last executing test programs: 3m23.263150942s ago: executing program 1 (id=384): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e28, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}, 0x84) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 3m22.878990383s ago: executing program 1 (id=391): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21c81c, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x30800, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x6, 0x3, 0x1800077, 0x8, 0x1, 0x6, 0x20000001004, 0x1, 0xfffffffd}) 3m22.529579052s ago: executing program 1 (id=395): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x8, 0x558658dc, 0x58e3, r2}, &(0x7f0000000180)=0x10) 3m21.45429828s ago: executing program 1 (id=411): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m21.294428581s ago: executing program 1 (id=413): mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 3m20.535046813s ago: executing program 1 (id=421): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@local, 0xffffffff}, @local, 0x4, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x8}) close(r0) 3m19.780307866s ago: executing program 32 (id=421): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@local, 0xffffffff}, @local, 0x4, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x8}) close(r0) 1m28.441262553s ago: executing program 6 (id=1399): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) read$char_usb(r0, 0x0, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) 1m26.498842397s ago: executing program 6 (id=1410): ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000580)={&(0x7f0000000500)=[{0xb8, 0x9, 0x7f, 0x8, 0x1}, {0xfffffffffffff001, 0x1, 0x1, 0xffffffffffff43fa, 0x3}], 0x2, 0x28, 0x6, 0x3}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x4, @local, 0x6}}, [0x2, 0x2, 0x5, 0x4, 0x3, 0xe4e4, 0xc9a, 0x7, 0x7, 0x3, 0x7, 0x6, 0x8, 0xff, 0xc]}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 1m24.447087304s ago: executing program 6 (id=1422): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x1101}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x9, 0x2, 0xb}}, 0x0}}], 0x0, 0x0, 0x0}) 1m23.503575274s ago: executing program 6 (id=1432): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m23.274302921s ago: executing program 6 (id=1435): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) getsockname$packet(r0, 0x0, &(0x7f00000004c0)) 1m19.870539557s ago: executing program 6 (id=1449): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read(r0, 0x0, 0x0) 1m19.084774356s ago: executing program 33 (id=1449): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read(r0, 0x0, 0x0) 6.603102479s ago: executing program 3 (id=1916): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file2\x00', 0x2f00, 0x12) 6.214315641s ago: executing program 3 (id=1922): r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ppoll(&(0x7f0000000000)=[{r1, 0x6220}], 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 5.283181177s ago: executing program 7 (id=1936): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 4.874523262s ago: executing program 0 (id=1940): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003dc000/0x3000)=nil, 0x3000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.522161184s ago: executing program 0 (id=1943): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) 4.349306944s ago: executing program 0 (id=1945): r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x7fc) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="040b"], 0x2, 0x1) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 4.172990576s ago: executing program 0 (id=1947): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000000)=0x1, 0x4) 4.053235323s ago: executing program 0 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000006140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f666c7573685f6d657267652c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c696e6c696e655f78617474725f73697a653d3078303030303030303030303030303030632c00e863cd59e1f6a329db71886ce3bac8c29075314f1d7afec0cd24ffcf74aa2b1c809f629d1ba3849699bffbda66cb78b431a5ddcd3c1086269413aa903a605e639fefe8d3b54bb838f236b49a869657fb097235d5fc303322a330a2890bcca6ca"], 0x1, 0x105ab, &(0x7f000003f380)="$eJzs3E1rY9UfB/Bfpv95/I9jkXnQlRdEaMCEpu0UBZGqM+iAHYoPC1eaJrchM0luadIHZ60rfQluBRF3vgY3vo3BheBKcCGMKLn3VqY6C7WZZpx+PnD7Pffk3F/OCdmc3HIDOLZmk59/qsSFOBsRMxFxPiJvV8ojt1LE0xHxbEScuO+olP1/dJyKiHMRcWFcvKhZKV9a/vXuvS+eufHyp1/drTZ++PLz6a0amLbnI6K/WbR3+0VmnSJvlf3NnW6e/aWdMosX+rfL86zI3XQ9r7Db3B/XzHOxU4zPNreH49zoNVvj7HQ38v7NQfGGw53Ofp38glvNrfy8na7n2R1meXbuFPPaK/POcFTUaZf1PsrLx2i0n0V/upcW69m8nWdrMCr7i7pZO90b506Z5dtFK+u183ms/+uP+ZH3VnewvZfspFvDbjZIrtYbL9Yby7XGVtZOR+lSrdlvLy8lc53eeFhtlDb7K50s6/TSeivrV5O5TqtVazSSuWvperc5SBqN+mJ9vna1WrZeSN64+V7Saydz43ytO9gedXvDZCPbSoorqslCffGlavJcI3lndS1Ze/v69dW1dz+49v7NV1dvvF4O+su0krmF+YWFWmO+ttCoWv9h/FI53PUcc74/AP+Y/T8wDfb/9v9h/3vs12/7xqH4AgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHFvfn/zmzbwxW5z/v+x/oux6KiKuRMTliLgUEb89wEycOlDzYkRUyvaDxp/80xy+rUReYXzN6fI4FxEr5XHvyYf9KQAAAMDj6+vvPv4kYmbczP+8Mu0JcZTKH23OTKpe/pPP/yZV7WJebG9C1S7tl5yIyxFxcvbHCVW7EhEnzn84oWp/y8yBOHNfVIo4cZSzAQAAjsbBncDEdm8AAAA8cj6b9gSYjvx+bfm/+OW94NNFlDcEzx44AwAAAP6DKtOeAAAAAPDQ5ft/z/8DAACAx1vx/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPidnbvJURsGwwD8AU2hfyqq+LkKq6pLFhyiR+iyB2hv0x1nqIQ4B931CCMYkXjQBNjFCWjmeaSM7Wh49QWJhW0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZ/xXr5Z/vrd9Oc/aGZPE8DAAAAXLMr1suyM67GH9L9T+nWl4iYR8QsIqYRcW3uPoi3tcxJRPRS/9r/F2c1/I0oE46vGabrfUR8S9fD57bfBQAAAHi5tpvFKmJw7JZ/vp56vAJp0WaUK69c8nmTK21Shv3MlDZ9isxiFhHF+H+mtHlE9D9+T6NOPn+DWjN61vSqpt9FFQAAQLfqM4FsszcAAADuzo9bF8BtlPu16bv4aS94WDVpQ/BdbQQAAADcr/Nf25/0uq0DAAAAuIFy/n9x/l9aFWjt/L/hZSHO/wMAAID2VOf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZdsV5uN4tV05z9oZk8TwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9X2nwfsfSxo0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3vzuL/8npsaZZO61sfQ8kqydGlunxt65cfSH8fVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725+4EQiAIwmDf+Z/TYv5hSYPGIEIVLHzMMA8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB80e9++T8xNc4kc6eNpeORZO2qsXXV2HvQOHow3v4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWF/bm3TRgI4zj82kmUuE1GSG/xMQMNFYIR+JCQLHkGBmAhGipai0VgBRBw0NKZgudp/j+drrgDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID3dHp64yMiss9H5pEPV3+Hy8FX5OumGXxfM9sc9/XPLSfb3Sjlb4z/i4goImvhNwAA7Svvm2KxrOadtN20vbT9tOW0rmavfDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGd27pi1iTcMAPibtMn/X50crSCCgy42NrEaIYtDobsg6BbaWIqpSpqhLV36CUQnV7+C3fQr+AUEBy04OHRQcBFEueTSvsEgKcJdaH8/eO6eXODufTMcPPe8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJaD3XB2kBdCCLPTR3ni/ded5VH7t88+zA7iy503F+NzJqcohRAerrVb1zOcy6Tb2Np+1Gy3Wx2JRHL6kuQmMPKrvO9MAACcNKU0krr+U2lvKTlWaITw69Vw/X8lysNf6v/PL89fGMTPzXfd+Fpx/T+f2QwnX6W7/rSysbV9bW29udpabT2u1aoLNxdu3L5VrfSelVQ8MQEAAODflNOI6/9i48/+/5koD2PW//cWH9yPrzWl/h/pqOmX90gAAABOt3OXvn8rjDheKJfDZrPb7cz3t4efq/1tDkM9tv/SiOv/qUbeowIAAACycLBbGOr/r0R5GLP/P/d6Zz8+51QIYSbt/88tP2mvZDediZbFm8Z5zxEAAIB8zaQR9/9LvfX/xcMlD8UQwtXL/Tz9G8Cx6v+PL+4OvbQer/+vZTfFiVSs93+P3r4ewnQ97xEBAABwkv2fRlLs75f2ljo/ni+Wrf8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dc79o/SQBDFAXj/ZLUSA1Zq5QVEO6uAhSA2HkIUBE8ggngAsbX0DpbeIbWCjYVlCm8gbzZjIE263Ui+D5L3CEPm7WyzvwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWmhzP+jq+hm1fTX97/7m7iPoxV8P38/ZufKIvuxz6HyqP+p4AAACAVVDnfF8UxVfzehq1GqX83+Q1kflfNto+5/n53J/r29PnTs7/9+d7t38bDdt94k+vrm8uDzq7wuW3uXDFIJ18evdSpxtSnT1sTZp0nuXjeHyyltr1diUAsHz2c502+Xko6mGfgwGwMgbFLDPm/F+P+p0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAu/AQAA//8mX148") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="85", 0x1}], 0x1, 0x5a00, 0x0, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file3\x00', 0x165840, 0x2) 3.879425737s ago: executing program 7 (id=1951): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.521703434s ago: executing program 4 (id=1952): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/175, 0xaf}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) 3.4323486s ago: executing program 7 (id=1954): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x268, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7d, 0x50, 0x3e, "", [{{0x9, 0x4, 0x0, 0x79, 0x1, 0x3, 0x1, 0x1, 0x44, {0x9, 0x21, 0x8, 0x77, 0x1, {0x22, 0xfae}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.093692642s ago: executing program 2 (id=1955): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 3.083200745s ago: executing program 4 (id=1956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="495d832339cf"}, @TCA_FLOWER_INDEV={0x14, 0x2, 'dummy0\x00'}]}}]}, 0x54}}, 0x0) 2.795109527s ago: executing program 2 (id=1958): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fadvise64(r1, 0x85f5, 0x4000000005, 0x4) 1.97115618s ago: executing program 4 (id=1961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.675770369s ago: executing program 4 (id=1964): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/35, 0x23}, 0x9}], 0x1, 0x20, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000001240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x5, 0x6551fca36e13a7a4, @void}}}}}}}, 0x0) 1.596646158s ago: executing program 0 (id=1965): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000003c0), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000680)='4|', 0x2}], 0x1}, 0x11) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 1.595511021s ago: executing program 3 (id=1966): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04fd0506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x4804, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xaf, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x16, 0x6b, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}}}}, 0x0) 1.479244545s ago: executing program 5 (id=1967): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x10000, 0x3, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1214884, &(0x7f0000000280)={[{@codepage={'codepage', 0x3d, 'cp437'}}, {@umask}, {@dir_umask={'dir_umask', 0x3d, 0x1}}, {@creator={'creator', 0x3d, "e5cb853d"}}, {}, {@type={'type', 0x3d, "cc24041d"}}, {@part={'part', 0x3d, 0xfff}}, {@part={'part', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@file_umask={'file_umask', 0x3d, 0x1ff}}]}, 0x7, 0x318, &(0x7f00000004c0)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch") 1.47809317s ago: executing program 7 (id=1968): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f0000002180)="af", 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) 1.408883958s ago: executing program 3 (id=1969): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000580)={{@host, 0xffffff7f}, 0x1, 0x2, 0x6}) 1.335984009s ago: executing program 5 (id=1970): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.257029544s ago: executing program 3 (id=1971): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 1.054868499s ago: executing program 2 (id=1972): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.053621459s ago: executing program 5 (id=1973): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='source', 0x0, r0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) 701.02461ms ago: executing program 7 (id=1974): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file2\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) 614.583591ms ago: executing program 2 (id=1975): unshare(0x24020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 613.659004ms ago: executing program 5 (id=1976): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) 526.359411ms ago: executing program 4 (id=1977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r1 = syz_io_uring_complete(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r1, 0xffffffffffffffff, 0x3e, 0x30, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="c9f7b986f2ca3a0800e370723eae", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 420.545696ms ago: executing program 5 (id=1978): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffff7, 0x7fffbffe}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 419.085875ms ago: executing program 2 (id=1979): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 236.4593ms ago: executing program 7 (id=1980): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x2000080, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 158.655988ms ago: executing program 2 (id=1981): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x40e0) 114.463294ms ago: executing program 3 (id=1982): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file7\x00', 0x200008, &(0x7f0000000340)=ANY=[], 0x1, 0x1d3, &(0x7f0000000100)="$eJzs3cFqE1EUBuAzsTapIHYniOCAG1dBfYKKRBAHRCULXSm0bhoRks3oxvoWPqAPIF11IyNmxsaWZGxjzJj0+zb5yTmTey+ESTY5eX3z3f7u+9Hbr9e/RKeTRGsnduIoie1oxS8HAQCsk6OiiG9FsdH0PgCA5ak+/8dmtHyvu94XBwBYPS9evnryIMt6z9O0E3F4kPfzfvlY1h89znp307HtyVWHed6/dFy/V9bTk/XLcSUitiLr3Z9a34w7t8fXf/5Ze/g0O1Vvx+6/Pz4AAAAAAAAAAAAAAAAAAAAAADSimx6bOt+n251VL9Nv84FOze/ZiBuGAwIAAAAAAAAAAAAAAAAAAMCZjD583H8zGOwNJ6EdESefmS8U12YuMS2kEfH3i543tGJ5a61aSP6PbZwzRDV1oqbn1mLe4c+u/qkn5nvlzYio79mqP+AiwuQe0W7m1gQAAAAAAAAAAAAAAAAAABdO9VvfZDhqeicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Jzy//8He8N5wqeIOENztVTS8FEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYYz8CAAD//x8yIRo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) 114.233111ms ago: executing program 4 (id=1983): socket$nl_generic(0x10, 0x3, 0x10) gettid() clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x80, 0xffffffffffffffff, 0x0, 0x4b, 0xf2, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 0s ago: executing program 5 (id=1984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfed7, &(0x7f0000000340)=ANY=[], 0x0) kernel console output (not intermixed with test programs): t/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5579ce59 code=0x7ffc0000 [ 246.486991][ T30] audit: type=1326 audit(1779968487.420:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9336 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2a5579ce59 code=0x7ffc0000 [ 246.558541][ T10] usb 4-1: USB disconnect, device number 10 [ 246.703780][ T991] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 247.020000][ T9359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1336'. [ 247.035971][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.045759][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.078849][ T9359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1336'. [ 247.200309][ T5789] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 247.209388][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.217372][ T5789] usb 3-1: Product: syz [ 247.221537][ T5789] usb 3-1: Manufacturer: syz [ 247.226130][ T5789] usb 3-1: SerialNumber: syz [ 247.333494][ T5789] usb 3-1: config 0 descriptor?? [ 247.468036][ T991] usb 7-1: Using ep0 maxpacket: 8 [ 247.478927][ T5789] usb 3-1: can't set config #0, error -71 [ 247.524368][ T5789] usb 3-1: USB disconnect, device number 13 [ 248.117210][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.216748][ T9363] loop3: detected capacity change from 0 to 131072 [ 248.263962][ T9363] F2FS-fs (loop3): invalid crc value [ 248.348904][ T991] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 248.357123][ T991] usb 7-1: config 0 has no interface number 0 [ 248.363707][ T991] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.374657][ T991] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 248.385696][ T991] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 248.436655][ T991] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 248.487439][ T9363] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 248.487529][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.509968][ T9363] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 248.514442][ T991] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.535452][ T9385] sctp: [Deprecated]: syz.0.1345 (pid 9385) Use of int in max_burst socket option deprecated. [ 248.535452][ T9385] Use struct sctp_assoc_value instead [ 249.164768][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.175004][ T9402] loop4: detected capacity change from 0 to 8 [ 249.207952][ T9402] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 249.305521][ T9407] loop5: detected capacity change from 0 to 512 [ 249.307345][ T6319] udevd[6319]: incorrect cramfs checksum on /dev/loop4 [ 249.442323][ T9407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.505662][ T991] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 249.514732][ T991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.522744][ T991] usb 7-1: Product: syz [ 249.641659][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 249.641680][ T30] audit: type=1800 audit(1779968491.110:212): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1358" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 249.683295][ T991] usb 7-1: config 0 descriptor?? [ 249.688888][ T9413] loop4: detected capacity change from 0 to 512 [ 249.747542][ T991] usb 7-1: can't set config #0, error -71 [ 249.763469][ T991] usb 7-1: USB disconnect, device number 9 [ 249.787926][ T9413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 249.796644][ T9418] loop0: detected capacity change from 0 to 128 [ 249.869798][ T9418] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 249.872993][ T9413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.902984][ T9418] hpfs: filesystem error: improperly stopped [ 249.926886][ T9418] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 249.929106][ T9413] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.950113][ T9418] hpfs: You really don't want any checks? You are crazy... [ 249.973037][ T9418] hpfs: hpfs_map_sector(): read error [ 249.978659][ T9418] hpfs: code page support is disabled [ 249.987042][ T9418] hpfs: hpfs_map_4sectors(): unaligned read [ 249.993442][ T9418] hpfs: hpfs_map_4sectors(): unaligned read [ 249.999457][ T9418] hpfs: filesystem error: unable to find root dir [ 250.030669][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.083538][ T9418] hpfs: hpfs_map_4sectors(): unaligned read [ 250.157586][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.194816][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.296981][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.519870][ T9425] tipc: Started in network mode [ 250.524786][ T9425] tipc: Node identity 7f000001, cluster identity 4711 [ 250.534105][ T9431] loop4: detected capacity change from 0 to 128 [ 250.553215][ T9431] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 250.580285][ T9431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.634806][ T9425] tipc: Enabling of bearer rejected, failed to enable media [ 250.711268][ T803] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 250.893845][ T803] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 250.919205][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.928422][ T9437] loop5: detected capacity change from 0 to 2048 [ 250.982729][ T803] usb 1-1: config 0 descriptor?? [ 251.000309][ T803] cp210x 1-1:0.0: cp210x converter detected [ 251.385555][ T9437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.505433][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.034879][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.044788][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.044922][ T803] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 252.241131][ T9443] loop6: detected capacity change from 0 to 131072 [ 252.261173][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 252.278018][ T9443] F2FS-fs (loop6): invalid crc value [ 252.377926][ T803] usb 1-1: cp210x converter now attached to ttyUSB0 [ 252.427819][ T9460] loop4: detected capacity change from 0 to 512 [ 252.451859][ T9443] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 252.465149][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 252.477606][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 252.495870][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.516494][ T10] usb 4-1: Product: syz [ 252.523559][ T9443] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 252.534592][ T10] usb 4-1: Manufacturer: syz [ 252.549129][ T9460] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 252.549164][ T10] usb 4-1: SerialNumber: syz [ 252.566238][ T10] usb 4-1: config 0 descriptor?? [ 252.583439][ T9443] F2FS-fs (loop6): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 252.639224][ T991] usb 1-1: USB disconnect, device number 9 [ 252.650311][ T991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.657918][ T9460] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #14: comm syz.4.1377: invalid orphan symlink nlink 1 [ 252.673132][ T991] cp210x 1-1:0.0: device disconnected [ 252.685511][ T9460] loop4: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 252.692458][ T9460] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1377: couldn't read orphan inode 14 (err -117) [ 252.742315][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 252.748865][ C1] EXT4-fs (loop4): initial error at time 1779968494: ext4_orphan_get:1397: inode 14 [ 252.752314][ T9460] loop4: lost filesystem error report for type 5 error -117 [ 252.758263][ C1] EXT4-fs (loop4): last error at time 1779968494: ext4_orphan_get:1397: inode 14 [ 252.816933][ T9460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.829344][ T9460] ext2 filesystem being mounted at /217/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.071856][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.125871][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.204507][ T9480] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 253.211247][ T9480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.287625][ T9438] [U]  [ 253.300383][ T10] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 253.307430][ T9484] loop4: detected capacity change from 0 to 512 [ 253.329695][ T10] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 253.387277][ T9480] vhci_hcd vhci_hcd.0: Device attached [ 253.396904][ T9484] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1383: inode has both inline data and extents flags [ 253.410035][ T9484] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 253.410735][ T9486] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 253.426341][ T9486] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.439135][ T9484] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1383: couldn't read orphan inode 15 (err -117) [ 253.450964][ T9484] loop4: lost filesystem error report for type 5 error -117 [ 253.501883][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 253.515619][ C1] EXT4-fs (loop4): initial error at time 1779968494: ext4_orphan_get:1397: inode 15 [ 253.525068][ C1] EXT4-fs (loop4): last error at time 1779968494: ext4_orphan_get:1402 [ 253.539025][ T9486] vhci_hcd vhci_hcd.0: Device attached [ 253.547560][ T9484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.665293][ T9486] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 253.671881][ T9486] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.689111][ T10] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 253.702969][ T9480] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 253.709598][ T9480] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 253.736250][ T10] usb 4-1: USB disconnect, device number 11 [ 253.756736][ T991] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 253.759198][ T9486] vhci_hcd vhci_hcd.0: Device attached [ 253.785048][ T9480] vhci_hcd vhci_hcd.0: Device attached [ 253.797406][ T9499] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 253.804029][ T9499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.823493][ T9499] vhci_hcd vhci_hcd.0: Device attached [ 253.841184][ T9488] vhci_hcd: connection closed [ 253.841192][ T9481] vhci_hcd: connection reset by peer [ 253.852534][ T9496] vhci_hcd: connection closed [ 253.855597][ T9494] vhci_hcd: connection closed [ 253.860828][ T1350] vhci_hcd vhci_hcd.2: stop threads [ 253.920611][ T1350] vhci_hcd vhci_hcd.2: release socket [ 253.921169][ T9500] vhci_hcd: connection closed [ 253.957825][ T1350] vhci_hcd vhci_hcd.2: disconnect device [ 253.991767][ T1350] vhci_hcd vhci_hcd.2: stop threads [ 253.997769][ T1350] vhci_hcd vhci_hcd.2: release socket [ 254.003613][ T1350] vhci_hcd vhci_hcd.2: disconnect device [ 254.084047][ T1350] vhci_hcd vhci_hcd.2: stop threads [ 254.095408][ T1350] vhci_hcd vhci_hcd.2: release socket [ 254.112785][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.139718][ T1350] vhci_hcd vhci_hcd.2: disconnect device [ 254.150725][ T5789] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.179402][ T1350] vhci_hcd vhci_hcd.2: stop threads [ 254.184840][ T1350] vhci_hcd vhci_hcd.2: release socket [ 254.203478][ T1350] vhci_hcd vhci_hcd.2: disconnect device [ 254.211003][ T1350] vhci_hcd vhci_hcd.2: stop threads [ 254.221267][ T1350] vhci_hcd vhci_hcd.2: release socket [ 254.269875][ T1350] vhci_hcd vhci_hcd.2: disconnect device [ 254.890971][ T5789] usb 5-1: Using ep0 maxpacket: 16 [ 255.033492][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.132703][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.155372][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.439345][ T9537] overlay: filesystem on ./file0 not supported [ 255.638883][ T5789] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.649964][ T5789] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.655798][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 255.659773][ T5789] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 255.680519][ T5789] usb 5-1: config 0 interface 0 has no altsetting 0 [ 255.687153][ T5789] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 255.696192][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.707704][ T5789] usb 5-1: config 0 descriptor?? [ 255.778011][ T9518] loop3: detected capacity change from 0 to 40427 [ 255.789340][ T9518] F2FS-fs (loop3): invalid crc value [ 255.856607][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 255.888591][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 255.914366][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 255.935834][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 255.970886][ T10] usb 7-1: Product: syz [ 255.988789][ T10] usb 7-1: Manufacturer: syz [ 256.003998][ T10] usb 7-1: SerialNumber: syz [ 256.040139][ T10] usb 7-1: config 0 descriptor?? [ 256.061778][ T9535] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 256.062129][ T9518] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 256.145578][ T9518] F2FS-fs (loop3): Start checkpoint disabled! [ 256.199538][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.210437][ T9518] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 256.221317][ T9518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 256.256499][ T10] libceph: connect (1)[c::]:6789 error -101 [ 256.310851][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 256.348572][ T803] usb 7-1: USB disconnect, device number 10 [ 256.379962][ T9549] ceph: No mds server is up or the cluster is laggy [ 256.409854][ T10] libceph: connect (1)[c::]:6789 error -101 [ 256.413573][ T9541] loop0: detected capacity change from 0 to 32768 [ 256.422615][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 256.452605][ T9518] overlayfs: conflicting lowerdir path [ 256.473906][ T9518] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 256.581989][ T1350] kworker/u8:8: attempt to access beyond end of device [ 256.581989][ T1350] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 256.596644][ T1350] CPU: 0 UID: 0 PID: 1350 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.596681][ T1350] Tainted: [L]=SOFTLOCKUP [ 256.596690][ T1350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.596706][ T1350] Workqueue: writeback wb_workfn (flush-7:3) [ 256.596755][ T1350] Call Trace: [ 256.596765][ T1350] [ 256.596775][ T1350] dump_stack_lvl+0xe8/0x150 [ 256.596806][ T1350] f2fs_stop_checkpoint+0x3c7/0x590 [ 256.596848][ T1350] f2fs_write_end_io+0x1274/0x1740 [ 256.596917][ T1350] __submit_merged_bio+0x256/0x6a0 [ 256.596959][ T1350] __submit_merged_write_cond+0x3c9/0x4e0 [ 256.597005][ T1350] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 256.597065][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.597109][ T1350] f2fs_write_data_pages+0x287e/0x34f0 [ 256.597145][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.597234][ T1350] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 256.597268][ T1350] ? cfg80211_inform_single_bss_data+0x13b9/0x1af0 [ 256.597379][ T1350] ? __lock_acquire+0x6b5/0x2cf0 [ 256.597437][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.597471][ T1350] ? __lock_acquire+0x6b5/0x2cf0 [ 256.597527][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.597559][ T1350] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 256.597598][ T1350] do_writepages+0x32e/0x550 [ 256.597636][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.597665][ T1350] ? reacquire_held_locks+0x104/0x190 [ 256.597697][ T1350] ? writeback_sb_inodes+0x463/0x19d0 [ 256.597737][ T1350] __writeback_single_inode+0x133/0x10e0 [ 256.597770][ T1350] ? do_raw_spin_unlock+0xf5/0x210 [ 256.597815][ T1350] writeback_sb_inodes+0x979/0x19d0 [ 256.597844][ T1350] ? __lock_acquire+0x6b5/0x2cf0 [ 256.597913][ T1350] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 256.597941][ T1350] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.598037][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.598067][ T1350] ? rcu_is_watching+0x15/0xb0 [ 256.598098][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.598140][ T1350] wb_writeback+0x445/0xb00 [ 256.598177][ T1350] ? queue_io+0x231/0x470 [ 256.598225][ T1350] ? __pfx_wb_writeback+0x10/0x10 [ 256.598252][ T1350] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.598313][ T1350] wb_workfn+0x3f8/0xf10 [ 256.598350][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.598379][ T1350] ? look_up_lock_class+0x57/0x110 [ 256.598432][ T1350] ? __pfx_wb_workfn+0x10/0x10 [ 256.598477][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.598507][ T1350] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.598541][ T1350] ? lock_acquire+0x106/0x350 [ 256.598571][ T1350] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.598613][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.598647][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.598684][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.598717][ T1350] ? process_scheduled_works+0xa70/0x1860 [ 256.598742][ T1350] ? process_scheduled_works+0xa70/0x1860 [ 256.598772][ T1350] process_scheduled_works+0xb5d/0x1860 [ 256.598799][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.598875][ T1350] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.598911][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.598940][ T1350] ? assign_work+0x3d5/0x5e0 [ 256.598975][ T1350] worker_thread+0xa53/0xfc0 [ 256.599006][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.599058][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.599102][ T1350] kthread+0x389/0x470 [ 256.599137][ T1350] ? __pfx_worker_thread+0x10/0x10 [ 256.599162][ T1350] ? __pfx_kthread+0x10/0x10 [ 256.599198][ T1350] ret_from_fork+0x514/0xb70 [ 256.599360][ T1350] ? __pfx_ret_from_fork+0x10/0x10 [ 256.599388][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.599417][ T1350] ? __switch_to+0xc79/0x1410 [ 256.599459][ T1350] ? __pfx_kthread+0x10/0x10 [ 256.599496][ T1350] ret_from_fork_asm+0x1a/0x30 [ 256.599553][ T1350] [ 256.647130][ T5789] hid (null): unknown global tag 0xc [ 256.683701][ T1350] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 256.703880][ T5789] hid (null): unknown global tag 0xd4 [ 256.703953][ T5789] hid (null): unknown global tag 0xe [ 256.703974][ T5789] hid (null): unknown global tag 0xb3 [ 256.703994][ T5789] hid (null): unknown global tag 0xc [ 256.831429][ T9541] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 256.858533][ T1350] CPU: 0 UID: 0 PID: 1350 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.858571][ T1350] Tainted: [L]=SOFTLOCKUP [ 256.858579][ T1350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.858596][ T1350] Workqueue: writeback wb_workfn (flush-7:3) [ 256.858646][ T1350] Call Trace: [ 256.858655][ T1350] [ 256.858666][ T1350] dump_stack_lvl+0xe8/0x150 [ 256.858696][ T1350] f2fs_stop_checkpoint+0x3c7/0x590 [ 256.858744][ T1350] f2fs_write_end_io+0x1274/0x1740 [ 256.858815][ T1350] __submit_merged_bio+0x256/0x6a0 [ 256.858854][ T1350] __submit_merged_write_cond+0x3c9/0x4e0 [ 256.858896][ T1350] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 256.858944][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.858984][ T1350] f2fs_write_data_pages+0x287e/0x34f0 [ 256.859023][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.859094][ T1350] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 256.859128][ T1350] ? cfg80211_inform_single_bss_data+0x13b9/0x1af0 [ 256.859224][ T1350] ? __lock_acquire+0x6b5/0x2cf0 [ 256.859275][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.859303][ T1350] ? __lock_acquire+0x6b5/0x2cf0 [ 256.859353][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.859384][ T1350] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 256.859421][ T1350] do_writepages+0x32e/0x550 [ 256.859457][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.859486][ T1350] ? reacquire_held_locks+0x104/0x190 [ 256.859517][ T1350] ? writeback_sb_inodes+0x463/0x19d0 [ 256.859555][ T1350] __writeback_single_inode+0x133/0x10e0 [ 256.859587][ T1350] ? do_raw_spin_unlock+0xf5/0x210 [ 256.859629][ T1350] writeback_sb_inodes+0x979/0x19d0 [ 256.859657][ T1350] ? __lock_acquire+0x6b5/0x2cf0 [ 256.859724][ T1350] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 256.859752][ T1350] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.859835][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.859865][ T1350] ? rcu_is_watching+0x15/0xb0 [ 256.859895][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.859934][ T1350] wb_writeback+0x445/0xb00 [ 256.859968][ T1350] ? queue_io+0x231/0x470 [ 256.860006][ T1350] ? __pfx_wb_writeback+0x10/0x10 [ 256.860032][ T1350] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.860088][ T1350] wb_workfn+0x3f8/0xf10 [ 256.860124][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.860153][ T1350] ? look_up_lock_class+0x57/0x110 [ 256.860200][ T1350] ? __pfx_wb_workfn+0x10/0x10 [ 256.860242][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.860270][ T1350] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.860304][ T1350] ? lock_acquire+0x106/0x350 [ 256.860333][ T1350] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.860373][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.860406][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.860445][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.860477][ T1350] ? process_scheduled_works+0xa70/0x1860 [ 256.860503][ T1350] ? process_scheduled_works+0xa70/0x1860 [ 256.860531][ T1350] process_scheduled_works+0xb5d/0x1860 [ 256.860558][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.860624][ T1350] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.860658][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.860687][ T1350] ? assign_work+0x3d5/0x5e0 [ 256.860724][ T1350] worker_thread+0xa53/0xfc0 [ 256.860753][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.860800][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.860841][ T1350] kthread+0x389/0x470 [ 256.860874][ T1350] ? __pfx_worker_thread+0x10/0x10 [ 256.860899][ T1350] ? __pfx_kthread+0x10/0x10 [ 256.860933][ T1350] ret_from_fork+0x514/0xb70 [ 256.860965][ T1350] ? __pfx_ret_from_fork+0x10/0x10 [ 256.860991][ T1350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.861020][ T1350] ? __switch_to+0xc79/0x1410 [ 256.861060][ T1350] ? __pfx_kthread+0x10/0x10 [ 256.861096][ T1350] ret_from_fork_asm+0x1a/0x30 [ 256.861147][ T1350] [ 256.861346][ T1350] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 257.373758][ T5789] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.409979][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.456246][ T10] usb 5-1: USB disconnect, device number 12 [ 257.487643][ T5789] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.629176][ T9541] XFS (loop0): Ending clean mount [ 257.693704][ T5638] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 257.708629][ T9541] XFS (loop0): User initiated shutdown received. [ 257.733906][ T9541] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 257.770272][ T9541] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 257.864353][ T5638] usb 7-1: Using ep0 maxpacket: 32 [ 257.879144][ T5634] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 257.879310][ T5638] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 257.907199][ T5638] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 257.931147][ T5638] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 257.942889][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 257.994038][ T5638] usb 7-1: config 1 has no interface number 0 [ 258.002144][ T5638] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.004870][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.015896][ T5638] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 258.015957][ T5638] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 258.015985][ T5638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.165039][ T5638] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 258.274126][ T5638] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 258.421564][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.447204][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.457893][ T9579] input: syz0 as /devices/virtual/input/input10 [ 258.716344][ T10] usb 7-1: USB disconnect, device number 11 [ 258.749270][ T10] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 258.819516][ T5638] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 258.955287][ T9591] loop0: detected capacity change from 0 to 1024 [ 258.978794][ T5638] usb 4-1: Using ep0 maxpacket: 8 [ 258.992061][ T5638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.017301][ T9593] loop4: detected capacity change from 0 to 164 [ 259.026918][ T5638] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 259.037731][ T5638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.048339][ T991] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 259.054421][ T5638] usb 4-1: config 0 descriptor?? [ 259.068238][ T9593] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 259.099030][ T5638] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 259.118470][ T9595] loop6: detected capacity change from 0 to 8 [ 259.424602][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.434774][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.465197][ T9595] loop6: detected capacity change from 8 to 7 [ 259.491426][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.554903][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.556069][ T9605] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 259.588004][ T9605] overlayfs: failed to set xattr on upper [ 259.595791][ T9605] overlayfs: ...falling back to redirect_dir=nofollow. [ 259.603349][ T9605] overlayfs: ...falling back to index=off. [ 259.789235][ T9598] loop6: detected capacity change from 7 to 0 [ 259.949458][ T29] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 259.958568][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 259.991796][ T29] usb 6-1: SerialNumber: syz [ 260.005511][ T9609] binder: 9608:9609 ioctl c0306201 2000000001c0 returned -14 [ 260.071527][ T5638] gspca_vc032x: reg_w err -71 [ 260.080436][ T5638] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 260.140026][ T5638] usb 4-1: USB disconnect, device number 12 [ 260.259074][ T9620] Invalid argument reading file caps for ./file0 [ 260.353519][ T9623] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1431'. [ 260.437990][ T9628] netlink: 'syz.2.1434': attribute type 10 has an invalid length. [ 260.518472][ T9628] veth0_vlan: left promiscuous mode [ 260.528887][ T9628] veth0_vlan: entered promiscuous mode [ 260.536399][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.552601][ T9628] team0: Device veth0_vlan failed to register rx_handler [ 260.690206][ T29] usb 6-1: 0:2 : does not exist [ 260.771607][ T29] usb 6-1: USB disconnect, device number 6 [ 260.991214][ T6319] udevd[6319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.331014][ T9641] loop0: detected capacity change from 0 to 64 [ 261.577119][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.795443][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.910383][ T9635] loop3: detected capacity change from 0 to 131072 [ 261.960496][ T9635] F2FS-fs (loop3): invalid crc value [ 262.057223][ T9635] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 262.079591][ T9635] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 262.863512][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.063897][ T9652] loop6: detected capacity change from 0 to 8 [ 263.122466][ T9643] loop5: detected capacity change from 0 to 131072 [ 263.131305][ T9643] F2FS-fs (loop5): invalid crc value [ 263.232313][ T9643] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 263.246780][ T9643] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 263.335423][ T9652] loop6: detected capacity change from 8 to 7 [ 263.715583][ T9653] loop6: detected capacity change from 7 to 0 [ 263.729134][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.738340][ C0] buffer_io_error: 11 callbacks suppressed [ 263.738355][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 263.789578][ T9652] ldm_validate_partition_table(): Disk read failed. [ 263.840298][ T9652] Dev loop6: unable to read RDB block 0 [ 263.885558][ T9652] loop6: unable to read partition table [ 263.907263][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.943264][ T9652] loop6: partition table beyond EOD, truncated [ 263.949471][ T9652] loop_reread_partitions: partition scan of loop6 (ÛuêƒG Ÿ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð [ 263.949471][ T9652] å’ 1 [ 265.030282][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.104688][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.114077][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.123508][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.402244][ T803] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 265.512028][ T175] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.585120][ T803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.638844][ T803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.703554][ T803] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 265.739050][ T803] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 265.796782][ T803] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 265.875403][ T803] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 265.919027][ T803] usb 3-1: config 1 interface 1 has no altsetting 0 [ 265.953889][ T803] usb 3-1: string descriptor 0 read error: -22 [ 265.982254][ T803] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 266.003448][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.021920][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.431575][ T175] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.810457][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 266.878507][ T9715] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 267.039869][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.167091][ T803] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 267.229202][ T50] Bluetooth: hci0: command tx timeout [ 267.432348][ T803] usb 3-1: USB disconnect, device number 14 [ 267.520681][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 267.553587][ T175] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.641690][ T9732] hsr0: entered promiscuous mode [ 267.649260][ T9737] hsr_slave_0: left promiscuous mode [ 267.660527][ T9737] hsr_slave_1: left promiscuous mode [ 267.697751][ T9737] hsr0 (unregistering): left promiscuous mode [ 267.847790][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.095331][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.175738][ T175] bridge_slave_1: left allmulticast mode [ 268.181802][ T175] bridge_slave_1: left promiscuous mode [ 268.215951][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.270341][ T175] bridge_slave_0: left allmulticast mode [ 268.276031][ T175] bridge_slave_0: left promiscuous mode [ 268.281849][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.889278][ T50] Bluetooth: hci6: command 0x1003 tx timeout [ 268.898868][ T5635] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 269.040502][ T9778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.095524][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 269.289283][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 269.294563][ T5635] Bluetooth: hci0: command tx timeout [ 269.302976][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 269.316234][ T10] usb 6-1: config 0 has no interface number 0 [ 269.363944][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 269.397258][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 269.408452][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.436620][ T10] usb 6-1: Product: syz [ 269.440977][ T10] usb 6-1: Manufacturer: syz [ 269.454099][ T10] usb 6-1: SerialNumber: syz [ 269.496313][ T10] usb 6-1: config 0 descriptor?? [ 269.648149][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.664879][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.676411][ T175] bond0 (unregistering): Released all slaves [ 269.754553][ T30] audit: type=1326 audit(1779969279.229:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6818b9ce59 code=0x7ffc0000 [ 269.827121][ T30] audit: type=1326 audit(1779969279.229:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6818b9ce59 code=0x7ffc0000 [ 269.854423][ T30] audit: type=1326 audit(1779969279.229:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6818b9ce59 code=0x7ffc0000 [ 269.929734][ T30] audit: type=1326 audit(1779969279.229:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6818b9ce59 code=0x7ffc0000 [ 270.021113][ T30] audit: type=1326 audit(1779969279.269:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6818b9ce59 code=0x7ffc0000 [ 270.045790][ T30] audit: type=1326 audit(1779969279.339:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6818b5d68e code=0x7ffc0000 [ 270.071049][ T30] audit: type=1326 audit(1779969279.339:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6818b5d68e code=0x7ffc0000 [ 270.131601][ T30] audit: type=1326 audit(1779969279.368:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6818b5d68e code=0x7ffc0000 [ 270.139667][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 270.156327][ T30] audit: type=1326 audit(1779969279.368:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6818b5d68e code=0x7ffc0000 [ 270.156385][ T30] audit: type=1326 audit(1779969279.368:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.2.1499" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6818b5d68e code=0x7ffc0000 [ 270.302494][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 270.348601][ T9804] netlink: 'syz.3.1500': attribute type 21 has an invalid length. [ 270.403045][ T9804] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1500'. [ 270.523405][ T9801] netlink: 'syz.3.1500': attribute type 21 has an invalid length. [ 270.531241][ T9801] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1500'. [ 270.575482][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 270.612837][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 270.643693][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 270.700337][ T9804] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1500'. [ 270.743645][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 270.764597][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 270.784595][ T9801] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1500'. [ 270.822514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 271.036127][ T10] usb 6-1: USB disconnect, device number 7 [ 271.419232][ T5635] Bluetooth: hci0: command tx timeout [ 271.444538][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.461282][ T9675] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.468574][ T9675] bridge_slave_0: entered allmulticast mode [ 271.539819][ T9675] bridge_slave_0: entered promiscuous mode [ 271.572598][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.612658][ T9675] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.630198][ T9675] bridge_slave_1: entered allmulticast mode [ 271.638762][ T9675] bridge_slave_1: entered promiscuous mode [ 271.960066][ T9833] loop0: detected capacity change from 0 to 128 [ 271.968686][ T9833] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 271.980356][ T9833] hpfs: filesystem error: improperly stopped [ 271.986345][ T9833] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 271.994067][ T9833] hpfs: You really don't want any checks? You are crazy... [ 272.051146][ T9833] hpfs: Code page index out of array [ 272.058943][ T9833] hpfs: code page support is disabled [ 272.064840][ T9833] hpfs: hpfs_map_4sectors(): unaligned read [ 272.070904][ T9833] hpfs: hpfs_map_4sectors(): unaligned read [ 272.076797][ T9833] hpfs: filesystem error: unable to find root dir [ 272.105900][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 272.189634][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.202090][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.213874][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.224860][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.234935][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.482814][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 272.508754][ T9835] ipvlan2: entered allmulticast mode [ 272.617600][ T9835] syz_tun: entered allmulticast mode [ 272.866763][ T9675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.975092][ T9675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.195089][ T9675] team0: Port device team_slave_0 added [ 273.204079][ T9675] team0: Port device team_slave_1 added [ 273.239574][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.246547][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.300747][ T5638] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 273.330509][ T9675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.364282][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.386263][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.462401][ T9675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.472443][ T5638] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 273.495916][ T5638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.564416][ T50] Bluetooth: hci0: command tx timeout [ 273.573208][ T5638] usb 1-1: config 0 descriptor?? [ 273.617911][ T5638] cp210x 1-1:0.0: cp210x converter detected [ 273.725299][ T9675] hsr_slave_0: entered promiscuous mode [ 273.769257][ T9675] hsr_slave_1: entered promiscuous mode [ 273.775709][ T9675] debugfs: 'hsr0' already exists in 'hsr' [ 273.781526][ T9675] Cannot create hsr debugfs directory [ 274.010012][ T175] hsr_slave_0: left promiscuous mode [ 274.036329][ T175] hsr_slave_1: left promiscuous mode [ 274.131856][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.139349][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.161386][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.202919][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.225994][ T175] veth1_macvtap: left promiscuous mode [ 274.231734][ T175] veth0_macvtap: left promiscuous mode [ 274.237319][ T175] veth1_vlan: left promiscuous mode [ 274.242738][ T175] veth0_vlan: left promiscuous mode [ 274.325063][ T50] Bluetooth: hci5: command tx timeout [ 274.436879][ T5638] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 274.459618][ T5638] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 274.514771][ T5638] usb 1-1: cp210x converter now attached to ttyUSB0 [ 274.603408][ T5638] usb 1-1: USB disconnect, device number 10 [ 274.734888][ T5765] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 274.751404][ T9878] loop5: detected capacity change from 0 to 32768 [ 274.803144][ T5638] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 274.833764][ T5638] cp210x 1-1:0.0: device disconnected [ 274.964442][ T9878] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 274.964442][ T9878] [ 275.045440][ T9878] ERROR: (device loop5): remounting filesystem as read-only [ 275.249959][ T175] team0 (unregistering): Port device team_slave_1 removed [ 275.388345][ T175] team0 (unregistering): Port device team_slave_0 removed [ 275.544604][ T9911] ucma_write: process 641 (syz.0.1531) changed security contexts after opening file descriptor, this is not allowed. [ 275.629588][ T50] Bluetooth: hci0: command tx timeout [ 275.929408][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 275.950121][ T9909] tipc: Enabling of bearer rejected, failed to enable media [ 276.243795][ T5765] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 276.376968][ T50] Bluetooth: hci5: command tx timeout [ 276.451719][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1536'. [ 276.460683][ T9927] netlink: 'syz.5.1536': attribute type 5 has an invalid length. [ 276.469022][ T9927] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1536'. [ 276.560774][ T803] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 276.590620][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.600701][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.752640][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 276.759994][ T803] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 276.766422][ T9924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.768585][ T803] usb 1-1: config 0 has no interface number 0 [ 276.785423][ T803] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 276.786569][ T9924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.795514][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.810246][ T803] usb 1-1: Product: syz [ 276.814535][ T803] usb 1-1: Manufacturer: syz [ 276.819616][ T803] usb 1-1: SerialNumber: syz [ 276.831866][ T803] usb 1-1: config 0 descriptor?? [ 276.841409][ T803] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 276.987506][ T9924] batman_adv: batadv0: Interface deactivated: macsec1 [ 276.998649][ T5765] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 277.014017][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.043352][ T5765] usb 3-1: Product: syz [ 277.047597][ T5765] usb 3-1: Manufacturer: syz [ 277.052202][ T5765] usb 3-1: SerialNumber: syz [ 277.068828][ T5765] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 277.101511][ T803] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 277.148276][ T9927] geneve2: entered promiscuous mode [ 277.154539][ T9927] geneve2: entered allmulticast mode [ 277.156136][ T803] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 277.177306][ T1169] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.187031][ T1169] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 46646 - 0 [ 277.198367][ T1169] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.207733][ T1169] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 46646 - 0 [ 277.245929][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.256869][ T36] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 46646 - 0 [ 277.326723][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.348442][ T36] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 46646 - 0 [ 277.383921][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 277.586454][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 277.586946][ T29] usb 1-1: USB disconnect, device number 11 [ 277.636912][ T5765] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.696196][ T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 277.711984][ T5765] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 277.768696][ T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 277.782105][ T5765] usb 3-1: media controller created [ 277.840640][ T29] quatech2 1-1:0.51: device disconnected [ 277.946633][ T5765] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.002376][ T9947] loop5: detected capacity change from 0 to 2048 [ 278.069937][ T9947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.103630][ T9947] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.216680][ T5765] usb 3-1: USB disconnect, device number 15 [ 278.379239][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.446956][ T50] Bluetooth: hci5: command tx timeout [ 279.026498][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 279.076511][ T9969] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 279.096851][ T9969] syzkaller0: owner set to 779 [ 279.296539][ T9675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 279.372298][ T9675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.394146][ T9675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 279.416013][ T9982] loop0: detected capacity change from 0 to 1024 [ 279.425573][ T9675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.457935][ T9982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.577119][ T9675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 279.615074][ T9675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.635060][ T9675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 279.667369][ T9675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.959698][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.985244][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.005277][ T9836] bridge_slave_0: entered allmulticast mode [ 280.031276][ T9836] bridge_slave_0: entered promiscuous mode [ 280.100633][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.130007][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.160995][ T9836] bridge_slave_1: entered allmulticast mode [ 280.190891][ T9836] bridge_slave_1: entered promiscuous mode [ 280.293251][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 280.331474][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.372957][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.378806][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.465115][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 280.497184][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 280.526110][ T50] Bluetooth: hci5: command tx timeout [ 280.534651][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.572026][ T10] usb 3-1: Product: syz [ 280.598651][ T9836] team0: Port device team_slave_0 added [ 280.602490][ T10] usb 3-1: Manufacturer: syz [ 280.625225][ T9836] team0: Port device team_slave_1 added [ 280.639287][ T10] usb 3-1: SerialNumber: syz [ 280.667900][ T10] usb 3-1: config 0 descriptor?? [ 280.737742][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.758686][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.852015][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.877335][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.906547][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.000114][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.114567][ T10] airspy 3-1:0.0: Board ID: 00 [ 281.129554][ T10] airspy 3-1:0.0: Firmware version: [ 281.292043][T10017] loop3: detected capacity change from 0 to 32768 [ 281.308783][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 281.316685][T10017] ocfs2: Bad value for 'coherency' [ 281.400523][ T9836] hsr_slave_0: entered promiscuous mode [ 281.444896][ T9836] hsr_slave_1: entered promiscuous mode [ 281.474047][ T9836] debugfs: 'hsr0' already exists in 'hsr' [ 281.497109][ T9836] Cannot create hsr debugfs directory [ 281.931134][ T10] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 282.076983][ T10] airspy 3-1:0.0: Registered as swradio24 [ 282.100773][ T10] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 282.149761][ T10] usb 3-1: USB disconnect, device number 16 [ 282.184172][T10047] loop3: detected capacity change from 0 to 128 [ 282.347983][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.664970][T10062] loop5: detected capacity change from 0 to 512 [ 282.673860][T10062] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 282.716105][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 282.716126][ T30] audit: type=1800 audit(1779969292.156:252): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1570" name="file1" dev="loop5" ino=1048639 res=0 errno=0 [ 282.776077][ T9836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.948724][T10067] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1572'. [ 282.964910][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.012121][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.019363][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.077215][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.084439][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.262826][ T9836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.296283][T10077] overlayfs: failed to resolve './file0': -2 [ 283.495194][ T9836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.528510][T10084] netlink: 'syz.0.1576': attribute type 9 has an invalid length. [ 283.541332][T10084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1576'. [ 283.676841][ T9836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.714725][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 283.887054][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 283.908834][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.933498][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.964578][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.000195][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 284.019908][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.041962][ T9] usb 3-1: config 0 descriptor?? [ 284.363090][ T9836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.408583][ T9836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.431211][ T9836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.468833][ T9836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.501026][ T9836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.516213][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 284.556809][ T9] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 284.560065][ T9836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.620349][ T9836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.629872][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input11 [ 284.683533][T10082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.721644][T10082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.879753][ T9] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 285.355280][ T9] usb 3-1: USB disconnect, device number 17 [ 285.364195][ T9836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.096412][T10117] loop5: detected capacity change from 0 to 32768 [ 286.138849][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.225084][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.297154][ T30] audit: type=1800 audit(1779969295.725:253): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1584" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 286.337021][ T9836] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.377090][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.384319][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.458329][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.465559][T10143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.716803][T10186] loop3: detected capacity change from 0 to 32768 [ 287.767928][T10186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1593 (10186) [ 287.880902][T10188] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 287.987360][T10186] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 287.997766][T10186] BTRFS info (device loop3): using sha256 checksum algorithm [ 288.043453][T10188] overlayfs: overlapping lowerdir path [ 288.097589][T10179] loop5: detected capacity change from 0 to 131072 [ 288.110840][T10179] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 288.121914][T10179] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 288.137421][T10179] F2FS-fs (loop5): invalid crc value [ 288.182077][T10186] BTRFS info (device loop3): rebuilding free space tree [ 288.228518][T10179] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 288.232585][T10186] BTRFS info (device loop3): enabling ssd optimizations [ 288.244590][T10186] BTRFS info (device loop3): using spread ssd allocation scheme [ 288.250283][T10179] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 288.253370][T10186] BTRFS info (device loop3): enabling free space tree [ 288.259752][T10179] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 288.266145][T10186] BTRFS info (device loop3): force clearing of disk cache [ 288.281048][T10186] BTRFS info (device loop3): enabling auto defrag [ 288.287681][T10186] BTRFS info (device loop3): max_inline set to 0 [ 288.311923][ T9675] veth0_vlan: entered promiscuous mode [ 288.427695][ T9675] veth1_vlan: entered promiscuous mode [ 288.724231][ T9675] veth0_macvtap: entered promiscuous mode [ 288.773869][ T9675] veth1_macvtap: entered promiscuous mode [ 288.898512][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.974514][ T5633] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.005399][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.041981][T10143] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 289.114089][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.168744][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.231750][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.290941][T10143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.847860][ T1350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.888290][ T1350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.922327][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.198594][T10238] could not open pipe file descriptor [ 290.233244][ T1350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.284493][ T1350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.910070][T10257] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1605'. [ 290.968361][T10257] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1605'. [ 291.166426][ T803] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 291.338583][ T803] usb 3-1: config 0 has no interfaces? [ 291.358901][ T803] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.395521][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.424067][ T803] usb 3-1: SerialNumber: syz [ 291.439596][ T803] usb 3-1: config 0 descriptor?? [ 291.634258][ T5765] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 291.739872][ T9] usb 3-1: USB disconnect, device number 18 [ 291.751497][ T9836] veth0_vlan: entered promiscuous mode [ 291.809252][ T9836] veth1_vlan: entered promiscuous mode [ 291.824841][ T5765] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 291.861539][ T5765] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 291.886514][ T5765] usb 6-1: Product: syz [ 291.896848][ T5765] usb 6-1: Manufacturer: syz [ 291.904839][ T5765] usb 6-1: SerialNumber: syz [ 291.915296][ T5765] usb 6-1: config 0 descriptor?? [ 291.929179][ T5765] ch341 6-1:0.0: ch341-uart converter detected [ 291.951252][ T9836] veth0_macvtap: entered promiscuous mode [ 291.970197][ T9836] veth1_macvtap: entered promiscuous mode [ 291.999972][ T5786] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 292.010375][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.026395][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.055590][T10146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.066343][T10146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.096818][T10146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.118441][T10146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.141910][ T29] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 292.179531][ T5786] usb 1-1: Using ep0 maxpacket: 16 [ 292.196260][ T5786] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.208342][ T5786] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.237490][ T5786] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 292.313931][ T5786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.325938][ T5786] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 292.348529][ T29] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 292.372054][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.385959][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.396830][ T5818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.420695][ T29] usb 4-1: config 0 has no interface number 0 [ 292.436473][ T5786] usb 1-1: config 0 descriptor?? [ 292.443531][ T5818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.445703][ T29] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 292.486794][ T29] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 292.524780][ T29] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 292.549408][ T5818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.557737][ T29] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 292.559174][ T5818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.593332][ T29] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 292.630711][ T29] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.656495][ T29] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 292.670918][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.691824][ T29] usb 4-1: Product: syz [ 292.702467][ T29] usb 4-1: Manufacturer: syz [ 292.715363][ T29] usb 4-1: SerialNumber: syz [ 292.766976][ T29] usb 4-1: config 0 descriptor?? [ 292.777754][T10276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.793875][ T29] usb 4-1: will this work? Command EP is not usually 12 [ 292.800867][ T29] usb 4-1: will this work? Response EP is not usually 3 [ 292.831198][ T29] usb 4-1: will this work? Image data EP is not usually 2 [ 292.848183][ T29] scsi host1: microtekX6 [ 292.917180][ T5786] hid (null): unknown global tag 0xc [ 292.929573][T10143] usb 4-1: error -90 submitting URB [ 292.968132][ T5765] ch341-uart ttyUSB0: break control not supported, using simulated break [ 292.981674][ T2015] usb 4-1: error -90 submitting URB [ 293.015264][ T2015] usb 4-1: error -90 submitting URB [ 293.043614][ T5887] usb 4-1: USB disconnect, device number 13 [ 293.048664][ T5765] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 293.056790][ T2015] usb 4-1: error -19 submitting URB [ 293.083210][ T5765] usb 6-1: USB disconnect, device number 8 [ 293.123391][ T5765] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 293.144918][ T5765] ch341 6-1:0.0: device disconnected [ 293.225952][ T5786] usb 1-1: USB disconnect, device number 12 [ 293.893868][T10314] loop7: detected capacity change from 0 to 128 [ 294.095481][T10314] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.118822][T10314] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 294.417718][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 294.438328][T10314] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 20: comm syz.7.1625: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 294.468345][T10314] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem [ 294.480385][T10330] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 20: comm syz.7.1625: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 294.526470][ T5765] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 294.555419][T10330] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem [ 294.610119][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.641301][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 294.676814][T10335] loop3: detected capacity change from 0 to 1024 [ 294.691350][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.707994][ T5765] usb 6-1: Using ep0 maxpacket: 32 [ 294.715763][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.729004][ T5765] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 294.752227][ T10] usb 1-1: Product: syz [ 294.764554][ T5765] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 294.774646][ T10] usb 1-1: Manufacturer: syz [ 294.793329][ T9675] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.799365][ T5765] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 294.828659][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.833513][ T10] usb 1-1: SerialNumber: syz [ 294.845647][ T5765] usb 6-1: Product: syz [ 294.855741][ T5765] usb 6-1: Manufacturer: syz [ 294.869625][ T5765] usb 6-1: SerialNumber: syz [ 294.914455][ T10] cdc_mbim 1-1:1.0: skipping garbage [ 295.017593][ T30] audit: type=1800 audit(1779969304.409:254): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1630" name=D70E6BC61D570A7E0C7DA330F643194C1893FCD6489FAC605EEAD61B53DFF18CAF526ECCCC9BBD9146BC3C3BB67677695E6FDDAAB081786E9084014E60F5C03AE5A9087726B05E17402CD2FBB80D773B8A41470B1F901A8C2B2D57450181F4FC5BC53C7CB3DC032B84567492607CB08832ECA9F79DA9210D197863E5DB5A74A9823DC0CC8BD9F3A9B6FF5A7D15D4747A9B26E088F4FAD96D81CD1214226B1C4585D418D593220FCBB9AD949266CC48163E3498B46EBCDF7B2B5ECFE67539A61ED9E39B02D5B35AC0D0E7FA83 dev="loop3" ino=26 res=0 errno=0 [ 295.129264][T10321] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.182286][ T5765] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 295.221181][ T5765] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 295.270961][ T5765] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 295.339422][ T5765] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 295.419637][T10351] netlink: 'syz.3.1635': attribute type 7 has an invalid length. [ 295.536279][T10351] netlink: 'syz.3.1635': attribute type 7 has an invalid length. [ 295.592570][ T5765] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 295.654524][T10349] loop4: detected capacity change from 0 to 40427 [ 295.656110][ T5765] usb 6-1: USB disconnect, device number 9 [ 295.672778][T10146] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.722164][T10349] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 295.730150][T10349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 295.750438][T10349] F2FS-fs (loop4): invalid crc value [ 295.765832][T10146] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.848930][ T1350] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.867888][T10349] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 295.870115][T10321] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.896987][T10349] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 295.904185][T10349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 295.909775][ T8603] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.925448][ T10] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 295.974211][ T10] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 295.986172][T10349] syz.4.1634: attempt to access beyond end of device [ 295.986172][T10349] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 296.108852][ T6319] udevd[6319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.262935][ T10] wwan wwan0: port wwan0mbim0 attached [ 296.303437][ T57] kworker/u8:4: attempt to access beyond end of device [ 296.303437][ T57] loop4: rw=1, sector=77944, nr_sectors = 16 limit=40427 [ 296.322656][ T29] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 296.419355][ T10] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 6a:27:b5:75:5d:2f [ 296.487963][ T10] usb 1-1: USB disconnect, device number 13 [ 296.525636][ T29] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.556414][ T10] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 296.561819][ T29] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 296.650453][ T29] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.720521][ T29] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 296.753242][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.797113][T10361] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 296.851318][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 297.843936][T10406] loop4: detected capacity change from 0 to 64 [ 297.942403][T10406] hfs: request for non-existent node -252 in B*Tree [ 298.005036][T10406] hfs: request for non-existent node -252 in B*Tree [ 298.877312][T10423] loop7: detected capacity change from 0 to 128 [ 298.967351][T10423] FAT-fs (loop7): bogus number of reserved sectors [ 299.025208][T10423] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 299.035872][T10409] loop5: detected capacity change from 0 to 131072 [ 299.046490][ T29] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 299.056961][ T29] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input12 [ 299.067175][T10409] F2FS-fs (loop5): invalid crc value [ 299.090339][T10423] FAT-fs (loop7): Can't find a valid FAT filesystem [ 299.225284][T10409] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 299.240216][T10409] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 299.336489][ T29] usb 4-1: USB disconnect, device number 14 [ 299.342606][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 299.692393][T10442] input: syz0 as /devices/virtual/input/input13 [ 300.212091][ T29] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 300.434048][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 300.467974][ T29] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 300.525911][ T29] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 300.564028][T10465] loop0: detected capacity change from 0 to 512 [ 300.581558][ T29] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.602340][T10465] EXT4-fs: Ignoring removed bh option [ 300.605356][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 300.644692][ T29] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 300.656159][T10467] netlink: 'syz.4.1668': attribute type 5 has an invalid length. [ 300.683549][T10465] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 300.708449][ T29] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 300.728274][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.738664][T10467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1668'. [ 300.747051][ T29] usb 4-1: Product: syz [ 300.755417][ T29] usb 4-1: Manufacturer: syz [ 300.766006][ T29] usb 4-1: SerialNumber: syz [ 300.783972][T10465] EXT4-fs (loop0): 1 truncate cleaned up [ 300.791780][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 300.820623][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input14 [ 300.836420][T10465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.929907][T10467] geneve2: entered promiscuous mode [ 300.962629][T10467] geneve2: entered allmulticast mode [ 300.987927][T10465] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1667: bg 0: block 465: padding at end of block bitmap is not set [ 301.055313][ T29] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 301.078200][T10475] EXT4-fs (loop0): shut down requested (2) [ 301.079225][T10465] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 301.104030][ T29] (id 0x00) [ 301.163768][T10465] EXT4-fs (loop0): This should not happen!! Data will be lost [ 301.163768][T10465] [ 301.255136][T10465] EXT4-fs (loop0): Total free blocks count 0 [ 301.304750][T10465] EXT4-fs (loop0): Free/Dirty block details [ 301.323741][T10465] EXT4-fs (loop0): free_blocks=0 [ 301.364527][T10465] EXT4-fs (loop0): dirty_blocks=2 [ 301.370351][ T29] rc_core: IR keymap rc-imon-pad not found [ 301.394089][ T29] Registered IR keymap rc-empty [ 301.403598][T10465] EXT4-fs (loop0): Block reservation details [ 301.426406][ T29] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 301.466083][T10465] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 301.490526][ T29] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 301.582778][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 301.668979][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input15 [ 301.761069][ T29] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:15> initialized [ 301.825931][ T29] usb 4-1: USB disconnect, device number 15 [ 302.248427][ T803] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 302.444701][ T803] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 302.500476][ T803] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 302.536536][ T803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.557473][ T803] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.618116][ T803] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 302.676450][ T803] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.741799][ T803] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.782020][ T803] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.800740][T10520] raw_sendmsg: syz.3.1684 forgot to set AF_INET. Fix it! [ 302.825685][ T803] usb 1-1: Product: syz [ 302.846553][ T803] usb 1-1: Manufacturer: syz [ 302.896309][T10497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.942307][ T803] cdc_wdm 1-1:1.0: skipping garbage [ 302.972171][ T803] cdc_wdm 1-1:1.0: skipping garbage [ 303.014485][ T803] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 303.052390][ T803] cdc_wdm 1-1:1.0: Unknown control protocol [ 303.219099][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.225979][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.233612][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.240216][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.246889][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.253514][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.260234][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.266914][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.273730][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.280330][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.290127][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.296739][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.303767][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.310368][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.316741][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.323349][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.329632][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.336328][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.342640][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 303.349251][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 303.438056][T10533] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1688'. [ 303.479779][ T991] usb 1-1: USB disconnect, device number 14 [ 303.479775][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 303.522580][T10533] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1688'. [ 304.001189][T10516] loop5: detected capacity change from 0 to 32768 [ 304.122553][T10516] read_mapping_page failed! [ 304.134631][T10516] ERROR: (device loop5): txCommit: [ 304.134631][T10516] [ 304.417418][ T117] ERROR: (device loop5): diUpdatePMap: the inode is not allocated in the working map [ 304.417418][ T117] [ 304.764169][T10557] input: syz0 as /devices/virtual/input/input16 [ 304.784905][T10556] loop3: detected capacity change from 0 to 2048 [ 304.841889][T10556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.861018][T10553] binder: 10552:10553 ioctl 40046205 0 returned -22 [ 305.431388][T10551] loop0: detected capacity change from 0 to 32768 [ 305.434469][ T5789] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 305.480703][T10551] [ 305.480703][T10551] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.480703][T10551] [ 305.525423][ T30] audit: type=1800 audit(1779969314.890:255): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1694" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 305.617509][ T991] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 305.656585][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 305.658295][T10551] [ 305.658295][T10551] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.658295][T10551] [ 305.666258][ T5789] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 305.700927][T10551] [ 305.700927][T10551] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.700927][T10551] [ 305.727539][ T5789] usb 5-1: config 2 has no interface number 0 [ 305.734877][T10551] [ 305.734877][T10551] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.734877][T10551] [ 305.749881][ T5789] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 305.776999][T10551] [ 305.776999][T10551] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.776999][T10551] [ 305.789493][ T5789] usb 5-1: config 2 interface 88 has no altsetting 0 [ 305.811603][ T5789] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 305.823685][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 305.828629][ T117] ERROR: (device loop0): dbFree: error in block map [ 305.828629][ T117] [ 305.840371][ T991] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.861983][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.886198][T10551] [ 305.886198][T10551] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.886198][T10551] [ 305.887872][ T5789] usb 5-1: Product: syz [ 305.901359][ T991] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.915997][ T5789] usb 5-1: Manufacturer: syz [ 305.934634][T10570] loop5: detected capacity change from 0 to 32768 [ 305.939519][ T991] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 305.957021][T10570] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1696 (10570) [ 305.958904][ T5789] usb 5-1: SerialNumber: syz [ 305.982899][ T991] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 306.006171][ T991] usb 4-1: Product: syz [ 306.015017][ T5634] [ 306.015017][ T5634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.015017][ T5634] [ 306.018192][T10564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.042713][ T991] usb 4-1: Manufacturer: syz [ 306.048329][ T5634] [ 306.048329][ T5634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.048329][ T5634] [ 306.083212][ T991] hub 4-1:4.0: USB hub found [ 306.106287][T10570] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.149420][T10570] BTRFS info (device loop5): using sha256 checksum algorithm [ 306.289054][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 306.289742][ T991] hub 4-1:4.0: 2 ports detected [ 306.316399][T10564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.351456][T10570] BTRFS info (device loop5): enabling ssd optimizations [ 306.373568][T10570] BTRFS info (device loop5): turning on async discard [ 306.387247][T10570] BTRFS info (device loop5): enabling free space tree [ 306.452598][ T9] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 306.476631][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.523174][ T9] usb 8-1: config 0 descriptor?? [ 306.559642][ T9] cp210x 8-1:0.0: cp210x converter detected [ 306.585347][ T5629] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.707380][ T991] hub 4-1:4.0: set hub depth failed [ 306.757357][ T991] usb 4-1: USB disconnect, device number 16 [ 307.007193][ T9] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 307.015479][T10578] loop7: detected capacity change from 0 to 16 [ 307.068255][T10578] erofs (device loop7): invalid ishare xattr prefix id 0 [ 307.153979][ T9] usb 8-1: cp210x converter now attached to ttyUSB0 [ 307.170851][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 307.355345][ T5789] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 307.379508][ T9] usb 8-1: USB disconnect, device number 2 [ 307.381965][ T5789] asix 5-1:2.88: probe with driver asix failed with error -71 [ 307.405458][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 307.430541][ T10] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 307.450161][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.479290][ T10] usb 6-1: Product: syz [ 307.489727][ T5789] usb 5-1: USB disconnect, device number 13 [ 307.509357][ T10] usb 6-1: Manufacturer: syz [ 307.533548][ T10] usb 6-1: SerialNumber: syz [ 307.546936][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 307.583359][T10601] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 307.684701][ T9] cp210x 8-1:0.0: device disconnected [ 308.088979][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 308.478040][ C0] usblp0: nonzero write bulk status received: -71 [ 308.880213][T10633] loop0: detected capacity change from 0 to 4096 [ 308.892845][T10633] EXT4-fs: Ignoring removed orlov option [ 308.904763][T10633] EXT4-fs (loop0): Test dummy encryption mode enabled [ 308.953978][T10633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.006240][T10633] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 309.134036][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.727346][ T5789] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 309.897909][ T5789] usb 1-1: Using ep0 maxpacket: 16 [ 309.915364][ T5789] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 309.941536][ T5789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.964440][ T5789] usb 1-1: config 0 has no interfaces? [ 309.979200][ T5789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.003230][ T5789] usb 1-1: config 0 has no interfaces? [ 310.004433][ T10] usb 6-1: USB disconnect, device number 10 [ 310.032145][ T5789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.055935][ T5789] usb 1-1: config 0 has no interfaces? [ 310.073259][ T5789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.089535][ T10] usblp0: removed [ 310.104833][ T5789] usb 1-1: config 0 has no interfaces? [ 310.127321][ T5789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.178685][ T5789] usb 1-1: config 0 has no interfaces? [ 310.196527][ T5789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.199601][T10661] loop5: detected capacity change from 0 to 256 [ 310.223321][ T5789] usb 1-1: config 0 has no interfaces? [ 310.239516][ T5789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.271881][T10661] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 310.275217][ T5789] usb 1-1: config 0 has no interfaces? [ 310.333430][ T5789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.354910][ T5789] usb 1-1: config 0 has no interfaces? [ 310.388302][ T5789] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 310.419585][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 310.442448][ T5789] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 310.457997][ T5789] usb 1-1: Product: syz [ 310.462501][ T5789] usb 1-1: Manufacturer: syz [ 310.481596][ T5789] r8152-cfgselector 1-1: Unknown version 0x0000 [ 310.493776][ T5789] r8152-cfgselector 1-1: config 0 descriptor?? [ 310.506977][T10661] exFAT-fs (loop5): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 310.518027][T10661] exFAT-fs (loop5): Filesystem has been set read-only [ 310.616412][ T29] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.644429][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.666505][T10668] netlink: 'syz.2.1733': attribute type 10 has an invalid length. [ 310.698895][ T29] usb 5-1: config 0 descriptor?? [ 310.735709][ T29] cp210x 5-1:0.0: cp210x converter detected [ 310.770945][T10668] team0 (unregistering): Port device team_slave_0 removed [ 310.808990][T10670] loop5: detected capacity change from 0 to 512 [ 310.826552][T10668] team0 (unregistering): Port device team_slave_1 removed [ 310.860312][T10646] loop0: detected capacity change from 0 to 256 [ 310.884166][T10646] exfat: Deprecated parameter 'utf8' [ 310.961875][T10670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.006240][T10670] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.043024][T10646] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 311.085214][T10682] netlink: 'syz.2.1737': attribute type 3 has an invalid length. [ 311.192695][ T5786] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 311.342603][ T29] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 311.365322][ T29] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 311.400559][ T29] usb 5-1: cp210x converter now attached to ttyUSB0 [ 311.435284][ T29] usb 5-1: USB disconnect, device number 14 [ 311.467159][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 311.483974][ T29] cp210x 5-1:0.0: device disconnected [ 311.522498][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 311.695195][ T10] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 311.723447][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.806544][ T10] usb 8-1: config 0 descriptor?? [ 311.827398][ T1169] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 311.832196][ T10] pegasus 8-1:0.0: Missing or invalid endpoints [ 311.919578][ T1169] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 23 with error 28 [ 311.971621][ T1169] EXT4-fs (loop5): This should not happen!! Data will be lost [ 311.971621][ T1169] [ 312.019978][ T1169] EXT4-fs (loop5): Total free blocks count 0 [ 312.051629][ T1169] EXT4-fs (loop5): Free/Dirty block details [ 312.072478][ T1169] EXT4-fs (loop5): free_blocks=65280 [ 312.088237][ T1169] EXT4-fs (loop5): dirty_blocks=2551 [ 312.119489][ T1169] EXT4-fs (loop5): Block reservation details [ 312.142156][ T1169] EXT4-fs (loop5): i_reserved_data_blocks=2551 [ 312.165128][ T8603] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 2048 with error 28 [ 312.377624][ T5629] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 312.837712][T10723] loop5: detected capacity change from 0 to 512 [ 312.887944][T10723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.911937][T10723] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.965282][ T5786] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 313.006789][ T30] audit: type=1800 audit(1779969322.361:256): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1743" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 313.103182][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.145844][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 313.146144][ T5786] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 313.164145][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.190301][ T5786] usb 3-1: Product: syz [ 313.197177][ T5786] usb 3-1: Manufacturer: syz [ 313.208873][ T5786] usb 3-1: SerialNumber: syz [ 313.336357][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 313.365654][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.396928][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.409887][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.420888][ T10] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 313.434798][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 313.443865][ T10] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 313.453538][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.473102][ T10] usb 5-1: config 0 descriptor?? [ 313.847549][T10745] loop3: detected capacity change from 0 to 256 [ 313.911655][ T5786] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 313.920535][ T10] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 313.942201][ T5786] usb 3-1: USB disconnect, device number 19 [ 313.957152][T10745] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 313.977316][ T5786] usblp0: removed [ 313.983521][ T10] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 314.012411][ T10] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 314.036513][ T10] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 314.072111][ T10] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 314.117753][ T10] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 314.177042][ T10] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 314.209000][ C0] hid-thrustmaster 0003:044F:B65D.000B: Unknown packet type 0x0, unable to proceed further with wheel init [ 314.415651][ T10] usb 8-1: USB disconnect, device number 3 [ 314.531249][ T5887] usb 5-1: USB disconnect, device number 15 [ 314.772420][T10805] loop5: detected capacity change from 0 to 128 [ 315.711701][T10828] serio: Serial port ptm0 [ 316.048636][T10809] loop7: detected capacity change from 0 to 32768 [ 316.090647][T10809] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.189116][T10842] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 316.222304][T10842] overlayfs: failed to set xattr on upper [ 316.253431][T10842] overlayfs: ...falling back to redirect_dir=nofollow. [ 316.284716][T10842] overlayfs: ...falling back to index=off. [ 316.310140][T10842] overlayfs: ...falling back to uuid=null. [ 316.457998][ T803] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 316.477332][T10809] XFS (loop7): Ending clean mount [ 316.550486][T10809] XFS (loop7): Quotacheck needed: Please wait. [ 316.627226][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.629942][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 316.689942][ T803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.712729][ T803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.739518][ T803] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 316.799986][ T803] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 316.800052][T10809] XFS (loop7): Quotacheck: Done. [ 316.853320][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.910331][ T803] usb 3-1: config 0 descriptor?? [ 316.999179][ T5786] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 317.014128][T10866] loop5: detected capacity change from 0 to 8 [ 317.079826][T10866] SQUASHFS error: zlib decompression failed, data probably corrupt [ 317.122574][T10866] SQUASHFS error: Failed to read block 0x9b: -5 [ 317.150436][T10866] SQUASHFS error: Unable to read metadata cache entry [99] [ 317.170382][T10866] SQUASHFS error: Unable to read inode 0x127 [ 317.218489][ T5786] usb 5-1: Using ep0 maxpacket: 32 [ 317.219795][ T9675] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.250793][ T5786] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 317.280227][ T5786] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 317.306968][ T5786] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 317.371101][ T803] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000C/input/input17 [ 317.440488][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 317.496338][ T5786] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 317.509849][ T803] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000C/input/input18 [ 317.542856][ T5786] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 317.631777][ T5786] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 317.683092][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.742562][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 317.852523][ T5786] usb 5-1: config 0 descriptor?? [ 317.916546][ T29] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.204775][ T5786] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 318.206666][ T803] kye 0003:0458:5011.000C: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 318.440939][ T803] usb 5-1: USB disconnect, device number 16 [ 318.502553][ T803] usblp1: removed [ 318.735645][T10868] loop0: detected capacity change from 0 to 32768 [ 318.776117][T10868] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 318.823604][T10868] XFS (loop0): Ending clean mount [ 319.094520][ T5634] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 319.400474][T10911] loop3: detected capacity change from 0 to 512 [ 319.424722][ T5359] usb 3-1: USB disconnect, device number 20 [ 319.475564][T10911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.824752][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.108623][T10924] loop3: detected capacity change from 0 to 256 [ 320.261935][T10927] netlink: 'syz.5.1803': attribute type 2 has an invalid length. [ 320.311736][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1803'. [ 320.405072][T10925] loop0: detected capacity change from 0 to 32768 [ 320.416135][T10925] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1798 (10925) [ 320.458658][T10925] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 320.468869][T10925] BTRFS info (device loop0): using sha256 checksum algorithm [ 320.614918][T10925] BTRFS info (device loop0): rebuilding free space tree [ 320.770608][T10925] BTRFS info (device loop0): disabling free space tree [ 320.777615][T10925] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 320.790401][T10925] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 320.817162][T10925] BTRFS info (device loop0): checking UUID tree [ 320.824006][T10925] BTRFS info (device loop0): setting nodatasum [ 320.833080][T10925] BTRFS info (device loop0): setting nodatacow [ 320.839416][T10925] BTRFS info (device loop0): turning off barriers [ 320.845915][T10925] BTRFS info (device loop0): force clearing of disk cache [ 321.124428][T10925] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 322.301945][T10947] loop5: detected capacity change from 0 to 131072 [ 322.437126][T10951] loop7: detected capacity change from 0 to 131072 [ 322.460825][T10951] F2FS-fs (loop7): invalid crc value [ 322.465767][T10947] XFS (loop5): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 322.585088][T10951] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 322.597469][T10951] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 322.656510][T10947] XFS (loop5): Starting recovery (logdev: internal) [ 322.702450][ T5634] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 322.758102][T10951] F2FS-fs (loop7): Stopped filesystem due to reason: 0 [ 322.797600][T10947] XFS (loop5): Ending recovery (logdev: internal) [ 323.076710][ T5629] XFS (loop5): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 323.548883][T10979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.698399][T10982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.709158][T10982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.744995][T10982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.776074][T10982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.392739][ T5359] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 324.620958][ T5359] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.655870][ T5359] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.718456][ T5359] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.767910][ T5359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.828330][T10992] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 324.870304][ T5359] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.899828][T11006] loop5: detected capacity change from 0 to 128 [ 325.012730][ T30] audit: type=1326 audit(1779969334.333:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.3.1827" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9caad9ce59 code=0x0 [ 325.411705][ T5359] usb 1-1: USB disconnect, device number 16 [ 326.152607][T11024] loop3: detected capacity change from 0 to 32768 [ 326.160023][T11024] btrfs: Deprecated parameter 'usebackuproot' [ 326.166173][T11024] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 326.193785][T11024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1834 (11024) [ 326.218070][T11024] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 326.228398][T11024] BTRFS info (device loop3): using crc32c checksum algorithm [ 326.312656][T10155] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 326.453496][T11024] BTRFS error (device loop3): failed to load root extent [ 326.460710][T11024] BTRFS warning (device loop3): try to load backup roots slot 1 [ 326.470085][T10155] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 326.577530][T11024] BTRFS warning (device loop3): couldn't read tree root [ 326.585995][T11024] BTRFS warning (device loop3): try to load backup roots slot 2 [ 326.596563][T10774] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 326.642114][T11024] BTRFS warning (device loop3): couldn't read tree root [ 326.649937][T11024] BTRFS warning (device loop3): try to load backup roots slot 3 [ 326.725524][T11024] BTRFS info (device loop3): rebuilding free space tree [ 326.756873][T11024] BTRFS info (device loop3): disabling free space tree [ 326.763921][T11024] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 326.773694][T11024] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 326.790446][T11024] BTRFS info (device loop3): checking UUID tree [ 326.797356][T11024] BTRFS info (device loop3): enabling ssd optimizations [ 326.804990][T11024] BTRFS info (device loop3): using spread ssd allocation scheme [ 326.812816][T11024] BTRFS info (device loop3): turning on async discard [ 326.819716][T11024] BTRFS info (device loop3): force clearing of disk cache [ 326.826841][T11024] BTRFS info (device loop3): trying to use backup root at mount time [ 326.837357][T11024] BTRFS info (device loop3): use zstd compression, level 3 [ 327.065844][ T5633] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.089746][ T803] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 327.309214][ T803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.336823][ T803] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 327.376089][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.438725][ T803] usb 6-1: config 0 descriptor?? [ 327.495993][ T803] pwc: Askey VC010 type 2 USB webcam detected. [ 327.902406][ T803] pwc: recv_control_msg error -32 req 02 val 2b00 [ 327.948441][ T803] pwc: recv_control_msg error -32 req 02 val 2700 [ 327.985988][ T803] pwc: recv_control_msg error -32 req 02 val 2c00 [ 328.208986][T11067] loop7: detected capacity change from 0 to 32768 [ 328.225481][T11067] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1843 (11067) [ 328.236118][ T803] pwc: recv_control_msg error -71 req 04 val 1300 [ 328.280556][ T803] pwc: recv_control_msg error -71 req 04 val 1400 [ 328.301242][T11067] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 328.312022][T11067] BTRFS info (device loop7): using xxhash64 checksum algorithm [ 328.323517][ T803] pwc: recv_control_msg error -71 req 02 val 2000 [ 328.377405][ T803] pwc: recv_control_msg error -71 req 02 val 2100 [ 328.425056][ T5789] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 328.432568][ T803] pwc: recv_control_msg error -71 req 04 val 1500 [ 328.471630][ T803] pwc: recv_control_msg error -71 req 02 val 2500 [ 328.525674][ T803] pwc: recv_control_msg error -71 req 02 val 2400 [ 328.548875][ T803] pwc: recv_control_msg error -71 req 02 val 2600 [ 328.564861][T11067] BTRFS info (device loop7): rebuilding free space tree [ 328.566535][ T803] pwc: recv_control_msg error -71 req 02 val 2900 [ 328.578846][ T5359] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 328.602004][ T5789] usb 3-1: Using ep0 maxpacket: 32 [ 328.605415][ T803] pwc: recv_control_msg error -71 req 02 val 2800 [ 328.607695][T11067] BTRFS info (device loop7): setting nodatasum [ 328.619867][T11067] BTRFS info (device loop7): allowing degraded mounts [ 328.627229][T11067] BTRFS info (device loop7): turning on async discard [ 328.631391][ T803] pwc: recv_control_msg error -71 req 04 val 1100 [ 328.635833][T11067] BTRFS info (device loop7): enabling free space tree [ 328.648683][T11067] BTRFS info (device loop7): force clearing of disk cache [ 328.657236][T11067] BTRFS info (device loop7): force zlib compression, level 3 [ 328.677961][ T5789] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 328.687430][ T803] pwc: recv_control_msg error -71 req 04 val 1200 [ 328.736732][ T5789] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 328.737032][ T803] pwc: Registered as video103. [ 328.760527][ T5359] usb 1-1: Using ep0 maxpacket: 16 [ 328.790667][ T5359] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 328.794936][ T5789] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.829455][ T5359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 328.858985][T11067] BTRFS info (device loop7): balance: start -susage=6,usage=6..0,drange=6..6,vrange=8..15,limit=2,stripes=7..3 [ 328.871848][T11067] BTRFS info (device loop7): balance: ended with status: 0 [ 328.900997][ T803] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 328.902527][ T5789] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 328.937654][ T5789] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 328.955974][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.976480][ T5789] usb 3-1: Product: syz [ 328.981294][ T5789] usb 3-1: Manufacturer: syz [ 329.006821][ T5359] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.007675][ T5789] usb 3-1: SerialNumber: syz [ 329.047611][ T803] usb 6-1: USB disconnect, device number 11 [ 329.059054][ T5359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.118516][ T5359] usb 1-1: Product: syz [ 329.139718][T11090] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.147423][T11090] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.240168][ T5359] usb 1-1: Manufacturer: syz [ 329.240335][ T9675] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 329.249086][ T5359] usb 1-1: SerialNumber: syz [ 329.311317][ T5359] usb 1-1: config 0 descriptor?? [ 329.379259][ T5359] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 329.401394][ T5359] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 329.409343][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 329.611867][ T5789] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input20 [ 329.755157][ T5789] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 329.819387][ T5789] (id 0x00) [ 330.020951][ T5359] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 330.023035][T11090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.044432][ T5359] em28xx 1-1:0.0: Config register raw data: 0x56 [ 330.118399][ T5789] rc_core: IR keymap rc-imon-pad not found [ 330.141753][T11090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.152649][ T5789] Registered IR keymap rc-empty [ 330.177680][ T5789] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 330.233179][ T5789] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 330.253305][ T5359] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 330.280804][ T5359] em28xx 1-1:0.0: No AC97 audio processor [ 330.311263][T11113] loop5: detected capacity change from 0 to 2048 [ 330.319262][ T5789] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 330.453427][ T5789] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input21 [ 330.465663][ T5359] usb 1-1: USB disconnect, device number 17 [ 330.487060][T11113] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 330.528567][T11113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.561904][ T5359] em28xx 1-1:0.0: Disconnecting em28xx [ 330.572809][ T5789] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:21> initialized [ 330.609120][ T5789] usb 3-1: USB disconnect, device number 21 [ 330.929108][ T5359] em28xx 1-1:0.0: Freeing device [ 331.118727][T10155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.152967][T10155] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.218183][T10155] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.259748][T10155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.797821][T11136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.688604][T11154] loop4: detected capacity change from 0 to 64 [ 333.011314][ T991] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 333.112742][T11143] loop7: detected capacity change from 0 to 32768 [ 333.112983][T10774] kworker/u8:45: attempt to access beyond end of device [ 333.112983][T10774] loop4: rw=1, sector=65, nr_sectors = 1 limit=64 [ 333.144408][T10774] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 333.155211][T10774] kworker/u8:45: attempt to access beyond end of device [ 333.155211][T10774] loop4: rw=1, sector=66, nr_sectors = 1 limit=64 [ 333.172391][T10774] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 333.173452][ T991] usb 6-1: Using ep0 maxpacket: 16 [ 333.180925][T10774] kworker/u8:45: attempt to access beyond end of device [ 333.180925][T10774] loop4: rw=1, sector=67, nr_sectors = 1 limit=64 [ 333.203238][T10774] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 333.212781][T10774] kworker/u8:45: attempt to access beyond end of device [ 333.212781][T10774] loop4: rw=1, sector=68, nr_sectors = 1 limit=64 [ 333.216515][ T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.227445][T10774] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 333.240731][ T991] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 333.245834][T11143] non-latin1 character 0x266 found in JFS file name [ 333.280304][T11143] mount with iocharset=utf8 to access [ 333.312107][ T991] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 333.326726][T10774] kworker/u8:45: attempt to access beyond end of device [ 333.326726][T10774] loop4: rw=1, sector=72, nr_sectors = 1 limit=64 [ 333.342363][ T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.355906][T10774] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 333.371122][ T991] usb 6-1: config 0 descriptor?? [ 333.722883][ T5789] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 333.804568][ T5887] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 333.850008][ T991] HID 045e:07da: Invalid code 65791 type 1 [ 333.883213][ T991] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000E/input/input22 [ 333.901854][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.942239][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.975612][ T991] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 333.977854][ T5887] usb 8-1: Using ep0 maxpacket: 32 [ 333.992237][ T5789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.019075][ T5887] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 334.041394][ T5789] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.053649][ T5887] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 334.080635][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.085489][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 334.101605][T11189] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 334.118311][ T5789] usb 5-1: config 0 descriptor?? [ 334.129933][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 334.157358][ T5887] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 334.211191][ T5887] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 334.275186][ T5887] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 334.311078][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.372212][ T5887] usb 8-1: config 0 descriptor?? [ 334.589435][ T5789] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 334.623446][ T5887] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 334.858327][ T5887] usb 6-1: USB disconnect, device number 12 [ 334.979368][ T5359] usb 8-1: USB disconnect, device number 4 [ 335.018264][ T5359] usblp1: removed [ 335.185560][T11217] evm: overlay not supported [ 335.499551][ T5789] usb 5-1: USB disconnect, device number 17 [ 335.990820][T11241] netlink: 'syz.4.1904': attribute type 13 has an invalid length. [ 337.466285][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.473953][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.968431][T11295] fuse: fd is not a fuse device [ 338.001190][ T5786] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 338.035701][T10155] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.046896][T10155] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.055808][T10155] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.064697][T10155] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.170179][T11298] netlink: 428 bytes leftover after parsing attributes in process `syz.5.1929'. [ 338.184034][T11298] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1929'. [ 338.283755][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'. [ 338.508094][T11308] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 338.680750][ T5786] usb 4-1: Using ep0 maxpacket: 32 [ 338.687606][ T5359] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 338.714817][ T5359] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 339.055464][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 339.355716][ T5786] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 339.364590][ T5786] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 339.373701][ T5786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 339.382684][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.431081][ T5786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.475800][T11336] Invalid ELF header magic: != ELF [ 339.502204][ T5786] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 339.515399][ T5786] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 339.524559][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.580318][ T5786] usb 4-1: config 0 descriptor?? [ 340.677187][ T5774] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 340.858792][ T5774] usb 8-1: Using ep0 maxpacket: 8 [ 340.891224][ T5774] usb 8-1: config 1 interface 0 has no altsetting 0 [ 340.941553][ T5786] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 340.947778][ T5774] usb 8-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 340.956158][ T5786] usb 4-1: USB disconnect, device number 17 [ 340.973692][ T5786] usblp0: removed [ 341.006118][T11346] loop0: detected capacity change from 0 to 131072 [ 341.017639][T11346] F2FS-fs (loop0): Test dummy encryption mode enabled [ 341.051904][ T5774] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.070571][T11346] F2FS-fs (loop0): invalid crc value [ 341.123538][ T5774] usb 8-1: Product: syz [ 341.136943][ T5774] usb 8-1: Manufacturer: syz [ 341.151536][ T5774] usb 8-1: SerialNumber: syz [ 341.200668][T11346] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 341.224785][T11346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 341.407986][ T30] audit: type=1800 audit(1779969350.698:258): pid=11346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1949" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 341.607269][ T5774] usbhid 8-1:1.0: can't add hid device: -71 [ 341.641131][ T5774] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 341.688761][ T5774] usb 8-1: USB disconnect, device number 5 [ 341.933304][ T30] audit: type=1800 audit(1779969351.227:259): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1949" name="file3" dev="loop0" ino=12 res=0 errno=0 [ 342.692186][ T5789] libceph: connect (1)[c::]:6789 error -101 [ 342.698279][ T5789] libceph: mon0 (1)[c::]:6789 connect error [ 342.870132][T11401] ceph: No mds server is up or the cluster is laggy [ 343.200187][T11410] loop7: detected capacity change from 0 to 512 [ 343.225867][T11410] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.388283][T11410] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 343.458203][T11420] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1978'. [ 343.617828][T11423] loop3: detected capacity change from 0 to 256 [ 448.585009][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 448.591985][ C0] rcu: 1-...!: (1 ticks this GP) idle=6bec/1/0x4000000000000000 softirq=47597/47597 fqs=10 [ 448.604393][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11423/1:b..l [ 448.612418][ C0] rcu: (detected by 0, t=10502 jiffies, g=45629, q=1460 ncpus=2) [ 448.620218][ C0] Sending NMI from CPU 0 to CPUs 1: [ 448.620252][ C1] NMI backtrace for cpu 1 [ 448.620270][ C1] CPU: 1 UID: 0 PID: 11428 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 448.620299][ C1] Tainted: [L]=SOFTLOCKUP [ 448.620308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.620321][ C1] RIP: 0010:__lock_acquire+0x3c4/0x2cf0 [ 448.620351][ C1] Code: ce 91 0e 48 c7 c6 58 f1 0b 8e 67 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 2c 37 9e 12 <73> 17 48 69 c0 c8 00 00 00 48 8d 88 70 e3 e0 93 84 db 75 3f e9 10 [ 448.620368][ C1] RSP: 0018:ffffc90000a08be0 EFLAGS: 00000007 [ 448.620388][ C1] RAX: 0000000000000074 RBX: 0000000000000002 RCX: 0000000000000074 [ 448.620401][ C1] RDX: 0000000000080000 RSI: 0000000000004000 RDI: 0000000000000000 [ 448.620415][ C1] RBP: 0000000000000003 R08: ffffffff81b27ffa R09: ffff8880b8728298 [ 448.620430][ C1] R10: dffffc0000000000 R11: fffffbfff206039f R12: 0000000000000074 [ 448.620445][ C1] R13: ffff888027048c08 R14: ffff888027048000 R15: ffff888027048b90 [ 448.620465][ C1] FS: 00005555615ef500(0000) GS:ffff88812539f000(0000) knlGS:0000000000000000 [ 448.620484][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.620498][ C1] CR2: 00007f6818badac0 CR3: 0000000077b10000 CR4: 0000000000350ef0 [ 448.620523][ C1] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.620536][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 448.620550][ C1] Call Trace: [ 448.620560][ C1] [ 448.620576][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.620604][ C1] ? lock_acquire+0x106/0x350 [ 448.620627][ C1] ? advance_sched+0x99b/0xc20 [ 448.620649][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.620677][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.620707][ C1] ? __hrtimer_run_queues+0x46a/0xa20 [ 448.620735][ C1] lock_acquire+0x106/0x350 [ 448.620757][ C1] ? __hrtimer_run_queues+0x46a/0xa20 [ 448.620791][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.620825][ C1] _raw_spin_lock_irq+0x3d/0x50 [ 448.620857][ C1] ? __hrtimer_run_queues+0x46a/0xa20 [ 448.620885][ C1] __hrtimer_run_queues+0x46a/0xa20 [ 448.620924][ C1] hrtimer_interrupt+0x44b/0x950 [ 448.620970][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 448.621001][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 448.621037][ C1] [ 448.621044][ C1] [ 448.621052][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.621076][ C1] RIP: 0010:barn_replace_empty_sheaf+0xe/0x120 [ 448.621104][ C1] Code: e8 f7 a4 c8 02 e9 23 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 83 7f 60 00 <0f> 84 e7 00 00 00 49 89 f7 49 89 fe 84 d2 0f 84 8b 00 00 00 4c 89 [ 448.621122][ C1] RSP: 0018:ffffc90005c37a88 EFLAGS: 00000246 [ 448.621140][ C1] RAX: 0000000000000000 RBX: ffff88801bef0dc0 RCX: 0000000080000001 [ 448.621154][ C1] RDX: 0000000000000001 RSI: ffff888020ea5e00 RDI: ffff88801aee9700 [ 448.621169][ C1] RBP: 0000000000000cc0 R08: ffffffff82256aac R09: ffff8880b8741c48 [ 448.621185][ C1] R10: dffffc0000000000 R11: ffffffff820ee480 R12: ffff8880b8741c48 [ 448.621201][ C1] R13: ffffffff933a2c48 R14: 0000000000000000 R15: ffff88801aee9700 [ 448.621219][ C1] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 448.621252][ C1] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 448.621292][ C1] __pcs_replace_empty_main+0xd7/0x720 [ 448.621317][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.621344][ C1] ? shmem_alloc_inode+0x28/0x40 [ 448.621378][ C1] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 448.621408][ C1] ? shmem_alloc_inode+0x28/0x40 [ 448.621440][ C1] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 448.621473][ C1] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 448.621505][ C1] shmem_alloc_inode+0x28/0x40 [ 448.621536][ C1] alloc_inode+0x6a/0x1b0 [ 448.621562][ C1] new_inode+0x22/0x170 [ 448.621592][ C1] shmem_get_inode+0x3cd/0xfd0 [ 448.621629][ C1] ? __pfx_shmem_get_inode+0x10/0x10 [ 448.621660][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.621686][ C1] ? make_vfsuid+0x49/0xa0 [ 448.621707][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.621732][ C1] ? generic_permission+0x2e4/0x690 [ 448.621761][ C1] shmem_symlink+0xa3/0x470 [ 448.621782][ C1] ? inode_permission+0x346/0x5f0 [ 448.621806][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.621840][ C1] vfs_symlink+0x195/0x340 [ 448.621862][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.621891][ C1] filename_symlinkat+0x1cd/0x410 [ 448.621918][ C1] ? __pfx_filename_symlinkat+0x10/0x10 [ 448.621943][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.621967][ C1] ? do_getname+0x151/0x250 [ 448.621991][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.622014][ C1] __se_sys_symlinkat+0x4e/0x2b0 [ 448.622037][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.622060][ C1] do_syscall_64+0x174/0x580 [ 448.622081][ C1] ? trace_irq_disable+0x3b/0x140 [ 448.622117][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.622139][ C1] RIP: 0033:0x7f6818b9bf17 [ 448.622159][ C1] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.622207][ C1] RSP: 002b:00007ffe34649be8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 448.622227][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6818b9bf17 [ 448.622242][ C1] RDX: 00007f6818c33d31 RSI: 00000000ffffff9c RDI: 00007ffe34649c80 [ 448.622257][ C1] RBP: 00007ffe34649c2c R08: 0000000000000001 R09: 00000000ffffffff [ 448.622271][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000015e [ 448.622284][ C1] R13: 00000000000927c0 R14: 0000000000053c85 R15: 00007ffe34649c80 [ 448.622310][ C1] [ 448.623245][ C0] task:syz.3.1982 state:R running task stack:24696 pid:11423 tgid:11422 ppid:5633 task_flags:0x40054c flags:0x00080000 [ 449.197776][ C0] Call Trace: [ 449.201052][ C0] [ 449.203984][ C0] __schedule+0x1821/0x5740 [ 449.208509][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.214176][ C0] ? irqentry_exit+0x218/0x8b0 [ 449.218940][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.224576][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.229782][ C0] ? __pfx___schedule+0x10/0x10 [ 449.234702][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 449.240132][ C0] preempt_schedule_common+0x82/0xd0 [ 449.245446][ C0] preempt_schedule_thunk+0x16/0x30 [ 449.250671][ C0] _raw_spin_unlock+0x3f/0x50 [ 449.255362][ C0] __zap_vma_range+0x3d36/0x4b70 [ 449.260371][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 449.265680][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.271339][ C0] ? mas_find+0xb0e/0xd30 [ 449.275670][ C0] ? unmap_vmas+0x1c5/0x570 [ 449.280371][ C0] unmap_vmas+0x3ac/0x570 [ 449.284777][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 449.289684][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.295331][ C0] exit_mmap+0x280/0x9e0 [ 449.299676][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 449.304466][ C0] ? uprobe_clear_state+0x53/0x3f0 [ 449.309692][ C0] ? __pfx_exit_aio+0x10/0x10 [ 449.314498][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.320250][ C0] ? uprobe_clear_state+0x2bc/0x3f0 [ 449.325494][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.331143][ C0] __mmput+0x118/0x430 [ 449.335216][ C0] exit_mm+0x1f6/0x2d0 [ 449.339301][ C0] do_exit+0x6a2/0x22c0 [ 449.343478][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.349126][ C0] ? __pfx_do_exit+0x10/0x10 [ 449.353726][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.359370][ C0] ? cgroup1_freezing+0x20/0x350 [ 449.364319][ C0] ? cgroup1_freezing+0x20/0x350 [ 449.369270][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.374916][ C0] do_group_exit+0x21b/0x2d0 [ 449.379523][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.384740][ C0] get_signal+0x1284/0x1330 [ 449.389275][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 449.394846][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 449.401032][ C0] ? __fget_files+0x2a/0x420 [ 449.405648][ C0] exit_to_user_mode_loop+0xa9/0x680 [ 449.410937][ C0] ? rcu_is_watching+0x15/0xb0 [ 449.415717][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.421783][ C0] do_syscall_64+0x353/0x580 [ 449.426382][ C0] ? trace_irq_disable+0x3b/0x140 [ 449.431425][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.437320][ C0] RIP: 0033:0x7f9caad9ce59 [ 449.441738][ C0] RSP: 002b:00007f9ca8ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 449.450157][ C0] RAX: 0000000000000001 RBX: 00007f9cab015fa8 RCX: 00007f9caad9ce59 [ 449.458125][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9cab015fac [ 449.466131][ C0] RBP: 00007f9cab015fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 449.474129][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 449.482098][ C0] R13: 00007f9cab016038 R14: 00007fff3d00fbc0 R15: 00007fff3d00fca8 [ 449.490091][ C0] [ 449.493106][ C0] rcu: rcu_preempt kthread starved for 10482 jiffies! g45629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 449.504478][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 449.514463][ C0] rcu: RCU grace-period kthread stack dump: [ 449.520342][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 449.533856][ C0] Call Trace: [ 449.537133][ C0] [ 449.540064][ C0] __schedule+0x1821/0x5740 [ 449.544589][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 449.549532][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.555184][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.560824][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.566463][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.572121][ C0] ? __pfx___schedule+0x10/0x10 [ 449.576993][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.582803][ C0] ? schedule+0x90/0x360 [ 449.587077][ C0] schedule+0x164/0x360 [ 449.591254][ C0] schedule_timeout+0x158/0x2c0 [ 449.596121][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.601764][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 449.607145][ C0] ? __pfx_process_timeout+0x10/0x10 [ 449.612451][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.618345][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 449.624171][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.629810][ C0] ? prepare_to_swait_event+0x340/0x370 [ 449.635395][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 449.640437][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 449.646594][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 449.651875][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 449.657095][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 449.662918][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 449.667512][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 449.672700][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 449.678517][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 449.683458][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.689092][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 449.694130][ C0] kthread+0x389/0x470 [ 449.698307][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 449.703500][ C0] ? __pfx_kthread+0x10/0x10 [ 449.708133][ C0] ret_from_fork+0x514/0xb70 [ 449.712733][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 449.717845][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.723489][ C0] ? __switch_to+0xc79/0x1410 [ 449.728181][ C0] ? __pfx_kthread+0x10/0x10 [ 449.732776][ C0] ret_from_fork_asm+0x1a/0x30 [ 449.737563][ C0] [ 449.740572][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 449.746971][ C0] CPU: 0 UID: 0 PID: 11429 Comm: syz.5.1984 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.757914][ C0] Tainted: [L]=SOFTLOCKUP [ 449.762232][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 449.772278][ C0] RIP: 0010:smp_call_function_many_cond+0xfcd/0x13d0 [ 449.779053][ C0] Code: c0 75 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 9a 07 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 45 03 0c 00 eb 37 90 43 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 2a [ 449.798753][ C0] RSP: 0018:ffffc9000e10f200 EFLAGS: 00000246 [ 449.804847][ C0] RAX: ffffffff81b9b4a6 RBX: ffff8880b863c188 RCX: 0000000000080000 [ 449.812925][ C0] RDX: ffffc9000685c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 449.820908][ C0] RBP: ffffc9000e10f340 R08: ffffffff90301cf7 R09: 1ffffffff206039e [ 449.828885][ C0] R10: dffffc0000000000 R11: fffffbfff206039f R12: 1ffff110170e8171 [ 449.836945][ C0] R13: dffffc0000000000 R14: ffff8880b8740b88 R15: 0000000000000001 [ 449.844925][ C0] FS: 00007f2a5669f6c0(0000) GS:ffff88812529f000(0000) knlGS:0000000000000000 [ 449.853863][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.860443][ C0] CR2: 000000110c3c0b8f CR3: 0000000036e7c000 CR4: 0000000000350ef0 [ 449.868414][ C0] Call Trace: [ 449.871687][ C0] [ 449.874618][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 449.879666][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 449.886232][ C0] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 449.892410][ C0] ? __pfx___text_poke+0x10/0x10 [ 449.897361][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 449.902395][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 449.907622][ C0] smp_text_poke_batch_finish+0x5f5/0x1160 [ 449.913454][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 449.919710][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.925370][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 449.930417][ C0] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 449.936587][ C0] __static_call_transform+0x4ff/0x790 [ 449.942060][ C0] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 449.948271][ C0] ? 0xffffffffa0004240 [ 449.952436][ C0] ? __pfx___static_call_transform+0x10/0x10 [ 449.958432][ C0] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 449.964611][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.970348][ C0] ? __static_call_validate+0x16f/0x270 [ 449.975909][ C0] ? 0xffffffffa0004240 [ 449.980145][ C0] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 449.986316][ C0] arch_static_call_transform+0x98/0xc0 [ 449.991872][ C0] __static_call_update+0xf2/0x620 [ 449.996998][ C0] ? 0xffffffffa0004240 [ 450.001147][ C0] ? 0xffffffffa0004240 [ 450.005309][ C0] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 450.011470][ C0] ? __pfx_sort+0x10/0x10 [ 450.016239][ C0] ? __pfx___static_call_update+0x10/0x10 [ 450.021964][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.027596][ C0] ? 0xffffffffa0004240 [ 450.031749][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.037385][ C0] ? 0xffffffffa0004240 [ 450.041544][ C0] bpf_dispatcher_change_prog+0xbee/0xd70 [ 450.047269][ C0] ? 0xffffffffa0004240 [ 450.051432][ C0] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 450.057675][ C0] ? 0xffffffffa0000828 [ 450.061863][ C0] ? 0xffffffffa0001dd4 [ 450.066054][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.071700][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.077534][ C0] ? tun_xdp+0x3b2/0x410 [ 450.081822][ C0] dev_xdp_install+0x4fa/0x600 [ 450.086606][ C0] ? __pfx_tun_xdp+0x10/0x10 [ 450.091222][ C0] ? __pfx_dev_xdp_install+0x10/0x10 [ 450.096521][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.102224][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.107869][ C0] ? __pfx_tun_xdp+0x10/0x10 [ 450.112637][ C0] dev_xdp_attach+0xbdb/0x1050 [ 450.117419][ C0] bpf_xdp_link_attach+0x4cf/0x970 [ 450.122542][ C0] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 450.128285][ C0] ? __fget_files+0x3a0/0x420 [ 450.132970][ C0] ? __fget_files+0x2a/0x420 [ 450.137618][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.143263][ C0] ? attach_type_to_prog_type+0x298/0x490 [ 450.148990][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.154628][ C0] ? bpf_prog_attach_check_attach_type+0x39c/0x540 [ 450.161139][ C0] link_create+0x4d8/0x850 [ 450.165568][ C0] __sys_bpf+0x468/0x950 [ 450.169829][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 450.174630][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.180267][ C0] ? rcu_is_watching+0x15/0xb0 [ 450.185131][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.191209][ C0] __x64_sys_bpf+0x7c/0x90 [ 450.195639][ C0] do_syscall_64+0x174/0x580 [ 450.200241][ C0] ? trace_irq_disable+0x3b/0x140 [ 450.205689][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.211758][ C0] RIP: 0033:0x7f2a5579ce59 [ 450.216188][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.235796][ C0] RSP: 002b:00007f2a5669f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 450.244226][ C0] RAX: ffffffffffffffda RBX: 00007f2a55a15fa0 RCX: 00007f2a5579ce59 [ 450.252214][ C0] RDX: 0000000000000014 RSI: 00002000000003c0 RDI: 000000000000001c [ 450.260274][ C0] RBP: 00007f2a55832d6f R08: 0000000000000000 R09: 0000000000000000 [ 450.268244][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.276225][ C0] R13: 00007f2a55a16038 R14: 00007f2a55a15fa0 R15: 00007ffdb8583ee8 [ 450.284241][ C0]