last executing test programs: 16.509368127s ago: executing program 0 (id=844): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='./file0\x00', 0x20ac40, &(0x7f0000002740)=ANY=[], 0x3, 0x5f87, &(0x7f0000032680)="$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") mkdir(&(0x7f0000000080)='.\x02\x00', 0x44) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) 13.957884052s ago: executing program 1 (id=848): sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000800), 0x4) 11.464018991s ago: executing program 1 (id=850): syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="005190ee291f6d8f56a3f13e29ffde000026a8e453b68805b475693f96aa95cbd8c2c8c252ea5f5e06f2fc70d1665986feca7b04ec15a173cc7cd79f293406ec4c3f4be0afca2575b5ed1c3d9f713b9a076ce935a0f5663e5cb782e12c749d577411973289113755e22980bedacddb7881170909b6bf00cc920616988e3d63ab848d"], 0x1, 0xffb, &(0x7f00000010c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 10.541840825s ago: executing program 0 (id=851): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xa90, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff2, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_basic={{0xa}, {0xa44, 0x2, [@TCA_BASIC_POLICE={0x474, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5137}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x10000000, 0x8, 0x100, 0x2, {0x80, 0x1, 0x1e1, 0x4, 0x1, 0x3525}, {0x7, 0x1, 0xd76, 0xfffc, 0x8b94, 0xf}, 0x0, 0x8, 0x7b}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x8, 0x7, 0xfff, 0x10, 0x800, 0xc0, 0x5, 0x4, 0xd, 0x9, 0x2, 0x54e, 0x1, 0x3, 0x80000000, 0x81, 0x8000, 0xe15, 0x2, 0x7, 0x2, 0xff, 0x8, 0x80000000, 0x0, 0x8, 0x4, 0x4, 0x7, 0x156, 0x1, 0x5, 0x2, 0x5, 0x1ff, 0x9, 0x4, 0x3, 0x3, 0x80, 0x6, 0xdce, 0x5, 0xbc, 0xffffffff, 0x3, 0x6a8, 0x4, 0x1, 0x0, 0x6, 0xf, 0xd, 0x6, 0x4d7, 0x7, 0xd623, 0x273c, 0x7, 0x9, 0x8001, 0x401, 0x8, 0x1000, 0xb7fb, 0x7, 0xff, 0x6, 0x7c, 0x6, 0x1ff, 0x0, 0x4, 0x4, 0x401, 0x97, 0x7fff, 0xfff, 0x1, 0xe, 0x7, 0xfffffff8, 0x70, 0xfffffb3e, 0x6, 0x4, 0x3, 0x586a6233, 0xc, 0xbd0b, 0x7a01, 0x4, 0x4, 0xff, 0x4, 0x9, 0xb4ac, 0x0, 0x8c000000, 0x8000, 0x6, 0x676f, 0x1, 0x8f3, 0x3ab, 0x1, 0x294e, 0xa, 0xf, 0x1, 0xed, 0x80000000, 0x2, 0x2, 0x6, 0x2, 0x8, 0x9, 0x7c, 0x2, 0x81, 0x2, 0x4, 0x9, 0x38ccda04, 0xd, 0x0, 0x800, 0xf43, 0x1ff, 0x1, 0x0, 0x3, 0x2, 0x4, 0x1, 0x4, 0x1, 0x2, 0xda8, 0x5, 0x7, 0x2, 0xfffffff8, 0x0, 0x6, 0x3, 0x6, 0x2, 0xfffffff9, 0x0, 0x1, 0x780, 0x200, 0x3, 0x7, 0xc8, 0x2, 0x7, 0x9, 0x5, 0x98f, 0xffffffff, 0xfffffffa, 0xffffffce, 0x2, 0x7, 0x10001, 0xe485, 0xfffffffe, 0x8, 0x7ff, 0x100, 0x9bb, 0x1, 0x6, 0x101, 0x10000, 0x9, 0x7, 0x6, 0x7ff, 0xfffffff8, 0x9, 0xffffffb4, 0x2a, 0x5, 0x8, 0x4, 0x5, 0x3, 0x5, 0x35, 0xc1, 0x4, 0x1ff, 0xfff, 0xfffffffe, 0x80000000, 0xce8, 0x335, 0xa59, 0x9, 0x5, 0x5, 0x4, 0x101, 0x2, 0x4, 0x5b, 0x3, 0x8, 0x4, 0x3, 0x8, 0xd4, 0x1, 0x10000, 0x91c, 0x4, 0x6, 0x7, 0x8, 0x5, 0xfffffffe, 0x3, 0x6, 0x8, 0x6, 0x7, 0x0, 0x2, 0x0, 0x2, 0x2, 0xb27, 0xa857, 0x6, 0x8, 0x1, 0x6, 0x8, 0x3, 0x412d, 0x9, 0xfffffffc, 0x5, 0xee11, 0xf, 0x7, 0x7, 0x7, 0x1, 0xa2]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x2a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1b8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x521b, 0x7, 0xe}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0xffff, 0x0, 0x4}, "2dec3ccfca3766810b084374dc2f029b7173c3aef13eee6dc3ccc0326093c8697537aff690c607586e8c75c966126b66c89654c5f8266dcd60076ff60a3cdf02fe618b39ed3d144d088b5b01ef83b457577cfb5aec76833f03088c3059a8d1f9bdc0a1fc53a1b0cbe0c17b66e987834a89cfe9ba57d04311ffbbf5de0488f8de7ffc1290ce2b2cf203540334c3d82cfcbbb7d3bb50180fc1febbea044df276b6e271b738e9fe157370dc9083f0104252fd31a685965f20be223ec0f4349370252bc3ed64dc2c"}}, @TCF_EM_CONTAINER={0x54, 0x2, 0x0, 0x0, {{0x1ff, 0x0, 0x4}, "481a53009788205fcb5adbbe1ab2adf7ed2bfa4ae6e28709dd41fdf32284c3ce163ab8b04a361ab16f9b2dae50583e43562c6ccb55d0d7ed244d9de470be453b0ffe913b37"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x80, 0x8, 0xf048}, {0x2, 0x0, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xffff, 0x8, 0x3}, {0x1, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0xfffe}, {{0x2, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x8, 0x4, 0xff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3, 0x1}, {0x2, 0x6}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x100, 0x8, 0x6}, {0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xbc, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd}, @TCA_EM_IPT_MATCH_DATA={0xa5, 0x5, "4654b3f2333655e7a63815fdab26ef1577b9f5e260a581dcc3dedc106595bf1705f5ed0f73aa285325cadcea4de31cdb145a351457555169401338735503986e846776012fadfea906ed82b03bee6738d1a62aa160701f873e53e9680d31d34be1c87d05596f9ff377013cf568c72508f99a9afea52909800fbc41468ece58e5878f01e1c0073496930ce35c7ab720041cb2fc3bae9d37a6e223127c48eb71ea53"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd38}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x9}, {0x1, 0x5, 0x1, 0x2, 0x4, 0x2}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x6}}, @TCA_BASIC_ACT={0x2fc, 0x3, [@m_nat={0x80, 0x12, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4a9, 0xfd, 0x4, 0x7, 0x9036}, @empty, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x3, 0x7, 0x14e9e60d, 0x8}, @remote, @multicast1, 0xffffffff}}]}, {0x5, 0x6, "b5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xbc, 0x4, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x523f87dd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x65, 0x6, "bd080e6fb60f35bcd85806595d7905589259ae00a2aa1ff6e76601d5d2f6678451c4148bcbed030ca29166c55b7bb36276ac5c12d00abf269d836ce31b5c83a0b8b8262d38b6f60f4168307830375f497a05b9573d1fb076ffd89faa5c9586fe61"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x11c, 0x1c, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x91, 0x6, "0a9d63ae63ca86108945cae9c217e5ab671172b02832f5f2bc3a4f9d7668c345ddbe28028896d842258645f838efe1ab872fab1a48a2f97cf9e1d9001e56daf12ac040abf9c801602b04af4d06ea6c4f7d25f1904c7d362e7be8b4f673799d8dcabe3dfddd87ea250ecb4487521e0327f1df8bc4d410a43c43b6060e1e5a7e523f0bfe12ea55d08cc64172875a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0xa0, 0x17, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x10, 0x4, 0x7, 0x3}, @broadcast, @remote, 0xff000000}}]}, {0x4d, 0x6, "de86b4cae222297382474d4c52a9393d41cc5948045287a761e78c3425a289492df35bf0988ec6d9e753f86303fd73be3a46b84c0f12ac35ccc5f3a0854e98584e6a9c173248cf039f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0xa90}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 10.502676668s ago: executing program 2 (id=852): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) 10.450094793s ago: executing program 3 (id=853): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@dellinkprop={0x38, 0x6d, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x400, 0x2}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_hsr\x00'}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x600008d0}, 0x0) 9.23330469s ago: executing program 0 (id=854): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x8, 0x0, 0x0, 0x4, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x514c, 0x7a0d, 0x0, 0x0, 0x0) 9.086710362s ago: executing program 1 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = dup(0xffffffffffffffff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r2, @ANYRES16=r0], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB=',']) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 9.000822689s ago: executing program 3 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x20040098}, 0x40010) 8.534664246s ago: executing program 2 (id=857): ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB]) 8.376171029s ago: executing program 3 (id=858): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB='utf8,namecase=1,errors=remount-ro,iocharset=cp936,fmask=00000000000000000000005,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000005,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0050c35bbdf6e6676a040548815bacf0216692ad31a5138fd14fbc3661de238cdd59188a2e17907a52562a761a2e39724a43799b5928922cb2488257225676b71712ab75744a1881e1a5bf08ba2cfd473ce93c213b01096104295c82eab0030df0fca6a1a99b26b00d9370c26d8ebea7bca06bdfe7cd76f6d2f0179e488f7b86e4efc03866519f83d83f0999d31771dfc48af454d0ecbd27a464357d2d28d89e02e019caa8638495b20c4f3a530000000000000000"], 0x3, 0x152f, &(0x7f00000037c0)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiRJkltC0iSvJCSG3JKGJCSXIbkMIblMTBr3+/2SkCRNkoTklqz/Z8r81Vvv/33f39svv/9vnu/nsz+znrP2s/ba85yzz977nJlvug6r1aR29UZEBP8R/OVHIgDEAsAgALgGAAIAKB9XPi6zP6fExP9sI+zP9VDKlZ4Bu5K4/tkb1z974/pnb1z/7I3rn71x/bM3rn/2xvVnLDvbMqPgtbxk34Xv/2dn/P7/v0hG6XFfrCt9fTeAmH81hev//z/8D3K5/v9rBf/KSlz/7I3rn13FXukJsP8B+PWfHeT4hz1c/+yN689Ydvbre8GxcOXvR//VC0Sy92cgV/r5xxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsezjrL1MAkNW+0vNijDHGGGOMMcbYn8fnuNIzYIwxxhhjjDHG2H8/BAESFAQQAzkgFnJCLhAAMVn910IcXAd54XrIB/mhABSEeCgEhUGDAQsEIRSBohCFG6AY3AjFoQSUhFLgoDSUgZugLNwM5eAWKA+3QgW4DSpCJagMVeB2qAp3QDW4E6rDXVADakItqA13Qx24B+rCvVAP7oP6cD80gAegITwIjeAhaAwPQxN4BJrCo9AMmkMLaAmt/kv5L0BPeBF6QW9IhD7QF16CftAfBsBAGAQvw2B4BYbAq5AEQ2EYvAbD4XUYAW/ASBgFo+FNGANvwVgYB+NhAiTDRJgEb8NkeAemwFSYBtMhBWbATHgXZsFsmAPvwVx4H+bBfFgACyEVPoBFsBjS4ENYAh9BOiyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBR/DbvgE9sBe2Aefwn747N/MP/N3+d0QEFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMC/mxXyYDwtgAYzHeCyMhdGgQULCIlgEoxjFYlgMi2NxLIkl0aHDMlgGy+LNWA7LYXksjxWwAlbESlgJq2AVrIpVsRpWw+pYHWtgDayFtfBuvBv7YF2si/WwHtbH+lm3p7ARNsLG2BibYBNsik2xGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHTABE7AjdsRO2Ak7Y2fsgl2wK3bFbtgdu2e8kAPwRXwRe2MN0Qf7Yl/sh0k5BuBAHIgv42B8BV/BVzEJh+IwfA1fw9dxBJ7GkTgKR+NorCrewrE4DklMwGRMxkk4CSfjZJyCU3EqTscUnIEzcSbOwtk4G9/Dufg+vo/zcT4uxFRMxUW4GNMwDZfgGUzHpbgMl+MKXIkrcDWuwdW4DtfjOtyIG3EzbsatuBW343bciTvxY1QA+Anuxb2YhPtxPx7AA3gQD+IhPIQZmIGH8TAewSN4FI/iMTyGx/EEnsQTeApP4Wk8g2fxLJ7H83gBn4v/qvHHJdYmgcikhBIxIkbEiliRS+QSuUVukUfkEREREXEiTuQVeUU+kU8UEAVEvIgXhUVhYYQRJMLMI4WIiqgoJoqJ4qK4KClKCiecKCPKiLKirCgnyony4lZRQdwmKopKoq2rIqqIqqKdqybuFNVFdVFD1BS1RG1RW9QRdURdUVfUE/VEfVFfNBAPiIaiDw7Ah0RmZZqIodhUDMNmormQl45QrcUIbCPainbiCTEKR2IH0doliKdFRzEWO4m/iXH4rOgiJmBX8bzoJrqLHuIF0VO0cb1EbzEF+4i+Yjr2E/3FADFQzMKa4j2cm7OWeFUkiaFimHhNLMTXxQjxhhgpRonR4k0xRrwlxopxYryYIJLFRDFJvC0mi3fEFDFVTBPTRYqYIWaKd8UsMVvMEe+JueJ9MU/MFwvEQpEqPhCLxGKRJj4US8RHIl0sFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ+wUu8THYrf4ROwRe8U+8anYLz4TB8Tn4qD4QhwSX4oM8ZU4LL4WR8Q34qj4VhwT34nj4oQ4Kb4Xp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIHDJW5pS55FUytwyyjv8yTl4n88rrZT6ZXxaQBWW8LCQLSy2NtJJkKIvIojIqb5DF5I2yuCwhS8pS0snSsoy8SZaVN8ty8hZZXt4qK8jbZEVZSVaWVeTtsqq8Q0Lkl23UkDVlLVlb3i0T4R5ZV94r68n7ZH15v2wgH5AN5YOykXxINpYPyybyEdlUPiqbyeayhWwpW8nHZGv5uGwj28p28gnZXj4pO8inZIJ8WnaU/tJT5FnZRT4nu8rnZTfZXfaQP8mL0stesreEPiD7ypdkP9lfDpAD5SD5shwsX5FD5KsySQ6Vw+Rrcrh8XY6Qb8iRcpQcLd+UY+RbcqwcJ8fLCTJZTpST5NtysnxHTpFT5TQ5XabIGXLApZHmSPlP89/+g/whP299s9wit8ptcrvcIXfKXfJjuVvulnvkHrlP7pP75X55QB6QB+VBeUgekhkyQx6Wh+UReUQelUflMXlMHpcn5Dn5vTwlf5Cn5Rl5Rp6T5+V5eeHS7wAUKqGkUipQMSqHilU5VS51lcqtrlZ51DUqoq5Vceo6lVddr/Kp/KqAKqjiVSFVWGlllFWkQlVEFVVRdQNeesKokqqUcqq0KqNu+nfyVTF1oyquSvwmP2t+if9gfq1UK9VatVZtVBvVTrVT7VV71UF1UAkqQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UokpUfdVLqp/qrwaogWqQellk7sMQNUQlqSQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4layS1SQ1SU1Wk9UUNUVNU9NUikpRM9VMNUvNUnPUHDVXzVXz1Dy1QC1QqSpVLVKLVJpKU0vUEpWulqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKl1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1SGylCH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcw87QtEIAIVqCAmiAlig9ggV5AryB3kDvIEeYJIEAnigrggb3B9kC/IHxQICgbxQaGgcKADE9hAXCp6NLghKBbcGBQPSgQlg1KBC0oHZYKbgrLBzUG54JagfHBrUCG4LagYVAoqB1WC24OqwR1BteDOoHpwV1AjqBnUCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg8GDQKHgoaBw8HTYJHgqbBo0GzoHnQImgZtPpTx/f+dP7HXS/dWyfqPrqvfkn30/31AD1QD9Iv68H6FT1Ev6qT9FA9TL+mh+vX9Qj9hh6pR+nR+k09Rr+lx+pxeryeoJP1RD1Jv60n63f0FD1VT9PTdYqeoWfqd/UsPVvP0e/pufp9PU/P1wv0Qp2qP9CL9GKdpj/US/RHOl0v1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/THerf+RO/Re/U+/anerz/TB/Tn+qD+Qh/SX+oM/ZU+rL/WR/Q3+qj+Vh/T3+nj+oQ+qb/Xp/QP+rQ+o8/qc/q8/lFf0D/pi9pnntxnvr0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSavyWvymXymgClg4k28KWwKm0xkyBQxRUzURE0xU8wUN8VNSVPSOONMGVPGlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3G5uN3eYO8yd5k5zl7nL1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSYBNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyiSbR9DV9TT/TzwwwA8wgM8gMNoPNEDPEJJkkM8wMM8PNcDPCjDAjzSgzOvNE1bxlxppxZryZYJJNsplkJpnJZrKZYqaYaWaaSTEpZqaZaWaZWWaOmWPmmrlmnplnFpgFJtWkmkVmkUkzaWaJWWLSTbpZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9vsMXvMPrPP7Df7zQFzwBw0B80hc8hkmAxz2Bw2R8wRc9QcNcfMMXPcHDcnzUlzypwyp81pc9acNedN/kvvl97E2pw2l73K5rZX2zz2Gvv3cQFb0MbbQraw1Tafzf+b2Fhri9sStqQtZZ0tbcvYm34XV7SVbGVbxd5uq9o7bLXfxXXsPbauvdfWs/fZ2vbu38T17f22gX3ENkQEsM1tY9vSNrGP2Kb2UdvMNrctbEvb3j5pO9inbIJ92na0z/wuXmQX2zV2rV1n19s9dq89a8/ZI/Ybe97+aHvZ3naQfdkOtq/YIfZVm2SH/i4ebd+0Y+xbdqwdZ8fbCb+Lp9npNsXOsDPtu3aWnf27ONV+YOfaNDvPzrcL7MKf48w5pdkP7RL7kU23ASyzy+0Ku9Kusqv/71yX2412k91sd9tP7Da73e6wO+2urBNhu9fus5/a/fYze9h+bQ/aL+whe9Rm2K9+jjP376j91h6z39nj9oQ9ab+3p+wPKis7c9+/tz/Zi9ZbICQgSYoCiqEcFEs5KRddRbnpaspD11CErqU4uo7y0vWUj/JTASpI8VSICpMmQ5aIQipCRSlKN1DW9EpSKXJUmsrQTVSWbqZydAuVp1upAt1GFakSVaYqdDtVpTuoGt1J1ekuqkE1qRbVprupDt1Ddeleqkf3UX26nxrQA9SQHqRG9BA1poepCT1CTelRakbNqQW1pFb0GLWmx6kNtaV29AS1pyepAz1FCfQ0daRnqBP9jTrTs9SFnqOu9Dx1o+7Ug16gnvQi9aLelEh9qC+9RP2oPw2ggTSIXqbB9AoNoVcpiYbSMHqNhtPrNILeoJE0ikbTmzSG3qKxNI7G0wRKpok0id6myfQOTaGpNI2mUwrNoJn0Ls2i2TSH3qO59D7No/m0gBZSKn1Ai2gxpdGHtIQ+onRaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpK22g77aCdtIs+pt30Ce2hvbSPPqX99BkdoM/pIH1Bh+hLyqCv6DB9TUfoGzpK3/re9B0dpxN0kr6nU/QDnaYzdJbO0Xn6kS7QT3SRPEGIoQhlqMIgjAlzhLFhzjBXeFWYO7w6zBNeE0bCa8O48Lowb3h9mC/MHxYIC4bxYaGwcKhDE9qQwjAsEhYNo+ENYbHwxrB4WCIsGZYKXVg6LBPeFJYNbw7LhbeE5cNbwwrhbWHFsFL4yH1VwtvDquEdYbXwzrB6eFdYI6wZ1gprh3eHdcJ7wrrhvWG98L6wXHh/2CB8IGwYPhg2Ch8KG4cPh03CR8Km4aNhs7B52CJsGbYKHwtbh4+HbcK2YbvwqrB9+GTYIXwqTAifDjuGz/zcf//irP4nftefGPYJ+4YvhS+F3t8rF0QXRlOjH0QXRRdH06IfRpdEP4qmR5dGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R72vnQMcOuGkUy5wMS6Hi3U5XS53lcvtrnZ53DUu4q51ce46l9dd7/K5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd4Mr5m50xV0JV9KVcs6VdmVcS9fKtXKt3eOujWvr2rkn3BPuSfeke8o95Z52Hd0zrpP7m+vsnnVd3HPuOfe86+a6ux7uBdfTTczzy2sy0fV1fV0/188NcAPcIDfIDXaD3RA3xCW5JDfMDXPD3XA3wo1wI91IN9qNdmPcGDfWjXXj3XiX7JLdJDfJTXaT3RQ3xU1z01yKS3Ez3Uw3y81yVWf/spV5bp5b4Ba4VJfqFrnMc8Y0t8Qtceku3S1zy9wKt8KtcqvcGrfGrXPr3Aa3wW1ym9wWt8Vtc9vcDrfD7XK73G632+3x1/wyqNvvDrgD7qA76A65L12G+8oddl+7I+4bd9R9646579xxd8KddN+7U+4Hd9qdcWfdOXfe/eguuJ/cReddcmRiZFLk7cjkyDuRKZGpkWmR6ZGUyIzIzMi7kVmR2ZE5kfcicyPvR+ZF5kcWRBZGUiMfRBZFFkfSIh9GlkQ+iqRHlkaWRZZHVkRWRrwvtC30RXxRH/U3+GL+Rl/cl/AlfSnvfGlfxt/ky/qbfTl/iy/vb/UV/G2+oq/kK/tHfTPf3LfwLX0r/5hv7R/3bXxb384/4dv7J30H/5RP8E/7jv4Z38n/zXf2z/ou/jnf1T/vu/nuvod/wff0L/pevrdP9H18X/+S7+f7+wF+oB/kX/aD/St+iH/VJ/mhfph/zQ/3r/sR/g0/0o/yo2Pe9GOyLpFhgk/2E/0k/7af7N/xU/xUP81P9yl+hp/p3/Wz/Gw/x7/n5/r3/Tw/3y/wC32q/8Av8ot9mv/QL/Ef+XS/NOumsV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sdfqff5T/2u/0nfo/f6/f5T/1+/5k/4D/3B/0X/pD/0mf4r/xh/7U/4r/xR/23/pj/zh/3J/xJ/70/5X/wp/0Zf9af8+f9j/6C/8lf5L9ZY4wxxhj7l0y83BS/7fnldn6fP8gRv1q5LwBcvb1gxq/7M88oN+T7pd1fxLePAMDTvbs+lLXUqJGYmHhp3XQJQdH5AFmfBGX6+asHl+Kl0A6ehARoC2X/cP79Rffz9E/Gj94KkOtXObFwOb48/ucAmPgH4z/2xOhFFcKzcf+P8ecDFC96OScnXI6XQruf76+0hXL/YP75W/+T+ef8Ihmgza9ycsPl+PL8y8Dj8Awk/GZNxhhjjDHGGGPsF/1F5c5Z159Z3/j8o+vzeHU5Jwdcjv/Z9TljjDHGGGOMMcauvGe793jqsYSEtp3//Ua1/1LWv9xoCv9dI3PjDxveA2Q9ogDgPxwQILMh/8q92PqXbCvp0kvn77tWnPMB/M8o5Z/RuMIHJsYYY4wxxtif7vJJ/28fV1dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0V/w7sSu9j4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtiV9n8CAAD//7wUAB0=") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfc, 0x161, &(0x7f00000002c0)="$eJzs0buLE1EUx/Hvnbl5gAlRjBAsTDqjQcgD7SRkxGDAOKAIYhWIIwoJEQNqabC1CNim8NHK/gub3S2WXZJm/4pt0i1sscVd7syEYf+H8+nuOZffuY+nj9dVReLJZPzpczCdBu8qL/1+99XprrkwBtJA9ko/2r/swAc0Sw2bGdjyQR7efxwFznAysutNBzKAdy2uMy5s53lFzUxDA+Nua/uZcJ8Tj4xqt+ANo6BFKlzf1uAVory6gdUfuIvBuxHVGijOABeUsoc3mSioVyvfVPBtUdv5f/xiddR7cL8d/Gx25/dyJbcG/MVT2UMneZL1qv/c7/vrVrP5KFtvODw8sYF8n1N4lvsCbxVom+cQ5qUp3dGv4YeCX+GszZ7K20v8PvfH0TnaNuCrWwFVXgwHpdS/QfG6g1vVtmsgvmfMflHYSV5ECCGEEEIIIYQQQgghhBBCCCGESFwGAAD//3QlUb0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x3}, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r3, &(0x7f0000001f80)=""/4102, 0x1006) 7.198287513s ago: executing program 1 (id=859): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163", 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(r0, 0x0, 0x0, 0x80000) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xf0}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 6.101850951s ago: executing program 1 (id=860): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='./file0\x00', 0x20ac40, &(0x7f0000002740)=ANY=[], 0x3, 0x5f87, &(0x7f0000032680)="$eJzs3cuOHFcZB/CvL9NzMXGsCEXGYjFxICSE+G5DuMVhwQKQQEJeY2syiQxOgmyDSGThibxALLg8AmyyYZEXCRJPgHgALNmsIkEoVDPn2DXlnukxnunqmfP7Se2qr0/V9Cn/p6YvVdUnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID43nd/fLoXEZd/me44EvGZGET0IxbrejnqmYt5+WFEHI315ng2IgbzEfX66/88HXEuIj4+HHHv/q2V+u4zO+zH+VM3r3/6/e/8/Td/uHP0p2/85MN2+48+e/aj396OOPLDVz/69PbubDsAAACUoqqqqpfe5h9L7+/7XXcKAJiK/PxfJfl+tVqtVu9q/fv+bPVHXWjdVI13u1lExFpznfo1g8PxALDPrMUnXXeBDsm/aMOIONR1J4CZ1uu6A+yJe/dvrfRSvr3m88HyRnv+nHJT/mu9B9d3bDWdpH2OybR+v+7EIJ7Zoj+LU+rDLMn599v5X95oH6Xl9jr/adkq/9HGpU/FyfkP2vm3bMr/jxGxb/Pvj82/VDn/4ePkvzbYx/u//AEAAAAAOPjy5/9HOj7+O//km7Ij2x3/XZ5SHwAAAAAAAABgtz3p+H8PGP8PAAAAZlb9Xr32p8MP79vqu9jq+y/1Ip5qLQ8UJl0ss9R1PwAAAAAAAAAAAACgJMONc3gv9SLmIuKppaWqqupbU7t+XE+6/n5X+vZDybr+Iw8AABs+Pty6lr8XsRARl9J3/c0tLS1V1cLiUrVULc7n17Oj+YVqsfG+Nk/r++ZHO3hBPBxV9Q9baKzXNOn98qT29s+rH2tUDXbQsenoMHAAiIiNZ6N7npEOmKp6Orp+lcP+YP8/eOz/7ETXv6cAAADA3quqquqlr/M+lo7597vuFAAwDQv5+b99XECtVqvVavXBq5uq8W43i4hYa65Tv2YwHD8A7DNr8UnXXaBD8i/aMCKOdt0JYKb1uu4Ae+Le/VsrvZRvr/l8kMZ3z+eCbMp/rbe+Xl5/3HSS9jkm0/r9uhODeGaL/jw7pT7Mkpx/v53/5Y32UVpur/Oflq3yr7fzSAf96VrOf9DOv+Xg5N8fm3+pcv7Dx8p/IH8AAAAAAJhh+fP/I43P/989VNTx30Huz/KU+gAAAAAAAAAAu+3e/Vsr+brXfPz/82OW6zXnXP95YOT8ezvO3/W/B0nOv9/Ov3VCzqAxf/f1h/n/6/6tlQ9v/vNzeTrz+c8NRvVjz/X6g2E656eaezOuxrVYjVOPLD/c1H76kfa5Te1nJrSffaR9VLcv5vYTsRLvxrV440H7/IQToxYmtFcT2nP+A/t/kXL+w8atzn8ptfda09rdD/qP7PfN6bjHufiX/7zw6N41fXdi8GDbmurtO95Bf9b/Tw6N4hc3Vq+f+NWVmzevn4402XTvmUiTXZbzn0u3nP+Lz2+057/7zf317gejx85/VtyJ4Zb5P9+Yr7f3pSn3rQs5/1G65fzzM9D4/X8/57/1/v9yB/0BAAAAAAAAAAAAAACA7VRVtX6J6MWIuJCu/+nq2kwAYKp+94M0UyWhVqvVarX6wNZN1XivNYtY2LzOhYj49bgfBgDMsv9GxD+67gSdkX/B8vf91dMvdN0ZYKpuvPf+z65cu7Z6/UbXPQEAAAAAAAAA/l95/M/lxvjP6+cBtcaN3jT+6+uxvG/H/+yPButjnacNei62H//7eGw//vdwwuPNTWgfTWifn9C+MKF97IUeDTn/51LGOf9jacNKGv/1xQ7607Wc//E01nPO/0ut5Zr5V3/ez/n3N+V/8ubbPz954733X7n69pW3Vt9afef0qQvnzp4/d/b8+ZNvXr22emrj3w57vLdy/nnsa+eBliXnnzOXf1ly/l9MtfzLkvN/IdXyL0vOP7/ek39Zcv75vY/8y5LzfynV8i9Lzv/LqZZ/WXL+L6da/mXJ+X8l1fIvS87/lVTLvyw5/xOpln9Zcv4nUy3/suT88xEu+Zcl55/PbJB/WXL+Z1It/7Lk/M+mWv5lyfmfS7X8y5LzP59q+Zcl538h1fIvS87/q6mWf1ly/l9LtfzLkvN/NdXyL0vO/+upln9Zcv7fSLX8y5Lz/2aq5V+WnP+3Ui3/suT8v51q+Zcl5/9aquVfloff/29myjP//mvEDHTDTKkz7/xtu2W6/ssEAAAAAAAAAAAAALRN40zjrrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLe3cXIVd73Az/7Zq8NCf4HwlscWBsDBhbvrt/AIQaThPwpaVNKQtq0pMax12YTv9W7TgDRshTaEgWpSO0FvWiaRGkUqa1AUdSmEo2QGqm9K1eJuIlaiQtLhcqhSaVUga3OnOd5dmZ2dmb9MnjmnM8H4Z935szMM2fOzO53re8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1Nnx0+k8GsizL/6/9sS7LLs7/vibbk385v/NCrxAAAAA4V2/X/vzbS9IJe1Zwobpt/uWaf/vewsLCQvb5t06982cLC+mMsSwbWp1ltfOif/3FzxfqtwmezkYHBuu+Huxw80Mdzh/ucP5Ih/NXdTh/dYfzRzucv2QHLLGm+H1M7co21f66rtil2WXZSO28TS0u9fTA6sHB+LucmoHaZRZGDmYz2eFsOptccpmB2n9Z9vKG/LbuzeJtDdbd1vosy07/9In9cQ0DYR9vyhpurKb+sXvz7mzsrZ8+sf/bc29c1Wp23A1LVpplmzfm63wmyxZ/XZUNZKvTPonrHKxb5/oW6xxqWOdA7XL535vXeXqF64z3ezSs89U261wfTnv0uizL5rNlt2n2dDaYrW261bS/R4sjIr+O/KF8XzZ8RsfJhhUcJ/llXr+u8ThpPibj/t8Q9snwMmuofzjefGrVkv1+tsdJfq974VjNr/v+/EZHR+t/tdpwrObbPHH98sdAy8euxTGQjuW6Y2Bjp2NgcNVQ7RgYXFzzxoZjYGrJZQazgdptnbq+/TEwMXfk+MTsY4/fOnNk36HpQ9NHpyZ3bt+2Y/u2HTsmDs4cnp4s/jyzXdpH1maD6RjcGF5r4jF4Y9O29YfkwjfO3/NgtEeeB/l9//QN+YIuHsyWOcbzbZ7ZfO7Pg/R9v+55MFz3PGj5mtrieTC8gudBvs3pzSv7njlc93+rNXTrtXBd3TFwIb8f5rf50E3LvxauD+t69uYz/X44tOQYiHdrIDz38lPSz3ujt4f9svS4uDo/46JV2cnZ6RNbHt03N3diKgvjXXFp3WPVfLysrbtP2ZLjZfCMj5c9f/PLG65ucfq6sK9Gb2n/WOXbbB9v/1jVXt0b9+eqrNifDaduzcI4z97t/dnqu1m+P1OWaLM/822eufXcfxZMuaTu9W+k0+vf0Mhw8fo3lPbGSMPr39KHZqi2siw7fevKXv9Gwv/v9uvfZT3y+pfvq4e2tD8G8m2enTjTY2C47evfdWEOhPXcFBLDaF3uf6d2/nxxmNY9lh2Pm+HhkXDcDMdbbDxuti25TH5t+W1vnjy742bzdY2PVcPPLSU8bvJ99eeT7Y+bfJtXps79tWNN/Gvda8eqTsfAyNCqfL0j6SAoXu8W1sRjYEu2PzuWHc4OpMvkj3J+W+NbV3YMrAr/v9uvHVf2yDGQ76sXtrY/BvJtfrjt/P7stDmckrap+9mp+fcLy2X+q4cXr695t53vzJ+v82M/+mQ6rVWGyLd5Y/uZ5oz2++mWcMpFLfZT8/NnuWP6QPbu7KcrwzoP72j/u6l8m8t2rvB42pNl2WtTr9V+3xV+v/vdkz/6XsPvfVv9Tvm1qdfum3jgx2eyfgAAzt47tT/nVxU/a9b9i/VK/v0fAAAA6Asx9w+Gmcj/AAAAUBox9w+Fmcj/AAAAUBox9w+HmVQk/z9y+64X334yS+8GuBDE8+NuuP/OYrvY8Z4PX48tLMpP/8i3Rl78ypMru+3BLMt+ed8HWm7/yJ1xXYXjcZ0fajx9iSuvXdHtP/zg4nb1759weldx/fH+rPQwiF3llye21q537LGp2nzlvqw2H5h/9uni+ouv4/anthXb/2V405I9BwcaLr85rGdTmGPhPWXu37O4H/IZL/fi+mv++dLPLN5evNzAxvfW7uYLf1Bcb3yPqOcvLbaP93u59f/TV7/zYr79o9e3Xv+Tg63Xfypc7+th/mJ3sX39Pv9K3fr/KKw/3l683JZv/qDl+l+6otj+pXBcfD3M5vXf/acffLvV4xVvZ88dxeXi7U/+z/ba5eL1xetvXv/ok1P1+2N18/W/8lZxPbu/9LOh+u3j6fF2oofvaDy+B8Lj29Ajz7LsO3+cNezn7MPF5f6xaf3x+o7f0Xr9tzSt8/jAtbXLL3bv1zUc51/7660Nj3/zevb83bqG+/P8PWH/vTXxw/x6Tz0Qjsdw/v++Wlxf83uZvnRP4+tN3P7r64rnbby+iab1P9+0/vlr833Xef33vlWs/6W7Vjesf8/Hw/F0bzE7rf/QX13ScPlvfLt4PE58efzosdmTMwfq9mr983j16Jq1F138nvdeEl5Lm7/ee2zukekTY5Njk1k21odvGdjt9X8zzP8qxvz5v4XCj39WHHfPfaL4vnXjz4uvnw+nPxwez/j98Wt/MdJwvDY/7vN3FfNc139zWMdKXfHV/7h2RRue+tzLJ//hD99o/rkg3p/j7x+t3b8XNlxeO2/gleL85terTv79/Y3P658MT9bm98N+XQjvzLzx8uL2mq8/vjfJc58qnr/xJ7l4+azp/UTWDTXej3Nd/0/CzzE/uLLx9S8eH99/sundnNdlA/kS5sPrQzZfnB+3ivv7udOXt7y9+D482fxVZ7LMZc0+NjtxeOboyUcn5qZn5yZmH3t875FjJ4/O7a29d+neL3S6/OLze23t+X1geuf2rPZsP1aMLrvQ6z/+4P4Dt03ecGD64L6TB+cePD594tD+2dn90wdmb9h38OD0lztdfubA7qmtu7bdtnX80MyB3bfv2rVt1/jM0WP5MopFdbBz8ovjR0/srV1kdvf2XVM7dmyfHD9y7MD07tsmJ8dPdrp87XvTeH7pL42fmD68b27myPT47Mzj07undu3cubXjuz8eOX5wdmzixMmjEydnp09MFPdlbK52cv69r9PlqYbZY+H1rslA+On8s7fsTO+Pm/vWU8teVbFJ44+n2ZvhvaDi97dOX8fcPxJmUpH8DwAAAFUQc3944//FM+R/AAAAKI2Y+1eHmcj/AAAAUBox9xfJfzR9/HtV8v/56v8/pf9fo/9f6f7/kuvX/9f/1//X/9f/b0//X/+/n9ev/6//T2e91v8PuT9bk2X+/R8AAABKKub+tWEm8j8AAACURsz9F4WZyP8AAABQGjH3XxxmUpH87/P/9f/1/9v1/+O2+v+Z/n8v9P83/af+/xL6//r/mf7/WbvQ/fl+X38P9v/X6P/Ta3qt/x9z/3vCTCqS/wEAAKAKYu5/b5iJ/A8AAAClEXP/JWEm8j8AAACURsz968JMKpL/9f/1//X/ff6//n/f9P99/n8L+v/6/5n+/1m70P35fl9/D/b/ff4/PafX+v8x9/+/MJOK5H8AAACogpj73xdmIv8DAABAacTcf2mYifwPAAAApRFz/2VhJhXJ/9Xs/7+eZZn+f6b/r//ftE79f/3/btD/L1X//6XfD3/R/y/o/+v/6//r/9Ner/X/Y+5/f5hJRfI/AAAAVEHM/ZeHmcj/AAAAUBox918RZiL/AwAAQGnE3H9lmElF8n81+/8+/1//v6D/37hO/X/9/27Q/y9V/9/n/zfR/9f/1//X/6e9Xuv/x9x/VZhJRfI/AAAAVEHM/VeHmcj/AAAAUBox938gzET+BwAAgNKIuX99mElF8r/+v/6//r/+v/6//n839Vf/f3DZc/T/C/r/jc5f/39+cQH6/32zfv1//X8667X+f8z9HwwzqUj+BwAAgCqIuf+aMBP5HwAAAEoj5v5rw0zkfwAAACiNmPvHwkwqkv/1//X/9f/1//X/9f+7qb/6/8vT/y/o/zfy+f/6//r/+v+012v9/5j7N4SZVCT/AwAAQBXE3L8xzET+BwAAgNKIuf+6MBP5HwAAAEoj5v5NYSYVyf/6//r/+v/6//r/+v/dpP+v/9+O/r/+fz+vX/9f/5/Oeq3/H3P/9WEmFcn/AAAAUAUx998QZiL/AwAAQGnE3H9jmIn8DwAAAKURc//mMJOK5H/9f/1//f8+7v8P6f9n+v89T/9f/78d/X/9/35ev/6//j+d9Vr/P+b+m8JMKpL/AQAAoApi7r85zET+BwAAgNKIuf+WMBP5HwAAAEoj5v7xMJOK5H/9f/1//f8+7v/7/P+G9ev/9yb9/37p/480fqn/vyL6//r/+v/6/7TXa/3/mPtvDTOpSP4HAACAKoi5f0uYifwPAAAApRFz/0SYifwPAAAApRFz/2SYSUXyv/6//r/+v/6//r/+fzfp//dL/7+J/v+K6P/r/+v/6//TXq/1/2PunwozqUj+BwAAgCqIuX9rmIn8DwAAAKURc/+2MBP5HwAAAEoj5v7tYSYVyf990v/fkgpQ+v/6//r/+v/6/31F/1//vx39f/3/fl6//r/+P40GW5zWa/3/mPt3hJlUJP8DAABAFcTcvzPMRP4HAACA0oi5/7YwE/kfAAAASiPm/tvDTCqS//uk/+/z//X/9f/r6P/r//cT/X/9/3b0//X/+3n9+v/6/3TWa/3/mPt3hZlUJP8DAABAFcTc/6EwE/kfAAAASiPm/jvCTOR/AAAA6CutPocwirn/w2EmFcn/+v9l7/8vrNb/1//X/2+/fv3/7tL/1/9vR/9f/7+f16//r/9PZ73W/4+5f3eYSUXyPwAAAFRBzP13hpnI/wAAAFAaMfffFWYi/wMAAEBpxNy/J8ykIvlf/7/s/X+f/6//r//faf36/92l/6//347+f3/2/8OPLfr/PdT/z48h/X96Ua/1/2PuvzvMpCL5HwAAAKog5v6PhJnI/wAAAFAaMfd/NMxE/gcAAIDSiLn/Y2EmFcn/+v/6//r/+v/6//r/3aT/37X+f+2lUP+/oP9/di50f77f199L/X+f/0+v6rX+f8z994SZVCT/AwAAQBXE3P/xMBP5HwAAAEoj5v7/H2Yi/wMAAEBpxNx/b5hJRfK//r/+v/6//r/+v/5/N+n/+/z/dvT/9f/7ef36//r/dNZr/f+Y+38lzKQi+R8AAACqIOb++8JM5H8AAAAojZj7PxFmIv8DAABAn1m17Dkx9/9qmElF8n//9f/H+rL/P5iuX/9f/1//X/9f//980v/X/8/0/8/ahe7P9/v69f/1/+ms1/r/Mff/WphJRfI/AAAAVEHM/Z8MM5H/AQAAoDRi7v/1MBP5HwAAAEoj5v77w0wqkv/Pd/+/+fLt+Px//f9M/1//X/9f//8c6f/r/2fL9P/Dt1b9/zYudH++j9cffxTR/9f/p4Ne6//H3P8bYSYVyf8AAABQBTH3PxBmIv8DAABAj3rkjC8Rc/+nwkzkfwAAACiNmPs/HWZSkfzff5//r/+v/6//r/+v/99P9P/1/9vx+f/6//28fp//r/9PZ73W/4+5/8Ewk4rkfwAAAKiCmPs/E2Yi/wMAAEBpxNz/m2Em8j8AAACURsz9vxVmUpH8r/+v/6//r/+v/6//3036/0v7//lrmP5/Qf9f/7+f16//r/9PZ73W/4+5/7NhJhXJ/wAAAFAFMff/dpiJ/A8AAAClEXP/74SZyP8AAABQGjH3PxRmUpH8r/+v/6//r/+v/6//3036/xfw8////r+XnKT/33g/9P/1//X/9f/prl7r/8fc/7kwk4rkfwAAAKiCmPt/N8xE/gcAAIDSiLl/b5iJ/A8AAAClEXP/w2EmFcn/+v/6//r/+v/6//r/3aT/fwH7/y3o/zfeD/1//X/9f/1/uqvX+v8x9+8LM9nTeDMAAABA/4q5//NhJhX5938AAACogpj794eZyP8AAABQGjH3HwgzqUj+1//X/9f/1//X/9f/7yb9f/3/dvT/9f/7ef36//r/dNZr/f+Y+6fDTCqS/wEAAKAKYu4/GGYi/wMAAEBpxNx/KMxE/gcAAIDSiLn/kTCTiuR//X/9f/3/yvb/X/1u0zr1//X/u0H/X/+/Hf1//f9+Xr/+v/4/nfVa/z/m/pkwk4rkfwAAAKiCmPu/EGYi/wMAAEBpxNz/xTAT+R8AAABKI+b+w2EmFcn/+v/6//r/le3/r+zz/9cs3q7+v/7/2dD/1/9vR/9f/7+f16//r/9PZ73W/4+5/0iYSUXyPwAAAFRBzP1Hw0zkfwAAACiNmPuPhZnI/wAAAFAaMfcfDzOpSP7X/z+z/v/AMt1A/f/W69f/L0H/v47+v/7/2dD/1/9vR/9f/7+f16//r/9PZ73W/4+5//fCTCqS/wEAAKAKYu4/EWYi/wMAAEBpxNw/G2Yi/wMAAEBpxNw/F2ZSkfyv/+/z//X/9f/1//X/u0n/X/+/Hf1//f9+Xr/+v/4/nfVa////2LvvXL+uqo/DFwcHWxFziJgBI0CMgDEgIWZAbwk9dAi9t9Cb6RB6772H3lsgdAJIIF+vtYKd63Ou7fuz99nref7IynvzouyQIPGV+ejk7n9A3NJk/wMAAEAHufsfGLfY/wAAADCN3P0PilvsfwAAAJhG7v4Hxy1N9r/+X/+v/9f/6//1/7uk/9f/L9H/6/+3/H79v/6fdaP1/7n7HxK3NNn/AAAA0EHu/ofGLfY/AAAATCN3/8PiFvsfAAAAppG7/+FxS5P9r//X/+v/9f/6f/3/Lun/9f9L9P/6/y2/X/+v/2fdaP1/7v5HxC1N9j8AAAB0kLv/kXGL/Q8AAADTyN3/qLjF/gcAAIBp5O6/Lm5psv/1//p//f8G+/+76v/1/9uh/9f/L9H/6/+3/H79v/6fdaP1/7n7r49bmux/AAAA6CB3/6PjFvsfAAAANuce9z/457n7HxO32P8AAAAwjdz9j41bmux//b/+X/+/wf7f9//1/xui/9f/L9H/6/+3/H79v/6fdZel/7/34fv/3P2Pi1ua7H8AAADoIHf/4+MW+x8AAACmkbv/CXGL/Q8AAABbdzx/J3f/E+OWJvtf/6//1//r//X/+v9d0v/r/5fo//X/W36//l//z7qd9//3uWH/Hrb/z91/Q9zSZP8DAABAB7n7nxS32P8AAAAwjdz9T45b7H8AAACYRu7+p8QtTfa//l//f0f//9+76P/1//r/O36u/z8a+n/9/xL9v/5/y+/X/+v/Wbfz/n+l9z/3/87d/9S4pcn+BwAAgA5y9z8tbrH/AQAAYBq5+58et9j/AAAAMI3c/c+IW5rsf/2//t/3//X/+n/9/y7p/4ft/8/9j97Z9P+Hov/X/5+v/7/XId6v/6eD0fr/3P3PjFua7H8AAADoIHf/s+IW+x8AAACmkbv/xrjF/gcAAIBp5O5/dtzSZP/r//X/+n/9/9n9/7GW/f/pn+n/d0P/P2z/v0z/fyj6f/2/7//r/1k2Wv+fu/85cUuT/Q8AAAAd5O5/btxi/wMAAMA0cvc/L26x/wEAAGAaufufH7c02f/6f/2//l//f0nf/79qjv7f9/93R/+v/1+i/9f/b/n9+n/9P+tG6/9z978gbmmy/wEAAGB6x/Zq978wbrH/AQAAYBq5+18Ut9j/AAAAMI3c/S+OW5rsf/2//l//r/+/pP5/ku//6/93R/+v/19y2P5/T/9ffy36/3Her//X/7NutP4/d/9L4pYm+x8AAAA6yN3/0rjF/gcAAIBp5O5/Wdxi/wMAAMA0cve/PG5psv/1//p//b/+X/+v/98l/b/+f4nv/+v/t/x+/b/+n3Wj9f+5+18RtzTZ/wAAANBB7v5Xxi32PwAAAEwjd/+r4hb7HwAAAKaRu//Vccu5+//Y5XzV5aP/1//r//X/+n/9/y7p//X/S/T/B/f/J87z59P/j/V+/b/+nzW3D9f/5+6/KW7x6/8AAAAwjdz9r4lb7H8AAACYRu7+18Yt9j8AAABMI3f/6+KWJvv/fP3/bdec+eP6/8PR/x/8fv2//l//r//X/+v/l+j/ff9/y+/X/+v/WTda/5+7//VxS5P9DwAAAB3k7n9D3GL/AwAAwDRy978xbrH/AQAAYBq5+98UtzTZ/0f//f9r9f/6f/1/XP2//l//r//X/y/T/+v/t/x+/b/+n3Wj9f+5+98ctzTZ/wAAANBB7v63xC32PwAAAEwjd/9b4xb7HwAAAKaRu/9tcUuT/X/0/b/v/+v/L7D/P6b/T/r/+Puq/9f/XwD9v/5/T/9/0a50P7/19+v/9f+sG63/z91/an/q9dv/AAAA0MGp/d+e2Ht73GL/AwAAwDRy978jbrH/AQAAYBq5+98ZtzTZ//p//f8V7/99/7/o/+Pvq/5f/38B9P/6/z39/0W70v381t+v/9f/s260/j93/7vilib7HwAAADrI3f/uuMX+BwAAgGnE7j/zP363/wEAAGBK79n/7Ym998YtTfZ/4/7/2kvt/0/+3+/r/w9+v/7/SPr/U+f+s6f/1/9vif5f/79E/6//3/L7x+n/4wfX6f8Zz2j9f+7+98UtTfY/AAAAdJC7//1xi/0PAAAA08jdf3PcYv8DAADANHL3fyBuabL/G/f/k3z//763xgv0//P2/77/H1f/r/8/iP5/gv7/9H/90v/Xn1//v533j9P/+/4/4xqt/8/d/8G4pcn+BwAAgA5y938obrH/AQAAYBq5+z8ct9j/AAAAMI3c/R+JW5rsf/3/1vt/3//X/+v/9f9j0//r/5f4/r/+f8vv1//r/1k3Wv+fu/+jcUuT/Q8AAAAd5O7/WNxi/wMAAMA0cvd/PG6x/wEAAGAaufs/Ebc02f/6f/3/rvr/038S/X+T/v/6Dff/V8fV/++M/l//v0T/r//f8vv1//p/1o3W/+fu/2Tc0mT/AwAAQAe5+z8Vt9j/AAAAMI3c/Z+OW+x/AAAAmEbu/s/EDfe8+5V70tE6fp6fR2+u/9f/+/6//t/3/33/f5f0//r/Jfp//f+W36//1/+zbrT+P3f/Z+MWv/4PAAAA08jd/7m4xf4HAACAaeTu/3zcYv8DAADANHL3fyFuabL/9f/6f/3/Zvv/k/r/s9+v/x+T/l//v0T/r//f8vsP3f/fcvC/Xv9PB6P1/7n7vxi3NNn/AAAA0EHu/i/FLfY/AAAATCN3/5fjFvsfAAAAppG7/ytxS5P9r//X/+v/N9v/+/7/Oe/X/49J/6//X6L/1/9v+f2+/6//Z91o/X/u/q/GLU32PwAAAHSQu/9rcYv9DwAAANPI3f/1uMX+BwAAgGnk7v9G3NJk/+v/9f/6f/2//l//v0v6f/3/Ev2//n/L79f/6/9ZN1r/n7v/m3FLk/0PAAAAHeTu/1bcYv8DAADANHL3fztusf8BAABgGrn7vxO3NNn/M/f/S/9v+v8z9P/6/3jn/r+l+n/9/y7o//X/S/T/+v8tv1//r/9n3Wj9f+7+78YtTfY/AAAAdJC7/3txi/0PAAAA08jdf0vcYv8DAADANHL3fz9uabL/Z+7/l+j/z9D/6//3fP9f/79j+n/9/xL9v/5/y+/X/+v/WXeF+v/je+fp/3P3/yBuabL/AQAAoIPc/T+MW+x/AAAAmEbu/h/FLfY/AAAATCN3/4/jlnn2//1uXviD+v8j7//3/yHS/+v/9/T/+n/9/z79v/5/if5f/7/l9+v/9f+sG+37/7n7fxK3zLP/AQAAoL3c/T+NW+x/AAAAmEbu/p/FLfY/AAAATCN3/8/jlib7X//v+//6/1b9/1V7+n/9/2Wm/9f/L9H/6/+3/H79v/6fdaP1/7n7fxG35PC75mL+KgEAAICR5O7/ZdzS5Nf/AQAAoIPc/b+KW+x/AAAAmEbu/l/HLU32v/5f/6//b9X/+/6//v+y0//r/5fo//X/W35/9v/5z53+X//PnY3W/+fu/03c0mT/AwAAQAe5+38bt9j/AAAAMI3c/b+LW+x/AAAAmEbu/t/HLU32v/5f/6//1//r//X/u6T/1/8v0f/r/7f8ft//1/+zbrT+P3f/rXFLk/0PAAAAHeTu/0PcYv8DAADANHL3/zFusf8BAABgGrn7b4tbmux//b/+f8r+/276f/2//n8U+n/9/xL9v/5/y+/X/+v/WTda/5+7/09xS5P9DwAAAB3k7v9z3GL/AwAAwDRy9/8lbrH/AQAAYBq5+/8atzTZ//p//f+F9//H66972P7f9//1//r/Yczb/1+t/z+o/z9xYe/v3v/feNOZH+v/t/l+/b/+n3Wj9f+5+/8WtzTZ/wAAANBB7v6/xy32PwAAAEwjd/8/4hb7HwAAAKaRu/+fcUuT/a//1/9P+f1//b/+X/8/jHn7f9//b/39/5Nxff9f/6//1/+zaLT+P3f/7XFLk/0PAAAAHeTu/1fcYv8DAADANHL3/ztusf8BAABgGrn7/xO3NNn/+n/9v/5f/6//1//vkv5f/79ks/1/uNTv/+v/t/1+/b/+n3Wj9f+5+/8XAAD//zXRK10=") mkdir(&(0x7f0000000080)='.\x02\x00', 0x44) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) 5.504658949s ago: executing program 0 (id=861): syz_open_dev$vim2m(0x0, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x63, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x40, 0xd8, 0x5b, 0xc7, 0x13b1, 0x11, 0x5c34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x4, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x88, 0x4, 0x0, 0xf7, 0xf9, 0x8a, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d2cf"}, {0x5, 0x24, 0x0, 0x621c}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x2}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x3, 0x53, 0xee, 0x97, 0x5, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x9, 0xc, [@generic={0x2, 0x1}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x6, 0x9, 0xfe}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x7, 0xe}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000300)={0x6a, {{0x2, 0x4e22, @broadcast}}}, 0x88) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x5a) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r1, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.831777453s ago: executing program 2 (id=862): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xbd8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff2, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_basic={{0xa}, {0xb8c, 0x2, [@TCA_BASIC_POLICE={0x474, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5137}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x10000000, 0x8, 0x100, 0x2, {0x80, 0x1, 0x1e1, 0x4, 0x1, 0x3525}, {0x7, 0x1, 0xd76, 0xfffc, 0x8b94, 0xf}, 0x0, 0x8, 0x7b}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x8, 0x7, 0xfff, 0x10, 0x800, 0xc0, 0x5, 0x4, 0xd, 0x9, 0x2, 0x54e, 0x1, 0x3, 0x80000000, 0x81, 0x8000, 0xe15, 0x2, 0x7, 0x2, 0xff, 0x8, 0x80000000, 0x0, 0x8, 0x4, 0x4, 0x7, 0x156, 0x1, 0x5, 0x2, 0x5, 0x1ff, 0x9, 0x4, 0x3, 0x3, 0x80, 0x6, 0xdce, 0x5, 0xbc, 0xffffffff, 0x3, 0x6a8, 0x4, 0x1, 0x0, 0x6, 0xf, 0xd, 0x6, 0x4d7, 0x7, 0xd623, 0x273c, 0x7, 0x9, 0x8001, 0x401, 0x8, 0x1000, 0xb7fb, 0x7, 0xff, 0x6, 0x7c, 0x6, 0x1ff, 0x0, 0x4, 0x4, 0x401, 0x97, 0x7fff, 0xfff, 0x1, 0xe, 0x7, 0xfffffff8, 0x70, 0xfffffb3e, 0x6, 0x4, 0x3, 0x586a6233, 0xc, 0xbd0b, 0x7a01, 0x4, 0x4, 0xff, 0x4, 0x9, 0xb4ac, 0x0, 0x8c000000, 0x8000, 0x6, 0x676f, 0x1, 0x8f3, 0x3ab, 0x1, 0x294e, 0xa, 0xf, 0x1, 0xed, 0x80000000, 0x2, 0x2, 0x6, 0x2, 0x8, 0x9, 0x7c, 0x2, 0x81, 0x2, 0x4, 0x9, 0x38ccda04, 0xd, 0x0, 0x800, 0xf43, 0x1ff, 0x1, 0x0, 0x3, 0x2, 0x4, 0x1, 0x4, 0x1, 0x2, 0xda8, 0x5, 0x7, 0x2, 0xfffffff8, 0x0, 0x6, 0x3, 0x6, 0x2, 0xfffffff9, 0x0, 0x1, 0x780, 0x200, 0x3, 0x7, 0xc8, 0x2, 0x7, 0x9, 0x5, 0x98f, 0xffffffff, 0xfffffffa, 0xffffffce, 0x2, 0x7, 0x10001, 0xe485, 0xfffffffe, 0x8, 0x7ff, 0x100, 0x9bb, 0x1, 0x6, 0x101, 0x10000, 0x9, 0x7, 0x6, 0x7ff, 0xfffffff8, 0x9, 0xffffffb4, 0x2a, 0x5, 0x8, 0x4, 0x5, 0x3, 0x5, 0x35, 0xc1, 0x4, 0x1ff, 0xfff, 0xfffffffe, 0x80000000, 0xce8, 0x335, 0xa59, 0x9, 0x5, 0x5, 0x4, 0x101, 0x2, 0x4, 0x5b, 0x3, 0x8, 0x4, 0x3, 0x8, 0xd4, 0x1, 0x10000, 0x91c, 0x4, 0x6, 0x7, 0x8, 0x5, 0xfffffffe, 0x3, 0x6, 0x8, 0x6, 0x7, 0x0, 0x2, 0x0, 0x2, 0x2, 0xb27, 0xa857, 0x6, 0x8, 0x1, 0x6, 0x8, 0x3, 0x412d, 0x9, 0xfffffffc, 0x5, 0xee11, 0xf, 0x7, 0x7, 0x7, 0x1, 0xa2]}]}, @TCA_BASIC_EMATCHES={0x144, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x100, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x3}, "e6a30773e7521baab77c79cdd2ca754466c4c0867f2d938ec4892836d6e9b3d5b63e97b6bc1748b71c7be2b96338b6d0cebe438f32dcef74df1e06ece085d368e74f3234ccd93620e5b9a6f2afeb68ac74b7a1bfaa4419e5306b2536ebdf4494559d1044482cbce7125a8d0b19b6ef684d616b5406ae0154d1fa3392b7f57987c23f6d38a7661015c38f90a670073f0c7e87c494e8b4436da57a1abd12741289a9faa27b4ee440e41561fdc2ca4be0b27c2b70e9a071d4809aa2dcc11160ac52abe28f3bcd61994febebfc68dac06a1e5a4009f8a2ec"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x0, 0x2, 0xf18}, {0x2, 0x6, 0x1, "fa8dfe808f85"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x26}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xfff9, 0x9, 0xfe21}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x9}, {0x1, 0x3, 0x1}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x2a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1b8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x521b, 0x7, 0xe}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0xffff, 0x0, 0x4}, "2dec3ccfca3766810b084374dc2f029b7173c3aef13eee6dc3ccc0326093c8697537aff690c607586e8c75c966126b66c89654c5f8266dcd60076ff60a3cdf02fe618b39ed3d144d088b5b01ef83b457577cfb5aec76833f03088c3059a8d1f9bdc0a1fc53a1b0cbe0c17b66e987834a89cfe9ba57d04311ffbbf5de0488f8de7ffc1290ce2b2cf203540334c3d82cfcbbb7d3bb50180fc1febbea044df276b6e271b738e9fe157370dc9083f0104252fd31a685965f20be223ec0f4349370252bc3ed64dc2c"}}, @TCF_EM_CONTAINER={0x54, 0x2, 0x0, 0x0, {{0x1ff, 0x0, 0x4}, "481a53009788205fcb5adbbe1ab2adf7ed2bfa4ae6e28709dd41fdf32284c3ce163ab8b04a361ab16f9b2dae50583e43562c6ccb55d0d7ed244d9de470be453b0ffe913b37"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x80, 0x8, 0xf048}, {0x2, 0x0, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xffff, 0x8, 0x3}, {0x1, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0xfffe}, {{0x2, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x8, 0x4, 0xff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3, 0x1}, {0x2, 0x6}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x100, 0x8, 0x6}, {0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xbc, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd}, @TCA_EM_IPT_MATCH_DATA={0xa5, 0x5, "4654b3f2333655e7a63815fdab26ef1577b9f5e260a581dcc3dedc106595bf1705f5ed0f73aa285325cadcea4de31cdb145a351457555169401338735503986e846776012fadfea906ed82b03bee6738d1a62aa160701f873e53e9680d31d34be1c87d05596f9ff377013cf568c72508f99a9afea52909800fbc41468ece58e5878f01e1c0073496930ce35c7ab720041cb2fc3bae9d37a6e223127c48eb71ea53"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd38}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x9}, {0x1, 0x5, 0x1, 0x2, 0x4, 0x2}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x6}}, @TCA_BASIC_ACT={0x304, 0x3, [@m_nat={0x80, 0x12, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4a9, 0xfd, 0x4, 0x7, 0x9036}, @empty, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x3, 0x7, 0x14e9e60d, 0x8}, @remote, @multicast1, 0xffffffff}}]}, {0x5, 0x6, "b5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xbc, 0x4, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x523f87dd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x65, 0x6, "bd080e6fb60f35bcd85806595d7905589259ae00a2aa1ff6e76601d5d2f6678451c4148bcbed030ca29166c55b7bb36276ac5c12d00abf269d836ce31b5c83a0b8b8262d38b6f60f4168307830375f497a05b9573d1fb076ffd89faa5c9586fe61"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x100, 0x1c, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x75, 0x6, "0a9d63ae63ca86108945cae9c217e5ab671172b02832f5f2bc3a4f9d7668c345ddbe28028896d842258645f838efe1ab872fab1a48a2f97cf9e1d9001e56daf12ac040abf9c801602b04af4d06ea6c4f7d25f1904c7d362e7be8b4f673799d8dcabe3dfddd87ea250ecb4487521e0327f1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0xc4, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x10, 0x4, 0x7, 0x3}, @broadcast, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x8, 0x5, 0x6}, @private=0xa010100, @rand_addr=0x64010102, 0x0, 0x1}}]}, {0x4a, 0x6, "de86b4cae222297382474d4c52a9393d41cc5948045287a761e78c3425a289492df35bf0988ec6d9e753f86303fd73be3a46b84c0f12ac35ccc5f3a0854e98584e6a9c173248"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.677723875s ago: executing program 2 (id=863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0), 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r4, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000240)=0x7) bind$ax25(r3, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) futimesat(0xffffffffffffffff, 0x0, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa000000000000000003000600000000000200000000000000000000000000000055036dc8572f8465efe773253e66376e71af972a38dbe038bb1cd673e79ed9a0733c891b5221910548936aa3603600a9639b1857eae730ed14ce804ce4436f2418dd62fb7a904f2644705ff5c738e4e0a1c21d165f941e5db54dc9a08c652695e4489c58cbffbe3614044a65f741481e334daf542ba1218644f2aca0a0119a59f001b321adbd6f23a1393970b592564f2b0b8179f6aa1cdf14913728f9c8cb3b48fe6cc8f5575c98f5336a9960da09b5e54183159fc2d3ca9c871eafd8b11d92c9bec0591a0c58217c91d6c7649c66fc8f21337e62a98bc529e8c205dedd950e97378449366b278c48bb317e65401182e0622bb2884ebda1108fd573c9e89b08a4b2ab71eb21d20bf01de0ece516"], 0x80}}, 0x0) 3.677557325s ago: executing program 3 (id=864): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x95, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0x126}], 0x1}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)="a9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002e40)="fbeb6ccbcd8cbecab0", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002fc0)}], 0x1}}], 0x4, 0x1) shutdown(r0, 0x1) 3.526749147s ago: executing program 3 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$eJzs3U9vHGcdB/Df/vHacds0qlAVIg5uyp+W0vxPoPxryoEDHEBCPZPIdauUFFASEK0i4soHxAV4CXDphUPfAi+grwHxAoiU9NQDZdDYz+OMN+usTeKZXT+fj7SZ+c2z430m3x3PrGdmJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+NEPf3a2FxFXfpsmHIt4OgYR/Ygjdb0S9cjl/PxhRByPzeZ4PiIGixH1/Jv/PBtxISI+ORpx7/7t1XryuT324+KZWzc+//EP/vmHP28cf/etn3803v7TL5z/+I93Io795LWPP7/zZJYdAAAASlFVVdVLH/NPpM/3/a47BQC0Im//qyRPV6vVavUTrf/U38/zn36q6/6qD2ndVE12p1lExHpznnqfweF4AJgz6/FZ112gQ/Iv2jAinuq6E8BM63XdAQ7Evfu3V3sp315ze7Cy1Z7/Trkj//Xe9vUduw2nGT/HpK3310YM4rld+nOkpT7Mkpx/fzz/K1vto/S8g86/LbvlP9q69Kk4Of/BeP5jduT/l4iY2/z7E/MvVc5/uJ/81wdzvP7LHwAAAACAwy///f9Yx8d/Fx9/UfbkUcd/V1rqAwAAAAAAAAA8aY97/79t7v8HAAAAM6v+rF7769EH03b7LrZ6+pu9iGfGng8UZqXx5YAAAAAAAAAAAAAAQDuGEcvpvP6FiHhmebmqqvrRNF7v1+POP+9KX34oWde/5AEAYMsnR8eu5e9FLEXEm+m7/haWl5eraiEilqsji3l/drS4VB1pfK7Nw3ra4mgPO8TDUVX/sKXGfE3TPi9Pax//efVrjarBHjrWjg4DB4CI2Noa3bNFOmSq6tnoei+H+WD9P3ys/+xF1+9TAAAA4OBVVVX10td5n0jH/PtddwoAaEXe/o8fF1Cr1epi6k+3Js5Mf9TqA6ybqsnuNIuIWG/OU+8zuB0/AMyZ9fis6y7QIfkXbRgRx7vuBDDTel13gANx7/7t1V7Kt9fcHqxstedzQXbkv97bnC/PP2k4zfg5Jm29vzZiEM/t0p/nW+rDLMn598fzv7LVnm/xv53P0sHk35bd8q+X81gH/elazn8wnv+Yg17/27IR/Yn5lyrnP9xX/gP5AwAAAADADMt//z/m+G9eZAAAAAAAAACYO/fu317N173m4/9fmvC8XnPM9Z+HRs6/t+f8Xf97mOT8++P5j52QM2iM333jQf6f3r+9+tGtf38xD2c+/4XBqH7thV5/MEzn/FQLb8e1uB5rceah5w93tJ99qH1hR/u5Ke3nH2of1e1HcvupWI1fxfV4a7t9ccqJUUtT2qsp7Tn/gfW/SDn/YeNR57+c2ntjw9rdD/sPrffN4aTXufz3/3z14bWrDcMd1UYMtpet4Wj9z8nW+vTA5v/JU6P4zc21G6d+d/XWrRtnIw12TD0XafCE5fwX0iPn/9KLW+35935zfb374Wjf+c+KjRhOyn/z/f1iY7xe3pdb7lsXcv6j9Mj55y3Q5PV/nvOfuP5vLt8rHfQHAAAAAAAAAAAAAAAAHqWqqs1LRC9HxKV0/U9X12YCAO3K2/8qydPVarVarVYfvrqpmuz1ZhER/2jOU+8z/H7SDwMAZtl/I+JfXXeCzsi/YPn7/urhl7vuDNCqm+9/8Iur16+v3bjZdU8AAAAAAAAAgP9Xvv/nSuP+z5vnAY3dN3rH/V/fiJW5vf9nfzTYvNd5WqAX4tH3/z4Zj77/93DK6y1MaR9NaV+c0r40pX3ihR4NOf8XUsY5/xNpwUq6/+tLHfSnazn/k+lezzn/r409r5l/9bd5zr+/I//Tt9779emb73/w6rX3rr6z9s7aL8+euXTh/MUL5y9ePP32tetrZ7b+7bDHByvnn+997TzQsuT8c+byL0vO/yupln9ZUv7bu6HyL0te//P+nvzLkvPPn33kX5ac/8upln9Zcv5fT7X8y5LzfyXV8i9Lzv8bqZZ/WXL+r6Za/mXJ+Z9KtfzLkvM/nWr5lyXnn49wyb8sOf98ZoP8y5LzP5dq+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf9LqZZ/WXL+30y1/MuS8/9WquVflpz/a6mWf1ly/t9OtfzLkvP/TqrlX5ac/3dT/aj8322xX7Qj5/+9VFv/y5Lz/36q5V+WnP/rqZZ/WR58/7+RfY8sz0Y3jBh58iNd/2YCAAAAAAAAAAAAAMa1cTpx18sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17jZGrvO8HfvZmrw0B/8OdOGCbm4GF3fUNHGIwScifkl4oCWnTkhrHXhsnvtW7TgChsim0JQpSkdoX9EXTJEqiSG0FqiI1lWiE1Ejtm6p51QhVilopUl0JKgcllVIFtjpznufZmdnZmbW9a5855/OJ8M/eOWfmmTNnZve70XcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2cYPT/3RQJZl+X+NP9Zl2cX539dku/N/zu640CsEAAAAztU7jT//6tL0hd1L2Klpm3+87l++Mzc3N5d95u1T7/7J3Fy6YEOWDa3OssZl0T/9/GdzzdsEz2WjA4NN/x7scfNDPS4f7nH5SI/LV/W4fHWPy0d7XL7gACywpvh9TOPKbmz8dV1xSLPLs5HGZTd22Ou5gdWDg/F3OQ0DjX3mRg5kh7LD2VQ2sWCfgcb/suy1jfltPZjF2xpsuq31WZad/skz++IaBsIxvjFrubGG5sfurfuzDW//5Jl935p585pOs+dhWLDSLNu8KV/n81k2/+uqbCBbnY5JXOdg0zrXd1jnUMs6Bxr75X9vX+fpJa4z3u/RsM4fdFnn+vC1J2/Ismw2W3Sbds9lg9natltNx3u0OCPy68gfyvdmw2d0nmxcwnmS7/PjG1rPk/ZzMh7/jeGYDC+yhuaH460vrlpw3M/2PMnvdRnO1fy6H85vdHS0+VerLedqvs0zNy1+DnR87DqcA+lcbjoHNvU6BwZXDTXOgcH5NW9qOQcmF+wzmA00buvUTd3PgfGZI8fHp596+o5DR/YenDo4dXRyYse2rdu3bd2+ffzAocNTE8WfZ3ZI+8jabDCdg5vCa008B29p27b5lJz72vI9D0ZL8jzI7/snbs4XdPFgtsg5nm/z/OZzfx6k7/tNz4PhpudBx9fUDs+D4SU8D/JtTm9e2vfM4ab/Oq1hpV4L1zWdAxfy+2F+m4/duvhr4fqwrhduO9Pvh0MLzoF4twbCcy//Svp5b/TucFwWnhfX5hdctCo7OT114s4n987MnJjMwjgvLmt6rNrPl7VN9ylbcL4MnvH5svsvf3HztR2+vi4cq9Hb5x+rVR0eh3ybbWPdH6vGq3vn49ny1S1ZGMvsfB/PTt/N8uOZskSXcz/f5vk7zv1nwZRLml7/Rnq9/g2NDBevf0PpaIy0vP4tfGiGGivLstN3LO31byT8d75f/y4vyetffqweu7P7OZBv88L4mZ4Dw11f/24IcyCs59aQGEabcv+7jctni9O06bHsed4MD4+E82Y43mLrebN1wT75teW3vXni7M6bzTe0PlYtP7dU8LzJj9WfTnQ/b/JtXp8899eONfGvTa8dq3qdAyNDq/L1jqSToHi9m1sTz4E7s33Zsexwtj/tkz/K+W2NbVnaObAq/He+XzuuLsk5kB+rl7d0Pwfybb6/dXl/dtocvpK2afrZqf33C4tl/muH56+v/bAtd+bP1/mRbd1/N5Rv8+a2M80Z3Y/T7eErF3U4Tu3Pn8XO6f3Z+TlOV4d1Ht7e/XdT+TaX71ji+bQ7y7I3Jt9o/L4r/H73b07+63dafu/b6XfKb0y+8dD4Iz88k/UDAHD23m38Obuq+Fmz6f+xXsr//w8AAAD0hZj7B8NM5H8AAACojJj7h8JM5H8AAACojJj7h8NMapL/n7h75yvvPJuldwOcC+Ll8TA8fG+xXex4z4Z/b5ibl3/9Q98YeeVLzy7ttgezLPvFQ+/ruP0T98Z1FY7HdX6g9esLXH39km7/8Ufnt2t+/4TTO4vrj/dnqadB7Cq/Nr6lcb0bnppszNcfyhrzkdkXniuuv/h33P7U1mL7Pw9vWrL7wEDL/pvDem4Mc0N4T5mHd88fh3zG/V5Zf90/XPbJ+duL+w1suqRxN1/+veJ643tEvXRZsX2834ut/++//O1X8u2fvKnz+p8d7Lz+U+F6fxzmz3cV2zcf8y81rf8Pwvrj7cX97vz69zqu/9Wriu1fDefFV8NsX//9f/z+dzo9XvF2dt9T7Bdvf+J/tjX2i9cXr799/aPPTrYcj/brf/3t4np2ff6nQ83bx6/H24kev6f1/B4Ij29LjzzLsm//YdZynLMPFvv9Xdv64/Udv6fz+m9vW+fxgesb+8/fn3Ut9+sr39zS8f7G9ez+63Ut9+elB8Lxe3v8+/n1nnoknI/h8v/9QXF97e9l+uoDra83cfuvriuet/H6xtvW/1Lb+mevz49d7/U/+Hax/lfvW92y/t0fDefTg8Xstf6Df3Fpy/5f+1bxeJz4wtjRY9MnD+0Pd2Zd2/N49eiatRdd/J5LLg2vpe3/3nNs5ompExsmNkxk2YY+fMvAlV7/18P872LMLv8tFH740+K8e/FjxfetW35W/Pul8PXHw+MZvz9+5c9GWs7X9sd99r5inuv6bwvrWKqrvvwf13f48n8ueM/fU59+7eTf/v6b7T8XxPtz/IrRxv17eeOVjcsGXi8ub3+96uXfr2h9Xv9oeKIxvxuO61x4Z+ZNVxa313798b1JXvx48fyNP8nF/bO29xNZN9R6P851/T8KP8d87+rW1794fnz32bZ3c16XDeRLmA2vD9lscXncKh7vF09f2fH24vvwZLPXnMkyFzX91PT44UNHTz45PjM1PTM+/dTTe44cO3l0Zk/jvUv3fLbX/vPP77WN5/f+qR3bssaz/VgxVtiFXv/xR/ftv2vi5v1TB/aePDDz6PGpEwf3TU/vm9o/ffPeAwemvtBr/0P7d01u2bn1ri1jBw/t33X3zp1bd44dOnosX0axqB52THxu7OiJPY1dpndt2zm5ffu2ibEjx/ZP7bprYmLsZK/9G9+bxvK9Pz92Yurw3plDR6bGpg89PbVrcueOHVt6vvvjkeMHpjeMnzh5dPzk9NSJ8eK+bJhpfDn/3tdrf+ph+lh4vWszEH46/9TtO9L74+a+8cVFr6rYpPXH0+yt8F5Q8ftbr3/H3D8SZlKT/A8AAAB1EHN/eOP/+QvkfwAAAKiMmPtXh5nI/wAAAFAZMfePhpnUJP/r/+v/6//r/+v/n8f+f6b/v9z0/5el/7+Q/v+S6P/r/+v/6//TXdn6/zH3r8myWuZ/AAAAqIOY+9eGmcj/AAAAUBkx918UZiL/AwAAQGXE3H9xmEk98v9I+1/1//X/9f+b+/9xW/3/TP9f//8s6f/r/3ej/6//38/rL2H/f43+P2VTtv5/zP3vCTOpR/4HAACAWoi5/5IwE/kfAAAAKiPm/kvDTOR/AAAAqIyY+9eFmdQk//v8f/1//X+f/6//r/+/kvT/9f+70f/X/+/n9Zew/+/z/ymdsvX/Y+7/f2EmNcn/AAAAUAcx9783zET+BwAAgMqIuf+yMBP5HwAAACoj5v7Lw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+K8JMapL/AQAAoA5i7r8yzET+BwAAgMqIuf+qMBP5HwAAACoj5v6rw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+a8JMapL/AQAAoA5i7r82zET+BwAAgMqIuf99YSbyPwAAAFRGzP3rw0xqkv/1//X/S9//H9T/1/8v6P/r/3eyvP3/wUUv0f8v6P+30v/X/9f/1/+nu7L1/2Puf3+YSU3yPwAAANRBzP3XhZnI/wAAAFAZMfdfH2Yi/wMAAEBlxNy/IcykJvlf/1//v/T9f5//r/8fZu36/zMD+v9L4PP/9f8z/f+zdqH78/2+fv1//X96K1v/P+b+jWEmNcn/AAAAUAcx928KM5H/AQAAoDJi7r8hzET+BwAAgMqIuf/GMJOa5H/9/7Ps/69p/af+f+f16//r/+v/+/x//X/9/270//X/+3n9+v9L6/+v6nVFVFrZ+v8x998UZlKT/A8AAAB1EHP/zWEm8j8AAABURsz9t4SZyP8AAABQGTH3bw4zqUn+1//3+f/6//r/+v/6/ytJ/3/J/f81Z7Mu/f+C/v/ZudD9+X5ffz/1/0c77O/z/zkfytb/j7n/1jCTmuR/AAAAqIOY+28LM5H/AQAAoDJi7r89zET+BwAAgMqIuX8szKQm+V//X/9f/1//X/9f/38lVbX/n15Hff6//r/+v/7/Cvf/v7nI/v3y+f/UW9n6/zH33xFmUpP8DwAAAHUQc/+dYSbyPwAAAFRGzP3jYSbyPwAAAFRGzP0TYSY1yf/6//r/+v/6//r/+v8rqar9//bP/8+yTP9f/z/R/9f/L9vn/3ei/8/5ULb+f8z9k2EmNcn/AAAAUAcx928JM5H/AQAAoDJi7t8aZiL/AwAAQGXE3L8tzKQm+V//X/9f/1//X/9f/38l1aX/7/P/i8v1/wv6//r/+v/6/3U02OFrZev/x9y/PcykJvkfAAAA6iDm/h1hJvI/AAAAVEbM/XeFmcj/AAAAUBkx998dZlKT/K//r/+v/6//X97+f+vtr1z//7/0/1eQ/r/+fzf6//r//bx+/X/9f3pb3v7/pefc/4+5f2eYSU3yPwAAANRBzP0fCDOR/wEAAKAyYu6/J8xE/gcAAIC+0ulzCKOY+z8YZlKT/K//X/X+/9xq/X/9//7t/7ceT5//r//fSXj51P9fonr1/9csuD39/1YXuj/f7+vX/9f/p7fl7f8v+PH0jPv/MffvCjOpSf4HAACAOoi5/94wE/kfAAAAKiPm/vvCTOR/AAAAqIyY+3eHmdQk/+v/V73/X77P/x/I9P/1/wv6//r/y8Hn/+v/Zz7//6ydbX8+vu+G/n95+v/5OaT/TxmVrf8fc//9YSY1yf8AAABQBzH3fyjMRP4HAACAyoi5/8NhJvI/AAAAVEbM/R8JM6lJ/tf/1//3+f/6//r/+v8rSf9f/78b/f/+7P9H+v/l6f/7/H/Kqmz9/5j7HwgzqUn+BwAAgDqIuf+jYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/wTCTmuR//X/9f/1//X/9f/3/laT/r//fjf6//n8/r1//X/+f3srW/4+5/5fCTGqS/wEAAKAOYu5/KMxE/gcAAIDKiLn/Y2Em8j8AAABURsz9vxxmUpP8r/9/fvr/g+n69f/1//X/9f/1/5dTn/b/R/X/C/r/+v/9vH79f/1/eitb/z/m/l8JM6lJ/gcAAIA6iLn/V8NM5H8AAACojJj7fy3MRP4HAACAyoi5/+Ewk5rkf/1/n/+v/6//X9r+/3Dr8dT/1//vpE/7/z7/P9D/1//v5/Xr/+v/01vZ+v8x9/96mElN8j8AAADUQcz9j4SZyP8AAABQGTH3fzzMRP4HAACAyoi5/xNhJjXJ//r/+v/6//r/pe3/tx1P/f+y9v//reul+v/6/93o/+v/9/P69f/1/+mtbP3/mPsfDTOpSf4HAACAOoi5/5NhJvI/AAAAVEbM/b8RZiL/AwAAQGXE3P+bYSb9mf8Hz3QH/X/9f/1//X/9f/3/laT/v7D/n7+GXcj+/6qlbKj/vyT6//r/+v/6/3RXtv5/zP2fCjPpz/wPAAAAdBBz/2+Fmcj/AAAAUBkx9/92mIn8DwAAAJURc/9jYSY1yf/6//r/+v/6//r/+v8rSf/f5/93o/+v/9/P69f/1/+nt7L1/2Pu/3SYSU3yPwAAANRBzP2/E2Yi/wMAAEBlxNy/J8xE/gcAAIDKiLn/8TCTmuR//X/9f/1//f/l6f/P6f/r/3ek/6//343+v/5/P69f/1//n97K1v+PuX9vmElN8j8AAADUQcz9nwkzkf8BAACgMmLu3xdmIv8DAABAZcTcvz/MpCb5X/9f/1//X//f5//r/68k/X/9/270//X/+3n9+v/6//RWtv5/zP1TYSY1yf8AAABQBzH3Hwgzkf8BAACgMmLuPxhmIv8DAABAZcTc/0SYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/n9ev/6//T2/L1///52Xp/8fcfyjMpCb5HwAAAOog5v7PhpnI/wAAAFAZMfd/LsxE/gcAAIDKiLn/cJhJTfK//r/+v/5/Bfv/w/r/mf5/aej/6/93o/+v/9/P69f/1/+nt+Xr/2fL0v+Puf9ImElN8j8AAADUQcz9R8NM5H8AAACojJj7j4WZyP8AAABQGTH3Hw8zqUn+1//X/9f/r2D/3+f/N+j/l4P+v/5/N/r/+v/9vH79f/1/eitb/z/m/t8NM6lJ/gcAAIA6iLn/RJiJ/A8AAACVEXP/dJiJ/A8AAACVEXP/TJhJTfK//r/+v/6//r/+v/7/StL/1//vRv+/f/r/Ix321//X//8/9u6jyY676uP41WPLksr1FCv2vAV27OAd+DWwYUuxIOeMAZNzzjnnaHLOOZick0FkMFSZsu45x5Y16h6N5+p2/8/ns/DxyGOpramS61dT32r9P3OW1v/n7r9v3NJk/wMAAEAHufvvF7fY/wAAADCM3P33j1vsfwAAABhG7v4HxC1N9r/+X/+v/19M/7/t/PT/+n/9/yXR/+v/N/vu/8/EB4P3/wfR/+v/9f/MWVr/n7v/gXFLk/0PAAAAHeTuf1DcYv8DAADAMHL3Pzhusf8BAABgGLn7HxK3NNn/+n/9/7j9/6m19f/e/59f1xH7/xO3/rL6/+Ol/9f/b/bd/zd5//9B9P/6f/0/c5bW/+fuf2jc0mT/AwAAQAe5+x8Wt9j/AAAAMIzc/Q+PW+x/AAAAGEbu/kfELU32v/5f/z9u/7+69//r//PrOkT/f6Z+Hu//1//r/y9O/6//X/Pz6//1/8xbWv+fu/+RcUuT/Q8AAAAd5O5/VNxi/wMAAMAwcvc/Om6x/wEAAGAYufsfE7c02f/6f/2//l//r/+/DO//1//r//X/B9L/6//X/Pz6f/0/85bW/+fuf2zc0mT/AwAAQAe5+x8Xt9j/AAAAMIzc/Y+PW+x/AAAAGEbu/ifELU32v/5f/6//1//r//X/u6T/1/9P0f/r/9f8/Pp//T/zdt7/X3PtuXvY/j93/7VxS5P9DwAAAB3k7n9i3GL/AwAAwDBy9z8pbrH/AQAAYBi5+58ctzTZ/wf0/1ds9P9N+/+bT+j/9f/L7P9vij9l9P/6/wutu/8/rf/X/5/74eX1/4f7ndD/6//1/8zZef8/0/vf/uPc/dfFLU32PwAAAHSQu/8pcYv9DwAAAMPI3f/UuMX+BwAAgGHk7n9a3NJk/3v/v/7/ON//nz+v/n9L/+/9//p//b/3/0/bYf9/r/zN1P9f3L77+bU//1T/f/dDPL/+nw6W1v/n7n963NJk/wMAAEAHufufEbfY/wAAADCM3P3PjFvsfwAAABhG7v5nxS0N9v+V+v96jqT/9/7/Q/X/Z7b/vv7//OfR/+v/D6L/1/9P8f5//f+an9/7/+f7/6vnfhKGt7T+P3f/s+OWBvsfAAAAusjd/5y4xf4HAACAYeTuf27cYv8DAADAMHL3Py9uabL/9f/6f/2/9//fof7/Cv2//n+a/l//P0X/r/9f8/Pr/73/n3lL6/9z9z8/bqnhd+UR/isBAACAJcnd/4K4pcn3/wEAAKCD3P0vjFvsfwAAABhG7v4XxS1N9r/+X/+v/9f/e/+//n+X9P/D9f8n9P+30v/r//X/+n+mLa3/z93/4rilyf4HAACADnL3vyRusf8BAABgGLn7Xxq32P8AAAAwjNz9L4tbmux//b/+X/+v/9f/6/93Sf8/XP/v/f+3of/X/+v/9f9MW1r/n7v/5XFLk/0PAAAAHeTuf0XcYv8DAADAMHL3vzJusf8BAABgGLn7XxW3NNn/+n/9v/5f/6//1//v0vL7/5OH+iz9/5b+/3y76v9PX+TX0/8v6/mPp//Pr77+nzEtoP+/x20/zt3/6rilyf4HAACADnL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/i/X/Z6/e/vOZ/j9/w/T/cfX/+v+N/r/o//X/m1X0/4ej/9/S/5/P+//1/97/r/9n2gL6//M+zt3/+rilyf4HAACADnL3vyFusf8BAABgGLn73xi32P8AAAAwjNz9b4pbmux/7//X/+v/9f/6f/3/Lun/9f9TVtT/nzroB/X/+n/9v/6faUvr/3P3vzluabL/AQAAoIPc/W+JW+x/AAAAGEbu/rfGLfY/AAAADCN3/9vilib7X/+v/997//9/+v+k/4+vq/5f/38J9P/6/433/x/Zvvv5tT+//l//z7yl9f+5+98etzTZ/wAAANBB7v53xC32PwAAAAwjd/874xb7HwAAAIaRu/9dcUuT/a//1//vvf/3/v+i/4+vq/5f/38J9P/6/43+/8j23c+v/fn1//p/5i2t/8/d/+64pcn+BwAAgA5y978nbrH/AQAAYBi5+98bt9j/AAAAMIzc/e+LW5rsf/2//l//r//X/+v/d0n/r/+fcnn7/+vO6v/Pt+9+fu3Pr//X/zNvaf1/7v73xy1N9j8AAAB0kLv/A3GL/Q8AAADDyN3/wbjF/gcAAIBh5O7/UNzSZP/r/9fe/9/zxniCpfX/+Sn6f/2//l//r//X/1/Uct//f/s/KQ6m/9f/6//1/0y7bP3/va+5z91u+ZuZ/j93/4fjlib7HwAAADrI3X993GL/AwAAwDBy938kbrH/AQAAYBi5+z8atzTZ/z36/5MXfNo4/b/3/+v/F93/5x+q+n/9v/5f/3+g5fb/h6P/1//r//X/TFva+/9z938sbmmy/wEAAKCD3P0fj1vsfwAAABhG7v5PxC32PwAAAAwjd/8n45Ym+79H/38h/f/Wsff/N99J/6//L97/r//f6P/1/zP0//r/NT//0P3/iY3+n2OxtP4/d/+n4pYm+x8AAAA6yN3/6bjF/gcAAIBh5O7/TNxi/wMAAMAwcvd/Nm646//v75EuK/2//t/7//X/+n/9/y7p/4/Q/5+48tDPpf/f0v8fzb77+bU//9D9v/f/c0yW1v/n7v9c3OL7/wAAADCM3P2fj1vsfwAAABhG7v4vxC32PwAAAAxg27vn7v9i3NJk/+v/9f/6f/2//l//v0v6f+//n6L/1/+v+fn1//p/5i2t/8/d/6W4pcn+BwAAgA5y9385brH/AQAAYBi5+78St9j/AAAAMIzc/V+NW5rsf/2//l//r//X/+v/d0n/r/+fov/X/6/5+fX/+n/mLa3/z93/tbilyf4HAACADnL3fz1usf8BAABgGLn7vxG32P8AAAAwjNz934xbmux//b/+X/+v/9f/773/P7nR/x+Z/l//v9H/H9m++/m1P7/+X//PvKX1/7n7vxW3NNn/AAAA0EHu/m/HLfY/AAAADCN3/3fiFvsfAAAAhpG7/7txS5P9P3L/P/Vp+v8t/b/+f6P/X0L/7/3/d4D+X/+/0f8f2b77+bU/v/5f/8+8pfX/ufu/F7c02f8AAADQQe7+78ct9j8AAAAMI3f/DZvN9fY/AAAAjOmGc389vflB3NJk/4/c/0/R/2/p//X/G/2//n/H9P/6/yn6f/3/mp9f/6//Z97S+v/c/T+MW5rsfwAAAOggd/+P4hb7HwAAAIaRu//HcYv9DwAAAMPI3f+TuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9P41bmux/AAAA6CB3/8/iFvsfAAAAhpG7/+dxi/0PAAAAw8jd/4u4pcn+1//r//X/+n/9v/5/l/T/+v8p+n/9/5qfX/+v/2fe0vr/3P2/jFua7H8AAADoIHf/r+IW+x8AAACGkbv/13GL/Q8AAADDyN3/m7ilyf7X/+v/9f/6f/2//n+X2vb/t/xvVf8/S/+v/1/z8+v/9f/MW1r/n7v/t3FLk/0PAAAAHeTu/13cYv8DAADAMHL3/z5usf8BAABgGLn7/xC3NNn/+n/9v/5f/7+O/v8q/b/+/0CL7f+9//9Q9P/6/zU/v/5f/8+8pfX/uftvjFua7H8AAADoIHf/H+MW+x8AAACGkbv/T3GL/Q8AAADDyN1/Nm5psv/1//r/Ifv/U/r/8fp/7/9fZf9/F/2//n+a/l//v+bn1//r/5m3tP4/d/+f45Ym+x8AAAA6yN3/l7jF/gcAAIBh5O7/a9xi/wMAAMAwcvf/LW5psv/1//r/Ift/7//X/+v/F0P/r/+fov/X/6/5+fX/+n/mLa3/z93/97ilyf4HAACADnL3/yNusf8BAABgGLn7/xm32P8AAAAwjNz9/4pbmux//b/+X/+v/9f/6/93Sf+/3v7/qo3+f47+X/+v/9f/M21p/X/u/n/HLU32PwAAAHSQu/+muOXA/X/ny/RUAAAAwHHK3f+fuMX3/wEAAGAYufv/G7c02f/6f/2//l//r//X/++S/n+9/b/3/8/T/+v/9f/6f6Ytrf/P3f+/AAAA///XHBWv") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xfffffbffa003e45b, 0x700000000000000) 1.017085928s ago: executing program 0 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x20040098}, 0x40010) 402.423157ms ago: executing program 3 (id=867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x80000) r5 = dup(r4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xf0}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 143.603128ms ago: executing program 1 (id=868): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) 141.763198ms ago: executing program 2 (id=869): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xbf0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff2, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_basic={{0xa}, {0xba4, 0x2, [@TCA_BASIC_POLICE={0x474, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5137}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x10000000, 0x8, 0x100, 0x2, {0x80, 0x1, 0x1e1, 0x4, 0x1, 0x3525}, {0x7, 0x1, 0xd76, 0xfffc, 0x8b94, 0xf}, 0x0, 0x8, 0x7b}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x8, 0x7, 0xfff, 0x10, 0x800, 0xc0, 0x5, 0x4, 0xd, 0x9, 0x2, 0x54e, 0x1, 0x3, 0x80000000, 0x81, 0x8000, 0xe15, 0x2, 0x7, 0x2, 0xff, 0x8, 0x80000000, 0x0, 0x8, 0x4, 0x4, 0x7, 0x156, 0x1, 0x5, 0x2, 0x5, 0x1ff, 0x9, 0x4, 0x3, 0x3, 0x80, 0x6, 0xdce, 0x5, 0xbc, 0xffffffff, 0x3, 0x6a8, 0x4, 0x1, 0x0, 0x6, 0xf, 0xd, 0x6, 0x4d7, 0x7, 0xd623, 0x273c, 0x7, 0x9, 0x8001, 0x401, 0x8, 0x1000, 0xb7fb, 0x7, 0xff, 0x6, 0x7c, 0x6, 0x1ff, 0x0, 0x4, 0x4, 0x401, 0x97, 0x7fff, 0xfff, 0x1, 0xe, 0x7, 0xfffffff8, 0x70, 0xfffffb3e, 0x6, 0x4, 0x3, 0x586a6233, 0xc, 0xbd0b, 0x7a01, 0x4, 0x4, 0xff, 0x4, 0x9, 0xb4ac, 0x0, 0x8c000000, 0x8000, 0x6, 0x676f, 0x1, 0x8f3, 0x3ab, 0x1, 0x294e, 0xa, 0xf, 0x1, 0xed, 0x80000000, 0x2, 0x2, 0x6, 0x2, 0x8, 0x9, 0x7c, 0x2, 0x81, 0x2, 0x4, 0x9, 0x38ccda04, 0xd, 0x0, 0x800, 0xf43, 0x1ff, 0x1, 0x0, 0x3, 0x2, 0x4, 0x1, 0x4, 0x1, 0x2, 0xda8, 0x5, 0x7, 0x2, 0xfffffff8, 0x0, 0x6, 0x3, 0x6, 0x2, 0xfffffff9, 0x0, 0x1, 0x780, 0x200, 0x3, 0x7, 0xc8, 0x2, 0x7, 0x9, 0x5, 0x98f, 0xffffffff, 0xfffffffa, 0xffffffce, 0x2, 0x7, 0x10001, 0xe485, 0xfffffffe, 0x8, 0x7ff, 0x100, 0x9bb, 0x1, 0x6, 0x101, 0x10000, 0x9, 0x7, 0x6, 0x7ff, 0xfffffff8, 0x9, 0xffffffb4, 0x2a, 0x5, 0x8, 0x4, 0x5, 0x3, 0x5, 0x35, 0xc1, 0x4, 0x1ff, 0xfff, 0xfffffffe, 0x80000000, 0xce8, 0x335, 0xa59, 0x9, 0x5, 0x5, 0x4, 0x101, 0x2, 0x4, 0x5b, 0x3, 0x8, 0x4, 0x3, 0x8, 0xd4, 0x1, 0x10000, 0x91c, 0x4, 0x6, 0x7, 0x8, 0x5, 0xfffffffe, 0x3, 0x6, 0x8, 0x6, 0x7, 0x0, 0x2, 0x0, 0x2, 0x2, 0xb27, 0xa857, 0x6, 0x8, 0x1, 0x6, 0x8, 0x3, 0x412d, 0x9, 0xfffffffc, 0x5, 0xee11, 0xf, 0x7, 0x7, 0x7, 0x1, 0xa2]}]}, @TCA_BASIC_EMATCHES={0x158, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x100, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x3}, "e6a30773e7521baab77c79cdd2ca754466c4c0867f2d938ec4892836d6e9b3d5b63e97b6bc1748b71c7be2b96338b6d0cebe438f32dcef74df1e06ece085d368e74f3234ccd93620e5b9a6f2afeb68ac74b7a1bfaa4419e5306b2536ebdf4494559d1044482cbce7125a8d0b19b6ef684d616b5406ae0154d1fa3392b7f57987c23f6d38a7661015c38f90a670073f0c7e87c494e8b4436da57a1abd12741289a9faa27b4ee440e41561fdc2ca4be0b27c2b70e9a071d4809aa2dcc11160ac52abe28f3bcd61994febebfc68dac06a1e5a4009f8a2ec"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x0, 0x2, 0xf18}, {0x2, 0x6, 0x1, "fa8dfe808f85"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x26}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xfff9, 0x9, 0xfe21}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x10}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x9}, {0x1, 0x3, 0x1}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_BASIC_EMATCHES={0x2a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1b8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x521b, 0x7, 0xe}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0xffff, 0x0, 0x4}, "2dec3ccfca3766810b084374dc2f029b7173c3aef13eee6dc3ccc0326093c8697537aff690c607586e8c75c966126b66c89654c5f8266dcd60076ff60a3cdf02fe618b39ed3d144d088b5b01ef83b457577cfb5aec76833f03088c3059a8d1f9bdc0a1fc53a1b0cbe0c17b66e987834a89cfe9ba57d04311ffbbf5de0488f8de7ffc1290ce2b2cf203540334c3d82cfcbbb7d3bb50180fc1febbea044df276b6e271b738e9fe157370dc9083f0104252fd31a685965f20be223ec0f4349370252bc3ed64dc2c"}}, @TCF_EM_CONTAINER={0x54, 0x2, 0x0, 0x0, {{0x1ff, 0x0, 0x4}, "481a53009788205fcb5adbbe1ab2adf7ed2bfa4ae6e28709dd41fdf32284c3ce163ab8b04a361ab16f9b2dae50583e43562c6ccb55d0d7ed244d9de470be453b0ffe913b37"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x80, 0x8, 0xf048}, {0x2, 0x0, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xffff, 0x8, 0x3}, {0x1, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0xfffe}, {{0x2, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x8, 0x4, 0xff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3, 0x1}, {0x2, 0x6}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x100, 0x8, 0x6}, {0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xbc, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd}, @TCA_EM_IPT_MATCH_DATA={0xa5, 0x5, "4654b3f2333655e7a63815fdab26ef1577b9f5e260a581dcc3dedc106595bf1705f5ed0f73aa285325cadcea4de31cdb145a351457555169401338735503986e846776012fadfea906ed82b03bee6738d1a62aa160701f873e53e9680d31d34be1c87d05596f9ff377013cf568c72508f99a9afea52909800fbc41468ece58e5878f01e1c0073496930ce35c7ab720041cb2fc3bae9d37a6e223127c48eb71ea53"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd38}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x9}, {0x1, 0x5, 0x1, 0x2, 0x4, 0x2}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x6}}, @TCA_BASIC_ACT={0x30c, 0x3, [@m_nat={0x80, 0x12, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4a9, 0xfd, 0x4, 0x7, 0x9036}, @empty, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x3, 0x7, 0x14e9e60d, 0x8}, @remote, @multicast1, 0xffffffff}}]}, {0x5, 0x6, "b5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xbc, 0x4, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x523f87dd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x65, 0x6, "bd080e6fb60f35bcd85806595d7905589259ae00a2aa1ff6e76601d5d2f6678451c4148bcbed030ca29166c55b7bb36276ac5c12d00abf269d836ce31b5c83a0b8b8262d38b6f60f4168307830375f497a05b9573d1fb076ffd89faa5c9586fe61"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x108, 0x1c, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x91, 0x6, "0a9d63ae63ca86108945cae9c217e5ab671172b02832f5f2bc3a4f9d7668c345ddbe28028896d842258645f838efe1ab872fab1a48a2f97cf9e1d9001e56daf12ac040abf9c801602b04af4d06ea6c4f7d25f1904c7d362e7be8b4f673799d8dcabe3dfddd87ea250ecb4487521e0327f1df8bc4d410a43c43b6060e1e5a7e523f0bfe12ea55d08cc64172875a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0xc4, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x10, 0x4, 0x7, 0x3}, @broadcast, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x8, 0x5, 0x6}, @private=0xa010100, @rand_addr=0x64010102, 0x0, 0x1}}]}, {0x49, 0x6, "de86b4cae222297382474d4c52a9393d41cc5948045287a761e78c3425a289492df35bf0988ec6d9e753f86303fd73be3a46b84c0f12ac35ccc5f3a0854e98584e6a9c1732"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0xbf0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 84.778923ms ago: executing program 2 (id=870): syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="005190ee291f6d8f56a3f13e29ffde000026a8e453b68805b475693f96aa95cbd8c2c8c252ea5f5e06f2fc70d1665986feca7b04ec15a173cc7cd79f293406ec4c3f4be0afca2575b5ed1c3d9f713b9a076ce935a0f5663e5cb782e12c749d577411973289113755e22980bedacddb7881170909b6bf00cc920616988e3d63ab848d"], 0x1, 0xffb, &(0x7f00000010c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 0s ago: executing program 0 (id=871): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB='utf8,namecase=1,errors=remount-ro,iocharset=cp936,fmask=00000000000000000000005,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000005,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0050c35bbdf6e6676a040548815bacf0216692ad31a5138fd14fbc3661de238cdd59188a2e17907a52562a761a2e39724a43799b5928922cb2488257225676b71712ab75744a1881e1a5bf08ba2cfd473ce93c213b01096104295c82eab0030df0fca6a1a99b26b00d9370c26d8ebea7bca06bdfe7cd76f6d2f0179e488f7b86e4efc03866519f83d83f0999d31771dfc48af454d0ecbd27a464357d2d28d89e02e019caa8638495b20c4f3a530000000000000000"], 0x3, 0x152f, &(0x7f00000037c0)="$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") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfc, 0x161, &(0x7f00000002c0)="$eJzs0buLE1EUx/Hvnbl5gAlRjBAsTDqjQcgD7SRkxGDAOKAIYhWIIwoJEQNqabC1CNim8NHK/gub3S2WXZJm/4pt0i1sscVd7syEYf+H8+nuOZffuY+nj9dVReLJZPzpczCdBu8qL/1+99XprrkwBtJA9ko/2r/swAc0Sw2bGdjyQR7efxwFznAysutNBzKAdy2uMy5s53lFzUxDA+Nua/uZcJ8Tj4xqt+ANo6BFKlzf1uAVory6gdUfuIvBuxHVGijOABeUsoc3mSioVyvfVPBtUdv5f/xiddR7cL8d/Gx25/dyJbcG/MVT2UMneZL1qv/c7/vrVrP5KFtvODw8sYF8n1N4lvsCbxVom+cQ5qUp3dGv4YeCX+GszZ7K20v8PvfH0TnaNuCrWwFVXgwHpdS/QfG6g1vVtmsgvmfMflHYSV5ECCGEEEIIIYQQQgghhBBCCCGESFwGAAD//3QlUb0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x3}, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r3, &(0x7f0000001f80)=""/4102, 0x1006) kernel console output (not intermixed with test programs): T5823] usb 3-1: Manufacturer: syz [ 119.872443][ T5823] usb 3-1: SerialNumber: syz [ 121.165448][ T5823] usb 3-1: 0:2 : does not exist [ 121.222319][ T5823] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 121.576392][ T5823] usb 3-1: USB disconnect, device number 6 [ 121.863737][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.346087][ T6305] netlink: 'syz.1.117': attribute type 2 has an invalid length. [ 125.602214][ T6322] loop2: detected capacity change from 0 to 512 [ 126.981718][ T6322] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.122: iget: bad extended attribute block 1 [ 127.011025][ T6322] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.122: couldn't read orphan inode 15 (err -117) [ 127.047368][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.214460][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.544719][ T5843] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.717175][ T6346] netlink: 'syz.0.129': attribute type 2 has an invalid length. [ 127.760814][ T5823] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.798086][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 127.833965][ T5843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.936937][ T5843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.967066][ T5843] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.990962][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 128.045901][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.065116][ T5823] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 128.096100][ T5843] usb 4-1: Product: syz [ 128.113241][ T5823] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.126508][ T5843] usb 4-1: Manufacturer: syz [ 128.131634][ T5843] usb 4-1: SerialNumber: syz [ 128.148109][ T5823] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.308149][ T5823] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 129.334026][ T5823] usb 3-1: config 7 interface 0 has no altsetting 0 [ 129.344255][ T5823] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 129.353695][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.459120][ T5843] usb 4-1: 0:2 : does not exist [ 129.481716][ T6357] loop1: detected capacity change from 0 to 512 [ 129.487754][ T5843] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 129.514097][ T6357] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.131: iget: bad extended attribute block 1 [ 129.530290][ T5843] usb 4-1: USB disconnect, device number 9 [ 129.588340][ T6357] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.131: couldn't read orphan inode 15 (err -117) [ 129.614391][ T6357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.697001][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.720769][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.894662][ T5823] usbhid 3-1:7.0: can't add hid device: -71 [ 129.900939][ T5823] usbhid: probe of 3-1:7.0 failed with error -71 [ 130.320691][ T6366] loop1: detected capacity change from 0 to 512 [ 130.538893][ T6366] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.134: iget: bad extended attribute block 1 [ 130.688476][ T5823] usb 3-1: USB disconnect, device number 7 [ 130.705684][ T6366] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.134: couldn't read orphan inode 15 (err -117) [ 130.720573][ T6366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.877069][ T6374] fuse: Unknown parameter '0x0000000000000003' [ 130.981334][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.058054][ T6382] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 132.064632][ T6382] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.073380][ T6382] vhci_hcd vhci_hcd.0: Device attached [ 133.076994][ T5823] vhci_hcd: vhci_device speed not set [ 133.134962][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141819][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.170176][ T5823] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 133.188849][ T6383] vhci_hcd: connection closed [ 133.191774][ T6316] vhci_hcd: stop threads [ 133.207989][ T6316] vhci_hcd: release socket [ 133.217942][ T6316] vhci_hcd: disconnect device [ 134.818081][ T5843] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.825764][ T5778] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.947973][ T6027] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.977720][ T6405] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[6405] [ 135.029718][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.046452][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.065942][ T5778] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.083055][ T5843] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 135.092711][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.105112][ T5843] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 135.121736][ T5778] usb 3-1: config 0 descriptor?? [ 135.135212][ T5843] usb 1-1: config 220 has no interface number 2 [ 135.140953][ T6027] usb 2-1: Using ep0 maxpacket: 16 [ 135.142706][ T5843] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 135.160457][ T5843] usb 1-1: config 220 interface 0 has no altsetting 0 [ 135.166579][ T6027] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.167329][ T5843] usb 1-1: config 220 interface 76 has no altsetting 0 [ 135.184712][ T5843] usb 1-1: config 220 interface 1 has no altsetting 0 [ 135.195837][ T5843] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 135.212002][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.212718][ T6027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.236585][ T6027] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.250667][ T6027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.259017][ T5843] usb 1-1: Product: syz [ 135.260128][ T6027] usb 2-1: Product: syz [ 135.263309][ T5843] usb 1-1: Manufacturer: syz [ 135.267481][ T6027] usb 2-1: Manufacturer: syz [ 135.280625][ T6027] usb 2-1: SerialNumber: syz [ 135.287195][ T5843] usb 1-1: SerialNumber: syz [ 135.501199][ T6027] usb 2-1: 0:2 : does not exist [ 135.546949][ T6027] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 135.571282][ T5843] usb 1-1: selecting invalid altsetting 0 [ 135.579464][ T5843] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 135.586026][ T5843] usb 1-1: No valid video chain found. [ 135.604543][ T5843] usb 1-1: selecting invalid altsetting 0 [ 135.630875][ T5843] usbtest: probe of 1-1:220.1 failed with error -22 [ 135.632173][ T6027] usb 2-1: USB disconnect, device number 5 [ 135.665041][ T5843] usb 1-1: USB disconnect, device number 6 [ 135.706702][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.167299][ T5778] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 136.415689][ T23] usb 3-1: USB disconnect, device number 8 [ 137.090896][ T6420] loop3: detected capacity change from 0 to 512 [ 137.105976][ T6420] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.151: iget: bad extended attribute block 1 [ 137.120494][ T6420] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.151: couldn't read orphan inode 15 (err -117) [ 137.134712][ T6420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.194219][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.278013][ T5866] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.518137][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 137.549719][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.596085][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.632553][ T5866] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.642460][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.659087][ T5866] usb 3-1: Product: syz [ 137.665629][ T5866] usb 3-1: Manufacturer: syz [ 137.673183][ T5866] usb 3-1: SerialNumber: syz [ 138.087577][ T5866] usb 3-1: 0:2 : does not exist [ 138.102389][ T5866] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 138.167393][ T5866] usb 3-1: USB disconnect, device number 9 [ 138.338102][ T5823] vhci_hcd: vhci_device speed not set [ 138.342096][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.942329][ T6435] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[6435] [ 139.608097][ T5778] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.616870][ T5823] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.713969][ T6444] loop3: detected capacity change from 0 to 1024 [ 139.725328][ T6444] EXT4-fs: Ignoring removed i_version option [ 139.746079][ T6444] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.799640][ T6444] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.159: Invalid block bitmap block 0 in block_group 0 [ 139.826983][ T6444] Quota error (device loop3): write_blk: dquota write failed [ 139.836900][ T6444] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 139.847144][ T6444] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.159: Failed to acquire dquot type 0 [ 139.861696][ T6444] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.159: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.868107][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 139.904420][ T5778] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 139.913146][ T5778] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 139.926010][ T5778] usb 3-1: config 220 has no interface number 2 [ 139.934048][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.935361][ T6444] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.159: Invalid inode bitmap blk 0 in block_group 0 [ 139.944822][ T5778] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 139.944852][ T5778] usb 3-1: config 220 interface 0 has no altsetting 0 [ 139.944868][ T5778] usb 3-1: config 220 interface 76 has no altsetting 0 [ 139.944881][ T5778] usb 3-1: config 220 interface 1 has no altsetting 0 [ 139.992366][ T5823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.001976][ T11] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 140.005059][ T5823] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.021062][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.030063][ T5823] usb 2-1: Product: syz [ 140.034337][ T5823] usb 2-1: Manufacturer: syz [ 140.040562][ T5823] usb 2-1: SerialNumber: syz [ 140.045402][ T5778] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 140.054545][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.067978][ T5778] usb 3-1: Product: syz [ 140.072269][ T5778] usb 3-1: Manufacturer: syz [ 140.073657][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:0: Failed to release dquot type 0 [ 140.077406][ T5778] usb 3-1: SerialNumber: syz [ 140.099001][ T6444] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 140.158593][ T6444] EXT4-fs (loop3): 1 orphan inode deleted [ 140.216165][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.668276][ T5823] usb 2-1: 0:2 : does not exist [ 140.684042][ T5823] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 140.716745][ T5823] usb 2-1: USB disconnect, device number 6 [ 140.835772][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.856419][ T6454] loop0: detected capacity change from 0 to 512 [ 140.859316][ T6444] syz.3.159 (6444) used greatest stack depth: 20880 bytes left [ 140.893432][ T6454] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.162: iget: bad extended attribute block 1 [ 140.917325][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.928390][ T5778] usb 3-1: selecting invalid altsetting 0 [ 140.955798][ T6454] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.162: couldn't read orphan inode 15 (err -117) [ 140.968248][ T5778] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 140.974646][ T5778] usb 3-1: No valid video chain found. [ 140.997667][ T6454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.037406][ T5778] usb 3-1: selecting invalid altsetting 0 [ 141.077472][ T5778] usbtest: probe of 3-1:220.1 failed with error -22 [ 141.105818][ T5778] usb 3-1: USB disconnect, device number 10 [ 141.169324][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.246459][ T5785] Bluetooth: hci0: command tx timeout [ 146.128507][ T5778] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.617998][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 146.877486][ T6501] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[6501] [ 146.926353][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.949675][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.145549][ T5778] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.154853][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.167930][ T5778] usb 1-1: Product: syz [ 147.172488][ T5778] usb 1-1: Manufacturer: syz [ 147.177182][ T5778] usb 1-1: SerialNumber: syz [ 147.420520][ T5778] usb 1-1: 0:2 : does not exist [ 147.476542][ T5778] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 147.957674][ T5778] usb 1-1: USB disconnect, device number 7 [ 148.014841][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.197786][ T6538] fuse: Unknown parameter '0x0000000000000003' [ 151.204885][ T6536] loop3: detected capacity change from 0 to 4096 [ 154.284757][ T6563] loop2: detected capacity change from 0 to 1024 [ 154.498911][ T6567] fuse: Unknown parameter '0x0000000000000003' [ 155.375291][ T6571] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[6571] [ 155.408954][ T78] hfsplus: b-tree write err: -5, ino 4 [ 160.145793][ T6601] loop1: detected capacity change from 0 to 1024 [ 160.160513][ T6601] EXT4-fs: Ignoring removed i_version option [ 160.180717][ T6601] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.182932][ T6603] loop3: detected capacity change from 0 to 512 [ 160.218378][ T6603] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.205: iget: bad extended attribute block 1 [ 160.236160][ T6603] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.205: couldn't read orphan inode 15 (err -117) [ 160.251627][ T6603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.252064][ T6601] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.204: Invalid block bitmap block 0 in block_group 0 [ 160.294654][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.304249][ T6601] Quota error (device loop1): write_blk: dquota write failed [ 160.304310][ T6601] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 160.304367][ T6601] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.204: Failed to acquire dquot type 0 [ 160.337078][ T6601] EXT4-fs error (device loop1): ext4_free_blocks:6681: comm syz.1.204: Freeing blocks not in datazone - block = 0, count = 4096 [ 160.360633][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.378787][ T5866] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 160.383377][ T6601] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.204: Invalid inode bitmap blk 0 in block_group 0 [ 160.422240][ T11] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 160.437657][ T6601] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 160.439505][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:0: Failed to release dquot type 0 [ 160.469923][ T6601] EXT4-fs (loop1): 1 orphan inode deleted [ 160.480645][ T6601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.568243][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 160.577828][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.591364][ T5866] usb 3-1: config 0 has no interfaces? [ 160.597760][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.609852][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.620302][ T5866] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.629945][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.639878][ T5866] usb 3-1: Product: syz [ 160.644323][ T5866] usb 3-1: Manufacturer: syz [ 160.649709][ T5866] usb 3-1: SerialNumber: syz [ 160.651847][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.655285][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.675089][ T5866] usb 3-1: config 0 descriptor?? [ 160.688661][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.696705][ T23] usb 1-1: Product: syz [ 160.701854][ T23] usb 1-1: Manufacturer: syz [ 160.707045][ T23] usb 1-1: SerialNumber: syz [ 160.939302][ T23] usb 1-1: 0:2 : does not exist [ 160.983581][ T23] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 161.003842][ T23] usb 1-1: USB disconnect, device number 8 [ 161.722789][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.063070][ T5866] usb 3-1: USB disconnect, device number 11 [ 165.152909][ T6646] loop0: detected capacity change from 0 to 512 [ 165.256299][ T6646] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.216: iget: bad extended attribute block 1 [ 165.276307][ T6646] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.216: couldn't read orphan inode 15 (err -117) [ 165.311807][ T6646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.144668][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.207619][ T6656] loop1: detected capacity change from 0 to 4096 [ 166.708348][ T5866] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.087979][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 167.097235][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.108315][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.120896][ T5866] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.132360][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.140450][ T5866] usb 1-1: Product: syz [ 167.145250][ T5866] usb 1-1: Manufacturer: syz [ 167.150176][ T5866] usb 1-1: SerialNumber: syz [ 167.198008][ T6027] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 167.388163][ T5866] usb 1-1: 0:2 : does not exist [ 167.404648][ T6027] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 167.424201][ T5866] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 167.437959][ T6027] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 167.487383][ T6027] usb 3-1: config 220 has no interface number 2 [ 167.504350][ T5866] usb 1-1: USB disconnect, device number 9 [ 167.510367][ T6027] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 167.528086][ T6027] usb 3-1: config 220 interface 0 has no altsetting 0 [ 167.535305][ T6027] usb 3-1: config 220 interface 76 has no altsetting 0 [ 167.542564][ T6027] usb 3-1: config 220 interface 1 has no altsetting 0 [ 167.552917][ T6027] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 167.570980][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.613676][ T6027] usb 3-1: Product: syz [ 167.632821][ T6027] usb 3-1: Manufacturer: syz [ 167.662366][ T6027] usb 3-1: SerialNumber: syz [ 168.016515][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.702050][ T6027] usb 3-1: selecting invalid altsetting 0 [ 168.739277][ T6027] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 168.818796][ T6027] usb 3-1: No valid video chain found. [ 168.929451][ T6027] usb 3-1: selecting invalid altsetting 0 [ 168.935247][ T6027] usbtest: probe of 3-1:220.1 failed with error -22 [ 168.972802][ T6027] usb 3-1: USB disconnect, device number 12 [ 169.140222][ T6688] loop3: detected capacity change from 0 to 512 [ 169.181735][ T6688] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.229: iget: bad extended attribute block 1 [ 169.232921][ T6688] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.229: couldn't read orphan inode 15 (err -117) [ 169.257154][ T6688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.419043][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.498130][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 169.755491][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.861690][ T9] usb 1-1: config 0 has no interfaces? [ 169.997493][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.100351][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.191870][ T9] usb 1-1: Product: syz [ 170.235424][ T9] usb 1-1: Manufacturer: syz [ 170.247102][ T9] usb 1-1: SerialNumber: syz [ 170.261058][ T9] usb 1-1: config 0 descriptor?? [ 171.291889][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 171.480751][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 171.504132][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.521306][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.533044][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.542629][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.551056][ T27] usb 3-1: Product: syz [ 171.560016][ T27] usb 3-1: Manufacturer: syz [ 171.568704][ T27] usb 3-1: SerialNumber: syz [ 171.909597][ T27] usb 3-1: 0:2 : does not exist [ 171.939161][ T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 172.739279][ T5778] usb 1-1: USB disconnect, device number 10 [ 172.747534][ T27] usb 3-1: USB disconnect, device number 13 [ 173.279010][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.625914][ T6754] syzkaller0: entered promiscuous mode [ 175.631963][ T6754] syzkaller0: entered allmulticast mode [ 176.008057][ T5866] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.205414][ T6771] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[6771] [ 176.257976][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 176.336415][ T5866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.564756][ T5866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.060845][ T5866] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.098199][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.108920][ T5866] usb 4-1: Product: syz [ 177.113124][ T5866] usb 4-1: Manufacturer: syz [ 177.122662][ T5866] usb 4-1: SerialNumber: syz [ 178.496478][ T5866] usb 4-1: 0:2 : does not exist [ 178.516584][ T5866] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 178.554528][ T5866] usb 4-1: USB disconnect, device number 10 [ 178.733270][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.308768][ T6797] fuse: Bad value for 'fd' [ 181.806708][ T6803] fuse: Unknown parameter '0x0000000000000004' [ 184.333104][ T6827] lo speed is unknown, defaulting to 1000 [ 184.349197][ T6827] lo speed is unknown, defaulting to 1000 [ 184.371831][ T6827] lo speed is unknown, defaulting to 1000 [ 185.209525][ T6827] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.226289][ T6827] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 185.299702][ T6827] lo speed is unknown, defaulting to 1000 [ 185.313462][ T6827] lo speed is unknown, defaulting to 1000 [ 185.326777][ T6827] lo speed is unknown, defaulting to 1000 [ 185.341682][ T6827] lo speed is unknown, defaulting to 1000 [ 185.578068][ T5778] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 185.831042][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 185.984225][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.559591][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.770387][ T5778] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.779988][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.796566][ T5778] usb 1-1: Product: syz [ 186.801038][ T5778] usb 1-1: Manufacturer: syz [ 186.805761][ T5778] usb 1-1: SerialNumber: syz [ 186.942862][ T6841] fuse: Unknown parameter '0x0000000000000004' [ 186.954676][ T6842] ptrace attach of "./syz-executor exec"[5781] was attempted by "./syz-executor exec"[6842] [ 186.998164][ T5778] usb 1-1: 0:2 : does not exist [ 187.018274][ T5778] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 187.027498][ T6843] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[6843] [ 187.048255][ T5778] usb 1-1: USB disconnect, device number 11 [ 187.083292][ T6843] netlink: 88 bytes leftover after parsing attributes in process `syz.1.271'. [ 187.179633][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.705426][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 187.733158][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 187.758829][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 187.765273][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 190.182446][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.738738][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.759041][ T6867] fuse: Unknown parameter '0x0000000000000004' [ 191.808026][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.852875][ T23] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 191.892781][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.962684][ T23] usb 3-1: config 0 descriptor?? [ 192.282536][ T5843] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 192.983349][ T5843] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.994081][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.007058][ T5843] usb 1-1: Product: syz [ 193.011702][ T5843] usb 1-1: Manufacturer: syz [ 193.017634][ T5843] usb 1-1: SerialNumber: syz [ 193.038333][ T5843] usb 1-1: config 0 descriptor?? [ 193.105302][ T6883] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 193.128323][ T6883] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 193.172137][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 193.276569][ T5843] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.488715][ T5843] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 194.588470][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.595292][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.172179][ T23] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 195.193370][ T23] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 195.205066][ T23] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 195.233229][ T23] usb 3-1: USB disconnect, device number 14 [ 195.253405][ T787] usb 1-1: USB disconnect, device number 12 [ 195.588286][ T6898] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[6898] [ 195.637987][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 195.840590][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.858071][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.869228][ T23] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 195.878802][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.891878][ T23] usb 3-1: config 0 descriptor?? [ 197.098142][ T6905] siw: device registration error -23 [ 197.518675][ T6904] fuse: Unknown parameter '0x0000000000000004' [ 198.041011][ T23] uclogic 0003:256C:006D.0007: interface is invalid, ignoring [ 198.292796][ T5843] usb 3-1: USB disconnect, device number 15 [ 198.665239][ T6925] ptrace attach of "./syz-executor exec"[5777] was attempted by "./syz-executor exec"[6925] [ 198.685908][ T6925] netlink: 88 bytes leftover after parsing attributes in process `syz.0.297'. [ 198.708333][ T23] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 198.904624][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.917846][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.026967][ T23] usb 4-1: Product: syz [ 199.091459][ T23] usb 4-1: Manufacturer: syz [ 199.824623][ T23] usb 4-1: SerialNumber: syz [ 199.899486][ T23] usb 4-1: config 0 descriptor?? [ 200.125964][ T23] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 201.538392][ T6943] fuse: Unknown parameter '0x0000000000000004' [ 201.725612][ T23] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 201.754391][ T23] usb 4-1: USB disconnect, device number 11 [ 202.048380][ T5843] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 202.150887][ T6941] loop1: detected capacity change from 0 to 40427 [ 202.209843][ T6941] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.254998][ T5843] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 202.278281][ T5843] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 202.321089][ T5843] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 202.370420][ T5843] usb 3-1: config 220 has no interface number 2 [ 202.400806][ T5843] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 202.418900][ T6941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.442014][ T5843] usb 3-1: config 220 interface 0 has no altsetting 0 [ 202.467053][ T5843] usb 3-1: config 220 interface 76 has no altsetting 0 [ 202.495222][ T6941] syz.1.304: attempt to access beyond end of device [ 202.495222][ T6941] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.497321][ T5843] usb 3-1: config 220 interface 1 has no altsetting 0 [ 202.524808][ T5843] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 202.575424][ T6957] ptrace attach of "./syz-executor exec"[5777] was attempted by "./syz-executor exec"[6957] [ 202.585991][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.612477][ T5786] syz-executor: attempt to access beyond end of device [ 202.612477][ T5786] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 202.636447][ T5843] usb 3-1: Product: syz [ 202.641531][ T5843] usb 3-1: Manufacturer: syz [ 202.646662][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 202.656793][ T5843] usb 3-1: SerialNumber: syz [ 202.981075][ T5843] usb 3-1: selecting invalid altsetting 0 [ 203.022366][ T5843] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 203.058036][ T5843] usb 3-1: No valid video chain found. [ 203.095506][ T5843] usb 3-1: selecting invalid altsetting 0 [ 203.124266][ T5843] usbtest: probe of 3-1:220.1 failed with error -22 [ 203.180025][ T5843] usb 3-1: USB disconnect, device number 16 [ 203.388221][ T23] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 203.613113][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.635294][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 203.654779][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.681670][ T23] usb 4-1: Product: syz [ 203.683772][ T6969] fuse: Unknown parameter 'fd0x0000000000000004' [ 203.696292][ T23] usb 4-1: Manufacturer: syz [ 203.708123][ T23] usb 4-1: SerialNumber: syz [ 203.736549][ T23] usb 4-1: config 0 descriptor?? [ 204.148110][ T5823] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 204.420526][ T5823] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 204.442623][ T5823] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 204.474521][ T5823] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 204.485184][ T5823] usb 3-1: config 220 has no interface number 2 [ 204.492294][ T5823] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 204.505691][ T5823] usb 3-1: config 220 interface 0 has no altsetting 0 [ 204.517824][ T5823] usb 3-1: config 220 interface 76 has no altsetting 0 [ 204.528010][ T5823] usb 3-1: config 220 interface 1 has no altsetting 0 [ 204.550163][ T5823] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 204.600036][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.614222][ T5823] usb 3-1: Product: syz [ 204.621113][ T5823] usb 3-1: Manufacturer: syz [ 204.625961][ T5823] usb 3-1: SerialNumber: syz [ 204.892238][ T5823] usb 3-1: selecting invalid altsetting 0 [ 204.929764][ T5823] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 204.951385][ T5823] usb 3-1: No valid video chain found. [ 204.971973][ T5823] usb 3-1: selecting invalid altsetting 0 [ 204.987795][ T5823] usbtest: probe of 3-1:220.1 failed with error -22 [ 205.021287][ T5823] usb 3-1: USB disconnect, device number 17 [ 205.157367][ T6993] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[6993] [ 205.614066][ T7000] fuse: Unknown parameter 'fd0x0000000000000004' [ 205.648061][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 205.840038][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.868520][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.915876][ T23] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 205.932655][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.953104][ T23] usb 1-1: config 0 descriptor?? [ 206.190395][ T5866] usb 4-1: USB disconnect, device number 12 [ 208.689311][ T23] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 208.738039][ T23] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 208.745646][ T23] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 208.806912][ T23] usb 1-1: USB disconnect, device number 13 [ 208.869233][ T7026] fuse: Unknown parameter 'fd0x0000000000000004' [ 209.050678][ T7027] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 209.057338][ T7027] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 209.064959][ T7027] vhci_hcd vhci_hcd.0: Device attached [ 209.078007][ T7033] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 209.085228][ T6316] vhci_hcd: stop threads [ 209.095942][ T6316] vhci_hcd: release socket [ 209.108164][ T6316] vhci_hcd: disconnect device [ 209.521187][ T7045] ptrace attach of "./syz-executor exec"[5777] was attempted by "./syz-executor exec"[7045] [ 216.337960][ T787] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 216.628292][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 216.743427][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.818559][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.890704][ T787] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.915239][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.981378][ T787] usb 4-1: Product: syz [ 217.178530][ T787] usb 4-1: Manufacturer: syz [ 217.183282][ T787] usb 4-1: SerialNumber: syz [ 219.636330][ T787] usb 4-1: 0:2 : does not exist [ 219.648274][ T787] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 219.839712][ T787] usb 4-1: USB disconnect, device number 13 [ 222.496167][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 222.682484][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.948008][ T7124] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 223.954598][ T7124] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.971287][ T7124] vhci_hcd vhci_hcd.0: Device attached [ 224.046579][ T7126] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 224.081312][ T6316] vhci_hcd: stop threads [ 224.085790][ T6316] vhci_hcd: release socket [ 224.109695][ T6316] vhci_hcd: disconnect device [ 224.198203][ T5778] vhci_hcd: vhci_device speed not set [ 225.316540][ T7140] loop3: detected capacity change from 0 to 40427 [ 225.410707][ T7140] F2FS-fs (loop3): Found nat_bits in checkpoint [ 225.457647][ T7140] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.442436][ T5784] syz-executor: attempt to access beyond end of device [ 226.442436][ T5784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.735380][ T5784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 229.436607][ T7169] ax25_connect(): syz.1.373 uses autobind, please contact jreuter@yaina.de [ 230.512366][ T7176] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 230.518947][ T7176] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 230.576252][ T7176] vhci_hcd vhci_hcd.0: Device attached [ 230.633168][ T7177] vhci_hcd: connection closed [ 230.634507][ T5886] vhci_hcd: stop threads [ 230.662983][ T5886] vhci_hcd: release socket [ 230.679611][ T5886] vhci_hcd: disconnect device [ 232.940238][ T7182] ax25_connect(): syz.1.376 uses autobind, please contact jreuter@yaina.de [ 234.780710][ T5866] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 234.978086][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 236.001410][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.012938][ T5866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.030732][ T5866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.053134][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.061476][ T5866] usb 2-1: Product: syz [ 236.065672][ T5866] usb 2-1: Manufacturer: syz [ 236.071879][ T5866] usb 2-1: SerialNumber: syz [ 236.304189][ T5866] usb 2-1: 0:2 : does not exist [ 237.149090][ T5866] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 237.293637][ T5866] usb 2-1: USB disconnect, device number 7 [ 239.611634][ T7243] siw: device registration error -23 [ 240.540120][ T7246] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.390'. [ 241.919517][ T7262] loop1: detected capacity change from 0 to 40427 [ 241.982292][ T7262] F2FS-fs (loop1): Found nat_bits in checkpoint [ 242.212529][ T7268] loop2: detected capacity change from 0 to 40427 [ 242.230638][ T7262] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 242.376329][ T7268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 242.578441][ T7268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 243.218883][ T5786] syz-executor: attempt to access beyond end of device [ 243.218883][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.411466][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 244.129636][ T5781] syz-executor: attempt to access beyond end of device [ 244.129636][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 244.174826][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 245.749112][ T7289] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.404'. [ 246.075384][ T7301] siw: device registration error -23 [ 247.618013][ T5823] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 247.802479][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.818099][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.828174][ T5866] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 247.830755][ T5823] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.845334][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.864573][ T5823] usb 3-1: config 0 descriptor?? [ 248.032803][ T5866] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 248.054063][ T5866] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 248.072272][ T5866] usb 4-1: config 220 has an invalid descriptor of length 118, skipping remainder of the config [ 248.094954][ T5866] usb 4-1: config 220 has no interface number 2 [ 248.284610][ T5866] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 248.298700][ T5866] usb 4-1: config 220 interface 0 has no altsetting 0 [ 248.305531][ T5866] usb 4-1: config 220 interface 76 has no altsetting 0 [ 248.312503][ T5866] usb 4-1: config 220 interface 1 has no altsetting 0 [ 248.321743][ T5866] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 248.338729][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.346776][ T5866] usb 4-1: Product: syz [ 248.358269][ T5866] usb 4-1: Manufacturer: syz [ 248.363625][ T5866] usb 4-1: SerialNumber: syz [ 248.635769][ T5866] usb 4-1: selecting invalid altsetting 0 [ 248.658769][ T5866] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 248.665181][ T5866] usb 4-1: No valid video chain found. [ 248.692926][ T5866] usb 4-1: selecting invalid altsetting 0 [ 248.710653][ T5866] usbtest: probe of 4-1:220.1 failed with error -22 [ 248.738343][ T5866] usb 4-1: USB disconnect, device number 14 [ 248.912118][ T5823] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 249.183327][ T5866] usb 3-1: USB disconnect, device number 18 [ 249.371350][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 249.591513][ T7325] ax25_connect(): syz.3.413 uses autobind, please contact jreuter@yaina.de [ 250.563349][ T7328] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.414'. [ 250.840965][ T7330] loop2: detected capacity change from 0 to 40427 [ 250.933037][ T7330] F2FS-fs (loop2): Found nat_bits in checkpoint [ 250.998132][ T7330] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 252.024306][ T5781] syz-executor: attempt to access beyond end of device [ 252.024306][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.067203][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 252.370438][ T7352] loop1: detected capacity change from 0 to 40427 [ 252.446745][ T7352] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.509465][ T7352] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 253.101001][ T5786] syz-executor: attempt to access beyond end of device [ 253.101001][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.128125][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 253.134529][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 255.781765][ T7383] loop0: detected capacity change from 0 to 40427 [ 255.820299][ T7383] F2FS-fs (loop0): Found nat_bits in checkpoint [ 255.871151][ T7383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 255.886155][ T7384] netlink: 'syz.1.423': attribute type 72 has an invalid length. [ 256.135799][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.142772][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.864977][ T5777] syz-executor: attempt to access beyond end of device [ 256.864977][ T5777] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.922551][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 256.978058][ T5843] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 257.178059][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 257.238120][ T5843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.320169][ T5843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.414537][ T5843] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.458052][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 257.490890][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.556646][ T5843] usb 4-1: Product: syz [ 257.597055][ T5843] usb 4-1: Manufacturer: syz [ 257.630241][ T5843] usb 4-1: SerialNumber: syz [ 258.086589][ T5843] usb 4-1: 0:2 : does not exist [ 258.252614][ T5843] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 258.713265][ T5843] usb 4-1: USB disconnect, device number 15 [ 259.397530][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.155766][ T7421] loop0: detected capacity change from 0 to 1024 [ 263.429326][ T7426] netlink: 'syz.1.440': attribute type 72 has an invalid length. [ 265.001868][ T7423] loop2: detected capacity change from 0 to 32768 [ 265.035507][ T7423] XFS: noikeep mount option is deprecated. [ 265.198613][ T7423] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 266.258016][ T7423] XFS (loop2): Ending clean mount [ 266.351937][ T7423] XFS (loop2): Quotacheck needed: Please wait. [ 266.620962][ T7423] XFS (loop2): Quotacheck: Done. [ 267.468419][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 267.508260][ T7457] ax25_connect(): syz.3.449 uses autobind, please contact jreuter@yaina.de [ 268.044398][ T7460] netlink: 'syz.1.451': attribute type 72 has an invalid length. [ 268.082697][ T6315] hfsplus: b-tree write err: -5, ino 4 [ 271.060328][ T7476] loop1: detected capacity change from 0 to 32768 [ 271.462186][ T7476] XFS: noikeep mount option is deprecated. [ 271.796037][ T7476] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.019066][ T7488] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[7488] [ 273.035446][ T7488] netlink: 88 bytes leftover after parsing attributes in process `syz.3.460'. [ 273.095638][ T7476] XFS (loop1): Ending clean mount [ 273.163892][ T7476] XFS (loop1): Quotacheck needed: Please wait. [ 273.201916][ T7476] XFS (loop1): Quotacheck: Done. [ 273.546521][ T7510] siw: device registration error -23 [ 273.627423][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.245867][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 276.732371][ T7539] syzkaller0: entered promiscuous mode [ 276.743099][ T7539] syzkaller0: entered allmulticast mode [ 278.451934][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 279.106444][ T7564] loop2: detected capacity change from 0 to 1024 [ 281.566001][ T7591] syzkaller0: entered promiscuous mode [ 281.579415][ T7591] syzkaller0: entered allmulticast mode [ 282.137620][ T7597] loop0: detected capacity change from 0 to 40427 [ 282.270933][ T787] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 282.349260][ T7597] F2FS-fs (loop0): Found nat_bits in checkpoint [ 282.423799][ T7597] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 282.673571][ T787] usb 4-1: device descriptor read/64, error -71 [ 282.872370][ T6315] hfsplus: b-tree write err: -5, ino 4 [ 283.076027][ T5777] syz-executor: attempt to access beyond end of device [ 283.076027][ T5777] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.090835][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 283.118564][ T787] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 283.296491][ T787] usb 4-1: device descriptor read/64, error -71 [ 283.340506][ T7612] ax25_connect(): syz.2.497 uses autobind, please contact jreuter@yaina.de [ 283.449165][ T787] usb usb4-port1: attempt power cycle [ 283.868121][ T787] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 284.045080][ T787] usb 4-1: device descriptor read/8, error -71 [ 284.370976][ T787] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 284.439340][ T787] usb 4-1: device descriptor read/8, error -71 [ 284.579396][ T787] usb usb4-port1: unable to enumerate USB device [ 286.549823][ T7640] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[7640] [ 287.018712][ T7639] loop1: detected capacity change from 0 to 32768 [ 287.036399][ T7639] XFS: noikeep mount option is deprecated. [ 287.124016][ T7639] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.293183][ T7639] XFS (loop1): Ending clean mount [ 287.311993][ T7639] XFS (loop1): Quotacheck needed: Please wait. [ 287.378498][ T7639] XFS (loop1): Quotacheck: Done. [ 287.528846][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 287.708080][ T23] usb 3-1: device descriptor read/64, error -71 [ 287.803272][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 288.627845][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 288.713640][ T7659] loop3: detected capacity change from 0 to 32768 [ 288.735479][ T7659] XFS: noikeep mount option is deprecated. [ 288.778207][ T23] usb 3-1: device descriptor read/64, error -71 [ 288.787704][ T7659] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 288.899217][ T23] usb usb3-port1: attempt power cycle [ 288.915811][ T7659] XFS (loop3): Ending clean mount [ 288.930766][ T7659] XFS (loop3): Quotacheck needed: Please wait. [ 288.985594][ T7659] XFS (loop3): Quotacheck: Done. [ 289.029030][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 289.064611][ T7677] syzkaller0: entered promiscuous mode [ 289.070987][ T7677] syzkaller0: entered allmulticast mode [ 289.109131][ T28] audit: type=1804 audit(1756310281.713:2): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.513" name="/newroot/119/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 289.157838][ T28] audit: type=1804 audit(1756310281.753:3): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.513" name="/newroot/119/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 289.179968][ T28] audit: type=1804 audit(1756310281.763:4): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.513" name="/newroot/119/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 289.223142][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.227992][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 289.244230][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.255797][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.273589][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.293673][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.311197][ T27] usb 1-1: Product: syz [ 289.315806][ T27] usb 1-1: Manufacturer: syz [ 289.322866][ T27] usb 1-1: SerialNumber: syz [ 289.327997][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 289.372816][ T23] usb 3-1: device descriptor read/8, error -71 [ 289.594210][ T27] usb 1-1: 0:2 : does not exist [ 289.610767][ T27] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 289.645306][ T7683] loop3: detected capacity change from 0 to 256 [ 289.647848][ T27] usb 1-1: USB disconnect, device number 14 [ 289.647979][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 289.685620][ T7683] exfat: Deprecated parameter 'utf8' [ 289.706606][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.733042][ T7683] exfat: Deprecated parameter 'namecase' [ 289.743284][ T23] usb 3-1: device descriptor read/8, error -71 [ 289.810926][ T7683] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 289.879487][ T23] usb usb3-port1: unable to enumerate USB device [ 289.998511][ T7681] loop1: detected capacity change from 0 to 32768 [ 290.009842][ T7681] XFS: noikeep mount option is deprecated. [ 290.140673][ T7681] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.599132][ T7681] XFS (loop1): Ending clean mount [ 290.674191][ T7681] XFS (loop1): Quotacheck needed: Please wait. [ 290.809277][ T7681] XFS (loop1): Quotacheck: Done. [ 290.990131][ T28] audit: type=1804 audit(1756310283.593:5): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.519" name="/newroot/141/file0/bus" dev="loop1" ino=9291 res=1 errno=0 [ 291.053618][ T28] audit: type=1804 audit(1756310283.643:6): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.519" name="/newroot/141/file0/bus" dev="loop1" ino=9291 res=1 errno=0 [ 291.077426][ T28] audit: type=1804 audit(1756310283.643:7): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.519" name="/newroot/141/file0/bus" dev="loop1" ino=9291 res=1 errno=0 [ 291.132970][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.380412][ T7703] ptrace attach of "./syz-executor exec"[5777] was attempted by "./syz-executor exec"[7703] [ 292.223957][ T7720] ubi31: attaching mtd0 [ 292.230795][ T7720] ubi31: scanning is finished [ 292.235521][ T7720] ubi31: empty MTD device detected [ 293.059033][ T7720] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 293.066745][ T7720] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 293.074412][ T7720] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 293.081640][ T7720] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 293.089348][ T7720] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 293.096275][ T7720] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 293.104452][ T7720] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 537521761 [ 293.115045][ T7720] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 293.130081][ T7727] ubi31: background thread "ubi_bgt31d" started, PID 7727 [ 293.289318][ T5778] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 294.268073][ T5778] usb 3-1: device descriptor read/64, error -71 [ 294.388095][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 294.547966][ T5778] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 294.569420][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.580516][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.590758][ T23] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 294.599964][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.611481][ T23] usb 4-1: config 0 descriptor?? [ 294.698072][ T5778] usb 3-1: device descriptor read/64, error -71 [ 294.820672][ T5778] usb usb3-port1: attempt power cycle [ 297.338105][ T23] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 297.604948][ T787] usb 4-1: USB disconnect, device number 20 [ 297.918069][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 297.958018][ T5823] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 298.100351][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.111407][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.125198][ T23] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.137438][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.148165][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 298.160298][ T23] usb 1-1: config 0 descriptor?? [ 298.173507][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.198340][ T5823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.212070][ T5823] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.221894][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.231360][ T5823] usb 3-1: Product: syz [ 298.235667][ T5823] usb 3-1: Manufacturer: syz [ 298.240318][ T5823] usb 3-1: SerialNumber: syz [ 298.484094][ T5823] usb 3-1: 0:2 : does not exist [ 298.497309][ T5823] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 298.524136][ T5823] usb 3-1: USB disconnect, device number 26 [ 298.612594][ T7771] ubi: mtd0 is already attached to ubi31 [ 299.180801][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.020240][ T23] uclogic 0003:256C:006D.000B: interface is invalid, ignoring [ 300.260891][ T23] usb 1-1: USB disconnect, device number 15 [ 301.753532][ T7801] ax25_connect(): syz.2.554 uses autobind, please contact jreuter@yaina.de [ 303.681185][ T7807] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[7807] [ 304.733712][ T7805] loop2: detected capacity change from 0 to 32768 [ 304.745440][ T7805] XFS: noikeep mount option is deprecated. [ 304.787271][ T7805] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 304.865549][ T7805] XFS (loop2): Ending clean mount [ 304.882834][ T7805] XFS (loop2): Quotacheck needed: Please wait. [ 304.952031][ T7805] XFS (loop2): Quotacheck: Done. [ 305.127688][ T28] audit: type=1804 audit(1756310297.723:8): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.555" name="/newroot/134/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 305.179833][ T28] audit: type=1804 audit(1756310297.763:9): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.555" name="/newroot/134/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 305.232348][ T28] audit: type=1804 audit(1756310297.763:10): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.555" name="/newroot/134/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 305.303325][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.580329][ T6027] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 306.556695][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.956836][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.020723][ T7839] ax25_connect(): syz.0.563 uses autobind, please contact jreuter@yaina.de [ 308.247082][ T6027] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 308.598137][ T6027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.734118][ T6027] usb 4-1: config 0 descriptor?? [ 308.780692][ T6027] usb 4-1: can't set config #0, error -71 [ 308.796302][ T6027] usb 4-1: USB disconnect, device number 21 [ 313.207987][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 314.867315][ T7880] ptrace attach of "./syz-executor exec"[5781] was attempted by "./syz-executor exec"[7880] [ 314.951698][ T7865] loop0: detected capacity change from 0 to 32768 [ 314.963039][ T7865] XFS: noikeep mount option is deprecated. [ 315.111020][ T7865] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.306408][ T7865] XFS (loop0): Ending clean mount [ 315.337684][ T7865] XFS (loop0): Quotacheck needed: Please wait. [ 315.383309][ T7865] XFS (loop0): Quotacheck: Done. [ 315.506518][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.457449][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.464216][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.398943][ T7928] loop2: detected capacity change from 0 to 40427 [ 320.438158][ T7928] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 320.446555][ T7928] F2FS-fs (loop2): Image doesn't support compression [ 320.453914][ T7928] F2FS-fs (loop2): Image doesn't support compression [ 320.460721][ T7928] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 320.469686][ T7928] F2FS-fs (loop2): invalid crc value [ 320.696706][ T7935] loop0: detected capacity change from 0 to 40427 [ 320.712454][ T7933] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[7933] [ 320.725260][ T7928] F2FS-fs (loop2): Found nat_bits in checkpoint [ 320.768309][ T7928] F2FS-fs (loop2): Start checkpoint disabled! [ 320.784419][ T7935] F2FS-fs (loop0): Found nat_bits in checkpoint [ 320.814957][ T7935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 320.846920][ T7928] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 321.368033][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 322.416471][ T5777] syz-executor: attempt to access beyond end of device [ 322.416471][ T5777] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 322.468008][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 322.627826][ T11] kworker/u4:0: attempt to access beyond end of device [ 322.627826][ T11] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 322.727751][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 322.762605][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 322.769959][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 324.326477][ T7965] loop0: detected capacity change from 0 to 256 [ 324.334528][ T7965] exfat: Deprecated parameter 'utf8' [ 324.342608][ T7965] exfat: Deprecated parameter 'namecase' [ 324.466877][ T7965] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 325.655197][ T7976] ubi: mtd0 is already attached to ubi31 [ 331.257986][ T5861] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 332.005597][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 332.182347][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 332.191684][ T5861] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.202367][ T5861] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 332.216405][ T5861] usb 1-1: config 4 has no interface number 0 [ 332.227008][ T5861] usb 1-1: config 4 interface 30 has no altsetting 0 [ 332.236745][ T5861] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 332.248533][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.256775][ T5861] usb 1-1: Product: syz [ 332.262352][ T5861] usb 1-1: Manufacturer: syz [ 332.272888][ T5861] usb 1-1: SerialNumber: syz [ 332.530064][ T5861] dw2102: su3000_identify_state [ 332.536135][ T5861] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 332.558139][ T5861] dw2102: su3000_power_ctrl: 1, initialized 0 [ 332.575182][ T5861] dvb-usb: bulk message failed: -22 (2/0) [ 332.619503][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.665016][ T5861] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 332.718679][ T5861] usb 1-1: media controller created [ 332.766381][ T5861] dvb-usb: bulk message failed: -22 (6/0) [ 332.806926][ T5861] dw2102: i2c transfer failed. [ 332.896047][ T5861] dvb-usb: bulk message failed: -22 (6/0) [ 332.932998][ T5861] dw2102: i2c transfer failed. [ 332.967496][ T5861] dvb-usb: bulk message failed: -22 (6/0) [ 333.001309][ T5861] dw2102: i2c transfer failed. [ 333.035568][ T5861] dvb-usb: bulk message failed: -22 (6/0) [ 333.082839][ T5861] dw2102: i2c transfer failed. [ 333.116155][ T5861] dvb-usb: bulk message failed: -22 (6/0) [ 333.154786][ T5861] dw2102: i2c transfer failed. [ 333.186862][ T5861] dvb-usb: bulk message failed: -22 (6/0) [ 333.236640][ T5861] dw2102: i2c transfer failed. [ 333.286240][ T5861] dvb-usb: MAC address: 02:02:02:02:02:02 [ 333.595903][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.766504][ T5861] dvb-usb: bulk message failed: -22 (3/0) [ 333.798720][ T8023] loop1: detected capacity change from 0 to 32768 [ 333.806204][ T8023] XFS: noikeep mount option is deprecated. [ 333.829046][ T5861] dw2102: command 0x0e transfer failed. [ 333.842309][ T5861] dvb-usb: bulk message failed: -22 (3/0) [ 333.924913][ T5861] dw2102: command 0x0e transfer failed. [ 334.318824][ T5861] dvb-usb: bulk message failed: -22 (3/0) [ 334.402046][ T5861] dw2102: command 0x0e transfer failed. [ 334.488704][ T8023] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.509993][ T5861] dvb-usb: bulk message failed: -22 (3/0) [ 334.515901][ T5861] dw2102: command 0x0e transfer failed. [ 334.630620][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 334.636964][ T5861] dw2102: command 0x51 transfer failed. [ 334.643396][ T5861] dvb-usb: bulk message failed: -22 (5/0) [ 334.649435][ T5861] dw2102: i2c probe for address 0x68 failed. [ 334.655441][ T5861] dvb-usb: bulk message failed: -22 (5/0) [ 334.677954][ T5861] dw2102: i2c probe for address 0x69 failed. [ 334.685322][ T5861] dvb-usb: bulk message failed: -22 (5/0) [ 334.731394][ T5861] dw2102: i2c probe for address 0x6a failed. [ 334.752729][ T8023] XFS (loop1): Ending clean mount [ 334.761852][ T5861] dw2102: probing for demodulator failed. Is the external power switched on? [ 334.778137][ T5861] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 334.796733][ T8023] XFS (loop1): Quotacheck needed: Please wait. [ 335.734881][ T8023] XFS (loop1): Quotacheck: Done. [ 335.778109][ T5861] rc_core: IR keymap rc-tt-1500 not found [ 335.812135][ T5861] Registered IR keymap rc-empty [ 335.835935][ T5861] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 336.033227][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.040884][ T5861] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 336.661591][ T5861] dvb-usb: schedule remote query interval to 250 msecs. [ 336.668653][ T5861] dw2102: su3000_power_ctrl: 0, initialized 1 [ 336.674763][ T5861] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 336.686867][ T5861] usb 1-1: USB disconnect, device number 16 [ 337.014794][ T5861] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 337.900356][ T8064] ax25_connect(): syz.3.623 uses autobind, please contact jreuter@yaina.de [ 337.980944][ T8068] siw: device registration error -23 [ 338.613308][ T8072] loop3: detected capacity change from 0 to 40427 [ 338.622220][ T8072] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 338.630686][ T8072] F2FS-fs (loop3): Image doesn't support compression [ 338.637454][ T8072] F2FS-fs (loop3): Image doesn't support compression [ 338.644231][ T8072] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 338.667017][ T8072] F2FS-fs (loop3): invalid crc value [ 338.676091][ T8072] F2FS-fs (loop3): Found nat_bits in checkpoint [ 338.710030][ T8072] F2FS-fs (loop3): Start checkpoint disabled! [ 338.723303][ T8072] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 339.018053][ T8081] loop2: detected capacity change from 0 to 40427 [ 339.718236][ T8081] F2FS-fs (loop2): Found nat_bits in checkpoint [ 339.767639][ T8081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 339.882869][ T1078] kworker/u4:5: attempt to access beyond end of device [ 339.882869][ T1078] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 339.903503][ T1078] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 339.913691][ T1078] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 339.926774][ T1078] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 340.082650][ T5778] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 340.685063][ T5781] syz-executor: attempt to access beyond end of device [ 340.685063][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 340.712731][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 340.721453][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 340.736576][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.749292][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.764986][ T5778] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.778228][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.804052][ T5778] usb 1-1: Product: syz [ 340.809829][ T5778] usb 1-1: Manufacturer: syz [ 340.814555][ T5778] usb 1-1: SerialNumber: syz [ 341.032267][ T5778] usb 1-1: 0:2 : does not exist [ 341.047356][ T5778] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 341.114839][ T8094] ubi: mtd0 is already attached to ubi31 [ 341.779683][ T5778] usb 1-1: USB disconnect, device number 17 [ 341.824858][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.219114][ T8098] loop2: detected capacity change from 0 to 4096 [ 342.279308][ T8098] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 342.287644][ T8098] UDF-fs: Scanning with blocksize 512 failed [ 342.326393][ T8098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.527746][ T28] audit: type=1800 audit(1756310335.053:11): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.630" name="bus" dev="loop2" ino=1347 res=0 errno=0 [ 342.672013][ T8106] ubi: mtd0 is already attached to ubi31 [ 345.860962][ T8122] loop0: detected capacity change from 0 to 32768 [ 345.962536][ T8122] XFS: noikeep mount option is deprecated. [ 345.988248][ T8122] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 346.063010][ T8146] ubi: mtd0 is already attached to ubi31 [ 346.144164][ T6027] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 346.767947][ T6027] usb 2-1: device descriptor read/64, error -71 [ 346.772406][ T8122] XFS (loop0): Ending clean mount [ 346.794764][ T8122] XFS (loop0): Quotacheck needed: Please wait. [ 346.839696][ T8122] XFS (loop0): Quotacheck: Done. [ 346.944670][ T28] audit: type=1804 audit(1756310339.543:12): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.641" name="/newroot/163/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 346.994748][ T28] audit: type=1804 audit(1756310339.543:13): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.641" name="/newroot/163/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 347.036359][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 347.060406][ T28] audit: type=1804 audit(1756310339.543:14): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.641" name="/newroot/163/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 347.304438][ T8150] loop2: detected capacity change from 0 to 40427 [ 347.316976][ T8150] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 347.325554][ T8150] F2FS-fs (loop2): Image doesn't support compression [ 347.332531][ T8150] F2FS-fs (loop2): Image doesn't support compression [ 347.339368][ T8150] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 347.349161][ T8150] F2FS-fs (loop2): invalid crc value [ 347.358255][ T6027] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 347.370695][ T8150] F2FS-fs (loop2): Found nat_bits in checkpoint [ 347.418274][ T8150] F2FS-fs (loop2): Start checkpoint disabled! [ 347.428740][ T8150] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 347.749572][ T6027] usb 2-1: device descriptor read/64, error -71 [ 347.969623][ T6027] usb usb2-port1: attempt power cycle [ 348.381677][ T6027] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 348.413102][ T12] kworker/u4:1: attempt to access beyond end of device [ 348.413102][ T12] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 348.428756][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 348.435974][ T6027] usb 2-1: device descriptor read/8, error -71 [ 348.442609][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 348.450182][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 348.517089][ T8161] loop0: detected capacity change from 0 to 4096 [ 348.542877][ T8161] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 348.568641][ T8161] UDF-fs: Scanning with blocksize 512 failed [ 348.600920][ T8161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.710182][ T28] audit: type=1800 audit(1756310341.313:15): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.651" name="bus" dev="loop0" ino=1347 res=0 errno=0 [ 348.720490][ T6027] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 351.216541][ T6027] usb 2-1: device not accepting address 11, error -71 [ 351.245836][ T6027] usb usb2-port1: unable to enumerate USB device [ 354.124916][ T8185] ax25_connect(): syz.1.656 uses autobind, please contact jreuter@yaina.de [ 354.929886][ T8200] ubi: mtd0 is already attached to ubi31 [ 355.148106][ T6027] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 355.579827][ T6027] usb 4-1: device descriptor read/64, error -71 [ 355.748432][ T8202] ax25_connect(): syz.0.662 uses autobind, please contact jreuter@yaina.de [ 356.072472][ T6027] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 356.358122][ T6027] usb 4-1: device descriptor read/64, error -71 [ 356.478240][ T6027] usb usb4-port1: attempt power cycle [ 356.635363][ T8205] loop2: detected capacity change from 0 to 32768 [ 356.653000][ T8205] XFS: noikeep mount option is deprecated. [ 356.748017][ T8205] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 356.888191][ T6027] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 356.929932][ T6027] usb 4-1: device descriptor read/8, error -71 [ 357.000463][ T8205] XFS (loop2): Ending clean mount [ 357.016464][ T8205] XFS (loop2): Quotacheck needed: Please wait. [ 357.055651][ T8205] XFS (loop2): Quotacheck: Done. [ 357.136468][ T28] audit: type=1804 audit(1756310349.733:16): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.663" name="/newroot/161/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 357.172807][ T28] audit: type=1804 audit(1756310349.773:17): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.663" name="/newroot/161/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 357.196878][ T28] audit: type=1804 audit(1756310349.773:18): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.663" name="/newroot/161/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 357.226787][ T6027] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 357.257458][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.271742][ T6027] usb 4-1: device descriptor read/8, error -71 [ 357.407106][ T6027] usb usb4-port1: unable to enumerate USB device [ 357.685113][ T8220] loop2: detected capacity change from 0 to 40427 [ 357.770625][ T8220] F2FS-fs (loop2): Found nat_bits in checkpoint [ 357.806706][ T8220] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 359.611829][ T5843] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 360.179147][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 360.228922][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short [ 360.243527][ T5843] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 360.252769][ T5843] usb 4-1: config 4 has no interface number 0 [ 360.259359][ T5843] usb 4-1: config 4 interface 30 has no altsetting 0 [ 360.274920][ T5843] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 360.286173][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.295689][ T5843] usb 4-1: Product: syz [ 360.302176][ T5843] usb 4-1: Manufacturer: syz [ 360.306883][ T5843] usb 4-1: SerialNumber: syz [ 360.538066][ T6027] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 360.724703][ T5843] dw2102: su3000_identify_state [ 360.741753][ T6027] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 360.819016][ T6027] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 360.880557][ T6027] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 360.960736][ T6027] usb 1-1: config 220 has no interface number 2 [ 361.014707][ T6027] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.102473][ T6027] usb 1-1: config 220 interface 0 has no altsetting 0 [ 361.157572][ T6027] usb 1-1: config 220 interface 76 has no altsetting 0 [ 361.244818][ T6027] usb 1-1: config 220 interface 1 has no altsetting 0 [ 361.335811][ T5843] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 361.343176][ T5843] dw2102: su3000_power_ctrl: 1, initialized 0 [ 361.349296][ T6027] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 361.349323][ T6027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.349340][ T6027] usb 1-1: Product: syz [ 361.349351][ T6027] usb 1-1: Manufacturer: syz [ 361.349364][ T6027] usb 1-1: SerialNumber: syz [ 361.380561][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 361.389921][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.408453][ T5843] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 361.417426][ T5843] usb 4-1: media controller created [ 361.438246][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 361.445456][ T5843] dw2102: i2c transfer failed. [ 361.450608][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 361.456392][ T5843] dw2102: i2c transfer failed. [ 361.461619][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 361.469039][ T5843] dw2102: i2c transfer failed. [ 361.473992][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 361.480694][ T5843] dw2102: i2c transfer failed. [ 361.485506][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 361.491715][ T5843] dw2102: i2c transfer failed. [ 361.497489][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 361.503650][ T5843] dw2102: i2c transfer failed. [ 361.508692][ T5843] dvb-usb: MAC address: 02:02:02:02:02:02 [ 361.550608][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.601992][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 361.628997][ T5843] dw2102: command 0x0e transfer failed. [ 361.634614][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 361.661541][ T5843] dw2102: command 0x0e transfer failed. [ 361.858844][ T5781] syz-executor: attempt to access beyond end of device [ 361.858844][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 361.882098][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 362.176783][ T8256] ubi: mtd0 is already attached to ubi31 [ 362.702388][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 362.713694][ T5843] dw2102: command 0x0e transfer failed. [ 362.719534][ T6027] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 362.719567][ T6027] usb 1-1: No valid video chain found. [ 362.744111][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 362.750435][ T5843] dw2102: command 0x0e transfer failed. [ 362.751164][ T6027] usb 1-1: USB disconnect, device number 18 [ 362.771227][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 363.486828][ T5843] dw2102: command 0x51 transfer failed. [ 363.517145][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 363.572045][ T5843] dw2102: i2c probe for address 0x68 failed. [ 363.602175][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 363.635798][ T5843] dw2102: i2c probe for address 0x69 failed. [ 363.656916][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 363.674578][ T5843] dw2102: i2c probe for address 0x6a failed. [ 363.684183][ T5843] dw2102: probing for demodulator failed. Is the external power switched on? [ 363.693734][ T5843] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 363.898248][ T5843] rc_core: IR keymap rc-tt-1500 not found [ 364.551505][ T5843] Registered IR keymap rc-empty [ 364.558385][ T5843] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 364.579941][ T5843] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 364.628192][ T5823] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 364.639762][ T5843] dvb-usb: schedule remote query interval to 250 msecs. [ 364.750673][ T5843] dw2102: su3000_power_ctrl: 0, initialized 1 [ 364.757376][ T5843] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 364.770482][ T5843] usb 4-1: USB disconnect, device number 26 [ 364.876761][ T5843] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 364.898145][ T5823] usb 2-1: device descriptor read/64, error -71 [ 365.187995][ T5823] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 368.924589][ T8296] tipc: Enabling of bearer rejected, failed to enable media [ 369.800645][ T8315] siw: device registration error -23 [ 369.818003][ T6027] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 369.868010][ T5823] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 370.008315][ T6027] usb 1-1: Using ep0 maxpacket: 8 [ 370.026525][ T6027] usb 1-1: unable to get BOS descriptor or descriptor too short [ 370.038120][ T5823] usb 3-1: device descriptor read/64, error -71 [ 370.063116][ T6027] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 370.078225][ T6027] usb 1-1: config 4 has no interface number 0 [ 370.084382][ T6027] usb 1-1: config 4 interface 30 has no altsetting 0 [ 370.116330][ T6027] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 370.133165][ T6027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.145300][ T6027] usb 1-1: Product: syz [ 370.149970][ T6027] usb 1-1: Manufacturer: syz [ 370.157449][ T6027] usb 1-1: SerialNumber: syz [ 370.338029][ T5823] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 370.497963][ T5823] usb 3-1: device descriptor read/64, error -71 [ 370.653031][ T5823] usb usb3-port1: attempt power cycle [ 370.688825][ T6027] dw2102: su3000_identify_state [ 370.693818][ T6027] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 370.807365][ T6027] dw2102: su3000_power_ctrl: 1, initialized 0 [ 370.818105][ T6027] dvb-usb: bulk message failed: -22 (2/0) [ 370.828539][ T6027] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.842657][ T6027] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 370.850482][ T6027] usb 1-1: media controller created [ 370.855830][ T6027] dvb-usb: bulk message failed: -22 (6/0) [ 370.861769][ T6027] dw2102: i2c transfer failed. [ 370.866663][ T6027] dvb-usb: bulk message failed: -22 (6/0) [ 370.872939][ T6027] dw2102: i2c transfer failed. [ 370.878447][ T6027] dvb-usb: bulk message failed: -22 (6/0) [ 370.884348][ T6027] dw2102: i2c transfer failed. [ 370.889343][ T6027] dvb-usb: bulk message failed: -22 (6/0) [ 370.895243][ T6027] dw2102: i2c transfer failed. [ 370.900197][ T6027] dvb-usb: bulk message failed: -22 (6/0) [ 370.906048][ T6027] dw2102: i2c transfer failed. [ 370.911054][ T6027] dvb-usb: bulk message failed: -22 (6/0) [ 370.916910][ T6027] dw2102: i2c transfer failed. [ 370.921836][ T6027] dvb-usb: MAC address: 02:02:02:02:02:02 [ 370.941499][ T6027] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.961992][ T6027] dvb-usb: bulk message failed: -22 (3/0) [ 370.967834][ T6027] dw2102: command 0x0e transfer failed. [ 370.973954][ T6027] dvb-usb: bulk message failed: -22 (3/0) [ 370.979880][ T6027] dw2102: command 0x0e transfer failed. [ 371.068204][ T5823] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 371.108841][ T5823] usb 3-1: device descriptor read/8, error -71 [ 371.298168][ T6027] dvb-usb: bulk message failed: -22 (3/0) [ 371.304357][ T6027] dw2102: command 0x0e transfer failed. [ 371.310188][ T6027] dvb-usb: bulk message failed: -22 (3/0) [ 371.316068][ T6027] dw2102: command 0x0e transfer failed. [ 371.321815][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 371.327657][ T6027] dw2102: command 0x51 transfer failed. [ 371.333368][ T6027] dvb-usb: bulk message failed: -22 (5/0) [ 371.339223][ T6027] dw2102: i2c probe for address 0x68 failed. [ 371.346049][ T6027] dvb-usb: bulk message failed: -22 (5/0) [ 371.354286][ T6027] dw2102: i2c probe for address 0x69 failed. [ 371.360399][ T6027] dvb-usb: bulk message failed: -22 (5/0) [ 371.366202][ T6027] dw2102: i2c probe for address 0x6a failed. [ 371.372568][ T6027] dw2102: probing for demodulator failed. Is the external power switched on? [ 371.378011][ T5823] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 371.381664][ T6027] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 371.429032][ T5823] usb 3-1: device descriptor read/8, error -71 [ 371.459701][ T6027] rc_core: IR keymap rc-tt-1500 not found [ 371.465547][ T6027] Registered IR keymap rc-empty [ 371.471382][ T6027] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 371.483255][ T6027] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 371.495041][ T6027] dvb-usb: schedule remote query interval to 250 msecs. [ 371.502280][ T6027] dw2102: su3000_power_ctrl: 0, initialized 1 [ 371.508714][ T6027] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 371.521258][ T6027] usb 1-1: USB disconnect, device number 19 [ 371.555712][ T5823] usb usb3-port1: unable to enumerate USB device [ 371.591418][ T6027] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 372.064519][ T8332] ax25_connect(): syz.1.694 uses autobind, please contact jreuter@yaina.de [ 372.806396][ T6027] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 373.133857][ T8337] loop2: detected capacity change from 0 to 4096 [ 373.176699][ T8337] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 373.181846][ T6027] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.186002][ T8337] UDF-fs: Scanning with blocksize 512 failed [ 373.215995][ T6027] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.236279][ T6027] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 373.250495][ T8337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.297067][ T6027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.364453][ T6027] usb 1-1: config 0 descriptor?? [ 373.373641][ T28] audit: type=1800 audit(1756310365.963:19): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.696" name="bus" dev="loop2" ino=1347 res=0 errno=0 [ 375.858098][ T8353] siw: device registration error -23 [ 376.240272][ T6027] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 376.278058][ T6027] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 376.286192][ T6027] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 376.313091][ T6027] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 376.328238][ T6027] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 376.366594][ T6027] usb 1-1: USB disconnect, device number 20 [ 376.518756][ T8349] loop2: detected capacity change from 0 to 32768 [ 376.540315][ T8349] XFS: noikeep mount option is deprecated. [ 376.582326][ T8349] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 376.700787][ T8349] XFS (loop2): Ending clean mount [ 376.707529][ T8372] loop3: detected capacity change from 0 to 4096 [ 376.732091][ T8349] XFS (loop2): Quotacheck needed: Please wait. [ 376.748210][ T6027] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 376.760929][ T8372] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 376.773292][ T8372] UDF-fs: Scanning with blocksize 512 failed [ 376.802653][ T8349] XFS (loop2): Quotacheck: Done. [ 376.818469][ T8372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.884664][ T28] audit: type=1800 audit(1756310369.483:20): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.707" name="bus" dev="loop3" ino=1347 res=0 errno=0 [ 376.910656][ T6027] usb 1-1: device descriptor read/64, error -71 [ 376.956444][ T28] audit: type=1804 audit(1756310369.523:21): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.699" name="/newroot/168/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 377.039194][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 377.221113][ T6027] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 377.458222][ T6027] usb 1-1: device descriptor read/64, error -71 [ 377.579597][ T6027] usb usb1-port1: attempt power cycle [ 378.078116][ T6027] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 378.637326][ T5823] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 378.700231][ T6027] usb 1-1: device descriptor read/8, error -71 [ 378.852406][ T5823] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 378.864019][ T5823] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 378.873265][ T5823] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 378.893228][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.899785][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.913455][ T5823] usb 3-1: config 220 has no interface number 2 [ 378.920199][ T5823] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 378.968831][ T5823] usb 3-1: config 220 interface 0 has no altsetting 0 [ 378.975657][ T5823] usb 3-1: config 220 interface 76 has no altsetting 0 [ 378.983062][ T5823] usb 3-1: config 220 interface 1 has no altsetting 0 [ 378.992283][ T5823] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 379.001452][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.009627][ T5823] usb 3-1: Product: syz [ 379.013800][ T5823] usb 3-1: Manufacturer: syz [ 379.018639][ T5823] usb 3-1: SerialNumber: syz [ 379.088319][ T8395] ubi: mtd0 is already attached to ubi31 [ 379.194991][ T6027] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 379.747454][ T6027] usb 1-1: device descriptor read/8, error -71 [ 379.869337][ T6027] usb usb1-port1: unable to enumerate USB device [ 379.924106][ T5823] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 379.934433][ T5823] usb 3-1: No valid video chain found. [ 379.949435][ T5823] usb 3-1: USB disconnect, device number 31 [ 380.801106][ T5823] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 381.013637][ T5823] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 381.042715][ T5823] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 381.091580][ T5823] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 381.126614][ T5823] usb 3-1: config 220 has no interface number 2 [ 381.186811][ T5823] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.224646][ T5823] usb 3-1: config 220 interface 0 has no altsetting 0 [ 381.255329][ T5823] usb 3-1: config 220 interface 76 has no altsetting 0 [ 381.298751][ T5823] usb 3-1: config 220 interface 1 has no altsetting 0 [ 381.459529][ T5823] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 381.534093][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.609385][ T5823] usb 3-1: Product: syz [ 381.640234][ T5823] usb 3-1: Manufacturer: syz [ 381.654361][ T5823] usb 3-1: SerialNumber: syz [ 382.009343][ T5823] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 382.029736][ T5823] usb 3-1: No valid video chain found. [ 382.758275][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 382.875649][ T5823] usb 3-1: USB disconnect, device number 32 [ 384.869002][ T8436] loop3: detected capacity change from 0 to 40427 [ 384.883313][ T8433] tipc: Enabling of bearer rejected, failed to enable media [ 384.892180][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 384.921885][ T8436] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 384.930373][ T8436] F2FS-fs (loop3): Image doesn't support compression [ 384.937106][ T8436] F2FS-fs (loop3): Image doesn't support compression [ 384.944095][ T8436] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 384.953913][ T8436] F2FS-fs (loop3): invalid crc value [ 384.980468][ T8436] F2FS-fs (loop3): Found nat_bits in checkpoint [ 385.022816][ T8439] syzkaller0: entered promiscuous mode [ 385.037764][ T8439] syzkaller0: entered allmulticast mode [ 385.054853][ T8436] F2FS-fs (loop3): Start checkpoint disabled! [ 385.204643][ T8436] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 386.202743][ T6316] kworker/u4:11: attempt to access beyond end of device [ 386.202743][ T6316] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 386.270048][ T8451] ubi: mtd0 is already attached to ubi31 [ 386.694684][ T6316] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 386.905154][ T6316] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 386.923360][ T6316] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 387.502588][ T8456] siw: device registration error -23 [ 389.863299][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 390.869386][ T8478] siw: device registration error -23 [ 391.888122][ T5887] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 392.095002][ T8480] loop0: detected capacity change from 0 to 32768 [ 392.108739][ T8480] XFS: noikeep mount option is deprecated. [ 392.140610][ T8480] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 392.159455][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.942159][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.968712][ T5887] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 392.998654][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.063250][ T5887] usb 2-1: config 0 descriptor?? [ 393.069490][ T8500] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[8500] [ 393.101347][ T8480] XFS (loop0): Ending clean mount [ 393.114689][ T8480] XFS (loop0): Quotacheck needed: Please wait. [ 393.202884][ T8480] XFS (loop0): Quotacheck: Done. [ 393.427194][ T28] audit: type=1804 audit(1756310386.003:22): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.738" name="/newroot/190/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 393.502061][ T8504] ubi: mtd0 is already attached to ubi31 [ 394.167541][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 394.746815][ T8509] ubi: mtd0 is already attached to ubi31 [ 395.318360][ T5887] uclogic 0003:256C:006D.000D: interface is invalid, ignoring [ 395.552650][ T5778] usb 2-1: USB disconnect, device number 14 [ 397.087735][ T8526] ubi: mtd0 is already attached to ubi31 [ 399.890357][ T8544] loop0: detected capacity change from 0 to 40427 [ 399.922579][ T8544] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 399.931180][ T8544] F2FS-fs (loop0): Image doesn't support compression [ 399.938150][ T8544] F2FS-fs (loop0): Image doesn't support compression [ 399.944854][ T8544] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 399.956341][ T8544] F2FS-fs (loop0): invalid crc value [ 399.966371][ T8544] F2FS-fs (loop0): Found nat_bits in checkpoint [ 400.016874][ T8544] F2FS-fs (loop0): Start checkpoint disabled! [ 400.058117][ T8544] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 401.267806][ T78] kworker/u4:4: attempt to access beyond end of device [ 401.267806][ T78] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 401.281948][ T78] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 401.282480][ T8558] loop1: detected capacity change from 0 to 256 [ 401.289165][ T78] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 401.302189][ T78] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 401.330697][ T8558] exfat: Deprecated parameter 'utf8' [ 401.342369][ T8558] exfat: Deprecated parameter 'namecase' [ 401.473860][ T8558] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 404.236356][ T5843] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 404.499909][ T8582] loop1: detected capacity change from 0 to 40427 [ 404.550749][ T8582] F2FS-fs (loop1): Found nat_bits in checkpoint [ 404.599784][ T8582] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 404.621270][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.657993][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.685700][ T5843] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 404.716149][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.914189][ T5843] usb 3-1: config 0 descriptor?? [ 405.053049][ T8592] syz.1.763: attempt to access beyond end of device [ 405.053049][ T8592] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 405.808517][ T5786] syz-executor: attempt to access beyond end of device [ 405.808517][ T5786] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 406.017721][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 408.208000][ T5843] usb 3-1: string descriptor 0 read error: -71 [ 408.217637][ T5843] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 408.238180][ T5843] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 408.258139][ T5843] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 408.268144][ T5843] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 408.276300][ T5843] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 408.315804][ T5843] usb 3-1: USB disconnect, device number 33 [ 409.827137][ T8609] loop2: detected capacity change from 0 to 32768 [ 409.849120][ T8609] XFS: noikeep mount option is deprecated. [ 409.992419][ T8609] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.339236][ T8609] XFS (loop2): Ending clean mount [ 410.348712][ T8609] XFS (loop2): Quotacheck needed: Please wait. [ 410.384134][ T8609] XFS (loop2): Quotacheck: Done. [ 410.437504][ T28] audit: type=1804 audit(1756310403.033:23): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.769" name="/newroot/184/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 410.504680][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 413.281640][ T8646] loop2: detected capacity change from 0 to 40427 [ 413.307215][ T8646] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 413.315765][ T8646] F2FS-fs (loop2): Image doesn't support compression [ 413.322595][ T8646] F2FS-fs (loop2): Image doesn't support compression [ 413.329932][ T8646] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 413.339486][ T8646] F2FS-fs (loop2): invalid crc value [ 413.358564][ T8646] F2FS-fs (loop2): Found nat_bits in checkpoint [ 413.405034][ T8646] F2FS-fs (loop2): Start checkpoint disabled! [ 413.859860][ T8646] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 415.951234][ T1078] kworker/u4:5: attempt to access beyond end of device [ 415.951234][ T1078] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 415.994492][ T1078] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 416.023575][ T1078] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 416.039977][ T1078] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 416.077766][ T8656] ax25_connect(): syz.3.778 uses autobind, please contact jreuter@yaina.de [ 416.787462][ T8673] loop1: detected capacity change from 0 to 40427 [ 416.838165][ T8673] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 416.846587][ T8673] F2FS-fs (loop1): Image doesn't support compression [ 416.853433][ T8673] F2FS-fs (loop1): Image doesn't support compression [ 416.860502][ T8673] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 416.884061][ T8673] F2FS-fs (loop1): invalid crc value [ 416.892632][ T8673] F2FS-fs (loop1): Found nat_bits in checkpoint [ 416.965567][ T8673] F2FS-fs (loop1): Start checkpoint disabled! [ 416.982433][ T8673] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 417.363835][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 417.964954][ T8665] loop0: detected capacity change from 0 to 32768 [ 417.972800][ T8665] XFS: noikeep mount option is deprecated. [ 418.316604][ T8665] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.632874][ T8665] XFS (loop0): Ending clean mount [ 418.656500][ T8665] XFS (loop0): Quotacheck needed: Please wait. [ 418.773051][ T8665] XFS (loop0): Quotacheck: Done. [ 418.832394][ T48] kworker/u4:3: attempt to access beyond end of device [ 418.832394][ T48] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 418.848485][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 418.859096][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 418.866482][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 418.922896][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.595302][ T8693] loop0: detected capacity change from 0 to 40427 [ 419.612655][ T8695] loop3: detected capacity change from 0 to 40427 [ 419.623518][ T8693] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 419.632170][ T8693] F2FS-fs (loop0): Image doesn't support compression [ 419.639092][ T8693] F2FS-fs (loop0): Image doesn't support compression [ 419.645791][ T8693] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 419.656682][ T8693] F2FS-fs (loop0): invalid crc value [ 419.685903][ T8695] F2FS-fs (loop3): Found nat_bits in checkpoint [ 419.689005][ T8693] F2FS-fs (loop0): Found nat_bits in checkpoint [ 419.749188][ T8693] F2FS-fs (loop0): Start checkpoint disabled! [ 419.749721][ T8695] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 419.776040][ T8693] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 419.981974][ T8702] loop1: detected capacity change from 0 to 4096 [ 420.057355][ T8702] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 420.077960][ T8702] UDF-fs: Scanning with blocksize 512 failed [ 420.162390][ T8706] syz.3.790: attempt to access beyond end of device [ 420.162390][ T8706] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 420.760149][ T8702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.839506][ T5784] syz-executor: attempt to access beyond end of device [ 420.839506][ T5784] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 420.894414][ T28] audit: type=1800 audit(1756310413.483:24): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.788" name="bus" dev="loop1" ino=1347 res=0 errno=0 [ 420.923427][ T5784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 422.540500][ T8718] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[8718] [ 423.508561][ T78] kworker/u4:4: attempt to access beyond end of device [ 423.508561][ T78] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 423.585765][ T78] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 423.618000][ T78] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 423.924615][ T8714] loop2: detected capacity change from 0 to 32768 [ 423.954654][ T8714] XFS: noikeep mount option is deprecated. [ 424.016951][ T8714] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 424.478306][ T8714] XFS (loop2): Ending clean mount [ 424.583753][ T8714] XFS (loop2): Quotacheck needed: Please wait. [ 425.151795][ T8714] XFS (loop2): Quotacheck: Done. [ 425.201734][ T8723] loop3: detected capacity change from 0 to 32768 [ 425.217050][ T8723] XFS: noikeep mount option is deprecated. [ 425.234947][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 425.469045][ T8723] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.295317][ T8723] XFS (loop3): Ending clean mount [ 426.314213][ T8723] XFS (loop3): Quotacheck needed: Please wait. [ 426.406581][ T8723] XFS (loop3): Quotacheck: Done. [ 426.491371][ T28] audit: type=1800 audit(1756310419.073:25): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.796" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 426.560689][ T8738] loop1: detected capacity change from 0 to 32768 [ 426.583172][ T8738] XFS: noikeep mount option is deprecated. [ 426.603122][ T28] audit: type=1804 audit(1756310419.073:26): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.796" name="/newroot/186/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 426.684089][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.731573][ T8738] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.759272][ T8759] loop0: detected capacity change from 0 to 256 [ 426.766492][ T8759] exfat: Deprecated parameter 'utf8' [ 426.806587][ T8759] exfat: Deprecated parameter 'namecase' [ 426.858037][ T8759] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 427.297157][ T8738] XFS (loop1): Ending clean mount [ 428.055443][ T8738] XFS (loop1): Quotacheck needed: Please wait. [ 428.122709][ T8774] loop2: detected capacity change from 0 to 256 [ 428.132053][ T8774] exfat: Deprecated parameter 'utf8' [ 428.137510][ T8774] exfat: Deprecated parameter 'namecase' [ 428.155097][ T8738] XFS (loop1): Quotacheck: Done. [ 428.170869][ T8774] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 428.262405][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 429.308123][ T5843] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 430.301669][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 430.317942][ T5843] usb 4-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 430.351670][ T8791] loop2: detected capacity change from 0 to 4096 [ 430.377055][ T5843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.393444][ T5843] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.401953][ T8791] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 430.414033][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.420608][ T8791] UDF-fs: Scanning with blocksize 512 failed [ 430.446185][ T5843] usb 4-1: Product: syz [ 430.459015][ T5843] usb 4-1: Manufacturer: syz [ 430.463859][ T5843] usb 4-1: SerialNumber: syz [ 430.512940][ T8791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.608667][ T8793] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[8793] [ 430.688583][ T5843] usb 4-1: 0:2 : does not exist [ 430.712224][ T28] audit: type=1800 audit(1756310423.313:27): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.808" name="bus" dev="loop2" ino=1347 res=0 errno=0 [ 430.765686][ T5843] usb 4-1: USB disconnect, device number 27 [ 430.921445][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.298432][ T8800] loop1: detected capacity change from 0 to 32768 [ 433.339022][ T8800] XFS: noikeep mount option is deprecated. [ 433.510812][ T8800] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 433.605298][ T8822] ubi: mtd0 is already attached to ubi31 [ 434.013119][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 434.778634][ T8800] XFS (loop1): Ending clean mount [ 434.786731][ T8800] XFS (loop1): Quotacheck needed: Please wait. [ 435.086064][ T8833] loop3: detected capacity change from 0 to 40427 [ 435.115714][ T8833] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 435.124395][ T8833] F2FS-fs (loop3): Image doesn't support compression [ 435.131295][ T8833] F2FS-fs (loop3): Image doesn't support compression [ 435.139177][ T8833] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 435.153422][ T8833] F2FS-fs (loop3): invalid crc value [ 435.175433][ T8800] XFS (loop1): Quotacheck: Done. [ 435.187748][ T8833] F2FS-fs (loop3): Found nat_bits in checkpoint [ 435.220664][ T8833] F2FS-fs (loop3): Start checkpoint disabled! [ 435.228587][ T8833] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 435.507300][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 436.138151][ T12] kworker/u4:1: attempt to access beyond end of device [ 436.138151][ T12] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 436.152964][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 436.160280][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 436.176782][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 436.593221][ T6027] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 436.823862][ T6027] usb 2-1: Using ep0 maxpacket: 16 [ 437.296621][ T6027] usb 2-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 437.307454][ T6027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.338967][ T6027] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.348290][ T6027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.356300][ T6027] usb 2-1: Product: syz [ 437.371101][ T6027] usb 2-1: Manufacturer: syz [ 437.375761][ T6027] usb 2-1: SerialNumber: syz [ 437.604298][ T6027] usb 2-1: 0:2 : does not exist [ 437.639407][ T6027] usb 2-1: USB disconnect, device number 15 [ 437.734109][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.003038][ T8839] loop0: detected capacity change from 0 to 32768 [ 438.008880][ T8847] loop3: detected capacity change from 0 to 32768 [ 438.019869][ T8847] XFS: noikeep mount option is deprecated. [ 438.034796][ T8839] XFS: noikeep mount option is deprecated. [ 438.090533][ T8839] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 438.104288][ T8847] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 438.266005][ T8839] XFS (loop0): Ending clean mount [ 438.277011][ T8847] XFS (loop3): Ending clean mount [ 438.285379][ T8839] XFS (loop0): Quotacheck needed: Please wait. [ 438.305708][ T8847] XFS (loop3): Quotacheck needed: Please wait. [ 438.376041][ T8839] XFS (loop0): Quotacheck: Done. [ 438.407590][ T8847] XFS (loop3): Quotacheck: Done. [ 438.455711][ T28] audit: type=1804 audit(1756310431.053:28): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.822" name="/newroot/209/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 438.524054][ T28] audit: type=1804 audit(1756310431.113:29): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.822" name="/newroot/209/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 438.562698][ T28] audit: type=1800 audit(1756310431.113:30): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.821" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 438.642143][ T28] audit: type=1804 audit(1756310431.113:31): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.822" name="/newroot/209/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 438.689249][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 438.707969][ T28] audit: type=1804 audit(1756310431.123:32): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.821" name="/newroot/195/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 438.752418][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 439.073530][ T8875] loop2: detected capacity change from 0 to 40427 [ 439.134135][ T8875] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 439.142753][ T8875] F2FS-fs (loop2): Image doesn't support compression [ 439.149666][ T8875] F2FS-fs (loop2): Image doesn't support compression [ 439.156495][ T8875] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 439.253307][ T8875] F2FS-fs (loop2): invalid crc value [ 439.263029][ T8875] F2FS-fs (loop2): Found nat_bits in checkpoint [ 439.293888][ T8875] F2FS-fs (loop2): Start checkpoint disabled! [ 439.311615][ T8875] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 440.501606][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.507997][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.285738][ T8891] ubi: mtd0 is already attached to ubi31 [ 442.423879][ T48] kworker/u4:3: attempt to access beyond end of device [ 442.423879][ T48] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 442.441595][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 442.453395][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 442.487976][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 442.666509][ T8897] loop3: detected capacity change from 0 to 32768 [ 442.699017][ T8897] XFS: noikeep mount option is deprecated. [ 442.745352][ T8897] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.903678][ T8897] XFS (loop3): Ending clean mount [ 442.976151][ T8897] XFS (loop3): Quotacheck needed: Please wait. [ 443.036294][ T8897] XFS (loop3): Quotacheck: Done. [ 443.172453][ T28] audit: type=1800 audit(1756310435.773:33): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.829" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 443.179013][ T6027] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 443.201238][ T28] audit: type=1804 audit(1756310435.773:34): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.829" name="/newroot/196/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 443.418202][ T6027] usb 2-1: Using ep0 maxpacket: 16 [ 443.442883][ T6027] usb 2-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 443.514642][ T6027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.674654][ T6027] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.823139][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 443.845804][ T6027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.915958][ T6027] usb 2-1: Product: syz [ 443.920478][ T6027] usb 2-1: Manufacturer: syz [ 443.927984][ T6027] usb 2-1: SerialNumber: syz [ 444.158523][ T6027] usb 2-1: 0:2 : does not exist [ 444.204206][ T6027] usb 2-1: USB disconnect, device number 16 [ 444.378928][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.716878][ T8916] loop2: detected capacity change from 0 to 4096 [ 444.760475][ T8916] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 444.778316][ T8916] UDF-fs: Scanning with blocksize 512 failed [ 444.801966][ T8916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.003407][ T28] audit: type=1800 audit(1756310437.593:35): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.839" name="bus" dev="loop2" ino=1347 res=0 errno=0 [ 445.750382][ T8924] loop0: detected capacity change from 0 to 40427 [ 445.807527][ T8924] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 445.815968][ T8924] F2FS-fs (loop0): Image doesn't support compression [ 445.822857][ T8924] F2FS-fs (loop0): Image doesn't support compression [ 445.829627][ T8924] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 445.846900][ T8924] F2FS-fs (loop0): invalid crc value [ 445.857812][ T8924] F2FS-fs (loop0): Found nat_bits in checkpoint [ 445.888079][ T8924] F2FS-fs (loop0): Start checkpoint disabled! [ 445.922677][ T8924] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 446.531393][ T8931] loop3: detected capacity change from 0 to 40427 [ 446.551199][ T8931] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 446.559653][ T8931] F2FS-fs (loop3): Image doesn't support compression [ 446.566389][ T8931] F2FS-fs (loop3): Image doesn't support compression [ 446.573131][ T8931] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 446.582899][ T8931] F2FS-fs (loop3): invalid crc value [ 446.674645][ T8931] F2FS-fs (loop3): Found nat_bits in checkpoint [ 446.703088][ T8931] F2FS-fs (loop3): Start checkpoint disabled! [ 446.719527][ T8931] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 447.763923][ T48] kworker/u4:3: attempt to access beyond end of device [ 447.763923][ T48] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 447.837509][ T1078] kworker/u4:5: attempt to access beyond end of device [ 447.837509][ T1078] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 447.853707][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 447.869817][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 447.908089][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 447.916728][ T1078] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 448.008049][ T1078] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 448.033927][ T1078] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 448.762472][ T8938] loop3: detected capacity change from 0 to 32768 [ 449.423801][ T28] audit: type=1800 audit(1756310441.863:36): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.843" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 451.778070][ T8961] ubi: mtd0 is already attached to ubi31 [ 452.874887][ T8964] loop1: detected capacity change from 0 to 4096 [ 452.895350][ T8964] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 452.930000][ T8964] UDF-fs: Scanning with blocksize 512 failed [ 452.988038][ T8964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.052758][ T28] audit: type=1800 audit(1756310445.653:37): pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.850" name="bus" dev="loop1" ino=1347 res=0 errno=0 [ 453.075016][ T8949] loop0: detected capacity change from 0 to 32768 [ 454.320395][ T8971] loop2: detected capacity change from 0 to 40427 [ 454.382624][ T8971] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 454.392095][ T8971] F2FS-fs (loop2): Image doesn't support compression [ 454.399081][ T8971] F2FS-fs (loop2): Image doesn't support compression [ 454.405789][ T8971] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 455.031073][ T8971] F2FS-fs (loop2): invalid crc value [ 455.039790][ T8971] F2FS-fs (loop2): Found nat_bits in checkpoint [ 455.088142][ T8971] F2FS-fs (loop2): Start checkpoint disabled! [ 455.170496][ T8971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 456.012922][ T1078] kworker/u4:5: attempt to access beyond end of device [ 456.012922][ T1078] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 456.828068][ T8985] siw: device registration error -23 [ 457.058046][ T1078] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 457.065002][ T1078] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 457.079797][ T1078] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 457.094522][ T8989] loop3: detected capacity change from 0 to 256 [ 457.145630][ T8989] exfat: Deprecated parameter 'utf8' [ 457.168312][ T8989] exfat: Deprecated parameter 'namecase' [ 457.570701][ T8989] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 459.174893][ T9003] ubi: mtd0 is already attached to ubi31 [ 460.401244][ T8995] loop1: detected capacity change from 0 to 32768 [ 460.474599][ T5770] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 460.926333][ T9013] loop3: detected capacity change from 0 to 32768 [ 463.161519][ T9018] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 463.161519][ T9018] [ 463.211787][ T9018] ERROR: (device loop3): remounting filesystem as read-only [ 463.831830][ T28] audit: type=1800 audit(1756310454.023:38): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.865" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 464.185763][ T9024] loop2: detected capacity change from 0 to 4096 [ 464.237666][ T9024] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 464.312926][ T9028] loop0: detected capacity change from 0 to 256 [ 464.335377][ T5784] ------------[ cut here ]------------ [ 464.341424][ T5784] kernel BUG at fs/jfs/inode.c:169! [ 464.347843][ T9028] exfat: Deprecated parameter 'utf8' [ 464.354103][ T9028] exfat: Deprecated parameter 'namecase' [ 464.371604][ T5784] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 464.377759][ T5784] CPU: 1 PID: 5784 Comm: syz-executor Not tainted 6.6.102-syzkaller #0 [ 464.386010][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.396172][ T5784] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 464.401743][ T5784] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 19 d5 e3 fe e9 0a fe ff ff e8 ff 8d 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 464.421548][ T5784] RSP: 0018:ffffc900045efac0 EFLAGS: 00010293 [ 464.427633][ T5784] RAX: ffffffff82f8fd21 RBX: ffff8880590e7330 RCX: ffff88807b493c00 [ 464.435622][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880590e7330 [ 464.443734][ T5784] RBP: 0000000000000001 R08: ffffffff90da3657 R09: 1ffffffff21b46ca [ 464.451806][ T5784] R10: dffffc0000000000 R11: fffffbfff21b46cb R12: dffffc0000000000 [ 464.459972][ T5784] R13: dffffc0000000000 R14: ffff8880590e6fb8 R15: ffff8880590e7500 [ 464.468050][ T5784] FS: 0000555580120500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 464.477524][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.484139][ T5784] CR2: 00007f2929972020 CR3: 000000006182b000 CR4: 00000000003506e0 [ 464.492126][ T5784] Call Trace: [ 464.495404][ T5784] [ 464.495761][ T9026] loop1: detected capacity change from 0 to 40427 [ 464.498319][ T5784] ? evict+0x480/0x870 [ 464.498346][ T5784] ? jfs_write_inode+0x220/0x220 [ 464.498365][ T5784] evict+0x486/0x870 [ 464.518258][ T5784] ? proc_nr_inodes+0x230/0x230 [ 464.523111][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 464.528321][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 464.533521][ T5784] evict_inodes+0x5fe/0x690 [ 464.538023][ T5784] ? clear_inode+0x150/0x150 [ 464.542601][ T5784] generic_shutdown_super+0x97/0x2b0 [ 464.547879][ T5784] kill_block_super+0x44/0x90 [ 464.552544][ T5784] deactivate_locked_super+0x97/0x100 [ 464.557912][ T5784] cleanup_mnt+0x429/0x4c0 [ 464.562323][ T5784] task_work_run+0x1ce/0x250 [ 464.566933][ T5784] ? task_work_cancel+0x240/0x240 [ 464.571949][ T5784] ? exit_to_user_mode_loop+0x3b/0x110 [ 464.577398][ T5784] exit_to_user_mode_loop+0xe6/0x110 [ 464.582673][ T5784] exit_to_user_mode_prepare+0xb1/0x140 [ 464.588214][ T5784] syscall_exit_to_user_mode+0x1a/0x50 [ 464.593667][ T5784] do_syscall_64+0x61/0xb0 [ 464.598121][ T5784] ? clear_bhb_loop+0x40/0x90 [ 464.602917][ T5784] ? clear_bhb_loop+0x40/0x90 [ 464.607686][ T5784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.613582][ T5784] RIP: 0033:0x7f5b4018ff17 [ 464.618007][ T5784] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 464.637806][ T5784] RSP: 002b:00007ffed82e12e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 464.646214][ T5784] RAX: 0000000000000000 RBX: 00007f5b40211c05 RCX: 00007f5b4018ff17 [ 464.654174][ T5784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed82e13a0 [ 464.662155][ T5784] RBP: 00007ffed82e13a0 R08: 0000000000000000 R09: 0000000000000000 [ 464.670141][ T5784] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed82e2430 [ 464.678142][ T5784] R13: 00007f5b40211c05 R14: 000000000007112b R15: 00007ffed82e2470 [ 464.686111][ T5784] [ 464.689143][ T5784] Modules linked in: [ 464.709152][ T9026] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 464.712079][ T9024] UDF-fs: Scanning with blocksize 512 failed [ 464.717531][ T9026] F2FS-fs (loop1): Image doesn't support compression [ 464.730471][ T9026] F2FS-fs (loop1): Image doesn't support compression [ 464.738009][ T9026] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 464.749231][ T9026] F2FS-fs (loop1): invalid crc value [ 464.756773][ T9026] F2FS-fs (loop1): Found nat_bits in checkpoint [ 464.762827][ T9024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.788975][ T9028] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 464.795256][ T9026] F2FS-fs (loop1): Start checkpoint disabled! [ 464.810983][ T9026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 464.872316][ T5784] ---[ end trace 0000000000000000 ]--- [ 464.879625][ T5784] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 464.887679][ T28] audit: type=1800 audit(1756310457.483:39): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.870" name="bus" dev="loop2" ino=1347 res=0 errno=0 [ 464.918846][ T5784] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 19 d5 e3 fe e9 0a fe ff ff e8 ff 8d 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 464.959907][ T5784] RSP: 0018:ffffc900045efac0 EFLAGS: 00010293 [ 464.967941][ T5784] RAX: ffffffff82f8fd21 RBX: ffff8880590e7330 RCX: ffff88807b493c00 [ 465.588572][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880590e7330 [ 465.596866][ T5784] RBP: 0000000000000001 R08: ffffffff90da3657 R09: 1ffffffff21b46ca [ 465.638323][ T5784] R10: dffffc0000000000 R11: fffffbfff21b46cb R12: dffffc0000000000 [ 465.646353][ T5784] R13: dffffc0000000000 R14: ffff8880590e6fb8 R15: ffff8880590e7500 [ 465.654943][ T5784] FS: 0000555580120500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 465.663958][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.676304][ T5784] CR2: 0000001b2df12ff8 CR3: 000000006182b000 CR4: 00000000003506e0 [ 465.684411][ T5784] Kernel panic - not syncing: Fatal exception [ 465.690763][ T5784] Kernel Offset: disabled [ 465.695081][ T5784] Rebooting in 86400 seconds..