3bba223999e37c437fd31ca6f8dd2bd529c46ec297b275dd893baae28b4408e2b29032efb096cc4a7e4066c60c5b24f41c86b4ace3b6786319a8e66654f7e90cb3344b117f4a77a27bab54a2bb334", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x130, 0x0, 0x0, {0x2d, 0x1ff, 0x0, '\x00', {0x200, 0x3, 0x8000000000000001, 0x8, r9, r10, 0x1000, '\x00', 0x3f3, 0x2, 0xce, 0x3fffffff8000, {0x7, 0x1000}, {0xc97, 0x10000}, {0x0, 0x1}, {0x5, 0x9}, 0x8, 0x7, 0x5, 0x3022}}}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r11, r12, 0x8000, '\x00', 0x1, 0x4, 0x9, 0x6, {0x6, 0x6}, {0x4}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x80000b, 0x4, 0x3}}}}) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@checkpoint_diasble}, {@jqfmt_vfsold}, {@fsync_mode_strict}, {@alloc_mode_def}, {@nouser_xattr}, {@fsync_mode_posix}, {@grpjquota={'grpjquota', 0x3d, '\xac\xce'}}, {@jqfmt_vfsv0}, {@discard_unit_section}], [{@euid_gt={'euid>', r11}}, {@euid_eq={'euid', 0x3d, r11}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x5, 0x1056f, &(0x7f0000010600)="$eJzs3M9rHOUfB/Bnk/Tnt98axIOg4IAKibhLNkmL3tKaIpamBLUHT7rZnSzb7u6E7CZZexK8ePAfKPiXePePET0JIoKg7DxPpPEHWDfs1ub1gul75pmZz3ymzOWZ3WwAzqzF7McfKuFquBRCmA8hXAmhXK+kpbQR48UQwishhLnHlkoa/33gfAjhcgjh6rh4rFlJu97YPH/79qObP33x6M7X341efm12dw3M2ushhN5eXD/qxSzaMe+n8cZhp8ze+mHKuKP3IG0XMY/ynbLCUeP4uEaZa+14fLF3MBjnbrfRHGe7s1uO7/XjBQeH7eM65Qn3G/vldivfKbMzKMpsP4x9jVI+HAxjnVaq92lZPgyHxxnH81Ee72fvQZnN/jCNx7pFKx+N8zBlulxoFt1W2cfOv/5vfurd6fQPRtlhvj/oFP3sWq3+Vq1+vVrfL1r5MF+vNnqt6+vZUrs7Pqw6zBu9jXZRtLt5rVn0lrOldrNZrdezpc18p9PoZ/V6ba22Ur22nNbezN69ey/rtrKlcd7s9A+Gne4g2y32s3jGcrZaW3t7OXu1nn2wtZ1tv3/r1tb2hx9vfnT3xtZ776SD/tRWtrS6srpara9UV+vL7n8SP1cmO58zzvMD8MTM/4FZmOL8f8H8/+l11ue/Z/3+Td+YiAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODMuvftjZfKlcW4/b80/v809HzaroQQ5kIIv/6F+XD+RM35VOfc3xx/7g89fFMJZYXxNS6k5XIIYSMtvzwX9wEAAABPbuGrzz+Ls/X4z+KsG2Ka4kubuSufnFK9Sgjh3OL3p1AlpJdN4YXJu4rGz/dCGE1Y5bi38gXWxcm7ispXbgunVe0fmT8RFx+LSoy5qbYDAABMxcmZwHRnIQAAAEzTl7NugNkoP81M38VPX+C/ECN9IHjpxBYAAADwH+RP6gEAAODZV87//f4fAAAAPNvi7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+xczcryURhHMAfv15937dIop0XYy7d2z68gpYtg24jvJsuRugSQsM5J2jCoDjjSPL7wXg8o/x9Btw8Zz4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JBu1rNJ/+nxoTRnsy3TzNEAAAAA+yzWs0n1Zpzm//P+87zrMs87EdGNiH29ey/+1DJ7OWfwxfcHn2p4jqgSdr8xzNu/iLjO2+tF+gwAAAD4ueVqOk/denoZH7sg2pQWbbpntw3ldSJiMH5pICXyYlNclVeV7P7f/bgvTHmvrVrAGpVXlVRLbv2m0r6lVxtGH4ZOGrqtlgMAALSi3gm024UAAADQprtjF8BxVGcz87X4+QL+YRryCcG/tRkAAADwC7mlHgAAAE5f1f97/h8AAACctvT8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5psZ5NlqvpvDRnsy3TzNEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8sT/vKBACYRAGe9d3JnP/w0qDpqYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzv3ztlGGAQB/z/9KQYjDSB7IAmKAAeoadzCjpbKwhW8QpW6JcDFqI9RWZcjYgQXGSqiMrPQT8AW6AR66dsjgoQjmovd851xDFAJId27y+0nPvU9O1t3zXqQoz71vAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQW44O8GQ/pMm/k5357enc7jvNDYzR7Mk9jxDypsugXUNKruwIAAADOgmbR34cQNvfHG3FspFn/3y4+E3v+B68u86KfP9z3F+Plx/fTImbdW7+ubpQu7xMvenVnOrlY2QzX32v/+IlW9uSzdy/N7BvS+GTvjUU7e57JN48efdzJ0nNVVAsA/BcXijFPit+H4jioszAAzoxWHqHU/zfTemsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqMJiL7xS5EkI4c3WQR7Nn97dPmq8/Ph+WsQvP799r3zNeIl2COHqznRyscK5rLubt+98vjWdTm5IJBLJKqn7JxMAAKdNO4/Y12/ujzfiuaQbwrMfnu//3y3l4YT9/9cPxj+V71Xu/weVzXD99Xevf9m/efvOBzvXt65Nrk2+GIwujS4NRx8NR/3sXUnfGxMAAAD+n04e5f6/0f37+v/LpTycsP9v3Xv2Y/leTf3/kQ4W/equBAAA4Gx7/a0/f0+OOJ90OuHW1u7ujcHyuPr6w+WxhlL/tXN5lPv/ZrfuqgAAAIAqLPaS59b/r5TycMz6/+zJPC3i4WfDdvmazRDC+Xz9/8L2bHqluumstSr+nLjuOQIAAFCv83mU1//b2f7/xmrLQyOE8N47yzz/N4DH7v+PvX8c/9j89qvyvcr7/4fVTXEtNXrL55GNvRBavborAgAA4DR7KY/Y7H+6P954+P3733Xs/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAv9ufeNmEgjOPw60uixG0yQnorgRloqBCMwIeEZMkzMAAL0VDRWiwCK4AE55rOUDxP8/8VV9wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vMvDF28RUUTqMkUab35O7xHxEWnbtqPPWxa787H5uudsf5jk/I7pbxkRZRR9nAMA0Luq2xyrdb38y/ufd5B3mLeaN/XimZ8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLIDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBWAAAA//8ypVLO") syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x20088, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x80000001}}], [{@audit}, {@euid_eq={'euid', 0x3d, r9}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r11}}]}}, 0x0, 0x0, &(0x7f0000000480)="20828af771901fc9672e90bc07ec864424e42b0a31dda6ac775204e93e99a7") r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r15 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r14, @ANYBLOB="00000000000000001c001a80080003800800e500080000003e"], 0x44}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x21, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8080, 0x1}) r16 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r16, 0xc) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='\x00', &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x0) 11.927854301s ago: executing program 5 (id=627): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.746890179s ago: executing program 5 (id=630): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000280)={0x20, 0x0, 0x5, {0x5, 0x0, "5e250f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40106e80, &(0x7f00000000c0)={0x0, 0x1, 0x3}) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x2000000, &(0x7f0000000080)=ANY=[], 0xfb, 0x5a6a, &(0x7f000000c500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./file1\x00', 0x141842, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r4, 0x2007ff3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="739361a3d9ba98f9fccd340f5638bac05deb01b376831078101355ab20b806ba05da4ec3dd0f42291873b3e7807ba525adeea35df56c542c3e6cb2ce7bc0cdeee04982be6ae0ba2e4ab0844a4fdb53a64bb99112d22eff43bad7478572c55033516ba4c1d9cce8174a70555a7a20d38aebd942b80fdde9e02fe6aeb2984d9b8c385b189e8d75c769545052cfae4109ceff4c497b92e775259407a016f180dcddae9bcc93864251626a7b535fc05a349f514853138038840cc0d483041dcdf47b938bac0827dda438850b8b2069ef5d021df7df8d9c1c1dbfded190", @ANYRES16=r3, @ANYBLOB="00022cbd7000fbdbdf256f00000008000300", @ANYRES32, @ANYBLOB="0500d6000800000008002700020000000a000600ffffffffffff00000500d600070000000a00060008021100000000000500d600030000000500d60006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 9.13607534s ago: executing program 1 (id=632): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000aac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000091404002bbd0800fedbdf250800010001000000080001000100000008000100010000000800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x10) 8.947329804s ago: executing program 0 (id=634): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000340), 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.602558439s ago: executing program 1 (id=636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000300)=0x2000004) 8.566918999s ago: executing program 0 (id=637): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.3151612s ago: executing program 4 (id=640): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x14, &(0x7f0000000040)=ANY=[], 0x5, 0xecc, &(0x7f0000000f00)="$eJzs3U9sHFcZAPA367WdxG68bgt1W5qElpI2gBOcHMotlSKQqqrqhXurNG4r3BKRcmjVKC6nIHEoinop4lDU3JDCAYlWSChCQuJPD5w5IbiAUJAi5UKk2MjOe+v1c6a7Htuz9u7vJ337dubNzveNN3LmjWffBmBoNVYfT52aKUL44NMrZ75zaek3K+sOt7c4svpYxKVWCGG0Y7nI9vf3uOLOzXfPrrRLWVuEudXH1B9euNF+7UQIYTEcCddDKxw+1rp1eeT5+asffnb04vnnXtuhwwcAgKFy7c8Lf3v6X3/6+vTta4dOh/H2+nR+3orLE/G8/0Q8v0/n/Y2wfrnoiE5j2XYjMRrZdiPZds0sT3NdnqL9fDTbz2hJXWNd8o10rLvXcQIAAMBelMa1rVA0ZtctNxqzs3fH/R3D6YX5C/2oEgAAANiKW5dWb7oVQgghhBBCCCF2Jpq7oAYRlqf6fQUCAAAAGDZp3oH2/GC5xXxmga1p763VW/4bzzbu/XrYBnX/+5d/b+X/+D2/cQAAqG5QzybTcaXz6DiPwYZ5BEey1232/L+R7afZ2dk63bXOsnkF98p8g2V15j/X3aqs/mbNdVRVVn8+H+ZuVVZ/Pk/nblVW/3jNdVRVVv++muuoqqz+/TXXUVVZ/QdqrqOqsvonaq6jqrL6J2uuo6qy+u+ruY6qyuo/WHMdVZXVv1duqy2rv1VzHVWV1T9dcx1VldV/f811VFVW/wM111FVWf0P1lxHvzwW2/RzOJT1d46f8zHdXhnjAQAAwLD7n/n/hBBCCCGEEEKIgY9L/b4AAQAAAPRd+lxA+tT7cpT6R7r0N7v0j3bpH+vSP96lHwAAAAjht5fnH36/WPuc/1bnw0vzRqX5lzY7j1E+H+Fm82913rOt5t8r85YBAAAwXIpvX186duajt6ZvXzt0umP0uxTHu2ke0Ga8NvBJXE73BUxmy0UaQ2dT3zdKtsuvD9xXtr8Xt3igAAAAMMTS+L0VisZsx7i7FRqN2dm18fhMGC3mX184dyIup+9n+ePU6PjK+m/WXDcAAADQu7Xx/r3H/+l7fGfCWDH75usL8xfuLk+21482Oq8LTK2tLzqvC7Sy9XMl60/G5fT9na9N7V9dP3v2+wuvbPfBAwAAwJC48PY733t5YeHcDzzxxBNP2k/6/ZsJAADYblf/eeUvPzw5+bu7n/9fm/8uff7/SFxuxbn9/ho3SPcJpM8BbPi8/kvr80yVbXd+/XatbLuRGONZ3fs69hM65htMr5suy9dav5+xknwTWb7JLF8+T0Ez2z7lO5itz+cnTNtNZevzeRibWY4iy/94AAAAgHLH33rj/PELb7/zjdffePnVc6+ee/PkiblvzT0zN3dq7vjqff3HO+/uBwAAAPaitZt++10JAAAAAAAAAAAAAAAAAAAADK86vk6s38cIAAAAw+6/l0IIi0IIIYQQQoiBivSF0v2uQwixa2J5Of+meQAAAICddefmu2c72w0Wi23N195b626zFPOm9g9P/vzJlUib3Xh2/fWSA9taDcOu7n//8u+t/B+/t73596UnPf/+a6zfwelqeb/6038/1Zn/kWaP+fPjf7Fa/qNZ/qOht/zLH2X5X6qW/6ks/4Ee8284/vPV8j8d88+kep7oNf/69388tuk49veY/1h2/K+EXvNnx9/qMWHmazE/AAyjRr8L2CHpLCGdR0/E5XS88XQz5Hc/bPb8v5Htp7nlytfvN50HPRSX0/nSZJY32Wz9E1nR91WsM7dX7iopq3+73sedVlb/aM11VFVW/1jNdVRVVv94zXVUVVb/vprrqKqs/l7Hof1WVv9eua5cVv9EzXVUVVb/ZM11VFVW/2b/H++XsvoP1lxHVWX1T9VcR1Vl9Ve8rFa7svqna66jqrL676+5jqrK6n+g5jqqKqv/wZrr6JdHY1s2Hk7jz6nYl5Zb2fL4PX6Wg3ptAQAAAPaa/3zu/H/jfZ+fQAghhBBCCCEGNdr37eyCWsTgx/Jyf68/0F87+2lmAHYrv/+Hm/d/uHn/h5v3n8+T7uEvsuVkpEt/s0v/aJf+saw///c63qX/gWy/y1Hqf7BL/xe69B/s0v9Ql/6ZLv0Pd+l/pEv/o136AQAAGA5fjK3xIQAAAAyui7/85Ce/PvrSzenb1w6dDmMb5p0/EZfH49/WL8flfN77ZDT+zf9HcfkXsf19bP+Rbe/+EwAAANh5ab4Jf/8HAACAwZW+p9T4HwAAAAbXdGyN/wEAAGBw3R9b438AAAAYYMW+e6+Obbou8Hhse53XDwDY/b4U28dieyi2h2P75dim84AnYvuVmuoDALbPz77742feL9bm+z+Z9d+J61O7weLdKwVFY/1M/vtjeyC2T/ZYT/59AL3mTw72mGen8k9tMT8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDgaq4+nTs0UIXzw6ZUzUxfPvLqy7nB7iyOrj0VcaoUQRtuvS71ry7+KG965+e7ZlXYptsuxLcJcKELR7g8v3GhnmgghLIYj4XpohcPHWrcujzw/f/XDz45ePP/cazv4IwAAAICB9/8AAAD//5krJf8=") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x800, 0x2, 0x6, 0xf}]}) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x3d, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r9, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x90018, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRES16=r2, @ANYRES64=r2, @ANYRES32=r8, @ANYBLOB=',group_id=', @ANYRES64=r9, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r8, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4009, 0x7, r10, r11, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2080, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@loose}, {@access_user}, {@directio}, {@msize={'msize', 0x3d, 0x3}}, {@access_client}, {@cache_fscache}, {@mmap}, {@access_uid={'access', 0x3d, r10}}, {@version_L}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) 7.134795528s ago: executing program 0 (id=641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a578401f000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9", 0x39, 0x0, 0x0, 0x0) 7.011618154s ago: executing program 1 (id=642): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.859109067s ago: executing program 5 (id=643): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="41000000010001", 0x7) close(r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000015}) r4 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000020c00)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@gid}, {@part={'part', 0x3d, 0x400}}, {@codepage={'codepage', 0x3d, 'cp860'}}, {}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@creator={'creator', 0x3d, "b6b72a1e"}}, {@gid}]}, 0x4, 0x337, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200420, 0x0, 0x8, 0x0, &(0x7f0000000d40)) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f00000000c0)=""/85, 0x55) getdents(r8, 0xfffffffffffffffd, 0x58) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r9}) r10 = fsmount(r6, 0x0, 0xa) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa000000000001907864010100ac1414aa0b009078032c000045000000000000000089000000000000ac1414aa28d6777a092b57d8"], 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x1066, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 3.551296308s ago: executing program 0 (id=644): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x58, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "02d0e86cbe4d68f75ce39f0dab"}, @NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000ba0061114f00000000008510000002000000850000000000000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r4) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10000}, &(0x7f0000000340), &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0098335a26db5ec02ee5b72ff6bc375cf004be0aa421f707fbf603de1bc98df9778833429a60691f387f8e7b7a3ec4632d7446009e31e1ac9efeae20e2833876d6f323b3a03089cc6a3799be269cef237f04973dc506ce929a08d0361959f53eb037aba7f68b30fab98c30b2fa641bc60f57a74351b737b0287296b3eca9ca440a562cbe32d150f4e6cf229ec03fb8c6ad947ad64472e51448"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) 3.550699162s ago: executing program 3 (id=645): r0 = openat$null(0xffffffffffffff9c, 0x0, 0x303040, 0x0) futimesat(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xc, 0x3, {0xffffffffffffffff}, {}, 0x6, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4800) 3.510793981s ago: executing program 4 (id=646): unshare(0x2c020400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x40000000) unshare(0x0) 3.487769733s ago: executing program 1 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) syz_usb_connect(0x0, 0x70, &(0x7f00000000c0)={{0x12, 0x1, 0x139, 0xeb, 0x93, 0xba, 0x40, 0x2c7c, 0x191, 0x6b88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0xff, 0x7, 0x60, 0x0, [{{0x9, 0x4, 0xdd, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, [@uac_as, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x6, 0x5, [0x8, 0x8, 0x3, 0x2, 0x9], 0x5}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x80, 0x2, "5f24c6c76299"}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x35, "b4"}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x9, "cfc245d56c"}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x6, 0xfe}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x4, 0x6, 0x2, 0x10, 0x2}]}]}}]}}]}}, 0x0) 2.319277115s ago: executing program 3 (id=648): mount$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=']) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0xfff6, &(0x7f0000000340)) 2.068432621s ago: executing program 3 (id=650): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe8b80, 0xa3) 2.011476171s ago: executing program 4 (id=651): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="165155a5f1c5f63df4b7ec9cef3b4c92e01585bc2b16cbf268035b8d287db89c9b527716cb4af995cac31643d7763b9340363c5bd3592fe17d2482368c28b2a48ba23a0e0970b1037c57281674b1150d646689b6"], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==") 1.932713795s ago: executing program 3 (id=652): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x2, [0x0], [0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r0, 0xffffffffffffffff, 0x0) 1.706410849s ago: executing program 2 (id=653): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 887.489331ms ago: executing program 4 (id=654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x3c, 0x2, 0x6, 0x101, 0x6000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 886.516447ms ago: executing program 5 (id=655): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000280)={0x20, 0x0, 0x5, {0x5, 0x0, "5e250f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40106e80, &(0x7f00000000c0)={0x0, 0x1, 0x3}) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x2000000, &(0x7f0000000080)=ANY=[], 0xfb, 0x5a6a, &(0x7f000000c500)="$eJzs3X+QHNV9IPDXM7Pa1a5+rAQOMpjVIqOE4Nha8av8IxUrucROgeOSyykHcbJhQSsiWxIq/Qggk1jkwIcKcOEUqQQnfxAX5g6juKiCi1EoE36cxNnYKi4+6gpTZ+ew//AV4VAZ0FEunze1M/1mZ3qmt2dnZ4UkPp+StqffvPn269dvevr7ZnYnAAAA8LZw+NZdxz5+5u99588n3vjC7//jtpvDULlaPhArDKfLG96qFnI89VdWVJfZcfFrn//6T0av+Z1vPzT4tTcPbTpn8w9+97RrHvvspQfv+ZsnX1/8yC9fKoobx9P50+vJK0kIA986+pdfPPTsGVNlyZKpn6V9ISxLlj+5LAnhlsYQYz8PIWxKV1Zk4j/8xoWbp5Y3397fVL40U894f3ubOs5JCGHvsevfE3742xtu+d7Kb/x934GX901XSQYaxlMIS65qfHxfCGFh+n9KHG1xPCbpcn0IYbDhce8vaNe7O2z/mpz1s9LlgnQ5VBAn3r8qs17K1MuuR32Z5WDB9uYqrx3d1iuyKLOe9ChulNfOWL4sXX4zXZ4/y/jldB/KSSgloVJv/tZkeoyEhuOWhKR6LAfq66X6sQ3p/mfWk8x6KbNe7svsV3W76UArJ0lzeayXKY+n40pafk7jubqNTzbcbqz3zliWPlHfzNbJBB1quVHfr6rYrqMztOV4KDWcg9qV1w98ejCG0rKhZHnLYybbiPcd2nDH6vLGpw4P57QjeShJ4yddxd/73WWLPvPg/j3Z1/V6/KtKafxSV/F/dNmRV6/Y/9Wv5Ma/K8YvdxX/gscHX7ns6VtX5fbP0dg/la7ij7/0zJ0rT7/6QG77743xB7qKv+7gkf7Fxx5/Irf9Y7F/FnYV/8UPfeTHDzz/6Mu58UOMP9hV/I0Hd3ypf+TYebnxn4j9M9Td+HntwCUvjIz8dDQv/nMx/uKu4t+/r/+D9y29/dLc47s+9s9wV/E/du5jtyw69ujZeefO5N5evXICvD2dll5j3Zaud5tnzlVDvvDXo5XaNd+i9P/iXm4oc/GZzRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoBfe8Z7/9tH//anhVyrpen9648VSbRnLF4SQLAwh7No9vnP3lu3Xjn72uj07t49vHR3fPTqxfffOG0cv+o3RnRM7to7fOHXv2HsvrD1ueUhqy+Tslm33T05Oloaby+L2/t25B364+v3/519DGHvH90cque1fc8+2+05v8zMjWTf54W17Pv79i/8u3a/htF3Dbdo1OTk5GXLa9X8v/8V9f3H0J+eFMPYrM7XrmRd/65+aGlQtmI6TKvWHWoP6k8G27ai3Om1P7K/K5i1bJ8Zm7t+px5dz9uPff/7ln2++4cu/qPXvQO5+dNi/C9dNbi391YaP/f+/uqlWUNSut+q4F/V33IvYvth/A2l/L0n3a0nOflVy9uvW7z3x/LfO3P/6vjBWeW1l67aL9qsvHQB9yTs72m7cwmCyrKl8IK0fj3h83Jrd23as2XXj3vdu2TZ+7cS1E9s/sPaitZeMXXzJxWuqe76mx/sft/+rHe7/8RlPS/9k3zfjz87GU3O7Fsy6P6baVdwfjS3Ke/4NfvKLd3/gnqc/XisoGuexdv18ki4Hp47z2tAw3lr7qt1+FR2fEMJou3549fVLwxn/c8stReehxiPT+DMjWTf57Kqf/d37/3bFb9YKjst5vrFBXZ7n662ebk+1vwbS4zF5gvZvfyin+zXUtl1rn326747D//qn9fYtWBBuGN+9e+fa2s9FaUsXJWe1bVe2NO7XyurPcki7JdSHaZvxOqUv1NqXPX/G6tleHUrvG0qWZ0OV011rEu88tOGO1eWNTx3O6+nkodoWF4bFtWXyrpyaWzMPLNcb3LLxycnJE/X5VzQ+Rj76t4986pF/uKhlfFxQ+1m0X0nOfn3j+fvv/tqX/+M/9G6/PvpbR4Z/9r/+eHWt4IQ/r6SjtN7qtD1J43nlghCKnn8rQ/v9yH3+ldrvT9HzL7ud6frt441m1odCOe/52vb5Eu+74PHBVy57+tZVuc/XozM9Xxt39qamx5ULnq8nyvjJPr+SSnM75u/51TRQknWT377ttH1PfmH9mbWCotfLeu124/rCDvKPnP36pyteGLlu9D/8j96dN77+Gw9f+YPxdX9WK+j+uMe29Oa4D6T9O5DTv/VWx7yzsX/fd811WzfVyov6+a27/k2XBflPPJXsunHv58a3bp3Yuauz/er09TRuJ9vL3b6exrPb8oL9KrXs1/zd6KS/On2+xfZv6rq/mp9vQyHp6nVh73eXLfrMg/v3DLc8Kt3QVaU0fqmr+D+67MirV+z/6ldy498V41e6ij/+0jN3rjz96gO58e9N0vgDxfGXhJb46w4e6V987PEncuOPxfYv7Kr9L37oIz9+4PlHX86NH2L8oe76/7UDl7wwMvLT3PjPJel2pq6RQnj4jQs319aT0Jc+32I7+praFbLrSWa9lFkvN66X4ixCuoFykjSXx3pp+TkNbWnnj3LK41XYwIra8s24HrI3Zi4/0ZQazv3tyouuUwEATnXx/f94DRrf/59IL5TyZxpg2lzzsBU5cWMeNj2f0/we64o0fnx8nAcceV8Ym1rePFq70J/t+wjx+ZCd54zbOe/dzTHazk8cbNxIdfst85xF8++rMuuxXbX58kpDHppqzWsqoYP599btzDz/ntn94vezRm9radZow7xV9vj1pTNm7T7vkGlvZSpC3vjIzovFz3OMLAnrq9vrcHxkP0cTj0P2czRxO2dmTpzdfo4mb3wMt/ZDU7vi+Ij1Zhgf1SYXvx/ZevzCDP07ffzaR8sev1kc74Gp+jO8Pzvj+abT92d7MG/Y9pR2/OYN5/f9sBNiXrJN/OM8L7moJX76BDvR5w1jeeynSofziZ/KKe/VfGI8XcR2HZ2hLceD+UTgVBXz//gaMZX/T12A/79MvaI8JXvVGOPlfk6o3L49RXlH6+f0Brt6Hd94cMeX+keOnZd7nfNEp5/T29G0NljwuZ+iflydWS/sx5wJmqJ8L7udon7Pfi5jKCzuqt/v33fPB+9bevuluf2+vvZCWtzvdzetLS7o95MgX2gfX75wKuULrfF79DmGovmz/HykXG/HvOQj6Qef5isf+cOc8tnmI4MtN+r7VXXi5iPTL6RN+Ujf8W0XAHDyiPl//f2zNP//l3hhkV5HFOWt52fWY7zcvDXn+iQvb/2DdHlDpv5Q+hsVs71u/ti5j92y6NijZ+fmLfd2mof+56a14cI8dG55c24esb43nxfPzSPqedbc8sTc9tfzxLnl6Tlv0zbk6XPLo3P7p55HN88D3H1kOtOYKX6cB8iNX58H6GGe+8vpSscvzy2Yr8tsLK52Ol93vPPoqZK+Jc372ZwXD/Ymj05/fXa+8uhP5pTPNo8earlR36+qEzePbi6XRwMAp6qY/8fLuGr+3x/C07HCwnhjbu+z5+YFPbpuz/49kHr85+Ylr5yO36P3f4vzvvnOW+c7r5/veYmT/f3f+Z4XGq7+Ac/5mid7yz7vOi958b/Ub3WcF6cblRcDAHAii/l/TPPj+/9PZ+rNNT9pyd/6apeQ0/nJyZefN9Y7ifPzy8Pxys/7T+b8/GSf/5rfz8mcWvn/tC7fF39z8hTO/6ttlv8DAJyUYv4ff+0x/v2//5quZ/9ufYd5+r3Zj/N6H9376EGe3kGe3uN5thi/8XMAJ/E8QPnkmgeo3Vg4Xf9Umgeo6gsmAwAATgJ91Uyp9ffsP50us79nn/d7+Vfk1O9UJb08vnr3zomJK/fs2DS+e+LK7ddtmth15fU7t+zePVG/dp5b3pibt6R5Y1+opP3Rvl42b1ua/j2EpTl/DyFbP4Y9q3qj9e8hZDe7sODvCEwfv87am3f8SjPUbzc+8o53Xvw/yqkf1Y//NX98wZWbd125ZfuW3VvGt27ZO9Fcb7j6m9Sdf29mfJ9yVt+XmvnRojT77++Mh2du7Si1tKMv7Y+872dPMu1YlrZkWd73H+S0+zv//S/+5NzJXzwQwtg7yu+aU/8l6yb/y+UTf7D78Pd3TLW/NGP76zXTdhV9X2m2ftyfytbrdu1+z+br9mzPfqNkd+J8Rqm+Pk+fa0if/uUO5yc25pTP9vf3yy03Tkwdz08AANAkvv8fr2fj+4dfTi+gYnlhnr69Vm+u7x/n5uljneXp2e8lK8rTs/Xj/naapw/MMU/Pbr8oT29Xv12enpd358X/w5z6s9X5OOnicx6VtB8e3L8nd5xc1dk4yX6fQdE4ydaf7ThJ5jhOstsvGift6rcbJ3nHPS/+J3Lq5ykaD5X6eJjb53Jyx8NdnY2HX8+sF42HbP3ZjofSHMdDdvtF46Fd/XbjIe/4tsZvniDozfzv1MCojouJK6+/bufnGurN9/dfhNaPZHTSvgXTj53f7//oVuf9O7+f+5p7+0NYVy3Ja398f2DBrNrf6efK5t7+ov6fxefKloSWz5Xltv+5uc2Edd7++f1+l4y86q2PP17ztemwK/r8WdE87oac8tnO4y5ouXFiMo8Lb52Y/8eruZj/354ue/020Mn/PWldvM7Fc7DvMcvv/w6vY952r+fZt9y9ngMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcEvorK6rLw7fuOvbxM3/vO38+8cYXfv8ft938a5//+k9Gr/mdbz80+LU3D206Z/MPfve0ax777KUH7/mbJ19f/MgvXyoMPFz9WTk/XR0IIXklCWHgW0f/8ouHnj1jqiwJIZST4X0hLEuWP7ksyUQY+3kIYVO9nc13PvzGhZunljff3t9UvjQTJLtfYagc29PYzhBuKNwjTkID6Tjbe+z694Qf/vaGW7638ht/33fg5X3TVZKBhvEUwpKrGh/fF0JYmP6fEkfbivjgdLk+hDDY8Lj3F7Tr3R22f03O+lnpckG6HCqIE+9flVkvZepl16O+zLJhXxcWbLoree3otl6RRZn17MlorvLaGcuXpctvpsvzZxm/HP8noZSESr35W5PpMRIajlsSkuqxHKivl+rHNqT7n1lPMuulzHq5L7Nf1e2mA62cJM3lsV6mPJ6OK2n5OY3n6jY+mVP+znQ5kD5R34zrIXujZqjlRn2/qmK7js7QltR/al9cKX5kB0oN56B25fUDnx6MobRsKFne8pjJNuJ9hzbcsbq88anDwzntSB5K0vhJV/H3fnfZos88uH/Pirz4V5XS+KWu4v/osiOvXrH/q1/JjX9XjF/uKv4Fjw++ctnTt67K7Z+jsX8qXcUff+mZO1eefvWB3PbfG+MPdBV/3cEj/YuPPf5EbvvHYv8s7Cr+ix/6yI8feP7Rl3Pjhxh/sKv4Gw/u+FL/yLHzcuM/EftnqLvx89qBS14YGfnpaF7855JSLf7iruLfv++eD9639PZLc4/v+tg/w13F/9i5j92y6NijZ+edO5N7e/XKCfD2dFp6jXVbut5tnjlXDfnCX49Watd8i9L/i3u5oYyp7SyZx/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJya/vmmiz59+Yc/saGShJDk1JlsI95XXrBu3WgX2x1/6Zk7V55+9YHGshVdxAEAAACKxTy8VC8ZCCvC9cnCcFbb+nGO4Ky4ljSXZ+cQYpzsHEG3cUpt4pS6iFPuUXsqPYrT16M4C3oUp79HcQYK4gyEzuIsnCFOZWoEdNiewRnb03mcoR7FWdSjOIszIbqNs6RH7VnaozjDM8bpfBwu61Gc5T2Kc1qP4pzeozjv6FGcX+lRnDN6FCc7pzzbcbg4rXlmXpzqjXJhnEpSrt/Rbj79jHQ7Z89xO0MF21lc9Hrc4XYWdridd2ceV5rldgY63M6vznE7SYfb+fU5bqdUsJ04bm/Iti9uJ651OP5v7FGcvT2K8/kexbmpR3H+tEdx/qxHcb4Qmi9OZxsHoFMx/5/O94ZDf+U3w2B6xsnOAsR8d2X1Z+vrXd4JKcZ7V6Z8QVG8bKKeibdytu3LTiBk4q3KlPc1xavU85EZ4g00xluduXOm/f3QuvZta4x3fqa8f4Z4TTsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMfBP9900acv//AnNoQkTP1ra7KNeF95wbp1o11s99CGO1aXNz51uLGsv9JFIAAAAKBQzMP76iUDob+yNvQnC5rqDaTzAAPpenm4thxZEtZPLZPRUnV9MFk24+Mq6ePW7N62Y82uG/e+d8u28Wsnrp3Y/oG1F629ZOziSy5es3nL1omx2s8Q+gvihRCq0w+7btz7ufGtWyd27qoVZtu/In3cinQ9SR838r4wNrW8OW3/8oLtlVq2N383io8eAAAAAAAAAAAAAAAAAAAAAAD8G7t2GypZWQcA/H9m5s6MVzdv+DYu7jqsq1hZ6XYNLfEeCBJ8WbwIMde6yZIrSVd30V0xm3QhNaUIlIVlww9tmKRJX3xJiXxhwTBL6G4SKuWH+lBoGSp+CGXizp0zb3fGuU3irtvv92HOmf/zf57/eQ7Lwv+ZCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MFarE/P12Zm5yaTiGRITmOAbCxfTNPqGHW/8vj2H5TWv316d6xUGGMhAAAAYKSsD59oR8pRKuQjHyc2v22IroHo9P0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/n8X69HxtZnbuyCQiGZLTGCAbyxfTtDpG3VfefPCzL65f/7fuWGWMdQAAAIDRsj48146UoxKnxERy4lLn345mZwNr++Yv53Vk66xbZV7/2cGwvFNWmXfaKvM+NiJvc+t6YwAAAMCHX9b/F9qRqSgV1qzoh7P+f1Rfn+Wd3JeXb12r3UnvqbiaJAAAAGAVsv6/1I5UolSotPv11fb7Gzqh5k/n2fxRv9tn80/ty8vmj/o9/5LW1e/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDhsVifnq/NzM7lk4hkSE5jgGwsX0zT6hh1Nz0x+Y+L9t+2oTtWKoyxEAAAADBS1od3Wu9ylAqTMRFHNvv+9Rfc8/CXHn50OiKW2/xiMW7csmPHdZuWPmNTlnfWc/snvv/Ma99ekXfW8udB2yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC+WaxPz9dmZueOSCKSITmNAbKxfDFNq2PUffnzX/zL/S889mp3rDLGOgAAAMBoWR/e6f3LUYliFOP45rfuXn9Jru+YYNiZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD4uP6bN31jy8LC1uvcHJybRj7iEHiM//Em++d0qDzPh/+mfLAf4+D+vwQAALz/To4kGv+lEy492E8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcChbr0/O1mdm5chKRDMlpDJCN5YtpWh2jbvr486U1bz/xVHesMsY6AAAAwGhZH97p/ctRiYmYiOOa3wadCTT7/6kP8CEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQ8pifXq+NjM7tyaJSIbkNAbIxvLFNK2OUfe+XXs/d+/R37uwO1YqjLEQAAAAMFLWhxfbkXKUCh+PUpzU+r7QOyHJt66DzwU687b3TJtc9bx6z7z8e81LChHteXf07azQ2s3yvHK23tTytV2v2pmXa82rds2rRLt8tT2v+bJ291RbM2J/K988AAAAfHCy/r/UjkxFqVDq6v9/2roe0brqcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwRbr0/O1mdm5JIlIhuQ0BsjG8sU0rY5R96bffvSor/7szp3dscoY6wAAAACjZX14p/cvRyXWxUdiXbPvj6ne/Czvn7V37r37X389PeLM4w+sL/Qv+6Ps5tcvn/9k/0dErjc7F3F0q14ypN5vfn/3DRsb79wfceZx+ZNW1Iv3rte7ZNp4pLb1kh3PHNg+4uUAAADAYSLr/yfakakoFa4d2v9nnfeI/r+t2YAffcOuXxzb+mx15H0zclOterkh9b6w8cE/n3rO319b6v9X1vtk++7Te6+599iegsuRPknamLlm5+YDZ+/LZbterp/vq5+9ly9/69V/X3XjXe8s1y9HuRVf2/coy9VWfvaVj7SxkNszd/G7e+q99QtD9n/b75564Vdr73xrqf6bJ0+2658Wg+ov77wwtH4ckTYmL7t997l792/urR8R1UH1X3/rwjjhj1ff2r//yb6Fu99892f/C0gbz214Y98591TO662f9NXP3v/PX7hv90/u+u6jWf3sb0VOP2W19XN99Z+945hdT99y6dre+rkh+3/y8hfXb6t+5w/9+7+yZ9XC0KdYuf8Hznjoipe2pDf3DwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxeFuvT87WZ2blcEpEMyWkMkI3li2laHaPuKxc9//rld/74h92xyhjrAAAAAKNlfXin9y9HJYpRjMlm3/9IbeslO545sD2mlkeT1rWwsO36HZ+4atvOa688SE8OAAAArNYrFyXN/r/QjkxFqbAxJlr9/8w1OzcfOHtfLuv/c0vXJCKuunph65nRznv2jmN2PX3LpWvb5wQRzT8LKC/lfaaTd8H5z0+98aevnzowb1Mn77kNb+w7557KeVledOedFe3ziQfOeOiKl7akN7efrzvvU1/bttA6nsjWnbzs9t3n7t2/OZedY7Suk611s7yF3J65i9/dU89NRWlpPN/KK7f2DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACstFifnq/NzM5FPiIZktPo1gpkY/limlbHqHvxxl/eetTbj63rjpUKYywEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyHHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzXX4hUVRwH8HNmdtvZnV3d1aCtaF2tKOxBKYiol4qK0AihJ0PC0nyIgiCisIfW0Eis6CXIepGooNpCMMhNEi3W6J/00kMFBdZDINJC7SA9VOzMubOz17mNjhVUnw8MZ3/n3vud3733zJ0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Ffp6xmtj0d2PFS7/YKbP3ni3tnHb33vgW2XPfbGD+Obbvx478CrJ6c3L9/y9U1LNx24b83U7pcO/zL0zm/HOgY/2hhWprISQjwRQ6i8P/P8k9Ofnjc3F0MI5Tg8EcJIXHJ4JOYSVv8aQtjc7HPhxn2zV22ZG7ft6lswvzgXkj+vUC1n/TQML+yX/5ZKWmdba49cEb69Yf32z5e9/Vbv5PGJ+V3i3D7ltJ5CWLSx9fjeEEJ/es3JVttodnAa14UQBlqOu6ZDXxefZv+rQqjl6roL03hOGqsdcrLtK3J1Kbdfvs705saBDu93tor66Ha/TgZzdf5hdLaafa5qPz+SxnfTuPIM88vZK4ZSDD3N9u+P82sktNy3GGL9Xlaadal5b0M6/1wdc3UpV5d7c+dVf9+00MoxLpzP9svNZ4/jnjS/vPVZ3cYdBfPnp7GSPqgnszrk/2ionvJH87zqsr5m/qSXf0Kp5RnUbr5549PNqKa5alxyyjG/t5Ftm17/9KXlDR8cGS7oI+6NKT92lb/1s5HBu97c+fBoUf7GUsovdZX/3dqjP9258+UXC/Ofy/LLXeVfeXDgxNoPd6wovD4z80+Q08mPqc623X3so2eWnXvPZLt7Xc/ck13/Slf9Xz91tG+odvBQYf+rs+vT31X+N9fd8v3rX+4/XpgfsvyBrvI3TD34bN9Y7fLC/EONj0K1vkK7WD8/T1791djYj+NF+V9k13+oTX7smP/axO5rX1m8a03h+lyXXZ/hlN9/Rv3fdsmB7YO1/RcVPTvjnr/qmxPg/2lp+h/rqVR3+p25b7bU9ndmQ0/XfbT8XnhhvKfxDTSYXkNdp3Y29z6L/sZ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAPduCABAAAAEDQ/9ftCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngoAAP//3wQX8w==") r2 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./file1\x00', 0x141842, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r6, 0x2007ff3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="739361a3d9ba98f9fccd340f5638bac05deb01b376831078101355ab20b806ba05da4ec3dd0f42291873b3e7807ba525adeea35df56c542c3e6cb2ce7bc0cdeee04982be6ae0ba2e4ab0844a4fdb53a64bb99112d22eff43bad7478572c55033516ba4c1d9cce8174a70555a7a20d38aebd942b80fdde9e02fe6aeb2984d9b8c385b189e8d75c769545052cfae4109ceff4c497b92e775259407a016f180dcddae9bcc93864251626a7b535fc05a349f514853138038840cc0d483041dcdf47b938bac0827dda438850b8b2069ef5d021df7df8d9c1c1dbfded190", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf256f00000008000300", @ANYRES32=r5, @ANYBLOB="0500d6000800000008002700020000000a000600ffffffffffff00000500d600070000000a00060008021100000000000500d600030000000500d60006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 852.210206ms ago: executing program 1 (id=656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a578401f000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9", 0x39, 0x0, 0x0, 0x0) 744.37173ms ago: executing program 2 (id=657): syz_open_procfs(0x0, &(0x7f0000000700)='net/connector\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') iopl(0x3) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000240)="01000000", 0x1b}, {&(0x7f0000000280)="f697079a161cfb7702711e629acda76933ddd0c20574eb4d4d28f9", 0x1b}, {&(0x7f00000002c0)="c27d037369597e0a4e", 0x9}], 0x3, 0xfffffffe, 0x0) ftruncate(0xffffffffffffffff, 0xffffffffffffffff) 727.516823ms ago: executing program 3 (id=658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x18) syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x2, 0xc47, &(0x7f0000001c40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) 683.548387ms ago: executing program 4 (id=659): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 605.56261ms ago: executing program 2 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x2c}}, 0x4000050) execveat$binfmt(r0, 0x0, &(0x7f0000000100)={[&(0x7f0000000040)='syz1\x00', &(0x7f0000000080)='syz1\x00', &(0x7f00000000c0)='\xe3\x00']}, &(0x7f00000003c0)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)='syz1\x00', &(0x7f00000001c0)='\xd7\x00', &(0x7f0000000200)='syz1\x00', &(0x7f0000000280)='syz1\x00', &(0x7f00000002c0)='}@^%)-::\x00', &(0x7f0000000340)='syz1\x00', &(0x7f0000000380)='syz1\x00']}, 0x800) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x8800, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000480)={0x2, 0x2, 0x7}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@uid={'uid', 0x3d, r3}}]}) setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) 591.267886ms ago: executing program 4 (id=661): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001180)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$eJzs3U1sHGf9B/DvbnbX3vz/Sp02SQOqRNRIBRGROLGSYi4NCKFIVKgqB8TRSpzGyiatHBc5EYLwfuDCoXeKRG5cQOIeVM7AqVcfKyFx6SmAxKKZnbXXL7F3ndhri88nmp3nmedlnuc3Mzu7s4oc4H/WtXNpPE4t1869uVzkVx7NdFYezdzpp5NMJKknjd4qtbtJ7aPkanpLPlNsrLqrPW0/HyzMvv3xpyuf9HKNainr17drt8mV+hYbH1ZLziQ5Uq2fwbr+rm/orzVyd7XVGRYBO9sPHIxbM0l3ne+eWivZ0fDXLXBg1Xr3zU0X9FRyNMlk9Tmgd1fs3bMPtYfjHgAAAADsgxd+WX6FPzbucQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBhUv39/1q11PvpM6n1//5/q9qWKn2oPR73AAAAAAAAAABgdN/8/w0bPvckT7KcY/18t1b+5v9qmTlRvv5f3s+9zGcx57OcuSxlKYu5mGSqLG+Wr63luaWlxYtDtLy02jIDLS8NOYP27icPAAAAAAAAAIdFY/QmP861td//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIKglR3qrcjnRT0+l3kgymaRV1HuY/LWfPpB+/afBXPff3dKmao/3c0wAAAAwJi88yZMs51g/362V3/lPld/7J/N+7mYpC1lKJ/O5UT4L6H3rr688mumsPJq5Uyyb+/3qP0YaRtljes8ett7z6bJGOzezUG45n+t5N53cSL1sWTjdH8/W4/pRMabaG5UhR3ajWhcz/1WaI81qN2pD15wqI1KMqBeR6aptEY3j20dixKPT31M/9hdTX33yc+J5xny5t3r9t711MZ+fjxSTvbYxEpcGzr5T20ci+fwff/edW527tydu3jt3cKY0gomBJ2gbIzEzEImXh43ErcMaiUHTZSROruav5Rv5ds7lTN7KYhbyvcxlKfM5k69nLkcyV53PxevU9pG6ui731k4jaZXHpVm9iw4/pqXM5dWy7bEs5Ft5Nzcynyvlv0u5mNdzOZczO3CETw5x1ddHe6c9+4WBh8m/SNIert0+KAZ2fPXuNHjWT5fXwfF1W9ai9OLzvx81Plslin38pFofDBsjcXEgEi9tH4nflG8r9zp3by/emntvyP29Vq2L6+hnB+ouUZwvLxYHq8ytPzuKspc2lk324tWqfnHpla2/4xZlJ1fLdrpSW9VnuM09XSrLXt6ybKYsOz1Qtu7z1tXe5y0ADryjXzzaav+9/Zf2h+2ftm+135z82sSXJ15ppfnn5lca00deq79S+0M+zA/Wvv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7d+/+g9tznc784oZEt9v94VOK9jDRTtLfkuzUqpmd6+xNopWkTDT6idH6mRiqcmvt6Lzx+2cZc3PUVslzCVSjOsnuP7j9z263u++HaYtEc5tzfi3RrWwq6g7VfGyJf3WfX4djfmMC9tyFpTvvXbh3/8GXFu7MvTP/zvzd2cuXZ6dnL1/524WbC5356d7ruEcJ7IW1m/64RwIAAAAAAAAAAAAMaz/+W8JTdv2ffZ4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEhdOzdRpc5PF68rj2Y6xdJPr1Ysq9WT1L6f1D5Krqa3ZGqgu9rT9vPBwuzbH3+68kkv16iWsn59XbvmbmbxsFpyJsmRaj1o8hn6u16tdzWyUm11hkXAzvYDB+P23wAAAP//+B8RmQ==") syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x40000) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 529.906066ms ago: executing program 3 (id=662): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x1d, 0x4, @thr={&(0x7f00000001c0)="b16887d08769f3980cbe5d1a20e69632565718bfa8965f41b9a092d5ccc1edfa40b9f529ba2dac60827df22924d35934dc718451a1652721ccf4d95d32932d000648ee14d80fb933c66740ac45638299ad46fe37e44889bab182d808d5186970d481ec7f915e13672282fd2e8d2cb775e5f64fb87f651ad1ceefc53d68ac9d5054d0dc7a5576f9bdfd3530de58", &(0x7f0000000300)="0fb712522b0018b995fa7968b7173c3a2ecbe43257a9c7d79915234b55b718dc1fbae6159c9a8f2de2c3c22b1f26fee36466e16e9bb2764876e3c27470e576092ce8e403522798525a261908b779a754527d8eba7c30f3ed30f7e5cde23716ffb12360aea98e2dddd0022cc1baf33cf4ad96c004564d9328d6beb95b5a6aafbada7ef298fbde061c45dbfc52479edde808f5aff96d395d1b1aeb87684ec24cd1defa7cfce80f9d61f68e5b9978d821a96fb2ee9c93d09dd3"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000280)={0x800, 0x2, {0x2, 0x0, 0xffff9d22, 0x2, 0x1ff}, 0xb0}) sigaltstack(&(0x7f0000000040)={&(0x7f0000000100)=""/176, 0x80000000, 0xb0}, &(0x7f0000000080)={&(0x7f0000001080)=""/4096, 0x0, 0x1000}) getsockopt$inet_int(r0, 0x10d, 0x32, &(0x7f0000001040), &(0x7f00000000c0)=0x4) 431.491451ms ago: executing program 2 (id=663): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6df, &(0x7f0000001a40)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod$loop(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 204.699736ms ago: executing program 2 (id=664): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe8b80, 0xa3) 162.779567ms ago: executing program 0 (id=665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x18) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (fail_nth: 5) 0s ago: executing program 2 (id=666): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000100)={0x2}, 0x4) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x3) r6 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r6, 0x47f6, 0x880e, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000680)="5300000024000ab6d9000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a51cfbf0e9d85e9f75c5cf5897e2e76ef8635f11670f85ea0b5367ae4cbd1d", 0x46}], 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): e from 0 to 16 [ 175.272110][ T6503] erofs (device loop4): mounted with root inode @ nid 36. [ 176.571801][ T6503] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 176.579702][ T6503] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 176.587841][ T6503] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 176.595226][ T6503] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 176.602861][ T6503] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 176.611748][ T6503] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 176.619262][ T6503] syz.4.166: attempt to access beyond end of device [ 176.619262][ T6503] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 176.634409][ T6503] syz.4.166: attempt to access beyond end of device [ 176.634409][ T6503] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 176.648574][ T6503] syz.4.166: attempt to access beyond end of device [ 176.648574][ T6503] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 176.662616][ T6503] syz.4.166: attempt to access beyond end of device [ 176.662616][ T6503] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 176.677320][ T6503] syz.4.166: attempt to access beyond end of device [ 176.677320][ T6503] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 176.690977][ T6503] syz.4.166: attempt to access beyond end of device [ 176.690977][ T6503] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 176.704844][ T6503] syz.4.166: attempt to access beyond end of device [ 176.704844][ T6503] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 177.357344][ T6299] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.378121][ T6515] syz.1.170 uses obsolete (PF_INET,SOCK_PACKET) [ 177.378242][ T6299] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.405406][ T6299] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.560068][ T6299] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.803074][ T6521] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.984695][ T6521] loop3: detected capacity change from 0 to 1024 [ 179.000565][ T6521] hfsplus: Unknown parameter 'oid' [ 179.629755][ T6527] syz.4.173: attempt to access beyond end of device [ 179.629755][ T6527] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 179.727861][ T6535] loop4: detected capacity change from 0 to 512 [ 179.729146][ T6541] netlink: 248 bytes leftover after parsing attributes in process `syz.0.176'. [ 179.769098][ T6535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.912458][ T6535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.914653][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.967829][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.984843][ T6535] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.037801][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.045010][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.118713][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.125957][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.539684][ T6299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.550392][ T6299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.567296][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.683249][ T6571] loop3: detected capacity change from 0 to 64 [ 182.703592][ T6571] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=08adface) [ 182.753048][ T6571] loop3: detected capacity change from 0 to 16 [ 182.767354][ T6571] erofs (device loop3): mounted with root inode @ nid 36. [ 182.855663][ T5899] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 183.082813][ T6573] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 183.090613][ T6573] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 183.098793][ T6573] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 183.106211][ T6573] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 183.113845][ T6573] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 183.121205][ T6573] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 183.129660][ T6573] syz.3.185: attempt to access beyond end of device [ 183.129660][ T6573] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 183.143584][ T6573] syz.3.185: attempt to access beyond end of device [ 183.143584][ T6573] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 183.157748][ T6573] syz.3.185: attempt to access beyond end of device [ 183.157748][ T6573] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 183.172007][ T6573] syz.3.185: attempt to access beyond end of device [ 183.172007][ T6573] loop3: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 183.188156][ T6573] syz.3.185: attempt to access beyond end of device [ 183.188156][ T6573] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 183.201736][ T6573] syz.3.185: attempt to access beyond end of device [ 183.201736][ T6573] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 183.215616][ T6573] syz.3.185: attempt to access beyond end of device [ 183.215616][ T6573] loop3: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 183.254541][ T5899] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 183.283658][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.316408][ T5899] usb 3-1: config 0 descriptor?? [ 183.444161][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.877084][ T5899] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.0001/input/input7 [ 184.032155][ T5899] uclogic 0003:28BD:0933.0001: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 184.103580][ T6567] loop2: detected capacity change from 0 to 2048 [ 184.278973][ T6585] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.403321][ T6590] loop4: detected capacity change from 0 to 32768 [ 185.490128][ T6299] veth0_vlan: entered promiscuous mode [ 185.508282][ T6299] veth1_vlan: entered promiscuous mode [ 185.524441][ T6592] loop1: detected capacity change from 0 to 1024 [ 185.597231][ T6299] veth0_macvtap: entered promiscuous mode [ 185.610867][ T30] audit: type=1800 audit(1745242127.636:5): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.188" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 185.626793][ T6299] veth1_macvtap: entered promiscuous mode [ 185.877970][ T6586] loop4: detected capacity change from 0 to 64 [ 185.885711][ T6586] hfs: Unknown parameter 'pa2t' [ 186.058198][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.068788][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.081116][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.109364][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.144323][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.170240][ T5896] usb 3-1: USB disconnect, device number 2 [ 186.195988][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.226639][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.237391][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.254750][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.270933][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.283060][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.433812][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.446647][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.460209][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.470906][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.480859][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.491431][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.501466][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.515541][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.564445][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.585867][ T6597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.189'. [ 186.604489][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.630334][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.667870][ T6598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 186.680708][ T6597] ip6gretap0: entered promiscuous mode [ 186.872803][ T6597] ip6gretap0: left promiscuous mode [ 187.533568][ T6606] netlink: 248 bytes leftover after parsing attributes in process `syz.1.192'. [ 187.562878][ T6604] loop0: detected capacity change from 0 to 2048 [ 187.611828][ T6607] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.620434][ T6299] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.657696][ T6299] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.667769][ T6299] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.677312][ T6299] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.723034][ T6598] ip6gretap0: entered promiscuous mode [ 187.736479][ T6598] ip6gretap0: left promiscuous mode [ 187.811367][ T6613] syz.2.195: attempt to access beyond end of device [ 187.811367][ T6613] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 187.927494][ T5905] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.980175][ T6619] loop2: detected capacity change from 0 to 512 [ 187.993258][ T6619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.028370][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.052842][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.086978][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.106237][ T6619] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.132128][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 188.930141][ T5905] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 188.944502][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.966768][ T5905] usb 1-1: Product: syz [ 188.971617][ T5905] usb 1-1: Manufacturer: syz [ 188.978503][ T5905] usb 1-1: SerialNumber: syz [ 188.988080][ T5905] usb 1-1: config 0 descriptor?? [ 189.026126][ T5905] as10x_usb: device has been detected [ 189.032407][ T5905] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 189.069920][ T5999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.121926][ T5999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.175954][ T5905] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 189.205168][ T5905] as10x_usb: error during firmware upload part1 [ 189.448225][ T5905] Registered device Sky IT Digital Key (green led) [ 189.450676][ T5905] usb 1-1: USB disconnect, device number 6 [ 190.414220][ T6634] loop4: detected capacity change from 0 to 4096 [ 190.428655][ T5905] Unregistered device Sky IT Digital Key (green led) [ 190.430891][ T6634] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 190.456263][ T5905] as10x_usb: device has been disconnected [ 190.500884][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.534787][ T6634] ntfs3(loop4): ino=19, mi_enum_attr [ 190.562820][ T6634] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 190.602492][ T6642] syz.5.102: attempt to access beyond end of device [ 190.602492][ T6642] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 190.605407][ T6634] ntfs3(loop4): failed to convert "c46c" to cp860 [ 190.654596][ T6634] ntfs3(loop4): ino=20, mi_enum_attr [ 190.661588][ T6648] loop5: detected capacity change from 0 to 512 [ 190.669395][ T6648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.939087][ T6658] loop2: detected capacity change from 0 to 32768 [ 191.970500][ T6648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.990460][ T6659] loop1: detected capacity change from 0 to 64 [ 192.211233][ T6651] loop2: detected capacity change from 0 to 64 [ 192.218660][ T6651] hfs: Unknown parameter 'pa2t' [ 192.273166][ T6648] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.290714][ T6659] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=08adface) [ 192.397996][ T6659] loop1: detected capacity change from 0 to 16 [ 192.489901][ T6659] erofs (device loop1): mounted with root inode @ nid 36. [ 192.525177][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 192.536267][ T6664] loop4: detected capacity change from 0 to 1024 [ 192.703243][ T30] audit: type=1800 audit(1745242134.716:6): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.204" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 192.723602][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.040331][ T6672] erofs (device loop1): readahead error at folio 12 @ nid 36 [ 193.048064][ T6672] erofs (device loop1): readahead error at folio 10 @ nid 36 [ 193.056261][ T6672] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 193.063669][ T6672] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 193.071547][ T6672] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 193.073036][ T6669] loop2: detected capacity change from 0 to 1764 [ 193.079071][ T6672] erofs (device loop1): readahead error at folio 0 @ nid 36 [ 193.093294][ T6672] syz.1.202: attempt to access beyond end of device [ 193.093294][ T6672] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 193.109363][ T6672] syz.1.202: attempt to access beyond end of device [ 193.109363][ T6672] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 193.123814][ T6672] syz.1.202: attempt to access beyond end of device [ 193.123814][ T6672] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 193.138086][ T6672] syz.1.202: attempt to access beyond end of device [ 193.138086][ T6672] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 193.153395][ T6672] syz.1.202: attempt to access beyond end of device [ 193.153395][ T6672] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 193.167943][ T6672] syz.1.202: attempt to access beyond end of device [ 193.167943][ T6672] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 193.182150][ T6672] syz.1.202: attempt to access beyond end of device [ 193.182150][ T6672] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 193.730772][ T6299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.795732][ T30] audit: type=1800 audit(1745242136.296:7): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.203" name="/" dev="9p" ino=2 res=0 errno=0 [ 195.017844][ T6678] loop4: detected capacity change from 0 to 64 [ 195.066877][ T6678] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 195.090639][ T6678] loop4: detected capacity change from 0 to 16 [ 195.110663][ T6678] erofs (device loop4): mounted with root inode @ nid 36. [ 196.334052][ T6690] loop5: detected capacity change from 0 to 2048 [ 196.368503][ T6690] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.433001][ T6688] loop2: detected capacity change from 0 to 4096 [ 196.448460][ T6688] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 196.612002][ T6695] syz.0.213: attempt to access beyond end of device [ 196.612002][ T6695] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 196.674657][ T6688] ntfs3(loop2): ino=19, mi_enum_attr [ 196.706371][ T6688] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 196.782221][ T5823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.288757][ T5823] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.332024][ T6704] loop0: detected capacity change from 0 to 512 [ 197.364191][ T5823] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.379317][ T6688] ntfs3(loop2): failed to convert "c46c" to cp860 [ 197.390833][ T6704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.421079][ T6688] ntfs3(loop2): ino=20, mi_enum_attr [ 197.446642][ T5823] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.497537][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.500984][ T6704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.525166][ T6691] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.552335][ T5823] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.563179][ T6704] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.696678][ T6714] loop3: detected capacity change from 0 to 4096 [ 197.707192][ T6714] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 197.775361][ T6714] ntfs3(loop3): ino=19, mi_enum_attr [ 197.783134][ T6714] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 197.805146][ T6714] ntfs3(loop3): failed to convert "c46c" to cp860 [ 197.812435][ T6714] ntfs3(loop3): ino=20, mi_enum_attr [ 197.829854][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.832571][ T5911] usb 2-1: USB disconnect, device number 2 [ 198.131886][ T6721] loop3: detected capacity change from 0 to 1764 [ 200.566685][ T6718] loop2: detected capacity change from 0 to 32768 [ 200.599778][ T6734] loop0: detected capacity change from 0 to 64 [ 200.858930][ T6734] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=08adface) [ 200.912727][ T6718] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 200.912893][ T6718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 200.963739][ T6734] loop0: detected capacity change from 0 to 16 [ 200.987953][ T6734] erofs (device loop0): mounted with root inode @ nid 36. [ 201.229396][ T6718] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 201.276284][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.227'. [ 201.873544][ T6752] erofs (device loop0): readahead error at folio 12 @ nid 36 [ 201.882110][ T6752] erofs (device loop0): readahead error at folio 10 @ nid 36 [ 201.891320][ T6752] erofs (device loop0): readahead error at folio 6 @ nid 36 [ 201.898983][ T6752] erofs (device loop0): readahead error at folio 4 @ nid 36 [ 201.907973][ T6752] erofs (device loop0): invalid logical cluster 0 at nid 36 [ 201.916425][ T6752] erofs (device loop0): readahead error at folio 0 @ nid 36 [ 201.926472][ T6752] syz.0.222: attempt to access beyond end of device [ 201.926472][ T6752] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 201.941650][ T6752] syz.0.222: attempt to access beyond end of device [ 201.941650][ T6752] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 201.956956][ T6752] syz.0.222: attempt to access beyond end of device [ 201.956956][ T6752] loop0: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 201.972196][ T6752] syz.0.222: attempt to access beyond end of device [ 201.972196][ T6752] loop0: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 201.987881][ T6752] syz.0.222: attempt to access beyond end of device [ 201.987881][ T6752] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 202.097151][ T6752] syz.0.222: attempt to access beyond end of device [ 202.097151][ T6752] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 202.112611][ T6752] syz.0.222: attempt to access beyond end of device [ 202.112611][ T6752] loop0: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 202.237168][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.243800][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.251484][ T6747] loop5: detected capacity change from 0 to 2048 [ 202.899589][ T6747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.187800][ T6759] syz.3.231: attempt to access beyond end of device [ 203.187800][ T6759] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 203.335051][ T6764] loop3: detected capacity change from 0 to 512 [ 203.357898][ T6764] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.421786][ T6764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.442331][ T6775] loop4: detected capacity change from 0 to 64 [ 203.450494][ T6764] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.479888][ T6776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 203.496561][ T6776] ip6gretap0: entered promiscuous mode [ 203.498250][ T6775] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 203.505249][ T6776] ip6gretap0: left promiscuous mode [ 203.549445][ T6775] loop4: detected capacity change from 0 to 16 [ 203.565939][ T6775] erofs (device loop4): mounted with root inode @ nid 36. [ 203.662489][ T6769] loop5: detected capacity change from 0 to 4096 [ 203.674724][ T6769] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 203.823012][ T6769] ntfs3(loop5): ino=19, mi_enum_attr [ 203.828929][ T6769] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 204.178666][ T6778] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 204.187301][ T6778] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 204.196511][ T6778] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 204.204170][ T6778] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 204.213494][ T6778] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 204.220906][ T6778] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 204.229273][ T6778] syz.4.233: attempt to access beyond end of device [ 204.229273][ T6778] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 204.244468][ T6778] syz.4.233: attempt to access beyond end of device [ 204.244468][ T6778] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 204.468671][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.728039][ T6769] ntfs3(loop5): failed to convert "c46c" to cp860 [ 204.788228][ T6769] ntfs3(loop5): ino=20, mi_enum_attr [ 204.788535][ T6781] loop1: detected capacity change from 0 to 64 [ 204.836075][ T6781] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=08adface) [ 204.902653][ T6781] loop1: detected capacity change from 0 to 16 [ 204.936634][ T6781] erofs (device loop1): mounted with root inode @ nid 36. [ 204.961437][ T6785] loop3: detected capacity change from 0 to 2048 [ 205.082269][ T6790] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.242023][ T6789] loop0: detected capacity change from 0 to 2048 [ 205.264592][ T6794] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.510117][ T5896] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 206.164377][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 206.184719][ T5896] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 206.205867][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.217687][ T5896] usb 4-1: Product: syz [ 206.226540][ T5896] usb 4-1: Manufacturer: syz [ 206.233527][ T5896] usb 4-1: SerialNumber: syz [ 206.254895][ T5896] usb 4-1: config 0 descriptor?? [ 206.275907][ T5823] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 206.288032][ T5896] as10x_usb: device has been detected [ 206.294947][ T5896] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 206.338681][ T5896] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 206.355285][ T5896] as10x_usb: error during firmware upload part1 [ 206.370088][ T6803] input: syz0 as /devices/virtual/input/input8 [ 206.372804][ T5896] Registered device Sky IT Digital Key (green led) [ 206.566633][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 206.636842][ T5823] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 206.685032][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.704811][ T5896] usb 4-1: USB disconnect, device number 3 [ 206.747303][ T5823] usb 1-1: Product: syz [ 206.758536][ T5896] Unregistered device Sky IT Digital Key (green led) [ 206.760897][ T5896] as10x_usb: device has been disconnected [ 206.776276][ T5823] usb 1-1: Manufacturer: syz [ 206.800612][ T5823] usb 1-1: SerialNumber: syz [ 206.832553][ T5823] usb 1-1: config 0 descriptor?? [ 206.857579][ T5823] as10x_usb: device has been detected [ 206.865692][ T6806] loop5: detected capacity change from 0 to 2048 [ 206.868730][ T5823] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 206.879347][ T6807] loop2: detected capacity change from 0 to 1764 [ 206.905821][ T6806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.915091][ T5823] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 206.942517][ T5823] as10x_usb: error during firmware upload part1 [ 206.956736][ T5823] Registered device Sky IT Digital Key (green led) [ 207.088342][ T5898] usb 1-1: USB disconnect, device number 7 [ 207.440749][ T5898] Unregistered device Sky IT Digital Key (green led) [ 207.457282][ T5898] as10x_usb: device has been disconnected [ 208.016732][ T6816] loop5: detected capacity change from 0 to 64 [ 208.025891][ T6816] hfs: Unknown parameter 'pa2t' [ 208.843626][ T6809] loop4: detected capacity change from 0 to 32768 [ 211.407860][ T6842] loop2: detected capacity change from 0 to 64 [ 211.445067][ T6842] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=08adface) [ 211.509510][ T6842] loop2: detected capacity change from 0 to 16 [ 211.536451][ T6842] erofs (device loop2): mounted with root inode @ nid 36. [ 211.553148][ T6837] loop5: detected capacity change from 0 to 4096 [ 211.687773][ T6837] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 211.759275][ T6846] input: syz0 as /devices/virtual/input/input9 [ 211.787367][ T5910] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 211.832090][ T6837] ntfs3(loop5): ino=19, mi_enum_attr [ 211.853221][ T6837] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 211.918466][ T6837] ntfs3(loop5): failed to convert "c46c" to cp860 [ 211.930025][ T6837] ntfs3(loop5): ino=20, mi_enum_attr [ 211.953219][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.969599][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.998581][ T6849] loop4: detected capacity change from 0 to 2048 [ 212.005610][ T5910] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 212.023447][ T6851] loop0: detected capacity change from 0 to 1024 [ 212.024936][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.061349][ T6849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.077123][ T5910] usb 2-1: config 0 descriptor?? [ 212.154006][ T30] audit: type=1800 audit(1745242154.156:8): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.258" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 212.314155][ T6855] loop5: detected capacity change from 0 to 1024 [ 212.939058][ T6853] loop3: detected capacity change from 0 to 40427 [ 213.065661][ T6853] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 213.119994][ T12] hfsplus: b-tree write err: -5, ino 4 [ 213.274310][ T6865] loop1: detected capacity change from 0 to 1024 [ 214.440240][ T6878] bio_check_eod: 5 callbacks suppressed [ 214.440268][ T6878] syz.3.259: attempt to access beyond end of device [ 214.440268][ T6878] loop3: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 214.546425][ T6865] hfsplus: xattr search failed [ 214.592070][ T6858] hfsplus: xattr searching failed [ 214.665597][ T30] audit: type=1800 audit(1745242156.686:9): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.251" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 214.741508][ T5847] syz-executor: attempt to access beyond end of device [ 214.741508][ T5847] loop3: rw=2049, sector=45216, nr_sectors = 16 limit=40427 [ 215.015626][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 215.015662][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.015679][ T5847] Call Trace: [ 215.015688][ T5847] [ 215.015697][ T5847] dump_stack_lvl+0x241/0x360 [ 215.015742][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.015767][ T5847] ? _raw_spin_unlock_irqrestore+0xd9/0x140 [ 215.015798][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.015820][ T5847] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 215.015847][ T5847] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.015877][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.015897][ T5847] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 215.015929][ T5847] f2fs_handle_critical_error+0x392/0x5a0 [ 215.015962][ T5847] f2fs_write_end_io+0x563/0x790 [ 215.015998][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 215.016029][ T5847] ? bio_endio+0x7e4/0x890 [ 215.016052][ T5847] ? bio_endio+0x82a/0x890 [ 215.016073][ T5847] __submit_merged_bio+0x2a9/0x710 [ 215.016095][ T5847] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 215.016124][ T5847] f2fs_submit_merged_write_cond+0x29f/0x380 [ 215.016158][ T5847] f2fs_write_data_pages+0x2f99/0x38d0 [ 215.016219][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.016258][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016304][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016325][ T5847] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 215.016356][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016377][ T5847] ? rcu_is_watching+0x15/0xb0 [ 215.016420][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016441][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016462][ T5847] ? check_noncircular+0xee/0x160 [ 215.016486][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016506][ T5847] ? lockdep_unlock+0x8d/0x120 [ 215.016542][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.016571][ T5847] do_writepages+0x366/0x890 [ 215.016606][ T5847] ? __pfx_do_writepages+0x10/0x10 [ 215.016628][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016648][ T5847] ? __lock_acquire+0xad5/0xd80 [ 215.016678][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016698][ T5847] ? do_raw_spin_lock+0x151/0x370 [ 215.016729][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016750][ T5847] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.016779][ T5847] filemap_fdatawrite+0x1f2/0x2a0 [ 215.016810][ T5847] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 215.016878][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.016899][ T5847] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.016928][ T5847] f2fs_sync_dirty_inodes+0x34f/0x860 [ 215.016971][ T5847] f2fs_write_checkpoint+0x857/0x1da0 [ 215.017017][ T5847] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 215.017086][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.017107][ T5847] ? kill_f2fs_super+0x290/0x6d0 [ 215.017141][ T5847] kill_f2fs_super+0x2b8/0x6d0 [ 215.017176][ T5847] ? __pfx_kill_f2fs_super+0x10/0x10 [ 215.017211][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.017231][ T5847] ? shrinker_free+0x2ca/0x3d0 [ 215.017252][ T5847] deactivate_locked_super+0xc6/0x130 [ 215.017278][ T5847] cleanup_mnt+0x422/0x4c0 [ 215.017301][ T5847] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.017323][ T5847] task_work_run+0x253/0x310 [ 215.017355][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 215.017387][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.017412][ T5847] syscall_exit_to_user_mode+0x13f/0x340 [ 215.017436][ T5847] do_syscall_64+0x100/0x210 [ 215.017461][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.017480][ T5847] RIP: 0033:0x7f8fef18f497 [ 215.017501][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 215.017515][ T5847] RSP: 002b:00007ffc2d6f0ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 215.017537][ T5847] RAX: 0000000000000000 RBX: 00007f8fef210854 RCX: 00007f8fef18f497 [ 215.017550][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2d6f0fa0 [ 215.017561][ T5847] RBP: 00007ffc2d6f0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 215.017573][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2d6f2090 [ 215.017585][ T5847] R13: 00007f8fef210854 R14: 0000000000034634 R15: 00007ffc2d6f3160 [ 215.017613][ T5847] [ 215.017651][ T5847] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 215.083906][ T6888] loop5: detected capacity change from 0 to 2048 [ 215.141871][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 215.484367][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 215.540233][ T6858] hfsplus: xattr search failed [ 215.567277][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 215.567318][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.567334][ T5847] Call Trace: [ 215.567359][ T5847] [ 215.567369][ T5847] dump_stack_lvl+0x241/0x360 [ 215.567429][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.567467][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.567495][ T5847] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 215.567537][ T5847] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.567577][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.567605][ T5847] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 215.567645][ T5847] f2fs_handle_critical_error+0x392/0x5a0 [ 215.567690][ T5847] f2fs_write_end_io+0x563/0x790 [ 215.567742][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 215.567784][ T5847] ? bio_endio+0x7e4/0x890 [ 215.567815][ T5847] ? bio_endio+0x82a/0x890 [ 215.567844][ T5847] __submit_merged_bio+0x2a9/0x710 [ 215.567873][ T5847] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 215.567912][ T5847] f2fs_submit_merged_write_cond+0x29f/0x380 [ 215.567958][ T5847] f2fs_write_data_pages+0x2f99/0x38d0 [ 215.568039][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.568092][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568157][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568184][ T5847] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 215.568225][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568253][ T5847] ? rcu_is_watching+0x15/0xb0 [ 215.568295][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568323][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568350][ T5847] ? check_noncircular+0xee/0x160 [ 215.568398][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568426][ T5847] ? lockdep_unlock+0x8d/0x120 [ 215.568473][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.568513][ T5847] do_writepages+0x366/0x890 [ 215.568557][ T5847] ? __pfx_do_writepages+0x10/0x10 [ 215.568587][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568614][ T5847] ? __lock_acquire+0xad5/0xd80 [ 215.568655][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568683][ T5847] ? do_raw_spin_lock+0x151/0x370 [ 215.568726][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568754][ T5847] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.568794][ T5847] filemap_fdatawrite+0x1f2/0x2a0 [ 215.568833][ T5847] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 215.568917][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.568945][ T5847] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.568986][ T5847] f2fs_sync_dirty_inodes+0x34f/0x860 [ 215.569043][ T5847] f2fs_write_checkpoint+0x857/0x1da0 [ 215.569107][ T5847] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 215.569200][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.569230][ T5847] ? kill_f2fs_super+0x290/0x6d0 [ 215.569275][ T5847] kill_f2fs_super+0x2b8/0x6d0 [ 215.569321][ T5847] ? __pfx_kill_f2fs_super+0x10/0x10 [ 215.569370][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.569403][ T5847] ? shrinker_free+0x2ca/0x3d0 [ 215.569430][ T5847] deactivate_locked_super+0xc6/0x130 [ 215.569465][ T5847] cleanup_mnt+0x422/0x4c0 [ 215.569494][ T5847] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.569525][ T5847] task_work_run+0x253/0x310 [ 215.569568][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 215.569606][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.569643][ T5847] syscall_exit_to_user_mode+0x13f/0x340 [ 215.569675][ T5847] do_syscall_64+0x100/0x210 [ 215.569711][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.569735][ T5847] RIP: 0033:0x7f8fef18f497 [ 215.569757][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 215.569777][ T5847] RSP: 002b:00007ffc2d6f0ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 215.569804][ T5847] RAX: 0000000000000000 RBX: 00007f8fef210854 RCX: 00007f8fef18f497 [ 215.569821][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2d6f0fa0 [ 215.569837][ T5847] RBP: 00007ffc2d6f0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 215.569852][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2d6f2090 [ 215.569868][ T5847] R13: 00007f8fef210854 R14: 0000000000034634 R15: 00007ffc2d6f3160 [ 215.569907][ T5847] [ 215.569917][ T5847] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 215.830190][ T6891] loop0: detected capacity change from 0 to 32768 [ 216.012481][ T6891] btrfs: Unknown parameter 'seclabel' [ 216.233375][ T6858] hfsplus: can't free extent [ 216.318026][ T5910] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 216.342104][ T5999] hfsplus: b-tree write err: -5, ino 4 [ 217.295847][ T5910] usb 2-1: USB disconnect, device number 3 [ 218.145300][ T6902] input: syz0 as /devices/virtual/input/input10 [ 218.492174][ T6901] loop2: detected capacity change from 0 to 4096 [ 218.524516][ T6901] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 219.393764][ T6910] loop4: detected capacity change from 0 to 64 [ 219.403094][ T6910] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 219.411839][ T6901] ntfs3(loop2): ino=19, mi_enum_attr [ 219.429851][ T6910] loop4: detected capacity change from 0 to 16 [ 219.448450][ T6910] erofs (device loop4): mounted with root inode @ nid 36. [ 219.456370][ T6901] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 219.490543][ T6901] ntfs3(loop2): failed to convert "c46c" to cp860 [ 219.705801][ T6901] ntfs3(loop2): ino=20, mi_enum_attr [ 220.661432][ T6926] loop4: detected capacity change from 0 to 64 [ 220.715061][ T6927] loop2: detected capacity change from 0 to 64 [ 220.735713][ T6926] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 221.082360][ T6927] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=08adface) [ 221.113878][ T6927] loop2: detected capacity change from 0 to 16 [ 221.122276][ T6926] loop4: detected capacity change from 0 to 16 [ 221.143695][ T6927] erofs (device loop2): mounted with root inode @ nid 36. [ 221.151433][ T6926] erofs (device loop4): mounted with root inode @ nid 36. [ 221.153707][ T6931] loop1: detected capacity change from 0 to 64 [ 221.374664][ T6931] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=08adface) [ 221.938974][ T6936] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 221.947663][ T6936] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 221.956702][ T6936] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 221.964475][ T6936] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 221.973900][ T6936] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 221.981516][ T6936] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 221.992210][ T6936] syz.4.279: attempt to access beyond end of device [ 221.992210][ T6936] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 222.006965][ T6936] syz.4.279: attempt to access beyond end of device [ 222.006965][ T6936] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 222.022434][ T6936] syz.4.279: attempt to access beyond end of device [ 222.022434][ T6936] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 222.037843][ T6936] syz.4.279: attempt to access beyond end of device [ 222.037843][ T6936] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 222.053623][ T6936] syz.4.279: attempt to access beyond end of device [ 222.053623][ T6936] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 222.068392][ T6936] syz.4.279: attempt to access beyond end of device [ 222.068392][ T6936] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 222.083070][ T6936] syz.4.279: attempt to access beyond end of device [ 222.083070][ T6936] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 222.409583][ T6931] loop1: detected capacity change from 0 to 16 [ 222.559284][ T6931] erofs (device loop1): mounted with root inode @ nid 36. [ 223.015675][ T6942] erofs (device loop1): readahead error at folio 12 @ nid 36 [ 223.024366][ T6942] erofs (device loop1): readahead error at folio 10 @ nid 36 [ 223.034188][ T6942] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 223.041809][ T6942] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 223.051077][ T6942] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 223.058746][ T6942] erofs (device loop1): readahead error at folio 0 @ nid 36 [ 223.067237][ T6942] syz.1.282: attempt to access beyond end of device [ 223.067237][ T6942] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 223.082865][ T6942] syz.1.282: attempt to access beyond end of device [ 223.082865][ T6942] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 223.099112][ T6942] syz.1.282: attempt to access beyond end of device [ 223.099112][ T6942] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 223.297970][ T6942] erofs (device loop1): read error -5 @ 43 of nid 36 [ 224.159073][ T6945] loop3: detected capacity change from 0 to 2048 [ 226.403745][ T6956] loop5: detected capacity change from 0 to 64 [ 226.483503][ T6956] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=08adface) [ 226.888156][ T6956] loop5: detected capacity change from 0 to 16 [ 226.930097][ T6956] erofs (device loop5): mounted with root inode @ nid 36. [ 227.418650][ T6970] erofs (device loop5): readahead error at folio 12 @ nid 36 [ 227.428166][ T6970] erofs (device loop5): readahead error at folio 10 @ nid 36 [ 227.438408][ T6970] erofs (device loop5): readahead error at folio 6 @ nid 36 [ 227.446582][ T6970] erofs (device loop5): readahead error at folio 4 @ nid 36 [ 227.456482][ T6970] erofs (device loop5): invalid logical cluster 0 at nid 36 [ 227.464067][ T6970] erofs (device loop5): readahead error at folio 0 @ nid 36 [ 227.472782][ T6970] bio_check_eod: 5 callbacks suppressed [ 227.472830][ T6970] syz.5.288: attempt to access beyond end of device [ 227.472830][ T6970] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 227.494504][ T6970] syz.5.288: attempt to access beyond end of device [ 227.494504][ T6970] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 227.565584][ T6970] syz.5.288: attempt to access beyond end of device [ 227.565584][ T6970] loop5: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 227.581722][ T6970] syz.5.288: attempt to access beyond end of device [ 227.581722][ T6970] loop5: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 227.598760][ T6970] syz.5.288: attempt to access beyond end of device [ 227.598760][ T6970] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 227.616659][ T6970] syz.5.288: attempt to access beyond end of device [ 227.616659][ T6970] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 227.632613][ T6970] syz.5.288: attempt to access beyond end of device [ 227.632613][ T6970] loop5: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 228.410732][ T6974] loop3: detected capacity change from 0 to 64 [ 228.529370][ T6974] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=08adface) [ 228.594742][ T6974] loop3: detected capacity change from 0 to 16 [ 228.619157][ T6974] erofs (device loop3): mounted with root inode @ nid 36. [ 229.525639][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 229.687420][ T5897] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 229.718003][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.748805][ T5897] usb 2-1: config 0 descriptor?? [ 229.767917][ T6993] loop0: detected capacity change from 0 to 1024 [ 229.879371][ T30] audit: type=1800 audit(1745242171.906:10): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.302" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 230.180780][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 230.188687][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 230.195155][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 230.202131][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 231.897276][ T5897] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0003/input/input11 [ 231.997084][ T6981] loop1: detected capacity change from 0 to 2048 [ 232.538515][ T7004] loop5: detected capacity change from 0 to 1024 [ 232.568298][ T6981] NILFS (loop1): error -4 creating segctord thread [ 232.610996][ T7004] hfsplus: Unknown parameter 'oid' [ 232.690392][ T7012] loop3: detected capacity change from 0 to 64 [ 232.749715][ T7012] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=08adface) [ 232.779164][ T5897] uclogic 0003:28BD:0933.0003: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 232.804973][ T5911] usb 2-1: USB disconnect, device number 4 [ 232.838460][ T7012] loop3: detected capacity change from 0 to 16 [ 232.857083][ T7012] erofs (device loop3): mounted with root inode @ nid 36. [ 233.269232][ T7025] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 233.278056][ T7025] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 233.288039][ T7025] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 233.295932][ T7025] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 233.306124][ T7025] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 233.313620][ T7025] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 233.322270][ T7025] syz.3.307: attempt to access beyond end of device [ 233.322270][ T7025] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 233.337533][ T7025] syz.3.307: attempt to access beyond end of device [ 233.337533][ T7025] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 233.353852][ T7025] syz.3.307: attempt to access beyond end of device [ 233.353852][ T7025] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 233.370908][ T7025] syz.3.307: attempt to access beyond end of device [ 233.370908][ T7025] loop3: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 233.437128][ T7025] syz.3.307: attempt to access beyond end of device [ 233.437128][ T7025] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 233.453976][ T7025] syz.3.307: attempt to access beyond end of device [ 233.453976][ T7025] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 233.468914][ T7025] syz.3.307: attempt to access beyond end of device [ 233.468914][ T7025] loop3: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 233.939415][ T5899] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 234.131909][ T5899] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.153647][ T7034] loop4: detected capacity change from 0 to 64 [ 234.162540][ T5899] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 234.212746][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.308052][ T7034] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 234.745390][ T7034] loop4: detected capacity change from 0 to 16 [ 234.754320][ T7034] erofs (device loop4): mounted with root inode @ nid 36. [ 235.221284][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.265416][ T7022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 235.278645][ T5899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.286517][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 235.470170][ T5898] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.697218][ T5898] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.717721][ T5898] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.727682][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.028797][ T7048] loop1: detected capacity change from 0 to 64 [ 236.036231][ T7048] hfs: Unknown parameter 'pa2t' [ 236.691498][ T7031] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 236.720124][ T5898] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.863791][ T5911] usb 1-1: USB disconnect, device number 8 [ 237.009092][ T5898] usb 3-1: USB disconnect, device number 3 [ 237.073450][ T7055] input: syz0 as /devices/virtual/input/input12 [ 237.080649][ T7056] netlink: 248 bytes leftover after parsing attributes in process `syz.1.319'. [ 239.139127][ T7077] netlink: 248 bytes leftover after parsing attributes in process `syz.1.325'. [ 239.811336][ T7089] loop0: detected capacity change from 0 to 64 [ 239.907809][ T7089] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=08adface) [ 240.259257][ T7089] loop0: detected capacity change from 0 to 16 [ 240.390456][ T7093] loop2: detected capacity change from 0 to 64 [ 240.407282][ T7093] hfs: Unknown parameter 'pa2t' [ 240.902004][ T7098] loop4: detected capacity change from 0 to 64 [ 240.909201][ T7089] erofs (device loop0): mounted with root inode @ nid 36. [ 241.956497][ T7098] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 242.014057][ T7100] loop1: detected capacity change from 0 to 64 [ 242.021798][ T7100] hfs: Unknown parameter 'pa2t' [ 242.098523][ T7098] loop4: detected capacity change from 0 to 16 [ 242.193024][ T7098] erofs (device loop4): mounted with root inode @ nid 36. [ 242.571403][ T7112] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 242.580519][ T7112] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 242.589941][ T7112] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 242.597712][ T7112] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 242.607486][ T7112] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 242.615126][ T7112] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 242.624401][ T7112] syz.4.330: attempt to access beyond end of device [ 242.624401][ T7112] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 242.641696][ T7112] syz.4.330: attempt to access beyond end of device [ 242.641696][ T7112] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 242.657762][ T7112] syz.4.330: attempt to access beyond end of device [ 242.657762][ T7112] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 242.674729][ T7112] syz.4.330: attempt to access beyond end of device [ 242.674729][ T7112] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 242.691944][ T7112] syz.4.330: attempt to access beyond end of device [ 242.691944][ T7112] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 242.759771][ T7112] syz.4.330: attempt to access beyond end of device [ 242.759771][ T7112] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 242.777649][ T7112] syz.4.330: attempt to access beyond end of device [ 242.777649][ T7112] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 242.888645][ T7112] syz.4.330: attempt to access beyond end of device [ 242.888645][ T7112] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 242.904317][ T7112] erofs (device loop4): read error -5 @ 43 of nid 36 [ 243.250513][ T7117] input: syz0 as /devices/virtual/input/input13 [ 243.600042][ T7127] loop0: detected capacity change from 0 to 1764 [ 244.351820][ T7129] loop5: detected capacity change from 0 to 1024 [ 244.637529][ T7129] hfsplus: Unknown parameter 'oid' [ 244.706685][ T7136] loop3: detected capacity change from 0 to 16 [ 244.763468][ T7136] erofs: Unknown parameter 'ÿÿ' [ 245.441597][ T7141] loop3: detected capacity change from 0 to 4096 [ 245.697982][ T7150] loop2: detected capacity change from 0 to 512 [ 245.710229][ T7150] EXT4-fs: Ignoring removed orlov option [ 245.791818][ T7150] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.870842][ T5899] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 245.903226][ T7150] EXT4-fs (loop2): 1 orphan inode deleted [ 245.909318][ T7150] EXT4-fs (loop2): 1 truncate cleaned up [ 245.926785][ T7150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.461704][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.489032][ T5899] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 246.519210][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.600005][ T5899] usb 5-1: config 0 descriptor?? [ 247.054216][ T5899] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0004/input/input14 [ 247.085012][ T5899] uclogic 0003:28BD:0933.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 248.015394][ T7146] loop4: detected capacity change from 0 to 2048 [ 248.374290][ T7177] netlink: 'syz.5.346': attribute type 10 has an invalid length. [ 248.390036][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.405613][ T7177] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 248.979041][ T7146] NILFS (loop4): error -4 creating segctord thread [ 249.191682][ T7185] fuse: Bad value for 'fd' [ 249.273776][ T5896] usb 5-1: USB disconnect, device number 4 [ 249.547614][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'. [ 249.597958][ T7193] bridge0: entered promiscuous mode [ 249.629675][ T7193] bridge0: left promiscuous mode [ 249.696394][ T5898] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 249.809204][ T7198] loop3: detected capacity change from 0 to 16 [ 249.838940][ T7198] erofs: Unknown parameter 'ÿÿ' [ 249.875714][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 249.905236][ T5898] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 249.936323][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.975770][ T5898] usb 2-1: Product: syz [ 249.980044][ T5898] usb 2-1: Manufacturer: syz [ 249.984655][ T5898] usb 2-1: SerialNumber: syz [ 250.044235][ T5898] usb 2-1: config 0 descriptor?? [ 250.079430][ T5898] as10x_usb: device has been detected [ 250.080393][ T7204] loop3: detected capacity change from 0 to 4096 [ 250.100775][ T5898] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 250.402618][ T5898] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 250.413097][ T7211] loop0: detected capacity change from 0 to 2048 [ 250.876548][ T5898] as10x_usb: error during firmware upload part1 [ 250.883663][ T5898] Registered device Sky IT Digital Key (green led) [ 250.938053][ T7214] loop5: detected capacity change from 0 to 64 [ 250.953368][ T7214] hfs: Unknown parameter 'pa2t' [ 250.970243][ T5898] usb 2-1: USB disconnect, device number 5 [ 250.995132][ T7215] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.020471][ T5898] Unregistered device Sky IT Digital Key (green led) [ 251.022510][ T5898] as10x_usb: device has been disconnected [ 251.282406][ T30] audit: type=1800 audit(1745242193.306:11): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.367" name="/newroot/56/bus" dev="tmpfs" ino=356 res=0 errno=0 [ 251.306289][ T5897] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 251.775675][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 252.465970][ T7229] fuse: Bad value for 'fd' [ 252.697811][ T5897] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 253.174603][ T7236] loop2: detected capacity change from 0 to 64 [ 253.182207][ T7236] hfs: Unknown parameter 'pa2t' [ 253.328378][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.343362][ T5897] usb 1-1: Product: syz [ 253.347681][ T5897] usb 1-1: Manufacturer: syz [ 253.352290][ T5897] usb 1-1: SerialNumber: syz [ 253.503431][ T5897] usb 1-1: config 0 descriptor?? [ 253.515718][ T5897] usb 1-1: can't set config #0, error -71 [ 253.535995][ T5897] usb 1-1: USB disconnect, device number 9 [ 254.933577][ T7250] loop3: detected capacity change from 0 to 16 [ 254.998485][ T7250] erofs: Unknown parameter 'ÿÿcgroup.net/syz0' [ 255.120854][ T7260] loop4: detected capacity change from 0 to 64 [ 255.215113][ T7260] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 255.238363][ T7250] loop3: detected capacity change from 0 to 4096 [ 255.388539][ T7260] loop4: detected capacity change from 0 to 16 [ 255.425084][ T7260] erofs (device loop4): mounted with root inode @ nid 36. [ 255.656073][ T5898] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 256.175942][ T5899] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 256.194579][ T5897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 256.212635][ T7275] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 256.221446][ T7275] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 256.229817][ T7275] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 256.237311][ T7275] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 256.244923][ T7275] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 256.252411][ T7275] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 256.259959][ T7275] syz.4.382: attempt to access beyond end of device [ 256.259959][ T7275] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 256.273889][ T7275] syz.4.382: attempt to access beyond end of device [ 256.273889][ T7275] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 256.289554][ T7275] syz.4.382: attempt to access beyond end of device [ 256.289554][ T7275] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 256.303621][ T7275] syz.4.382: attempt to access beyond end of device [ 256.303621][ T7275] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 256.318081][ T7275] syz.4.382: attempt to access beyond end of device [ 256.318081][ T7275] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 256.331692][ T7275] syz.4.382: attempt to access beyond end of device [ 256.331692][ T7275] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 256.345707][ T7275] syz.4.382: attempt to access beyond end of device [ 256.345707][ T7275] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 256.375524][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 256.384984][ T5898] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 256.397452][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.407869][ T5898] usb 6-1: Product: syz [ 256.412713][ T5898] usb 6-1: Manufacturer: syz [ 256.419769][ T5898] usb 6-1: SerialNumber: syz [ 256.446869][ T5898] usb 6-1: config 0 descriptor?? [ 256.466112][ T5898] as10x_usb: device has been detected [ 256.472451][ T5898] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 256.505663][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 256.518912][ T5897] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.533826][ T5899] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 256.547895][ T5898] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 256.558141][ T5897] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.568499][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.583706][ T5898] as10x_usb: error during firmware upload part1 [ 256.590872][ T5897] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.601822][ T5899] usb 1-1: Product: syz [ 256.610708][ T5899] usb 1-1: Manufacturer: syz [ 256.618420][ T5898] Registered device Sky IT Digital Key (green led) [ 256.872817][ T5898] usb 6-1: USB disconnect, device number 3 [ 256.885386][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.893669][ T5899] usb 1-1: SerialNumber: syz [ 256.905830][ T5899] usb 1-1: config 0 descriptor?? [ 256.914348][ T7274] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 257.630780][ T5897] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.638869][ T5899] as10x_usb: device has been detected [ 257.765057][ T5898] Unregistered device Sky IT Digital Key (green led) [ 257.782174][ T5898] as10x_usb: device has been disconnected [ 257.797215][ T5899] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 257.872875][ T5899] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 257.894852][ T5897] usb 2-1: USB disconnect, device number 6 [ 257.924851][ T5899] as10x_usb: error during firmware upload part1 [ 257.928168][ T7290] fuse: Invalid rootmode [ 257.955779][ T5899] Registered device Sky IT Digital Key (green led) [ 257.963912][ T5899] usb 1-1: USB disconnect, device number 10 [ 258.006735][ T5899] Unregistered device Sky IT Digital Key (green led) [ 258.008605][ T5899] as10x_usb: device has been disconnected [ 258.587114][ T7309] loop3: detected capacity change from 0 to 16 [ 258.629739][ T7309] erofs: Unknown parameter 'ÿÿcgroup.net/syz0' [ 259.311490][ T7309] loop3: detected capacity change from 0 to 4096 [ 262.122366][ T7338] fuse: Invalid rootmode [ 262.151926][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.404'. [ 262.161985][ T7339] loop1: detected capacity change from 0 to 64 [ 262.205097][ T7339] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=08adface) [ 262.294647][ T7337] bridge0: entered promiscuous mode [ 262.313346][ T7339] loop1: detected capacity change from 0 to 16 [ 262.361163][ T7337] bridge0: left promiscuous mode [ 262.384423][ T7341] loop0: detected capacity change from 0 to 2048 [ 262.391497][ T7339] erofs (device loop1): mounted with root inode @ nid 36. [ 262.420739][ T7341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.736563][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.742957][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.905349][ T7367] loop4: detected capacity change from 0 to 16 [ 264.964920][ T7367] erofs: Unknown parameter 'ÿÿcgroup.net/syz0' [ 265.013396][ T7343] loop2: detected capacity change from 0 to 40427 [ 265.242633][ T7367] loop4: detected capacity change from 0 to 4096 [ 266.354642][ T7386] fuse: Invalid rootmode [ 268.509331][ T7404] loop4: detected capacity change from 0 to 64 [ 268.600614][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'. [ 268.642387][ T7404] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 268.663450][ T7405] ip6gretap0: entered promiscuous mode [ 268.682482][ T7405] ip6gretap0: left promiscuous mode [ 268.840993][ T7407] netlink: 'syz.5.424': attribute type 10 has an invalid length. [ 269.311236][ T7404] loop4: detected capacity change from 0 to 16 [ 269.348374][ T7404] erofs (device loop4): mounted with root inode @ nid 36. [ 270.774871][ T7410] loop3: detected capacity change from 0 to 64 [ 270.782506][ T7410] hfs: Unknown parameter 'pa2t' [ 270.968276][ T56] Bluetooth: hci5: command 0x0406 tx timeout [ 271.328381][ T7419] loop2: detected capacity change from 0 to 1024 [ 272.283127][ T30] audit: type=1800 audit(1745242214.306:12): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.426" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 272.336077][ T7419] hfsplus: request for non-existent node 16777216 in B*Tree [ 272.343909][ T7419] hfsplus: request for non-existent node 16777216 in B*Tree [ 272.818798][ T7435] loop4: detected capacity change from 0 to 16 [ 272.870690][ T7435] erofs: Unknown parameter 'ÿÿcgroup.net/syz0' [ 272.957999][ T7430] loop0: detected capacity change from 0 to 4096 [ 273.017667][ T7430] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 273.192763][ T7435] loop4: detected capacity change from 0 to 4096 [ 273.215674][ T7430] ntfs3(loop0): ino=19, mi_enum_attr [ 273.221201][ T7430] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 273.257977][ T7430] ntfs3(loop0): failed to convert "c46c" to cp860 [ 273.286422][ T7430] ntfs3(loop0): ino=20, mi_enum_attr [ 273.475895][ T5910] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 273.530613][ T7443] loop4: detected capacity change from 0 to 2048 [ 273.707338][ T7451] loop1: detected capacity change from 0 to 64 [ 273.822909][ T7451] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=08adface) [ 273.837115][ T7443] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.869114][ T7451] loop1: detected capacity change from 0 to 16 [ 273.907179][ T5910] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 274.232032][ T7451] erofs (device loop1): mounted with root inode @ nid 36. [ 274.308040][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.562782][ T5910] usb 4-1: config 0 descriptor?? [ 275.054157][ T5910] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.0005/input/input15 [ 275.208702][ T7464] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 275.256122][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.282150][ T7464] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 275.703133][ T7441] loop3: detected capacity change from 0 to 2048 [ 275.881904][ T5910] uclogic 0003:28BD:0933.0005: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 275.925275][ T7468] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.281507][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 277.772992][ T5910] usb 4-1: USB disconnect, device number 4 [ 278.102012][ T7484] loop4: detected capacity change from 0 to 16 [ 278.111441][ T7484] erofs: Unknown parameter 'ÿÿcgroup.net/syz0' [ 278.369562][ T7489] loop4: detected capacity change from 0 to 4096 [ 279.241973][ T7497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 279.263182][ T7497] bridge0: entered promiscuous mode [ 279.289852][ T7497] bridge0: left promiscuous mode [ 279.351104][ T7501] loop3: detected capacity change from 0 to 64 [ 279.475621][ T7501] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=08adface) [ 279.544853][ T7501] loop3: detected capacity change from 0 to 16 [ 279.600621][ T7501] erofs (device loop3): mounted with root inode @ nid 36. [ 281.104050][ T7516] netlink: 'syz.0.458': attribute type 10 has an invalid length. [ 281.799257][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.460'. [ 282.218670][ T5911] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 282.438134][ T5911] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.705555][ T5911] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 282.728865][ T5911] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.738969][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.769112][ T7513] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 283.485305][ T5911] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.558212][ T5911] usb 5-1: USB disconnect, device number 5 [ 284.473177][ T7540] loop5: detected capacity change from 0 to 1764 [ 284.522968][ T7544] loop4: detected capacity change from 0 to 16 [ 284.535659][ T7544] erofs: Unknown parameter 'ÿÿcgroup.net/syz0' [ 285.523694][ T7550] loop4: detected capacity change from 0 to 4096 [ 287.310344][ T7574] loop3: detected capacity change from 0 to 64 [ 287.320038][ T7572] loop2: detected capacity change from 0 to 64 [ 287.348710][ T7572] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=08adface) [ 287.377876][ T7574] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=08adface) [ 287.408136][ T7572] loop2: detected capacity change from 0 to 16 [ 287.432928][ T7572] erofs (device loop2): mounted with root inode @ nid 36. [ 287.453180][ T7574] loop3: detected capacity change from 0 to 16 [ 287.535780][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 287.560685][ T7574] erofs (device loop3): mounted with root inode @ nid 36. [ 287.741115][ T5899] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.828337][ T7583] erofs (device loop2): readahead error at folio 12 @ nid 36 [ 287.837440][ T7583] erofs (device loop2): readahead error at folio 10 @ nid 36 [ 287.847139][ T7583] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 287.854776][ T7583] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 287.864521][ T7583] erofs (device loop2): invalid logical cluster 0 at nid 36 [ 287.871991][ T7583] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 287.881486][ T7583] syz.2.475: attempt to access beyond end of device [ 287.881486][ T7583] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 287.896695][ T7583] syz.2.475: attempt to access beyond end of device [ 287.896695][ T7583] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 287.912468][ T7583] syz.2.475: attempt to access beyond end of device [ 287.912468][ T7583] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 287.928007][ T7583] syz.2.475: attempt to access beyond end of device [ 287.928007][ T7583] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 287.945214][ T7583] syz.2.475: attempt to access beyond end of device [ 287.945214][ T7583] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 288.012508][ T7583] syz.2.475: attempt to access beyond end of device [ 288.012508][ T7583] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 288.028261][ T7583] syz.2.475: attempt to access beyond end of device [ 288.028261][ T7583] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 288.145195][ T7583] syz.2.475: attempt to access beyond end of device [ 288.145195][ T7583] loop2: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 288.160535][ T7583] erofs (device loop2): read error -5 @ 43 of nid 36 [ 288.316681][ T5899] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 288.326811][ T5899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.336017][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.351338][ T7573] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 288.395413][ T5899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.630048][ T5899] usb 5-1: USB disconnect, device number 6 [ 289.142924][ T7595] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 289.151920][ T7595] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 289.163539][ T7595] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 289.171328][ T7595] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 289.181079][ T7595] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 289.188682][ T7595] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 289.197753][ T7595] syz.3.477: attempt to access beyond end of device [ 289.197753][ T7595] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 289.215336][ T7595] syz.3.477: attempt to access beyond end of device [ 289.215336][ T7595] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 289.311997][ T7595] erofs (device loop3): read error -5 @ 43 of nid 36 [ 290.783015][ T7606] loop5: detected capacity change from 0 to 16 [ 290.801458][ T7606] erofs: Unknown parameter 'ÿÿcgroup.net/syz0' [ 291.790870][ T7591] loop0: detected capacity change from 0 to 32768 [ 291.802659][ T7610] loop5: detected capacity change from 0 to 4096 [ 291.849690][ T7591] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop0": -EINTR [ 292.000867][ T7618] loop4: detected capacity change from 0 to 64 [ 292.067434][ T7618] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 292.299070][ T7629] loop1: detected capacity change from 0 to 64 [ 292.331177][ T7629] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=08adface) [ 292.677442][ T7634] loop2: detected capacity change from 0 to 64 [ 292.692607][ T7634] hfs: Unknown parameter 'pa2t' [ 293.338649][ T7629] loop1: detected capacity change from 0 to 16 [ 293.388290][ T7629] erofs (device loop1): mounted with root inode @ nid 36. [ 293.448647][ T7637] loop2: detected capacity change from 0 to 64 [ 293.606762][ T7637] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=08adface) [ 293.652252][ T7637] loop2: detected capacity change from 0 to 16 [ 293.687723][ T7637] erofs (device loop2): mounted with root inode @ nid 36. [ 294.190618][ T7642] loop0: detected capacity change from 0 to 64 [ 294.198470][ T7642] hfs: Unknown parameter 'pa2t' [ 294.213301][ T7644] erofs (device loop2): readahead error at folio 12 @ nid 36 [ 294.221846][ T7644] erofs (device loop2): readahead error at folio 10 @ nid 36 [ 294.230837][ T7644] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 294.239120][ T7644] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 294.248725][ T7644] erofs (device loop2): invalid logical cluster 0 at nid 36 [ 294.257137][ T7644] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 294.265102][ T7644] bio_check_eod: 6 callbacks suppressed [ 294.265162][ T7644] syz.2.497: attempt to access beyond end of device [ 294.265162][ T7644] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 294.399656][ T7644] syz.2.497: attempt to access beyond end of device [ 294.399656][ T7644] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 294.414604][ T7644] syz.2.497: attempt to access beyond end of device [ 294.414604][ T7644] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 294.429717][ T7644] syz.2.497: attempt to access beyond end of device [ 294.429717][ T7644] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 294.445262][ T7644] syz.2.497: attempt to access beyond end of device [ 294.445262][ T7644] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 294.460371][ T7644] syz.2.497: attempt to access beyond end of device [ 294.460371][ T7644] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 294.474885][ T7644] syz.2.497: attempt to access beyond end of device [ 294.474885][ T7644] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 294.605113][ T7644] syz.2.497: attempt to access beyond end of device [ 294.605113][ T7644] loop2: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 294.619593][ T7644] erofs (device loop2): read error -5 @ 43 of nid 36 [ 295.898504][ T7646] erofs (device loop1): readahead error at folio 12 @ nid 36 [ 295.906396][ T7646] erofs (device loop1): readahead error at folio 10 @ nid 36 [ 295.914545][ T7646] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 295.936110][ T7646] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 295.943914][ T7646] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 295.976308][ T7646] erofs (device loop1): readahead error at folio 0 @ nid 36 [ 295.984499][ T7646] syz.1.495: attempt to access beyond end of device [ 295.984499][ T7646] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 296.044307][ T7646] syz.1.495: attempt to access beyond end of device [ 296.044307][ T7646] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 296.102973][ T7649] loop4: detected capacity change from 0 to 64 [ 296.198698][ T7649] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 296.581016][ T7649] loop4: detected capacity change from 0 to 16 [ 296.757985][ T7649] erofs (device loop4): mounted with root inode @ nid 36. [ 296.779203][ T7649] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 296.787099][ T7649] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 296.795090][ T7649] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 296.803127][ T7649] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 296.811164][ T7649] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 296.819098][ T7649] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 297.092273][ T7659] loop3: detected capacity change from 0 to 64 [ 297.101889][ T7659] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=08adface) [ 297.123998][ T7659] loop3: detected capacity change from 0 to 16 [ 297.139061][ T7659] erofs (device loop3): mounted with root inode @ nid 36. [ 298.416835][ T7665] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 298.466513][ T7665] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 298.474718][ T7665] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 298.483570][ T7665] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 298.487546][ T7668] erofs (device loop3): read error -5 @ 43 of nid 36 [ 298.491472][ T7665] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 298.505143][ T7665] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 300.029839][ T7683] loop5: detected capacity change from 0 to 64 [ 300.046060][ T7683] hfs: Unknown parameter 'pa2t' [ 300.990147][ T7671] loop4: detected capacity change from 0 to 32768 [ 301.185684][ T5899] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 301.596341][ T7671] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 301.705709][ T5899] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.720597][ T5899] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.733322][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.757053][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.769683][ T7689] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.819470][ T5899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.853150][ T7706] loop3: detected capacity change from 0 to 64 [ 301.865807][ T7706] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=08adface) [ 301.866739][ T7671] XFS (loop4): Ending clean mount [ 301.898340][ T7706] loop3: detected capacity change from 0 to 16 [ 301.904151][ T7671] XFS (loop4): Quotacheck needed: Please wait. [ 301.931574][ T7706] erofs (device loop3): mounted with root inode @ nid 36. [ 302.198124][ T5899] usb 1-1: USB disconnect, device number 11 [ 302.288524][ T7708] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 302.297631][ T7708] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 302.307518][ T7708] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 302.315067][ T7708] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 302.325207][ T7708] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 302.332739][ T7708] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 302.341557][ T7708] bio_check_eod: 20 callbacks suppressed [ 302.341607][ T7708] syz.3.514: attempt to access beyond end of device [ 302.341607][ T7708] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 302.363008][ T7708] syz.3.514: attempt to access beyond end of device [ 302.363008][ T7708] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 302.379740][ T7708] syz.3.514: attempt to access beyond end of device [ 302.379740][ T7708] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 302.451276][ T7708] syz.3.514: attempt to access beyond end of device [ 302.451276][ T7708] loop3: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 302.468216][ T7708] syz.3.514: attempt to access beyond end of device [ 302.468216][ T7708] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 302.486793][ T7708] syz.3.514: attempt to access beyond end of device [ 302.486793][ T7708] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 302.503272][ T7708] syz.3.514: attempt to access beyond end of device [ 302.503272][ T7708] loop3: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 302.629656][ T7708] syz.3.514: attempt to access beyond end of device [ 302.629656][ T7708] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 302.645347][ T7708] erofs (device loop3): read error -5 @ 43 of nid 36 [ 302.850158][ T7671] XFS (loop4): Quotacheck: Done. [ 302.898755][ T5849] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 303.028670][ T7714] loop1: detected capacity change from 0 to 512 [ 303.036675][ T7714] EXT4-fs: Ignoring removed orlov option [ 303.075978][ T7714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 303.282789][ T7714] EXT4-fs (loop1): 1 orphan inode deleted [ 303.290266][ T7714] EXT4-fs (loop1): 1 truncate cleaned up [ 303.305862][ T7714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.052308][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.273445][ T7731] loop0: detected capacity change from 0 to 1024 [ 305.299520][ T7733] loop4: detected capacity change from 0 to 64 [ 305.327205][ T7731] hfsplus: Unknown parameter 'oid' [ 305.364572][ T7733] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 305.422705][ T7733] loop4: detected capacity change from 0 to 16 [ 305.505854][ T7733] erofs (device loop4): mounted with root inode @ nid 36. [ 305.831007][ T7739] loop3: detected capacity change from 0 to 512 [ 305.841046][ T7739] EXT4-fs: Ignoring removed orlov option [ 305.881145][ T7739] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 306.675638][ T7741] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 306.692949][ T7741] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 306.780160][ T7741] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 306.787796][ T7741] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 306.795603][ T7741] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 306.795675][ T7740] syz.4.522: attempt to access beyond end of device [ 306.795675][ T7740] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 306.802915][ T7741] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 306.803175][ T7741] syz.4.522: attempt to access beyond end of device [ 306.803175][ T7741] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 306.817121][ T7740] erofs (device loop4): read error -5 @ 43 of nid 36 [ 307.073855][ T7739] EXT4-fs (loop3): 1 orphan inode deleted [ 307.081419][ T7739] EXT4-fs (loop3): 1 truncate cleaned up [ 307.098050][ T7739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.504764][ T7744] bio_check_eod: 6 callbacks suppressed [ 307.504792][ T7744] syz.5.523: attempt to access beyond end of device [ 307.504792][ T7744] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 307.644405][ T7751] loop5: detected capacity change from 0 to 512 [ 307.652043][ T7751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.685408][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.921188][ T7759] loop3: detected capacity change from 0 to 2048 [ 308.007944][ T7751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.030582][ T7759] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.969629][ T7751] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.010901][ T7762] loop0: detected capacity change from 0 to 64 [ 309.018373][ T7762] hfs: Unknown parameter 'pa2t' [ 309.836685][ T6299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.901138][ T7770] loop4: detected capacity change from 0 to 2048 [ 309.974004][ T7770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.050160][ T7778] loop5: detected capacity change from 0 to 64 [ 310.078077][ T7778] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=08adface) [ 310.090836][ T7756] loop2: detected capacity change from 0 to 32768 [ 310.110198][ T7778] loop5: detected capacity change from 0 to 16 [ 310.121236][ T7778] erofs (device loop5): mounted with root inode @ nid 36. [ 310.167959][ T7756] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 310.206012][ T5897] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 310.428531][ T7789] loop4: detected capacity change from 0 to 64 [ 310.510390][ T7790] erofs (device loop5): readahead error at folio 12 @ nid 36 [ 310.519674][ T7790] erofs (device loop5): readahead error at folio 10 @ nid 36 [ 310.529833][ T7790] erofs (device loop5): readahead error at folio 6 @ nid 36 [ 310.537868][ T7790] erofs (device loop5): readahead error at folio 4 @ nid 36 [ 310.547467][ T7790] erofs (device loop5): invalid logical cluster 0 at nid 36 [ 310.554929][ T7790] erofs (device loop5): readahead error at folio 0 @ nid 36 [ 310.564700][ T7790] syz.5.533: attempt to access beyond end of device [ 310.564700][ T7790] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 310.581204][ T7790] syz.5.533: attempt to access beyond end of device [ 310.581204][ T7790] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 310.598301][ T7790] syz.5.533: attempt to access beyond end of device [ 310.598301][ T7790] loop5: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 310.613733][ T7790] syz.5.533: attempt to access beyond end of device [ 310.613733][ T7790] loop5: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 310.685638][ T7790] syz.5.533: attempt to access beyond end of device [ 310.685638][ T7790] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 310.701454][ T7790] syz.5.533: attempt to access beyond end of device [ 310.701454][ T7790] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 310.717648][ T7790] syz.5.533: attempt to access beyond end of device [ 310.717648][ T7790] loop5: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 310.814250][ T7790] syz.5.533: attempt to access beyond end of device [ 310.814250][ T7790] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 310.829928][ T7790] erofs (device loop5): read error -5 @ 43 of nid 36 [ 311.073494][ T5897] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.091956][ T7789] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 311.108081][ T7756] XFS (loop2): Ending clean mount [ 311.123397][ T5897] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.143010][ T7756] XFS (loop2): Quotacheck needed: Please wait. [ 311.155922][ T5897] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.189952][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.223129][ T7789] loop4: detected capacity change from 0 to 16 [ 311.229252][ T7776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.238759][ T7789] erofs (device loop4): mounted with root inode @ nid 36. [ 311.555011][ T7756] XFS (loop2): Quotacheck: Done. [ 311.747052][ T7799] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 311.755639][ T7799] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 311.765059][ T7799] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 311.773294][ T7799] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 311.782467][ T7799] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 311.794728][ T7799] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 311.803106][ T7799] syz.4.534: attempt to access beyond end of device [ 311.803106][ T7799] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 312.211992][ T5897] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.255017][ T5897] usb 2-1: USB disconnect, device number 7 [ 312.589074][ T5844] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 314.280550][ T7813] loop3: detected capacity change from 0 to 64 [ 314.332742][ T7817] loop0: detected capacity change from 0 to 64 [ 314.361039][ T7817] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=08adface) [ 314.381440][ T7813] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=08adface) [ 314.400594][ T7814] netlink: 248 bytes leftover after parsing attributes in process `syz.5.539'. [ 314.428282][ T7817] loop0: detected capacity change from 0 to 16 [ 314.500806][ T7813] loop3: detected capacity change from 0 to 16 [ 314.507941][ T7817] erofs (device loop0): mounted with root inode @ nid 36. [ 314.569529][ T7813] erofs (device loop3): mounted with root inode @ nid 36. [ 314.940486][ T7831] erofs (device loop0): readahead error at folio 12 @ nid 36 [ 314.949476][ T7831] erofs (device loop0): readahead error at folio 10 @ nid 36 [ 314.958952][ T7831] erofs (device loop0): readahead error at folio 6 @ nid 36 [ 314.968045][ T7831] erofs (device loop0): readahead error at folio 4 @ nid 36 [ 314.978863][ T7831] erofs (device loop0): invalid logical cluster 0 at nid 36 [ 314.986366][ T7831] erofs (device loop0): readahead error at folio 0 @ nid 36 [ 314.994897][ T7831] bio_check_eod: 6 callbacks suppressed [ 314.994946][ T7831] syz.0.543: attempt to access beyond end of device [ 314.994946][ T7831] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 315.016227][ T7831] syz.0.543: attempt to access beyond end of device [ 315.016227][ T7831] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 315.031959][ T7831] syz.0.543: attempt to access beyond end of device [ 315.031959][ T7831] loop0: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 315.047779][ T7831] syz.0.543: attempt to access beyond end of device [ 315.047779][ T7831] loop0: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 315.117331][ T7831] syz.0.543: attempt to access beyond end of device [ 315.117331][ T7831] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 315.132497][ T7831] syz.0.543: attempt to access beyond end of device [ 315.132497][ T7831] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 315.148344][ T7831] syz.0.543: attempt to access beyond end of device [ 315.148344][ T7831] loop0: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 316.148508][ T7840] loop1: detected capacity change from 0 to 64 [ 316.162937][ T7840] hfs: Unknown parameter 'pa2t' [ 316.268116][ T5910] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 316.809254][ T5910] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.842299][ T5910] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 316.870482][ T5910] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.905691][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.941567][ T7833] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 316.962375][ T5910] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.107484][ T7826] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 317.155733][ T7826] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 317.255057][ T5899] usb 6-1: USB disconnect, device number 4 [ 317.268344][ T7845] syz.3.541: attempt to access beyond end of device [ 317.268344][ T7845] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 317.276617][ T7826] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 317.284743][ T7845] erofs (device loop3): read error -5 @ 43 of nid 36 [ 317.399422][ T7826] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 317.476848][ T7826] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 317.484627][ T7826] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 317.505284][ T7826] syz.3.541: attempt to access beyond end of device [ 317.505284][ T7826] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 317.607193][ T7826] syz.3.541: attempt to access beyond end of device [ 317.607193][ T7826] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 318.800874][ T7856] loop0: detected capacity change from 0 to 64 [ 318.839754][ T7856] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=08adface) [ 318.896347][ T7856] loop0: detected capacity change from 0 to 16 [ 318.898381][ T7843] loop1: detected capacity change from 0 to 32768 [ 318.929213][ T7856] erofs (device loop0): mounted with root inode @ nid 36. [ 318.982206][ T7843] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 319.159993][ T7843] XFS (loop1): Ending clean mount [ 319.238500][ T7843] XFS (loop1): Quotacheck needed: Please wait. [ 319.251087][ T7874] netlink: 248 bytes leftover after parsing attributes in process `syz.2.556'. [ 319.345190][ T7875] erofs (device loop0): readahead error at folio 12 @ nid 36 [ 319.354095][ T7875] erofs (device loop0): readahead error at folio 10 @ nid 36 [ 319.363489][ T7875] erofs (device loop0): readahead error at folio 6 @ nid 36 [ 319.372313][ T7875] erofs (device loop0): readahead error at folio 4 @ nid 36 [ 319.382667][ T7875] erofs (device loop0): invalid logical cluster 0 at nid 36 [ 319.390241][ T7875] erofs (device loop0): readahead error at folio 0 @ nid 36 [ 319.475112][ T7875] erofs (device loop0): read error -5 @ 43 of nid 36 [ 319.941205][ T7843] XFS (loop1): Quotacheck: Done. [ 321.000724][ T5834] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 321.978329][ T5898] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 322.195820][ T5898] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.245795][ T5898] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.259398][ T7896] 9pnet_fd: Insufficient options for proto=fd [ 322.285600][ T5898] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.313037][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.343831][ T7888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 322.366764][ T5898] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.582857][ T5911] usb 3-1: USB disconnect, device number 4 [ 322.809248][ T5910] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 322.987952][ T5910] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 323.579996][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.605069][ T5910] usb 5-1: config 0 descriptor?? [ 324.145568][ T5897] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 324.185600][ T5910] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0006/input/input16 [ 324.293242][ T5910] uclogic 0003:28BD:0933.0006: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 324.303609][ T7929] netlink: 248 bytes leftover after parsing attributes in process `syz.5.574'. [ 324.363975][ T5897] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.405592][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.422696][ T5897] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 324.448051][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.459746][ T7903] loop4: detected capacity change from 0 to 2048 [ 324.511843][ T5897] usb 2-1: config 0 descriptor?? [ 324.537185][ T7936] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.585745][ T5898] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 324.842893][ T5898] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.000347][ T5898] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 325.090381][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.098684][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.225517][ T5898] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.268797][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.324134][ T7930] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 325.365161][ T5898] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.399012][ T7940] loop5: detected capacity change from 0 to 64 [ 325.481867][ T7940] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=08adface) [ 325.542913][ T7940] loop5: detected capacity change from 0 to 16 [ 325.653923][ T7940] erofs (device loop5): mounted with root inode @ nid 36. [ 325.687205][ T10] usb 3-1: USB disconnect, device number 5 [ 326.058625][ T7945] erofs (device loop5): readahead error at folio 12 @ nid 36 [ 326.066863][ T7945] erofs (device loop5): readahead error at folio 10 @ nid 36 [ 326.075934][ T7945] erofs (device loop5): readahead error at folio 6 @ nid 36 [ 326.083556][ T7945] erofs (device loop5): readahead error at folio 4 @ nid 36 [ 326.092692][ T7945] erofs (device loop5): invalid logical cluster 0 at nid 36 [ 326.100235][ T7945] erofs (device loop5): readahead error at folio 0 @ nid 36 [ 326.108523][ T7945] bio_check_eod: 13 callbacks suppressed [ 326.108581][ T7945] syz.5.576: attempt to access beyond end of device [ 326.108581][ T7945] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 326.131429][ T7945] syz.5.576: attempt to access beyond end of device [ 326.131429][ T7945] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 326.147164][ T7945] syz.5.576: attempt to access beyond end of device [ 326.147164][ T7945] loop5: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 326.162825][ T7945] syz.5.576: attempt to access beyond end of device [ 326.162825][ T7945] loop5: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 326.179167][ T7945] syz.5.576: attempt to access beyond end of device [ 326.179167][ T7945] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 326.236441][ T7945] syz.5.576: attempt to access beyond end of device [ 326.236441][ T7945] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 326.251943][ T7945] syz.5.576: attempt to access beyond end of device [ 326.251943][ T7945] loop5: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 326.323507][ T7945] syz.5.576: attempt to access beyond end of device [ 326.323507][ T7945] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 326.341356][ T7945] erofs (device loop5): read error -5 @ 43 of nid 36 [ 326.881764][ T5897] usbhid 2-1:0.0: can't add hid device: -71 [ 326.888631][ T5897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 326.902720][ T5897] usb 2-1: USB disconnect, device number 8 [ 327.056334][ T10] usb 5-1: USB disconnect, device number 7 [ 327.099639][ T7950] 9pnet_fd: Insufficient options for proto=fd [ 327.843111][ T7962] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 328.579411][ T7963] fuse: Bad value for 'fd' [ 328.757635][ T7969] syz.1.585: attempt to access beyond end of device [ 328.757635][ T7969] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 328.969109][ T7969] loop1: detected capacity change from 0 to 512 [ 328.989534][ T7969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.945779][ T7989] netlink: 'syz.4.589': attribute type 10 has an invalid length. [ 330.961306][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.972591][ T7989] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 331.389280][ T7969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.591112][ T7969] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.895780][ T8005] 9pnet_fd: Insufficient options for proto=fd [ 331.926168][ T5897] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 332.005812][ T5823] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 332.017297][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.187123][ T8007] loop5: detected capacity change from 0 to 64 [ 332.201531][ T8007] hfs: Unknown parameter 'pa2t' [ 332.945642][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 333.187253][ T8013] loop4: detected capacity change from 0 to 64 [ 333.204444][ T8013] hfs: Unknown parameter 'pa2t' [ 333.655085][ T5823] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 333.685611][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.697880][ T5897] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.713405][ T5823] usb 3-1: Product: syz [ 333.724526][ T5897] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.735820][ T5823] usb 3-1: Manufacturer: syz [ 333.751707][ T5823] usb 3-1: SerialNumber: syz [ 333.761478][ T5897] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 333.778908][ T5823] usb 3-1: config 0 descriptor?? [ 333.784940][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.849068][ T5823] as10x_usb: device has been detected [ 333.897704][ T5897] usb 1-1: config 0 descriptor?? [ 333.904800][ T5823] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 333.957203][ T5823] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 333.974143][ T5823] as10x_usb: error during firmware upload part1 [ 334.017046][ T5823] Registered device Sky IT Digital Key (green led) [ 334.066405][ T5823] usb 3-1: USB disconnect, device number 6 [ 334.129500][ T5823] Unregistered device Sky IT Digital Key (green led) [ 334.138175][ T5823] as10x_usb: device has been disconnected [ 335.528947][ T8029] loop1: detected capacity change from 0 to 1024 [ 335.560748][ T8029] hfsplus: Unknown parameter 'oid' [ 335.670015][ T5897] usbhid 1-1:0.0: can't add hid device: -71 [ 335.694442][ T5897] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 335.714318][ T8032] fuse: Bad value for 'fd' [ 335.745609][ T5897] usb 1-1: USB disconnect, device number 12 [ 336.006851][ T8035] loop0: detected capacity change from 0 to 1764 [ 336.063923][ T8042] loop3: detected capacity change from 0 to 1024 [ 336.287122][ T8043] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 336.327175][ T8043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.365208][ T8043] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 336.887887][ T8043] syz.2.602 (8043) used greatest stack depth: 18576 bytes left [ 337.024056][ T8045] loop1: detected capacity change from 0 to 64 [ 337.049603][ T8046] hfsplus: request for non-existent node 16777216 in B*Tree [ 337.073657][ T8046] hfsplus: request for non-existent node 16777216 in B*Tree [ 337.081954][ T8045] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=08adface) [ 337.094350][ T8046] hfsplus: request for non-existent node 16777216 in B*Tree [ 337.101904][ T8046] hfsplus: request for non-existent node 16777216 in B*Tree [ 337.128522][ T8045] loop1: detected capacity change from 0 to 16 [ 337.149114][ T8045] erofs (device loop1): mounted with root inode @ nid 36. [ 337.409375][ T5910] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 337.633475][ T8056] erofs (device loop1): readahead error at folio 12 @ nid 36 [ 337.641435][ T8056] erofs (device loop1): readahead error at folio 10 @ nid 36 [ 337.649825][ T8056] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 337.657304][ T8056] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 337.665025][ T8056] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 337.672512][ T8056] erofs (device loop1): readahead error at folio 0 @ nid 36 [ 337.680138][ T8056] syz.1.607: attempt to access beyond end of device [ 337.680138][ T8056] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 337.695904][ T8056] syz.1.607: attempt to access beyond end of device [ 337.695904][ T8056] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 337.710924][ T8056] syz.1.607: attempt to access beyond end of device [ 337.710924][ T8056] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 337.743957][ T8056] syz.1.607: attempt to access beyond end of device [ 337.743957][ T8056] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 337.759316][ T8056] syz.1.607: attempt to access beyond end of device [ 337.759316][ T8056] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 337.773652][ T8056] syz.1.607: attempt to access beyond end of device [ 337.773652][ T8056] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 337.788914][ T8056] syz.1.607: attempt to access beyond end of device [ 337.788914][ T8056] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 338.498577][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 339.496343][ T8056] syz.1.607: attempt to access beyond end of device [ 339.496343][ T8056] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 339.497607][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 339.510695][ T8056] erofs (device loop1): read error -5 @ 43 of nid 36 [ 339.522156][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 339.522197][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.841054][ T5910] usb 5-1: string descriptor 0 read error: -71 [ 340.887058][ T5910] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 340.919198][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.993471][ T13] hfsplus: request for non-existent node 16777216 in B*Tree [ 341.018521][ T5910] usb 5-1: config 0 descriptor?? [ 341.057326][ T5910] usb 5-1: can't set config #0, error -71 [ 341.068907][ T13] hfsplus: request for non-existent node 16777216 in B*Tree [ 341.101256][ T5910] usb 5-1: USB disconnect, device number 8 [ 341.415737][ T8067] loop3: detected capacity change from 0 to 2048 [ 342.114227][ T8067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.124741][ T8074] evm: overlay not supported [ 342.366820][ T5910] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 342.560817][ T8080] loop2: detected capacity change from 0 to 64 [ 342.607479][ T5910] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.626667][ T8082] FAULT_INJECTION: forcing a failure. [ 342.626667][ T8082] name failslab, interval 1, probability 0, space 0, times 0 [ 342.640083][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.662661][ T8080] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=08adface) [ 342.675704][ T5910] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 342.681715][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.5.617 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 342.681755][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.681773][ T8082] Call Trace: [ 342.681784][ T8082] [ 342.681795][ T8082] dump_stack_lvl+0x241/0x360 [ 342.681853][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.681890][ T8082] ? __pfx__printk+0x10/0x10 [ 342.681931][ T8082] ? __pfx___might_resched+0x10/0x10 [ 342.681963][ T8082] should_fail_ex+0x424/0x570 [ 342.682013][ T8082] should_failslab+0xac/0x100 [ 342.682057][ T8082] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 342.682108][ T8082] ? __d_alloc+0x31/0x740 [ 342.682144][ T8082] __d_alloc+0x31/0x740 [ 342.682171][ T8082] ? __pfx_dquot_alloc_inode+0x10/0x10 [ 342.682202][ T8082] d_alloc_pseudo+0x1f/0xb0 [ 342.682231][ T8082] alloc_file_pseudo+0x143/0x320 [ 342.682268][ T8082] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 342.682298][ T8082] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.682327][ T8082] ? shmem_get_inode+0xc37/0xf20 [ 342.682368][ T8082] ? alloc_fd+0x6bd/0x730 [ 342.682411][ T8082] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.682445][ T8082] __shmem_file_setup+0x237/0x2c0 [ 342.682483][ T8082] __se_sys_memfd_create+0x328/0x7d0 [ 342.682519][ T8082] do_syscall_64+0xf3/0x210 [ 342.682561][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.682587][ T8082] RIP: 0033:0x7f051118e169 [ 342.682610][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.682632][ T8082] RSP: 002b:00007f0511f17e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 342.682661][ T8082] RAX: ffffffffffffffda RBX: 0000000000000a09 RCX: 00007f051118e169 [ 342.682679][ T8082] RDX: 00007f0511f17ef0 RSI: 0000000000000000 RDI: 00007f0511211404 [ 342.682696][ T8082] RBP: 0000200000001540 R08: 00007f0511f17bb7 R09: 00007f0511f17e40 [ 342.682714][ T8082] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000a80 [ 342.682730][ T8082] R13: 00007f0511f17ef0 R14: 00007f0511f17eb0 R15: 0000200000000ac0 [ 342.682768][ T8082] [ 342.829952][ T8080] loop2: detected capacity change from 0 to 16 [ 342.861762][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.922716][ T8080] erofs (device loop2): mounted with root inode @ nid 36. [ 343.045625][ T5897] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 343.250325][ T5910] usb 5-1: config 0 descriptor?? [ 343.322907][ T8091] erofs (device loop2): readahead error at folio 12 @ nid 36 [ 343.332777][ T8091] erofs (device loop2): readahead error at folio 10 @ nid 36 [ 343.343061][ T8091] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 343.350712][ T8091] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 343.403613][ T8091] erofs (device loop2): invalid logical cluster 0 at nid 36 [ 343.411716][ T8091] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 343.435531][ T8091] syz.2.619: attempt to access beyond end of device [ 343.435531][ T8091] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 343.455867][ T8091] syz.2.619: attempt to access beyond end of device [ 343.455867][ T8091] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 343.485745][ T8091] syz.2.619: attempt to access beyond end of device [ 343.485745][ T8091] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 343.535552][ T8091] syz.2.619: attempt to access beyond end of device [ 343.535552][ T8091] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 343.555787][ T8091] syz.2.619: attempt to access beyond end of device [ 343.555787][ T8091] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 343.594377][ T8091] syz.2.619: attempt to access beyond end of device [ 343.594377][ T8091] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 343.630288][ T8091] syz.2.619: attempt to access beyond end of device [ 343.630288][ T8091] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 344.195963][ T5897] usb 4-1: device descriptor read/64, error -71 [ 344.439285][ T8097] loop1: detected capacity change from 0 to 64 [ 344.452278][ T8097] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=08adface) [ 344.465875][ T5897] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 344.489654][ T8097] loop1: detected capacity change from 0 to 16 [ 344.505382][ T8097] erofs (device loop1): mounted with root inode @ nid 36. [ 344.615685][ T5897] usb 4-1: device descriptor read/64, error -71 [ 344.623989][ T8100] loop0: detected capacity change from 0 to 1024 [ 344.631977][ T8100] EXT4-fs: Ignoring removed bh option [ 344.638723][ T8100] EXT4-fs: inline encryption not supported [ 344.660077][ T8100] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.695068][ T8100] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 344.733816][ T8100] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.625: lblock 2 mapped to illegal pblock 2 (length 1) [ 344.749080][ T5897] usb usb4-port1: attempt power cycle [ 344.772296][ T8100] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 344.790357][ T8100] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.625: lblock 0 mapped to illegal pblock 48 (length 1) [ 344.795649][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 344.807669][ T8100] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 344.816096][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 344.822399][ T8100] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.625: Failed to acquire dquot type 0 [ 344.838399][ T5910] usb 5-1: USB disconnect, device number 9 [ 344.845417][ T8100] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 344.878955][ T8100] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.625: mark_inode_dirty error [ 344.976294][ T8104] erofs (device loop1): readahead error at folio 12 @ nid 36 [ 344.985992][ T8104] erofs (device loop1): readahead error at folio 10 @ nid 36 [ 344.996697][ T8104] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 345.004385][ T8104] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 345.014077][ T8104] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 345.021598][ T8104] erofs (device loop1): readahead error at folio 0 @ nid 36 [ 345.030767][ T8104] syz.1.623: attempt to access beyond end of device [ 345.030767][ T8104] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 345.046265][ T8104] syz.1.623: attempt to access beyond end of device [ 345.046265][ T8104] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 345.062078][ T8104] syz.1.623: attempt to access beyond end of device [ 345.062078][ T8104] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 345.267775][ T8104] erofs (device loop1): read error -5 @ 43 of nid 36 [ 345.485176][ T8100] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 345.522930][ T8100] EXT4-fs (loop0): 1 orphan inode deleted [ 345.533085][ T8100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.551339][ T12] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 345.555915][ T5897] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 345.597082][ T5897] usb 4-1: device descriptor read/8, error -71 [ 345.648740][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 345.667384][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0 [ 345.696407][ T8100] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 16: comm syz.0.625: lblock 0 mapped to illegal pblock 16 (length 1) [ 345.736102][ T12] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm kworker/u8:0: lblock 2 mapped to illegal pblock 2 (length 1) [ 345.786943][ T12] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 345.795271][ T12] EXT4-fs error (device loop0): ext4_write_dquot:6915: comm kworker/u8:0: Failed to commit dquot type 0 [ 345.869273][ T12] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 345.870511][ T5897] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 346.171207][ T5897] usb 4-1: device not accepting address 8, error -71 [ 346.593301][ T5897] usb usb4-port1: unable to enumerate USB device [ 346.672002][ T8116] loop4: detected capacity change from 0 to 64 [ 346.691552][ T8116] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=08adface) [ 346.846475][ T8116] loop4: detected capacity change from 0 to 16 [ 346.880956][ T8116] erofs (device loop4): mounted with root inode @ nid 36. [ 347.150592][ T5911] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 347.863845][ T8123] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 347.872931][ T8123] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 347.882644][ T8123] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 347.890430][ T8123] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 347.900254][ T8123] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 347.907824][ T8123] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 348.575617][ T8121] bio_check_eod: 12 callbacks suppressed [ 348.575650][ T8121] syz.4.629: attempt to access beyond end of device [ 348.575650][ T8121] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 348.595369][ T8121] erofs (device loop4): read error -5 @ 43 of nid 36 [ 348.760109][ T5911] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 348.781590][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.798483][ T5911] usb 6-1: config 0 descriptor?? [ 348.812226][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.841620][ T8126] netlink: 248 bytes leftover after parsing attributes in process `syz.3.633'. [ 348.865157][ T5835] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 348.920011][ T5835] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 348.941106][ T5835] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 348.956290][ T8129] netlink: 248 bytes leftover after parsing attributes in process `syz.1.632'. [ 349.250811][ T5911] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.0007/input/input17 [ 349.381611][ T5911] uclogic 0003:28BD:0933.0007: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0 [ 349.552299][ T8118] loop5: detected capacity change from 0 to 2048 [ 350.621099][ T8143] loop4: detected capacity change from 0 to 4096 [ 350.782514][ T8147] loop2: detected capacity change from 0 to 1024 [ 350.807142][ T8118] NILFS (loop5): error -4 creating segctord thread [ 350.831225][ T8150] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.919098][ T5911] usb 6-1: USB disconnect, device number 5 [ 354.104954][ T30] audit: type=1800 audit(1745242296.126:13): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.639" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 354.221871][ T8161] Bluetooth: MGMT ver 1.23 [ 355.240906][ T8161] loop5: detected capacity change from 0 to 64 [ 355.305718][ T5896] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 355.357692][ T5911] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 355.507744][ T5896] usb 2-1: config 255 has an invalid interface number: 221 but max is 0 [ 355.543250][ T5896] usb 2-1: config 255 has an invalid descriptor of length 36, skipping remainder of the config [ 355.562413][ T5896] usb 2-1: config 255 has no interface number 0 [ 355.570862][ T5896] usb 2-1: config 255 interface 221 has no altsetting 0 [ 355.583081][ T5896] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=6b.88 [ 355.601402][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.610666][ T5896] usb 2-1: Product: syz [ 355.618476][ T5896] usb 2-1: Manufacturer: syz [ 355.623580][ T5896] usb 2-1: SerialNumber: syz [ 355.655648][ T5910] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 355.711282][ T8182] netlink: 248 bytes leftover after parsing attributes in process `syz.2.649'. [ 355.828288][ T5910] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.845069][ T8184] loop4: detected capacity change from 0 to 2048 [ 355.857160][ T5910] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 355.874240][ T5896] option 2-1:255.221: GSM modem (1-port) converter detected [ 355.883564][ T8184] nilfs2: Unknown parameter 'QU¥ñÅö' [ 355.892622][ T5910] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 355.911942][ T5896] usb 2-1: USB disconnect, device number 9 [ 355.925527][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.941121][ T5896] option 2-1:255.221: device disconnected [ 355.963064][ T8172] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 355.989652][ T5910] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.317009][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 356.323414][ T5848] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 356.830519][ T5910] usb 1-1: USB disconnect, device number 13 [ 357.130335][ T8205] loop3: detected capacity change from 0 to 2048 [ 357.148848][ T8205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.260215][ T8213] loop4: detected capacity change from 0 to 1024 [ 357.309860][ T30] audit: type=1800 audit(1745242299.336:14): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.661" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 357.330257][ T5899] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 357.353207][ T8217] loop2: detected capacity change from 0 to 1024 [ 357.427959][ T8217] hfsplus: xattr search failed [ 357.477535][ T5899] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.502207][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 357.528576][ T5899] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 357.588475][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.622184][ T5899] usb 2-1: config 0 descriptor?? [ 357.636310][ T5911] usb 6-1: device descriptor read/64, error -71 [ 357.685115][ T8223] FAULT_INJECTION: forcing a failure. [ 357.685115][ T8223] name failslab, interval 1, probability 0, space 0, times 0 [ 357.719102][ T8223] CPU: 1 UID: 0 PID: 8223 Comm: syz.0.665 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 357.719146][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.719179][ T8223] Call Trace: [ 357.719190][ T8223] [ 357.719201][ T8223] dump_stack_lvl+0x241/0x360 [ 357.719260][ T8223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.719298][ T8223] ? __pfx__printk+0x10/0x10 [ 357.719340][ T8223] ? __pfx___might_resched+0x10/0x10 [ 357.719407][ T8223] should_fail_ex+0x424/0x570 [ 357.719460][ T8223] should_failslab+0xac/0x100 [ 357.719490][ T8223] __kmalloc_cache_noprof+0x73/0x370 [ 357.719517][ T8223] ? landlock_init_hierarchy_log+0xa0/0x640 [ 357.719559][ T8223] landlock_init_hierarchy_log+0xa0/0x640 [ 357.719587][ T8223] ? __kmalloc_cache_noprof+0x236/0x370 [ 357.719620][ T8223] landlock_merge_ruleset+0x66e/0x900 [ 357.719675][ T8223] __se_sys_landlock_restrict_self+0x2ce/0x7d0 [ 357.719715][ T8223] ? rcu_is_watching+0x15/0xb0 [ 357.719752][ T8223] do_syscall_64+0xf3/0x210 [ 357.719788][ T8223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.719815][ T8223] RIP: 0033:0x7fa92c98e169 [ 357.719838][ T8223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.719860][ T8223] RSP: 002b:00007fa92a7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 357.719888][ T8223] RAX: ffffffffffffffda RBX: 00007fa92cbb5fa0 RCX: 00007fa92c98e169 [ 357.719906][ T8223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 357.719921][ T8223] RBP: 00007fa92a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 357.719937][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.719953][ T8223] R13: 0000000000000000 R14: 00007fa92cbb5fa0 R15: 00007ffd78ee1a48 [ 357.719992][ T8223] [ 357.722761][ T8223] ------------[ cut here ]------------ [ 357.916991][ T8223] WARNING: CPU: 1 PID: 8223 at security/landlock/domain.h:133 free_ruleset+0x1f3/0x250 [ 357.926803][ T8223] Modules linked in: [ 357.930750][ T8223] CPU: 1 UID: 0 PID: 8223 Comm: syz.0.665 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 357.942991][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.953172][ T8223] RIP: 0010:free_ruleset+0x1f3/0x250 [ 357.958573][ T8223] Code: 89 ff e8 50 55 6c fd 49 8b 1f 4c 89 ff e8 15 b3 60 fd 48 85 db 74 36 e8 5b 1b 02 fd 49 89 df e9 34 ff ff ff e8 4e 1b 02 fd 90 <0f> 0b 90 eb c2 e8 43 1b 02 fd eb 1c bf 01 00 00 00 89 ee e8 75 1f [ 357.979856][ T8223] RSP: 0018:ffffc9001f547dd8 EFLAGS: 00010293 [ 357.987046][ T8223] RAX: ffffffff84c0a1d2 RBX: 0000000000000000 RCX: ffff88801ebdda00 [ 357.995073][ T8223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.003179][ T8223] RBP: 1ffff110067625d4 R08: ffffffff84c1ad6f R09: 1ffff110067625d1 [ 358.011276][ T8223] R10: dffffc0000000000 R11: ffffed10067625d2 R12: ffff888033b12ea0 [ 358.019559][ T8223] R13: dffffc0000000000 R14: ffff88802c457500 R15: ffff888033b12e80 [ 358.027642][ T8223] FS: 00007fa92a7f66c0(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 358.036832][ T8223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.043563][ T8223] CR2: 00007fa302e5ff98 CR3: 0000000029b30000 CR4: 0000000000350ef0 [ 358.051738][ T8223] Call Trace: [ 358.055085][ T8223] [ 358.058111][ T8223] landlock_merge_ruleset+0x6d8/0x900 [ 358.063590][ T8223] __se_sys_landlock_restrict_self+0x2ce/0x7d0 [ 358.069915][ T8223] ? rcu_is_watching+0x15/0xb0 [ 358.076002][ T8223] do_syscall_64+0xf3/0x210 [ 358.080609][ T8223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.087633][ T8223] RIP: 0033:0x7fa92c98e169 [ 358.092132][ T8223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.112010][ T8223] RSP: 002b:00007fa92a7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 358.120541][ T8223] RAX: ffffffffffffffda RBX: 00007fa92cbb5fa0 RCX: 00007fa92c98e169 [ 358.128627][ T8223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 358.136746][ T8223] RBP: 00007fa92a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.144767][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.152933][ T8223] R13: 0000000000000000 R14: 00007fa92cbb5fa0 R15: 00007ffd78ee1a48 [ 358.161053][ T8223] [ 358.164106][ T8223] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.171519][ T8223] CPU: 1 UID: 0 PID: 8223 Comm: syz.0.665 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 358.183545][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 358.193608][ T8223] Call Trace: [ 358.196898][ T8223] [ 358.199835][ T8223] dump_stack_lvl+0x241/0x360 [ 358.204562][ T8223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.209803][ T8223] ? __pfx__printk+0x10/0x10 [ 358.214439][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.220093][ T8223] ? vscnprintf+0x5d/0x90 [ 358.224442][ T8223] panic+0x349/0x880 [ 358.228379][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.234022][ T8223] ? __warn+0x174/0x4d0 [ 358.238193][ T8223] ? __pfx_panic+0x10/0x10 [ 358.242643][ T8223] __warn+0x344/0x4d0 [ 358.246648][ T8223] ? free_ruleset+0x1f3/0x250 [ 358.251348][ T8223] report_bug+0x2b3/0x500 [ 358.255772][ T8223] ? free_ruleset+0x1f3/0x250 [ 358.260470][ T8223] ? free_ruleset+0x1f3/0x250 [ 358.265169][ T8223] ? free_ruleset+0x1f5/0x250 [ 358.269861][ T8223] handle_bug+0x89/0x170 [ 358.274113][ T8223] exc_invalid_op+0x1a/0x50 [ 358.278630][ T8223] asm_exc_invalid_op+0x1a/0x20 [ 358.283484][ T8223] RIP: 0010:free_ruleset+0x1f3/0x250 [ 358.288789][ T8223] Code: 89 ff e8 50 55 6c fd 49 8b 1f 4c 89 ff e8 15 b3 60 fd 48 85 db 74 36 e8 5b 1b 02 fd 49 89 df e9 34 ff ff ff e8 4e 1b 02 fd 90 <0f> 0b 90 eb c2 e8 43 1b 02 fd eb 1c bf 01 00 00 00 89 ee e8 75 1f [ 358.308500][ T8223] RSP: 0018:ffffc9001f547dd8 EFLAGS: 00010293 [ 358.314587][ T8223] RAX: ffffffff84c0a1d2 RBX: 0000000000000000 RCX: ffff88801ebdda00 [ 358.322569][ T8223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.330551][ T8223] RBP: 1ffff110067625d4 R08: ffffffff84c1ad6f R09: 1ffff110067625d1 [ 358.338533][ T8223] R10: dffffc0000000000 R11: ffffed10067625d2 R12: ffff888033b12ea0 [ 358.346513][ T8223] R13: dffffc0000000000 R14: ffff88802c457500 R15: ffff888033b12e80 [ 358.354507][ T8223] ? landlock_log_drop_domain+0x4f/0x1b0 [ 358.360164][ T8223] ? free_ruleset+0x1f2/0x250 [ 358.364890][ T8223] ? free_ruleset+0x1f2/0x250 [ 358.369690][ T8223] landlock_merge_ruleset+0x6d8/0x900 [ 358.375119][ T8223] __se_sys_landlock_restrict_self+0x2ce/0x7d0 [ 358.381317][ T8223] ? rcu_is_watching+0x15/0xb0 [ 358.386149][ T8223] do_syscall_64+0xf3/0x210 [ 358.390670][ T8223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.396573][ T8223] RIP: 0033:0x7fa92c98e169 [ 358.400996][ T8223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.420871][ T8223] RSP: 002b:00007fa92a7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 358.429423][ T8223] RAX: ffffffffffffffda RBX: 00007fa92cbb5fa0 RCX: 00007fa92c98e169 [ 358.437667][ T8223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 358.445656][ T8223] RBP: 00007fa92a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.454250][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.462231][ T8223] R13: 0000000000000000 R14: 00007fa92cbb5fa0 R15: 00007ffd78ee1a48 [ 358.470237][ T8223] [ 358.473721][ T8223] Kernel Offset: disabled [ 358.478102][ T8223] Rebooting in 86400 seconds..