last executing test programs: 2m12.356947175s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x80000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() r1 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r1, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {r2, r3/1000+60000}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) write$sysctl(r6, &(0x7f00000004c0)='0', 0x2) sendmmsg$unix(r5, &(0x7f0000000500), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000540), 0x10106, 0x2, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r7, &(0x7f0000000580)={&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b59, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000001001000001000000f00000005f8215255b9c00010000000000"], 0x18}, 0x0) close(r7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) 2m11.461183526s ago: executing program 3 (id=6): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_mount_image$nilfs2(&(0x7f0000000580), &(0x7f00000005c0)='./file2\x00', 0x3200400, &(0x7f0000000600)=ANY=[], 0x1, 0xa76, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000001100)={{&(0x7f0000001180)=[{0x6, 0x3, 0x2, {0x100000000002002, 0x3}, 0x0, 0xea}], 0x1, 0x40, 0x3, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x7}, {0x0, 0x21, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000011c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x65, 0x24, 0x1, 0x70bd2c, 0x25cfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffb}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) dup3(r3, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000001200)='./security\x00', &(0x7f0000001240)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r4, &(0x7f00000012c0)="04080076657273696f6e00020548000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000004", 0x6a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3c, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xf}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r6, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005, 0x0, 0x8010}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x90, r7, 0x8, 0x70bd26, 0x6, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1ff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x787b}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x4004093) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m10.815402361s ago: executing program 3 (id=9): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000faffffff00000000010000008500000041000000850000007d00000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x3100, 0x2e, &(0x7f0000000700), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400001600"], 0x30}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x8000, 0x1f7) fanotify_mark(0xffffffffffffffff, 0x641, 0x8000026, r5, 0x0) sendto$inet6(r4, &(0x7f00000003c0)='X', 0x14f8d, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) setreuid(0xee01, 0xee01) r6 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000004c0)={r7, 0xa9ac}, &(0x7f0000000500)=0x8) 2m10.423511791s ago: executing program 2 (id=13): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) 2m10.368778197s ago: executing program 2 (id=14): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd8d, &(0x7f0000000600)={0x0, 0x1, 0x100, 0x2, 0x1e5}, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xfffffec1}, 0x0, 0x10, 0x1}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000880)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000900)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000480)="4c00000011000f14001100020000130002000000200000", 0x17) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0), 0x1000000}, 0x20) r10 = syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r10, 0xc0106426, &(0x7f00000005c0)={0x0, 0x0}) setxattr$incfs_id(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r9}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xe, &(0x7f0000000840)=ANY=[@ANYRES16=r8], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000001340), 0x8, 0x10, &(0x7f0000001380), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000001440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m9.955004679s ago: executing program 2 (id=15): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) pipe2(&(0x7f0000000100), 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1, 0x6, 0x97a) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000880)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f00000008c0)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="141100002f00010000000000fcdbdf250211f2800c0003000aac0f0000000000140001"], 0x1114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = epoll_create1(0x80000) r8 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f00000004c0)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000580)={0xa0028000}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="080100003d0007010000000000000000037c0000100001800c0006008035000000000000e20002"], 0x108}}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000079120806000000009500000000000000d373f1ea9be20f68dc1c2e78303e10cd7ee8916688d6cc82a64a6c44e4ef"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r9 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r9, 0x80106f53, &(0x7f0000000140)={0x4, &(0x7f0000000240)=[{0x14, '\x00', @data=0x3, 0x4}, {0x6, '\x00', @data=0x5, 0x6448}, {0x18, '\x00', @buffer={"f6131d756f1c7475b9b0f7cd51aeb581de8d43c681dd904b2c589e8fa01a479f", 0x20}, 0x9b14}, {0x3d, '\x00', @st={0x4, [{0x1, @svalue=0x1}, {0x2, @svalue=0x6}, {0x2, @svalue=0x2}, {0x1, @uvalue=0x20000008}]}, 0x2}]}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2m9.117811634s ago: executing program 2 (id=18): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_mount_image$nilfs2(&(0x7f0000000580), &(0x7f00000005c0)='./file2\x00', 0x3200400, &(0x7f0000000600)=ANY=[], 0x1, 0xa76, &(0x7f0000000640)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4iv2e136xNfb+2V5/n/T89s0bz3szOx6PZ+a9F4CJVWm8Li3NFSFcffPV4/984B+zd6Y82pqj1nidbktVQwhFTE9ny3tvqhnfev+lM93iIiw2XlM6PHmz9d7tIYRL4UC4Fmph79Xrr7y9+MTJyyeuHHzntaM31mftAQBgsnzr2tGlPX/7875dH7x+37GwpTU9nZ/XYnpHPO8/Fk/80/l/JXSmi7bQbiabbzqGSjbfVJf52supZvNN9yh/JltutZW/r2O+LSXlT7VN67beMM7SflwLRWW+I12pzM83f5OHxu/6mWL+wrnzz1wcUkWBNffv+0MIB4RBQ71e/3FjA45AXdY/3KgPvw7CeoT6zmEfgQCa8vuFd7mUX1lYndbSpvsr/+Zjle7vhzWw0fu/8ser/F9fjuWf+uu61oPJsFm/v9J6pc/RjpjO7yPkzy8N+vlPy5uKL9PZ8sv0uo8wLvcXetVzaoPrsVK96p/vF5vV12OctsM3svz2z0/+Px2X/zHQ3X8m7Pr/gRGow6YO1RGog9B3qA/7AASMrOXn5prqUcrPn+vL87eU5G8tyZ8tyd9Wkr+9JB8m2e+f/2l4uVj+nZ//ph/0eli6zvaRGH90wPrk1yMHLT9/7ndQqy0/f54YRtkbp586+5WnT11vPv9ftPb/23F/PxDTtfjZuhZnSNcL8+vqrWf/a53lVHrMd09Wn3TcqGxJ89ebJe7unK/Yvbyc0Hacuasec53v29lrvv2d89Wy+WZj2JrVNz8/2Za9L51/pONq2l7T2fpWs/WYyeqRjiu7YpzXA1Yi7Y+9nv9P++dcqBbPnDt/9pGYTvvpn6aqW+5MP9S+0N9sTN2B1em3/c9c6Gz/s6M1vVppPy7sXJ5etB8Xatn0xWaydZs8TT8c0+l77jtTs43p82e+d/7ptV55mHAXX3jxu6fPnz/7A3+kP2ZtFn/4Y9hHJmC9LTz/3PcXLr7w4sPnnjv97Nlnz144fOTI4cXFI189vLTQOK9faD+7BzaT5S/9YdcEAAAAAAAAAAAA6NcPTxy//pe3vvxus/3/cvu/1P4/Pfmb2v//JGv/n7eTT+3gUzvAXV3yG+PuvdFZj5lsvmoMH8vquzsrZ0/2vo/HuDWOX2z/n9rb5/26pvrcm03P++9N82XdCdzVX8pM1gdJPl7gp2J8Jca/CjBExWz3yTHu6N863N2/ddrXU/8U+qUYT+n/lvaG1I9Jav/dq1+ndPzftQF1ZO1tRHPCYa8j0N2/Rr7/77Yz8aHXZQKC7TxRoV43igcwGoY9/me67pniC3/85tY7Ic1287HO42XefymsxqiPP6n8URj/s1izSrTGv+vr+Neld/WOfp77H13hvz+/8W5bsWFvv8ffy9mqp36gd5eX2e6DWH5a/wdDf+XXf5mVn98Q6tP/svK39Vn+Xeu/f2Xl/z+WnzbbQ5/ut/xmjYtKZz3y68bp/l9+3Ti5la1/6ttz4PVf4UCNt2P5MMl6jzPb7wi2o2ko4/92uT+6UvlzGF+K6XQgTM855N/Ig9Y/PV+Rvgf2ZMsvSr7fxmWc4l4mffzfr8W47POQxv9N+2OtS7rSlq522bbjvq/AZvPeyN//G7NwaQTqIIxomB2BOnSGer2+vhe0Sgy1cIa+/Yd993nY5Q97+5fJx//Nz+Hz8X8r2Q+IfPzf/P35+L95fj6+Xp6fj/+bb898/N88/95sufkV7LmS/E+U5O8tyd+3nD/bLX9/yfs/WZJ/MMRzkh7595W8//6S/HtK8qdK8j9Tkv/ZkvwHSvIfKsn/XEn+Zpfao0zq+sMky9vn+fzD5Ej3f3p9/neX5APj62evH3r81O++XWu2/59p/V5L9/GOxXQ1/nb+UUzn971DW/pO3lsx/fcsf9Svd8AkyfvPyL/fHyzJB8ZXes7L5xsmUNG9x55++63qdZ7PePl8jL8Q4y/G+OEYz8d4IcaHYry4QfVjfTz+2z8cfblY/r2/M8vv93nyvD1Q3k/U4T7rk18fGPR59rwfv0GttvwVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmkrjdWlprgjh6puvHn/q5LmFO1Mebc1Ra7xOt6WqrfeF8EiMp2L8i/jHrfdfOtMe345xERZDEYrW9PDkzVZJ20MIl8KBcC3Uwt6r1195e/GJk5dPXDn4zmtHb6zfFgAAAIDN78MAAAD//+bcHCE=") r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000001100)={{&(0x7f0000001180)=[{0x6, 0x3, 0x2, {0x100000000002002, 0x3}, 0x0, 0xea}], 0x1, 0x40, 0x3, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x7}, {0x0, 0x21, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000011c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x65, 0x24, 0x1, 0x70bd2c, 0x25cfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffb}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) dup3(r3, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000001200)='./security\x00', &(0x7f0000001240)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r4, &(0x7f00000012c0)="04080076657273696f6e00020548000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000004", 0x6a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3c, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xf}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r6, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005, 0x0, 0x8010}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x90, r7, 0x8, 0x70bd26, 0x6, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1ff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x787b}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x4004093) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m8.989858627s ago: executing program 2 (id=19): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) set_mempolicy(0x4005, &(0x7f00000001c0)=0x4, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001f40)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="64000000140021052bbd7000fbdbdf250a4000fe", @ANYRES32=r2, @ANYBLOB="08000a00040000000800080086060000140006000200000008000000010000000800000014000200ff"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44080) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x6c99, 0x40041) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001d00)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000001d40)={&(0x7f0000001d80)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001e00)='\b', 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r5, 0x84, 0x85, &(0x7f0000001e40)={0x1, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x7}, &(0x7f0000001f00)=0x90) write$P9_RGETATTR(r3, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/131, 0x83}], 0x83}, 0x4eb}], 0x1, 0x2, 0x0) r6 = io_uring_setup(0x2e70, &(0x7f0000002400)={0x0, 0xa980, 0x40, 0x10000002, 0x17e}) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001900)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000001940)={0x73622a85, 0xa, 0x4}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001980)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000019c0)={0x8, 0x0, &(0x7f0000001a00)=[@acquire]}) dup3(r9, r8, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001a40)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000001a80)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000001ac0)={0x8, 0x0, &(0x7f0000001b00)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001b40)={0x4c, 0x0, &(0x7f0000001b80)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x2, &(0x7f0000001c00)={@flat=@weak_binder={0x77622a85, 0x1, 0x0, 0x1}, @ptr={0x70742a85, 0x20000000, &(0x7f0000001c80)=[r8, 0xffffffffffffffff, r10, r9, r10, 0xffffffffffffffff, r9, r9, 0xffffffffffffffff, r10], 0x28, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000001cc0)={0x0, 0x18, 0x40}}, 0x1040}]}) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r7, @ANYRESHEX=0xee01, @ANYBLOB="00948ce941236bf6138dd56792dda3ece25951743067f74f3ceacc7c6dc658aa904fd44c5979ccd05d2900"/52], 0x1, 0x1556, &(0x7f0000000380)="$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") io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000180)=[@ioring_restriction_sqe_op={0x1, 0x10e94ec2f2ac8d56}], 0x1) 2m7.224694656s ago: executing program 3 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000100005060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012"], 0x44}}, 0x0) 2m7.18011929s ago: executing program 32 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000100005060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012"], 0x44}}, 0x0) 2m3.499938284s ago: executing program 2 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0x8f}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4048834}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f00000004c0)=0xb, 0x4) recvmmsg(r2, &(0x7f0000000500), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000240)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}}]}, 0x8c}}, 0x0) 2m3.472812087s ago: executing program 33 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0x8f}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4048834}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f00000004c0)=0xb, 0x4) recvmmsg(r2, &(0x7f0000000500), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000240)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}}]}, 0x8c}}, 0x0) 1m43.532396972s ago: executing program 1 (id=167): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000106000000000000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) 1m43.497451186s ago: executing program 1 (id=169): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101042, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x20400, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r0, 0x2, 0xc, 0x0) 1m43.404119426s ago: executing program 1 (id=170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000400), 0x0}, 0x20) 1m43.403906956s ago: executing program 1 (id=171): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001240)='./file0\x00', 0x204001, &(0x7f0000001280), 0x1, 0xb9f, &(0x7f00000012c0)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001e80), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000001ec0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000001f40)='.\x00', 0x0, 0x2390024, 0x0) 1m42.232064405s ago: executing program 1 (id=176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newsa={0x17c, 0x10, 0x713, 0x10000, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in=@remote, 0xfe, 0x32}, @in6=@private2, {0x3, 0xfffffffffffffffd, 0x45, 0x8, 0xff, 0x9, 0x0, 0x200000053f}, {0x9, 0x5, 0x3}, {0x100003}, 0x70bd30, 0x3500, 0x2, 0x4, 0x0, 0x51}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x6e20, @in=@empty}}, @algo_aead={0x70, 0x12, @rfc4309_256={'rfc4309(ccm(aes))\x00', 0x118, 0x60, "8506575cf2206bdfa7e0cf3a2d9b7dcfeee2272e929df5a1cc3d9faeadc66177f74f75"}}]}, 0x17c}}, 0x48080) 1m40.532135608s ago: executing program 1 (id=194): syz_emit_ethernet(0x7e, &(0x7f0000001740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00000000481100fe8000000000000000000000000000aafec0"], 0x0) 1m40.472262903s ago: executing program 34 (id=194): syz_emit_ethernet(0x7e, &(0x7f0000001740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00000000481100fe8000000000000000000000000000aafec0"], 0x0) 16.612097072s ago: executing program 0 (id=541): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000001480)='./file1\x00', 0x2200002, &(0x7f0000002680)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002cc0)='./file1\x00', 0x8541, 0x1a9) fallocate(r0, 0x8, 0x4012, 0x8000) 16.300057134s ago: executing program 0 (id=547): waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) ptrace(0x10, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904020000020d00000904010102020d", @ANYRES8=0x0], 0x0) 16.088047835s ago: executing program 5 (id=550): prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000c00)=0x2) recvmmsg(r1, &(0x7f0000000c40), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32], 0x40) 15.342067391s ago: executing program 7 (id=551): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/sda\x00', 0x101042, 0x5) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a00), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x80002c1, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000a80), 0xfdef) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001180)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x15, 0x6, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000001300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x1010040, &(0x7f0000000a40)={[{@nolazytime}, {@nodioread_nolock}, {@nogrpid}, {@delalloc}, {@grpjquota}, {}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000000100)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000700)='2', 0xfdef, 0xc00) 14.442821683s ago: executing program 6 (id=552): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000009c0), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000a00)=@unlock_all, 0xb) 14.389432308s ago: executing program 6 (id=553): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x4, 0x0, 0x40382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8044) 13.823928176s ago: executing program 6 (id=555): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001280)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = gettid() syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000200)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000000b40)="$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") rt_sigqueueinfo(r3, 0x1d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x6, 0xd, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.752210813s ago: executing program 7 (id=556): syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1}, &(0x7f0000000140)={0x1f}, 0x0, 0x0, 0x0) 12.99077279s ago: executing program 5 (id=557): r0 = syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230", @ANYRESDEC, @ANYRES8], 0x41, 0x105f2, &(0x7f0000011e00)="$eJzs3EtvG1UbB/DH9dvrW0qFeoEVIyGkWMJWnaYRSAgFaAWVSBVxWbACx3Yst7Ynip0LXcOqfAS2SAix4zOw4WtULJAQCyR2RUWemaCGdkGoE4fk95Mm/zPHM4/POfLmeCIHcGSdT37/rRTn4nRElCPibETWLhVHZiGP5yPixYg49shRKvr/6jgREWci4ty4eF6zVLw0/8f9B1+/cPP1e9/er9R//uar6c0amLaXI6K/mrc3+3mmnTxvF/2NjW6W/bmNIvMX+neK8zTPzfZyVmGzsX1dI8urnfz6dHV9OM6VXqM5zk53JetfHeRvONzobNfJbrjdWMvOW+3lLLvDNMvO3XxcW0XeHY7yOq2i3mdZ+RiNtjPvb2+18/ms3smyORgV/XndtNXeGudGkcXbRTPttbJxLP/rZT7w3usO1reSjfbasJsOkmu1+qu1+ny1vpa22qP2XLXRb83PJTOd3viy6qjd6C900rTTa9eaab+SzHSazWq9nsxcby93G4OkXq9drV2pXqsUrVeSd259lPRaycw43+oO1kfd3jBZSdeS/I5KMlu7+loleamefLC4lCy9f+PG4tKHn1z/+NabizffLi56bFjJzOyV2dlq/Up1tl45mPM/UdSf4PzLsQfzLz3d7Rx1PkAAu2b/D0yD/f9u9v/JY+v3sLyLxT7ADtj+f3tVd7v///Xe4Zj/vn//YfvGU/EBAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4sn46/v27WeN8fv7/ov+Zouu5iLgcEZci4mJEPHyCcpzYUfNCRJSK9pOuP/63MfxQiqzC+J6TxXEmIhaK48Gze70KAAAAcHh99+PnX0SUx83szxvTHhD7qfjS5tSk6mVf+fxvUtUuZMW2JlTt4nbJibgUEcfP/zKhapcj4tjZTydU7R8p74hTj0Qpj2P7ORoAAGB/7NwJTGz3BgAAwIHz5bQHwHRkz2uL/8UvngWfzKN4IHh6xxkAAADwH1Sa9gAAAACAPZft//3+HwAAABxu+e//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8yc7d5CwRw3EA/vPiCPgRieHjKqyMSxYcwiO49AB6G3ecwYRwDtx5BAOGTiGAuHHKy4Q8TzLT6QR+7UzCom0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf0s1rOv6+/fmuas901U+ZpAAAAgGs21XKeLoZ1/XW+/zbfeh8R04iYRMQ4Iq6N3bvx8iSxE6N0rl37fHXRhx8RKWH/nV4+XkXEx3z8fnf79wAAAACPar2aLSK6+8t0+nC84oEdpl/ypE2/VG6a8nlRKm2Uwr4UShsfIouY7N/i8FehtGlEPL35lGv//P0NCjV30kgu+idFpy6eCjYGAAC0xPlIoNjoDQAAgNb5fO8OcB9pvTYvBue14F5d5AXBwVkNAAAAaK/Lf9sfdZ63HwAAAMAdpPH/X/v/5VmB/9//L+z/BwAAAC1S7/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALW2q5Xy9mi2a5mx3zZR5GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+MP+vKNACIRBGOxd33cavP+xpEFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/7k4gBIIgDPad/zkt5h+WNGgMIlTBwscM87AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYn3vbhIEwjsOvnUSJ22SE9BYfM9BQIRiBDwnJkmdgABaioaK1WARWAAEHLZ0peJ7m/9PpijsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhPp6c3PiIi+3xkHvlw9Xe4HHxFvm6awfc1s81xX//ccrLdjVL+xvi/iIgishZ+AwDQvvK+KRbLat5J203bS9tPW07ravbKRwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGbnDlqieMMAgL+7Ouvff6eOKkTQoS65qVkGe+kgeA+CuoluIq0VugcVIfwEUSevfYW81VfoCwQdSvDQwUNBlyCMcUd9DRUlmBnc3w+emUcXZt53F4Z95nlnAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXHbWw6X9vBJCGOw9zFOfvq/NHLf/8Orz4H58u//+SnzM9BBJCOHJfKt5K8e5lN3SyurT6VaruSjphqQv+9jLMh5JaZP4KlEp5uIEAMCFkmSRfrv8mmxOpf+rNELYfXu0/r8e5eGU+n97YyAJGwND2xsDQ7+XP7bjc8X1/0huMyyNvpNeqLcXXtSXVlZvzi9MzzXnms/GxkbH74zfvnd3tL53r6TujgkAAAD/ppZFXP9XG+Hl3/3//6M8nF7/D+3Hw8nHj+Jz9XR3/X+iw6Zf0SMBAADobpev/vxx3OrLSq0Wlqfb7cWRzvbg79HOtoChnltfFnH939MoelQAAABAHnbWK0f6/7NRHs7Y/x9+t7YVH7MnhNCf9f+HZ563ZvObTlF2T1z0H8njceIc5goAAECJ9WcR9/+TRlr/Vw+WPFRDCDeudfLsZwDPVP9/efPgyEPr8fr/sfymWErVic77sbefCKF3ougRAQAAcJH9l0Va7G8lm1OLv15P1qz/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zYMUozQRQH8M1u9vsqMWClVl5A9AIRC0FsPIQoCJ5ABPEAYmvpHSy9Q2oFGwvLFN5A3uyOhjQBi10lvx9M3iMMmZdJk/8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBC0/3vvoqXUdOX7XvPH1cnUV/mani/X9+MFf2gy6H/hpkr2etzDgAAAJZIlfN9URRv9eNh1HKc8n+d90Tmf1hp+hxe53N/rk93rxs5/18fb11+HTRqzokPPTu/ON3p7Bv+fqsLdwzTzadnL1X6Qcqjm7Vpne5zcDuZHPxL7f8upgUAfmI717bJ/4ei7vY5GABLY9iuYib/V+N+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADowmcAAAD//1RlXbk=") syz_mount_image$msdos(&(0x7f0000011d80), &(0x7f0000011dc0)='.\x00', 0x1a5a439, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYBLOB="368c05887fde699cd725e1d1136ff48333ebc806d812d6bfc38173e7", @ANYRES32, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc153d6c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000013000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 12.88867027s ago: executing program 0 (id=558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) 12.763111403s ago: executing program 7 (id=559): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000c80), &(0x7f0000000d00)}, 0x20) 12.762692813s ago: executing program 0 (id=560): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x2, 0x7, 0xfc, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfd, [@sadb_lifetime={0x1e33, 0x3, 0x0, 0x0, 0x3, 0xffff}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x20000000000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_ident={0x2, 0x0, 0x6f84, 0x0, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0xa0}}, 0x0) 12.653591504s ago: executing program 7 (id=562): r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) listen(r0, 0x401) 12.651292524s ago: executing program 6 (id=563): syz_mount_image$ext4(&(0x7f0000002f80)='ext3\x00', &(0x7f0000002fc0)='./file0\x00', 0x0, &(0x7f0000003000)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000003080)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000580)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x4000087, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/sync_on_suspend', 0x20001, 0x0) write$tcp_mem(r3, &(0x7f00000008c0)={0x1, 0x20, 0x8, 0x20, 0xce80}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) nanosleep(&(0x7f0000000840)={0x0, 0x4c4b40}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000940)={@random="f11e0814e096", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x11, 0x11, 0xc18, 0xa000000}}}}}}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000003580)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) 12.540071716s ago: executing program 7 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000007c0)=0x2) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e03c6f023b671ef288563"], 0xffdd) 12.539639426s ago: executing program 0 (id=565): close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x28, r4, 0x9c3fa077fa966179, 0x70bd2c, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x4000054) 11.719912169s ago: executing program 6 (id=568): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffffff, &(0x7f0000000240)='./cgroup/../file0\x00', 0x43, 0xa) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r4, r5, 0x1, 0x0, @void}, 0x10) close_range(r5, r6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, 0x0, 0x8080) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001a00)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x64, 0x0, 0x2, 0x2b, 0x0, @multicast2, @empty}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r8, 0x5433, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x9, 0x2181}}) 11.12285683s ago: executing program 5 (id=569): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x9) sendto$inet6(r0, &(0x7f0000000100)="e02a7bb6e7da72697b2cdbbcff42a02b238bb691348acb814839e600969dac7c83d004000000e536bc54e8ba122e63c7063ab3697ca58e7d", 0x38, 0x4040804, &(0x7f0000000380)={0x1d, 0x4e22, 0xd008000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x36}, 0x1c) 11.044281438s ago: executing program 5 (id=571): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240), 0x0) 11.043867108s ago: executing program 5 (id=572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@block_validity}, {@nogrpid}, {@quota}]}, 0x1, 0x526, &(0x7f0000000100)="$eJzs3c9vG1kdAPCvnTi/mt1klz0Agt2wu1BQVedH2WjZAywnhNBKiJW4gNQNiRtFseModpYmVCI9c0WiEic4cOAP4Fxx4M4FwY1LOVQqEIEaEAejGY9TN7XTtEntbPz5SKP58cbzfS/pvFd/Hc8LYGDNRMReRIxExEcRMZUdz2VLvN9ckvMe7t9aPti/tZyLRuPDf+TS8uRYtL0mcSm75lhEfO9bET/KPRm3trO7vlQul7ay/dl6ZXO2trN7da2ytFpaLW0sLCzOL869e+2dhSdeu9dIPXNb36iMZFufv/fHva/8JKnWZHak1Y7xZ77q8ZpNLxzGSQxHxHfOOE6/DGXtGel3RXgu+Yh4NSLeTO//qRhKf5sAwEXWaExFY6p9HwC46PJpDiyXL2a5gMnI54vFZg7vtZjIl6u1+pUb1e2NlWaubDoK+Rtr5dJcliucjkIu2Z9PtyOms+v+tJkaOiy/FhGvRMTPR8fT/eJytbzSx//3AMAgu3Rk/P/3aHP8BwAuuLGI3/y++b6931UBAHpkrN8VAAB6zvgPAIPH+A8Ag6c5/p/1oy8AgPPsa/2uAADQc/L/ADBQvvvBB8nSOMief73y8c72evXjqyul2nqxsr1cXK5ubRZXq9XV9Jk9laddr1ytbn7/fmzfnP76Zq0+W9vZvV6pbm/Ur6fP9b5eKqRn7fWgZQBAN6+8cfcvuWREfm88XaJtLodCX2sGvGj5flcA6JuhflcA6BuzfcHgOsV7fOkBuCA6TNH7mLFOXxDywFD4RLv8mSP5///K/8OgaMv/+ytgGDDy/zC45P9hcDUauZPO+R8nPREAON/k+IEun/+/mq1/m3048MOVo2fcOdHlfbYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhdSa/7eYzQU+Gfl8sRjxUkRMRyF3Y61cmouIlyPiz6OF0WR/vs91BgBOK38/l83/dXnq7cnHil6/dLg5EhE//uWHv7i5VK9v/SliJPfP0dbx+p3s+MIxYRovrgUAwPFa43S6bnsj/3D/1nJr6WV9HnyzOTtoEvdgfyQODuMPx3C6HotCREz8K5ftN+XachensXc7Ij7dqf25mExzIM2pS4/GT2K/1NP4+cfi59Oy5jr5WXzqDOoCg+Zu0v+83+n+y8dMuu58/4+lPdTpZf1fcqnlg7QPfBS/1f8Nden/Zh7tjh8b46t/+Ha30x7cjvjscEQr9kFb/9OKn+sS/+0TtvGvn3v9zW5ljV9FXI7O8dtjzdYrm7O1nd2ra5Wl1dJqaWNhYXF+ce7da+8szKY56tnuo8Hf37vycreypP0TXeKPPaX9Xzxh+3/9v49+8IVj4n/5rU7x8/HaMfGTMfFLJ4y/NPG7rvNvJ/FXurT/ab//KyeMf+9vu09MGw4A9E9tZ3d9qVwubdmwcf43kn+yLzbEzHO//Bu9+iGMROein73VvKePFDUazY3b8UyxuvUYZ5F1A86Dw5s+Iv7T78oAAAAAAAAAAAAAAAAd9eIbS/1uIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//B0flCg==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000027c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000002800)=0x7) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002980)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r1, &(0x7f0000002a40), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newlink={0x48, 0x10, 0x401, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x37e00}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x48}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) 10.328018191s ago: executing program 4 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000c80), &(0x7f0000000d00)}, 0x20) 10.327551971s ago: executing program 4 (id=574): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001280)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = gettid() syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000200)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000000b40)="$eJzs3c1qY3UUAPBz852ZRbJwJcJcUNDVMPUJOsgIgwVByUJd6OBkQJpQaCFQFWNXPoFP4MaXcSO+gHu/dhYRr9zcfNabGEvbFOf3Wx3O+Z/ec/+9TVf3n49eGh4+PTp5dvb5j9FqJVHZj/04T6IblZj5Mkr98Et5HgC45c6zLH7LCs0idbq6or6ms1a59uEAgGux/P9/17MAADfj3ffef+vhwcGjd9K0FTH8atRLIlqL+sNn8UkMoh8PohN/RmRzRfzm44NHUUtz3XhlOB71Rr2I4Yffzfp/jpj070UnuuX9e2lhqX886tXjzvT6+4Pov/1NdOKF8v7XS/qj14jXXl6a/3504vuP4ygG8XQ626z/i700fSP7+vfPPsizeX8yHvWa83XT1dUb+6UAAAAAAAAAAAAAAAAAAAAAAPC/dz+d666evzM7+H9DfcP5QOOl83kepGmaJcX6RX8tXqxFbZf3DgAAAAAAAAAAAAAAAAAAALfFyemnh08Gg/7xImisL20bzF7rLynFX6uZZkRs85ObK5nKNLi3/WDFPFGdjjZIIra/r8bxyWk9mpPOf++qbr1Rf0yCdj5P/zipxWU3/J9BMs+0l0v3orhWnmkXwVJm60t8e7fYxYulVpGZPV2HT5LoVzbuWKvsIbmCICt5/KpruxoXM+0ov8G8tOHqjbuXmjnrXMi8+tOvj/MgiYj6fDNX10z+yO4sHsj61e5h6cdF44o/fgAAAAAAAAAAAAAAAAAAgCWLl35Limc7GAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdmDx/f//IRhPm9etyap5UItpZse3CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHPg7wAAAP//kppZgg==") rt_sigqueueinfo(r3, 0x1d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x6, 0xd, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.179381517s ago: executing program 4 (id=575): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020400) unshare(0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/kvm/mmu_shadow_zapped\x00', 0xf40, 0x0) read$FUSE(r0, 0x0, 0x0) 9.15218058s ago: executing program 4 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) 167.843123ms ago: executing program 6 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ed) r0 = syz_create_resource$futex(&(0x7f0000000000)) futex(r0, 0x80, 0x0, &(0x7f0000000040), 0x0, 0x1) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000680), 0x400000000000041, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r2, &(0x7f0000000700), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000740), &(0x7f0000000780)='./file1\x00', 0x2a00091, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r4, @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1c6, &(0x7f0000001800)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./file2\x00', 0x80000, 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b65}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000001b40)=[{{&(0x7f0000001b80)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000001bc0)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@broadcast, 0x401}, {@multicast1}]}, @rr={0x7, 0xf, 0xc, [@empty, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast]}]}}}], 0x38}}], 0x1, 0x4000080) read$FUSE(r5, &(0x7f0000001c40)={0x2020}, 0x2020) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb018000000ffffff8000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000240)=""/222}, 0x78) 165.375573ms ago: executing program 5 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x184) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r3, @ANYBLOB="010000000000000000001700000050000680"], 0x64}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000480)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x8012, 0x0, 0x0) 165.119073ms ago: executing program 0 (id=579): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000000, &(0x7f00000000c0)={[{@noinit_itable}, {@grpid}]}, 0x1, 0x534, &(0x7f0000000100)="$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") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000002680)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='.\x00', 0x0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./proc\x00', 0x1ff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000011c0)={@desc={0x1, 0x0, @desc2}}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 122.697757ms ago: executing program 4 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 119.891437ms ago: executing program 7 (id=581): prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000c00)=0x2) recvmmsg(r1, &(0x7f0000000c40), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32], 0x40) 0s ago: executing program 4 (id=582): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfa6}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): turning on flush-on-commit [ 44.051077][ T4747] BTRFS info (device loop4): force zlib compression, level 3 [ 44.061424][ T4332] XFS (loop1): Unmounting Filesystem [ 44.074631][ T4747] BTRFS info (device loop4): use zlib compression, level 3 [ 44.076070][ T4747] BTRFS info (device loop4): not using ssd optimizations [ 44.077516][ T4747] BTRFS info (device loop4): not using spread ssd allocation scheme [ 44.079229][ T4747] BTRFS info (device loop4): using free space tree [ 44.139293][ T4341] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 44.200018][ T4589] device veth0_vlan entered promiscuous mode [ 44.205729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.208520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.213116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.217232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.222433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.224301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.229046][ T4728] chnl_net:caif_netlink_parms(): no params data found [ 44.320421][ T4589] device veth1_vlan entered promiscuous mode [ 44.664201][ T4339] Bluetooth: hci1: command 0x041b tx timeout [ 44.673762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.700030][ T4806] ip6t_srh: unknown srh match flags 4001 [ 44.737194][ T4811] netlink: 68 bytes leftover after parsing attributes in process `syz.1.51'. [ 44.905779][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.907617][ T4728] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.909939][ T4728] device bridge_slave_0 entered promiscuous mode [ 44.926365][ T4589] device veth0_macvtap entered promiscuous mode [ 44.928764][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.932453][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.934614][ T4728] device bridge_slave_1 entered promiscuous mode [ 44.950832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.954697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.957968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.963728][ T4589] device veth1_macvtap entered promiscuous mode [ 44.968633][ T4817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 44.974605][ T4728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.985194][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 44.987294][ T4821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.58'. [ 45.022562][ T4824] FAULT_INJECTION: forcing a failure. [ 45.022562][ T4824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.025241][ T4824] CPU: 0 PID: 4824 Comm: syz.0.59 Not tainted syzkaller #0 [ 45.026720][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 45.028824][ T4824] Call trace: [ 45.029520][ T4824] dump_backtrace+0x1c4/0x1f0 [ 45.030512][ T4824] show_stack+0x2c/0x3c [ 45.031442][ T4824] __dump_stack+0x30/0x40 [ 45.031463][ T4824] dump_stack_lvl+0xf4/0x15c [ 45.031470][ T4824] dump_stack+0x1c/0x5c [ 45.031476][ T4824] should_fail_ex+0x3cc/0x524 [ 45.031485][ T4824] should_fail+0x14/0x24 [ 45.031490][ T4824] should_fail_usercopy+0x20/0x30 [ 45.031495][ T4824] do_cmtp_sock_ioctl+0x1dc/0x880 [ 45.031501][ T4824] cmtp_sock_ioctl+0x28/0x38 [ 45.031505][ T4824] sock_do_ioctl+0x100/0x258 [ 45.031512][ T4824] sock_ioctl+0x234/0x828 [ 45.031517][ T4824] __arm64_sys_ioctl+0x14c/0x1c8 [ 45.031524][ T4824] invoke_syscall+0x98/0x290 [ 45.031531][ T4824] el0_svc_common+0x13c/0x258 [ 45.031537][ T4824] do_el0_svc+0x5c/0x134 [ 45.031543][ T4824] el0_svc+0x58/0x12c [ 45.031549][ T4824] el0t_64_sync_handler+0x84/0xf0 [ 45.031555][ T4824] el0t_64_sync+0x18c/0x190 [ 45.035325][ T4728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.044977][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.044992][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.045001][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.045008][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.045013][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.045019][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.045023][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.045029][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.045034][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.045039][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.046501][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.058422][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.102529][ T4817] binder: 4816:4817 tried to acquire reference to desc 0, got 1 instead [ 45.112222][ T4817] binder: 4816:4817 ioctl c0306201 20001ac0 returned -14 [ 45.114200][ T4817] binder: 4816:4817 got transaction with invalid offsets size, 2 [ 45.115786][ T4817] binder: 4816:4817 transaction call to 4816:0 failed 10/29201/-22, size 96-2 line 3295 [ 45.145967][ T4817] exFAT-fs (loop1): bogus sectors bits per cluster : 41 [ 45.147570][ T4817] exFAT-fs (loop1): failed to read boot sector [ 45.148851][ T4817] exFAT-fs (loop1): failed to recognize exfat type [ 45.164073][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.166273][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.169067][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.173547][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.175632][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.182060][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.184177][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.186435][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.188544][ T4504] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.189418][ T4831] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 45.192636][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.194665][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.196570][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.199667][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.203350][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.203891][ T4831] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.238722][ T9] device hsr_slave_0 left promiscuous mode [ 45.240470][ T4831] EXT4-fs error (device loop4): __ext4_find_entry:1698: inode #2: comm syz.4.61: checksumming directory block 0 [ 45.277017][ T9] device hsr_slave_1 left promiscuous mode [ 45.335190][ T4844] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 45.337197][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 45.341547][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.343311][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.355806][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.357656][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.362351][ T9] device bridge_slave_1 left promiscuous mode [ 45.364270][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.402985][ T9] device bridge_slave_0 left promiscuous mode [ 45.404402][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.453411][ T4855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.456378][ T4855] netlink: 'syz.1.66': attribute type 3 has an invalid length. [ 45.466874][ T4857] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 45.468334][ T4857] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 45.508147][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 45.584844][ T9] device veth1_macvtap left promiscuous mode [ 45.586671][ T9] device veth0_macvtap left promiscuous mode [ 45.588095][ T9] device veth1_vlan left promiscuous mode [ 45.590503][ T9] device veth0_vlan left promiscuous mode [ 45.605202][ T4880] set_capacity_and_notify: 5 callbacks suppressed [ 45.605209][ T4880] loop1: detected capacity change from 0 to 512 [ 45.611391][ T4348] Bluetooth: hci4: command 0x0409 tx timeout [ 45.621114][ T4880] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.623265][ T4880] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 45.625300][ T4880] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #13: comm syz.1.70: iget: bad i_size value: 12154757448730 [ 45.628511][ T4880] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.70: couldn't read orphan inode 13 (err -117) [ 45.632600][ T4880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.639258][ T4880] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.643197][ T4880] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.645873][ T4880] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.650051][ T4883] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.653653][ T4883] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.657325][ T4883] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.665562][ T4883] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.668697][ T4884] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.670550][ T4884] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 45.706110][ T4883] Zero length message leads to an empty skb [ 45.808707][ T4888] loop4: detected capacity change from 0 to 32768 [ 45.820311][ T4888] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.71 (4888) [ 45.825915][ T4888] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 45.828378][ T4888] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 45.830589][ T4888] BTRFS info (device loop4): allowing degraded mounts [ 45.832386][ T4888] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 45.834431][ T4888] BTRFS info (device loop4): use lzo compression, level 0 [ 45.836151][ T4888] BTRFS info (device loop4): enabling ssd optimizations [ 45.837841][ T4888] BTRFS info (device loop4): using spread ssd allocation scheme [ 45.839876][ T4888] BTRFS info (device loop4): turning on flush-on-commit [ 45.841758][ T4888] BTRFS info (device loop4): force zlib compression, level 3 [ 45.843549][ T4888] BTRFS info (device loop4): use zlib compression, level 3 [ 45.845172][ T4888] BTRFS info (device loop4): not using ssd optimizations [ 45.846899][ T4888] BTRFS info (device loop4): not using spread ssd allocation scheme [ 45.848803][ T4888] BTRFS info (device loop4): using free space tree [ 45.896116][ T4341] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 45.976212][ T4321] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop4 scanned by udevd (4321) [ 46.291326][ T4912] loop4: detected capacity change from 0 to 131072 [ 46.305764][ T4912] F2FS-fs (loop4): invalid crc value [ 46.311050][ T4912] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.329511][ T4912] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 46.332647][ T4912] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 46.731342][ T4339] Bluetooth: hci1: command 0x040f tx timeout [ 46.974782][ T4921] loop4: detected capacity change from 0 to 32768 [ 46.999156][ T4921] syz.4.73: attempt to access beyond end of device [ 46.999156][ T4921] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 47.003185][ T4921] lbmIODone: I/O error in JFS log [ 47.004549][ T4921] *** Log Format Error ! *** [ 47.005599][ T4921] lmLogInit: exit(-22) [ 47.006547][ T4921] lmLogOpen: exit(-22) [ 47.691291][ T4348] Bluetooth: hci4: command 0x041b tx timeout [ 47.903929][ T9] team0 (unregistering): Port device team_slave_1 removed [ 48.062398][ T9] team0 (unregistering): Port device team_slave_0 removed [ 48.221778][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.422079][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.811707][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 49.772239][ T4339] Bluetooth: hci4: command 0x040f tx timeout [ 49.933718][ T9] bond0 (unregistering): Released all slaves [ 50.185139][ T4728] team0: Port device team_slave_0 added [ 50.191699][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.194109][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.197318][ T4589] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.199168][ T4589] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.201631][ T4589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.205617][ T4589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.226864][ T4728] team0: Port device team_slave_1 added [ 50.245470][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 50.259200][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.260656][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.287381][ T4728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.326716][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.328239][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.337123][ T4728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.369733][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.371582][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.402227][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.419603][ T4928] loop0: detected capacity change from 0 to 8192 [ 50.436468][ T4928] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 50.448287][ T4928] ntfs3: loop0: ino=3, mi_enum_attr [ 50.449628][ T4928] ntfs3: loop0: Failed to load $Volume. [ 50.452996][ T4728] device hsr_slave_0 entered promiscuous mode [ 50.491743][ T4728] device hsr_slave_1 entered promiscuous mode [ 50.514977][ T4928] loop0: detected capacity change from 0 to 8192 [ 50.532192][ T4926] loop1: detected capacity change from 0 to 32768 [ 50.533597][ T4610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.535447][ T4610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.537259][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.552918][ T4928] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.555851][ T4928] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 50.569624][ T4928] REISERFS (device loop0): using ordered data mode [ 50.571053][ T4928] reiserfs: using flush barriers [ 50.574885][ T4928] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.581420][ T4928] REISERFS (device loop0): checking transaction log (loop0) [ 50.591114][ T4926] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 50.607896][ T4926] JBD2: Ignoring recovery information on journal [ 50.647748][ T4728] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 50.666626][ T4928] REISERFS (device loop0): Using tea hash to sort names [ 50.668950][ T4928] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 50.679571][ T4926] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 50.693132][ T4928] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 50.702397][ T4728] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 50.728897][ T4935] loop4: detected capacity change from 0 to 32768 [ 50.742350][ T4935] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.76 (4935) [ 50.760116][ T4728] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 50.779254][ T4935] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 50.782753][ T4935] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 50.785040][ T4935] BTRFS info (device loop4): using free space tree [ 50.812628][ T4332] ocfs2: Unmounting device (7,1) on (node local) [ 50.834225][ T4728] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 50.867438][ T4970] syz.5.80 uses obsolete (PF_INET,SOCK_PACKET) [ 50.913228][ T4728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.920888][ T4728] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.935690][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.937810][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.939701][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.954386][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.965269][ T1617] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.966855][ T1617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.976863][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.997125][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.004957][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.006548][ T1617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.015055][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.025705][ T4935] BTRFS info (device loop4): enabling ssd optimizations [ 51.030112][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.078282][ T4991] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.080439][ T4991] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.115947][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 51.125015][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.127398][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.130843][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.145895][ T4728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.148140][ T4728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.152383][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.164503][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.172224][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.193821][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.198598][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.212712][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.287544][ T4341] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 51.448010][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.450757][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.457923][ T4728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.543721][ T5041] device-mapper: ioctl: The device has no table. [ 51.545071][ T5031] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 51.549820][ T5041] device-mapper: ioctl: The device has no table. [ 51.573136][ T5033] loop0: detected capacity change from 0 to 4096 [ 51.713442][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.716586][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.774704][ T5049] loop1: detected capacity change from 0 to 2048 [ 51.793796][ T5049] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 51.795764][ T5049] UDF-fs: Scanning with blocksize 512 failed [ 51.800140][ T5049] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 51.805720][ T5049] UDF-fs: Scanning with blocksize 1024 failed [ 51.808479][ T5049] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=515, location=515 [ 51.826593][ T5049] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 51.828452][ T5049] UDF-fs: Scanning with blocksize 2048 failed [ 51.830241][ T5049] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=259, location=259 [ 51.833913][ T5049] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=515, location=515 [ 51.836548][ T5049] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 51.838295][ T5049] UDF-fs: Scanning with blocksize 4096 failed [ 51.839855][ T5049] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 51.852583][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 51.874338][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.877080][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.885526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.887580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.927836][ T5049] loop1: detected capacity change from 0 to 2048 [ 51.945806][ T5049] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 51.955260][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.957526][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.966824][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.968828][ T5049] UDF-fs: Scanning with blocksize 512 failed [ 51.969159][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.975726][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.981927][ T5049] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 51.986301][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.990790][ T4728] device veth0_vlan entered promiscuous mode [ 51.991734][ T5049] UDF-fs: Scanning with blocksize 1024 failed [ 52.000741][ T4728] device veth1_vlan entered promiscuous mode [ 52.013312][ T5049] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=515, location=515 [ 52.025301][ T5049] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 52.026923][ T5049] UDF-fs: Scanning with blocksize 2048 failed [ 52.028597][ T5049] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=259, location=259 [ 52.047701][ T5049] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=515, location=515 [ 52.068466][ T5049] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 52.070245][ T5049] UDF-fs: Scanning with blocksize 4096 failed [ 52.073460][ T5049] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 52.082413][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.086081][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.095986][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 52.097911][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 52.103967][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.115113][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.116861][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.118755][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.130867][ T5069] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.133157][ T5069] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.134954][ T5069] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.136736][ T5069] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.150465][ T5063] loop4: detected capacity change from 0 to 32768 [ 52.158361][ T5069] team0: Port device vxlan0 added [ 52.160828][ T4728] device veth0_macvtap entered promiscuous mode [ 52.167509][ T4728] device veth1_macvtap entered promiscuous mode [ 52.181124][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.186499][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.189034][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.190990][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.194052][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.196456][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.198649][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.201098][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.206248][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.208520][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.211618][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.214275][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.216517][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.218586][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.220834][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.226372][ T5063] XFS (loop4): Mounting V5 Filesystem [ 52.227901][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.230234][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.256073][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.258103][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.271286][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.278441][ T5063] XFS (loop4): Ending clean mount [ 52.279195][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.282272][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.283800][ T5075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.90'. [ 52.287775][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.289700][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.292373][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.304572][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.308121][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.310182][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.314497][ T5075] binder: 5074:5075 tried to acquire reference to desc 0, got 1 instead [ 52.316196][ T5075] binder: 5074:5075 ioctl c0306201 20001ac0 returned -14 [ 52.337455][ T4728] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.346363][ T4728] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.351120][ T4728] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.356127][ T4728] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.358435][ T5075] binder: 5074:5075 got transaction with invalid offsets size, 2 [ 52.360026][ T5075] binder: 5074:5075 transaction call to 5074:0 failed 15/29201/-22, size 96-2 line 3295 [ 52.383840][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 52.387029][ T5090] loop5: detected capacity change from 0 to 4096 [ 52.397111][ T5090] EXT4-fs: Ignoring removed orlov option [ 52.398419][ T4505] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.400379][ T4341] XFS (loop4): Unmounting Filesystem [ 52.445426][ T5088] FAULT_INJECTION: forcing a failure. [ 52.445426][ T5088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.448465][ T5088] CPU: 0 PID: 5088 Comm: syz.1.91 Not tainted syzkaller #0 [ 52.450031][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 52.452146][ T5088] Call trace: [ 52.452894][ T5088] dump_backtrace+0x1c4/0x1f0 [ 52.454001][ T5088] show_stack+0x2c/0x3c [ 52.455001][ T5088] __dump_stack+0x30/0x40 [ 52.456036][ T5088] dump_stack_lvl+0xf4/0x15c [ 52.457152][ T5088] dump_stack+0x1c/0x5c [ 52.458154][ T5088] should_fail_ex+0x3cc/0x524 [ 52.459271][ T5088] should_fail_alloc_page+0x74/0xb8 [ 52.460514][ T5088] prepare_alloc_pages+0x1b8/0x4f0 [ 52.461734][ T5088] __alloc_pages+0x134/0x544 [ 52.462788][ T5088] __folio_alloc+0x1c/0x44 [ 52.463816][ T5088] vma_alloc_folio+0x37c/0x8ac [ 52.464992][ T5088] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 52.466475][ T5088] handle_mm_fault+0x1788/0x3018 [ 52.467589][ T5088] do_page_fault+0x310/0xa5c [ 52.468640][ T5088] do_translation_fault+0x94/0xc8 [ 52.469774][ T5088] do_mem_abort+0x70/0x198 [ 52.470697][ T5088] el0_da+0x74/0x14c [ 52.471533][ T5088] el0t_64_sync_handler+0x90/0xf0 [ 52.472592][ T5088] el0t_64_sync+0x18c/0x190 [ 52.473637][ C0] vkms_vblank_simulate: vblank timer overrun [ 52.501402][ T5090] EXT4-fs (loop5): Test dummy encryption mode enabled [ 52.511610][ T5088] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 52.514971][ T5088] loop1: detected capacity change from 0 to 256 [ 52.515296][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.516811][ T5088] exfat: Unknown parameter 'syzkaller0' [ 52.517951][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.520996][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.551659][ T4503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.557669][ T4954] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.559087][ T4503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.577636][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.605711][ T5090] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 52.641104][ T5100] loop0: detected capacity change from 0 to 764 [ 52.683985][ T5110] FAULT_INJECTION: forcing a failure. [ 52.683985][ T5110] name failslab, interval 1, probability 0, space 0, times 0 [ 52.686561][ T5110] CPU: 0 PID: 5110 Comm: syz.6.48 Not tainted syzkaller #0 [ 52.688342][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 52.690780][ T5110] Call trace: [ 52.691533][ T5110] dump_backtrace+0x1c4/0x1f0 [ 52.692599][ T5110] show_stack+0x2c/0x3c [ 52.693551][ T5110] __dump_stack+0x30/0x40 [ 52.694468][ T5110] dump_stack_lvl+0xf4/0x15c [ 52.695508][ T5110] dump_stack+0x1c/0x5c [ 52.696437][ T5110] should_fail_ex+0x3cc/0x524 [ 52.697523][ T5110] __should_failslab+0xc0/0x11c [ 52.698684][ T5110] should_failslab+0x10/0x28 [ 52.699723][ T5110] kmem_cache_alloc+0x88/0x310 [ 52.700780][ T5110] pte_alloc_one+0x78/0x254 [ 52.701888][ T5110] __do_fault+0xbc/0x3d8 [ 52.702875][ T5110] handle_mm_fault+0x1d04/0x3018 [ 52.704007][ T5110] do_page_fault+0x310/0xa5c [ 52.705047][ T5110] do_translation_fault+0x94/0xc8 [ 52.706236][ T5110] do_mem_abort+0x70/0x198 [ 52.707317][ T5110] el1_abort+0x48/0x6c [ 52.708353][ T5110] el1h_64_sync_handler+0x50/0xac [ 52.709534][ T5110] el1h_64_sync+0x64/0x68 [ 52.710531][ T5110] __arch_copy_from_user+0x100/0x230 [ 52.711767][ T5110] invoke_syscall+0x98/0x290 [ 52.712855][ T5110] el0_svc_common+0x13c/0x258 [ 52.713963][ T5110] do_el0_svc+0x5c/0x134 [ 52.714976][ T5110] el0_svc+0x58/0x12c [ 52.715935][ T5110] el0t_64_sync_handler+0x84/0xf0 [ 52.717144][ T5110] el0t_64_sync+0x18c/0x190 [ 52.718232][ C0] vkms_vblank_simulate: vblank timer overrun [ 52.775708][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 52.869877][ T5121] loop4: detected capacity change from 0 to 64 [ 52.966573][ T5127] loop0: detected capacity change from 0 to 128 [ 52.969915][ T5127] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 53.426332][ T5155] netlink: 'syz.1.101': attribute type 4 has an invalid length. [ 53.631031][ T5167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.848334][ T5176] EXT4-fs: Ignoring removed bh option [ 53.858153][ T5176] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 53.880033][ T5176] EXT4-fs (loop6): 1 truncate cleaned up [ 53.882042][ T5176] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 53.916459][ T5176] overlayfs: upper fs needs to support d_type. [ 53.963856][ T4728] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 53.969875][ T4728] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 54.002927][ T4728] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 54.020559][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 54.044588][ T5191] binder: 5190:5191 tried to acquire reference to desc 0, got 1 instead [ 54.046760][ T5191] binder: 5190:5191 ioctl c0306201 20001ac0 returned -14 [ 54.048888][ T5191] binder: 5190:5191 got transaction with invalid offsets size, 2 [ 54.050624][ T5191] binder: 5190:5191 transaction call to 5190:0 failed 20/29201/-22, size 96-2 line 3295 [ 54.055473][ T4343] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.076836][ T5193] FAULT_INJECTION: forcing a failure. [ 54.076836][ T5193] name failslab, interval 1, probability 0, space 0, times 0 [ 54.080008][ T5193] CPU: 1 PID: 5193 Comm: syz.6.107 Not tainted syzkaller #0 [ 54.081643][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 54.083946][ T5193] Call trace: [ 54.084702][ T5193] dump_backtrace+0x1c4/0x1f0 [ 54.085825][ T5193] show_stack+0x2c/0x3c [ 54.086806][ T5193] __dump_stack+0x30/0x40 [ 54.087887][ T5193] dump_stack_lvl+0xf4/0x15c [ 54.089023][ T5193] dump_stack+0x1c/0x5c [ 54.090040][ T5193] should_fail_ex+0x3cc/0x524 [ 54.091187][ T5193] __should_failslab+0xc0/0x11c [ 54.092406][ T5193] should_failslab+0x10/0x28 [ 54.093515][ T5193] kmem_cache_alloc+0x88/0x310 [ 54.094673][ T5193] zswap_frontswap_store+0x38c/0x11f4 [ 54.095991][ T5193] __frontswap_store+0x260/0x410 [ 54.097189][ T5193] swap_writepage+0x110/0x198 [ 54.098300][ T5193] shrink_folio_list+0x2520/0x4528 [ 54.099540][ T5193] reclaim_pages+0x580/0x7a4 [ 54.100636][ T5193] madvise_cold_or_pageout_pte_range+0x141c/0x1890 [ 54.102210][ T5193] walk_pgd_range+0x800/0xfcc [ 54.103320][ T5193] __walk_page_range+0x120/0x54c [ 54.104460][ T5193] walk_page_range+0x314/0x4ac [ 54.105575][ T5193] do_madvise+0x1a6c/0x2b24 [ 54.106604][ T5193] __arm64_sys_madvise+0xa4/0xc0 [ 54.107698][ T5193] invoke_syscall+0x98/0x290 [ 54.108735][ T5193] el0_svc_common+0x13c/0x258 [ 54.109803][ T5193] do_el0_svc+0x5c/0x134 [ 54.110797][ T5193] el0_svc+0x58/0x12c [ 54.111657][ T5193] el0t_64_sync_handler+0x84/0xf0 [ 54.112710][ T5193] el0t_64_sync+0x18c/0x190 [ 54.206722][ T5197] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.109: bad orphan inode 13 [ 54.210946][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.111'. [ 54.211026][ T5197] ext4_test_bit(bit=12, block=4) = 1 [ 54.214913][ T5197] is_bad_inode(inode)=0 [ 54.215572][ T5205] netlink: 2 bytes leftover after parsing attributes in process `syz.5.111'. [ 54.215823][ T5197] NEXT_ORPHAN(inode)=0 [ 54.218542][ T5197] max_ino=32 [ 54.219271][ T5197] i_nlink=1 [ 54.219588][ T5205] device bridge1 entered promiscuous mode [ 54.220587][ T5197] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 54.224691][ T5205] fuseblk: Unknown parameter 'user_i' [ 54.237320][ T5201] FAULT_INJECTION: forcing a failure. [ 54.237320][ T5201] name fail_futex, interval 1, probability 0, space 0, times 1 [ 54.240024][ T5201] CPU: 1 PID: 5201 Comm: syz.1.110 Not tainted syzkaller #0 [ 54.241784][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 54.244193][ T5201] Call trace: [ 54.244993][ T5201] dump_backtrace+0x1c4/0x1f0 [ 54.246115][ T5201] show_stack+0x2c/0x3c [ 54.247107][ T5201] __dump_stack+0x30/0x40 [ 54.248159][ T5201] dump_stack_lvl+0xf4/0x15c [ 54.249308][ T5201] dump_stack+0x1c/0x5c [ 54.250334][ T5201] should_fail_ex+0x3cc/0x524 [ 54.251489][ T5201] should_fail+0x14/0x24 [ 54.252542][ T5201] get_futex_key+0x904/0xec0 [ 54.253641][ T5201] futex_wait_setup+0xbc/0x320 [ 54.254763][ T5201] futex_wait+0x178/0x488 [ 54.255819][ T5201] do_futex+0x2e8/0x340 [ 54.256859][ T5201] __arm64_sys_futex+0x390/0x414 [ 54.257993][ T5201] invoke_syscall+0x98/0x290 [ 54.259107][ T5201] el0_svc_common+0x13c/0x258 [ 54.260250][ T5201] do_el0_svc+0x5c/0x134 [ 54.261278][ T5201] el0_svc+0x58/0x12c [ 54.262172][ T5201] el0t_64_sync_handler+0x84/0xf0 [ 54.263449][ T5201] el0t_64_sync+0x18c/0x190 [ 54.298902][ T5201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.110'. [ 54.302810][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.111'. [ 54.417658][ T5215] EXT4-fs warning (device loop6): dx_probe:845: inode #2: comm syz.6.109: Hash code is SIPHASH, but hash not in dirent [ 54.420212][ T5215] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.109: Corrupt directory, running e2fsck is recommended [ 54.424595][ T5215] EXT4-fs warning (device loop6): dx_probe:845: inode #2: comm syz.6.109: Hash code is SIPHASH, but hash not in dirent [ 54.427066][ T5215] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.109: Corrupt directory, running e2fsck is recommended [ 54.429992][ T5215] EXT4-fs error (device loop6): ext4_find_dest_de:2117: inode #2: block 13: comm syz.6.109: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 54.647685][ T5208] ntfs3: loop0: ino=3, mi_enum_attr [ 54.674533][ T5208] ntfs3: loop0: ino=9, attr_set_size [ 54.695913][ T5206] EXT4-fs: Ignoring removed orlov option [ 54.697667][ T5216] ALSA: mixer_oss: invalid OSS volume '' [ 54.712802][ T5206] EXT4-fs (loop4): Test dummy encryption mode enabled [ 54.726865][ T5206] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.910237][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 54.919205][ T5228] ptp ptp0: only physical clock in use now [ 54.953027][ T5232] binder: 5230:5232 tried to acquire reference to desc 0, got 1 instead [ 54.955094][ T5232] binder: 5230:5232 ioctl c0306201 20001ac0 returned -14 [ 54.957133][ T5232] binder: 5230:5232 got transaction with invalid offsets size, 2 [ 54.958990][ T5232] binder: 5230:5232 transaction call to 5230:0 failed 25/29201/-22, size 96-2 line 3295 [ 54.961724][ T4907] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.984114][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 55.016751][ T5236] netlink: 48 bytes leftover after parsing attributes in process `syz.1.120'. [ 55.022619][ T5235] FAULT_INJECTION: forcing a failure. [ 55.022619][ T5235] name failslab, interval 1, probability 0, space 0, times 0 [ 55.039899][ T5235] CPU: 0 PID: 5235 Comm: syz.6.119 Not tainted syzkaller #0 [ 55.041621][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 55.044024][ T5235] Call trace: [ 55.044847][ T5235] dump_backtrace+0x1c4/0x1f0 [ 55.045939][ T5235] show_stack+0x2c/0x3c [ 55.046910][ T5235] __dump_stack+0x30/0x40 [ 55.047976][ T5235] dump_stack_lvl+0xf4/0x15c [ 55.049074][ T5235] dump_stack+0x1c/0x5c [ 55.049998][ T5235] should_fail_ex+0x3cc/0x524 [ 55.051081][ T5235] __should_failslab+0xc0/0x11c [ 55.052191][ T5235] should_failslab+0x10/0x28 [ 55.053241][ T5235] __kmem_cache_alloc_node+0x7c/0x318 [ 55.054470][ T5235] __kmalloc+0xc4/0x180 [ 55.055507][ T5235] kernfs_fop_write_iter+0x144/0x4b4 [ 55.056844][ T5235] vfs_write+0x3c8/0x7c8 [ 55.057932][ T5235] ksys_write+0x12c/0x228 [ 55.059028][ T5235] __arm64_sys_write+0x7c/0x90 [ 55.060227][ T5235] invoke_syscall+0x98/0x290 [ 55.061352][ T5235] el0_svc_common+0x13c/0x258 [ 55.062513][ T5235] do_el0_svc+0x5c/0x134 [ 55.063557][ T5235] el0_svc+0x58/0x12c [ 55.064534][ T5235] el0t_64_sync_handler+0x84/0xf0 [ 55.065661][ T5235] el0t_64_sync+0x18c/0x190 [ 55.105711][ T5239] ext4: Unknown parameter 'bsddf2' [ 55.288176][ T5236] JBD2: Ignoring recovery information on journal [ 55.340788][ T5239] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.121 (5239) [ 55.372038][ T5239] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.406605][ T5239] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 55.416472][ T5236] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 55.423482][ T5236] ptp ptp0: only physical clock in use now [ 55.430907][ T5239] BTRFS info (device loop5): metadata ratio 2 [ 55.432598][ T5239] BTRFS info (device loop5): force zlib compression, level 3 [ 55.434244][ T5239] BTRFS info (device loop5): enabling auto defrag [ 55.435695][ T5239] BTRFS info (device loop5): max_inline at 0 [ 55.437041][ T5239] BTRFS info (device loop5): using free space tree [ 55.469404][ T4332] ocfs2: Unmounting device (7,1) on (node local) [ 55.694431][ T9] device hsr_slave_0 left promiscuous mode [ 55.768138][ T5294] FAULT_INJECTION: forcing a failure. [ 55.768138][ T5294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.771012][ T5294] CPU: 1 PID: 5294 Comm: syz.0.129 Not tainted syzkaller #0 [ 55.772695][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 55.775004][ T5294] Call trace: [ 55.775769][ T5294] dump_backtrace+0x1c4/0x1f0 [ 55.776898][ T5294] show_stack+0x2c/0x3c [ 55.777889][ T5294] __dump_stack+0x30/0x40 [ 55.778940][ T5294] dump_stack_lvl+0xf4/0x15c [ 55.780070][ T5294] dump_stack+0x1c/0x5c [ 55.781112][ T5294] should_fail_ex+0x3cc/0x524 [ 55.782271][ T5294] should_fail+0x14/0x24 [ 55.783315][ T5294] should_fail_usercopy+0x20/0x30 [ 55.784582][ T5294] copyin+0x2c/0x148 [ 55.785546][ T5294] _copy_from_iter+0x404/0xf98 [ 55.786695][ T5294] netlink_sendmsg+0x614/0x9d8 [ 55.787793][ T5294] ____sys_sendmsg+0x588/0x90c [ 55.788897][ T5294] __sys_sendmsg+0x288/0x374 [ 55.789973][ T5294] __arm64_sys_sendmsg+0x80/0x94 [ 55.791036][ T5294] invoke_syscall+0x98/0x290 [ 55.792032][ T5294] el0_svc_common+0x13c/0x258 [ 55.793043][ T5294] do_el0_svc+0x5c/0x134 [ 55.794000][ T5294] el0_svc+0x58/0x12c [ 55.794948][ T5294] el0t_64_sync_handler+0x84/0xf0 [ 55.796137][ T5294] el0t_64_sync+0x18c/0x190 [ 55.801647][ T9] device hsr_slave_1 left promiscuous mode [ 55.808331][ T4589] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.871578][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.873264][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.875240][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.876795][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.883126][ T9] device bridge_slave_1 left promiscuous mode [ 55.891013][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.919333][ T5265] set_capacity_and_notify: 8 callbacks suppressed [ 55.919342][ T5265] loop6: detected capacity change from 0 to 32768 [ 55.926088][ T5113] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (5113) [ 55.944428][ T9] device bridge_slave_0 left promiscuous mode [ 55.945741][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.979328][ T5231] loop4: detected capacity change from 0 to 131072 [ 56.052160][ T5231] F2FS-fs (loop4): invalid crc value [ 56.056427][ T5265] XFS (loop6): Mounting V5 Filesystem [ 56.063587][ T5231] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.108708][ T5231] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 56.111092][ T5265] XFS (loop6): Ending clean mount [ 56.125387][ T5322] binder: 5321:5322 tried to acquire reference to desc 0, got 1 instead [ 56.129448][ T5322] binder: 5321:5322 ioctl c0306201 20001ac0 returned -14 [ 56.129864][ T5265] XFS (loop6): Quotacheck needed: Please wait. [ 56.132881][ T5231] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 56.138278][ T5322] binder: 5321:5322 got transaction with invalid offsets size, 2 [ 56.140019][ T5322] binder: 5321:5322 transaction call to 5321:0 failed 30/29201/-22, size 96-2 line 3295 [ 56.145977][ T4343] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.149009][ T5231] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 56.186579][ T5265] XFS (loop6): Quotacheck: Done. [ 56.211844][ T9] device veth1_macvtap left promiscuous mode [ 56.213247][ T9] device veth0_macvtap left promiscuous mode [ 56.214634][ T9] device veth1_vlan left promiscuous mode [ 56.216037][ T9] device veth0_vlan left promiscuous mode [ 56.237757][ T5292] loop1: detected capacity change from 0 to 32768 [ 56.240055][ T5292] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 56.247720][ T4728] XFS (loop6): Unmounting Filesystem [ 56.290090][ T4944] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.411625][ T5333] loop1: detected capacity change from 0 to 256 [ 56.427905][ T5333] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.430214][ T5333] FAT-fs (loop1): Filesystem has been set read-only [ 56.432258][ T5333] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.436609][ T5333] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 59.113720][ T9] team0 (unregistering): Port device team_slave_1 removed [ 59.273053][ T9] team0 (unregistering): Port device team_slave_0 removed [ 59.442393][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.641799][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.138013][ T9] bond0 (unregistering): Released all slaves [ 61.432731][ T5333] device syz_tun entered promiscuous mode [ 61.444744][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.140'. [ 61.453757][ T5360] netlink: 'syz.6.140': attribute type 10 has an invalid length. [ 61.461556][ T5360] device syz_tun entered promiscuous mode [ 61.476937][ T5360] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 61.545547][ T5376] loop5: detected capacity change from 0 to 512 [ 61.561792][ T5380] FAULT_INJECTION: forcing a failure. [ 61.561792][ T5380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.564546][ T5380] CPU: 0 PID: 5380 Comm: syz.1.144 Not tainted syzkaller #0 [ 61.565647][ T5381] loop0: detected capacity change from 0 to 8 [ 61.566187][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 61.569999][ T5380] Call trace: [ 61.570784][ T5380] dump_backtrace+0x1c4/0x1f0 [ 61.571974][ T5380] show_stack+0x2c/0x3c [ 61.573029][ T5380] __dump_stack+0x30/0x40 [ 61.574128][ T5380] dump_stack_lvl+0xf4/0x15c [ 61.575280][ T5380] dump_stack+0x1c/0x5c [ 61.576286][ T5380] should_fail_ex+0x3cc/0x524 [ 61.577417][ T5380] should_fail_alloc_page+0x74/0xb8 [ 61.578634][ T5380] prepare_alloc_pages+0x1b8/0x4f0 [ 61.579840][ T5380] __alloc_pages+0x134/0x544 [ 61.580935][ T5380] alloc_pages+0x434/0x6fc [ 61.581967][ T5380] __pmd_alloc+0x54/0x484 [ 61.582951][ T5380] handle_mm_fault+0x1c58/0x3018 [ 61.584027][ T5380] do_page_fault+0x310/0xa5c [ 61.585090][ T5380] do_translation_fault+0x94/0xc8 [ 61.586246][ T5380] do_mem_abort+0x70/0x198 [ 61.587263][ T5380] el1_abort+0x48/0x6c [ 61.588217][ T5380] el1h_64_sync_handler+0x50/0xac [ 61.589375][ T5380] el1h_64_sync+0x64/0x68 [ 61.590295][ T5380] __arch_copy_to_user+0x190/0x234 [ 61.591411][ T5380] invoke_syscall+0x98/0x290 [ 61.592431][ T5380] el0_svc_common+0x13c/0x258 [ 61.593449][ T5380] do_el0_svc+0x5c/0x134 [ 61.594447][ T5380] el0_svc+0x58/0x12c [ 61.595380][ T5380] el0t_64_sync_handler+0x84/0xf0 [ 61.596526][ T5380] el0t_64_sync+0x18c/0x190 [ 61.597644][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.604076][ T5376] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 61.635749][ T5381] SQUASHFS error: Failed to read block 0x6e6: -5 [ 61.638022][ T5381] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 61.639546][ T5381] SQUASHFS error: Unable to read directory block [631:26] [ 61.828897][ T5394] loop4: detected capacity change from 0 to 4096 [ 61.847028][ T5394] EXT4-fs: Ignoring removed orlov option [ 61.859089][ T5394] EXT4-fs (loop4): Test dummy encryption mode enabled [ 61.878111][ T5394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.216846][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 62.272119][ T5411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.161'. [ 62.278578][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 62.287342][ T5411] binder: 5404:5411 got transaction to invalid handle, 1 [ 62.289285][ T5411] binder: 5411:5404 cannot find target node [ 62.290646][ T5411] binder: 5404:5411 transaction call to 0:0 failed 34/29201/-22, size 96-2 line 3063 [ 62.333959][ T5409] FAULT_INJECTION: forcing a failure. [ 62.333959][ T5409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.336920][ T5409] CPU: 1 PID: 5409 Comm: syz.4.151 Not tainted syzkaller #0 [ 62.337233][ T5385] loop6: detected capacity change from 0 to 32768 [ 62.338678][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 62.338692][ T5409] Call trace: [ 62.343090][ T5409] dump_backtrace+0x1c4/0x1f0 [ 62.344124][ T5409] show_stack+0x2c/0x3c [ 62.345046][ T5409] __dump_stack+0x30/0x40 [ 62.346050][ T5409] dump_stack_lvl+0xf4/0x15c [ 62.347112][ T5409] dump_stack+0x1c/0x5c [ 62.348092][ T5409] should_fail_ex+0x3cc/0x524 [ 62.349172][ T5409] should_fail_alloc_page+0x74/0xb8 [ 62.350438][ T5409] prepare_alloc_pages+0x1b8/0x4f0 [ 62.351683][ T5409] __alloc_pages+0x134/0x544 [ 62.352789][ T5409] __folio_alloc+0x1c/0x44 [ 62.353881][ T5409] vma_alloc_folio+0x37c/0x8ac [ 62.355038][ T5409] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 62.356499][ T5409] handle_mm_fault+0x1788/0x3018 [ 62.357737][ T5409] do_page_fault+0x310/0xa5c [ 62.358819][ T5409] do_translation_fault+0x94/0xc8 [ 62.359996][ T5409] do_mem_abort+0x70/0x198 [ 62.361003][ T5409] el0_da+0x74/0x14c [ 62.361971][ T5409] el0t_64_sync_handler+0x90/0xf0 [ 62.363208][ T5409] el0t_64_sync+0x18c/0x190 [ 62.382656][ T5409] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 62.401450][ T5409] loop4: detected capacity change from 0 to 256 [ 62.410700][ T5409] exfat: Unknown parameter 'syzkaller0' [ 62.498461][ T5418] loop6: detected capacity change from 0 to 512 [ 62.519825][ T5418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 62.530515][ T5418] System zones: 1-12 [ 62.534620][ T5418] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.152: missing EA_INODE flag [ 62.545456][ T5418] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.152: error while reading EA inode 12 err=-117 [ 62.548458][ T5418] EXT4-fs (loop6): 1 orphan inode deleted [ 62.550116][ T5418] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 62.557881][ T5418] FAULT_INJECTION: forcing a failure. [ 62.557881][ T5418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.564080][ T5418] CPU: 0 PID: 5418 Comm: syz.6.152 Not tainted syzkaller #0 [ 62.565689][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 62.568002][ T5418] Call trace: [ 62.568753][ T5418] dump_backtrace+0x1c4/0x1f0 [ 62.569850][ T5418] show_stack+0x2c/0x3c [ 62.570811][ T5418] __dump_stack+0x30/0x40 [ 62.571835][ T5418] dump_stack_lvl+0xf4/0x15c [ 62.572906][ T5418] dump_stack+0x1c/0x5c [ 62.573867][ T5418] should_fail_ex+0x3cc/0x524 [ 62.574998][ T5418] should_fail+0x14/0x24 [ 62.576027][ T5418] should_fail_usercopy+0x20/0x30 [ 62.577221][ T5418] vmemdup_user+0x164/0x314 [ 62.578372][ T5418] setxattr+0x198/0x2d8 [ 62.579398][ T5418] path_setxattr+0x130/0x260 [ 62.580516][ T5418] __arm64_sys_lsetxattr+0xc4/0xe0 [ 62.581775][ T5418] invoke_syscall+0x98/0x290 [ 62.582936][ T5418] el0_svc_common+0x13c/0x258 [ 62.584111][ T5418] do_el0_svc+0x5c/0x134 [ 62.585142][ T5418] el0_svc+0x58/0x12c [ 62.586112][ T5418] el0t_64_sync_handler+0x84/0xf0 [ 62.587329][ T5418] el0t_64_sync+0x18c/0x190 [ 62.588411][ C0] vkms_vblank_simulate: vblank timer overrun [ 62.630853][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 62.670937][ T5430] loop6: detected capacity change from 0 to 128 [ 62.678445][ T5428] loop5: detected capacity change from 0 to 2048 [ 62.683933][ T5430] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 62.689898][ T5430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.707468][ T5430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.715559][ T5428] loop5: p1 p2 p3 [ 62.715559][ T5428] p1: [ 62.722782][ T5428] loop5: p2 size 458752 extends beyond EOD, truncated [ 62.727351][ T5428] loop5: p3 start 65280 is beyond EOD, truncated [ 62.837927][ T5444] loop6: detected capacity change from 0 to 512 [ 62.855648][ T5444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 62.858942][ T5444] System zones: 1-12 [ 62.862728][ T5444] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.156: missing EA_INODE flag [ 62.867234][ T5444] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.156: error while reading EA inode 12 err=-117 [ 62.870669][ T5444] EXT4-fs (loop6): 1 orphan inode deleted [ 62.875404][ T5444] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 62.907221][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 63.053538][ T4907] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.105471][ T5470] loop1: detected capacity change from 0 to 512 [ 63.125128][ T5470] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 63.268003][ T5476] EXT4-fs: Ignoring removed orlov option [ 63.277605][ T5476] EXT4-fs (loop4): Test dummy encryption mode enabled [ 63.284242][ T5476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.309548][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 63.368026][ T5487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.370961][ T5487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.329583][ T5500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.350715][ T5500] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 64.362198][ T5500] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 64.365435][ T5500] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.171: Failed to acquire dquot type 1 [ 64.494599][ T2068] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.496608][ T2068] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.549503][ T5500] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 64.640001][ T5512] FAULT_INJECTION: forcing a failure. [ 64.640001][ T5512] name fail_futex, interval 1, probability 0, space 0, times 0 [ 64.644478][ T5515] usb usb8: usbfs: process 5515 (syz.4.174) did not claim interface 0 before use [ 64.661405][ T5512] CPU: 0 PID: 5512 Comm: syz.5.173 Not tainted syzkaller #0 [ 64.663155][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.665589][ T5512] Call trace: [ 64.666325][ T5512] dump_backtrace+0x1c4/0x1f0 [ 64.667424][ T5512] show_stack+0x2c/0x3c [ 64.668377][ T5512] __dump_stack+0x30/0x40 [ 64.669343][ T5512] dump_stack_lvl+0xf4/0x15c [ 64.670384][ T5512] dump_stack+0x1c/0x5c [ 64.671337][ T5512] should_fail_ex+0x3cc/0x524 [ 64.672381][ T5512] should_fail+0x14/0x24 [ 64.673380][ T5512] get_futex_key+0x904/0xec0 [ 64.674398][ T5512] futex_wake+0x10c/0x458 [ 64.675299][ T5512] do_futex+0x2c4/0x340 [ 64.676225][ T5512] __arm64_sys_futex+0x390/0x414 [ 64.677323][ T5512] invoke_syscall+0x98/0x290 [ 64.678404][ T5512] el0_svc_common+0x13c/0x258 [ 64.679425][ T5512] do_el0_svc+0x5c/0x134 [ 64.680375][ T5512] el0_svc+0x58/0x12c [ 64.681299][ T5512] el0t_64_sync_handler+0x84/0xf0 [ 64.682503][ T5512] el0t_64_sync+0x18c/0x190 [ 64.729981][ T5517] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 64.739559][ T5526] exfat: Deprecated parameter 'utf8' [ 64.740712][ T5526] exfat: Deprecated parameter 'utf8' [ 64.786395][ T5526] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 64.799030][ T5530] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.821235][ T4339] Bluetooth: hci4: command 0x0405 tx timeout [ 64.836978][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 64.859714][ T5530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 64.865014][ T5528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.903006][ T5530] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.181: lblock 3 mapped to illegal pblock 3 (length 2) [ 64.914243][ T5530] EXT4-fs (loop5): Remounting filesystem read-only [ 64.922556][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 65.724054][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 66.248435][ T5548] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.300193][ T5564] FAULT_INJECTION: forcing a failure. [ 66.300193][ T5564] name fail_futex, interval 1, probability 0, space 0, times 0 [ 66.303098][ T5564] CPU: 1 PID: 5564 Comm: syz.6.189 Not tainted syzkaller #0 [ 66.304664][ T5564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 66.306873][ T5564] Call trace: [ 66.307585][ T5564] dump_backtrace+0x1c4/0x1f0 [ 66.308642][ T5564] show_stack+0x2c/0x3c [ 66.309562][ T5564] __dump_stack+0x30/0x40 [ 66.310508][ T5564] dump_stack_lvl+0xf4/0x15c [ 66.311545][ T5564] dump_stack+0x1c/0x5c [ 66.312456][ T5564] should_fail_ex+0x3cc/0x524 [ 66.313522][ T5564] should_fail+0x14/0x24 [ 66.314491][ T5564] get_futex_key+0x904/0xec0 [ 66.315551][ T5564] futex_wake+0x10c/0x458 [ 66.316552][ T5564] do_futex+0x2c4/0x340 [ 66.317553][ T5564] __arm64_sys_futex+0x390/0x414 [ 66.318739][ T5564] invoke_syscall+0x98/0x290 [ 66.319836][ T5564] el0_svc_common+0x13c/0x258 [ 66.320951][ T5564] do_el0_svc+0x5c/0x134 [ 66.321914][ T5564] el0_svc+0x58/0x12c [ 66.322834][ T5564] el0t_64_sync_handler+0x84/0xf0 [ 66.323996][ T5564] el0t_64_sync+0x18c/0x190 [ 67.430207][ T5595] set_capacity_and_notify: 6 callbacks suppressed [ 67.430216][ T5595] loop5: detected capacity change from 0 to 256 [ 67.464983][ T4339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.467762][ T4339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.469780][ T4339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.472039][ T4347] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.473958][ T4347] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.475603][ T4339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.517046][ T5595] FAT-fs (loop5): Directory bread(block 64) failed [ 67.518565][ T5595] FAT-fs (loop5): Directory bread(block 65) failed [ 67.520000][ T5595] FAT-fs (loop5): Directory bread(block 66) failed [ 67.534009][ T5595] FAT-fs (loop5): Directory bread(block 67) failed [ 67.535525][ T5595] FAT-fs (loop5): Directory bread(block 68) failed [ 67.536916][ T5595] FAT-fs (loop5): Directory bread(block 69) failed [ 67.538379][ T5595] FAT-fs (loop5): Directory bread(block 70) failed [ 67.543771][ T5595] FAT-fs (loop5): Directory bread(block 71) failed [ 67.545281][ T5595] FAT-fs (loop5): Directory bread(block 72) failed [ 67.546708][ T5595] FAT-fs (loop5): Directory bread(block 73) failed [ 67.636129][ T5605] loop4: detected capacity change from 0 to 512 [ 67.718176][ T5605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.733832][ T5346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.092150][ T5619] EXT4-fs error (device loop4): ext4_lookup:1860: inode #12: comm syz.4.202: iget: bad i_size value: 2533274857506816 [ 68.112337][ T5346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.117046][ T5591] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.157631][ T5601] loop0: detected capacity change from 0 to 40427 [ 68.179747][ T5601] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 68.181486][ T5601] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 68.194075][ T5601] F2FS-fs (loop0): invalid crc value [ 68.217320][ T5601] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 68.224969][ T5637] loop5: detected capacity change from 0 to 512 [ 68.237224][ T5346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.240173][ T5637] EXT4-fs (loop5): Test dummy encryption mode enabled [ 68.248484][ T5601] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 68.250119][ T5601] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 68.252732][ T5637] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.204: inode has both inline data and extents flags [ 68.263508][ T5637] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.204: couldn't read orphan inode 15 (err -117) [ 68.268123][ T5637] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.318060][ T4337] syz-executor: attempt to access beyond end of device [ 68.318060][ T4337] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 68.324710][ T5346] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.335002][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 68.336346][ T5591] chnl_net:caif_netlink_parms(): no params data found [ 68.379459][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.386415][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.398860][ T5591] device bridge_slave_0 entered promiscuous mode [ 68.407772][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.413269][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.423763][ T5591] device bridge_slave_1 entered promiscuous mode [ 68.443122][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.446905][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.457336][ T5591] team0: Port device team_slave_0 added [ 68.488546][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 69.284238][ T5591] team0: Port device team_slave_1 added [ 69.335522][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.337389][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.376012][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.398853][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.400450][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.440059][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.448976][ T5675] loop0: detected capacity change from 0 to 256 [ 69.478833][ T5675] FAT-fs (loop0): Directory bread(block 1285) failed [ 69.480361][ T5675] FAT-fs (loop0): Directory bread(block 1286) failed [ 69.498155][ T5675] FAT-fs (loop0): Directory bread(block 1287) failed [ 69.508331][ T5675] FAT-fs (loop0): Directory bread(block 1288) failed [ 69.571776][ T4339] Bluetooth: hci0: command 0x0409 tx timeout [ 69.617695][ T14] cfg80211: failed to load regulatory.db [ 69.631128][ T5692] loop0: detected capacity change from 0 to 128 [ 69.959533][ T5591] device hsr_slave_0 entered promiscuous mode [ 70.043343][ T5591] device hsr_slave_1 entered promiscuous mode [ 70.081440][ T5591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.083166][ T5591] Cannot create hsr debugfs directory [ 70.088480][ T5694] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.691177][ C0] sched: RT throttling activated [ 71.692756][ T4348] Bluetooth: hci0: command 0x041b tx timeout [ 72.547532][ T5732] loop4: detected capacity change from 0 to 256 [ 72.555424][ T5733] loop0: detected capacity change from 0 to 512 [ 72.560669][ T5733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.588380][ T5733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.591107][ T5733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.621632][ T5733] EXT4-fs (loop0): 1 truncate cleaned up [ 72.626625][ T5733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.661138][ T5742] loop5: detected capacity change from 0 to 256 [ 72.679480][ T5742] FAT-fs (loop5): Directory bread(block 64) failed [ 72.680966][ T5742] FAT-fs (loop5): Directory bread(block 65) failed [ 72.691105][ T5742] FAT-fs (loop5): Directory bread(block 66) failed [ 72.714378][ T5742] FAT-fs (loop5): Directory bread(block 67) failed [ 72.720382][ T5737] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.724543][ T5742] FAT-fs (loop5): Directory bread(block 68) failed [ 72.725972][ T5742] FAT-fs (loop5): Directory bread(block 69) failed [ 72.727385][ T5742] FAT-fs (loop5): Directory bread(block 70) failed [ 72.743719][ T5742] FAT-fs (loop5): Directory bread(block 71) failed [ 72.746081][ T5742] FAT-fs (loop5): Directory bread(block 72) failed [ 72.747394][ T5742] FAT-fs (loop5): Directory bread(block 73) failed [ 72.788235][ T5744] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.803875][ T5742] syz.5.224: attempt to access beyond end of device [ 72.803875][ T5742] loop5: rw=2051, sector=1192, nr_sectors = 32 limit=256 [ 72.807518][ T5591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 72.859047][ T5742] overlayfs: filesystem on './file0' not supported [ 72.914086][ T5591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 72.932229][ T5761] netlink: 180 bytes leftover after parsing attributes in process `syz.5.224'. [ 72.934187][ T5761] netlink: 40 bytes leftover after parsing attributes in process `syz.5.224'. [ 72.991756][ T5591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.435241][ T5591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.804907][ T4348] Bluetooth: hci0: command 0x040f tx timeout [ 74.009201][ T5780] loop5: detected capacity change from 0 to 40427 [ 74.018794][ T5780] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 74.020481][ T5780] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 74.030667][ T5780] F2FS-fs (loop5): invalid crc value [ 74.089993][ T5780] F2FS-fs (loop5): Found nat_bits in checkpoint [ 74.112139][ T5780] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 74.113707][ T5780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 74.307574][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.317608][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.319411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.329301][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.341959][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.344715][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.353278][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.354935][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.362730][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 74.431106][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.499888][ T5591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.506364][ T5591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.701993][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.704279][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.706112][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.707615][ T5696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.709457][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.714925][ T4589] syz-executor: attempt to access beyond end of device [ 75.714925][ T4589] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 75.719888][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.722659][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.725436][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.727453][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.729500][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.883014][ T4339] Bluetooth: hci0: command 0x0419 tx timeout [ 75.965363][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.967482][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.973794][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.975820][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.976246][ T5817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.980071][ T5817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.981628][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.984580][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.103147][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.104866][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.106496][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.129305][ T5861] loop6: detected capacity change from 0 to 256 [ 78.324311][ T5852] loop0: detected capacity change from 0 to 40427 [ 78.352093][ T5852] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-based" or missing value [ 78.460377][ T5872] loop5: detected capacity change from 0 to 2048 [ 78.513271][ T5872] loop5: p4 < > [ 79.343488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.345979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.361136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.363817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.368377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.376453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.382010][ T5591] device veth0_vlan entered promiscuous mode [ 79.388279][ T5591] device veth1_vlan entered promiscuous mode [ 79.422960][ T5591] device veth0_macvtap entered promiscuous mode [ 79.425670][ T5591] device veth1_macvtap entered promiscuous mode [ 79.431009][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.438809][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.443009][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.445277][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.447417][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.449741][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.452188][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.454430][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.461342][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.463546][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.466105][ T5921] loop6: detected capacity change from 0 to 128 [ 79.476440][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.483135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 79.485096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 79.486882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.489517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.489631][ T5921] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 79.492272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.515067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.521753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.533996][ T27] audit: type=1107 audit(79.520:4): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 79.568925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.587154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.589271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.602438][ T5346] device hsr_slave_0 left promiscuous mode [ 79.613636][ T5931] loop4: detected capacity change from 0 to 256 [ 79.618347][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 79.625822][ T5346] device hsr_slave_1 left promiscuous mode [ 79.656490][ T5931] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 79.701535][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.703255][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.705288][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.706868][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.717490][ T5346] device bridge_slave_1 left promiscuous mode [ 79.719750][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.822061][ T5346] device bridge_slave_0 left promiscuous mode [ 79.823507][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.941361][ T5346] device veth1_macvtap left promiscuous mode [ 79.942868][ T5346] device veth0_macvtap left promiscuous mode [ 79.944282][ T5346] device veth1_vlan left promiscuous mode [ 79.945717][ T5346] device veth0_vlan left promiscuous mode [ 80.081652][ T5934] loop0: detected capacity change from 0 to 131072 [ 80.087254][ T5934] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 80.092344][ T5934] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.103122][ T5934] F2FS-fs (loop0): invalid crc value [ 80.111669][ T5934] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.137926][ T5934] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.139591][ T5934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 82.364391][ T5346] team0 (unregistering): Port device team_slave_1 removed [ 82.542858][ T5346] team0 (unregistering): Port device team_slave_0 removed [ 82.711998][ T5346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.931922][ T5346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.422899][ T5346] bond0 (unregistering): Released all slaves [ 84.665052][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.667201][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.669187][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.671549][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.673564][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.675726][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.677755][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.679789][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.682470][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.698714][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.251'. [ 84.794971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.797352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.445508][ T5591] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.447472][ T5591] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.449577][ T5591] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.455767][ T5591] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.497118][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.503714][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.534566][ T5168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.536434][ T5168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.539507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.547795][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.549634][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.552543][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.617973][ T5981] binder: 5979:5981 unknown command 1074291477 [ 85.619315][ T5981] binder: 5979:5981 ioctl c0306201 20000d00 returned -22 [ 85.696185][ T5989] loop7: detected capacity change from 0 to 512 [ 85.777691][ T5989] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 85.779273][ T5989] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 85.780982][ T5989] System zones: 0-1, 15-15, 18-18, 34-34 [ 85.784160][ T5989] EXT4-fs (loop7): orphan cleanup on readonly fs [ 85.785556][ T5989] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 85.792091][ T5989] EXT4-fs warning (device loop7): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.803454][ T5989] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 85.809707][ T5989] EXT4-fs error (device loop7): ext4_orphan_get:1435: comm syz.7.196: bad orphan inode 16 [ 85.815474][ T5989] ext4_test_bit(bit=15, block=18) = 1 [ 85.816629][ T5989] is_bad_inode(inode)=0 [ 85.817538][ T5989] NEXT_ORPHAN(inode)=0 [ 85.818422][ T5989] max_ino=32 [ 85.820689][ T5989] i_nlink=2 [ 85.821937][ T5989] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 86.043064][ T6012] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.253718][ T6012] fscrypt_msg: 92 callbacks suppressed [ 86.253741][ T6012] fscrypt (loop7, inode 16): Error -61 getting encryption context [ 86.786053][ T6024] loop5: detected capacity change from 0 to 1024 [ 87.522844][ T5591] EXT4-fs (loop7): unmounting filesystem. [ 87.546073][ T6031] loop4: detected capacity change from 0 to 512 [ 87.547838][ T6031] EXT4-fs: Ignoring removed nobh option [ 88.175220][ T6024] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 88.189492][ T6031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.206136][ T6031] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.275: corrupted inode contents [ 88.239040][ T6031] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #2: comm syz.4.275: mark_inode_dirty error [ 88.252857][ T6050] loop0: detected capacity change from 0 to 256 [ 88.273290][ T6031] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.275: corrupted inode contents [ 88.404010][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 89.066922][ T6082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.205701][ T6064] loop0: detected capacity change from 0 to 40427 [ 89.248313][ T6064] F2FS-fs (loop0): invalid crc value [ 89.278602][ T6064] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.454021][ T6037] loop7: detected capacity change from 0 to 131072 [ 89.598045][ T6037] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945) [ 89.619779][ T6037] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 89.636043][ T6088] loop5: detected capacity change from 0 to 1024 [ 89.638141][ T6088] EXT4-fs: Ignoring removed bh option [ 89.641135][ T6037] F2FS-fs (loop7): invalid crc value [ 89.652083][ T6064] F2FS-fs (loop0): Start checkpoint disabled! [ 89.670971][ T6088] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 89.677787][ T6037] F2FS-fs (loop7): Found nat_bits in checkpoint [ 89.694175][ T6064] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 89.713098][ T6037] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 89.717217][ T6037] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 89.738181][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 90.693107][ T6127] loop4: detected capacity change from 0 to 2048 [ 90.704598][ T6129] capability: warning: `syz.5.292' uses 32-bit capabilities (legacy support in use) [ 90.754216][ T6127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 90.758570][ T6127] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.291: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 90.816908][ T6127] EXT4-fs (loop4): Remounting filesystem read-only [ 90.818565][ T6133] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.291: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 90.860331][ T6133] EXT4-fs (loop4): Remounting filesystem read-only [ 90.868315][ T6135] loop5: detected capacity change from 0 to 1024 [ 90.917116][ T6103] loop6: detected capacity change from 0 to 40427 [ 90.920565][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 90.998518][ T6135] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 91.000685][ T6103] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 91.005016][ T6103] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 91.007327][ T6103] F2FS-fs (loop6): invalid crc value [ 91.012830][ T6140] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.055757][ T6135] EXT4-fs error (device loop5): ext4_get_first_dir_block:3607: inode #12: comm syz.5.294: directory missing '..' [ 91.080096][ T6103] F2FS-fs (loop6): Found nat_bits in checkpoint [ 91.129933][ T6103] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 91.134122][ T6103] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 91.184598][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 91.317401][ T6168] loop4: detected capacity change from 0 to 512 [ 91.345367][ T6168] ext3: Unknown parameter '.' [ 91.389106][ T6176] xt_hashlimit: size too large, truncated to 1048576 [ 91.400106][ T6041] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.486698][ T6181] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.551028][ T6190] loop6: detected capacity change from 0 to 256 [ 91.678895][ T6193] loop4: detected capacity change from 0 to 256 [ 92.385043][ T6195] loop5: detected capacity change from 0 to 1024 [ 92.468794][ T6190] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 92.487203][ T6190] exFAT-fs (loop6): failed to load alloc-bitmap [ 92.488584][ T6190] exFAT-fs (loop6): failed to recognize exfat type [ 92.501160][ T6195] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 92.538289][ T6195] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 92.540272][ T6195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 92.705892][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 92.957960][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.6.310'. [ 93.017259][ T6224] loop5: detected capacity change from 0 to 512 [ 93.085772][ T6224] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 93.188572][ T6206] loop4: detected capacity change from 0 to 40427 [ 93.196883][ T6206] F2FS-fs (loop4): invalid crc value [ 93.274420][ T6237] bridge0: port 3(veth1_macvtap) entered blocking state [ 93.276089][ T6237] bridge0: port 3(veth1_macvtap) entered disabled state [ 93.281637][ T6237] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 93.490649][ T6206] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.547146][ T6206] F2FS-fs (loop4): Start checkpoint disabled! [ 93.575692][ T6206] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 93.618250][ T6246] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.384621][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 94.631296][ T6266] loop0: detected capacity change from 0 to 256 [ 94.757697][ T6271] loop5: detected capacity change from 0 to 512 [ 94.759575][ T6271] ext3: Unknown parameter '.' [ 96.097367][ T6296] netlink: 104 bytes leftover after parsing attributes in process `syz.6.325'. [ 96.112747][ T6294] set_capacity_and_notify: 1 callbacks suppressed [ 96.112754][ T6294] loop4: detected capacity change from 0 to 512 [ 96.229225][ T6294] FAT-fs (loop4): Directory bread(block 2080) failed [ 96.231102][ T6294] FAT-fs (loop4): Directory bread(block 2081) failed [ 96.258545][ T6294] FAT-fs (loop4): Directory bread(block 2082) failed [ 96.260134][ T6294] FAT-fs (loop4): Directory bread(block 2083) failed [ 96.272645][ T6294] FAT-fs (loop4): Directory bread(block 2084) failed [ 96.274145][ T6294] FAT-fs (loop4): Directory bread(block 2085) failed [ 96.275620][ T6294] FAT-fs (loop4): Directory bread(block 2086) failed [ 96.281317][ T6294] FAT-fs (loop4): Directory bread(block 2087) failed [ 96.756396][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.823149][ T6306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.887766][ T6323] loop4: detected capacity change from 0 to 512 [ 97.898966][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.916754][ T6323] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 97.933836][ T6323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=4800e02c, mo2=0002] [ 97.943261][ T6323] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.950095][ T6323] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.330: bad orphan inode 267 [ 97.961118][ T6323] EXT4-fs (loop4): Remounting filesystem read-only [ 97.968321][ T6323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.977300][ T6323] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.330: dx entry: limit 0 != root limit 125 [ 97.996507][ T6323] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.330: Corrupt directory, running e2fsck is recommended [ 98.047383][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 98.344272][ T6331] loop5: detected capacity change from 0 to 40427 [ 98.360622][ T6331] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 98.369906][ T6331] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 98.379941][ T6331] F2FS-fs (loop5): invalid crc value [ 98.418604][ T6331] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 98.471664][ T6331] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 98.473254][ T6331] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 98.560393][ T6353] loop0: detected capacity change from 0 to 256 [ 98.824656][ T6365] loop4: detected capacity change from 0 to 512 [ 98.937049][ T6372] loop0: detected capacity change from 0 to 512 [ 98.938956][ T6372] ext3: Unknown parameter '.' [ 99.259886][ T5966] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.547533][ T6382] loop0: detected capacity change from 0 to 256 [ 100.187270][ T6385] loop4: detected capacity change from 0 to 4096 [ 100.201757][ T6361] loop5: detected capacity change from 0 to 40427 [ 100.239286][ T6361] F2FS-fs (loop5): invalid crc value [ 100.254455][ T6361] F2FS-fs (loop5): Found nat_bits in checkpoint [ 100.263747][ T6385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.321681][ T6361] F2FS-fs (loop5): Start checkpoint disabled! [ 100.360786][ T6361] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 100.501123][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 102.263888][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.396135][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.398083][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.576825][ T6413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.751120][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.756368][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.028173][ T6460] loop4: detected capacity change from 0 to 256 [ 103.056173][ T6460] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10b903, utbl_chksum : 0xe619d30d) [ 103.064624][ T6460] exFAT-fs (loop4): failed to load alloc-bitmap [ 103.065940][ T6460] exFAT-fs (loop4): failed to recognize exfat type [ 103.070106][ T6462] loop6: detected capacity change from 0 to 512 [ 103.081708][ T6462] ext3: Unknown parameter '.' [ 103.159780][ T6460] loop4: detected capacity change from 0 to 256 [ 103.161929][ T6460] exfat: Deprecated parameter 'utf8' [ 103.163196][ T6460] exfat: Deprecated parameter 'utf8' [ 103.167222][ T6460] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 104.448164][ T6470] loop6: detected capacity change from 0 to 256 [ 104.454503][ T6473] device gretap1 entered promiscuous mode [ 105.467196][ T6492] loop6: detected capacity change from 0 to 512 [ 105.479493][ T6492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.480952][ T6492] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.501525][ T6492] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 105.585147][ T6492] EXT4-fs (loop6): 1 truncate cleaned up [ 105.587604][ T6492] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 106.388115][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.389634][ T6505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.391807][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.393305][ T6505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.397729][ T6505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.056952][ T6511] ip_tables: iptables: counters copy to user failed while replacing table [ 107.278452][ T6505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.292383][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.295661][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 107.360939][ T6516] FAULT_INJECTION: forcing a failure. [ 107.360939][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 107.370882][ T6516] CPU: 1 PID: 6516 Comm: syz.0.363 Not tainted syzkaller #0 [ 107.372607][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 107.374968][ T6516] Call trace: [ 107.375728][ T6516] dump_backtrace+0x1c4/0x1f0 [ 107.376820][ T6516] show_stack+0x2c/0x3c [ 107.377796][ T6516] __dump_stack+0x30/0x40 [ 107.378807][ T6516] dump_stack_lvl+0xf4/0x15c [ 107.379861][ T6516] dump_stack+0x1c/0x5c [ 107.380795][ T6516] should_fail_ex+0x3cc/0x524 [ 107.381818][ T6516] __should_failslab+0xc0/0x11c [ 107.382910][ T6516] should_failslab+0x10/0x28 [ 107.383954][ T6516] __kmem_cache_alloc_node+0x7c/0x318 [ 107.385188][ T6516] kmalloc_trace+0x48/0x94 [ 107.386207][ T6516] __arm64_sys_timerfd_create+0x144/0x298 [ 107.387481][ T6516] invoke_syscall+0x98/0x290 [ 107.388460][ T6516] el0_svc_common+0x13c/0x258 [ 107.389546][ T6516] do_el0_svc+0x5c/0x134 [ 107.389727][ T6524] loop6: detected capacity change from 0 to 512 [ 107.390556][ T6516] el0_svc+0x58/0x12c [ 107.392826][ T6516] el0t_64_sync_handler+0x84/0xf0 [ 107.393991][ T6516] el0t_64_sync+0x18c/0x190 [ 107.951663][ T6557] loop0: detected capacity change from 0 to 4096 [ 108.006651][ T6557] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.039612][ T6537] netlink: 104 bytes leftover after parsing attributes in process `syz.4.369'. [ 108.959845][ T6573] loop7: detected capacity change from 0 to 4096 [ 108.974733][ T6573] ext4: Unknown parameter 'noacl' [ 109.570907][ T6594] loop0: detected capacity change from 0 to 512 [ 109.589448][ T6594] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.063942][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.687366][ T6596] loop4: detected capacity change from 0 to 16 [ 110.717582][ T6594] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 111.622804][ T6596] erofs: (device loop4): mounted with root inode @ nid 36. [ 111.681691][ T6598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.696280][ T6612] loop0: detected capacity change from 0 to 512 [ 111.874833][ T6612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.570012][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 113.022371][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.331603][ T6645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.776383][ T6666] futex_wake_op: syz.0.397 tries to shift op by 144; fix this program [ 114.778749][ T6666] futex_wake_op: syz.0.397 tries to shift op by 144; fix this program [ 114.863693][ T6675] loop5: detected capacity change from 0 to 256 [ 114.884923][ T6675] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 114.915786][ T6680] loop6: detected capacity change from 0 to 512 [ 114.978563][ T6680] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 115.620562][ T6686] loop5: detected capacity change from 0 to 40427 [ 115.626838][ T6686] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 115.639816][ T6686] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 115.643476][ T6686] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 115.646131][ T6686] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 115.658095][ T6693] loop7: detected capacity change from 0 to 40427 [ 115.658623][ T6686] F2FS-fs (loop5): invalid crc value [ 115.668554][ T6693] F2FS-fs (loop7): build fault injection attr: rate: 174, type: 0x3ffff [ 115.693912][ T6686] F2FS-fs (loop5): Found nat_bits in checkpoint [ 115.709234][ T6686] F2FS-fs (loop5): Start checkpoint disabled! [ 115.730661][ T6686] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 115.732505][ T6686] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 115.768718][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 115.804240][ T6512] kworker/u4:24: attempt to access beyond end of device [ 115.804240][ T6512] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 115.901398][ T6709] loop0: detected capacity change from 0 to 512 [ 116.297904][ T6709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.795319][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 116.830874][ T6727] loop7: detected capacity change from 0 to 16 [ 116.833960][ T6728] loop0: detected capacity change from 0 to 128 [ 116.840036][ T6727] erofs: (device loop7): mounted with root inode @ nid 36. [ 116.852584][ T4339] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 116.856076][ T6727] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 116.860774][ T6727] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 116.864116][ T6727] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 116.867166][ T6727] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 116.886646][ T6041] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.899366][ T6730] binder: 6729:6730 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 116.928448][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.930469][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.289095][ T6739] loop6: detected capacity change from 0 to 128 [ 117.312179][ T6739] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 117.435081][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.415'. [ 118.478058][ T6750] loop5: detected capacity change from 0 to 1024 [ 118.491712][ T6750] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.496636][ T6750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.517632][ T6750] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.417: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 118.523944][ T6750] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.417: couldn't read orphan inode 11 (err -117) [ 118.531550][ T6750] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 118.676246][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 118.760048][ T6759] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.066340][ T6759] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.417: Invalid block bitmap block 0 in block_group 0 [ 119.071326][ T6759] Quota error (device loop5): write_blk: dquota write failed [ 119.073104][ T6759] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 119.075824][ T6759] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.417: Failed to acquire dquot type 0 [ 119.519837][ T6759] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 119.839496][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 119.893339][ T6767] loop5: detected capacity change from 0 to 512 [ 120.411102][ T6773] loop0: detected capacity change from 0 to 40427 [ 120.420615][ T6773] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 120.423747][ T6773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 120.429317][ T6773] F2FS-fs (loop0): invalid crc value [ 120.444636][ T6773] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.463485][ T6773] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.465924][ T6773] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.792141][ T6757] loop7: detected capacity change from 0 to 131072 [ 120.798139][ T6757] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945) [ 120.800623][ T6757] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 120.809422][ T6757] F2FS-fs (loop7): invalid crc value [ 121.138861][ T6799] loop5: detected capacity change from 0 to 512 [ 121.141156][ T6799] ext3: Unknown parameter '.' [ 121.143720][ T6757] F2FS-fs (loop7): Found nat_bits in checkpoint [ 121.182904][ T6757] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 121.184957][ T6757] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 121.194909][ T6001] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.307480][ T6806] loop4: detected capacity change from 0 to 16 [ 121.315899][ T6806] erofs: (device loop4): mounted with root inode @ nid 36. [ 121.398609][ T6809] loop5: detected capacity change from 0 to 256 [ 122.028702][ T4339] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 122.036814][ T6806] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 122.069490][ T6806] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 122.085922][ T6806] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 122.098985][ T6806] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 122.361349][ T4467] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.398349][ T6814] loop6: detected capacity change from 0 to 40427 [ 122.411283][ T6814] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 122.413528][ T6814] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 122.415966][ T6814] F2FS-fs (loop6): invalid crc value [ 122.417814][ T6814] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 122.445143][ T6826] loop7: detected capacity change from 0 to 512 [ 122.459059][ T6814] F2FS-fs (loop6): Start checkpoint disabled! [ 122.566281][ T6826] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 122.641572][ T4467] usb 1-1: Using ep0 maxpacket: 32 [ 122.647543][ T4467] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 122.649564][ T4467] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.654230][ T4467] usb 1-1: config 0 has no interface number 0 [ 122.656690][ T4467] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.660874][ T4467] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.667115][ T4467] usb 1-1: config 0 interface 196 has no altsetting 0 [ 122.675453][ T4467] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 122.680437][ T6814] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 122.682303][ T6814] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 123.401252][ T4467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.414331][ T4467] usb 1-1: Product: syz [ 123.415216][ T4467] usb 1-1: Manufacturer: syz [ 123.416206][ T4467] usb 1-1: SerialNumber: syz [ 123.436036][ T4467] usb 1-1: config 0 descriptor?? [ 123.439981][ T5591] EXT4-fs (loop7): unmounting filesystem. [ 123.470077][ T6383] kworker/u4:22: attempt to access beyond end of device [ 123.470077][ T6383] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.470943][ T6837] loop7: detected capacity change from 0 to 256 [ 123.500391][ T6837] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 124.274078][ T4467] ipheth 1-1:0.196: Unable to find endpoints [ 124.278352][ T4467] usb 1-1: USB disconnect, device number 3 [ 124.812510][ T6863] loop6: detected capacity change from 0 to 16 [ 124.831079][ T6863] erofs: (device loop6): mounted with root inode @ nid 36. [ 124.847273][ T4339] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 124.852603][ T6863] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 124.863858][ T6863] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 124.869789][ T6863] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 124.877560][ T6863] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 124.897713][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.450'. [ 124.904036][ T6820] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 3440) [ 124.905671][ T6820] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 124.916783][ T6820] F2FS-fs (loop4): Allow to mount readonly mode only [ 124.987694][ T6869] set_capacity_and_notify: 1 callbacks suppressed [ 124.987704][ T6869] loop4: detected capacity change from 0 to 512 [ 125.007695][ T6866] loop6: detected capacity change from 0 to 8192 [ 125.032426][ T6869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.769601][ T6886] rxe_eth0 speed is unknown, defaulting to 1000 [ 125.774739][ T6881] syzkaller0: create flow: hash 3204508001 index 1 [ 125.793241][ T7] syzkaller0: tun_net_xmit 76 [ 125.794495][ T7] syzkaller0: tun_net_xmit 48 [ 125.821566][ T6880] syzkaller0: delete flow: hash 3204508001 index 1 [ 125.858411][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 125.941538][ T2068] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.943131][ T2068] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.270727][ T6907] loop5: detected capacity change from 0 to 8192 [ 128.653620][ T6933] loop5: detected capacity change from 0 to 512 [ 128.668189][ T6933] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 138.515175][ T6910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.551336][ T6910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.616463][ T6945] loop4: detected capacity change from 0 to 512 [ 138.626750][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 138.629079][ T6945] ext3: Unknown parameter '.' [ 138.901489][ T6967] loop4: detected capacity change from 0 to 256 [ 140.261832][ T6970] loop7: detected capacity change from 0 to 8192 [ 140.362682][ T6997] loop6: detected capacity change from 0 to 512 [ 140.719827][ T6997] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 140.954226][ T7014] bridge0: port 3(veth1_macvtap) entered blocking state [ 140.955903][ T7014] bridge0: port 3(veth1_macvtap) entered disabled state [ 140.960136][ T7014] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 141.254417][ T7017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.442988][ T7017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.447354][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 142.678965][ T7020] loop4: detected capacity change from 0 to 512 [ 142.828254][ T6999] loop7: detected capacity change from 0 to 40427 [ 142.855118][ T7032] loop0: detected capacity change from 0 to 128 [ 142.874896][ T6999] F2FS-fs (loop7): Unrecognized mount option "whint_mode=fs-based" or missing value [ 142.895734][ T7032] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.925409][ T7020] EXT4-fs (loop4): 1 orphan inode deleted [ 142.941103][ T7042] loop6: detected capacity change from 0 to 512 [ 142.942041][ T7020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.949697][ T5717] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 142.963312][ T5717] EXT4-fs error (device loop4): ext4_release_dquot:6884: comm kworker/u4:15: Failed to release dquot type 1 [ 143.034179][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 143.813953][ T7042] ext3: Unknown parameter '.' [ 144.567270][ T7054] loop5: detected capacity change from 0 to 128 [ 144.569221][ T7054] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.574871][ T7054] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.666121][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 144.838238][ T7069] loop7: detected capacity change from 0 to 512 [ 144.874749][ T7069] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 144.992977][ T7076] bridge0: port 3(veth1_macvtap) entered blocking state [ 144.994538][ T7076] bridge0: port 3(veth1_macvtap) entered disabled state [ 144.996399][ T7076] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 145.074361][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 145.551153][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.561057][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.670444][ T5591] EXT4-fs (loop7): unmounting filesystem. [ 145.745173][ T7116] loop7: detected capacity change from 0 to 512 [ 145.760999][ T7116] ext3: Unknown parameter '.' [ 146.936843][ T7135] loop5: detected capacity change from 0 to 256 [ 146.954500][ T7135] exfat: Deprecated parameter 'utf8' [ 146.974370][ T7135] exfat: Deprecated parameter 'utf8' [ 146.975591][ T7135] exfat: Deprecated parameter 'utf8' [ 147.013298][ T7135] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 147.060511][ T7145] loop4: detected capacity change from 0 to 512 [ 147.165092][ T7145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.167185][ T7145] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.186603][ T7155] loop6: detected capacity change from 0 to 256 [ 147.188417][ T7155] exfat: Deprecated parameter 'utf8' [ 147.189494][ T7155] exfat: Deprecated parameter 'utf8' [ 147.284959][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.286838][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.322970][ T7161] bridge0: port 3(veth1_macvtap) entered blocking state [ 147.324427][ T7161] bridge0: port 3(veth1_macvtap) entered disabled state [ 147.326335][ T7161] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 147.334953][ T7155] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 147.344320][ T7160] loop7: detected capacity change from 0 to 1024 [ 147.346312][ T7160] ext3: Unknown parameter 'permit_directio' [ 148.465794][ T7183] loop5: detected capacity change from 0 to 256 [ 148.478376][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 148.557471][ T27] audit: type=1326 audit(2000000001.520:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.4.528" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f83c68 code=0x7ffc0000 [ 148.564050][ T27] audit: type=1326 audit(2000000001.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.4.528" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=48 compat=0 ip=0xffff97f83c68 code=0x7ffc0000 [ 148.578940][ T27] audit: type=1326 audit(2000000001.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.4.528" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f83c68 code=0x7ffc0000 [ 148.959941][ T7198] loop4: detected capacity change from 0 to 128 [ 148.986568][ T7198] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.019510][ T7198] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.207000][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 149.265131][ T7226] loop4: detected capacity change from 0 to 512 [ 149.278712][ T7226] ext3: Unknown parameter '.' [ 149.379174][ T7228] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 149.381441][ T7228] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.356379][ T7243] set_capacity_and_notify: 2 callbacks suppressed [ 150.356388][ T7243] loop0: detected capacity change from 0 to 1024 [ 150.404553][ T7245] loop6: detected capacity change from 0 to 128 [ 150.406841][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 150.408546][ T7243] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.471865][ T7249] loop4: detected capacity change from 0 to 1024 [ 150.483950][ T7249] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 150.498620][ T7243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 150.539996][ T7249] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 150.568159][ T7249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.602302][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 150.718575][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 150.720463][ T7271] netlink: 40 bytes leftover after parsing attributes in process `syz.5.549'. [ 150.736493][ T7271] netlink: 40 bytes leftover after parsing attributes in process `syz.5.549'. [ 150.869506][ T7275] loop6: detected capacity change from 0 to 256 [ 150.873158][ T7275] exfat: Deprecated parameter 'utf8' [ 150.874315][ T7275] exfat: Deprecated parameter 'namecase' [ 150.875654][ T7275] exfat: Deprecated parameter 'namecase' [ 150.876956][ T7275] exfat: Deprecated parameter 'namecase' [ 150.939482][ T7275] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 151.809246][ T7281] loop7: detected capacity change from 0 to 1024 [ 151.811066][ T7281] EXT4-fs: Ignoring removed bh option [ 152.907915][ T4414] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 152.955053][ T7281] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 152.957098][ T7281] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.964318][ T7280] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 3: comm syz.7.551: lblock 3 mapped to illegal pblock 3 (length 3) [ 152.970004][ T7280] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 152.972706][ T7280] EXT4-fs (loop7): This should not happen!! Data will be lost [ 152.972706][ T7280] [ 152.999622][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 153.037939][ T7296] loop4: detected capacity change from 0 to 512 [ 153.071138][ T7299] loop6: detected capacity change from 0 to 512 [ 153.076649][ T7299] ext3: Unknown parameter '.' [ 153.111771][ T4414] usb 1-1: config 1 has an invalid interface number: 2 but max is 1 [ 153.113572][ T4414] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.115966][ T4414] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 153.117973][ T4414] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.120251][ T4414] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 153.122840][ T4414] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.125580][ T4414] usb 1-1: config 1 interface 1 has no altsetting 0 [ 153.130375][ T4414] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.133228][ T4414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.134948][ T4414] usb 1-1: Product: syz [ 153.135865][ T4414] usb 1-1: Manufacturer: syz [ 153.136884][ T4414] usb 1-1: SerialNumber: syz [ 153.169088][ T7265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.172409][ T4414] cdc_mbim 1-1:1.0: skipping garbage [ 153.177629][ T6383] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:22: lblock 8 mapped to illegal pblock 8 (length 8) [ 153.183108][ T7296] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.185098][ T7296] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.188827][ T6383] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 153.197766][ T6383] EXT4-fs (loop7): This should not happen!! Data will be lost [ 153.197766][ T6383] [ 153.215597][ T5591] EXT4-fs (loop7): unmounting filesystem. [ 153.296736][ T7317] loop6: detected capacity change from 0 to 256 [ 154.056702][ T7323] bridge0: port 3(veth1_macvtap) entered blocking state [ 154.058434][ T7323] bridge0: port 3(veth1_macvtap) entered disabled state [ 154.060348][ T7323] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 154.245544][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 154.266359][ T4414] usb 1-1: selecting invalid altsetting 0 [ 154.267700][ T4414] usb 1-1: selecting invalid altsetting 0 [ 154.269199][ T4414] cdc_mbim 1-1:1.0: bind() failure [ 154.277604][ T4414] cdc_ncm 1-1:1.2: CDC Union missing and no IAD found [ 154.279081][ T4414] cdc_ncm 1-1:1.2: bind() failure [ 154.281478][ T4414] usb 1-1: selecting invalid altsetting 0 [ 154.282736][ T4414] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 154.284262][ T4414] usb 1-1: selecting invalid altsetting 0 [ 154.285474][ T4414] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 154.287098][ T4414] usb 1-1: selecting invalid altsetting 0 [ 154.290976][ T4414] usbtest: probe of 1-1:1.1 failed with error -22 [ 154.294180][ T4414] usb 1-1: USB disconnect, device number 4 [ 154.389972][ T7] syzkaller0: tun_net_xmit 76 [ 154.395296][ T7] syzkaller0: tun_net_xmit 48 [ 154.411529][ T4501] syzkaller0: tun_net_xmit 76 [ 154.428182][ T7338] syzkaller0: create flow: hash 3204508001 index 1 [ 154.464035][ T7337] syzkaller0: delete flow: hash 3204508001 index 1 [ 154.491410][ T4348] Bluetooth: hci3: command 0x0406 tx timeout [ 154.492763][ T4348] Bluetooth: hci2: command 0x0406 tx timeout [ 155.170434][ T7321] loop5: detected capacity change from 0 to 131072 [ 155.182543][ T7321] F2FS-fs (loop5): Test dummy encryption mode enabled [ 155.184348][ T7321] F2FS-fs (loop5): invalid crc value [ 155.188955][ T7321] F2FS-fs (loop5): Found nat_bits in checkpoint [ 155.201166][ T7321] F2FS-fs (loop5): access invalid blkaddr:0 [ 155.202942][ T7321] CPU: 0 PID: 7321 Comm: syz.5.557 Not tainted syzkaller #0 [ 155.204591][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 155.206915][ T7321] Call trace: [ 155.207704][ T7321] dump_backtrace+0x1c4/0x1f0 [ 155.208887][ T7321] show_stack+0x2c/0x3c [ 155.209842][ T7321] __dump_stack+0x30/0x40 [ 155.210922][ T7321] dump_stack_lvl+0xf4/0x15c [ 155.212050][ T7321] dump_stack+0x1c/0x5c [ 155.213030][ T7321] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 155.214297][ T7321] sanity_check_extent_cache+0x14c/0x2d0 [ 155.215679][ T7321] f2fs_iget+0x2d60/0x47b0 [ 155.216715][ T7321] f2fs_fill_super+0x398c/0x57bc [ 155.217866][ T7321] mount_bdev+0x264/0x35c [ 155.218896][ T7321] f2fs_mount+0x44/0x58 [ 155.219904][ T7321] legacy_get_tree+0xd8/0x174 [ 155.221004][ T7321] vfs_get_tree+0x90/0x278 [ 155.222072][ T7321] do_new_mount+0x228/0x818 [ 155.223170][ T7321] path_mount+0x5ac/0xe6c [ 155.224202][ T7321] __arm64_sys_mount+0x4a0/0x5a0 [ 155.225372][ T7321] invoke_syscall+0x98/0x290 [ 155.226420][ T7321] el0_svc_common+0x13c/0x258 [ 155.227487][ T7321] do_el0_svc+0x5c/0x134 [ 155.228449][ T7321] el0_svc+0x58/0x12c [ 155.229425][ T7321] el0t_64_sync_handler+0x84/0xf0 [ 155.230611][ T7321] el0t_64_sync+0x18c/0x190 [ 155.575350][ T7321] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 155.582406][ T7321] F2FS-fs (loop5): Failed to read root inode [ 155.890233][ T7365] loop5: detected capacity change from 0 to 512 [ 155.919382][ T7365] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.924627][ T7365] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.573407][ T7374] loop4: detected capacity change from 0 to 512 [ 156.580227][ T7374] ext3: Unknown parameter '.' [ 156.778777][ T7376] loop4: detected capacity change from 0 to 256 [ 163.851425][ T4348] Bluetooth: hci1: command 0x0406 tx timeout [ 166.710276][ T7345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.712565][ T7345] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 166.742737][ T7381] netlink: 'syz.4.576': attribute type 5 has an invalid length. [ 166.757638][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 166.766054][ T7388] loop0: detected capacity change from 0 to 512 [ 166.801343][ T7392] overlayfs: overlapping lowerdir path [ 167.212778][ T7404] loop6: detected capacity change from 0 to 16 [ 168.290737][ T7404] erofs: (device loop6): mounted with root inode @ nid 36. [ 168.364002][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 168.366137][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 168.369248][ T7404] syz.6.577: attempt to access beyond end of device [ 168.369248][ T7404] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 168.372458][ T7404] syz.6.577: attempt to access beyond end of device [ 168.372458][ T7404] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 168.378839][ T7404] ================================================================== [ 168.380445][ T7404] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 168.382232][ T7404] Read of size 4096 at addr ffff0000dd4c4000 by task syz.6.577/7404 [ 168.384094][ T7404] [ 168.384624][ T7404] CPU: 1 PID: 7404 Comm: syz.6.577 Not tainted syzkaller #0 [ 168.386228][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 168.388409][ T7404] Call trace: [ 168.389141][ T7404] dump_backtrace+0x1c4/0x1f0 [ 168.390212][ T7404] show_stack+0x2c/0x3c [ 168.391187][ T7404] __dump_stack+0x30/0x40 [ 168.392150][ T7404] dump_stack_lvl+0xf4/0x15c [ 168.393173][ T7404] print_address_description+0x88/0x218 [ 168.394449][ T7404] print_report+0x50/0x68 [ 168.395416][ T7404] kasan_report+0xa8/0xfc [ 168.396414][ T7404] kasan_check_range+0x258/0x290 [ 168.397507][ T7404] memcpy+0x48/0x90 [ 168.398362][ T7404] z_erofs_transform_plain+0x39c/0x494 [ 168.399574][ T7404] z_erofs_decompress+0x9c/0xd4 [ 168.400683][ T7404] z_erofs_decompress_queue+0x103c/0x1bf4 [ 168.402029][ T7404] z_erofs_runqueue+0x1508/0x16a8 [ 168.403140][ T7404] z_erofs_read_folio+0x2dc/0x5cc [ 168.404256][ T7404] filemap_read_folio+0x134/0x384 [ 168.405389][ T7404] filemap_read+0x1290/0x20dc [ 168.406430][ T7404] generic_file_read_iter+0xf8/0x5ac [ 168.407594][ T7404] vfs_read+0x3cc/0x7b8 [ 168.408527][ T7404] ksys_read+0x12c/0x228 [ 168.409489][ T7404] __arm64_sys_read+0x7c/0x90 [ 168.410532][ T7404] invoke_syscall+0x98/0x290 [ 168.411544][ T7404] el0_svc_common+0x13c/0x258 [ 168.412588][ T7404] do_el0_svc+0x5c/0x134 [ 168.413534][ T7404] el0_svc+0x58/0x12c [ 168.414417][ T7404] el0t_64_sync_handler+0x84/0xf0 [ 168.415509][ T7404] el0t_64_sync+0x18c/0x190 [ 168.416478][ T7404] [ 168.416982][ T7404] The buggy address belongs to the physical page: [ 168.418347][ T7404] page:00000000bac861ea refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x11d4c4 [ 168.420622][ T7404] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 168.422237][ T7404] raw: 05ffc00000000000 fffffc0003d47308 fffffc0003d34c08 0000000000000000 [ 168.424191][ T7404] raw: 0000000000000000 0000000000000000 00000000ffffff7f 0000000000000000 [ 168.426087][ T7404] page dumped because: kasan: bad access detected [ 168.427502][ T7404] [ 168.428017][ T7404] Memory state around the buggy address: [ 168.429358][ T7404] ffff0000dd4c3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 168.431211][ T7404] ffff0000dd4c3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 168.433076][ T7404] >ffff0000dd4c4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.434899][ T7404] ^ [ 168.435801][ T7404] ffff0000dd4c4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.437670][ T7404] ffff0000dd4c4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.439522][ T7404] ================================================================== [ 168.441510][ T7404] Disabling lock debugging due to kernel taint [ 168.443164][ T7404] syz.6.577: attempt to access beyond end of device [ 168.443164][ T7404] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 168.685057][ T7408] FAULT_INJECTION: forcing a failure. [ 168.685057][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 168.685075][ T7408] CPU: 0 PID: 7408 Comm: syz.5.583 Tainted: G B syzkaller #0 [ 168.685083][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 168.685088][ T7408] Call trace: [ 168.685090][ T7408] dump_backtrace+0x1c4/0x1f0 [ 168.685101][ T7408] show_stack+0x2c/0x3c [ 168.685106][ T7408] __dump_stack+0x30/0x40 [ 168.685116][ T7408] dump_stack_lvl+0xf4/0x15c [ 168.685123][ T7408] dump_stack+0x1c/0x5c [ 168.685130][ T7408] should_fail_ex+0x3cc/0x524 [ 168.685138][ T7408] __should_failslab+0xc0/0x11c [ 168.685148][ T7408] should_failslab+0x10/0x28 [ 168.685155][ T7408] __kmem_cache_alloc_node+0x7c/0x318 [ 168.685164][ T7408] __kmalloc_node_track_caller+0xb8/0x174 [ 168.685171][ T7408] kvasprintf+0x12c/0x204 [ 168.685180][ T7408] kvasprintf_const+0x154/0x2e4 [ 168.685189][ T7408] kobject_set_name_vargs+0xd8/0x1c8 [ 168.685198][ T7408] device_create_groups_vargs+0x1b8/0x298 [ 168.685206][ T7408] device_create+0xf4/0x148 [ 168.685213][ T7408] vcs_make_sysfs+0x68/0xa0 [ 168.685222][ T7408] vc_allocate+0x580/0x694 [ 168.685228][ T7408] con_install+0xa0/0x5cc [ 168.685234][ T7408] tty_init_dev+0xb4/0x3f4 [ 168.685241][ T7408] tty_open+0x6e0/0xc04 [ 168.685247][ T7408] chrdev_open+0x3d0/0x51c [ 168.685256][ T7408] do_dentry_open+0x738/0xf8c [ 168.685260][ T7408] vfs_open+0x7c/0x90 [ 168.685265][ T7408] path_openat+0x1fc0/0x27a0 [ 168.685272][ T7408] do_filp_open+0x198/0x38c [ 168.685278][ T7408] do_sys_openat2+0x134/0x3fc [ 168.685283][ T7408] __arm64_sys_openat+0x11c/0x150 [ 168.685288][ T7408] invoke_syscall+0x98/0x290 [ 168.685297][ T7408] el0_svc_common+0x13c/0x258 [ 168.685305][ T7408] do_el0_svc+0x5c/0x134 [ 168.685314][ T7408] el0_svc+0x58/0x12c [ 168.685321][ T7408] el0t_64_sync_handler+0x84/0xf0 [ 168.685329][ T7408] el0t_64_sync+0x18c/0x190 [ 168.689101][ T7388] EXT4-fs (loop0): 1 orphan inode deleted [ 168.735465][ T7388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.735608][ T7388] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.835496][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 168.971341][ T4339] Bluetooth: hci4: command 0x0406 tx timeout