last executing test programs:

23.393370854s ago: executing program 3 (id=102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

23.269735061s ago: executing program 3 (id=106):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000300e00000020000000000000000000000000000000000000000000000000000003bbcd68600000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x3, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

23.251119017s ago: executing program 3 (id=107):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3a2, &(0x7f0000000340)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x37)

23.145178259s ago: executing program 3 (id=113):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x0, 0x0)

22.259591348s ago: executing program 3 (id=128):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x400, &(0x7f0000000600)=ANY=[], 0x3, 0x105fc, &(0x7f0000010600)="$eJzs3E1vG1UXAODr5E3T9i0lQizYdSSElEi1Vacfgl2BVoBEqoiPBStwbMdy648odhJThAisEcv+EVixZ8+fYIdYILFAKiry3JuqSYqSJpETJ88jjc/M9dzjc0eKojNjOQBn1kz215+FcDlcCCFMhhAuhZDvF9KWux3DayGEKyGEiWe2Qhp/OnAuhHAxhHB5mDzmLKS3vn60ufB4sHAxZb16PCsGToI3Qgjtlbi/0Y6x24jxfhqvrDfz2L6xnmJ8o/0gHXdj3Kgv5Rk2KlvnVfJ4vRHP766s9YZxuVWpDmOjuZyPr3TiB/bWG1t58gn3K6v5ca2+tFXuZj7vYTwYpPiw1495ainfl3n60O9vxTheH0zH9aw8yGO100/j3VhfrT4YxvUUe3E4VLutWl7H0gEv8hj4sNlZG2Tr9dVes9vJbpbKb5bKt4rl1W6t3q/fKFbatVs3stlGa3hasV+vtG83ut1Gq16qdttz2WyjWi2Wy9nsnfpSs9LJyuXS9dK14s25tHc1e+/ep1mrls0O4zvNzlq/2eply93VLM6Yy+ZL19+ay14vZx8vLGaLH929u7D4yed3Prv39sIH76aTdpWVzc5fm58vlq8V58tzL7jgf07k+of/okez/h3OH246Z13huAsAGD95/38hjLL//+rnR3/c+a7yq/4fToe/n0QvNGmc+v9masgP3v/X43r0/7uckP53d/8fRtP/xvVPb1v/tydh/fp/xoH+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzPpt6sf3852ZePz/NP5SGnolHRdCCBMhhCfPMRnObcs5mfJM/cf5Uztq+KUQ8gzDz5hO28UQwu20PX75+bX/70ivBAAAAJxOP21e+SF26/Fl5rgLYpTiTZuJS18cUb5CCGFq5vd9nbe3ieHLq4evKprMbxcNDjb53M6B/AbW+cNXlUs3xb45onR7yC9r/HN/Gs4/EwoxTIymGgAAYJS2dwKeqAMAAJxe3x93ARy9/Ty/y5/Dpu/ip0ec0zGkB4IXth0BAAAAY2h/38MGAAAAxlne/4/z7/8BAAAAe4u//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAv+zcTW7aQBQH8GeDW/qloqrLSr1Kd3CMHqHLLhEH6CU4Ar1CLsAZyC5HiHCExyg4IlIUxkZBv5/kj7HgzzNi82aQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6dFut5/8XP/+dm7Orz5PnbgAAAIBTttV63pxM0/hTe/1Le+lbOy4iooyIU737KN51MkdtTvXM66snNdxENAn7z3jfbh8j4le73X/t+1sAAACA67VZrmapW0+76aULYkhp0qb8/DtTXhER1fQuU1q5333PFNb8vsfxN1NaM4E1yRSWptzGudJeZNQ5TI4ORTqUg5YDAAAMotsJDNuFAAAAMKQ/R+eLC9bBwIo4LGUe1oKbf94/Lgh+6IwAAACAN6i4dAEAAABA75r+3/P/AAAA4Lql5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQp221nm+Wq9m5Obv6FX5M0pvrus5wKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8sD/vKBACYRAGe9d3JnP/w0qDxoYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzrykQAgEQRTMGf876fsfVhJ05QmECGh4VFENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXh9DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf79vMaRxUHAPzN7s42qUjXKIF6sWKhothk6y8ELz0IwYPgSTwu6aasblXaHGzJwVw8CP4HXvTaixAQpB78C3rwZI/1UkH2UMGDJ+XNj3baDXVq7Oxu/Hzgzftm8nbm+yYQ8p33AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzI5G06UcTseenncKs79fHtnM/Y37uujW4Orx2OLcdJs2gunE5/R6qyzAAAA4LBrl/V9COFmurcR+1Yvq/+Tx4rzsebfeTyPy3r+/rq/7MvaP7ZrP3zz7p0b9fL7pCGE73rj4XpzU5xrJ2uOO1ZjTPYuIX9D085+bK23d5+cpNlTT768fv2tbhYeOVjGAMB/4XTZF8FW8ln299HWaDzszzIxABZX55+/XQ6J9f9SLB57TSQGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFuT3fBiGSchhKc7d+Poxu2dzf36W4Orx8t27P2nPq9eM14iDSFsjcbDpQbnMs9O1hx36fKVDwfj8fDiQwXP/KtPCRYkaB/g42mYl1kIDhQ84l9QAAAcKmnRYl1/M93biOeSlRD++vre+v9UJQ416/8fR9dOVe9Vrf/7jc1wvj2o/l+uxGvbFz5Zu3T5ykujC4Pzw/PDj870X+m/vv7Gq/3X1uLzXM+PDWQMAADAIuoWLenerf9bK9Pr/0crcahZ///063u/Ve/VVv9Pefj1/0ecEAAAwP/YEyf++D3Z53zS7YZPB9vbF/v58c7XZ/LjDFJ9sOXpU0eKVl3/b6/MIDcAAACgcZPd5J71/3OVONRc///+hT+/ql6zXbyC2BqNh6c3Px6fa246c2t6/b+377gm/p24gekCAAAwI8tFq67/p9n+/9az5ZhWCOH55/K4U+wXqFP/v9n54mz1XtX9/y83O82501rNn0ed/f/Z2NUQOqsNJAYAAMChtFS0WP//ku5tfPDt0Xe69v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3+zPvW3CQBjH4deXRInbZIT0Fh8z0FAhWAGQkCx5BgZgIRoqWotFYAWQ4FzTGYrnaf6/4op7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7V2fvviIiCJSlynSdPt3/oyIr0i7tp1837PYX07NzyMXh+Ms52/M/8uIKKPo4xwAgN5V3eZYb+rVIO8w7yjvOG9VNvXylZ8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBWAAAA///KU19N")
mkdirat(0xffffffffffffff9c, 0x0, 0x1c4)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000002c0)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x20)
lseek(r0, 0x80000000008, 0x0)

22.029842068s ago: executing program 2 (id=132):
socket$vsock_stream(0x28, 0x1, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cc, 0x0)

22.003747716s ago: executing program 2 (id=133):
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x74, 0x1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x7, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044)

21.927469519s ago: executing program 2 (id=135):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r1 = syz_clone(0x22800211, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0xffff)
poll(&(0x7f0000000580)=[{r0, 0x280}], 0x1, 0xffffffff)
wait4(r1, 0x0, 0x8, 0x0)

21.33502726s ago: executing program 3 (id=143):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, 0xffffffffffffffff, 0x82158000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6)
write$cgroup_netprio_ifpriomap(r0, 0x0, 0xfedd)

21.029673872s ago: executing program 2 (id=144):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)

20.810106229s ago: executing program 2 (id=145):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x13)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0xff82, 0x0, 0x0, 0x7fff, 0xfe, "db2d618900"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa)

20.031590836s ago: executing program 2 (id=149):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

19.744013313s ago: executing program 32 (id=149):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.162033335s ago: executing program 33 (id=143):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, 0xffffffffffffffff, 0x82158000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6)
write$cgroup_netprio_ifpriomap(r0, 0x0, 0xfedd)

3.348730901s ago: executing program 0 (id=268):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x6, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x92}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x3, '\x00', 0xb}, {0xf, 0x4, 0xb7, '\x00', 0x8}, {0xff, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x7f, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x8}, {0x7, 0x8, 0x4}]}})
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0)

3.326255118s ago: executing program 0 (id=269):
r0 = syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="062c077685"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="208302000000179f"], 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x12, 0x2, "bf47"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

3.037564656s ago: executing program 1 (id=276):
epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {r1, 0x2cfc08c20dafc34e}], 0x2, 0x8000007)

2.552274233s ago: executing program 0 (id=285):
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x14d}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2038, 0x3000, 0xffffffff, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)

1.974364239s ago: executing program 0 (id=302):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0)

1.921135076s ago: executing program 0 (id=296):
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1.786344806s ago: executing program 1 (id=297):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

1.582566408s ago: executing program 5 (id=300):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x45, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0)

1.369052873s ago: executing program 1 (id=303):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)="99ef4b0309413a", 0x7}], 0x1, &(0x7f0000000a80)=ANY=[], 0xc8, 0x61}}], 0x1, 0x4080)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1.275119272s ago: executing program 6 (id=304):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.183982029s ago: executing program 6 (id=306):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20400}, 0x40000)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec)

1.176992092s ago: executing program 4 (id=307):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040)
connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

1.159148397s ago: executing program 6 (id=308):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

924.251048ms ago: executing program 0 (id=309):
epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {r1, 0x2cfc08c20dafc34e}], 0x2, 0x8000007)

924.112599ms ago: executing program 1 (id=310):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50)

923.970159ms ago: executing program 6 (id=311):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)

923.911128ms ago: executing program 4 (id=312):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = eventfd2(0x7, 0x801)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r2})
close_range(r0, 0xffffffffffffffff, 0x0)

792.156448ms ago: executing program 4 (id=313):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f190900000000000171250000000000017000", [0x7, 0xffffffff9673e35d]}})

641.891234ms ago: executing program 5 (id=314):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

641.751894ms ago: executing program 4 (id=315):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

639.129925ms ago: executing program 1 (id=324):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @multicast2}, 0xc)

504.267136ms ago: executing program 1 (id=316):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0})
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

316.434074ms ago: executing program 5 (id=317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008000000"], 0x7c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x70bd2b, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

269.461867ms ago: executing program 4 (id=318):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
io_setup(0x4, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x78)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

182.416164ms ago: executing program 5 (id=319):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)

100.233709ms ago: executing program 5 (id=320):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f0000002d80)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x4, 0x11, 0x9ca, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x32}}}}}, 0x32)

62.548951ms ago: executing program 6 (id=321):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0)

56.531843ms ago: executing program 4 (id=322):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000300)='r:_est/event1 ./file0:0x0 arg2=%bx', 0x22)

204.449µs ago: executing program 5 (id=323):
r0 = userfaultfd(0x80801)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00006b9000/0x2000)=nil, 0x2000})

0s ago: executing program 6 (id=325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f400038e0000000000000000100100200001267000000000100100201001001"], 0x0)

kernel console output (not intermixed with test programs):

le_permission+0x94/0xb0
[   34.844941][  T287]  iterate_dir+0x26d/0x610
[   34.849380][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   34.854437][  T287]  __se_sys_getdents64+0xf2/0x250
[   34.859485][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   34.864702][  T287]  ? __cfi_filldir64+0x10/0x10
[   34.869480][  T287]  ? __x64_sys_umount+0x12d/0x170
[   34.874529][  T287]  ? debug_smp_processor_id+0x17/0x20
[   34.879918][  T287]  __x64_sys_getdents64+0x7b/0x90
[   34.884971][  T287]  x64_sys_call+0x15c/0x9a0
[   34.889495][  T287]  do_syscall_64+0x4c/0xa0
[   34.893942][  T287]  ? clear_bhb_loop+0x30/0x80
[   34.898637][  T287]  ? clear_bhb_loop+0x30/0x80
[   34.903336][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   34.909251][  T287] RIP: 0033:0x7f7e697c6af3
[   34.913704][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   34.933338][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   34.941817][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   34.949832][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   34.957828][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   34.965828][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   34.973853][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   34.981862][  T287]  </TASK>
[   34.991450][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   35.015705][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   35.023328][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   35.033452][  T287] Call Trace:
[   35.036757][  T287]  <TASK>
[   35.039738][  T287]  __dump_stack+0x21/0x24
[   35.044101][  T287]  dump_stack_lvl+0x110/0x170
[   35.048806][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   35.053865][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   35.060664][  T287]  dump_stack+0x15/0x24
[   35.064933][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   35.070513][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   35.075660][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   35.081149][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   35.087155][  T287]  f2fs_find_data_page+0x198/0x3a0
[   35.092294][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   35.096999][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   35.102232][  T287]  f2fs_rmdir+0x3f/0x70
[   35.106433][  T287]  vfs_rmdir+0x381/0x4f0
[   35.110725][  T287]  do_rmdir+0x261/0x6b0
[   35.114915][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   35.119616][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   35.124492][  T287]  x64_sys_call+0x79f/0x9a0
[   35.129013][  T287]  do_syscall_64+0x4c/0xa0
[   35.133452][  T287]  ? clear_bhb_loop+0x30/0x80
[   35.138153][  T287]  ? clear_bhb_loop+0x30/0x80
[   35.142941][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   35.148851][  T287] RIP: 0033:0x7f7e6979d277
[   35.153288][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.172922][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   35.181368][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   35.189362][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   35.197438][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   35.205958][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   35.213952][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   35.222033][  T287]  </TASK>
[   35.249514][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   35.255796][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   35.263298][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   35.272422][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   35.273399][  T287] Call Trace:
[   35.273406][  T287]  <TASK>
[   35.286899][  T287]  __dump_stack+0x21/0x24
[   35.291287][  T287]  dump_stack_lvl+0x110/0x170
[   35.296023][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   35.301093][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   35.302525][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   35.307831][  T287]  dump_stack+0x15/0x24
[   35.319207][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   35.324802][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   35.329983][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   35.335482][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   35.341499][  T287]  f2fs_find_data_page+0x198/0x3a0
[   35.346254][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   35.346653][  T287]  f2fs_readdir+0x4a2/0x990
[   35.359253][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   35.364327][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   35.366150][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   35.369474][  T287]  ? down_read_killable+0xbc/0x110
[   35.369503][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   35.369527][  T287]  ? security_file_permission+0x94/0xb0
[   35.383932][  T472] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.388201][  T287]  iterate_dir+0x26d/0x610
[   35.388229][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   35.393830][  T472] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.400823][  T287]  __se_sys_getdents64+0xf2/0x250
[   35.400850][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   35.416270][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   35.417579][  T287]  ? __cfi_filldir64+0x10/0x10
[   35.424141][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   35.427851][  T287]  ? __x64_sys_umount+0x12d/0x170
[   35.436994][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   35.439991][  T287]  ? debug_smp_processor_id+0x17/0x20
[   35.440023][  T287]  __x64_sys_getdents64+0x7b/0x90
[   35.440048][  T287]  x64_sys_call+0x15c/0x9a0
[   35.450776][  T472] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.453148][  T287]  do_syscall_64+0x4c/0xa0
[   35.461306][  T472] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.466523][  T287]  ? clear_bhb_loop+0x30/0x80
[   35.488010][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   35.494730][  T287]  ? clear_bhb_loop+0x30/0x80
[   35.503020][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   35.507397][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   35.522724][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   35.525703][  T287] RIP: 0033:0x7f7e697c6af3
[   35.525732][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   35.535255][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   35.537958][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   35.573759][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   35.581769][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   35.589773][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   35.597778][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   35.605779][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   35.613789][  T287]  </TASK>
[   35.620000][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   35.627361][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   35.635948][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   35.644146][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   35.651643][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   35.661728][  T287] Call Trace:
[   35.665034][  T287]  <TASK>
[   35.668002][  T287]  __dump_stack+0x21/0x24
[   35.672361][  T287]  dump_stack_lvl+0x110/0x170
[   35.677062][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   35.682111][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   35.688810][  T287]  dump_stack+0x15/0x24
[   35.692986][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   35.698554][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   35.703797][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   35.709354][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   35.715399][  T287]  f2fs_find_data_page+0x198/0x3a0
[   35.720536][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   35.725235][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   35.730454][  T287]  f2fs_rmdir+0x3f/0x70
[   35.734623][  T287]  vfs_rmdir+0x381/0x4f0
[   35.738886][  T287]  do_rmdir+0x261/0x6b0
[   35.743071][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   35.747772][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   35.752653][  T287]  x64_sys_call+0x79f/0x9a0
[   35.757206][  T287]  do_syscall_64+0x4c/0xa0
[   35.761648][  T287]  ? clear_bhb_loop+0x30/0x80
[   35.766343][  T287]  ? clear_bhb_loop+0x30/0x80
[   35.771028][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   35.777040][  T287] RIP: 0033:0x7f7e6979d277
[   35.781468][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.801088][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   35.809517][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   35.817503][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   35.825487][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   35.833483][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   35.841467][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   35.849459][  T287]  </TASK>
[   35.852860][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   35.861189][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   35.868703][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   35.878772][  T287] Call Trace:
[   35.882068][  T287]  <TASK>
[   35.885007][  T287]  __dump_stack+0x21/0x24
[   35.889355][  T287]  dump_stack_lvl+0x110/0x170
[   35.894054][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   35.899092][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   35.905781][  T287]  dump_stack+0x15/0x24
[   35.909952][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   35.915520][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   35.920658][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   35.926150][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   35.932164][  T287]  f2fs_find_data_page+0x198/0x3a0
[   35.937303][  T287]  f2fs_readdir+0x4a2/0x990
[   35.941833][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   35.946876][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   35.952007][  T287]  ? down_read_killable+0xbc/0x110
[   35.957131][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   35.962697][  T287]  ? security_file_permission+0x94/0xb0
[   35.968269][  T287]  iterate_dir+0x26d/0x610
[   35.972707][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   35.977770][  T287]  __se_sys_getdents64+0xf2/0x250
[   35.982812][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   35.988038][  T287]  ? __cfi_filldir64+0x10/0x10
[   35.992820][  T287]  ? __x64_sys_umount+0x12d/0x170
[   35.997861][  T287]  ? debug_smp_processor_id+0x17/0x20
[   36.003250][  T287]  __x64_sys_getdents64+0x7b/0x90
[   36.008290][  T287]  x64_sys_call+0x15c/0x9a0
[   36.012805][  T287]  do_syscall_64+0x4c/0xa0
[   36.017241][  T287]  ? clear_bhb_loop+0x30/0x80
[   36.021955][  T287]  ? clear_bhb_loop+0x30/0x80
[   36.027090][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.032998][  T287] RIP: 0033:0x7f7e697c6af3
[   36.037426][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   36.057046][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   36.065471][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   36.073456][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   36.081445][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   36.089424][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   36.097404][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   36.105392][  T287]  </TASK>
[   36.109899][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   36.115934][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   36.123420][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   36.133592][  T287] Call Trace:
[   36.136917][  T287]  <TASK>
[   36.139880][  T287]  __dump_stack+0x21/0x24
[   36.142527][  T679] device veth0_vlan entered promiscuous mode
[   36.144253][  T287]  dump_stack_lvl+0x110/0x170
[   36.154939][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.160021][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   36.166737][  T287]  dump_stack+0x15/0x24
[   36.170938][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   36.176529][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   36.181706][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   36.187217][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   36.193255][  T287]  f2fs_find_data_page+0x198/0x3a0
[   36.198413][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   36.203139][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   36.208394][  T287]  f2fs_rmdir+0x3f/0x70
[   36.212589][  T287]  vfs_rmdir+0x381/0x4f0
[   36.216904][  T287]  do_rmdir+0x261/0x6b0
[   36.221103][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   36.225838][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   36.230726][  T287]  x64_sys_call+0x79f/0x9a0
[   36.235267][  T287]  do_syscall_64+0x4c/0xa0
[   36.239725][  T287]  ? clear_bhb_loop+0x30/0x80
[   36.244443][  T287]  ? clear_bhb_loop+0x30/0x80
[   36.249158][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.251216][  T679] device veth1_macvtap entered promiscuous mode
[   36.255089][  T287] RIP: 0033:0x7f7e6979d277
[   36.255111][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.285479][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   36.293929][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   36.301938][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   36.309936][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   36.318012][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   36.326020][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   36.334009][  T287]  </TASK>
[   36.341571][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   36.349986][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   36.354697][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   36.363913][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   36.366923][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   36.371408][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   36.371423][  T287] Call Trace:
[   36.371429][  T287]  <TASK>
[   36.371437][  T287]  __dump_stack+0x21/0x24
[   36.371505][  T287]  dump_stack_lvl+0x110/0x170
[   36.371533][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.406790][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   36.409800][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   36.409833][  T287]  dump_stack+0x15/0x24
[   36.427984][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   36.428576][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   36.428616][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   36.428645][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   36.437920][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   36.441600][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   36.441637][  T287]  f2fs_find_data_page+0x198/0x3a0
[   36.441662][  T287]  f2fs_readdir+0x4a2/0x990
[   36.451528][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   36.452256][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.488953][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   36.494110][  T287]  ? down_read_killable+0xbc/0x110
[   36.499265][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   36.504852][  T287]  ? security_file_permission+0x94/0xb0
[   36.510448][  T287]  iterate_dir+0x26d/0x610
[   36.514918][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.519990][  T287]  __se_sys_getdents64+0xf2/0x250
[   36.525060][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   36.530312][  T287]  ? __cfi_filldir64+0x10/0x10
[   36.535125][  T287]  ? __x64_sys_umount+0x12d/0x170
[   36.540209][  T287]  ? debug_smp_processor_id+0x17/0x20
[   36.545630][  T287]  __x64_sys_getdents64+0x7b/0x90
[   36.550689][  T287]  x64_sys_call+0x15c/0x9a0
[   36.555232][  T287]  do_syscall_64+0x4c/0xa0
[   36.559713][  T287]  ? clear_bhb_loop+0x30/0x80
[   36.564430][  T287]  ? clear_bhb_loop+0x30/0x80
[   36.569140][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.575072][  T287] RIP: 0033:0x7f7e697c6af3
[   36.579520][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   36.599162][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   36.607625][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   36.615630][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   36.623611][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   36.631590][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   36.639651][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   36.647637][  T287]  </TASK>
[   36.652681][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   36.658925][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   36.666439][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   36.676510][  T287] Call Trace:
[   36.679799][  T287]  <TASK>
[   36.682740][  T287]  __dump_stack+0x21/0x24
[   36.687095][  T287]  dump_stack_lvl+0x110/0x170
[   36.691796][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.696838][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   36.703541][  T287]  dump_stack+0x15/0x24
[   36.707723][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   36.713293][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   36.718428][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   36.723903][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   36.729898][  T287]  f2fs_find_data_page+0x198/0x3a0
[   36.735023][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   36.739721][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   36.744945][  T287]  f2fs_rmdir+0x3f/0x70
[   36.749120][  T287]  vfs_rmdir+0x381/0x4f0
[   36.753390][  T287]  do_rmdir+0x261/0x6b0
[   36.757565][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   36.762265][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   36.767133][  T287]  x64_sys_call+0x79f/0x9a0
[   36.771654][  T287]  do_syscall_64+0x4c/0xa0
[   36.776087][  T287]  ? clear_bhb_loop+0x30/0x80
[   36.780783][  T287]  ? clear_bhb_loop+0x30/0x80
[   36.785476][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.791392][  T287] RIP: 0033:0x7f7e6979d277
[   36.795834][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.815464][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   36.823902][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   36.831889][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   36.839875][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   36.847860][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   36.855839][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   36.863831][  T287]  </TASK>
[   36.868189][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   36.874755][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   36.882257][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   36.892334][  T287] Call Trace:
[   36.895644][  T287]  <TASK>
[   36.898586][  T287]  __dump_stack+0x21/0x24
[   36.902944][  T287]  dump_stack_lvl+0x110/0x170
[   36.907640][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.912684][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   36.919373][  T287]  dump_stack+0x15/0x24
[   36.923571][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   36.929151][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   36.934282][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   36.939771][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   36.945785][  T287]  f2fs_find_data_page+0x198/0x3a0
[   36.950959][  T287]  f2fs_readdir+0x4a2/0x990
[   36.955519][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.960568][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   36.965701][  T287]  ? down_read_killable+0xbc/0x110
[   36.970828][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   36.976392][  T287]  ? security_file_permission+0x94/0xb0
[   36.981957][  T287]  iterate_dir+0x26d/0x610
[   36.986401][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.991449][  T287]  __se_sys_getdents64+0xf2/0x250
[   36.996491][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   37.001706][  T287]  ? __cfi_filldir64+0x10/0x10
[   37.006494][  T287]  ? __x64_sys_umount+0x12d/0x170
[   37.011555][  T287]  ? debug_smp_processor_id+0x17/0x20
[   37.016945][  T287]  __x64_sys_getdents64+0x7b/0x90
[   37.022000][  T287]  x64_sys_call+0x15c/0x9a0
[   37.026531][  T287]  do_syscall_64+0x4c/0xa0
[   37.031073][  T287]  ? clear_bhb_loop+0x30/0x80
[   37.035764][  T287]  ? clear_bhb_loop+0x30/0x80
[   37.040457][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   37.046362][  T287] RIP: 0033:0x7f7e697c6af3
[   37.050795][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   37.070420][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   37.078846][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   37.086835][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   37.094834][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   37.102822][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   37.110894][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   37.119060][  T287]  </TASK>
[   37.124460][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   37.132871][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   37.140397][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   37.150483][  T287] Call Trace:
[   37.153790][  T287]  <TASK>
[   37.156737][  T287]  __dump_stack+0x21/0x24
[   37.161092][  T287]  dump_stack_lvl+0x110/0x170
[   37.165788][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   37.170831][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   37.177528][  T287]  dump_stack+0x15/0x24
[   37.181714][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   37.187299][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   37.192451][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   37.197929][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   37.204028][  T287]  f2fs_find_data_page+0x198/0x3a0
[   37.209157][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   37.213853][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   37.219076][  T287]  f2fs_rmdir+0x3f/0x70
[   37.223258][  T287]  vfs_rmdir+0x381/0x4f0
[   37.227525][  T287]  do_rmdir+0x261/0x6b0
[   37.231710][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   37.236409][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   37.241275][  T287]  x64_sys_call+0x79f/0x9a0
[   37.245792][  T287]  do_syscall_64+0x4c/0xa0
[   37.250243][  T287]  ? clear_bhb_loop+0x30/0x80
[   37.254945][  T287]  ? clear_bhb_loop+0x30/0x80
[   37.259638][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   37.265552][  T287] RIP: 0033:0x7f7e6979d277
[   37.269980][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.289603][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   37.298060][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   37.306070][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   37.314517][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   37.322531][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   37.330533][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   37.338548][  T287]  </TASK>
[   37.349641][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   37.355806][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   37.356254][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   37.363291][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   37.363305][  T287] Call Trace:
[   37.363310][  T287]  <TASK>
[   37.363317][  T287]  __dump_stack+0x21/0x24
[   37.363351][  T287]  dump_stack_lvl+0x110/0x170
[   37.363379][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   37.363407][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   37.363432][  T287]  dump_stack+0x15/0x24
[   37.411929][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   37.417512][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   37.422649][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   37.428161][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   37.434164][  T287]  f2fs_find_data_page+0x198/0x3a0
[   37.439301][  T287]  f2fs_readdir+0x4a2/0x990
[   37.443885][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   37.448975][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   37.454114][  T287]  ? down_read_killable+0xbc/0x110
[   37.459249][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   37.464830][  T287]  ? security_file_permission+0x94/0xb0
[   37.470448][  T287]  iterate_dir+0x26d/0x610
[   37.474910][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   37.479963][  T287]  __se_sys_getdents64+0xf2/0x250
[   37.485011][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   37.490238][  T287]  ? __cfi_filldir64+0x10/0x10
[   37.495049][  T287]  ? __x64_sys_umount+0x12d/0x170
[   37.500112][  T287]  ? debug_smp_processor_id+0x17/0x20
[   37.505512][  T287]  __x64_sys_getdents64+0x7b/0x90
[   37.510568][  T287]  x64_sys_call+0x15c/0x9a0
[   37.515085][  T287]  do_syscall_64+0x4c/0xa0
[   37.519516][  T287]  ? clear_bhb_loop+0x30/0x80
[   37.524210][  T287]  ? clear_bhb_loop+0x30/0x80
[   37.528903][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   37.534815][  T287] RIP: 0033:0x7f7e697c6af3
[   37.539240][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   37.558859][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   37.567289][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   37.575360][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   37.583347][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   37.591329][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   37.599309][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   37.607733][  T287]  </TASK>
[   37.615374][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   37.628278][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   37.636685][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   37.645224][   T28] audit: type=1400 audit(1790269110.738:289): avc:  denied  { mounton } for  pid=729 comm="syz.4.167" path="/proc/80/task" dev="proc" ino=17333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   37.649916][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   37.673671][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   37.681162][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   37.691393][  T287] Call Trace:
[   37.694688][  T287]  <TASK>
[   37.697615][  T287]  __dump_stack+0x21/0x24
[   37.701967][  T287]  dump_stack_lvl+0x110/0x170
[   37.706656][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   37.711689][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   37.718376][  T287]  dump_stack+0x15/0x24
[   37.722538][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   37.728177][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   37.733323][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   37.738820][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   37.744824][  T287]  f2fs_find_data_page+0x198/0x3a0
[   37.749950][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   37.754655][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   37.759863][  T287]  f2fs_rmdir+0x3f/0x70
[   37.764022][  T287]  vfs_rmdir+0x381/0x4f0
[   37.768281][  T287]  do_rmdir+0x261/0x6b0
[   37.772477][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   37.777164][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   37.782025][  T287]  x64_sys_call+0x79f/0x9a0
[   37.786529][  T287]  do_syscall_64+0x4c/0xa0
[   37.790949][  T287]  ? clear_bhb_loop+0x30/0x80
[   37.795628][  T287]  ? clear_bhb_loop+0x30/0x80
[   37.800304][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   37.806207][  T287] RIP: 0033:0x7f7e6979d277
[   37.810635][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.830502][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   37.838921][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   37.846896][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   37.854862][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   37.862830][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   37.870807][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   37.878800][  T287]  </TASK>
[   37.891019][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   37.897285][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   37.904799][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   37.914888][  T287] Call Trace:
[   37.918191][  T287]  <TASK>
[   37.921150][  T287]  __dump_stack+0x21/0x24
[   37.925532][  T287]  dump_stack_lvl+0x110/0x170
[   37.930261][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   37.935328][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   37.942039][  T287]  dump_stack+0x15/0x24
[   37.946234][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   37.951615][  T733] loop0: detected capacity change from 0 to 1024
[   37.951821][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   37.963281][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   37.968784][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   37.974813][  T287]  f2fs_find_data_page+0x198/0x3a0
[   37.979973][  T287]  f2fs_readdir+0x4a2/0x990
[   37.984522][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   37.989566][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   37.994701][  T287]  ? down_read_killable+0xbc/0x110
[   37.999828][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   38.005391][  T287]  ? security_file_permission+0x94/0xb0
[   38.010961][  T287]  iterate_dir+0x26d/0x610
[   38.015406][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   38.020453][  T287]  __se_sys_getdents64+0xf2/0x250
[   38.025497][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   38.030714][  T287]  ? __cfi_filldir64+0x10/0x10
[   38.035490][  T287]  ? __x64_sys_umount+0x12d/0x170
[   38.040569][  T287]  ? debug_smp_processor_id+0x17/0x20
[   38.045961][  T287]  __x64_sys_getdents64+0x7b/0x90
[   38.051035][  T287]  x64_sys_call+0x15c/0x9a0
[   38.055561][  T287]  do_syscall_64+0x4c/0xa0
[   38.060025][  T287]  ? clear_bhb_loop+0x30/0x80
[   38.064715][  T287]  ? clear_bhb_loop+0x30/0x80
[   38.069404][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   38.075315][  T287] RIP: 0033:0x7f7e697c6af3
[   38.079740][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   38.099363][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   38.107790][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   38.115773][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   38.123779][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   38.131769][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   38.139768][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   38.147759][  T287]  </TASK>
[   38.157354][   T28] audit: type=1400 audit(1790269111.248:290): avc:  denied  { mounton } for  pid=679 comm="syz-executor" path="/root/syzkaller.rGgVXI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   38.168312][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   38.191444][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   38.198957][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   38.209046][  T287] Call Trace:
[   38.212367][  T287]  <TASK>
[   38.215328][  T287]  __dump_stack+0x21/0x24
[   38.219708][  T287]  dump_stack_lvl+0x110/0x170
[   38.224448][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   38.229556][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   38.236289][  T287]  dump_stack+0x15/0x24
[   38.240501][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   38.246112][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   38.251277][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   38.256786][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   38.257511][   T28] audit: type=1326 audit(1790269111.338:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=734 comm="syz.5.150" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff35019e159 code=0x0
[   38.262815][  T287]  f2fs_find_data_page+0x198/0x3a0
[   38.262848][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   38.297038][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   38.302289][  T287]  f2fs_rmdir+0x3f/0x70
[   38.306473][  T287]  vfs_rmdir+0x381/0x4f0
[   38.310734][  T287]  do_rmdir+0x261/0x6b0
[   38.314939][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   38.319665][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   38.324533][  T287]  x64_sys_call+0x79f/0x9a0
[   38.329050][  T287]  do_syscall_64+0x4c/0xa0
[   38.333481][  T287]  ? clear_bhb_loop+0x30/0x80
[   38.338158][  T287]  ? clear_bhb_loop+0x30/0x80
[   38.342837][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   38.348742][  T287] RIP: 0033:0x7f7e6979d277
[   38.353190][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.373014][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   38.381471][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   38.389458][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   38.397456][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   38.405442][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   38.413434][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   38.421420][  T287]  </TASK>
[   38.425780][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   38.434323][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   38.441851][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   38.450923][  T733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   38.451975][  T287] Call Trace:
[   38.451983][  T287]  <TASK>
[   38.466667][  T287]  __dump_stack+0x21/0x24
[   38.471089][  T287]  dump_stack_lvl+0x110/0x170
[   38.475814][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   38.480894][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   38.487626][  T287]  dump_stack+0x15/0x24
[   38.491911][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   38.497563][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   38.502725][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   38.508230][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   38.514264][  T287]  f2fs_find_data_page+0x198/0x3a0
[   38.519435][  T287]  f2fs_readdir+0x4a2/0x990
[   38.524016][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   38.529099][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   38.534259][  T287]  ? down_read_killable+0xbc/0x110
[   38.539419][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   38.545014][  T287]  ? security_file_permission+0x94/0xb0
[   38.550609][  T287]  iterate_dir+0x26d/0x610
[   38.555070][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   38.560146][  T287]  __se_sys_getdents64+0xf2/0x250
[   38.565210][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   38.570456][  T287]  ? __cfi_filldir64+0x10/0x10
[   38.575265][  T287]  ? __x64_sys_umount+0x12d/0x170
[   38.580333][  T287]  ? debug_smp_processor_id+0x17/0x20
[   38.585748][  T287]  __x64_sys_getdents64+0x7b/0x90
[   38.590820][  T287]  x64_sys_call+0x15c/0x9a0
[   38.595364][  T287]  do_syscall_64+0x4c/0xa0
[   38.599844][  T287]  ? clear_bhb_loop+0x30/0x80
[   38.604648][  T287]  ? clear_bhb_loop+0x30/0x80
[   38.609385][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   38.615315][  T287] RIP: 0033:0x7f7e697c6af3
[   38.619759][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   38.624735][   T28] audit: type=1400 audit(1790269111.658:292): avc:  denied  { setattr } for  pid=732 comm="syz.0.168" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.639395][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   38.639424][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   38.639441][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   38.639454][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   38.639467][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   38.639480][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   38.709822][  T287]  </TASK>
[   38.714939][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   38.721628][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   38.729161][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   38.739257][  T287] Call Trace:
[   38.742553][  T287]  <TASK>
[   38.745497][  T287]  __dump_stack+0x21/0x24
[   38.749851][  T287]  dump_stack_lvl+0x110/0x170
[   38.754579][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   38.759731][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   38.766451][  T287]  dump_stack+0x15/0x24
[   38.770678][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   38.776274][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   38.781419][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   38.786901][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   38.792920][  T287]  f2fs_find_data_page+0x198/0x3a0
[   38.798055][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   38.802758][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   38.807984][  T287]  f2fs_rmdir+0x3f/0x70
[   38.812156][  T287]  vfs_rmdir+0x381/0x4f0
[   38.816419][  T287]  do_rmdir+0x261/0x6b0
[   38.820595][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   38.825296][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   38.830166][  T287]  x64_sys_call+0x79f/0x9a0
[   38.834685][  T287]  do_syscall_64+0x4c/0xa0
[   38.839117][  T287]  ? clear_bhb_loop+0x30/0x80
[   38.843833][  T287]  ? clear_bhb_loop+0x30/0x80
[   38.848524][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   38.854444][  T287] RIP: 0033:0x7f7e6979d277
[   38.858878][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.878531][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   38.886961][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   38.894961][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   38.902966][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   38.910952][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   38.918937][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   38.927100][  T287]  </TASK>
[   38.934269][  T288] EXT4-fs (loop0): unmounting filesystem.
[   38.942060][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   38.948273][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   38.955775][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   38.965871][  T287] Call Trace:
[   38.969198][  T287]  <TASK>
[   38.972154][  T287]  __dump_stack+0x21/0x24
[   38.976526][  T287]  dump_stack_lvl+0x110/0x170
[   38.981322][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   38.986385][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   38.993098][  T287]  dump_stack+0x15/0x24
[   38.997300][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   39.002910][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   39.008083][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   39.013583][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   39.019603][  T287]  f2fs_find_data_page+0x198/0x3a0
[   39.024752][  T287]  f2fs_readdir+0x4a2/0x990
[   39.029316][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   39.034391][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   39.039536][  T287]  ? down_read_killable+0xbc/0x110
[   39.044668][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   39.050233][  T287]  ? security_file_permission+0x94/0xb0
[   39.055797][  T287]  iterate_dir+0x26d/0x610
[   39.060226][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   39.065277][  T287]  __se_sys_getdents64+0xf2/0x250
[   39.070323][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   39.075533][  T287]  ? __cfi_filldir64+0x10/0x10
[   39.080312][  T287]  ? __x64_sys_umount+0x12d/0x170
[   39.085361][  T287]  ? debug_smp_processor_id+0x17/0x20
[   39.090757][  T287]  __x64_sys_getdents64+0x7b/0x90
[   39.095821][  T287]  x64_sys_call+0x15c/0x9a0
[   39.100350][  T287]  do_syscall_64+0x4c/0xa0
[   39.104783][  T287]  ? clear_bhb_loop+0x30/0x80
[   39.109473][  T287]  ? clear_bhb_loop+0x30/0x80
[   39.114162][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   39.120070][  T287] RIP: 0033:0x7f7e697c6af3
[   39.124512][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   39.144135][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   39.152579][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   39.160606][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   39.168607][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   39.176614][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   39.184594][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   39.192588][  T287]  </TASK>
[   39.197755][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   39.232825][   T28] audit: type=1400 audit(1790269112.328:293): avc:  denied  { name_bind } for  pid=747 comm="syz.0.171" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   39.256541][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   39.260878][  T746] loop1: detected capacity change from 0 to 512
[   39.264059][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   39.264074][  T287] Call Trace:
[   39.264080][  T287]  <TASK>
[   39.264087][  T287]  __dump_stack+0x21/0x24
[   39.291007][  T287]  dump_stack_lvl+0x110/0x170
[   39.295734][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   39.300796][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   39.307509][  T287]  dump_stack+0x15/0x24
[   39.311685][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   39.317255][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   39.322382][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   39.327862][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   39.333861][  T287]  f2fs_find_data_page+0x198/0x3a0
[   39.338990][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   39.343688][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   39.348911][  T287]  f2fs_rmdir+0x3f/0x70
[   39.353103][  T287]  vfs_rmdir+0x381/0x4f0
[   39.357385][  T287]  do_rmdir+0x261/0x6b0
[   39.361561][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   39.366255][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   39.371126][  T287]  x64_sys_call+0x79f/0x9a0
[   39.375648][  T287]  do_syscall_64+0x4c/0xa0
[   39.380089][  T287]  ? clear_bhb_loop+0x30/0x80
[   39.384797][  T287]  ? clear_bhb_loop+0x30/0x80
[   39.389496][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   39.395426][  T287] RIP: 0033:0x7f7e6979d277
[   39.399861][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.420087][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   39.428536][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   39.436521][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   39.444506][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   39.452516][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   39.460499][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   39.468487][  T287]  </TASK>
[   39.481445][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   39.487534][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   39.495055][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   39.505128][  T287] Call Trace:
[   39.508439][  T287]  <TASK>
[   39.511390][  T287]  __dump_stack+0x21/0x24
[   39.515746][  T287]  dump_stack_lvl+0x110/0x170
[   39.520462][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   39.525504][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   39.532197][  T287]  dump_stack+0x15/0x24
[   39.536392][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   39.541983][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   39.547119][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   39.552593][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   39.558592][  T287]  f2fs_find_data_page+0x198/0x3a0
[   39.563718][  T287]  f2fs_readdir+0x4a2/0x990
[   39.568243][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   39.573299][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   39.578432][  T287]  ? down_read_killable+0xbc/0x110
[   39.583565][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   39.589125][  T287]  ? security_file_permission+0x94/0xb0
[   39.594689][  T287]  iterate_dir+0x26d/0x610
[   39.599118][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   39.604159][  T287]  __se_sys_getdents64+0xf2/0x250
[   39.609200][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   39.614412][  T287]  ? __cfi_filldir64+0x10/0x10
[   39.619280][  T287]  ? __x64_sys_umount+0x12d/0x170
[   39.624325][  T287]  ? debug_smp_processor_id+0x17/0x20
[   39.629717][  T287]  __x64_sys_getdents64+0x7b/0x90
[   39.634765][  T287]  x64_sys_call+0x15c/0x9a0
[   39.639284][  T287]  do_syscall_64+0x4c/0xa0
[   39.643719][  T287]  ? clear_bhb_loop+0x30/0x80
[   39.648411][  T287]  ? clear_bhb_loop+0x30/0x80
[   39.653114][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   39.659019][  T287] RIP: 0033:0x7f7e697c6af3
[   39.663446][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   39.683151][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   39.691578][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   39.699568][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   39.707556][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   39.715544][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   39.723551][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   39.731627][  T287]  </TASK>
[   39.735026][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   39.741282][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   39.748782][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   39.758872][  T287] Call Trace:
[   39.762229][  T287]  <TASK>
[   39.765197][  T287]  __dump_stack+0x21/0x24
[   39.769572][  T287]  dump_stack_lvl+0x110/0x170
[   39.774296][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   39.779366][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   39.786083][  T287]  dump_stack+0x15/0x24
[   39.790288][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   39.795924][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   39.800059][   T28] audit: type=1400 audit(1790269112.838:294): avc:  denied  { read write } for  pid=754 comm="syz.5.175" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   39.801087][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   39.830798][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   39.836837][  T287]  f2fs_find_data_page+0x198/0x3a0
[   39.842005][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   39.846720][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   39.851954][  T287]  f2fs_rmdir+0x3f/0x70
[   39.856150][  T287]  vfs_rmdir+0x381/0x4f0
[   39.860436][  T287]  do_rmdir+0x261/0x6b0
[   39.864634][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   39.869353][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   39.874248][  T287]  x64_sys_call+0x79f/0x9a0
[   39.878793][  T287]  do_syscall_64+0x4c/0xa0
[   39.883256][  T287]  ? clear_bhb_loop+0x30/0x80
[   39.887963][  T287]  ? clear_bhb_loop+0x30/0x80
[   39.892683][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   39.898617][  T287] RIP: 0033:0x7f7e6979d277
[   39.903107][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.903945][   T28] audit: type=1400 audit(1790269112.838:295): avc:  denied  { open } for  pid=754 comm="syz.5.175" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   39.922742][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   39.922768][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   39.922783][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   39.922797][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   39.922810][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   39.975219][  T746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   39.979317][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   39.979344][  T287]  </TASK>
[   39.986212][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   40.007902][  T746] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.014749][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   40.031173][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   40.041252][  T287] Call Trace:
[   40.044542][  T287]  <TASK>
[   40.047484][  T287]  __dump_stack+0x21/0x24
[   40.051851][  T287]  dump_stack_lvl+0x110/0x170
[   40.056552][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   40.061599][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   40.068285][  T287]  dump_stack+0x15/0x24
[   40.072472][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   40.078044][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   40.083182][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   40.088660][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   40.094660][  T287]  f2fs_find_data_page+0x198/0x3a0
[   40.099812][  T287]  f2fs_readdir+0x4a2/0x990
[   40.104347][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   40.109392][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   40.114527][  T287]  ? down_read_killable+0xbc/0x110
[   40.119658][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   40.125227][  T287]  ? security_file_permission+0x94/0xb0
[   40.130822][  T287]  iterate_dir+0x26d/0x610
[   40.135259][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   40.140306][  T287]  __se_sys_getdents64+0xf2/0x250
[   40.145348][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   40.150562][  T287]  ? __cfi_filldir64+0x10/0x10
[   40.155393][  T287]  ? __x64_sys_umount+0x12d/0x170
[   40.160467][  T287]  ? debug_smp_processor_id+0x17/0x20
[   40.165872][  T287]  __x64_sys_getdents64+0x7b/0x90
[   40.170949][  T287]  x64_sys_call+0x15c/0x9a0
[   40.175475][  T287]  do_syscall_64+0x4c/0xa0
[   40.179921][  T287]  ? clear_bhb_loop+0x30/0x80
[   40.184631][  T287]  ? clear_bhb_loop+0x30/0x80
[   40.189329][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   40.195501][  T287] RIP: 0033:0x7f7e697c6af3
[   40.199934][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   40.219557][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   40.227997][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   40.235986][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   40.243983][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   40.251976][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   40.259964][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   40.268060][  T287]  </TASK>
[   40.271798][   T43] device bridge_slave_1 left promiscuous mode
[   40.277997][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.299596][   T28] audit: type=1400 audit(1790269113.388:296): avc:  denied  { mount } for  pid=762 comm="syz.5.177" name="/" dev="configfs" ino=13115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   40.354483][   T43] device bridge_slave_0 left promiscuous mode
[   40.368627][   T28] audit: type=1400 audit(1790269113.398:297): avc:  denied  { search } for  pid=762 comm="syz.5.177" name="/" dev="configfs" ino=13115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.370327][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.398102][  T773] loop4: detected capacity change from 0 to 128
[   40.405823][  T773] FAT-fs (loop4): bogus sectors per cluster 0
[   40.412759][   T28] audit: type=1400 audit(1790269113.398:298): avc:  denied  { search } for  pid=762 comm="syz.5.177" name="/" dev="configfs" ino=13115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.436878][  T773] FAT-fs (loop4): Can't find a valid FAT filesystem
[   40.439187][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   40.450881][   T43] device veth1_macvtap left promiscuous mode
[   40.457038][   T43] device veth0_vlan left promiscuous mode
[   40.459355][   T28] audit: type=1400 audit(1790269113.398:299): avc:  denied  { read } for  pid=762 comm="syz.5.177" name="/" dev="configfs" ino=13115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.464744][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   40.485627][  T746] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, 
[   40.492076][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   40.492091][  T287] Call Trace:
[   40.492097][  T287]  <TASK>
[   40.492105][  T287]  __dump_stack+0x21/0x24
[   40.492140][  T287]  dump_stack_lvl+0x110/0x170
[   40.500505][  T746] block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   40.510454][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   40.514018][   T28] audit: type=1400 audit(1790269113.398:300): avc:  denied  { open } for  pid=762 comm="syz.5.177" path="/" dev="configfs" ino=13115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.516716][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   40.516746][  T287]  dump_stack+0x15/0x24
[   40.521194][   T28] audit: type=1400 audit(1790269113.398:301): avc:  denied  { setattr } for  pid=762 comm="syz.5.177" name="/" dev="configfs" ino=13115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.525743][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   40.545016][  T746] EXT4-fs (loop1): Remounting filesystem read-only
[   40.560993][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   40.561037][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   40.616700][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   40.622735][  T287]  f2fs_find_data_page+0x198/0x3a0
[   40.627901][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   40.632621][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   40.637886][  T287]  f2fs_rmdir+0x3f/0x70
[   40.642121][  T287]  vfs_rmdir+0x381/0x4f0
[   40.646409][  T287]  do_rmdir+0x261/0x6b0
[   40.650631][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   40.655390][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   40.660280][  T287]  x64_sys_call+0x79f/0x9a0
[   40.664872][  T287]  do_syscall_64+0x4c/0xa0
[   40.669322][  T287]  ? clear_bhb_loop+0x30/0x80
[   40.674005][  T287]  ? clear_bhb_loop+0x30/0x80
[   40.678709][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   40.684622][  T287] RIP: 0033:0x7f7e6979d277
[   40.689037][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.708662][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   40.717084][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   40.725063][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   40.733132][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   40.741108][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   40.749083][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   40.757095][  T287]  </TASK>
[   40.762786][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   40.768886][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   40.776372][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   40.786582][  T287] Call Trace:
[   40.789890][  T287]  <TASK>
[   40.792843][  T287]  __dump_stack+0x21/0x24
[   40.797219][  T287]  dump_stack_lvl+0x110/0x170
[   40.801951][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   40.807058][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   40.813775][  T287]  dump_stack+0x15/0x24
[   40.818010][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   40.823705][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   40.828864][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   40.834375][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   40.840440][  T287]  f2fs_find_data_page+0x198/0x3a0
[   40.845600][  T287]  f2fs_readdir+0x4a2/0x990
[   40.850166][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   40.855238][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   40.860399][  T287]  ? down_read_killable+0xbc/0x110
[   40.865557][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   40.871241][  T287]  ? security_file_permission+0x94/0xb0
[   40.875607][  T780] input: syz1 as /devices/virtual/input/input7
[   40.876923][  T287]  iterate_dir+0x26d/0x610
[   40.887520][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   40.892615][  T287]  __se_sys_getdents64+0xf2/0x250
[   40.897703][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   40.902969][  T287]  ? __cfi_filldir64+0x10/0x10
[   40.907811][  T287]  ? debug_smp_processor_id+0x17/0x20
[   40.913238][  T287]  __x64_sys_getdents64+0x7b/0x90
[   40.918300][  T287]  x64_sys_call+0x15c/0x9a0
[   40.922846][  T287]  do_syscall_64+0x4c/0xa0
[   40.927306][  T287]  ? clear_bhb_loop+0x30/0x80
[   40.932027][  T287]  ? clear_bhb_loop+0x30/0x80
[   40.936749][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   40.939635][  T782] loop4: detected capacity change from 0 to 256
[   40.942718][  T287] RIP: 0033:0x7f7e697c6af3
[   40.942748][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   40.966823][  T782] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001043e, chksum : 0xb50cf9ee, utbl_chksum : 0xe619d30d)
[   40.973114][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   40.973142][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   40.973158][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   40.987653][  T782] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x0008ffff)
[   40.993576][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   40.993598][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   40.993611][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   40.993632][  T287]  </TASK>
[   41.003322][  T782] exFAT-fs (loop4): failed to initialize root inode
[   41.012018][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   41.060535][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   41.063575][  T289] EXT4-fs (loop1): unmounting filesystem.
[   41.068071][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   41.068086][  T287] Call Trace:
[   41.068093][  T287]  <TASK>
[   41.068099][  T287]  __dump_stack+0x21/0x24
[   41.068133][  T287]  dump_stack_lvl+0x110/0x170
[   41.068160][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   41.068187][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   41.068211][  T287]  dump_stack+0x15/0x24
[   41.068237][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   41.068269][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   41.068297][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   41.131341][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   41.137352][  T287]  f2fs_find_data_page+0x198/0x3a0
[   41.142481][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   41.147184][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   41.152429][  T287]  f2fs_rmdir+0x3f/0x70
[   41.156607][  T287]  vfs_rmdir+0x381/0x4f0
[   41.160869][  T287]  do_rmdir+0x261/0x6b0
[   41.165050][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   41.169773][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   41.174676][  T287]  x64_sys_call+0x79f/0x9a0
[   41.179217][  T287]  do_syscall_64+0x4c/0xa0
[   41.183684][  T287]  ? clear_bhb_loop+0x30/0x80
[   41.188469][  T287]  ? clear_bhb_loop+0x30/0x80
[   41.193169][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   41.199078][  T287] RIP: 0033:0x7f7e6979d277
[   41.203506][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.223470][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   41.231904][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   41.239888][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   41.247899][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   41.255887][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   41.263877][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   41.271870][  T287]  </TASK>
[   41.277272][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   41.283430][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   41.291016][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   41.301139][  T287] Call Trace:
[   41.304458][  T287]  <TASK>
[   41.307422][  T287]  __dump_stack+0x21/0x24
[   41.311801][  T287]  dump_stack_lvl+0x110/0x170
[   41.316624][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   41.321712][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   41.328986][  T287]  dump_stack+0x15/0x24
[   41.333192][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   41.338871][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   41.344060][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   41.349688][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   41.355722][  T287]  f2fs_find_data_page+0x198/0x3a0
[   41.360884][  T287]  f2fs_readdir+0x4a2/0x990
[   41.365615][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   41.370715][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   41.375867][  T287]  ? down_read_killable+0xbc/0x110
[   41.381048][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   41.386639][  T287]  ? security_file_permission+0x94/0xb0
[   41.392251][  T287]  iterate_dir+0x26d/0x610
[   41.396747][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   41.401912][  T287]  __se_sys_getdents64+0xf2/0x250
[   41.406984][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   41.412525][  T287]  ? __cfi_filldir64+0x10/0x10
[   41.417351][  T287]  ? debug_smp_processor_id+0x17/0x20
[   41.422812][  T287]  __x64_sys_getdents64+0x7b/0x90
[   41.427995][  T287]  x64_sys_call+0x15c/0x9a0
[   41.432535][  T287]  do_syscall_64+0x4c/0xa0
[   41.437035][  T287]  ? clear_bhb_loop+0x30/0x80
[   41.441752][  T287]  ? clear_bhb_loop+0x30/0x80
[   41.446560][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   41.452512][  T287] RIP: 0033:0x7f7e697c6af3
[   41.456960][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   41.476611][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   41.485068][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   41.493107][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   41.501111][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   41.509125][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   41.517133][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   41.525159][  T287]  </TASK>
[   41.530989][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   41.537077][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   41.544564][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   41.554659][  T287] Call Trace:
[   41.557973][  T287]  <TASK>
[   41.561026][  T287]  __dump_stack+0x21/0x24
[   41.565405][  T287]  dump_stack_lvl+0x110/0x170
[   41.570181][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   41.575254][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   41.581980][  T287]  dump_stack+0x15/0x24
[   41.586216][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   41.591823][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   41.597005][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   41.602545][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   41.608589][  T287]  f2fs_find_data_page+0x198/0x3a0
[   41.613794][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   41.618538][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   41.623795][  T287]  f2fs_rmdir+0x3f/0x70
[   41.627997][  T287]  vfs_rmdir+0x381/0x4f0
[   41.632276][  T287]  do_rmdir+0x261/0x6b0
[   41.636470][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   41.641195][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   41.646086][  T287]  x64_sys_call+0x79f/0x9a0
[   41.650642][  T287]  do_syscall_64+0x4c/0xa0
[   41.655141][  T287]  ? clear_bhb_loop+0x30/0x80
[   41.659861][  T287]  ? clear_bhb_loop+0x30/0x80
[   41.664673][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   41.670690][  T287] RIP: 0033:0x7f7e6979d277
[   41.675176][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.694995][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   41.703503][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   41.711570][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   41.719585][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   41.727606][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   41.735627][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   41.743639][  T287]  </TASK>
[   41.749044][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   41.755120][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   41.762613][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   41.772699][  T287] Call Trace:
[   41.776007][  T287]  <TASK>
[   41.778971][  T287]  __dump_stack+0x21/0x24
[   41.783350][  T287]  dump_stack_lvl+0x110/0x170
[   41.788067][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   41.793139][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   41.799859][  T287]  dump_stack+0x15/0x24
[   41.804069][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   41.809671][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   41.814842][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   41.820357][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   41.826396][  T287]  f2fs_find_data_page+0x198/0x3a0
[   41.831562][  T287]  f2fs_readdir+0x4a2/0x990
[   41.836121][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   41.841178][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   41.846315][  T287]  ? down_read_killable+0xbc/0x110
[   41.851467][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   41.857033][  T287]  ? security_file_permission+0x94/0xb0
[   41.862607][  T287]  iterate_dir+0x26d/0x610
[   41.867134][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   41.872270][  T287]  __se_sys_getdents64+0xf2/0x250
[   41.877319][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   41.882533][  T287]  ? __cfi_filldir64+0x10/0x10
[   41.887333][  T287]  ? __x64_sys_umount+0x12d/0x170
[   41.892382][  T287]  ? debug_smp_processor_id+0x17/0x20
[   41.897949][  T287]  __x64_sys_getdents64+0x7b/0x90
[   41.903001][  T287]  x64_sys_call+0x15c/0x9a0
[   41.907527][  T287]  do_syscall_64+0x4c/0xa0
[   41.911970][  T287]  ? clear_bhb_loop+0x30/0x80
[   41.916684][  T287]  ? clear_bhb_loop+0x30/0x80
[   41.921383][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   41.927402][  T287] RIP: 0033:0x7f7e697c6af3
[   41.931867][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   41.951592][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   41.960046][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   41.968039][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   41.976033][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   41.984024][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   41.992008][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   42.000006][  T287]  </TASK>
[   42.005508][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   42.011654][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   42.019148][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   42.029371][  T287] Call Trace:
[   42.032684][  T287]  <TASK>
[   42.035651][  T287]  __dump_stack+0x21/0x24
[   42.040026][  T287]  dump_stack_lvl+0x110/0x170
[   42.044752][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.049825][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   42.056540][  T287]  dump_stack+0x15/0x24
[   42.060738][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   42.066337][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   42.071494][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   42.076998][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   42.083023][  T287]  f2fs_find_data_page+0x198/0x3a0
[   42.088185][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   42.092911][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   42.098163][  T287]  f2fs_rmdir+0x3f/0x70
[   42.102359][  T287]  vfs_rmdir+0x381/0x4f0
[   42.106653][  T287]  do_rmdir+0x261/0x6b0
[   42.110859][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   42.115587][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   42.120492][  T287]  x64_sys_call+0x79f/0x9a0
[   42.125042][  T287]  do_syscall_64+0x4c/0xa0
[   42.129532][  T287]  ? clear_bhb_loop+0x30/0x80
[   42.134250][  T287]  ? clear_bhb_loop+0x30/0x80
[   42.138970][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.144902][  T287] RIP: 0033:0x7f7e6979d277
[   42.149356][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.169000][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   42.177454][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   42.185465][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   42.193475][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   42.201486][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   42.209513][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   42.217529][  T287]  </TASK>
[   42.228419][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   42.263454][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   42.270988][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   42.281085][  T287] Call Trace:
[   42.284394][  T287]  <TASK>
[   42.287352][  T287]  __dump_stack+0x21/0x24
[   42.291728][  T287]  dump_stack_lvl+0x110/0x170
[   42.296448][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.301517][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   42.308242][  T287]  dump_stack+0x15/0x24
[   42.312453][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   42.318049][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   42.323213][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   42.328716][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   42.334762][  T287]  f2fs_find_data_page+0x198/0x3a0
[   42.339895][  T287]  f2fs_readdir+0x4a2/0x990
[   42.344435][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   42.349488][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   42.354631][  T287]  ? down_read_killable+0xbc/0x110
[   42.359761][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   42.365325][  T287]  ? security_file_permission+0x94/0xb0
[   42.370901][  T287]  iterate_dir+0x26d/0x610
[   42.375336][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   42.380384][  T287]  __se_sys_getdents64+0xf2/0x250
[   42.385425][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   42.390646][  T287]  ? __cfi_filldir64+0x10/0x10
[   42.395427][  T287]  ? debug_smp_processor_id+0x17/0x20
[   42.400813][  T287]  __x64_sys_getdents64+0x7b/0x90
[   42.405854][  T287]  x64_sys_call+0x15c/0x9a0
[   42.410383][  T287]  do_syscall_64+0x4c/0xa0
[   42.414839][  T287]  ? clear_bhb_loop+0x30/0x80
[   42.419550][  T287]  ? clear_bhb_loop+0x30/0x80
[   42.424294][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.430208][  T287] RIP: 0033:0x7f7e697c6af3
[   42.434635][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   42.454336][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   42.463499][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   42.471531][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   42.479568][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   42.487561][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   42.495551][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   42.503545][  T287]  </TASK>
[   42.509407][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   42.515467][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   42.522962][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   42.533035][  T287] Call Trace:
[   42.536331][  T287]  <TASK>
[   42.539274][  T287]  __dump_stack+0x21/0x24
[   42.543628][  T287]  dump_stack_lvl+0x110/0x170
[   42.548325][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.553367][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   42.560061][  T287]  dump_stack+0x15/0x24
[   42.564242][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   42.569833][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   42.574970][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   42.580446][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   42.586449][  T287]  f2fs_find_data_page+0x198/0x3a0
[   42.591578][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   42.596283][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   42.601506][  T287]  f2fs_rmdir+0x3f/0x70
[   42.605683][  T287]  vfs_rmdir+0x381/0x4f0
[   42.609952][  T287]  do_rmdir+0x261/0x6b0
[   42.614127][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   42.618829][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   42.623786][  T287]  x64_sys_call+0x79f/0x9a0
[   42.628331][  T287]  do_syscall_64+0x4c/0xa0
[   42.632772][  T287]  ? clear_bhb_loop+0x30/0x80
[   42.637488][  T287]  ? clear_bhb_loop+0x30/0x80
[   42.642189][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.648094][  T287] RIP: 0033:0x7f7e6979d277
[   42.652534][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.672175][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   42.680602][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   42.688589][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   42.696575][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   42.704556][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   42.712547][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   42.720534][  T287]  </TASK>
[   42.755839][  T798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.191'.
[   42.768141][  T798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.191'.
[   42.782759][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   42.788945][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   42.796468][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   42.806553][  T287] Call Trace:
[   42.809892][  T287]  <TASK>
[   42.812850][  T287]  __dump_stack+0x21/0x24
[   42.817231][  T287]  dump_stack_lvl+0x110/0x170
[   42.821948][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.827045][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   42.833761][  T287]  dump_stack+0x15/0x24
[   42.837957][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   42.843950][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   42.849104][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   42.854603][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   42.860635][  T287]  f2fs_find_data_page+0x198/0x3a0
[   42.865804][  T287]  f2fs_readdir+0x4a2/0x990
[   42.870360][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   42.875429][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   42.880578][  T287]  ? down_read_killable+0xbc/0x110
[   42.886076][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   42.891673][  T287]  ? security_file_permission+0x94/0xb0
[   42.897262][  T287]  iterate_dir+0x26d/0x610
[   42.901708][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   42.906757][  T287]  __se_sys_getdents64+0xf2/0x250
[   42.911800][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   42.917014][  T287]  ? __cfi_filldir64+0x10/0x10
[   42.921798][  T287]  ? __x64_sys_umount+0x12d/0x170
[   42.926844][  T287]  ? debug_smp_processor_id+0x17/0x20
[   42.932232][  T287]  __x64_sys_getdents64+0x7b/0x90
[   42.937268][  T287]  x64_sys_call+0x15c/0x9a0
[   42.941783][  T287]  do_syscall_64+0x4c/0xa0
[   42.946241][  T287]  ? clear_bhb_loop+0x30/0x80
[   42.950979][  T287]  ? clear_bhb_loop+0x30/0x80
[   42.955686][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.961593][  T287] RIP: 0033:0x7f7e697c6af3
[   42.966020][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   42.985660][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   42.994105][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   43.002109][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   43.010119][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   43.018199][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   43.026181][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   43.034171][  T287]  </TASK>
[   43.038630][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   43.088086][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   43.095619][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   43.105707][  T287] Call Trace:
[   43.109021][  T287]  <TASK>
[   43.111980][  T287]  __dump_stack+0x21/0x24
[   43.116364][  T287]  dump_stack_lvl+0x110/0x170
[   43.121087][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   43.126148][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   43.132859][  T287]  dump_stack+0x15/0x24
[   43.137058][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   43.142654][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   43.147815][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   43.153528][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   43.159583][  T287]  f2fs_find_data_page+0x198/0x3a0
[   43.164747][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   43.169475][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   43.174728][  T287]  f2fs_rmdir+0x3f/0x70
[   43.178950][  T287]  vfs_rmdir+0x381/0x4f0
[   43.183230][  T287]  do_rmdir+0x261/0x6b0
[   43.187425][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   43.192139][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   43.197030][  T287]  x64_sys_call+0x79f/0x9a0
[   43.201580][  T287]  do_syscall_64+0x4c/0xa0
[   43.206044][  T287]  ? clear_bhb_loop+0x30/0x80
[   43.210765][  T287]  ? clear_bhb_loop+0x30/0x80
[   43.215723][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   43.221686][  T287] RIP: 0033:0x7f7e6979d277
[   43.226171][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.245855][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   43.254317][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   43.262367][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   43.270386][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   43.278411][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   43.286609][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   43.294654][  T287]  </TASK>
[   43.299869][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   43.305917][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   43.313407][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   43.323488][  T287] Call Trace:
[   43.326802][  T287]  <TASK>
[   43.329744][  T287]  __dump_stack+0x21/0x24
[   43.334096][  T287]  dump_stack_lvl+0x110/0x170
[   43.338792][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   43.343836][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   43.350527][  T287]  dump_stack+0x15/0x24
[   43.354720][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   43.360289][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   43.365426][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   43.370912][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   43.376930][  T287]  f2fs_find_data_page+0x198/0x3a0
[   43.382083][  T287]  f2fs_readdir+0x4a2/0x990
[   43.386609][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   43.391661][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   43.396787][  T287]  ? down_read_killable+0xbc/0x110
[   43.401912][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   43.407474][  T287]  ? security_file_permission+0x94/0xb0
[   43.413062][  T287]  iterate_dir+0x26d/0x610
[   43.417498][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   43.422564][  T287]  __se_sys_getdents64+0xf2/0x250
[   43.427612][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   43.432839][  T287]  ? __cfi_filldir64+0x10/0x10
[   43.437620][  T287]  ? __x64_sys_umount+0x12d/0x170
[   43.442697][  T287]  ? debug_smp_processor_id+0x17/0x20
[   43.448094][  T287]  __x64_sys_getdents64+0x7b/0x90
[   43.453163][  T287]  x64_sys_call+0x15c/0x9a0
[   43.457683][  T287]  do_syscall_64+0x4c/0xa0
[   43.462121][  T287]  ? clear_bhb_loop+0x30/0x80
[   43.466824][  T287]  ? clear_bhb_loop+0x30/0x80
[   43.471517][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   43.477426][  T287] RIP: 0033:0x7f7e697c6af3
[   43.481878][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   43.501500][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   43.509926][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   43.517911][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   43.525894][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   43.533883][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   43.541871][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   43.549892][  T287]  </TASK>
[   43.553396][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   43.704953][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   43.712529][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   43.722628][  T287] Call Trace:
[   43.726073][  T287]  <TASK>
[   43.729046][  T287]  __dump_stack+0x21/0x24
[   43.733431][  T287]  dump_stack_lvl+0x110/0x170
[   43.738157][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   43.743238][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   43.749953][  T287]  dump_stack+0x15/0x24
[   43.754151][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   43.759747][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   43.764909][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   43.770423][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   43.776461][  T287]  f2fs_find_data_page+0x198/0x3a0
[   43.781627][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   43.786357][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   43.791617][  T287]  f2fs_rmdir+0x3f/0x70
[   43.795816][  T287]  vfs_rmdir+0x381/0x4f0
[   43.800131][  T287]  do_rmdir+0x261/0x6b0
[   43.804329][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   43.809044][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   43.813931][  T287]  x64_sys_call+0x79f/0x9a0
[   43.818466][  T287]  do_syscall_64+0x4c/0xa0
[   43.822920][  T287]  ? clear_bhb_loop+0x30/0x80
[   43.827644][  T287]  ? clear_bhb_loop+0x30/0x80
[   43.832357][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   43.838308][  T287] RIP: 0033:0x7f7e6979d277
[   43.842761][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.862412][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   43.870866][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   43.878882][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   43.886899][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   43.894906][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   43.902922][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   43.910943][  T287]  </TASK>
[   43.929338][   T28] kauditd_printk_skb: 5 callbacks suppressed
[   43.929356][   T28] audit: type=1400 audit(1790269117.018:307): avc:  denied  { ioctl } for  pid=831 comm="syz.0.204" path="/39/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   43.938877][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   43.981124][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   43.988655][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   43.998747][  T287] Call Trace:
[   44.002051][  T287]  <TASK>
[   44.005010][  T287]  __dump_stack+0x21/0x24
[   44.009481][  T287]  dump_stack_lvl+0x110/0x170
[   44.014203][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   44.019288][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   44.026005][  T287]  dump_stack+0x15/0x24
[   44.030204][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   44.035797][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   44.040956][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   44.046469][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   44.052497][  T287]  f2fs_find_data_page+0x198/0x3a0
[   44.057647][  T287]  f2fs_readdir+0x4a2/0x990
[   44.062378][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   44.067460][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   44.072616][  T287]  ? down_read_killable+0xbc/0x110
[   44.077764][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   44.083346][  T287]  ? security_file_permission+0x94/0xb0
[   44.088945][  T287]  iterate_dir+0x26d/0x610
[   44.093403][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   44.098859][  T287]  __se_sys_getdents64+0xf2/0x250
[   44.103942][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   44.109178][  T287]  ? __cfi_filldir64+0x10/0x10
[   44.113980][  T287]  ? __x64_sys_umount+0x12d/0x170
[   44.119045][  T287]  ? debug_smp_processor_id+0x17/0x20
[   44.124458][  T287]  __x64_sys_getdents64+0x7b/0x90
[   44.129544][  T287]  x64_sys_call+0x15c/0x9a0
[   44.134086][  T287]  do_syscall_64+0x4c/0xa0
[   44.138542][  T287]  ? clear_bhb_loop+0x30/0x80
[   44.143253][  T287]  ? clear_bhb_loop+0x30/0x80
[   44.147968][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   44.153903][  T287] RIP: 0033:0x7f7e697c6af3
[   44.158351][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   44.177993][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   44.186479][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   44.194503][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   44.202511][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   44.210609][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   44.218618][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   44.227040][  T287]  </TASK>
[   44.241781][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   44.250862][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   44.258400][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   44.268493][  T287] Call Trace:
[   44.271804][  T287]  <TASK>
[   44.274764][  T287]  __dump_stack+0x21/0x24
[   44.279155][  T287]  dump_stack_lvl+0x110/0x170
[   44.283881][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   44.288944][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   44.295839][  T287]  dump_stack+0x15/0x24
[   44.300046][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   44.305654][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   44.310823][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   44.316326][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   44.322355][  T287]  ? sysvec_reschedule_ipi+0x78/0x80
[   44.327691][  T287]  f2fs_find_data_page+0x198/0x3a0
[   44.332848][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   44.337568][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   44.342834][  T287]  f2fs_rmdir+0x3f/0x70
[   44.347033][  T287]  vfs_rmdir+0x381/0x4f0
[   44.351327][  T287]  do_rmdir+0x261/0x6b0
[   44.355535][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   44.360255][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   44.365146][  T287]  x64_sys_call+0x79f/0x9a0
[   44.369688][  T287]  do_syscall_64+0x4c/0xa0
[   44.374170][  T287]  ? clear_bhb_loop+0x30/0x80
[   44.378883][  T287]  ? clear_bhb_loop+0x30/0x80
[   44.383601][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   44.389527][  T287] RIP: 0033:0x7f7e6979d277
[   44.393976][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.413614][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   44.422074][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   44.430207][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   44.438242][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   44.446343][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   44.454394][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   44.462411][  T287]  </TASK>
[   44.466525][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   44.472667][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   44.480154][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   44.490617][  T287] Call Trace:
[   44.493936][  T287]  <TASK>
[   44.496894][  T287]  __dump_stack+0x21/0x24
[   44.501273][  T287]  dump_stack_lvl+0x110/0x170
[   44.506006][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   44.511192][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   44.517926][  T287]  dump_stack+0x15/0x24
[   44.522135][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   44.527724][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   44.532911][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   44.538416][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   44.544456][  T287]  f2fs_find_data_page+0x198/0x3a0
[   44.549800][  T287]  f2fs_readdir+0x4a2/0x990
[   44.554360][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   44.559429][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   44.564591][  T287]  ? down_read_killable+0xbc/0x110
[   44.569735][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   44.575315][  T287]  ? security_file_permission+0x94/0xb0
[   44.580906][  T287]  iterate_dir+0x26d/0x610
[   44.585391][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   44.590460][  T287]  __se_sys_getdents64+0xf2/0x250
[   44.595526][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   44.600760][  T287]  ? __cfi_filldir64+0x10/0x10
[   44.605563][  T287]  ? __x64_sys_umount+0x12d/0x170
[   44.610625][  T287]  ? debug_smp_processor_id+0x17/0x20
[   44.616035][  T287]  __x64_sys_getdents64+0x7b/0x90
[   44.621097][  T287]  x64_sys_call+0x15c/0x9a0
[   44.625639][  T287]  do_syscall_64+0x4c/0xa0
[   44.630098][  T287]  ? clear_bhb_loop+0x30/0x80
[   44.634811][  T287]  ? clear_bhb_loop+0x30/0x80
[   44.639526][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   44.645453][  T287] RIP: 0033:0x7f7e697c6af3
[   44.649910][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   44.669903][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   44.678359][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   44.686368][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   44.694371][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   44.702384][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   44.710388][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   44.718407][  T287]  </TASK>
[   44.821248][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   44.827418][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   44.834920][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   44.845179][  T287] Call Trace:
[   44.848489][  T287]  <TASK>
[   44.851445][  T287]  __dump_stack+0x21/0x24
[   44.855822][  T287]  dump_stack_lvl+0x110/0x170
[   44.860556][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   44.865628][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   44.872355][  T287]  dump_stack+0x15/0x24
[   44.876554][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   44.882444][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   44.887607][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   44.893112][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   44.899140][  T287]  f2fs_find_data_page+0x198/0x3a0
[   44.904295][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   44.909017][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   44.914382][  T287]  f2fs_rmdir+0x3f/0x70
[   44.918575][  T287]  vfs_rmdir+0x381/0x4f0
[   44.922859][  T287]  do_rmdir+0x261/0x6b0
[   44.927080][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   44.931807][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   44.936712][  T287]  x64_sys_call+0x79f/0x9a0
[   44.941273][  T287]  do_syscall_64+0x4c/0xa0
[   44.945750][  T287]  ? clear_bhb_loop+0x30/0x80
[   44.950532][  T287]  ? clear_bhb_loop+0x30/0x80
[   44.955266][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   44.961227][  T287] RIP: 0033:0x7f7e6979d277
[   44.965696][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.985354][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   44.993942][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   45.002045][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   45.010083][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   45.018093][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   45.026189][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   45.034296][  T287]  </TASK>
[   45.037915][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   45.044224][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   45.051716][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   45.061797][  T287] Call Trace:
[   45.065105][  T287]  <TASK>
[   45.068059][  T287]  __dump_stack+0x21/0x24
[   45.072423][  T287]  dump_stack_lvl+0x110/0x170
[   45.077225][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   45.082292][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   45.089058][  T287]  dump_stack+0x15/0x24
[   45.093261][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   45.098859][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   45.104017][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   45.109597][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   45.115621][  T287]  f2fs_find_data_page+0x198/0x3a0
[   45.120774][  T287]  f2fs_readdir+0x4a2/0x990
[   45.125431][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   45.130588][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   45.135740][  T287]  ? down_read_killable+0xbc/0x110
[   45.140886][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   45.146511][  T287]  ? security_file_permission+0x94/0xb0
[   45.152118][  T287]  iterate_dir+0x26d/0x610
[   45.156571][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   45.161640][  T287]  __se_sys_getdents64+0xf2/0x250
[   45.166715][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   45.171958][  T287]  ? __cfi_filldir64+0x10/0x10
[   45.176761][  T287]  ? __x64_sys_umount+0x12d/0x170
[   45.181846][  T287]  ? debug_smp_processor_id+0x17/0x20
[   45.187259][  T287]  __x64_sys_getdents64+0x7b/0x90
[   45.192333][  T287]  x64_sys_call+0x15c/0x9a0
[   45.196869][  T287]  do_syscall_64+0x4c/0xa0
[   45.201356][  T287]  ? clear_bhb_loop+0x30/0x80
[   45.206071][  T287]  ? clear_bhb_loop+0x30/0x80
[   45.210785][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   45.216714][  T287] RIP: 0033:0x7f7e697c6af3
[   45.221158][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   45.240791][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   45.249360][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   45.257387][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   45.265383][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   45.273468][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   45.281499][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   45.289513][  T287]  </TASK>
[   45.391757][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   45.400964][   T28] audit: type=1400 audit(1790269118.498:308): avc:  denied  { sqpoll } for  pid=868 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   45.423539][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   45.431080][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   45.441211][  T287] Call Trace:
[   45.444531][  T287]  <TASK>
[   45.447525][  T287]  __dump_stack+0x21/0x24
[   45.451901][  T287]  dump_stack_lvl+0x110/0x170
[   45.456620][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   45.461680][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   45.468654][  T287]  dump_stack+0x15/0x24
[   45.472945][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   45.478538][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   45.483699][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   45.489210][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   45.495241][  T287]  f2fs_find_data_page+0x198/0x3a0
[   45.500429][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   45.505159][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   45.510513][  T287]  f2fs_rmdir+0x3f/0x70
[   45.514757][  T287]  vfs_rmdir+0x381/0x4f0
[   45.519052][  T287]  do_rmdir+0x261/0x6b0
[   45.523258][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   45.527979][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   45.532903][  T287]  x64_sys_call+0x79f/0x9a0
[   45.537484][  T287]  do_syscall_64+0x4c/0xa0
[   45.541946][  T287]  ? clear_bhb_loop+0x30/0x80
[   45.546657][  T287]  ? clear_bhb_loop+0x30/0x80
[   45.551361][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   45.557283][  T287] RIP: 0033:0x7f7e6979d277
[   45.561723][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.581383][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   45.589844][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   45.597848][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   45.605853][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   45.613865][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   45.621872][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   45.629888][  T287]  </TASK>
[   45.635045][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   45.641537][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   45.649038][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   45.659136][  T287] Call Trace:
[   45.662451][  T287]  <TASK>
[   45.665408][  T287]  __dump_stack+0x21/0x24
[   45.669789][  T287]  dump_stack_lvl+0x110/0x170
[   45.674501][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   45.679559][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   45.686287][  T287]  dump_stack+0x15/0x24
[   45.690481][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   45.696068][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   45.701221][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   45.706720][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   45.712748][  T287]  f2fs_find_data_page+0x198/0x3a0
[   45.717908][  T287]  f2fs_readdir+0x4a2/0x990
[   45.722470][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   45.727548][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   45.732702][  T287]  ? down_read_killable+0xbc/0x110
[   45.737850][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   45.743435][  T287]  ? security_file_permission+0x94/0xb0
[   45.749057][  T287]  iterate_dir+0x26d/0x610
[   45.753509][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   45.758585][  T287]  __se_sys_getdents64+0xf2/0x250
[   45.763651][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   45.768884][  T287]  ? __cfi_filldir64+0x10/0x10
[   45.773682][  T287]  ? __x64_sys_umount+0x12d/0x170
[   45.778755][  T287]  ? debug_smp_processor_id+0x17/0x20
[   45.784172][  T287]  __x64_sys_getdents64+0x7b/0x90
[   45.789235][  T287]  x64_sys_call+0x15c/0x9a0
[   45.793770][  T287]  do_syscall_64+0x4c/0xa0
[   45.797381][  T877] overlayfs: failed to clone upperpath
[   45.798228][  T287]  ? clear_bhb_loop+0x30/0x80
[   45.798256][  T287]  ? clear_bhb_loop+0x30/0x80
[   45.798278][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   45.798300][  T287] RIP: 0033:0x7f7e697c6af3
[   45.798318][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   45.798336][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   45.851564][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   45.859573][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   45.867589][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   45.875594][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   45.883603][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   45.891707][  T287]  </TASK>
[   45.901054][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   45.907089][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   45.914581][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   45.924679][  T287] Call Trace:
[   45.927988][  T287]  <TASK>
[   45.930946][  T287]  __dump_stack+0x21/0x24
[   45.935336][  T287]  dump_stack_lvl+0x110/0x170
[   45.940161][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   45.945268][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   45.952039][  T287]  dump_stack+0x15/0x24
[   45.956265][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   45.961873][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   45.967040][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   45.972560][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   45.978597][  T287]  f2fs_find_data_page+0x198/0x3a0
[   45.983755][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   45.988495][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   45.993735][  T287]  f2fs_rmdir+0x3f/0x70
[   45.997931][  T287]  vfs_rmdir+0x381/0x4f0
[   46.002211][  T287]  do_rmdir+0x261/0x6b0
[   46.006403][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   46.011125][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   46.016104][  T287]  x64_sys_call+0x79f/0x9a0
[   46.020669][  T287]  do_syscall_64+0x4c/0xa0
[   46.025128][  T287]  ? clear_bhb_loop+0x30/0x80
[   46.029835][  T287]  ? clear_bhb_loop+0x30/0x80
[   46.034545][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   46.040470][  T287] RIP: 0033:0x7f7e6979d277
[   46.044915][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.064552][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   46.073009][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   46.081022][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   46.089067][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   46.097073][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   46.105079][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   46.113100][  T287]  </TASK>
[   46.119961][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   46.125998][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   46.133486][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   46.143578][  T287] Call Trace:
[   46.146890][  T287]  <TASK>
[   46.149872][  T287]  __dump_stack+0x21/0x24
[   46.154247][  T287]  dump_stack_lvl+0x110/0x170
[   46.158975][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   46.164073][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   46.170798][  T287]  dump_stack+0x15/0x24
[   46.175014][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   46.180615][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   46.185782][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   46.191288][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   46.197313][  T287]  f2fs_find_data_page+0x198/0x3a0
[   46.202467][  T287]  f2fs_readdir+0x4a2/0x990
[   46.207023][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   46.212093][  T287]  ? __se_sys_newfstat+0x30b/0x3d0
[   46.217250][  T287]  ? down_read_killable+0xbc/0x110
[   46.222405][  T287]  ? __cfi_down_read_killable+0x10/0x10
[   46.228018][  T287]  ? security_file_permission+0x94/0xb0
[   46.233605][  T287]  iterate_dir+0x26d/0x610
[   46.238062][  T287]  ? __cfi_f2fs_readdir+0x10/0x10
[   46.243133][  T287]  __se_sys_getdents64+0xf2/0x250
[   46.248200][  T287]  ? __x64_sys_getdents64+0x90/0x90
[   46.253441][  T287]  ? __cfi_filldir64+0x10/0x10
[   46.258248][  T287]  ? __x64_sys_umount+0x12d/0x170
[   46.263351][  T287]  ? debug_smp_processor_id+0x17/0x20
[   46.268773][  T287]  __x64_sys_getdents64+0x7b/0x90
[   46.273845][  T287]  x64_sys_call+0x15c/0x9a0
[   46.278400][  T287]  do_syscall_64+0x4c/0xa0
[   46.280727][   T28] audit: type=1400 audit(1790269119.378:309): avc:  denied  { setopt } for  pid=881 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   46.282965][  T287]  ? clear_bhb_loop+0x30/0x80
[   46.282993][  T287]  ? clear_bhb_loop+0x30/0x80
[   46.312279][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   46.318217][  T287] RIP: 0033:0x7f7e697c6af3
[   46.322693][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   46.342336][  T287] RSP: 002b:00007ffd3eeb63d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   46.350812][  T287] RAX: ffffffffffffffda RBX: 0000555583363950 RCX: 00007f7e697c6af3
[   46.358820][  T287] RDX: 0000000000008000 RSI: 0000555583363980 RDI: 0000000000000006
[   46.366828][  T287] RBP: 0000555583363980 R08: 00007f7e699f2e20 R09: 0000000000000001
[   46.374839][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555583363954
[   46.382849][  T287] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd3eeb9770
[   46.390865][  T287]  </TASK>
[   46.458955][  T900] loop5: detected capacity change from 0 to 512
[   46.474638][  T287] F2FS-fs (loop3): access invalid blkaddr:36
[   46.480830][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   46.488327][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   46.498421][  T287] Call Trace:
[   46.501741][  T287]  <TASK>
[   46.504707][  T287]  __dump_stack+0x21/0x24
[   46.509090][  T287]  dump_stack_lvl+0x110/0x170
[   46.513901][  T287]  ? __cfi_dump_stack_lvl+0x8/0x8
[   46.519063][  T287]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   46.525868][  T287]  dump_stack+0x15/0x24
[   46.530065][  T287]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   46.535753][  T287]  f2fs_is_valid_blkaddr+0x23/0x30
[   46.538307][  T900] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   46.540905][  T287]  f2fs_get_read_data_page+0x4ef/0x850
[   46.550277][  T900] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.555313][  T287]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   46.571681][  T287]  f2fs_find_data_page+0x198/0x3a0
[   46.576847][  T287]  f2fs_empty_dir+0x12b/0x2e0
[   46.581575][  T287]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   46.586830][  T287]  f2fs_rmdir+0x3f/0x70
[   46.591031][  T287]  vfs_rmdir+0x381/0x4f0
[   46.595316][  T287]  do_rmdir+0x261/0x6b0
[   46.599519][  T287]  ? __cfi_do_rmdir+0x10/0x10
[   46.604241][  T287]  __x64_sys_unlinkat+0xc7/0xf0
[   46.609183][  T287]  x64_sys_call+0x79f/0x9a0
[   46.613730][  T287]  do_syscall_64+0x4c/0xa0
[   46.618207][  T287]  ? clear_bhb_loop+0x30/0x80
[   46.622928][  T287]  ? clear_bhb_loop+0x30/0x80
[   46.627910][  T287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   46.633870][  T287] RIP: 0033:0x7f7e6979d277
[   46.638320][  T287] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.657989][  T287] RSP: 002b:00007ffd3eeb6408 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   46.666442][  T287] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f7e6979d277
[   46.674446][  T287] RDX: 0000000000000200 RSI: 00007ffd3eeb75b0 RDI: 00000000ffffff9c
[   46.682459][  T287] RBP: 00007f7e698344bb R08: 0000000000008680 R09: 0000000000000001
[   46.690494][  T287] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3eeb75b0
[   46.698504][  T287] R13: 00007f7e698344bb R14: 00005555833404e8 R15: 00007ffd3eeb9770
[   46.706516][  T287]  </TASK>
[   46.734854][  T900] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   46.808858][  T900] EXT4-fs (loop5): Remounting filesystem read-only
[   46.858308][  T679] EXT4-fs (loop5): unmounting filesystem.
[   47.014103][  T916] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.039667][  T916] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.066677][  T916] device bridge_slave_0 entered promiscuous mode
[   47.096909][  T916] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.119217][  T916] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.138743][  T916] device bridge_slave_1 entered promiscuous mode
[   47.225119][  T931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.240'.
[   47.344324][  T916] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.351491][  T916] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.358844][  T916] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.366002][  T916] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.414515][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   47.433970][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.444223][  T942] loop1: detected capacity change from 0 to 512
[   47.459333][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.477476][  T944] netlink: 51 bytes leftover after parsing attributes in process `syz.5.246'.
[   47.493790][  T942] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[   47.506651][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   47.519844][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.526985][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.546868][  T942] FAT-fs (loop1): Filesystem has been set read-only
[   47.558222][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   47.576636][  T942] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   47.585390][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.592497][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.624571][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.642912][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.667888][  T308] device bridge_slave_1 left promiscuous mode
[   47.679730][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.698419][  T308] device bridge_slave_0 left promiscuous mode
[   47.711350][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.729597][  T308] device veth1_macvtap left promiscuous mode
[   47.742415][  T308] device veth0_vlan left promiscuous mode
[   47.864698][   T28] audit: type=1400 audit(1790269120.958:310): avc:  denied  { create } for  pid=958 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   47.900269][   T28] audit: type=1400 audit(1790269120.988:311): avc:  denied  { sys_admin } for  pid=958 comm="syz.1.249" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   47.967448][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   47.977131][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.989478][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   47.997521][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.005945][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.013630][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.022793][  T916] device veth0_vlan entered promiscuous mode
[   48.035838][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   48.044734][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.065938][  T916] device veth1_macvtap entered promiscuous mode
[   48.077770][   T28] audit: type=1400 audit(1790269121.168:312): avc:  denied  { read } for  pid=966 comm="syz.1.252" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   48.100571][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   48.108975][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   48.117374][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   48.138319][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   48.151657][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.208107][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   48.226977][   T28] audit: type=1400 audit(1790269121.318:313): avc:  denied  { setopt } for  pid=976 comm="syz.6.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.408291][   T24] usb 6-1: Using ep0 maxpacket: 32
[   48.414738][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.426497][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.436370][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   48.450538][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.468884][   T24] usb 6-1: config 0 descriptor??
[   48.476031][   T24] hub 6-1:0.0: USB hub found
[   48.676171][   T24] hub 6-1:0.0: 1 port detected
[   49.278792][   T24] hub 6-1:0.0: activate --> -90
[   49.414816][ T1005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'.
[   49.424866][ T1005] netlink: 165 bytes leftover after parsing attributes in process `syz.4.262'.
[   49.705975][   T39] usb 6-1: USB disconnect, device number 2
[   49.726055][ T1024] loop6: detected capacity change from 0 to 512
[   49.733112][ T1024] EXT4-fs (loop6): Test dummy encryption mode enabled
[   49.741628][ T1024] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   49.754883][ T1024] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   49.776325][ T1024] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.272: bad orphan inode 131083
[   49.787542][ T1024] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   49.806796][ T1024] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   49.824351][ T1033] netlink: 160 bytes leftover after parsing attributes in process `syz.1.275'.
[   49.834638][  T916] EXT4-fs (loop6): unmounting filesystem.
[   50.036967][   T28] audit: type=1400 audit(1790269123.128:314): avc:  denied  { map } for  pid=1045 comm="syz.6.280" path="socket:[19752]" dev="sockfs" ino=19752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   50.402294][   T28] audit: type=1400 audit(1790269123.498:315): avc:  denied  { listen } for  pid=1059 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   50.749562][ T1068] loop6: detected capacity change from 0 to 512
[   50.761193][ T1070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.289'.
[   50.778444][ T1068] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   50.798673][ T1070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.289'.
[   50.831174][ T1070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.289'.
[   51.002758][ T1083] xt_hashlimit: size too large, truncated to 1048576
[   51.234646][ T1091] loop5: detected capacity change from 0 to 512
[   51.566146][ T1101] xt_hashlimit: size too large, truncated to 1048576
[   51.677364][   T28] audit: type=1400 audit(1790269124.768:316): avc:  denied  { load_policy } for  pid=1107 comm="syz.6.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   51.678772][ T1108] SELinux: failed to load policy
[   51.971049][   T28] audit: type=1400 audit(1790269125.068:317): avc:  denied  { read write } for  pid=1115 comm="syz.4.312" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   51.995207][   T28] audit: type=1400 audit(1790269125.068:318): avc:  denied  { open } for  pid=1115 comm="syz.4.312" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.019521][   T28] audit: type=1400 audit(1790269125.068:319): avc:  denied  { ioctl } for  pid=1115 comm="syz.4.312" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.079184][ T1125] loop4: detected capacity change from 0 to 512
[   52.258978][ T1129] netlink: 'syz.1.324': attribute type 4 has an invalid length.
[   52.298771][ T1129] netlink: 'syz.1.324': attribute type 4 has an invalid length.
[   52.345120][ T1129] syz.1.324 (1129) used greatest stack depth: 20928 bytes left
[   52.616028][ T1138] netlink: 40 bytes leftover after parsing attributes in process `syz.5.317'.
[   52.645958][ T1140] loop4: detected capacity change from 0 to 1024
[   52.680054][ T1140] EXT4-fs: Ignoring removed orlov option
[   52.699948][   T28] audit: type=1400 audit(1790269125.798:320): avc:  denied  { ioctl } for  pid=1141 comm="syz.5.319" path="socket:[19175]" dev="sockfs" ino=19175 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   52.751388][ T1140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   52.831417][  T291] EXT4-fs (loop4): unmounting filesystem.
[   52.894394][ T1153] ==================================================================
[   52.902528][ T1153] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0
[   52.910225][ T1153] Write of size 8 at addr ffff88813182a190 by task syz-executor/1153
[   52.918329][ T1153] 
[   52.920731][ T1153] CPU: 1 PID: 1153 Comm: syz-executor Not tainted syzkaller #0
[   52.928308][ T1153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   52.938395][ T1153] Call Trace:
[   52.941708][ T1153]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   52.944685][ T1153]  __dump_stack+0x21/0x24
[   52.949612][ T1153]  dump_stack_lvl+0x110/0x170
[   52.954340][ T1153]  ? __cfi_dump_stack_lvl+0x8/0x8
[   52.958271][   T28] audit: type=1400 audit(1790269126.038:321): avc:  denied  { write } for  pid=279 comm="syz-executor" path="pipe:[15473]" dev="pipefs" ino=15473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   52.959411][ T1153]  ? rcu_segcblist_enqueue+0x9c/0xb0
[   52.987807][ T1153]  print_address_description+0x71/0x200
[   52.993413][ T1153]  print_report+0x4a/0x60
[   52.997789][ T1153]  kasan_report+0x122/0x150
[   53.002349][ T1153]  ? rcu_segcblist_enqueue+0x9c/0xb0
[   53.007685][ T1153]  __asan_report_store8_noabort+0x17/0x20
[   53.013465][ T1153]  rcu_segcblist_enqueue+0x9c/0xb0
[   53.018631][ T1153]  call_rcu+0x554/0xf50
[   53.022837][ T1153]  ? kmem_cache_free+0x12d/0x300
[   53.027897][ T1153]  ? __cfi_call_rcu+0x10/0x10
[   53.032620][ T1153]  ? percpu_counter_add_batch+0x13c/0x160
[   53.038389][ T1153]  __fput+0x66d/0x8f0
[   53.042432][ T1153]  ____fput+0x15/0x20
[   53.046448][ T1153]  task_work_run+0x1e1/0x250
[   53.051082][ T1153]  ? __cfi_task_work_run+0x10/0x10
[   53.056243][ T1153]  ? fput+0x15b/0x1a0
[   53.060273][ T1153]  exit_to_user_mode_loop+0x9b/0xb0
[   53.065504][ T1153]  exit_to_user_mode_prepare+0x87/0xd0
[   53.070994][ T1153]  syscall_exit_to_user_mode+0x1a/0x30
[   53.076584][ T1153]  do_syscall_64+0x58/0xa0
[   53.081053][ T1153]  ? clear_bhb_loop+0x30/0x80
[   53.085763][ T1153]  ? clear_bhb_loop+0x30/0x80
[   53.090474][ T1153]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   53.096410][ T1153] RIP: 0033:0x7fe7cf7592d7
[   53.100941][ T1153] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   53.120614][ T1153] RSP: 002b:00007ffea5be38b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[   53.129049][ T1153] RAX: 0000000000000000 RBX: 00005555622fb500 RCX: 00007fe7cf7592d7
[   53.137033][ T1153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   53.145040][ T1153] RBP: 00007fe7cf836000 R08: 0000000000000000 R09: 0000000000000000
[   53.153052][ T1153] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[   53.161089][ T1153] R13: 00007ffea5be3920 R14: 000000000000ce79 R15: 00007ffea5be3e90
[   53.169083][ T1153]  </TASK>
[   53.172113][ T1153] 
[   53.174464][ T1153] Allocated by task 1142:
[   53.178800][ T1153]  kasan_set_track+0x4b/0x70
[   53.183409][ T1153]  kasan_save_alloc_info+0x1f/0x30
[   53.188553][ T1153]  __kasan_kmalloc+0x95/0xb0
[   53.193162][ T1153]  __kmalloc+0xb4/0x1e0
[   53.197328][ T1153]  l2tp_session_create+0x38/0xbd0
[   53.202365][ T1153]  pppol2tp_connect+0xbf5/0x1640
[   53.207338][ T1153]  __sys_connect+0x3da/0x460
[   53.211943][ T1153]  __x64_sys_connect+0x7a/0x90
[   53.216723][ T1153]  x64_sys_call+0x88d/0x9a0
[   53.221242][ T1153]  do_syscall_64+0x4c/0xa0
[   53.225683][ T1153]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   53.231595][ T1153] 
[   53.233962][ T1153] Freed by task 472:
[   53.237866][ T1153]  kasan_set_track+0x4b/0x70
[   53.242471][ T1153]  kasan_save_free_info+0x2b/0x40
[   53.247506][ T1153]  ____kasan_slab_free+0x132/0x180
[   53.252636][ T1153]  __kasan_slab_free+0x11/0x20
[   53.257415][ T1153]  slab_free_freelist_hook+0xc2/0x190
[   53.262799][ T1153]  __kmem_cache_free+0xb7/0x1b0
[   53.267664][ T1153]  kfree+0x6f/0xf0
[   53.271397][ T1153]  l2tp_session_put+0xaf/0x1a0
[   53.276178][ T1153]  l2tp_session_delete+0x3df/0x4d0
[   53.281330][ T1153]  l2tp_tunnel_del_work+0x199/0x410
[   53.286564][ T1153]  process_one_work+0x717/0xc30
[   53.291424][ T1153]  worker_thread+0xa4d/0x11d0
[   53.296118][ T1153]  kthread+0x281/0x320
[   53.300226][ T1153]  ret_from_fork+0x1f/0x30
[   53.304663][ T1153] 
[   53.307018][ T1153] Last potentially related work creation:
[   53.312741][ T1153]  kasan_save_stack+0x3a/0x60
[   53.317459][ T1153]  __kasan_record_aux_stack+0xb6/0xc0
[   53.322847][ T1153]  kasan_record_aux_stack_noalloc+0xb/0x10
[   53.328688][ T1153]  call_rcu+0xcf/0xf50
[   53.332773][ T1153]  pppol2tp_release+0x1e3/0x2b0
[   53.337642][ T1153]  sock_close+0xc9/0x220
[   53.341896][ T1153]  __fput+0x1fd/0x8f0
[   53.345891][ T1153]  ____fput+0x15/0x20
[   53.349889][ T1153]  task_work_run+0x1e1/0x250
[   53.354499][ T1153]  do_exit+0xb0d/0x29f0
[   53.358673][ T1153]  __cfi___ia32_sys_exit+0x0/0x10
[   53.363721][ T1153]  x64_sys_call+0x67/0x9a0
[   53.368154][ T1153]  do_syscall_64+0x4c/0xa0
[   53.372587][ T1153]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   53.378519][ T1153] 
[   53.380852][ T1153] The buggy address belongs to the object at ffff88813182a000
[   53.380852][ T1153]  which belongs to the cache kmalloc-512 of size 512
[   53.394936][ T1153] The buggy address is located 400 bytes inside of
[   53.394936][ T1153]  512-byte region [ffff88813182a000, ffff88813182a200)
[   53.408221][ T1153] 
[   53.410552][ T1153] The buggy address belongs to the physical page:
[   53.416970][ T1153] page:ffffea0004c60a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x131828
[   53.427239][ T1153] head:ffffea0004c60a00 order:2 compound_mapcount:0 compound_pincount:0
[   53.435573][ T1153] flags: 0x4000000000010200(slab|head|zone=1)
[   53.441681][ T1153] raw: 4000000000010200 ffffea0004c60b00 dead000000000003 ffff888100042f00
[   53.450292][ T1153] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   53.458877][ T1153] page dumped because: kasan: bad access detected
[   53.465297][ T1153] page_owner tracks the page as allocated
[   53.471027][ T1153] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 288, tgid 288 (syz-executor), ts 23683522748, free_ts 0
[   53.491362][ T1153]  post_alloc_hook+0x1f5/0x210
[   53.496149][ T1153]  prep_new_page+0x1c/0x110
[   53.500674][ T1153]  get_page_from_freelist+0x2ca9/0x2d20
[   53.506234][ T1153]  __alloc_pages+0x1fa/0x610
[   53.510839][ T1153]  alloc_slab_page+0x6e/0xf0
[   53.515438][ T1153]  new_slab+0x98/0x3e0
[   53.519535][ T1153]  ___slab_alloc+0x70f/0xb70
[   53.524164][ T1153]  __slab_alloc+0x5e/0xa0
[   53.528515][ T1153]  __kmem_cache_alloc_node+0x204/0x2d0
[   53.533992][ T1153]  kmalloc_trace+0x29/0xb0
[   53.538420][ T1153]  inetdev_init+0x81/0x510
[   53.542850][ T1153]  inetdev_event+0x1f4/0x10a0
[   53.547544][ T1153]  raw_notifier_call_chain+0xa1/0x110
[   53.552936][ T1153]  call_netdevice_notifiers+0x119/0x190
[   53.558496][ T1153]  register_netdevice+0x1186/0x1550
[   53.563716][ T1153]  veth_newlink+0x8ba/0xd60
[   53.568229][ T1153] page_owner free stack trace missing
[   53.573627][ T1153] 
[   53.576108][ T1153] Memory state around the buggy address:
[   53.581769][ T1153]  ffff88813182a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   53.589847][ T1153]  ffff88813182a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   53.597925][ T1153] >ffff88813182a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   53.605993][ T1153]                          ^
[   53.610591][ T1153]  ffff88813182a200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   53.618673][ T1153]  ffff88813182a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   53.626740][ T1153] ==================================================================
[   53.634830][ T1153] Disabling lock debugging due to kernel taint
[   53.646984][ T1155] tipc: Started in network mode
[   53.662359][ T1155] tipc: Node identity 1001001, cluster identity 4711
[   53.671663][ T1155] tipc: Node number set to 16781313
[   54.398841][   T10] device bridge_slave_1 left promiscuous mode
[   54.404981][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.412601][   T10] device bridge_slave_0 left promiscuous mode
[   54.418883][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.426905][   T10] device veth1_macvtap left promiscuous mode
[   54.433046][   T10] device veth0_vlan left promiscuous mode
[   54.780040][   T10] tipc: Left network mode
[   55.219293][   T10] device bridge_slave_1 left promiscuous mode
[   55.225450][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.233091][   T10] device bridge_slave_0 left promiscuous mode
[   55.239331][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.247341][   T10] device bridge_slave_1 left promiscuous mode
[   55.253599][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.261219][   T10] device bridge_slave_0 left promiscuous mode
[   55.267437][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.275797][   T10] device veth1_macvtap left promiscuous mode
[   55.281899][   T10] device veth0_vlan left promiscuous mode
[   55.288006][   T10] device veth1_macvtap left promiscuous mode
[   55.294199][   T10] device veth0_vlan left promiscuous mode